last executing test programs: 15m11.741557347s ago: executing program 3 (id=744): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703a", 0xf}], 0x1) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd000000030000000000000000ffe400", [0x10, 0x4]}}) 15m11.566410345s ago: executing program 3 (id=745): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0xfcffffff, &(0x7f0000000580)='m'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4ba17fc3c01010902441001fd00000009040000e40202ffff052406"], 0x0) 15m9.881382688s ago: executing program 3 (id=750): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}, 0x1, 0x0, 0x0, 0xf4489d39b2efb4bb}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0x3ff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000003ac0)=ANY=[], &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="280375eb20000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e5300025d2f3894be39980700e67bee78895e16f37fe8d9556a1770d080429bf013", 0x4d, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15m6.59288784s ago: executing program 3 (id=783): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) (async) sendto(r1, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) (async) msync(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x9) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) (async) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0xfffffffffffffffc) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') copy_file_range(r3, 0x0, r3, &(0x7f00000000c0)=0xffffffffffffff80, 0x9, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, &(0x7f0000000800)='\x91\x95\xbc\xef\xf5\xdc\xc6!\f\xe7') mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x10000, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x4, 0x3e802, 0x1000, &(0x7f0000fef000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0xfffffffffffffd04}], 0x1, 0x2, 0x0, 0x0) (async) getrusage(0xffffffffffffffff, &(0x7f0000000380)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xb, 0x0, 0x0) ptrace(0x4207, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)=@vmx={0x189, 0x0, 0x2080, {0x9000, 0x200000, {0x3}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006315b259325d04800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) 15m5.260211859s ago: executing program 3 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001500010000000000000000000f00"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa9759b7fcea9a488}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 15m4.424767876s ago: executing program 3 (id=787): prctl$PR_CAPBSET_READ(0x17, 0x8) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000180)=[0xbab, 0x80, 0x81, 0x4, 0x5], &(0x7f0000000240)=[0x1, 0x9, 0x62, 0x9cc, 0x7, 0x1, 0x0, 0x7, 0xa19, 0x4], &(0x7f0000000280)=[0x80, 0x5, 0x1], &(0x7f0000000500)=[0x7, 0x5, 0x9]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x28}}, 0x40050) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = socket$kcm(0x2, 0x3, 0x84) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="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", 0x6bd}, {&(0x7f0000000300)="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", 0x1c2}, {&(0x7f0000000580)="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"/410, 0x19a}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0c", 0x28}], 0x4, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="454800300064000002019078ac1414bb640101010b01907800147dad73cc84456d0abd3193ae6a09000045950004006200063b330200ac1e0001ac1414bb"], 0x30) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r7, &(0x7f0000000040)=[@generic={0x2}, @t={0xc1, 0x3, 0x39, 0x6, @generic=0x10001}, @x={0x94, 0x1, "bd1677f2543b"}, @t={0x81, 0x5, 0x6, 0x7}, @v={0x93, 0x9, 0x0, 0x7, @generic=0x4f, 0x1, 0x9}], 0x21) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0) 14m50.016873541s ago: executing program 32 (id=787): prctl$PR_CAPBSET_READ(0x17, 0x8) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000180)=[0xbab, 0x80, 0x81, 0x4, 0x5], &(0x7f0000000240)=[0x1, 0x9, 0x62, 0x9cc, 0x7, 0x1, 0x0, 0x7, 0xa19, 0x4], &(0x7f0000000280)=[0x80, 0x5, 0x1], &(0x7f0000000500)=[0x7, 0x5, 0x9]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x28}}, 0x40050) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r6 = socket$kcm(0x2, 0x3, 0x84) syz_init_net_socket$x25(0x9, 0x2, 0x10) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="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", 0x6bd}, {&(0x7f0000000300)="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", 0x1c2}, {&(0x7f0000000580)="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"/410, 0x19a}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0c", 0x28}], 0x4, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="454800300064000002019078ac1414bb640101010b01907800147dad73cc84456d0abd3193ae6a09000045950004006200063b330200ac1e0001ac1414bb"], 0x30) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r7, &(0x7f0000000040)=[@generic={0x2}, @t={0xc1, 0x3, 0x39, 0x6, @generic=0x10001}, @x={0x94, 0x1, "bd1677f2543b"}, @t={0x81, 0x5, 0x6, 0x7}, @v={0x93, 0x9, 0x0, 0x7, @generic=0x4f, 0x1, 0x9}], 0x21) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0) 11m35.678062304s ago: executing program 0 (id=1893): prlimit64(0x0, 0x2, &(0x7f0000000000)={0x1000000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000005000/0x2000)=nil) 11m35.579857337s ago: executing program 0 (id=1895): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x20, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}}, 0x20040050) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x74}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000003c0)=""/208, 0xd0}], 0x4, &(0x7f0000000500)=""/218, 0xda}, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000700)={{0x10b, 0x29, 0xd, 0x19, 0x280, 0x1, 0x74, 0xffffffff}, "ef4a7151f3149ac5e9e51aac9fcc0d80f6aa04acbef2239a1d426ba91f08d54f4ec07e55cea21155cd4448f481a1e71d1ff6f30a66e30b4b387d0291873b77620030dd259c23716807ffc8395ee4f97f6e3709ec5dfdfb243bfdb9326abfc287a5d5a394bbf107f4dad69feea30631278bfe63a50b801c85628e507fa4dd1f69feeb5a73cbe8c8e4171ab38604b91d142ee35786862fb38c966194", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9bb) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000001180)={0x14, &(0x7f00000010c0)={0x40, 0x2, 0x4c, {0x4c, 0x5, "e1b81e3ee3c1cbd010abacf1163979683df590416c0f03275a3ed8486b2a85da6f0020635842fbcbe8c7ad3828b3fd05ed5a7e8445a74d9e8222814a47bbd50c8624e3583ae6f82dd15a"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0b}}}, &(0x7f0000001380)={0x34, &(0x7f00000011c0)={0x0, 0x15, 0x47, "6369bf11d5c4463231efcd51eb179cf430c8c35da4f23681057a0ca74c2c05be226d8f39b5d81f7f791320b56aa954dd07f0448967f3ae50707c35731d7c6cb31c9213180d44e5"}, &(0x7f0000001240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001280)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000012c0)={0xc0, 0xa1, 0x4, 0xaa6}, &(0x7f0000001300)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000001340)={0xc0, 0xa2, 0x2f, "f2a9f3c62aec2dece93515fba35716da54789915700d086546dc0d41c0d5553c9fb41b6b783fff048b941041e89ad6"}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x18, 0x1401, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/power/wakeup_count', 0x101080, 0x0) write$FUSE_INIT(r4, &(0x7f0000001500)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xffffffff, 0x2200000, 0x9, 0x80, 0x67fc, 0x17b6, 0x0, 0x0, 0x40, 0x1}}, 0x50) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048894) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001800)={&(0x7f0000001700)={0xec, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x10}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x80000000}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_IE={0x8d, 0x2a, [@ibss={0x6, 0x2, 0x3ff}, @mic={0x8c, 0x18, {0x1b8, "aed1e5d1a452", @long="00c1e02b246856fef71d8af66c7ebe9d"}}, @tim={0x5, 0x69, {0x7, 0x38, 0xb, "e2e6070253aee1f956af4dc261789f9b2aff4332c03ff4e6c8716149d73d48abc25b7c8356daaa7c893329d8b3d8aed56c4b5eb50147272e3b62b9e06a296037d7b6971fa88d582705aabb2caaa644cd9df524f6b8ab9c1e719a9f5ac093b282cd169d8b82d9"}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000001880)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000018c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000001980)={{r0}, r6, 0xc, @inherit={0x48, &(0x7f0000001900)={0x1, 0x0, 0x1, 0x9d9, {0x4, 0x0, 0x8001, 0xc707, 0x6}}}, @name="904b151c46e0f4ed8200861279a269c03c6bf6b55d51ea1b991b2fddec12e46bfab935796ffe9c9988a0c0abcf1ce2198aecc10e3e0183159848c1142387f9386c40bcb1df202fa2e5d97d3e4540143e4606b9bf9e83170b1194f55b64be35603af8c981b6eb64aa726488f075fb81ef1f74ec26018b272291b559cffe2dc6965a8d8c766ebc8999a3c0d8b9ec73882a2fe7c28efd749f57be8ae82045a0364049bcff835411d16bbc17fa968c554789b9436b83216d484646a15fb06f289ac23d671f67118c02678d2472f63605048216df890d9a388ff23e547887b634a78d2ecfb0b4f367bb46a7251e8989d78bed106f9bbb7afbff3a94416da286084b03383ca82d9a935250718ff3f0fc37a739c2b93802897bd3376fa09d4ac9ed3374a9a272e7642f36bbbfec8e546e1012a64c26de9dd06df6b9237f0c3f696c4c63c08edbe4627ca62e9b60a88e32559c8f89d050af50a50315a9e82d2c203e97c48b0968325f3aad174f4454354f4a86a7c283d006ca62adc026f5ba639bf184b518f827c5d4d7f8738047b7a1f72d69294f3af7b6d6a5934030c3696511147933e65c9268d3ca11957bb54293bd6411d0dfa37d9235d6dee7094799d3d7ffed781a67e2a8dc51fd18eb018a5f583231c67301ff3d0dab6d370fdc5d0fdad556ed87b1aded37806d1a38f5da653549cc96bf2b8e225babcf6662a095f279d85bc733aa6c81996364c5db5ec3e24c3735357071f453fee5654f666cc17e145bd14b8177da94df4d6effcfc6f0cd4b8e188ad23db5a9fa6d8fac14e4794ec52655f35c8f5c309dfa3c4bde843645901d389754f5485831fd54b0cc2921f6626a6c2cda9fed9790449385152ffaa6ce8affd33082bfc584495546327e21414734b68061f7fd3f0566fb3660e7a0897f7d0b0fa2da0666c657ed91bb425bda29f066d6690cebd7d60547781aae01afa62652c03aa01b30ebebd623297110a652f2c54cc9a825337d9980504c91380fcf59ee0ced068ee43304748ecd45d1898d1ec98b53ff776df9974410f8e7954982630086d54a40aa62d7d72ba520161f066b891652beaee2332d168b7d5c372148c062150a9f2e8eefe1a9ab673b0e330ae6f9729c8fd906df014df374d862f88318dee82a0a8475cd6e3fac54484ea601f31b475a82f2a911b5b336d1336e032550146563f84ad72c9c35d18c4b26bc4edb2071d3fd23e2eb844ec63fc0191e2d09a42ee613a17613647b0226b379c39402fea975a26a24f5bb051432c0d3905259db03a63f94cdadfc1f1fb66d260af6cce1cc9d7dbe69e36c8688f263d18e2fc580f0a6babc3b7dda1bf16147da22ed3deadecaa3d37a6b990225677ea660f1d89987cf9aafef952b5aa74606f4d400530e070515cb63bc2c77f5d684e7c8b6f64719c54bb54e138cd874d3624da65dfb96e6e267b21474736c53e1e7b4d383183c68b9cf51e4b9121420d317300f2035397c7ded470adfecf995acf19b66663bac6d749ccce6b24d385dcfd1e83cceda066699d8f7bcf53a8977a22ead83f0ce89db72e8a44e54e01c16d76726e7db81174710cf7ae33a9062112f502d72f4841090e3c85022c851d3b532003e2d7afe5525a5c0a780c381634bc91681c552ad8dd0e62b4c649284681af9ac0f98b6a74d3792037031c8ea47fea3ecb2b6272f6335c1e5d5f067381c53b1135933f89cf25b8f93524c7f106031205beea9aced111a61896957c4c0e034a488c0ee94a859fa7ecdd9b5569062ba8ee69074510c62b0e10b7c92baa9bd3237325e10b91cccb126b0228c545b05f223d511f4ccb0bbd187fd989dff4b9696c5f18e07c648640611df02cf7e396361b10c26ff680f4226830bd27b0f547bc7db7e7b288530c6006cec09c67ef65e3045641b6b9fce60dbb0da825993cd662e98b84db4ee7ae4dc9921cbd87b6b6c9a730f886ea83e9622e63e5e69c4e43bca4d3e833859eef7ad20bccf30231644478e94f9c14658e6802f2a3674ef032eb79317bd83b96df5e752d9d45d1a46bb394d67af35e8ca0db02fdcda9ccefdbbd449c9a9019148a03632e4c8c174b5fe5c13ca32873d9ccad86f300a65b1fb1386e49a1f83acab9786bdcbae5e12c9d513f5771912486fab003a129a87b176af1827b5f1874033d8002da0755fff4131b09509c08ed63a0d726ce3eca0666f4c6639fef7ff31b68f85745a7803370270fd156c5180df60cf34a0c0cf98fad8e1a968a6e027537617473b4f6e8ea88649514cc347311fcc498c4b223a1d53566b3293920a796636b5424362eef7cd002047154d8cd1cc2be39eabea0584eb908b40b2a31ea9a3e2ba13102e493e56be7ae8bce8a4e973065b6b49eda3817d5b73131977d1c79b4cbf805827e62caf787ad0e5419bae51434867d0f727283e375c93a1744f8bb700121d80aac0152c300fea24773c9d85a2d983ff83069113486b315c51f8ac8692c1709917b1cee71446dc9d665f71303a7c7eb2093040e27ae4cec00510cfba95a73d03aa446371f9745304da6b18b6a3699ae60390dc981c94e2c3ef3cb92ac8969c06be306cb0c6a16cc227a7a4ec42d1f00fddb23cc417361486d55ae628395b4e017a7525295c926f90f81a3234b626f952b8e1293766b88184aad4014eec7e703c6eae8f7858488e07a487d62922083c40db00ee426496e539a354531a3031f47eaeba83be4ef13d4cd8a386b9e5083d1fe3a95892d186566737112a1a3a06c75853b32177dc8cb87834e27195fb286f5bda8179f916a6128933f58a28361fe2889ccfa394abd1cfa229e2f8c94e23f85cde1384f968fa5c29a8af958c7d50f93fceb329a75890f9c556123e056c12f19acf8ca0d115ccdaf45ae918df2522cf5786674b869eb43136703bf89ac846d71ade4613602ccebe1caedbfd6056da9c7eaec405929778a8adf6767a55f5a105cd1023e167c44d8606e2aa545083c98fbcbe3cc406992b2c8c9fe8a255d33995609b01279cd875b925827f5b650cb65399c817e06b69164e8a4439aa3b5b5eea53290e15fec5bf828cffa3b88db9a87c96b9de38f0b362ab518a2334b3ea64d1b44d46b45b9ff859e32c00f6fdd02d448c8d7251dfdb23d219ae6831f763c652ea93700777e30e1f4b82ad49a74a3e6bd24ad14f79195ebb5f1605c1b50bd4cacd8e21ba3320eb8373c0d286da84613427a51c6a437351b645ce92239be7e899e6e24f31851a6ba970961dae8bc4ed6a1881fc3b184be5b21b8f083b5c278df2c67fafa582e23255a686fbf2f8ace5c681daf373447017f336594b61a039d9d91f853fd74efdc8d4f9a6a2fc0d17663a1c7edf0bf5aea0eaec6653db8ecc017c98ecfe1e3feb68eb319c6fa237fd113d3fa5ff7221102b7994909a36fecea69c562aa4b0fd004cda3dc7fd6473d1f865a98395bfdc9f3282aa34a490fb5fa9b85a48f6a25027c8e881ab704c6d0e38654b2a736f11ee0f8951fe5e34ac23c980fc6eb7aab7985da87dedafb71d75d403c19922e95fc07216c3d259d76cb0877e46d23814b310ff975fb3691ff2e60052798711df09245d375c16478b6ce2c28117d0feaf3cc9c9b8ee56f8ac5da2af41ed9a04c70e11d3e4de5308b3aab33349459afaf552bf5e6fe5111931717b0a168f9622435053b2d47f897ec5401ca542a5955feddc3ecc409be6eed7def03319a8d3aee62fdef78d2b0ce5a7692008000aa81fb020c1889545d57f3301b09c5902003884bdf41c9f5b6c950a6a7ed42b1c85b85f9fefcf48276f8efb8cd96a254b1b30364775a8f9d0b342535915d7c576cd64fc83292539645489f414c5ee6676960dfc3c7b535488694ec620a6a399014c510f4886a8340bd159c44163776348144f2213cee6e7ecb698ea137c60272ccfae20af1f42ff16678be690142d1e38250a29c715bc502283e71c0a56b7b5a0bf3c6d7f027d41645c0d445c99274f0f8a22dd8b5f9be3665688ef1024f499d45ea17cab1d311f668b9caffde81e059317e9740fb07bbd85ebd2ce3d4645d7a4b05155643bd725955210584aa250cce8c2ffa2612df5110f2e098abfc78a1afbf80434019b88682448ba706b568b218206e438fc0674a3254e11db5a8ea363d8b1a6ba67ef4ac325575f8eb7504455050ff9fcd0b7e205a173d12e3466b389aa8af37f330f4aa1a072b04f6ac04ff44355d85aaa241412a0b83017c11641865374b54de8a56785f1f70c86c331e4e33e00bf722074003cc5a6075892e8ffce8eecc44c225fa824afea1b0cbc0be109aac18f8bc0e1a1ec34baf787453acd87672ec85a518ffd3dfc93d0552b42bc02df132f4d5c8f8bcf3fc291b968251924bdc634da75e80718d0150ea565e428b532f648013c1e33f5f2bf630860856765d8cc2b9c840f48da71ee0bc5b53d98be5eb6905a7ac273333bdcde7c3b0c23689de6713b6c2ae5e36807da672d6e0877b500bf1346d57f66bb2cfb65249f9fd0bc7cfc36f75a7559b53e7f825665a532f9fbf5f60e1ac4ca4ca31d9faa5c92eaea65fdd53b9cf87eec904baf1f677f5b5d5971235e2b9c75ae851a197073c05a9c6305f81c33ba59e81feb31c85d6f44878bf973420544c2f186027704985d0069f7605e62efbd28ac54a19432fd0d4beabf230cc1ca5978d7f13d752194d057d70fbe13b5e61b0541bdaf0c4d34a0431e742b05d6a4e486a64a59f0fccedbbd4f312378d404c397a19987d21de08962390de847a85cd0f4cf69002121c60b5485e117f7207f1d4a5d7da6f31d8da39f8ae2f5f2b140606a5e590b151b6cf2387e9a240f5cf803d79049213a16625b32f2c0c4fc9b080d4c3af0f7eb8b2108dcd6567c6b3077f5e6f257dcf94d43a433e7a5f10ce77218fa45880dbcc89c3c4ae34b505a32e53f591c5cfb6742fa297bacea085e0331ad07acf51b0b76aa827b54628d73bfe793c1bd69f68570fb954361819b01fe90d7dfa8f9fb46c06bc048f62d4561628dc86a1a5014b9c749ed631062f4301544f55f9c7d83d5fae587b8d6dd3e561b0b6cf9ea8741a835708814acaf696938c9f8bbbe72d570228fbbf3b8d3c213aa3d29d57eb2d01d21e0b21abe0ea443ecd540893da9f21aba1dae174efd590aa750807fdeea75bd2d03d0b616156cd8d9c26c51055405ec2dea140ace533d4682af7e5cfe2eaf3657d86fd14caee8809ee8c7439a21028960308719f9269a3ae4a320de6249965dcfb3d73bd31e58b989646de7a655603c7eb5a87dff1242761b2f4d89e9504dc2fa615b9b0173a5cb1ca6197b36fad937746662c7621e257489e915150e875c487a7f21377b1375d3493e4d4eedb8ce1a2510cc51bf5db7925b73ea8c1e277b52ab669eba43ec24547b2757140e37f0be165a33d8c80d3830cc0dc3e1efe82ca23d7941e41147019c81b8801a7f05a1b11bf6cb2477b2a7869cf223e0daa9a39dcd91d3427eb2460518efff1b5b8029d5b57fe01b121e6d0633aafeedddde3d2417c86899d671091bd500c958711c5f9651fe5ba7c6d52821bef4c8ae0fb4615220ce2e337ff95813eb663624a7571eab043295be036f26bd85627f69dc21f42069e992c026e16e4397b597f047636bb823db085d1cea157939a6aeca654d497dc92155335ff505f4b77b9aabe3f466692fec9ada35258202c31f7daac45835f099d0995587261ac07c963550"}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000002a80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x68, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="156fd70bf3a3"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="12b3a61673d1"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c96fc413a992"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a3e2f17e064e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="380a9e813e76"}]}, 0x68}}, 0x80) r7 = openat$cgroup_ro(r4, &(0x7f0000002ac0)='memory.swap.events\x00', 0x0, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002b00)={'wlan1\x00'}) ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9) sendmsg$kcm(r4, &(0x7f0000003440)={&(0x7f0000002b40)=@phonet={0x23, 0xfd, 0x7, 0xa6}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002bc0)="a435d898da922abd419ebee6891ea621ea8b6218ccc7e2952020e9927b2161ff639d7597999c63429c41bd2f16e6b10809b925cb96070730d1064742c7382785cf51fd578061eedea54b83b1f4ab5f62fd5337b76f4a4113981c0637fee845f424779024f734536d226ef770a9bb7205ffd16467f7528fb0217a02f98a5da40f1a01ffeff35528", 0x87}, {&(0x7f0000002c80)}, {&(0x7f0000002cc0)="93188fd0eaf567515c2f4f4c517cabfeb6371b900d0bf9839603f2b24c83928677b14adda75c79b98163df8ad2ff89bafeb6db530f988a30c481f215b51d40994d4624f250309735014d2abf6cd25f723aade6bd91b3c99c51f45378a5b1d853c79bc2165d6fa5923a537296179b58f49aab81e20454086980bc5a469611ab1cdfb027eeda5980f0f83d2ff0d75dc156afdc2b836af43f39c0e84b7fb3e00f74e965f8b5fb8dbcfa0455871da59eda1a2b60eaafb8", 0xb5}, {&(0x7f0000002d80)="e084d0522639a637cc2cde0169fde14be6ca1dca3f25b9d7", 0x18}, {&(0x7f0000002dc0)="827afdfb0fa43adae331718d5e19a8c18b5ac7962a691dbef07e6685682860be4324", 0x22}, {&(0x7f0000002e00)="a96eec7a642ef8aaf4fca9838930131bd79917837b284eb1fcea524a515e6671f08fe88f21323f7b6af29995a57de2047639", 0x32}, {&(0x7f0000002e40)="e2ca314238355f56e6e0ef43921190c3fea59c6ea5cd4e25db726020298a81ef7f8d05adf7d9054c6a9c086ef26ccea25d5065c0bdf80fc72c1d2a5189fef2f9e428ed1becc20410114f5856ce5a4ca91ff28833fb9738928a74ec8e039e35087e18ec28e3013c2a8e31f96539c9e53d2b2a6809c36ff16f28080f7570256481949e8f61fef90fe97168791b9d107bb0c41163dc1a9c90a86ca3f55257edaf7e49c0447354d113", 0xa7}, {&(0x7f0000002f00)="7376a40cbc8925aed77d9898ade493cac3f13a5bfbcdc4edafc0190c5f01f261338eabb9ffadae7c6c19316a7769f0a81139da3ff2c1a7f531d17accfb81e0b1750ab63e62062d1df9105ee7a68109cdb1b203280495593127c05f161025c9741758e45cbeaa178b85a4473707c3bedd337ef4b38b92bd8802417dbfce4e14cec888bcf331ca0d35201d3cc8c3fab4bbf937be3ebe4b4d5c069ddc4d051bc1afb32d443b4b758b6aa09f65ca69618acad0bc36592c4c33d9f13e0f4ea6d01cbb386e81195453491766334dd5516cc1c4324790f936b89d", 0xd7}, {&(0x7f0000003000)="f08100a539c55903c8e8cb1659e7662a2314567f8f03", 0x16}, {&(0x7f0000003040)="34271608b9ac0e5efda0e4b0d523b2ac9d84c12966a0f49a42ab6d5bf3d0b1a594e3194a7c5eb3a91c03a224cc8aab3dba0fdcdc38d614b8ce07edbeec668815c95f9e87c8a8cc04e022fbf40989960a2d662c67dfc25eb07b35f8622c984027817d88bf0495a733e062a47d1972ec8de75a7623b84bd082eb71d8bcf4de3416d4da252f7fb4e6638b5b19cef087", 0x8e}], 0xa, &(0x7f00000031c0)=[{0x40, 0x1, 0x83, "a661a0406f5a19be310b70871a216026ab881f4e60f08ac9c7f83672f383fdc626ed7ef7e22d3fbdacd8d4c521504279"}, {0x70, 0x11, 0x101, "7482437cdb62f80208d3e04ec55e0c5222bb08ca3324b35f9b9308035e220e00482dc26316e202bbe1af3f470353ec272567cfe75a7126dbdd470991eda7a5968f2b589d632750e2a502da168f83f5d66c3a9f5459097a8bd20e44b386"}, {0x90, 0x112, 0x7bf4613c, "6c99d50dc8b8785537080499917924b0eba5c26994898f9ee95be083b9abb0edac53172fc45638d0d5a23c4ce40aa33797822e3fe0c5f56e410bac4789b41e63d37864dce2ec633af0838aed168288a29b99e551dbf44cc2e02962e05e2fc0afbd39f7cbe68229b0d73a5da002479c7812cf8ff3160923ef11d9"}, {0x110, 0x10c, 0x80000001, "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"}], 0x250}, 0x4000000) r9 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000003480)={0x0, 0xfff}, &(0x7f00000034c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000003500)={r10, @in6={{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x84) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x30, r5, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x2, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x4000800) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000003740)=[@text64={0x40, &(0x7f00000036c0)="0f0097f900000066b891000f00d064400f01df43d9ee66b815010f00d8650f3166baf80cb8b0054c84ef66bafc0cedc461bd68cf0f20e035000400000f22e0c4e17c50ed", 0x44}], 0x1, 0x22, &(0x7f0000003780)=[@cr0={0x0, 0x80000001}], 0x1) 11m35.465641095s ago: executing program 0 (id=1897): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103"], 0x0) (async) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) syz_usb_control_io(r0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) getitimer(0x0, &(0x7f00000000c0)) (async) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x101}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x14, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x1f, 0x0, @opaque="5cf89a3eb25578c5f2cafb04004b53efc0212e6f0853be"}}}, 0x41) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 11m35.3153798s ago: executing program 0 (id=1900): bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001080)={0x0, &(0x7f0000000b40)}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001140)=[@textreal={0x8, &(0x7f00000007c0)="64f30fbda027000f20c06635000000400f22c00f0f4a8a9a0f3804d026660f4761380f8100002e64260f01c3baf80c66b8e8e2f58666ef0f20c06635200000000f22c066b85fd7a42a66ef0f0000baf80c66b818c6878f66efbafc0c66b80008000066ef", 0x64}], 0x1, 0x1, &(0x7f0000001180), 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000600)={{{0xc}}, 0x63, 0x5db, &(0x7f0000000640)="649bb5e10c59bbd035afb297bcad6468c6409c81926cb6e3b4a1f3541a33096da3c2f35ac276247c646db498a77828ef5e5ef1fa2a043581891bd5dd70f1df35932f088b1844aa9d3fe2b82c08c1c7537f98a3c28f6f99dbbe4c9132a01074f2380078"}) r6 = socket(0x10, 0x803, 0x9) pipe2$9p(0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03", @ANYRES32=r6], 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11m35.185629543s ago: executing program 0 (id=1901): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind(r1, &(0x7f0000000000)=@ll={0x11, 0x1a, r2, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x80) 11m35.12987558s ago: executing program 0 (id=1902): socket$inet(0x2, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x2, 0x75257d15, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x68, 0x0, 0xd, 0x4, 0x0, @remote, @loopback}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c760000bd73344ce33970323030302c0039ec3079c6966b8f15fe830265e76f41f958fc78c488"]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x220) (async) r6 = gettid() ptrace(0x8, r6) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 11m18.753886954s ago: executing program 33 (id=1902): socket$inet(0x2, 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000fc0)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x2, 0x75257d15, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x68, 0x0, 0xd, 0x4, 0x0, @remote, @loopback}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c760000bd73344ce33970323030302c0039ec3079c6966b8f15fe830265e76f41f958fc78c488"]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', 0x220) (async) r6 = gettid() ptrace(0x8, r6) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) 11m12.68213198s ago: executing program 4 (id=1998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=ANY=[@ANYBLOB="fc0100001900010025bd7000fedbdf25fe880000000000000000000000000101ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000044010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020002b00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) 11m12.163637301s ago: executing program 4 (id=1999): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703a", 0xf}], 0x1) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 11m11.020501364s ago: executing program 4 (id=2001): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x2f, 0xf, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xe, 0xfff1, [0x9, 0x3, 0x8]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x569}, @ra={0x5, 0x2, 0x40}, @calipso={0x7, 0x40, {0x3, 0xe, 0xf, 0x2bb, [0x5, 0x2, 0x2, 0x5, 0xfffffffffffffff9, 0x7, 0x3]}}]}, 0x88) write$tun(r1, &(0x7f0000000140)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0xffffffffffffffff) setpgid(0x0, r4) fchdir(r3) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x9, 0x1, 0x0, {0xbad, 0x2}}, {0x80, 0x0, 0x0, {0x600, 0x20000000}}, {0x1ff, 0x2}, {0x1, 0x0, 0x0, {0xffffffff81e1e211, 0x4dc}}, {0x7f, 0x1, 0x0, {0x7fff, 0x2, 0x2}}, {0x1, 0x0, 0x0, {0x100000000, 0x5, 0x1}}], 0x6, 0x20, 0x6, 0x5c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 10m51.376042518s ago: executing program 4 (id=2001): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000240)=@hopopts={0x2f, 0xf, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xe, 0xfff1, [0x9, 0x3, 0x8]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x569}, @ra={0x5, 0x2, 0x40}, @calipso={0x7, 0x40, {0x3, 0xe, 0xf, 0x2bb, [0x5, 0x2, 0x2, 0x5, 0xfffffffffffffff9, 0x7, 0x3]}}]}, 0x88) write$tun(r1, &(0x7f0000000140)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0xffffffffffffffff) setpgid(0x0, r4) fchdir(r3) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x9, 0x1, 0x0, {0xbad, 0x2}}, {0x80, 0x0, 0x0, {0x600, 0x20000000}}, {0x1ff, 0x2}, {0x1, 0x0, 0x0, {0xffffffff81e1e211, 0x4dc}}, {0x7f, 0x1, 0x0, {0x7fff, 0x2, 0x2}}, {0x1, 0x0, 0x0, {0x100000000, 0x5, 0x1}}], 0x6, 0x20, 0x6, 0x5c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 10m50.895492149s ago: executing program 4 (id=2053): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01514104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5c5647b7bed1fbf069ca713670adf", 0x72, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x100) mknodat$null(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x103) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x808880, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="928a8d90c09e09e1079584a3487770bafa47cf13073a9b49aca41cb85825ba", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d33200000001000000ce3b2ebadda0e4afa4b5bba859000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000650000000000000000000000000000000000000000228404cd"], 0x138}}, 0x0) 10m50.597588936s ago: executing program 4 (id=2055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0), 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="2c64dcfd565187c8e8883f67b4606814737200187533479f3d5c5ec9adab2d4ee332548dde6ea466c28fb80a1f3ea76ada878e80998a86d3a04e76ace0989bd17e926fdae343379b78adb20ac460d9fcd9823aef6a3b2690718839ca6458c2ac3a10e5ca9d7c7032c162c0d7ce5516bea644d4fb3ad96cf351a98fc742a5bafde59d4e61512fa6830f73aac1a5f218b64dfe6043d818", 0x96}, {&(0x7f0000000540)="16cec1b810a9e1c32a428daeccf6c969609d", 0x12}, {&(0x7f0000000640)="a40b4ce0b0df126d382d83f05aa590c7c3fb1236c5a4b30fa190f67324915f3509dfe298690453e2ada615fa19ae0cd795caae77527c10077a948aa827a5c2ab5a3cec714532be9783e36c1e18e887c280286f0e5b06e9e8d5f3a1edf397f1897086f7748b31bb7348f44fbf1a95183fa6abd2a42739199793fd7718d4c76016979eb4a757ca8539d0", 0x89}, {&(0x7f0000000700)="8f7b0867bc7c21cbad3fd55c2717350437637219845511fa916b725c46532afe42bc553b9c2b1a2b5e4cf4a49478cd0d6bbf0f334eb405c32959b779737ed09d94ce17be105b3e830c02cdf097f4ab369e25925ef0dac24030813b76f3bcfc7943453a91a7c2fdb0c0744b1b2bfa4612e8177092b848ca587b9853ff22def39dd13745f3d45c52e009a8a0994c094b672c4576d1ecfac9f9173a4b4e7ddedf9b2259d6ab26a4c99375", 0xa9}, {&(0x7f00000007c0)="bf38b111a33528c491235ca398cba66130a6a49fb9be927037bdc7743d6f6c53a25a114b77328a089366dfe051f442d870c8a1ef0eb9c99a7b", 0x39}, {&(0x7f00000008c0)="d7a8de7ee28ca5993f0ceced07df83c0784aaf21b72333616cf72139d26678041830560d774aa077ec1c5ee97c3d404a9e2b759c0687654369df5be0718d2271af8fca2e2b80aeba3a576aa60d303279d6837c8a705920fb64334368a2ad0f538b2e7a7b04d29b6b0bacd52d3dd7f241e086b60cf1eb1660926257", 0x7b}], 0x6}}], 0x1, 0x404e854) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10m33.312180534s ago: executing program 34 (id=2055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0), 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="2c64dcfd565187c8e8883f67b4606814737200187533479f3d5c5ec9adab2d4ee332548dde6ea466c28fb80a1f3ea76ada878e80998a86d3a04e76ace0989bd17e926fdae343379b78adb20ac460d9fcd9823aef6a3b2690718839ca6458c2ac3a10e5ca9d7c7032c162c0d7ce5516bea644d4fb3ad96cf351a98fc742a5bafde59d4e61512fa6830f73aac1a5f218b64dfe6043d818", 0x96}, {&(0x7f0000000540)="16cec1b810a9e1c32a428daeccf6c969609d", 0x12}, {&(0x7f0000000640)="a40b4ce0b0df126d382d83f05aa590c7c3fb1236c5a4b30fa190f67324915f3509dfe298690453e2ada615fa19ae0cd795caae77527c10077a948aa827a5c2ab5a3cec714532be9783e36c1e18e887c280286f0e5b06e9e8d5f3a1edf397f1897086f7748b31bb7348f44fbf1a95183fa6abd2a42739199793fd7718d4c76016979eb4a757ca8539d0", 0x89}, {&(0x7f0000000700)="8f7b0867bc7c21cbad3fd55c2717350437637219845511fa916b725c46532afe42bc553b9c2b1a2b5e4cf4a49478cd0d6bbf0f334eb405c32959b779737ed09d94ce17be105b3e830c02cdf097f4ab369e25925ef0dac24030813b76f3bcfc7943453a91a7c2fdb0c0744b1b2bfa4612e8177092b848ca587b9853ff22def39dd13745f3d45c52e009a8a0994c094b672c4576d1ecfac9f9173a4b4e7ddedf9b2259d6ab26a4c99375", 0xa9}, {&(0x7f00000007c0)="bf38b111a33528c491235ca398cba66130a6a49fb9be927037bdc7743d6f6c53a25a114b77328a089366dfe051f442d870c8a1ef0eb9c99a7b", 0x39}, {&(0x7f00000008c0)="d7a8de7ee28ca5993f0ceced07df83c0784aaf21b72333616cf72139d26678041830560d774aa077ec1c5ee97c3d404a9e2b759c0687654369df5be0718d2271af8fca2e2b80aeba3a576aa60d303279d6837c8a705920fb64334368a2ad0f538b2e7a7b04d29b6b0bacd52d3dd7f241e086b60cf1eb1660926257", 0x7b}], 0x6}}], 0x1, 0x404e854) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m56.105890478s ago: executing program 2 (id=3616): renameat(0xffffffffffffffff, &(0x7f0000001400)='./file0/file0\x00', 0xffffffffffffffff, 0x0) 5m56.074013417s ago: executing program 2 (id=3617): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 5m55.842050511s ago: executing program 2 (id=3620): r0 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 5m55.629146081s ago: executing program 2 (id=3624): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000001140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '+\'', 0x3a, '\\-{%/\xe7}%@:\\:-,\\', 0x3a, './file0'}, 0x38) 5m55.449408965s ago: executing program 2 (id=3627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x42400) 5m55.359287531s ago: executing program 2 (id=3628): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000e80)=ANY=[], 0x4) 5m38.724185891s ago: executing program 35 (id=3628): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000e80)=ANY=[], 0x4) 3m3.759311331s ago: executing program 7 (id=4508): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) unshare(0x10000080) unshare(0x44000200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, 0x0, 0x14}, 0x10003) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x800, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x1, 0x1000, 0x50, @local, @private1, 0x8, 0x700, 0x401, 0x2}}) sendto$inet6(r3, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424", 0x8a, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x24000800) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) r7 = dup(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/252, 0xfc}, {&(0x7f0000000580)=""/22, 0x16}, {&(0x7f00000006c0)=""/130, 0x82}, {&(0x7f0000000780)}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/167, 0xa7}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000980)=""/236, 0xec}], 0x8, 0x9, 0x5) read$FUSE(r7, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r9, r9, 0xd, 0x0, 0x0, 0x9, 0x40, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'}) 2m57.16374889s ago: executing program 7 (id=4529): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r0, 0xfeb8a000) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) 2m53.757628779s ago: executing program 7 (id=4545): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 2m53.681395716s ago: executing program 7 (id=4547): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x52fd794718c63698) 2m52.142987002s ago: executing program 7 (id=4552): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa81", 0x4}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda924", 0x28}], 0x2}, 0x41) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 2m51.960480131s ago: executing program 7 (id=4553): r0 = syz_open_dev$media(&(0x7f0000000100), 0xfffffffffffffffb, 0x40800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000180)={[{}, {@subsystem='cpuacct'}]}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) 2m50.189357498s ago: executing program 5 (id=4557): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000540)={0x40, 0xc, 0x41, "a8d47de942f5e5d6a3c29476e5d8fe5a17359b53f555ab578de1c027d6b20ef404651093a998ea98fdcc438e195f7929a1c108447e9d8d7a3da87665158e4a53cf"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m46.470236039s ago: executing program 5 (id=4573): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 2m46.361991905s ago: executing program 5 (id=4575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x9, 0x2, 0x0, 0x2000010000000000, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0xa0011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000100)=[{0x1, 0x5, 0x7, 0xe5a}, {0x3, 0x2, 0x6, 0x8}, {0x4, 0xd, 0x4, 0xe1c}, {0xe, 0xc, 0x4, 0x3}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f000007f000/0x2000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x0}, 0x68) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000000140)={0x90, 0x0, r3, {0x20000000000007, 0x0, 0x6, 0xfa7, 0x0, 0xfffff801, {0x2, 0x0, 0x20e, 0x1, 0x10000, 0x7, 0x77ff, 0xb, 0x4, 0x6000, 0xf1, r4, r5, 0x5, 0x6}}}, 0x90) 2m46.137368177s ago: executing program 5 (id=4576): mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x44, 0x18, 0x8, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x167c36, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f0000ffd000/0x3000)=nil) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000008c0)={0x6, 0x118, 0xfa00, {{0x99, 0x8000, "38a70b684d6b73c1125757328e88cd1a231807919b3fe7fe5702259279392bca002f072f81bdf2574e5044d1804ef8b4e2061413c498c3160b137d3592dab96317af3e8b7a2bef1d6fea0e45263663e8cccd0b136c6b572d226749bbe1bbc8cfc67ff9fa98c67021dc55a2f53fb60e613c087a59fb69ebd8b1864a324c019551f0dd614989c1540bf9a456694cbd01126cbe52d7746496e9ff1e2801a199a3724059965f319c75fda2e363840f1a3dc16c53552e5d628deed3f13e2b2c48ef8968989054b0a701853ce955943bd13a26c940bf5d8a596cd71ff918e641409a3bcce1bf96247a6e160c23672e459679908aec73dc4ecc98f5101b61c8159fd4f3", 0x4, 0x6, 0x2, 0x1, 0x6, 0x1, 0xf, 0x1}}}, 0x120) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x6020400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0xffcc) 2m46.031079112s ago: executing program 5 (id=4577): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)={0x1c, r1, 0x62c21a4ade68aba1, 0x70bd2b, 0x6, {{0x32}, {@val={0x8, 0x1, 0x60}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004854}, 0x40050) 2m45.03345757s ago: executing program 5 (id=4583): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 2m44.7432001s ago: executing program 36 (id=4583): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 2m35.603153384s ago: executing program 37 (id=4553): r0 = syz_open_dev$media(&(0x7f0000000100), 0xfffffffffffffffb, 0x40800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000180)={[{}, {@subsystem='cpuacct'}]}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) 7.949213297s ago: executing program 1 (id=5136): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000540)={0x40, 0xc, 0x41, "a8d47de942f5e5d6a3c29476e5d8fe5a17359b53f555ab578de1c027d6b20ef404651093a998ea98fdcc438e195f7929a1c108447e9d8d7a3da87665158e4a53cf"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.458703592s ago: executing program 9 (id=5147): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 5.293303576s ago: executing program 9 (id=5148): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$dri(&(0x7f0000001240), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000001280)={0x0, 0x0, 0x2, 0x80000001, 0x53dd6955, 0xd, 0x400, 0x401, 0x591f}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x4, 0x3, 0x0, 0x11, 0x40}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) memfd_create(0x0, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000200000010000000000500000008000300", @ANYRES32=r4, @ANYBLOB="0c9318a140d3e4d7c6378000"], 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x297}, {&(0x7f0000000bc0)="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", 0x1af}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d", 0x44}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3", 0x3b}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r7 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) 5.293034684s ago: executing program 6 (id=5149): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000001000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a00"], 0x254}}, 0x0) 5.238780844s ago: executing program 6 (id=5150): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 32) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (rerun: 32) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x2}, {0x6}]}) 5.047732906s ago: executing program 6 (id=5151): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f0000000640)=""/248, 0xf8, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) r3 = gettid() prctl$PR_SCHED_CORE(0x36, 0x0, r3, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 4.660738698s ago: executing program 1 (id=5152): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 4.516601347s ago: executing program 1 (id=5153): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) 4.446683138s ago: executing program 1 (id=5154): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d04", 0x14}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0xf, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5ba, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0xc, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x5, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0xaaaa844, 0x18, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.285153401s ago: executing program 9 (id=5155): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x201, 0xc, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x218, 0x14, 0x2, 0x70bd25, 0x25dfdbfd, {0x11, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "04f13a75be75e58309a31dd5bed9d6b35d8bfb1410a25b431459b626f917c059bd0d3e22d7ca5b1aacea4be3392ec759da563f929400badb667dc5422a9a35ccb4607d9bf79985be41cfca814387e1868ce76f09a296a62a25f08ccb690e563e1dfb705194ca2748c09266ad6453ed741db1892314fd4faebf71db63956b116ffb040c4e4158d6b933fe09d16caecee6b36ebca59a952af4a2cc29a8"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "150fdea6d6b2ff2749456b34e35b9affc18dea65d628d873c1b7f7d15be3290def259aeabb35180b4c72f6833ee8359f6b23aedfda1a9c8d51de03e0179c95017bdb3c806518a3085f06802433c15bc10b5606f56e9afa21286088e7bfce23b87e370102bc9779e3c48f701e196cda991fa3a836ab0221f7e5e7d261457ccf230c467bcaf347a3ffbb91b642d3ec956845d559f51a7508a856149847481d965e4a274af91531501ea15a1b024b92dcee1f345b21fbaec2d50c21573aa418b9b033aa9a970327ce35045c17f69b280f6e1958669ed5febfdceb5b"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "bfb196b07b22e54fc6cad579508db9bfc8d479ef3751799a75e5d92998a8db6acf01b029ac1718609f7f463a8e4787346b00a4991e9fa6db8f93e1ad1a93d17c9fe5670775ab98855ffd1d9953f76480db793f1c6e2bf9ccff89d0417a8849df18fa7b83d135af5b716bcb3cee0ccc91c72f98ef2e8ef21f6622e528b5"}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xffff, @local, 0xa}], 0x1c) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x40, 0x10, 0x90, {0x90, 0xf, "9e67555cb93fb4f4eefd690fe8696ff096cff45c0d90a71cd95051c48d0180f1550b0cfd3f6965ccda52acf0d07c9f50831763ddaa40a50552dfaacbfb2eee01a3b4c5444df6da1780845bfe73d75059354d90f023c2b882e80abf2589dc53757b100f53b1508be2a0ab92f1640a4504ee375abf6effad7821431cb86dbbb0258f4a7471975654d208a52c098d9c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000280)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x7, "37455ba0"}, @main=@item_4={0x3, 0x0, 0xa, 'i.\bO'}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xffe0, 0xe0, 0x1, {0x22, 0xac}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000640)={0x0, 0x15, 0x4a, "c8834ff2996606aacdaac961d0562d8a22e7a66c2f5264e18eea3af1764a450ebead272697f6a087ac329130254756fdd83081fc1a4291dc1e5858fd4e04e9331c2bcbb2a225fa527c2a"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x1, 0xf3, "dfaf9ee21c0eeae87ae9a2bb0c145542c7fc37c77c2d40aabd25b0fa410e403d7e173c16124047c3e5c17a23e9e63e37c02b3f1f576cd1f9e9d3c638594dc781db014105adf3b09c22f20d6cb5e169ae704d2d6574f311d369d6c3f50f089b7e22080c01430028c4871b5b51ec9ea0caa1bb1d689eec82f3f3b4040c36645ed99b84e33dbe6fb9bcc20ec345490b09674f3c9ee87794d0470399c70735dc3cbd91d5a1574a03442ccf2552e2443ff40e480945cf457f705c55cc927ece0d1f79424ec0ce73c6dd1a4b2747a9918050b9e306f1ff1a868947f7073f92712458e2e1eda1911393ebe4fd12c44ada800aad4a7763"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x8}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) ppoll(&(0x7f0000000380)=[{r4}], 0x1, 0x0, 0x0, 0x0) writev(r4, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c2", 0x1}, {0x0}, {0x0}], 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3001000000080004400000000a080009400000000308000340000000000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x90}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f0000000280)={0x2, 0x0, @multicast1, 0x1}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x600}}, 0x30) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB=' \b('], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.06182851s ago: executing program 6 (id=5156): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 4.009976526s ago: executing program 8 (id=5157): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) (fail_nth: 3) 3.808571159s ago: executing program 6 (id=5158): socket$kcm(0x10, 0x2, 0x0) add_key(&(0x7f0000000300)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = fsopen(&(0x7f00000001c0)='autofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x254fe) (async) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x254fe) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r3 = accept4$unix(r1, 0x0, 0x0, 0x80000) recvfrom$unix(r3, &(0x7f0000000240)=""/242, 0x40000, 0x20, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x2) fchdir(r4) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r6, r7, 0x0) (async) r8 = dup3(r6, r7, 0x0) ioctl$LOOP_SET_FD(r8, 0x9201, 0xffffffffffffffff) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000040)=[0x16, 0x1000009, 0x7, 0xffff32eb, 0x8, 0xffffdff9, 0x2d7b, 0x401, 0x5d, 0x5, 0x2, 0xa, 0x6, 0xffff0001, 0x2], 0x0, 0x4000003}) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) (async) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00') r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) (async) setpgid(r10, r10) setpgid(0x0, r10) move_mount(r9, 0x0, r9, &(0x7f0000000100)='./file0/file0\x00', 0x22) r11 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYRES8=r7], 0x0) syz_usb_control_io$lan78xx(r11, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r11, 0x0, 0x0) 3.533435152s ago: executing program 8 (id=5159): bind$bt_sco(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none}, 0x8) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000001c40)={{}, "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"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RLOCK(r1, &(0x7f00000000c0)={0xfffffc40, 0x35, 0x0, 0x3}, 0x8) openat$snapshot(0xffffffffffffff9c, 0x0, 0x6080, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x14) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000001580)=ANY=[@ANYBLOB="1201000300000008410e5750400001020301090275000301f54003082b0000010220070904000000010120800924010200ff1500050c2403060504810403500f0709040100000102200009040101010102200009050109ff03030902082501000f020200090402000001022000090402010101020600000082091000030508082501800cae07007a1f328681a5a03a3129b53a86cbfef814895b195b87b68b8bba3d3349704e730fe42af8403dff33f9c04f2dbf2dc8346b915955f4cece297d971ae7fdbe2a4bb6162a95104212dd082fa70eed62d6ecc72ea830dd88e5467fe3bfbd6878b10b1e0e88edb6f7565d"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000001540)={0x2, 0x4e1b, @loopback}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000008040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8ebc}], 0x2, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0xb2, 0x3, 0x3}, 0x18, 0x0) r4 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x49e3, 0x1, 0xfffffffc, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000, 0x1}) r8 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x209, 0x4, @tid=r8}, &(0x7f0000000180)) syz_io_uring_setup(0x3b2a, &(0x7f0000000280)={0x0, 0x101727, 0x20000, 0x2, 0x196}, &(0x7f0000000300), &(0x7f0000000240)=0x0, &(0x7f00000004c0)) syz_ublk_add_dev(r4, r5, r9, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x679, 0x0, 0x0, 0x1000, 0xf, 0x0, 0x0, 0x1}}}, &(0x7f0000001500)) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_io_uring_submit(0x0, 0x0, r7, &(0x7f0000001480)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, r10, 0x0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) landlock_restrict_self(r3, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x13) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = ioctl$USERFAULTFD_IOC_NEW(r10, 0xaa00) ioctl$UFFDIO_ZEROPAGE(r11, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000000000/0x1000)=nil, 0x1000}, 0x1}) ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) 3.266133328s ago: executing program 6 (id=5160): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000540)={0x40, 0xc, 0x41, "a8d47de942f5e5d6a3c29476e5d8fe5a17359b53f555ab578de1c027d6b20ef404651093a998ea98fdcc438e195f7929a1c108447e9d8d7a3da87665158e4a53cf"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.156403482s ago: executing program 1 (id=5161): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 3.055382594s ago: executing program 1 (id=5162): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000303ff", 0x24) (fail_nth: 7) 846.115741ms ago: executing program 8 (id=5164): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff02, &(0x7f0000000080)) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) 786.140376ms ago: executing program 9 (id=5165): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36344a6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5, 0xf71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xec2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff62b, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x80000001}) 446.611679ms ago: executing program 8 (id=5166): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 261.296698ms ago: executing program 9 (id=5167): r0 = socket$netlink(0x10, 0x3, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)='X\x00', 0x2}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400) 240.882542ms ago: executing program 8 (id=5168): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r0, 0x4000, 0x0, 0x2) 65.789743ms ago: executing program 8 (id=5169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 9 (id=5170): write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 1069.646262][T11918] usb 10-1: config 0 descriptor?? [ 1069.673006][T11918] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1069.673046][T11918] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1069.910221][T11915] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1070.304712][T20603] netlink: 'syz.8.4821': attribute type 6 has an invalid length. [ 1070.337068][T11918] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1070.349437][T11918] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1070.350295][T11918] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1070.350317][T11918] em28xx 10-1:0.0: No AC97 audio processor [ 1070.701268][T11916] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1070.898762][T11916] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1070.898870][T11916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.898897][T11916] usb 9-1: Product: syz [ 1070.898914][T11916] usb 9-1: Manufacturer: syz [ 1070.898930][T11916] usb 9-1: SerialNumber: syz [ 1070.987277][T11916] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1071.532518][ T5702] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1071.755782][T11915] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 1071.756857][T11915] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 1071.797302][T11915] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71 [ 1071.797335][T11915] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71 [ 1071.922103][T20611] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1071.922160][T20611] FAULT_INJECTION: forcing a failure. [ 1071.922160][T20611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.922197][T20611] CPU: 1 UID: 0 PID: 20611 Comm: syz.1.4822 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1071.922229][T20611] Tainted: [L]=SOFTLOCKUP [ 1071.922239][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1071.922254][T20611] Call Trace: [ 1071.922264][T20611] [ 1071.922274][T20611] dump_stack_lvl+0xe8/0x150 [ 1071.922308][T20611] should_fail_ex+0x46b/0x600 [ 1071.922351][T20611] _copy_to_user+0x31/0xb0 [ 1071.922381][T20611] simple_read_from_buffer+0xe1/0x170 [ 1071.922425][T20611] proc_fail_nth_read+0x1be/0x230 [ 1071.922457][T20611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.922489][T20611] ? rw_verify_area+0x2ac/0x4e0 [ 1071.922527][T20611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.922557][T20611] vfs_read+0x212/0xa80 [ 1071.922598][T20611] ? __pfx_vfs_read+0x10/0x10 [ 1071.922633][T20611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1071.922669][T20611] ? lockdep_hardirqs_on+0x7a/0x110 [ 1071.922705][T20611] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1071.922741][T20611] ? mutex_lock_nested+0x152/0x1d0 [ 1071.922768][T20611] ? fdget_pos+0x252/0x320 [ 1071.922804][T20611] ksys_read+0x156/0x270 [ 1071.922840][T20611] ? __pfx_ksys_read+0x10/0x10 [ 1071.922873][T20611] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 1071.922907][T20611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.922935][T20611] do_syscall_64+0x174/0x580 [ 1071.922970][T20611] ? trace_irq_disable+0x3b/0x140 [ 1071.922998][T20611] ? clear_bhb_loop+0x40/0x90 [ 1071.923028][T20611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.923053][T20611] RIP: 0033:0x7ff54adbd68e [ 1071.923076][T20611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1071.923098][T20611] RSP: 002b:00007ff549055fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1071.923123][T20611] RAX: ffffffffffffffda RBX: 00007ff5490566c0 RCX: 00007ff54adbd68e [ 1071.923141][T20611] RDX: 000000000000000f RSI: 00007ff5490560a0 RDI: 0000000000000004 [ 1071.923157][T20611] RBP: 00007ff549056090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.923173][T20611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.923188][T20611] R13: 00007ff54b076038 R14: 00007ff54b075fa0 R15: 00007ffcbb600468 [ 1071.923225][T20611] [ 1072.297319][T11915] usb 2-1: USB disconnect, device number 86 [ 1072.356392][T11915] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 1072.407056][ T5784] usb 10-1: USB disconnect, device number 14 [ 1072.430970][ T5784] em28xx 10-1:0.0: Disconnecting em28xx [ 1072.462581][ T5784] em28xx 10-1:0.0: Freeing device [ 1072.912017][ T5702] usb 9-1: Service connection timeout for: 256 [ 1072.912053][ T5702] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1073.095019][ T5709] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1073.116578][ T5702] ath9k_htc: Failed to initialize the device [ 1073.174340][ T5702] usb 9-1: ath9k_htc: USB layer deinitialized [ 1073.306994][ T5709] usb 10-1: Using ep0 maxpacket: 16 [ 1073.309257][ T5709] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.309448][ T5709] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1073.309476][ T5709] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1073.309499][ T5709] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1073.310966][ T5709] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1073.310994][ T5709] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1073.311016][ T5709] usb 10-1: Manufacturer: syz [ 1073.476357][ T5709] usb 10-1: config 0 descriptor?? [ 1073.719827][ T5709] usb 10-1: USB disconnect, device number 15 [ 1073.745700][T11915] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1073.860813][ T5346] usb 9-1: USB disconnect, device number 11 [ 1074.243701][ T5346] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1074.426963][ T5346] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1074.427000][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.427025][ T5346] usb 9-1: Product: syz [ 1074.427042][ T5346] usb 9-1: Manufacturer: syz [ 1074.427059][ T5346] usb 9-1: SerialNumber: syz [ 1074.536539][ T5346] usb 9-1: config 0 descriptor?? [ 1074.537588][T20643] FAULT_INJECTION: forcing a failure. [ 1074.537588][T20643] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.537626][T20643] CPU: 1 UID: 0 PID: 20643 Comm: syz.9.4830 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1074.537663][T20643] Tainted: [L]=SOFTLOCKUP [ 1074.537673][T20643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.537688][T20643] Call Trace: [ 1074.537698][T20643] [ 1074.537708][T20643] dump_stack_lvl+0xe8/0x150 [ 1074.537742][T20643] should_fail_ex+0x46b/0x600 [ 1074.537783][T20643] should_failslab+0xa8/0x100 [ 1074.537815][T20643] __kmalloc_cache_noprof+0x84/0x690 [ 1074.537846][T20643] ? binder_transaction+0x22d0/0x6fd0 [ 1074.537886][T20643] binder_transaction+0x22d0/0x6fd0 [ 1074.537959][T20643] ? __pfx_binder_transaction+0x10/0x10 [ 1074.538003][T20643] ? finish_task_switch+0x41f/0xbe0 [ 1074.538033][T20643] ? lockdep_hardirqs_on+0x7a/0x110 [ 1074.538068][T20643] ? finish_task_switch+0x41f/0xbe0 [ 1074.538102][T20643] ? __lock_acquire+0x6b5/0x2d10 [ 1074.538142][T20643] ? __lock_acquire+0x6b5/0x2d10 [ 1074.538183][T20643] ? __lock_acquire+0x6b5/0x2d10 [ 1074.538217][T20643] ? __might_fault+0xaf/0x130 [ 1074.538246][T20643] ? __might_fault+0xaf/0x130 [ 1074.538295][T20643] binder_ioctl_write_read+0xb37/0xa490 [ 1074.538330][T20643] ? is_bpf_text_address+0x26/0x2b0 [ 1074.538374][T20643] ? __kernel_text_address+0xd/0x30 [ 1074.538422][T20643] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1074.538460][T20643] ? stack_depot_save_flags+0x33/0x810 [ 1074.538506][T20643] ? do_raw_spin_lock+0x12b/0x2f0 [ 1074.538549][T20643] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1074.538577][T20643] ? reacquire_held_locks+0x104/0x190 [ 1074.538608][T20643] ? rt_spin_lock+0x1e0/0x400 [ 1074.538638][T20643] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1074.538671][T20643] ? rt_spin_unlock+0x14f/0x200 [ 1074.538708][T20643] ? binder_get_thread+0x177/0x6d0 [ 1074.538745][T20643] binder_ioctl+0x426/0x1b10 [ 1074.538776][T20643] ? tomoyo_path_number_perm+0x219/0x630 [ 1074.538815][T20643] ? tomoyo_path_number_perm+0x219/0x630 [ 1074.538854][T20643] ? do_vfs_ioctl+0x117b/0x1540 [ 1074.538888][T20643] ? __pfx_binder_ioctl+0x10/0x10 [ 1074.538919][T20643] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1074.538957][T20643] ? __schedule+0x170f/0x5500 [ 1074.539018][T20643] ? __fget_files+0x2a/0x420 [ 1074.539049][T20643] ? __fget_files+0x2a/0x420 [ 1074.539074][T20643] ? __fget_files+0x3a6/0x420 [ 1074.539100][T20643] ? __fget_files+0x2a/0x420 [ 1074.539132][T20643] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1074.539173][T20643] ? __pfx_binder_ioctl+0x10/0x10 [ 1074.539205][T20643] __se_sys_ioctl+0xff/0x170 [ 1074.539240][T20643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.539266][T20643] do_syscall_64+0x174/0x580 [ 1074.539304][T20643] ? clear_bhb_loop+0x40/0x90 [ 1074.539334][T20643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.539358][T20643] RIP: 0033:0x7f87e742ce59 [ 1074.539380][T20643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.539401][T20643] RSP: 002b:00007f87e5686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.539425][T20643] RAX: ffffffffffffffda RBX: 00007f87e76a5fa0 RCX: 00007f87e742ce59 [ 1074.539443][T20643] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1074.539460][T20643] RBP: 00007f87e5686090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.539475][T20643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.539490][T20643] R13: 00007f87e76a6038 R14: 00007f87e76a5fa0 R15: 00007ffca5c8e528 [ 1074.539527][T20643] [ 1075.153728][ T5346] usb 9-1: USB disconnect, device number 12 [ 1075.383845][ T6428] hsr_slave_0: left promiscuous mode [ 1075.432327][ T6428] hsr_slave_1: left promiscuous mode [ 1075.433612][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.433641][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.472217][ T6428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.472249][ T6428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.501489][T11915] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1075.601198][ T6428] veth1_macvtap: left promiscuous mode [ 1075.601324][ T6428] veth0_macvtap: left promiscuous mode [ 1075.601618][ T6428] veth1_vlan: left promiscuous mode [ 1075.619522][ T6428] veth0_vlan: left promiscuous mode [ 1075.674278][T11915] usb 10-1: Using ep0 maxpacket: 16 [ 1075.676749][T11915] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1075.676783][T11915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1075.706904][T11915] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1075.706937][T11915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.706960][T11915] usb 10-1: Product: syz [ 1075.706978][T11915] usb 10-1: Manufacturer: syz [ 1075.706994][T11915] usb 10-1: SerialNumber: syz [ 1075.758543][T11915] usb 10-1: config 0 descriptor?? [ 1075.797942][T11915] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1075.797981][T11915] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1076.461157][T11915] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1076.464069][T11915] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1076.478582][T11915] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1076.478603][T11915] em28xx 10-1:0.0: No AC97 audio processor [ 1076.555175][T20671] FAULT_INJECTION: forcing a failure. [ 1076.555175][T20671] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.555215][T20671] CPU: 1 UID: 0 PID: 20671 Comm: syz.8.4839 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1076.555248][T20671] Tainted: [L]=SOFTLOCKUP [ 1076.555262][T20671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1076.555277][T20671] Call Trace: [ 1076.555287][T20671] [ 1076.555298][T20671] dump_stack_lvl+0xe8/0x150 [ 1076.555329][T20671] should_fail_ex+0x46b/0x600 [ 1076.555369][T20671] should_failslab+0xa8/0x100 [ 1076.555402][T20671] kmem_cache_alloc_noprof+0x87/0x680 [ 1076.555431][T20671] ? skb_clone+0x212/0x3a0 [ 1076.555459][T20671] skb_clone+0x212/0x3a0 [ 1076.555486][T20671] __netlink_deliver_tap+0x424/0x8b0 [ 1076.555538][T20671] ? netlink_deliver_tap+0x2e/0x1b0 [ 1076.555578][T20671] netlink_deliver_tap+0x19c/0x1b0 [ 1076.555618][T20671] netlink_unicast+0x754/0x920 [ 1076.555663][T20671] netlink_sendmsg+0x813/0xb40 [ 1076.555696][T20671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.555722][T20671] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1076.555758][T20671] ? aa_sock_msg_perm+0x122/0x200 [ 1076.555785][T20671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.555808][T20671] sock_sendmsg_nosec+0x13a/0x180 [ 1076.555839][T20671] ____sys_sendmsg+0x55c/0x870 [ 1076.555882][T20671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.555929][T20671] ? import_iovec+0x73/0xa0 [ 1076.555967][T20671] ___sys_sendmsg+0x2a5/0x360 [ 1076.556003][T20671] ? __lock_acquire+0x6b5/0x2d10 [ 1076.556036][T20671] ? __pfx____sys_sendmsg+0x10/0x10 [ 1076.556111][T20671] ? __fget_files+0x2a/0x420 [ 1076.556138][T20671] ? __fget_files+0x3a6/0x420 [ 1076.556178][T20671] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1076.556219][T20671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1076.556267][T20671] ? __pfx_ksys_write+0x10/0x10 [ 1076.556309][T20671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.556336][T20671] do_syscall_64+0x174/0x580 [ 1076.556372][T20671] ? trace_irq_disable+0x3b/0x140 [ 1076.556399][T20671] ? clear_bhb_loop+0x40/0x90 [ 1076.556430][T20671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.556455][T20671] RIP: 0033:0x7f2f6192ce59 [ 1076.556478][T20671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.556499][T20671] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.556523][T20671] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1076.556541][T20671] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1076.556557][T20671] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.556573][T20671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.556587][T20671] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1076.556623][T20671] [ 1077.800704][ T6428] team0 (unregistering): Port device team_slave_1 removed [ 1077.864039][ T6428] team0 (unregistering): Port device team_slave_0 removed [ 1078.344107][T20694] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1078.704858][ T32] usb 10-1: USB disconnect, device number 16 [ 1078.710485][T11918] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1078.714808][ T32] em28xx 10-1:0.0: Disconnecting em28xx [ 1078.723036][ T32] em28xx 10-1:0.0: Freeing device [ 1078.937540][T11918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.937570][T11918] usb 2-1: config 0 has no interfaces? [ 1078.937599][T11918] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1078.937622][T11918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.945532][T11918] usb 2-1: config 0 descriptor?? [ 1079.207424][ T5346] usb 2-1: USB disconnect, device number 87 [ 1079.792534][T11915] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1080.063874][T11915] usb 2-1: Using ep0 maxpacket: 16 [ 1080.070669][T11915] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1080.075184][T11915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.075219][T11915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.075244][T11915] usb 2-1: Product: á¤ì¨©ìž°Ô¾à¹²à»ŠáŽ®ë›¦æ  ã¿“ã•ꖆ껼ì¥î®½è—ªäš€ê–™âŽ—æ€ì‚‘삤ï¤ã¥¾èƒ¼àª‚ïä…‘é«„å­è•§î˜œÜ‚⻀㳉׼袚ᵎã›Ë­â¨ˆéŸ‘ŵ䆓闃껫㡋햦ä놅圾繮門₈慙èŠï“šçŽ­å—­ä“«è¸„áªŠá¬‹ä­”à§„ã®šá™…ã¤©æœ€å ¬ëŠë€¿ç³¾é œé‘¶é¦à© î¯î¿à¸ïŠ™æ¦·ë¨šèŠ¹é­·ã©·ç»íŸ¿ï¶­ì¹¢á¸ƒé¢¡âŸ¿Ôªé¤¯æ™¹á¬âœà³–௦ꛇ〪૛煴æ¢éŽ¶íœ„ã†Ÿã–ꄕ쌀⤢脪 [ 1080.075286][T11915] usb 2-1: Manufacturer: Ђ [ 1080.075303][T11915] usb 2-1: SerialNumber: à ‡ [ 1080.208789][T11915] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1080.208817][T11915] usb 2-1: no configuration chosen from 1 choice [ 1080.452920][T20720] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4848'. [ 1080.601328][T20444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1080.701012][T20444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1080.796624][ T6428] IPVS: stop unused estimator thread 0... [ 1080.804304][T20444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1081.029881][T20444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1081.031627][T20444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1081.069884][T20444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1081.076211][T20444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1081.148844][T20444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1081.215095][ T5786] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1081.407377][ T5786] usb 9-1: Using ep0 maxpacket: 16 [ 1081.414825][ T5786] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1081.414922][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1081.461170][ T5786] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1081.461206][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.461230][ T5786] usb 9-1: Product: syz [ 1081.461248][ T5786] usb 9-1: Manufacturer: syz [ 1081.461265][ T5786] usb 9-1: SerialNumber: syz [ 1081.532621][ T5786] usb 9-1: config 0 descriptor?? [ 1081.595395][ T5786] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1081.595434][ T5786] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1081.793314][T11918] usb 2-1: USB disconnect, device number 88 [ 1082.264191][ T5786] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1082.282244][ T5786] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1082.284524][ T5786] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1082.284546][ T5786] em28xx 9-1:0.0: No AC97 audio processor [ 1083.073736][T20444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.214979][T20444] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.253019][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.253287][ T6429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.286469][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.286712][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.869374][T20770] FAULT_INJECTION: forcing a failure. [ 1083.869374][T20770] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.869415][T20770] CPU: 1 UID: 0 PID: 20770 Comm: syz.1.4859 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1083.869449][T20770] Tainted: [L]=SOFTLOCKUP [ 1083.869458][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1083.869473][T20770] Call Trace: [ 1083.869483][T20770] [ 1083.869494][T20770] dump_stack_lvl+0xe8/0x150 [ 1083.869527][T20770] should_fail_ex+0x46b/0x600 [ 1083.869568][T20770] should_failslab+0xa8/0x100 [ 1083.869605][T20770] kmem_cache_alloc_noprof+0x87/0x680 [ 1083.869634][T20770] ? skb_clone+0x212/0x3a0 [ 1083.869662][T20770] skb_clone+0x212/0x3a0 [ 1083.869683][T20770] ? dev_queue_xmit_nit+0x268/0xad0 [ 1083.869732][T20770] dev_queue_xmit_nit+0x29a/0xad0 [ 1083.869767][T20770] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1083.869819][T20770] dev_hard_start_xmit+0x1b3/0x860 [ 1083.869861][T20770] __dev_queue_xmit+0x1428/0x3900 [ 1083.869884][T20770] ? __netlink_deliver_tap+0x424/0x8b0 [ 1083.869917][T20770] ? netlink_deliver_tap+0x19c/0x1b0 [ 1083.869951][T20770] ? netlink_unicast+0x754/0x920 [ 1083.869986][T20770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.870014][T20770] ? __dev_queue_xmit+0x2b3/0x3900 [ 1083.870055][T20770] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1083.870090][T20770] ? __copy_skb_header+0xa3/0x4b0 [ 1083.870127][T20770] ? __asan_memcpy+0x40/0x70 [ 1083.870149][T20770] ? __skb_clone+0x63/0x7a0 [ 1083.870187][T20770] ? __skb_clone+0x483/0x7a0 [ 1083.870231][T20770] ? skb_clone+0x246/0x3a0 [ 1083.870257][T20770] __netlink_deliver_tap+0x5d9/0x8b0 [ 1083.870306][T20770] ? netlink_deliver_tap+0x2e/0x1b0 [ 1083.870345][T20770] netlink_deliver_tap+0x19c/0x1b0 [ 1083.870383][T20770] netlink_unicast+0x754/0x920 [ 1083.870448][T20770] netlink_sendmsg+0x813/0xb40 [ 1083.870482][T20770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.870507][T20770] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1083.870543][T20770] ? aa_sock_msg_perm+0x122/0x200 [ 1083.870571][T20770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1083.870593][T20770] sock_sendmsg_nosec+0x13a/0x180 [ 1083.870625][T20770] ____sys_sendmsg+0x55c/0x870 [ 1083.870669][T20770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1083.870718][T20770] ? import_iovec+0x73/0xa0 [ 1083.870750][T20770] ___sys_sendmsg+0x2a5/0x360 [ 1083.870787][T20770] ? __lock_acquire+0x6b5/0x2d10 [ 1083.870829][T20770] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.870910][T20770] ? __fget_files+0x2a/0x420 [ 1083.870938][T20770] ? __fget_files+0x3a6/0x420 [ 1083.870978][T20770] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1083.871019][T20770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1083.871067][T20770] ? __pfx_ksys_write+0x10/0x10 [ 1083.871112][T20770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.871140][T20770] do_syscall_64+0x174/0x580 [ 1083.871174][T20770] ? trace_irq_disable+0x3b/0x140 [ 1083.871202][T20770] ? clear_bhb_loop+0x40/0x90 [ 1083.871250][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.871275][T20770] RIP: 0033:0x7ff54adfce59 [ 1083.871303][T20770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.871325][T20770] RSP: 002b:00007ff549056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.871349][T20770] RAX: ffffffffffffffda RBX: 00007ff54b075fa0 RCX: 00007ff54adfce59 [ 1083.871367][T20770] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1083.871382][T20770] RBP: 00007ff549056090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.871397][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.871412][T20770] R13: 00007ff54b076038 R14: 00007ff54b075fa0 R15: 00007ffcbb600468 [ 1083.871451][T20770] [ 1084.385750][ T32] usb 9-1: USB disconnect, device number 13 [ 1084.394368][ T32] em28xx 9-1:0.0: Disconnecting em28xx [ 1084.569399][ T5627] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1084.589835][ T32] em28xx 9-1:0.0: Freeing device [ 1085.139314][T20444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.421076][ T32] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 1085.593763][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.593795][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1085.593848][ T32] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1085.593879][ T32] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1085.593926][ T32] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1085.593953][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.696224][T20797] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1085.715198][ T32] hub 2-1:1.0: bad descriptor, ignoring hub [ 1085.715241][ T32] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1085.720513][ T32] cdc_wdm 2-1:1.0: skipping garbage [ 1085.720534][ T32] cdc_wdm 2-1:1.0: skipping garbage [ 1085.721009][T11918] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1085.724382][ T32] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1085.927419][T11918] usb 9-1: Using ep0 maxpacket: 16 [ 1085.936003][T11918] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1085.936040][T11918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1085.986016][T11918] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1085.986062][T11918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.986086][T11918] usb 9-1: Product: syz [ 1085.986103][T11918] usb 9-1: Manufacturer: syz [ 1085.986120][T11918] usb 9-1: SerialNumber: syz [ 1086.083778][ T32] usb 2-1: USB disconnect, device number 89 [ 1086.199297][T11918] usb 9-1: config 0 descriptor?? [ 1086.240355][T11918] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1086.240384][T11918] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1086.420498][T20444] veth0_vlan: entered promiscuous mode [ 1086.553838][T20444] veth1_vlan: entered promiscuous mode [ 1086.902099][T11918] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1086.916697][T11918] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1086.920857][T11918] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1086.920879][T11918] em28xx 9-1:0.0: No AC97 audio processor [ 1086.991051][T20444] veth0_macvtap: entered promiscuous mode [ 1087.054600][T20444] veth1_macvtap: entered promiscuous mode [ 1087.149285][T20444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.179364][T20444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.236054][ T6428] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.236344][ T6428] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.236388][ T6428] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.236429][ T6428] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.751497][ T5346] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1087.937868][ T5346] usb 2-1: Using ep0 maxpacket: 8 [ 1088.188544][ T5346] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1088.192064][ T5346] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1088.192169][ T5346] usb 2-1: can't read configurations, error -71 [ 1088.901099][ T6422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.901121][ T6422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.974141][ T32] usb 9-1: USB disconnect, device number 14 [ 1089.016355][ T32] em28xx 9-1:0.0: Disconnecting em28xx [ 1089.142775][ T32] em28xx 9-1:0.0: Freeing device [ 1089.177499][ T3099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.177523][ T3099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.619139][T20835] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1089.711904][T20848] loop8: detected capacity change from 0 to 7 [ 1089.716191][T20848] Dev loop8: unable to read RDB block 7 [ 1089.716237][T20848] loop8: unable to read partition table [ 1089.716467][T20848] loop8: partition table beyond EOD, truncated [ 1089.716488][T20848] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1091.836159][T20866] FAULT_INJECTION: forcing a failure. [ 1091.836159][T20866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.836207][T20866] CPU: 0 UID: 0 PID: 20866 Comm: syz.8.4892 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1091.836240][T20866] Tainted: [L]=SOFTLOCKUP [ 1091.836250][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1091.836265][T20866] Call Trace: [ 1091.836275][T20866] [ 1091.836285][T20866] dump_stack_lvl+0xe8/0x150 [ 1091.836319][T20866] should_fail_ex+0x46b/0x600 [ 1091.836360][T20866] copy_folio_from_iter_atomic+0x44c/0x1ad0 [ 1091.836412][T20866] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1091.836440][T20866] ? fault_in_readable+0x8e/0x130 [ 1091.836471][T20866] ? shmem_write_begin+0x1ce/0x320 [ 1091.836507][T20866] generic_perform_write+0x5b1/0x8b0 [ 1091.836558][T20866] ? __pfx_generic_perform_write+0x10/0x10 [ 1091.836607][T20866] ? rt_spin_unlock+0x160/0x200 [ 1091.836637][T20866] ? mnt_put_write_access_file+0xc6/0x100 [ 1091.836674][T20866] ? file_update_time_flags+0x406/0x4b0 [ 1091.836712][T20866] shmem_file_write_iter+0xfb/0x120 [ 1091.836751][T20866] vfs_write+0x629/0xba0 [ 1091.836793][T20866] ? __pfx_vfs_write+0x10/0x10 [ 1091.836829][T20866] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1091.836864][T20866] ? lockdep_hardirqs_on+0x7a/0x110 [ 1091.836901][T20866] ? mutex_lock_nested+0x152/0x1d0 [ 1091.836927][T20866] ? fdget_pos+0x252/0x320 [ 1091.836964][T20866] ksys_write+0x156/0x270 [ 1091.837001][T20866] ? __pfx_ksys_write+0x10/0x10 [ 1091.837044][T20866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.837072][T20866] do_syscall_64+0x174/0x580 [ 1091.837107][T20866] ? trace_irq_disable+0x3b/0x140 [ 1091.837133][T20866] ? clear_bhb_loop+0x40/0x90 [ 1091.837162][T20866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.837187][T20866] RIP: 0033:0x7f2f6192ce59 [ 1091.837209][T20866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1091.837229][T20866] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1091.837253][T20866] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1091.837271][T20866] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 1091.837286][T20866] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.837305][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.837319][T20866] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1091.837356][T20866] [ 1092.210376][ T5627] Bluetooth: hci4: unexpected event for opcode 0x2007 [ 1093.200643][T11916] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 1093.424243][T11916] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1093.424283][T11916] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1093.424315][T11916] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1093.424346][T11916] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1093.424392][T11916] usb 10-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 1093.424420][T11916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.534036][T11916] usb 10-1: config 0 descriptor?? [ 1093.539434][T20893] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1093.607391][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4905'. [ 1093.774592][T20893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.778166][T20893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.064608][T11916] hid_parser_main: 443 callbacks suppressed [ 1094.064634][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.064666][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.064693][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.064722][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.064748][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.064776][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.064806][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.064835][T11916] elecom 0003:056E:00FC.0045: unknown main item tag 0x0 [ 1094.261213][T11916] elecom 0003:056E:00FC.0045: hidraw0: USB HID v2.01 Device [HID 056e:00fc] on usb-dummy_hcd.9-1/input0 [ 1094.853295][T15927] usb 10-1: USB disconnect, device number 17 [ 1094.867953][ T5786] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1095.063528][ T5786] usb 9-1: Using ep0 maxpacket: 32 [ 1095.065553][ T5786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.068599][ T5786] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1095.068646][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.068661][ T5786] usb 9-1: Product: syz [ 1095.068672][ T5786] usb 9-1: Manufacturer: syz [ 1095.068685][ T5786] usb 9-1: SerialNumber: syz [ 1095.076778][ T5786] usb 9-1: config 0 descriptor?? [ 1095.301457][T11916] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1095.346045][T20924] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4910'. [ 1095.440764][T11919] usb 9-1: USB disconnect, device number 15 [ 1095.464709][T11916] usb 2-1: Using ep0 maxpacket: 16 [ 1095.479129][T11916] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1095.479166][T11916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1095.493976][T11916] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1095.494011][T11916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.494036][T11916] usb 2-1: Product: syz [ 1095.494053][T11916] usb 2-1: Manufacturer: syz [ 1095.494070][T11916] usb 2-1: SerialNumber: syz [ 1095.553674][T11916] usb 2-1: config 0 descriptor?? [ 1095.569049][T11916] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1095.569089][T11916] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1096.077995][T20930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input82 [ 1096.297430][T11916] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1096.304968][T11916] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1096.551699][T11916] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1096.551724][T11916] em28xx 2-1:0.0: No AC97 audio processor [ 1097.024831][T20943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.029641][T20943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.763534][T20948] FAULT_INJECTION: forcing a failure. [ 1097.763534][T20948] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.763575][T20948] CPU: 1 UID: 0 PID: 20948 Comm: syz.8.4920 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1097.763607][T20948] Tainted: [L]=SOFTLOCKUP [ 1097.763617][T20948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1097.763632][T20948] Call Trace: [ 1097.763642][T20948] [ 1097.763652][T20948] dump_stack_lvl+0xe8/0x150 [ 1097.763691][T20948] should_fail_ex+0x46b/0x600 [ 1097.763730][T20948] should_failslab+0xa8/0x100 [ 1097.763763][T20948] __kmalloc_noprof+0xdf/0x7b0 [ 1097.763793][T20948] ? tomoyo_encode+0x28b/0x550 [ 1097.763826][T20948] tomoyo_encode+0x28b/0x550 [ 1097.763859][T20948] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1097.763900][T20948] ? tomoyo_path_number_perm+0x219/0x630 [ 1097.763938][T20948] tomoyo_path_number_perm+0x246/0x630 [ 1097.763987][T20948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1097.764024][T20948] ? __lock_acquire+0x6b5/0x2d10 [ 1097.764054][T20948] ? do_raw_spin_lock+0x12b/0x2f0 [ 1097.764112][T20948] ? __fget_files+0x2a/0x420 [ 1097.764144][T20948] ? __fget_files+0x2a/0x420 [ 1097.764171][T20948] ? __fget_files+0x3a6/0x420 [ 1097.764199][T20948] ? __fget_files+0x2a/0x420 [ 1097.764231][T20948] security_file_ioctl+0xc3/0x2a0 [ 1097.764269][T20948] __se_sys_ioctl+0x47/0x170 [ 1097.764304][T20948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.764330][T20948] do_syscall_64+0x174/0x580 [ 1097.764366][T20948] ? trace_irq_disable+0x3b/0x140 [ 1097.764391][T20948] ? clear_bhb_loop+0x40/0x90 [ 1097.764420][T20948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.764445][T20948] RIP: 0033:0x7f2f6192ce59 [ 1097.764467][T20948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.764488][T20948] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1097.764513][T20948] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1097.764531][T20948] RDX: 0000200000000040 RSI: 0000000040204706 RDI: 0000000000000003 [ 1097.764546][T20948] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.764562][T20948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.764576][T20948] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1097.764613][T20948] [ 1097.766521][T20948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1098.186633][T20955] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1098.378505][ T5786] usb 2-1: USB disconnect, device number 92 [ 1098.386562][ T5786] em28xx 2-1:0.0: Disconnecting em28xx [ 1098.469352][ T5786] em28xx 2-1:0.0: Freeing device [ 1099.832365][T11919] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1099.864112][ T5786] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1100.007852][T11919] usb 2-1: Using ep0 maxpacket: 16 [ 1100.009816][T11919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1100.009855][T11919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1100.012331][T11919] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1100.012362][T11919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.012388][T11919] usb 2-1: Product: syz [ 1100.012400][T11919] usb 2-1: Manufacturer: syz [ 1100.012411][T11919] usb 2-1: SerialNumber: syz [ 1100.081701][T11919] usb 2-1: config 0 descriptor?? [ 1100.082832][ T5786] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.082860][ T5786] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1100.089147][ T5786] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1100.089178][ T5786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.089201][ T5786] usb 9-1: Product: syz [ 1100.089218][ T5786] usb 9-1: Manufacturer: syz [ 1100.089234][ T5786] usb 9-1: SerialNumber: syz [ 1100.158949][T11919] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1100.158988][T11919] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1100.207537][ T5786] usb 9-1: 0:1 : does not exist [ 1100.207642][ T5786] usb 9-1: unit 114 not found! [ 1100.207663][ T5786] usb 9-1: unit 111 not found! [ 1100.693550][ T5786] usb 9-1: USB disconnect, device number 16 [ 1100.750608][T11919] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1100.762511][T11919] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1100.781546][T17167] udevd[17167]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.945346][T20992] program syz.9.4939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1100.945690][T20992] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1100.983019][T11919] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1100.983046][T11919] em28xx 2-1:0.0: No AC97 audio processor [ 1102.022001][ T5716] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1102.195506][ T5716] usb 10-1: Using ep0 maxpacket: 16 [ 1102.199258][ T5716] usb 10-1: config 1 has an invalid descriptor of length 57, skipping remainder of the config [ 1102.199289][ T5716] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.232852][ T5716] usb 10-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 1102.232886][ T5716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.232909][ T5716] usb 10-1: Product: syz [ 1102.232926][ T5716] usb 10-1: Manufacturer: syz [ 1102.232943][ T5716] usb 10-1: SerialNumber: syz [ 1102.557735][ T5716] usb 10-1: 0:1 : does not exist [ 1102.557824][ T5716] usb 10-1: BAAD MICROPHONE c_chmask mismatch [ 1102.685285][ T5716] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1102.692105][ T5716] usb 10-1: USB disconnect, device number 18 [ 1102.727408][T17606] udevd[17606]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1102.826155][ T5786] usb 2-1: USB disconnect, device number 93 [ 1102.841689][ T5786] em28xx 2-1:0.0: Disconnecting em28xx [ 1102.859914][ T5786] em28xx 2-1:0.0: Freeing device [ 1103.332766][T21035] fuse: Bad value for 'group_id' [ 1103.332788][T21035] fuse: Bad value for 'group_id' [ 1103.374393][ T5786] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1103.500948][T21037] ieee802154 phy0 wpan0: encryption failed: -22 [ 1103.538203][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 1103.545106][ T5786] usb 2-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 1103.545306][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1103.545330][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1103.545347][ T5786] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1103.545365][ T5786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1103.546615][ T5786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1103.546646][ T5786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1103.546673][ T5786] usb 2-1: Manufacturer: syz [ 1103.561123][ T5786] usb 2-1: config 0 descriptor?? [ 1103.592388][ T32] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1103.765784][ T32] usb 9-1: Using ep0 maxpacket: 16 [ 1103.774065][ T32] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1103.774158][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1103.816341][ T32] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1103.816958][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.816984][ T32] usb 9-1: Product: syz [ 1103.817002][ T32] usb 9-1: Manufacturer: syz [ 1103.817300][ T32] usb 9-1: SerialNumber: syz [ 1103.893881][ T32] usb 9-1: config 0 descriptor?? [ 1103.910824][ T32] em28xx 9-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1104.004120][ T5786] rc_core: IR keymap rc-hauppauge not found [ 1104.004141][ T5786] Registered IR keymap rc-empty [ 1104.006995][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.030475][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.059749][ T5786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1104.067285][ T5786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input83 [ 1104.097250][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.114662][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.135154][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.155918][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.177893][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.199401][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.221175][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.244324][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.264990][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.286351][ T5786] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1104.312631][ T32] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1104.375050][ T5786] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1104.375080][ T5786] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1104.417926][ T5786] usb 2-1: USB disconnect, device number 94 [ 1104.472365][ T32] usb 10-1: Using ep0 maxpacket: 16 [ 1104.475190][ T32] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1104.475225][ T32] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1104.512381][ T32] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1104.512406][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.512422][ T32] usb 10-1: Product: syz [ 1104.512433][ T32] usb 10-1: Manufacturer: syz [ 1104.512444][ T32] usb 10-1: SerialNumber: syz [ 1104.571260][ T32] usb 10-1: config 0 descriptor?? [ 1104.611306][ T32] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1104.611361][ T32] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1104.913126][T11919] usb 9-1: USB disconnect, device number 17 [ 1105.248661][ T32] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1105.250038][ T32] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1105.480376][ T32] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1105.480402][ T32] em28xx 10-1:0.0: No AC97 audio processor [ 1105.532454][ T5346] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1105.701674][ T5346] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1105.701708][ T5346] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1105.701730][ T5346] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.701753][ T5346] usb 2-1: config 220 has no interface number 2 [ 1105.701826][ T5346] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1105.701858][ T5346] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1105.701879][ T5346] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1105.701900][ T5346] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1105.749508][ T5346] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1105.749601][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.749647][ T5346] usb 2-1: Product: syz [ 1105.749664][ T5346] usb 2-1: Manufacturer: syz [ 1105.749682][ T5346] usb 2-1: SerialNumber: syz [ 1106.105292][T21050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.132580][T21050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.195705][ T5346] usb 2-1: selecting invalid altsetting 0 [ 1106.255358][ T5346] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1106.255425][ T5346] uvcvideo 2-1:220.0: No valid video chain found. [ 1106.330349][ T5346] usb 2-1: selecting invalid altsetting 0 [ 1106.330394][ T5346] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1106.350389][ T5346] usb 2-1: USB disconnect, device number 95 [ 1106.999456][T21066] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 1106.999476][T21066] CIFS mount error: No usable UNC path provided in device string! [ 1106.999476][T21066] [ 1106.999518][T21066] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1107.370873][ T5346] usb 10-1: USB disconnect, device number 19 [ 1107.391739][ T5346] em28xx 10-1:0.0: Disconnecting em28xx [ 1107.393390][T21078] FAULT_INJECTION: forcing a failure. [ 1107.393390][T21078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.393429][T21078] CPU: 1 UID: 0 PID: 21078 Comm: syz.6.4970 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1107.393461][T21078] Tainted: [L]=SOFTLOCKUP [ 1107.393470][T21078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1107.393483][T21078] Call Trace: [ 1107.393493][T21078] [ 1107.393504][T21078] dump_stack_lvl+0xe8/0x150 [ 1107.393538][T21078] should_fail_ex+0x46b/0x600 [ 1107.393579][T21078] strncpy_from_user+0x36/0x2b0 [ 1107.393616][T21078] getname_long+0x88/0x130 [ 1107.393645][T21078] do_getname+0x181/0x250 [ 1107.393671][T21078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.393697][T21078] __se_sys_mknod+0x24/0x150 [ 1107.393732][T21078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.393757][T21078] do_syscall_64+0x174/0x580 [ 1107.393793][T21078] ? trace_irq_disable+0x3b/0x140 [ 1107.393820][T21078] ? clear_bhb_loop+0x40/0x90 [ 1107.393850][T21078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.393874][T21078] RIP: 0033:0x7efe961fce59 [ 1107.393896][T21078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.393918][T21078] RSP: 002b:00007efe94456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1107.393947][T21078] RAX: ffffffffffffffda RBX: 00007efe96475fa0 RCX: 00007efe961fce59 [ 1107.393965][T21078] RDX: 000000000000070d RSI: 0000000000000008 RDI: 0000200000000000 [ 1107.393982][T21078] RBP: 00007efe94456090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.393997][T21078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.394011][T21078] R13: 00007efe96476038 R14: 00007efe96475fa0 R15: 00007fff1275f0f8 [ 1107.394054][T21078] [ 1107.669806][ T5346] em28xx 10-1:0.0: Freeing device [ 1107.813759][T21085] FAULT_INJECTION: forcing a failure. [ 1107.813759][T21085] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.813800][T21085] CPU: 1 UID: 0 PID: 21085 Comm: syz.8.4973 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1107.813833][T21085] Tainted: [L]=SOFTLOCKUP [ 1107.813842][T21085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1107.813857][T21085] Call Trace: [ 1107.813870][T21085] [ 1107.813880][T21085] dump_stack_lvl+0xe8/0x150 [ 1107.813915][T21085] should_fail_ex+0x46b/0x600 [ 1107.813956][T21085] should_failslab+0xa8/0x100 [ 1107.813988][T21085] __kmalloc_noprof+0xdf/0x7b0 [ 1107.814019][T21085] ? __d_alloc+0xc2/0x6f0 [ 1107.814054][T21085] __d_alloc+0xc2/0x6f0 [ 1107.814091][T21085] d_alloc+0x4b/0x190 [ 1107.814120][T21085] ? lookup_one_qstr_excl+0xc4/0x360 [ 1107.814155][T21085] lookup_one_qstr_excl+0xd8/0x360 [ 1107.814192][T21085] filename_create+0x20e/0x370 [ 1107.814232][T21085] ? __pfx_filename_create+0x10/0x10 [ 1107.814277][T21085] filename_mknodat+0x18c/0x670 [ 1107.814319][T21085] ? __pfx_filename_mknodat+0x10/0x10 [ 1107.814358][T21085] ? do_getname+0x151/0x250 [ 1107.814383][T21085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.814410][T21085] __se_sys_mknod+0x3a/0x150 [ 1107.814443][T21085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.814477][T21085] do_syscall_64+0x174/0x580 [ 1107.814511][T21085] ? trace_irq_disable+0x3b/0x140 [ 1107.814544][T21085] ? clear_bhb_loop+0x40/0x90 [ 1107.814574][T21085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.814597][T21085] RIP: 0033:0x7f2f6192ce59 [ 1107.814619][T21085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.814640][T21085] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1107.814665][T21085] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1107.814684][T21085] RDX: 0000000000000711 RSI: 0000000000000008 RDI: 0000200000000000 [ 1107.814699][T21085] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.814715][T21085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.814729][T21085] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1107.814767][T21085] [ 1108.449387][ T5702] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1108.621666][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 1108.634962][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.634999][ T5702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.635017][ T5702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1108.635050][ T5702] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1108.635069][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.661156][ T5702] usb 2-1: config 0 descriptor?? [ 1108.772702][ T5786] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1108.935262][ T5786] usb 10-1: Using ep0 maxpacket: 16 [ 1108.937813][ T5786] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1108.937849][ T5786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1108.941150][ T5786] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1108.941182][ T5786] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.941206][ T5786] usb 10-1: Product: syz [ 1108.941223][ T5786] usb 10-1: Manufacturer: syz [ 1108.941241][ T5786] usb 10-1: SerialNumber: syz [ 1108.958919][ T5786] usb 10-1: config 0 descriptor?? [ 1109.042401][ T5786] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1109.042442][ T5786] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1109.126483][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x4 [ 1109.126525][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x6 [ 1109.126556][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.126587][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.126615][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.126644][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.126673][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.126702][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.126732][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.126761][ T5702] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 1109.187023][ T5702] elecom 0003:056E:00FE.0046: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.1-1/input0 [ 1109.437746][ T5702] usb 2-1: USB disconnect, device number 96 [ 1109.525900][T21103] trusted_key: encrypted_key: hex blob is missing [ 1109.734451][ T5786] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1109.735866][ T5786] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1109.969864][ T5786] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1109.969890][ T5786] em28xx 10-1:0.0: No AC97 audio processor [ 1110.141174][T21112] FAULT_INJECTION: forcing a failure. [ 1110.141174][T21112] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.141215][T21112] CPU: 1 UID: 0 PID: 21112 Comm: syz.8.4985 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1110.141247][T21112] Tainted: [L]=SOFTLOCKUP [ 1110.141257][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1110.141271][T21112] Call Trace: [ 1110.141280][T21112] [ 1110.141291][T21112] dump_stack_lvl+0xe8/0x150 [ 1110.141328][T21112] should_fail_ex+0x46b/0x600 [ 1110.141368][T21112] should_failslab+0xa8/0x100 [ 1110.141400][T21112] __kmalloc_cache_noprof+0x84/0x690 [ 1110.141431][T21112] ? genl_start+0x1c9/0x6c0 [ 1110.141464][T21112] genl_start+0x1c9/0x6c0 [ 1110.141502][T21112] __netlink_dump_start+0x469/0x7e0 [ 1110.141547][T21112] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1110.141582][T21112] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1110.141611][T21112] ? genl_get_cmd+0x82e/0x960 [ 1110.141644][T21112] ? __pfx_genl_start+0x10/0x10 [ 1110.141670][T21112] ? __pfx_genl_dumpit+0x10/0x10 [ 1110.141696][T21112] ? __pfx_genl_done+0x10/0x10 [ 1110.141740][T21112] genl_rcv_msg+0x5e8/0x7a0 [ 1110.141784][T21112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1110.141810][T21112] ? ref_tracker_free+0x673/0x820 [ 1110.141845][T21112] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 1110.141882][T21112] ? ____sys_sendmsg+0x55c/0x870 [ 1110.141916][T21112] ? ___sys_sendmsg+0x2a5/0x360 [ 1110.141950][T21112] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 1110.141983][T21112] ? do_syscall_64+0x174/0x580 [ 1110.142016][T21112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.142051][T21112] netlink_rcv_skb+0x232/0x4b0 [ 1110.142089][T21112] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1110.142120][T21112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1110.142171][T21112] ? netlink_deliver_tap+0x2e/0x1b0 [ 1110.142207][T21112] ? netlink_deliver_tap+0x2e/0x1b0 [ 1110.142248][T21112] genl_rcv+0x28/0x40 [ 1110.142275][T21112] netlink_unicast+0x780/0x920 [ 1110.142322][T21112] netlink_sendmsg+0x813/0xb40 [ 1110.142355][T21112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.142380][T21112] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1110.142416][T21112] ? aa_sock_msg_perm+0x122/0x200 [ 1110.142443][T21112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.142465][T21112] sock_sendmsg_nosec+0x13a/0x180 [ 1110.142497][T21112] ____sys_sendmsg+0x55c/0x870 [ 1110.142538][T21112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.142584][T21112] ? import_iovec+0x73/0xa0 [ 1110.142615][T21112] ___sys_sendmsg+0x2a5/0x360 [ 1110.142650][T21112] ? __lock_acquire+0x6b5/0x2d10 [ 1110.142682][T21112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.142766][T21112] ? __fget_files+0x2a/0x420 [ 1110.142793][T21112] ? __fget_files+0x3a6/0x420 [ 1110.142833][T21112] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1110.142873][T21112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1110.142920][T21112] ? __pfx_ksys_write+0x10/0x10 [ 1110.142963][T21112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.142990][T21112] do_syscall_64+0x174/0x580 [ 1110.143025][T21112] ? trace_irq_disable+0x3b/0x140 [ 1110.143052][T21112] ? clear_bhb_loop+0x40/0x90 [ 1110.143080][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.143104][T21112] RIP: 0033:0x7f2f6192ce59 [ 1110.143126][T21112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.143147][T21112] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.143173][T21112] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1110.143191][T21112] RDX: 0000000000040050 RSI: 0000200000000200 RDI: 0000000000000004 [ 1110.143206][T21112] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.143222][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.143236][T21112] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1110.143274][T21112] [ 1110.678531][T21121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.754452][ T5627] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 1110.754493][ T5627] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1111.796429][ T32] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1111.820881][ T5786] usb 10-1: USB disconnect, device number 20 [ 1111.823980][ T5786] em28xx 10-1:0.0: Disconnecting em28xx [ 1111.870934][ T5786] em28xx 10-1:0.0: Freeing device [ 1111.962522][ T32] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1111.963381][ T32] usb 9-1: not running at top speed; connect to a high speed hub [ 1111.964644][ T32] usb 9-1: config 128 has an invalid interface number: 160 but max is 0 [ 1111.964673][ T32] usb 9-1: config 128 has no interface number 0 [ 1111.964708][ T32] usb 9-1: config 128 interface 160 has no altsetting 0 [ 1111.968321][ T32] usb 9-1: New USB device found, idVendor=0830, idProduct=0020, bcdDevice=53.75 [ 1111.968354][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.968378][ T32] usb 9-1: Product: syz [ 1111.968396][ T32] usb 9-1: Manufacturer: syz [ 1111.968413][ T32] usb 9-1: SerialNumber: syz [ 1112.231878][T21161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5004'. [ 1112.233054][T21161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5004'. [ 1112.292478][ T32] usb 9-1: active config #128 != 1 ?? [ 1112.313408][ T32] usb 9-1: USB disconnect, device number 18 [ 1112.808125][ T32] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1112.969848][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.969888][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.969932][ T32] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1112.969959][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.975002][ T32] usb 2-1: config 0 descriptor?? [ 1113.173718][T11915] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1113.357649][T11915] usb 10-1: Using ep0 maxpacket: 16 [ 1113.360222][T11915] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1113.360257][T11915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1113.363641][T11915] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1113.363673][T11915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.363697][T11915] usb 10-1: Product: syz [ 1113.363714][T11915] usb 10-1: Manufacturer: syz [ 1113.363747][T11915] usb 10-1: SerialNumber: syz [ 1113.386316][T11915] usb 10-1: config 0 descriptor?? [ 1113.447539][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 1113.447667][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1113.479011][ T32] usb 2-1: USB disconnect, device number 97 [ 1113.508995][T11915] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1113.509035][T11915] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1114.119580][T11915] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1114.120249][T11915] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1114.338368][T11915] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1114.338393][T11915] em28xx 10-1:0.0: No AC97 audio processor [ 1114.495146][T11916] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1114.646782][T11916] usb 2-1: device descriptor read/64, error -71 [ 1114.907214][T11916] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1115.069920][T11916] usb 2-1: device descriptor read/64, error -71 [ 1115.200325][T11916] usb usb2-port1: attempt power cycle [ 1115.591015][T11916] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1115.625695][T11916] usb 2-1: device descriptor read/8, error -71 [ 1115.882264][T11916] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1115.906310][T11916] usb 2-1: device descriptor read/8, error -71 [ 1116.038799][T11916] usb usb2-port1: unable to enumerate USB device [ 1116.224936][T11916] usb 10-1: USB disconnect, device number 21 [ 1116.228819][T11916] em28xx 10-1:0.0: Disconnecting em28xx [ 1116.329560][T11916] em28xx 10-1:0.0: Freeing device [ 1116.967580][T11916] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1117.063703][ T5346] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1117.150414][T11916] usb 10-1: Using ep0 maxpacket: 8 [ 1117.155404][T11916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.155470][T11916] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1117.155498][T11916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.159889][T11916] usb 10-1: config 0 descriptor?? [ 1117.207576][T11916] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1117.226261][ T5346] usb 9-1: Using ep0 maxpacket: 16 [ 1117.234535][ T5346] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.234565][ T5346] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1117.282406][ T5346] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.282443][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.282468][ T5346] usb 9-1: Product: syz [ 1117.282486][ T5346] usb 9-1: Manufacturer: syz [ 1117.282503][ T5346] usb 9-1: SerialNumber: syz [ 1117.342931][ T5346] usb 9-1: 0:2 : does not exist [ 1117.386312][T11916] gspca_vc032x: reg_r err -71 [ 1117.386410][T11916] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 1117.419978][T11916] usb 10-1: USB disconnect, device number 22 [ 1117.575661][ T5346] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1117.631628][T21237] nbd: couldn't find a device at index 4194308 [ 1117.631674][T21237] FAULT_INJECTION: forcing a failure. [ 1117.631674][T21237] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.631709][T21237] CPU: 0 UID: 0 PID: 21237 Comm: syz.1.5036 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1117.631741][T21237] Tainted: [L]=SOFTLOCKUP [ 1117.631750][T21237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1117.631765][T21237] Call Trace: [ 1117.631774][T21237] [ 1117.631785][T21237] dump_stack_lvl+0xe8/0x150 [ 1117.631817][T21237] should_fail_ex+0x46b/0x600 [ 1117.631858][T21237] should_failslab+0xa8/0x100 [ 1117.631891][T21237] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1117.631920][T21237] ? __alloc_skb+0x1d0/0x7d0 [ 1117.631951][T21237] ? lockdep_hardirqs_on+0x7a/0x110 [ 1117.631991][T21237] __alloc_skb+0x1d0/0x7d0 [ 1117.632023][T21237] ? netlink_ack_tlv_len+0x6c/0x210 [ 1117.632062][T21237] netlink_ack+0x146/0xa50 [ 1117.632095][T21237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1117.632121][T21237] ? ref_tracker_free+0x673/0x820 [ 1117.632160][T21237] ? ____sys_sendmsg+0x55c/0x870 [ 1117.632194][T21237] ? ___sys_sendmsg+0x2a5/0x360 [ 1117.632226][T21237] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 1117.632260][T21237] ? do_syscall_64+0x174/0x580 [ 1117.632293][T21237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.632328][T21237] netlink_rcv_skb+0x2b6/0x4b0 [ 1117.632372][T21237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1117.632402][T21237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1117.632456][T21237] ? netlink_deliver_tap+0x2e/0x1b0 [ 1117.632493][T21237] ? netlink_deliver_tap+0x2e/0x1b0 [ 1117.632534][T21237] genl_rcv+0x28/0x40 [ 1117.632561][T21237] netlink_unicast+0x780/0x920 [ 1117.632613][T21237] netlink_sendmsg+0x813/0xb40 [ 1117.632646][T21237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.632672][T21237] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1117.632707][T21237] ? aa_sock_msg_perm+0x122/0x200 [ 1117.632734][T21237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1117.632756][T21237] sock_sendmsg_nosec+0x13a/0x180 [ 1117.632788][T21237] ____sys_sendmsg+0x55c/0x870 [ 1117.632829][T21237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.632877][T21237] ? import_iovec+0x73/0xa0 [ 1117.632909][T21237] ___sys_sendmsg+0x2a5/0x360 [ 1117.632944][T21237] ? __lock_acquire+0x6b5/0x2d10 [ 1117.632977][T21237] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.633049][T21237] ? __fget_files+0x2a/0x420 [ 1117.633076][T21237] ? __fget_files+0x3a6/0x420 [ 1117.633114][T21237] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1117.633152][T21237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1117.633197][T21237] ? __pfx_ksys_write+0x10/0x10 [ 1117.633239][T21237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.633265][T21237] do_syscall_64+0x174/0x580 [ 1117.633299][T21237] ? trace_irq_disable+0x3b/0x140 [ 1117.633326][T21237] ? clear_bhb_loop+0x40/0x90 [ 1117.633354][T21237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.633378][T21237] RIP: 0033:0x7ff54adfce59 [ 1117.633399][T21237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.633419][T21237] RSP: 002b:00007ff549056028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.633443][T21237] RAX: ffffffffffffffda RBX: 00007ff54b075fa0 RCX: 00007ff54adfce59 [ 1117.633461][T21237] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1117.633476][T21237] RBP: 00007ff549056090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.633492][T21237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1117.633506][T21237] R13: 00007ff54b076038 R14: 00007ff54b075fa0 R15: 00007ffcbb600468 [ 1117.633542][T21237] [ 1117.636441][ T5346] usb 9-1: USB disconnect, device number 19 [ 1118.154580][T17606] udevd[17606]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.528864][T11915] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1118.691338][T11915] usb 10-1: Using ep0 maxpacket: 16 [ 1118.700698][T11915] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1118.700740][T11915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1118.731011][T11915] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1118.731036][T11915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.731052][T11915] usb 10-1: Product: syz [ 1118.731063][T11915] usb 10-1: Manufacturer: syz [ 1118.731075][T11915] usb 10-1: SerialNumber: syz [ 1118.754332][T11915] usb 10-1: config 0 descriptor?? [ 1118.781736][T11915] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1118.781792][T11915] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1118.873225][T21252] FAULT_INJECTION: forcing a failure. [ 1118.873225][T21252] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.873767][T21252] CPU: 0 UID: 0 PID: 21252 Comm: syz.8.5043 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1118.873793][T21252] Tainted: [L]=SOFTLOCKUP [ 1118.873800][T21252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.873811][T21252] Call Trace: [ 1118.873818][T21252] [ 1118.873825][T21252] dump_stack_lvl+0xe8/0x150 [ 1118.873850][T21252] should_fail_ex+0x46b/0x600 [ 1118.873883][T21252] should_failslab+0xa8/0x100 [ 1118.873907][T21252] __kmalloc_noprof+0xdf/0x7b0 [ 1118.873928][T21252] ? kernfs_fop_write_iter+0x159/0x540 [ 1118.873957][T21252] kernfs_fop_write_iter+0x159/0x540 [ 1118.873986][T21252] iter_file_splice_write+0x9a6/0x10f0 [ 1118.874026][T21252] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1118.874062][T21252] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1118.874084][T21252] direct_splice_actor+0x104/0x160 [ 1118.874108][T21252] splice_direct_to_actor+0x545/0xc80 [ 1118.874137][T21252] ? __pfx_direct_splice_actor+0x10/0x10 [ 1118.874172][T21252] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1118.874201][T21252] do_splice_direct+0x19b/0x2a0 [ 1118.874225][T21252] ? __pfx_do_splice_direct+0x10/0x10 [ 1118.874246][T21252] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1118.874274][T21252] ? rw_verify_area+0x25b/0x4e0 [ 1118.874299][T21252] do_sendfile+0x547/0x7e0 [ 1118.874316][T21252] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1118.874347][T21252] ? __pfx_do_sendfile+0x10/0x10 [ 1118.874374][T21252] __se_sys_sendfile64+0x144/0x1a0 [ 1118.874393][T21252] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1118.874408][T21252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.874432][T21252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.874450][T21252] do_syscall_64+0x174/0x580 [ 1118.874474][T21252] ? trace_irq_disable+0x3b/0x140 [ 1118.874493][T21252] ? clear_bhb_loop+0x40/0x90 [ 1118.874513][T21252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.874530][T21252] RIP: 0033:0x7f2f6192ce59 [ 1118.874545][T21252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.874565][T21252] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1118.874582][T21252] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1118.874595][T21252] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1118.874605][T21252] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.874616][T21252] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 1118.874625][T21252] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1118.874651][T21252] [ 1119.485702][T21261] FAULT_INJECTION: forcing a failure. [ 1119.485702][T21261] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.485743][T21261] CPU: 1 UID: 0 PID: 21261 Comm: syz.8.5046 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1119.485776][T21261] Tainted: [L]=SOFTLOCKUP [ 1119.485786][T21261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1119.485801][T21261] Call Trace: [ 1119.485811][T21261] [ 1119.485822][T21261] dump_stack_lvl+0xe8/0x150 [ 1119.485857][T21261] should_fail_ex+0x46b/0x600 [ 1119.485899][T21261] should_failslab+0xa8/0x100 [ 1119.485934][T21261] kmem_cache_alloc_noprof+0x87/0x680 [ 1119.485962][T21261] ? ptlock_alloc+0x20/0x70 [ 1119.485995][T21261] ptlock_alloc+0x20/0x70 [ 1119.486023][T21261] pte_alloc_one+0x7e/0x380 [ 1119.486060][T21261] __pte_alloc+0x25/0x1a0 [ 1119.486090][T21261] ? mm_alloc_pmd+0x246/0x400 [ 1119.486128][T21261] userfaultfd_ioctl+0x358d/0x8520 [ 1119.486163][T21261] ? __pfx_stack_trace_save+0x10/0x10 [ 1119.486209][T21261] ? kasan_save_track+0x4f/0x80 [ 1119.486238][T21261] ? kasan_save_track+0x3e/0x80 [ 1119.486264][T21261] ? kasan_save_free_info+0x46/0x50 [ 1119.486298][T21261] ? __kasan_slab_free+0x5c/0x80 [ 1119.486326][T21261] ? tomoyo_path_number_perm+0x501/0x630 [ 1119.486371][T21261] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1119.486450][T21261] ? kasan_quarantine_put+0xbb/0x1f0 [ 1119.486487][T21261] ? tomoyo_path_number_perm+0x219/0x630 [ 1119.486532][T21261] ? do_vfs_ioctl+0x117b/0x1540 [ 1119.486570][T21261] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1119.486646][T21261] ? __fget_files+0x2a/0x420 [ 1119.486678][T21261] ? __fget_files+0x2a/0x420 [ 1119.486705][T21261] ? __fget_files+0x3a6/0x420 [ 1119.486731][T21261] ? __fget_files+0x2a/0x420 [ 1119.486763][T21261] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1119.486797][T21261] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1119.486831][T21261] __se_sys_ioctl+0xff/0x170 [ 1119.486866][T21261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.486892][T21261] do_syscall_64+0x174/0x580 [ 1119.486928][T21261] ? trace_irq_disable+0x3b/0x140 [ 1119.486955][T21261] ? clear_bhb_loop+0x40/0x90 [ 1119.486986][T21261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.487010][T21261] RIP: 0033:0x7f2f6192ce59 [ 1119.487032][T21261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.487053][T21261] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1119.487078][T21261] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1119.487097][T21261] RDX: 0000200000000140 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 1119.487113][T21261] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.487128][T21261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.487143][T21261] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1119.487181][T21261] [ 1119.725740][T11915] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1119.788264][T11915] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1120.045409][T11915] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1120.045435][T11915] em28xx 10-1:0.0: No AC97 audio processor [ 1120.072814][T21263] FAULT_INJECTION: forcing a failure. [ 1120.072814][T21263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.072863][T21263] CPU: 1 UID: 0 PID: 21263 Comm: syz.6.5048 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1120.072896][T21263] Tainted: [L]=SOFTLOCKUP [ 1120.072905][T21263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1120.072920][T21263] Call Trace: [ 1120.072930][T21263] [ 1120.072940][T21263] dump_stack_lvl+0xe8/0x150 [ 1120.072972][T21263] should_fail_ex+0x46b/0x600 [ 1120.073014][T21263] _copy_to_user+0x31/0xb0 [ 1120.073043][T21263] simple_read_from_buffer+0xe1/0x170 [ 1120.073078][T21263] proc_fail_nth_read+0x1be/0x230 [ 1120.073111][T21263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1120.073144][T21263] ? rw_verify_area+0x2ac/0x4e0 [ 1120.073176][T21263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1120.073206][T21263] vfs_read+0x212/0xa80 [ 1120.073246][T21263] ? __pfx_vfs_read+0x10/0x10 [ 1120.073281][T21263] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1120.073322][T21263] ? lockdep_hardirqs_on+0x7a/0x110 [ 1120.073357][T21263] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1120.073393][T21263] ? mutex_lock_nested+0x152/0x1d0 [ 1120.073420][T21263] ? fdget_pos+0x252/0x320 [ 1120.073457][T21263] ksys_read+0x156/0x270 [ 1120.073492][T21263] ? __pfx_ksys_read+0x10/0x10 [ 1120.073533][T21263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.073559][T21263] do_syscall_64+0x174/0x580 [ 1120.073604][T21263] ? trace_irq_disable+0x3b/0x140 [ 1120.073627][T21263] ? clear_bhb_loop+0x40/0x90 [ 1120.073648][T21263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.073666][T21263] RIP: 0033:0x7efe961bd68e [ 1120.073682][T21263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1120.073698][T21263] RSP: 002b:00007efe94455fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1120.073719][T21263] RAX: ffffffffffffffda RBX: 00007efe944566c0 RCX: 00007efe961bd68e [ 1120.073732][T21263] RDX: 000000000000000f RSI: 00007efe944560a0 RDI: 0000000000000008 [ 1120.073743][T21263] RBP: 00007efe94456090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.073754][T21263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.073765][T21263] R13: 00007efe96476038 R14: 00007efe96475fa0 R15: 00007fff1275f0f8 [ 1120.073790][T21263] [ 1120.442293][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.442407][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.554625][T21271] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1120.555741][ T5786] IPVS: starting estimator thread 0... [ 1120.636496][T21275] FAULT_INJECTION: forcing a failure. [ 1120.636496][T21275] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.636549][T21275] CPU: 1 UID: 0 PID: 21275 Comm: syz.1.5051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1120.636578][T21275] Tainted: [L]=SOFTLOCKUP [ 1120.636586][T21275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1120.636600][T21275] Call Trace: [ 1120.636608][T21275] [ 1120.636617][T21275] dump_stack_lvl+0xe8/0x150 [ 1120.636646][T21275] should_fail_ex+0x46b/0x600 [ 1120.636680][T21275] should_failslab+0xa8/0x100 [ 1120.636708][T21275] __kmalloc_noprof+0xdf/0x7b0 [ 1120.636733][T21275] ? do_insn_ioctl+0x100/0x5a0 [ 1120.636767][T21275] do_insn_ioctl+0x100/0x5a0 [ 1120.636802][T21275] comedi_unlocked_ioctl+0xe0a/0x1b00 [ 1120.636844][T21275] ? kasan_quarantine_put+0xbb/0x1f0 [ 1120.636866][T21275] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1120.636899][T21275] ? tomoyo_path_number_perm+0x219/0x630 [ 1120.636933][T21275] ? tomoyo_path_number_perm+0x219/0x630 [ 1120.636968][T21275] ? do_vfs_ioctl+0x117b/0x1540 [ 1120.637002][T21275] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1120.637064][T21275] ? __fget_files+0x2a/0x420 [ 1120.637089][T21275] ? __fget_files+0x3a6/0x420 [ 1120.637109][T21275] ? __fget_files+0x2a/0x420 [ 1120.637143][T21275] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1120.637171][T21275] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1120.637198][T21275] __se_sys_ioctl+0xff/0x170 [ 1120.637232][T21275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.637258][T21275] do_syscall_64+0x174/0x580 [ 1120.637297][T21275] ? trace_irq_disable+0x3b/0x140 [ 1120.637320][T21275] ? clear_bhb_loop+0x40/0x90 [ 1120.637344][T21275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.637364][T21275] RIP: 0033:0x7ff54adfce59 [ 1120.637383][T21275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.637400][T21275] RSP: 002b:00007ff549056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.637420][T21275] RAX: ffffffffffffffda RBX: 00007ff54b075fa0 RCX: 00007ff54adfce59 [ 1120.637435][T21275] RDX: 0000200000022a00 RSI: 000000008028640c RDI: 0000000000000003 [ 1120.637450][T21275] RBP: 00007ff549056090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.637465][T21275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.637480][T21275] R13: 00007ff54b076038 R14: 00007ff54b075fa0 R15: 00007ffcbb600468 [ 1120.637518][T21275] [ 1120.650916][T21273] IPVS: using max 8 ests per chain, 19200 per kthread [ 1121.149780][T11919] hid_parser_main: 49 callbacks suppressed [ 1121.149803][T11919] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 1121.249348][T11919] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1121.528790][ T5786] usb 10-1: USB disconnect, device number 23 [ 1121.551464][ T5786] em28xx 10-1:0.0: Disconnecting em28xx [ 1121.560765][ T5786] em28xx 10-1:0.0: Freeing device [ 1121.801637][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1121.801669][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1121.875470][ T5346] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1122.040383][ T5346] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.040414][ T5346] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1122.043017][ T5346] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1122.043048][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.043071][ T5346] usb 9-1: Product: syz [ 1122.043086][ T5346] usb 9-1: Manufacturer: syz [ 1122.043107][ T5346] usb 9-1: SerialNumber: syz [ 1122.115991][ T5346] usb 9-1: 0:2 : does not exist [ 1122.329308][T11919] usb 9-1: USB disconnect, device number 20 [ 1122.992218][T11919] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1123.180237][T11919] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1123.180276][T11919] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1123.180293][T11919] usb 10-1: Product: syz [ 1123.180305][T11919] usb 10-1: SerialNumber: syz [ 1123.184746][T11919] usb 10-1: config 0 descriptor?? [ 1123.403670][T11918] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1123.577089][T11918] usb 9-1: Using ep0 maxpacket: 16 [ 1123.583177][T11918] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1123.583215][T11918] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1123.626878][T11918] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1123.626903][T11918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.626919][T11918] usb 9-1: Product: syz [ 1123.626930][T11918] usb 9-1: Manufacturer: syz [ 1123.626942][T11918] usb 9-1: SerialNumber: syz [ 1123.738619][T11918] usb 9-1: config 0 descriptor?? [ 1123.785375][T11918] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1123.786189][T11918] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1124.448038][T11918] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1124.507931][T11918] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1124.633980][T11919] usb 10-1: USB disconnect, device number 24 [ 1124.735827][T11918] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1124.735854][T11918] em28xx 9-1:0.0: No AC97 audio processor [ 1125.669450][T21348] 9p: Bad value for 'rfdno' [ 1126.385980][T11918] usb 9-1: USB disconnect, device number 21 [ 1126.389772][T11918] em28xx 9-1:0.0: Disconnecting em28xx [ 1126.412422][T11918] em28xx 9-1:0.0: Freeing device [ 1126.616647][ T5627] Bluetooth: hci2: ACL packet for unknown connection handle 3273 [ 1126.619371][T21364] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input84 [ 1126.850260][ T32] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1127.015528][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.015568][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.015612][ T32] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1127.015640][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.079847][ T32] usb 2-1: config 0 descriptor?? [ 1127.132145][ T5346] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1127.314839][ T5346] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1127.323146][ T5346] usb 9-1: config 3 has an invalid interface number: 19 but max is 0 [ 1127.323177][ T5346] usb 9-1: config 3 has an invalid interface number: 4 but max is 0 [ 1127.323202][ T5346] usb 9-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 1127.323294][ T5346] usb 9-1: config 3 has no interface number 0 [ 1127.323315][ T5346] usb 9-1: config 3 has no interface number 1 [ 1127.323390][ T5346] usb 9-1: config 3 interface 19 altsetting 9 endpoint 0x6 has invalid maxpacket 1040, setting to 64 [ 1127.323480][ T5346] usb 9-1: config 3 interface 19 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1127.323512][ T5346] usb 9-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 1127.323556][ T5346] usb 9-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 1127.323650][ T5346] usb 9-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 1127.323677][ T5346] usb 9-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 1127.323703][ T5346] usb 9-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 1127.323732][ T5346] usb 9-1: config 3 interface 19 has no altsetting 0 [ 1127.323820][ T5346] usb 9-1: config 3 interface 4 has no altsetting 0 [ 1127.474695][ T5346] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=13.f5 [ 1127.474730][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.474818][ T5346] usb 9-1: Product: syz [ 1127.474837][ T5346] usb 9-1: Manufacturer: syz [ 1127.474853][ T5346] usb 9-1: SerialNumber: syz [ 1127.689308][ T32] playstation 0003:054C:0DF2.0048: unknown main item tag 0x0 [ 1127.689772][ T32] playstation 0003:054C:0DF2.0048: unknown main item tag 0x0 [ 1127.689807][ T32] playstation 0003:054C:0DF2.0048: unknown main item tag 0x0 [ 1127.689837][ T32] playstation 0003:054C:0DF2.0048: unknown main item tag 0x0 [ 1127.690170][ T32] playstation 0003:054C:0DF2.0048: unknown main item tag 0x0 [ 1127.780872][ T32] playstation 0003:054C:0DF2.0048: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1127.912567][ T32] playstation 0003:054C:0DF2.0048: Invalid reportID received, expected 9 got 233 [ 1127.912671][ T32] playstation 0003:054C:0DF2.0048: Failed to retrieve DualSense pairing info: -22 [ 1127.913029][ T32] playstation 0003:054C:0DF2.0048: Failed to get MAC address from DualSense [ 1127.913335][ T32] playstation 0003:054C:0DF2.0048: Failed to create dualsense. [ 1127.983335][ T32] playstation 0003:054C:0DF2.0048: probe with driver playstation failed with error -22 [ 1128.111572][T21381] FAULT_INJECTION: forcing a failure. [ 1128.111572][T21381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.111613][T21381] CPU: 0 UID: 0 PID: 21381 Comm: syz.6.5083 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1128.111648][T21381] Tainted: [L]=SOFTLOCKUP [ 1128.111656][T21381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1128.111672][T21381] Call Trace: [ 1128.111682][T21381] [ 1128.111693][T21381] dump_stack_lvl+0xe8/0x150 [ 1128.111736][T21381] should_fail_ex+0x46b/0x600 [ 1128.111778][T21381] _copy_from_user+0x2d/0xb0 [ 1128.111808][T21381] kstrtouint_from_user+0xd6/0x180 [ 1128.111849][T21381] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1128.111903][T21381] proc_fail_nth_write+0x8e/0x210 [ 1128.111934][T21381] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1128.111968][T21381] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1128.111999][T21381] vfs_write+0x2a3/0xba0 [ 1128.112043][T21381] ? __pfx_vfs_write+0x10/0x10 [ 1128.112077][T21381] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1128.112112][T21381] ? lockdep_hardirqs_on+0x7a/0x110 [ 1128.112148][T21381] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1128.112186][T21381] ? mutex_lock_nested+0x152/0x1d0 [ 1128.112212][T21381] ? fdget_pos+0x252/0x320 [ 1128.112249][T21381] ksys_write+0x156/0x270 [ 1128.112285][T21381] ? __pfx_ksys_write+0x10/0x10 [ 1128.112328][T21381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.112360][T21381] do_syscall_64+0x174/0x580 [ 1128.112394][T21381] ? trace_irq_disable+0x3b/0x140 [ 1128.112420][T21381] ? clear_bhb_loop+0x40/0x90 [ 1128.112450][T21381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.112474][T21381] RIP: 0033:0x7efe961bd68e [ 1128.112496][T21381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1128.112518][T21381] RSP: 002b:00007efe94434fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1128.112544][T21381] RAX: ffffffffffffffda RBX: 00007efe944356c0 RCX: 00007efe961bd68e [ 1128.112562][T21381] RDX: 0000000000000001 RSI: 00007efe944350a0 RDI: 0000000000000004 [ 1128.112577][T21381] RBP: 00007efe94435090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.112592][T21381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.112607][T21381] R13: 00007efe96476128 R14: 00007efe96476090 R15: 00007fff1275f0f8 [ 1128.112643][T21381] [ 1128.416096][ T5346] pl2303 9-1:3.19: required endpoints missing [ 1128.442072][ T5346] pl2303 9-1:3.4: required interrupt-in endpoint missing [ 1128.469476][ T5346] usb 9-1: USB disconnect, device number 22 [ 1129.326598][T21397] netlink: 'syz.8.5089': attribute type 11 has an invalid length. [ 1129.891348][ T32] usb 2-1: USB disconnect, device number 102 [ 1130.034860][T21415] FAULT_INJECTION: forcing a failure. [ 1130.034860][T21415] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.034889][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.1.5096 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1130.034913][T21415] Tainted: [L]=SOFTLOCKUP [ 1130.034919][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1130.034930][T21415] Call Trace: [ 1130.034938][T21415] [ 1130.034945][T21415] dump_stack_lvl+0xe8/0x150 [ 1130.034971][T21415] should_fail_ex+0x46b/0x600 [ 1130.035000][T21415] should_failslab+0xa8/0x100 [ 1130.035023][T21415] __kmalloc_cache_noprof+0x84/0x690 [ 1130.035046][T21415] ? binder_alloc_new_buf+0x27d/0x3030 [ 1130.035073][T21415] binder_alloc_new_buf+0x27d/0x3030 [ 1130.035099][T21415] ? binder_debug+0x155/0x1d0 [ 1130.035125][T21415] ? __pfx_binder_debug+0x10/0x10 [ 1130.035151][T21415] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 1130.035173][T21415] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1130.035198][T21415] binder_transaction+0x2853/0x6fd0 [ 1130.035250][T21415] ? __pfx_binder_transaction+0x10/0x10 [ 1130.035274][T21415] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1130.035306][T21415] ? __lock_acquire+0x6b5/0x2d10 [ 1130.035331][T21415] ? __lock_acquire+0x6b5/0x2d10 [ 1130.035358][T21415] ? __lock_acquire+0x6b5/0x2d10 [ 1130.035379][T21415] ? __lock_acquire+0x6b5/0x2d10 [ 1130.035401][T21415] ? __might_fault+0xaf/0x130 [ 1130.035422][T21415] ? __might_fault+0xaf/0x130 [ 1130.035456][T21415] binder_ioctl_write_read+0xb37/0xa490 [ 1130.035480][T21415] ? is_bpf_text_address+0x26/0x2b0 [ 1130.035513][T21415] ? __kernel_text_address+0xd/0x30 [ 1130.035553][T21415] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1130.035579][T21415] ? stack_depot_save_flags+0x33/0x810 [ 1130.035611][T21415] ? do_raw_spin_lock+0x12b/0x2f0 [ 1130.035640][T21415] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1130.035660][T21415] ? reacquire_held_locks+0x104/0x190 [ 1130.035682][T21415] ? rt_spin_lock+0x1e0/0x400 [ 1130.035703][T21415] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1130.035750][T21415] ? rt_spin_unlock+0x14f/0x200 [ 1130.035788][T21415] ? binder_get_thread+0x177/0x6d0 [ 1130.035826][T21415] binder_ioctl+0x426/0x1b10 [ 1130.035849][T21415] ? tomoyo_path_number_perm+0x219/0x630 [ 1130.035877][T21415] ? tomoyo_path_number_perm+0x219/0x630 [ 1130.035905][T21415] ? do_vfs_ioctl+0x117b/0x1540 [ 1130.035930][T21415] ? __pfx_binder_ioctl+0x10/0x10 [ 1130.035953][T21415] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1130.036005][T21415] ? __fget_files+0x2a/0x420 [ 1130.036027][T21415] ? __fget_files+0x2a/0x420 [ 1130.036046][T21415] ? __fget_files+0x3a6/0x420 [ 1130.036065][T21415] ? __fget_files+0x2a/0x420 [ 1130.036087][T21415] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1130.036111][T21415] ? __pfx_binder_ioctl+0x10/0x10 [ 1130.036153][T21415] __se_sys_ioctl+0xff/0x170 [ 1130.036186][T21415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.036211][T21415] do_syscall_64+0x174/0x580 [ 1130.036244][T21415] ? trace_irq_disable+0x3b/0x140 [ 1130.036269][T21415] ? clear_bhb_loop+0x40/0x90 [ 1130.036298][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.036320][T21415] RIP: 0033:0x7ff54adfce59 [ 1130.036341][T21415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1130.036362][T21415] RSP: 002b:00007ff549056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1130.036386][T21415] RAX: ffffffffffffffda RBX: 00007ff54b075fa0 RCX: 00007ff54adfce59 [ 1130.036404][T21415] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1130.036420][T21415] RBP: 00007ff549056090 R08: 0000000000000000 R09: 0000000000000000 [ 1130.036434][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1130.036454][T21415] R13: 00007ff54b076038 R14: 00007ff54b075fa0 R15: 00007ffcbb600468 [ 1130.036478][T21415] [ 1130.144750][T11919] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1130.438835][T11919] usb 9-1: Using ep0 maxpacket: 16 [ 1130.458899][T11919] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.458963][T11919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1130.458985][T11919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1130.459002][T11919] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1130.481002][T11919] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1130.481038][T11919] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1130.481062][T11919] usb 9-1: Manufacturer: syz [ 1130.550140][T11919] usb 9-1: config 0 descriptor?? [ 1131.048140][T11916] usb 9-1: USB disconnect, device number 23 [ 1131.136860][T21425] FAULT_INJECTION: forcing a failure. [ 1131.136860][T21425] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.136890][T21425] CPU: 0 UID: 0 PID: 21425 Comm: syz.1.5101 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1131.136914][T21425] Tainted: [L]=SOFTLOCKUP [ 1131.136920][T21425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1131.136930][T21425] Call Trace: [ 1131.136937][T21425] [ 1131.136944][T21425] dump_stack_lvl+0xe8/0x150 [ 1131.136968][T21425] should_fail_ex+0x46b/0x600 [ 1131.136997][T21425] should_failslab+0xa8/0x100 [ 1131.137020][T21425] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1131.137041][T21425] ? __alloc_skb+0x1d0/0x7d0 [ 1131.137063][T21425] ? lockdep_hardirqs_on+0x7a/0x110 [ 1131.137092][T21425] __alloc_skb+0x1d0/0x7d0 [ 1131.137119][T21425] netlink_sendmsg+0x5d4/0xb40 [ 1131.137141][T21425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.137159][T21425] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1131.137182][T21425] ? __pfx_aa_file_perm+0x10/0x10 [ 1131.137201][T21425] ? aa_sock_msg_perm+0x122/0x200 [ 1131.137220][T21425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1131.137235][T21425] sock_sendmsg_nosec+0x13a/0x180 [ 1131.137266][T21425] sock_write_iter+0x308/0x410 [ 1131.137286][T21425] ? __pfx_sock_write_iter+0x10/0x10 [ 1131.137320][T21425] vfs_write+0x629/0xba0 [ 1131.137349][T21425] ? __pfx_vfs_write+0x10/0x10 [ 1131.137380][T21425] ? __fget_files+0x2a/0x420 [ 1131.137406][T21425] ksys_write+0x156/0x270 [ 1131.137430][T21425] ? __pfx_ksys_write+0x10/0x10 [ 1131.137459][T21425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.137477][T21425] do_syscall_64+0x174/0x580 [ 1131.137502][T21425] ? trace_irq_disable+0x3b/0x140 [ 1131.137520][T21425] ? clear_bhb_loop+0x40/0x90 [ 1131.137541][T21425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.137557][T21425] RIP: 0033:0x7ff54adfce59 [ 1131.137573][T21425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.137588][T21425] RSP: 002b:00007ff549056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1131.137605][T21425] RAX: ffffffffffffffda RBX: 00007ff54b075fa0 RCX: 00007ff54adfce59 [ 1131.137618][T21425] RDX: 000000000000001d RSI: 0000200000000000 RDI: 0000000000000003 [ 1131.137629][T21425] RBP: 00007ff549056090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.137639][T21425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.137650][T21425] R13: 00007ff54b076038 R14: 00007ff54b075fa0 R15: 00007ffcbb600468 [ 1131.137674][T21425] [ 1131.250540][T11919] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1131.602193][T11919] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1131.602230][T11919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.602258][T11919] usb 10-1: Product: syz [ 1131.602277][T11919] usb 10-1: Manufacturer: syz [ 1131.602288][T11919] usb 10-1: SerialNumber: syz [ 1132.077453][T11919] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1132.077523][T11919] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1132.340057][T11919] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1132.340121][T11919] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1132.341137][T11919] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1132.404173][T11919] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1132.431904][T11919] usb 10-1: USB disconnect, device number 25 [ 1133.775526][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 1149.213123][ T32] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1149.370933][ T32] usb 9-1: Using ep0 maxpacket: 8 [ 1149.373422][ T32] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1149.373457][ T32] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1149.373485][ T32] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1149.373515][ T32] usb 9-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 1149.373546][ T32] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1149.373583][ T32] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1149.373610][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.380262][ T32] usb 9-1: config 0 descriptor?? [ 1149.608636][T21447] No control pipe specified [ 1149.934696][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x2 [ 1149.934735][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1149.934764][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1149.934792][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1149.934821][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1149.934865][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1149.934987][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1149.935028][ T32] elan 0003:04F3:0755.0049: unknown main item tag 0x0 [ 1149.936338][ T32] elan 0003:04F3:0755.0049: failed to start in urb: -90 [ 1150.012138][ T32] elan 0003:04F3:0755.0049: hidraw0: USB HID v0.04 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 1150.092798][ T38] audit: type=1400 audit(3560367627.772:86): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=21449 comm="syz.1.5108" [ 1150.161581][T21431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.176020][T21431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.190541][ T5346] usb 9-1: USB disconnect, device number 24 [ 1150.639051][ T5786] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1150.801563][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 1150.804622][ T5786] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1150.804659][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1150.809301][ T5786] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1150.809333][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.809358][ T5786] usb 2-1: Product: syz [ 1150.809383][ T5786] usb 2-1: Manufacturer: syz [ 1150.809401][ T5786] usb 2-1: SerialNumber: syz [ 1150.884220][ T5786] usb 2-1: config 0 descriptor?? [ 1150.899365][ T5786] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1150.899404][ T5786] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1151.130268][T21473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input85 [ 1151.488795][T21478] FAULT_INJECTION: forcing a failure. [ 1151.488795][T21478] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.488853][T21478] CPU: 1 UID: 0 PID: 21478 Comm: syz.8.5117 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1151.488885][T21478] Tainted: [L]=SOFTLOCKUP [ 1151.488898][T21478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1151.488922][T21478] Call Trace: [ 1151.488932][T21478] [ 1151.488943][T21478] dump_stack_lvl+0xe8/0x150 [ 1151.488976][T21478] should_fail_ex+0x46b/0x600 [ 1151.489111][T21478] should_failslab+0xa8/0x100 [ 1151.489146][T21478] __kmalloc_cache_noprof+0x84/0x690 [ 1151.489177][T21478] ? genl_start+0x1c9/0x6c0 [ 1151.489210][T21478] genl_start+0x1c9/0x6c0 [ 1151.489247][T21478] __netlink_dump_start+0x469/0x7e0 [ 1151.489290][T21478] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1151.489325][T21478] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1151.489354][T21478] ? genl_get_cmd+0x82e/0x960 [ 1151.489386][T21478] ? __pfx_genl_start+0x10/0x10 [ 1151.489412][T21478] ? __pfx_genl_dumpit+0x10/0x10 [ 1151.489439][T21478] ? __pfx_genl_done+0x10/0x10 [ 1151.489484][T21478] genl_rcv_msg+0x5e8/0x7a0 [ 1151.489519][T21478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.489544][T21478] ? ref_tracker_free+0x673/0x820 [ 1151.489579][T21478] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 1151.489611][T21478] ? ____sys_sendmsg+0x55c/0x870 [ 1151.489645][T21478] ? ___sys_sendmsg+0x2a5/0x360 [ 1151.489693][T21478] netlink_rcv_skb+0x232/0x4b0 [ 1151.489730][T21478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1151.489761][T21478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1151.489822][T21478] genl_rcv+0x28/0x40 [ 1151.489848][T21478] netlink_unicast+0x780/0x920 [ 1151.489918][T21478] netlink_sendmsg+0x813/0xb40 [ 1151.489951][T21478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.489977][T21478] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1151.490012][T21478] ? aa_sock_msg_perm+0x122/0x200 [ 1151.490040][T21478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.490062][T21478] sock_sendmsg_nosec+0x13a/0x180 [ 1151.490094][T21478] ____sys_sendmsg+0x55c/0x870 [ 1151.490137][T21478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1151.490183][T21478] ? import_iovec+0x73/0xa0 [ 1151.490213][T21478] ___sys_sendmsg+0x2a5/0x360 [ 1151.490247][T21478] ? __lock_acquire+0x6b5/0x2d10 [ 1151.490279][T21478] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.490352][T21478] ? __fget_files+0x2a/0x420 [ 1151.490381][T21478] ? __fget_files+0x3a6/0x420 [ 1151.490420][T21478] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1151.490461][T21478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1151.490505][T21478] ? __pfx_ksys_write+0x10/0x10 [ 1151.490547][T21478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.490574][T21478] do_syscall_64+0x174/0x580 [ 1151.490612][T21478] ? clear_bhb_loop+0x40/0x90 [ 1151.490641][T21478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.490665][T21478] RIP: 0033:0x7f2f6192ce59 [ 1151.490689][T21478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.490711][T21478] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.490736][T21478] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1151.490755][T21478] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1151.490771][T21478] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.490786][T21478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.490801][T21478] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1151.490840][T21478] [ 1151.660923][T21480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1151.671890][ T5786] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1151.702071][ T5786] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1151.920371][ T5786] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1151.920396][ T5786] em28xx 2-1:0.0: No AC97 audio processor [ 1152.438073][ T5346] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1152.603132][ T5346] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 1152.603167][ T5346] usb 9-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1152.603193][ T5346] usb 9-1: config 150 has no interface number 0 [ 1152.603240][ T5346] usb 9-1: too many endpoints for config 150 interface 1 altsetting 0: 32, using maximum allowed: 30 [ 1152.603290][ T5346] usb 9-1: config 150 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1152.603320][ T5346] usb 9-1: config 150 interface 204 has no altsetting 0 [ 1152.606451][ T5346] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1152.606483][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.606506][ T5346] usb 9-1: Product: syz [ 1152.606523][ T5346] usb 9-1: Manufacturer: syz [ 1152.606540][ T5346] usb 9-1: SerialNumber: syz [ 1152.643896][ T5786] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1152.839791][ T5786] usb 10-1: Using ep0 maxpacket: 32 [ 1152.848186][ T5786] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 1152.848303][ T5786] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 240, setting to 64 [ 1152.880120][ T5786] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1152.880225][ T5786] usb 10-1: New USB device strings: Mfr=170, Product=2, SerialNumber=3 [ 1152.880258][ T5786] usb 10-1: Product: syz [ 1152.880275][ T5786] usb 10-1: Manufacturer: syz [ 1152.880292][ T5786] usb 10-1: SerialNumber: syz [ 1152.930690][ T5786] usb 10-1: config 0 descriptor?? [ 1152.989188][T21501] Invalid ELF header magic: != ELF [ 1153.014614][ T5786] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1153.185067][T10632] usb 10-1: Failed to submit usb control message: -71 [ 1153.185108][T10632] usb 10-1: unable to send the bmi data to the device: -71 [ 1153.185129][T10632] usb 10-1: unable to get target info from device [ 1153.185148][T10632] usb 10-1: could not get target info (-71) [ 1153.185170][T10632] usb 10-1: could not probe fw (-71) [ 1153.229828][ T5709] usb 10-1: USB disconnect, device number 26 [ 1153.685303][T11916] usb 2-1: USB disconnect, device number 103 [ 1153.688323][T11916] em28xx 2-1:0.0: Disconnecting em28xx [ 1153.775239][T11916] em28xx 2-1:0.0: Freeing device [ 1153.895522][T21515] CUSE: unknown device info "" [ 1153.895538][T21515] CUSE: unknown device info "" [ 1153.895547][T21515] CUSE: unknown device info "ÿw" [ 1153.895555][T21515] CUSE: zero length info key specified [ 1154.385203][T21524] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1154.418366][T21525] loop8: detected capacity change from 0 to 7 [ 1154.478230][T21525] Dev loop8: unable to read RDB block 7 [ 1154.478285][T21525] loop8: unable to read partition table [ 1154.478516][T21525] loop8: partition table beyond EOD, truncated [ 1154.478538][T21525] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1154.644526][T21530] netlink: 'syz.9.5134': attribute type 13 has an invalid length. [ 1154.644558][T21530] netlink: 14581 bytes leftover after parsing attributes in process `syz.9.5134'. [ 1155.148036][ T5716] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1155.322308][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 1155.325016][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1155.325051][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1155.328548][ T5716] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1155.328579][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.328601][ T5716] usb 2-1: Product: syz [ 1155.328617][ T5716] usb 2-1: Manufacturer: syz [ 1155.328633][ T5716] usb 2-1: SerialNumber: syz [ 1155.412843][ T5716] usb 2-1: config 0 descriptor?? [ 1155.464495][ T5716] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1155.464536][ T5716] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1155.546756][ T5346] xr_serial 9-1:150.204: skipping garbage [ 1155.546812][ T5346] xr_serial 9-1:150.204: xr_serial converter detected [ 1155.594544][ T5346] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1155.594611][ T5346] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1155.653317][ T5346] usb 9-1: USB disconnect, device number 25 [ 1155.696201][ T5346] xr_serial 9-1:150.204: device disconnected [ 1156.082042][ T5716] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1156.086750][ T5716] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1156.523556][ T5716] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1156.523581][ T5716] em28xx 2-1:0.0: No AC97 audio processor [ 1156.661503][T21554] FAULT_INJECTION: forcing a failure. [ 1156.661503][T21554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1156.661545][T21554] CPU: 1 UID: 0 PID: 21554 Comm: syz.6.5141 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1156.661578][T21554] Tainted: [L]=SOFTLOCKUP [ 1156.661587][T21554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1156.661602][T21554] Call Trace: [ 1156.661612][T21554] [ 1156.661622][T21554] dump_stack_lvl+0xe8/0x150 [ 1156.661657][T21554] should_fail_ex+0x46b/0x600 [ 1156.661699][T21554] prepare_alloc_pages+0x22a/0x6b0 [ 1156.661741][T21554] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1156.661778][T21554] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1156.661816][T21554] ? __pfx_policy_nodemask+0x10/0x10 [ 1156.661848][T21554] ? filemap_get_entry+0x378/0x3f0 [ 1156.661880][T21554] ? folio_mark_accessed+0x42e/0x8c0 [ 1156.661915][T21554] ? __pfx_filemap_get_entry+0x10/0x10 [ 1156.661950][T21554] alloc_pages_mpol+0xd1/0x380 [ 1156.661987][T21554] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1156.662022][T21554] shmem_get_folio_gfp+0x647/0x1ad0 [ 1156.662078][T21554] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1156.662106][T21554] ? folio_mapping+0x16f/0x1f0 [ 1156.662141][T21554] shmem_write_begin+0x166/0x320 [ 1156.662177][T21554] generic_perform_write+0x2af/0x8b0 [ 1156.662228][T21554] ? __pfx_generic_perform_write+0x10/0x10 [ 1156.662272][T21554] ? file_update_time_flags+0x3b9/0x4b0 [ 1156.662310][T21554] shmem_file_write_iter+0xfb/0x120 [ 1156.662347][T21554] vfs_write+0x629/0xba0 [ 1156.662389][T21554] ? __pfx_vfs_write+0x10/0x10 [ 1156.662423][T21554] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1156.662469][T21554] ? lockdep_hardirqs_on+0x7a/0x110 [ 1156.662506][T21554] ? mutex_lock_nested+0x152/0x1d0 [ 1156.662537][T21554] ? fdget_pos+0x252/0x320 [ 1156.662574][T21554] ksys_write+0x156/0x270 [ 1156.662609][T21554] ? __pfx_ksys_write+0x10/0x10 [ 1156.662652][T21554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.662678][T21554] do_syscall_64+0x174/0x580 [ 1156.662713][T21554] ? trace_irq_disable+0x3b/0x140 [ 1156.662738][T21554] ? clear_bhb_loop+0x40/0x90 [ 1156.662768][T21554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.662791][T21554] RIP: 0033:0x7efe961fce59 [ 1156.662814][T21554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.662835][T21554] RSP: 002b:00007efe94456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1156.662859][T21554] RAX: ffffffffffffffda RBX: 00007efe96475fa0 RCX: 00007efe961fce59 [ 1156.662877][T21554] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 1156.662893][T21554] RBP: 00007efe94456090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.662908][T21554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.662923][T21554] R13: 00007efe96476038 R14: 00007efe96475fa0 R15: 00007fff1275f0f8 [ 1156.662961][T21554] [ 1157.110673][T21557] nfs: Bad value for 'source' [ 1157.416679][T21569] gfs2: path_lookup on c::: returned error -2 [ 1157.521399][T21573] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5149'. [ 1157.617814][ T38] audit: type=1326 audit(3560367634.729:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21575 comm="syz.6.5150" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe961fce59 code=0x0 [ 1157.656687][T15927] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1157.846162][T15927] usb 9-1: Using ep0 maxpacket: 8 [ 1157.849146][T15927] usb 9-1: config 0 has no interfaces? [ 1157.851646][T15927] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1157.851676][T15927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.851704][T15927] usb 9-1: Product: syz [ 1157.851716][T15927] usb 9-1: Manufacturer: syz [ 1157.851728][T15927] usb 9-1: SerialNumber: syz [ 1157.903145][T15927] usb 9-1: config 0 descriptor?? [ 1158.130717][ T5716] usb 2-1: USB disconnect, device number 104 [ 1158.133846][ T5716] em28xx 2-1:0.0: Disconnecting em28xx [ 1158.186678][T11916] usb 9-1: USB disconnect, device number 26 [ 1158.189913][ T5716] em28xx 2-1:0.0: Freeing device [ 1158.757260][T15927] usb 10-1: new low-speed USB device number 27 using dummy_hcd [ 1158.860416][T21596] FAULT_INJECTION: forcing a failure. [ 1158.860416][T21596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.860457][T21596] CPU: 1 UID: 0 PID: 21596 Comm: syz.8.5157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1158.860489][T21596] Tainted: [L]=SOFTLOCKUP [ 1158.860498][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1158.860512][T21596] Call Trace: [ 1158.860522][T21596] [ 1158.860532][T21596] dump_stack_lvl+0xe8/0x150 [ 1158.860566][T21596] should_fail_ex+0x46b/0x600 [ 1158.860607][T21596] _copy_from_user+0x2d/0xb0 [ 1158.860637][T21596] gsmld_ioctl+0x1a4/0x18d0 [ 1158.860667][T21596] ? tty_ldisc_ref_wait+0x25/0x70 [ 1158.860703][T21596] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1158.860745][T21596] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1158.860790][T21596] ? ldsem_down_read+0x12/0x40 [ 1158.860829][T21596] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1158.860860][T21596] tty_ioctl+0x9cb/0xde0 [ 1158.860890][T21596] ? __pfx_tty_ioctl+0x10/0x10 [ 1158.860918][T21596] __se_sys_ioctl+0xff/0x170 [ 1158.860953][T21596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.860979][T21596] do_syscall_64+0x174/0x580 [ 1158.861014][T21596] ? trace_irq_disable+0x3b/0x140 [ 1158.861041][T21596] ? clear_bhb_loop+0x40/0x90 [ 1158.861071][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.861095][T21596] RIP: 0033:0x7f2f6192ce59 [ 1158.861116][T21596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.861145][T21596] RSP: 002b:00007f2f5fb86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1158.861170][T21596] RAX: ffffffffffffffda RBX: 00007f2f61ba5fa0 RCX: 00007f2f6192ce59 [ 1158.861187][T21596] RDX: 0000200000000040 RSI: 0000000040204706 RDI: 0000000000000003 [ 1158.861204][T21596] RBP: 00007f2f5fb86090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.861219][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.861233][T21596] R13: 00007f2f61ba6038 R14: 00007f2f61ba5fa0 R15: 00007fff1f49e238 [ 1158.861270][T21596] [ 1159.037878][T15927] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1159.037916][T15927] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1159.037965][T15927] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1159.078301][T15927] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1159.078349][T15927] usb 10-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 1159.078377][T15927] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.158103][T15927] usb 10-1: config 0 descriptor?? [ 1159.159147][T21590] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1159.690271][ T5709] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1159.770710][T21609] FAULT_INJECTION: forcing a failure. [ 1159.770710][T21609] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.770741][T21609] CPU: 1 UID: 0 PID: 21609 Comm: syz.1.5162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1159.770765][T21609] Tainted: [L]=SOFTLOCKUP [ 1159.770771][T21609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1159.770782][T21609] Call Trace: [ 1159.770789][T21609] [ 1159.770798][T21609] dump_stack_lvl+0xe8/0x150 [ 1159.770821][T21609] should_fail_ex+0x46b/0x600 [ 1159.770850][T21609] should_failslab+0xa8/0x100 [ 1159.770873][T21609] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1159.770894][T21609] ? __alloc_skb+0x1d0/0x7d0 [ 1159.770916][T21609] ? lockdep_hardirqs_on+0x7a/0x110 [ 1159.770946][T21609] __alloc_skb+0x1d0/0x7d0 [ 1159.770968][T21609] ? netlink_ack_tlv_len+0x6c/0x210 [ 1159.770995][T21609] netlink_ack+0x146/0xa50 [ 1159.771019][T21609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1159.771040][T21609] ? ref_tracker_free+0x673/0x820 [ 1159.771072][T21609] ? __netlink_deliver_tap+0x636/0x8b0 [ 1159.771097][T21609] ? netlink_unicast+0x754/0x920 [ 1159.771119][T21609] ? netlink_sendmsg+0x813/0xb40 [ 1159.771134][T21609] ? sock_write_iter+0x308/0x410 [ 1159.771150][T21609] ? vfs_write+0x629/0xba0 [ 1159.771180][T21609] netlink_rcv_skb+0x2b6/0x4b0 [ 1159.771206][T21609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1159.771230][T21609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1159.771254][T21609] ? lockdep_hardirqs_on+0x7a/0x110 [ 1159.771294][T21609] netlink_unicast+0x780/0x920 [ 1159.771325][T21609] netlink_sendmsg+0x813/0xb40 [ 1159.771347][T21609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.771365][T21609] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1159.771388][T21609] ? __pfx_aa_file_perm+0x10/0x10 [ 1159.771407][T21609] ? aa_sock_msg_perm+0x122/0x200 [ 1159.771426][T21609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.771441][T21609] sock_sendmsg_nosec+0x13a/0x180 [ 1159.771462][T21609] sock_write_iter+0x308/0x410 [ 1159.771482][T21609] ? __pfx_sock_write_iter+0x10/0x10 [ 1159.771516][T21609] vfs_write+0x629/0xba0 [ 1159.771544][T21609] ? __pfx_vfs_write+0x10/0x10 [ 1159.771576][T21609] ? __fget_files+0x2a/0x420 [ 1159.771602][T21609] ksys_write+0x156/0x270 [ 1159.771627][T21609] ? __pfx_ksys_write+0x10/0x10 [ 1159.771655][T21609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.771673][T21609] do_syscall_64+0x174/0x580 [ 1159.771698][T21609] ? trace_irq_disable+0x3b/0x140 [ 1159.771716][T21609] ? clear_bhb_loop+0x40/0x90 [ 1159.771736][T21609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.771753][T21609] RIP: 0033:0x7ff54adfce59 [ 1159.771768][T21609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.771782][T21609] RSP: 002b:00007ff549056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1159.771799][T21609] RAX: ffffffffffffffda RBX: 00007ff54b075fa0 RCX: 00007ff54adfce59 [ 1159.771812][T21609] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 1159.771823][T21609] RBP: 00007ff549056090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.771834][T21609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.771844][T21609] R13: 00007ff54b076038 R14: 00007ff54b075fa0 R15: 00007ffcbb600468 [ 1159.771869][T21609] [ 1159.913652][ T5709] usb 9-1: Using ep0 maxpacket: 8 [ 1160.144974][ T5709] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1160.146429][ T5709] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.146612][ T5709] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1160.152819][ T5709] usb 9-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 0.40 [ 1160.152914][ T5709] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.152939][ T5709] usb 9-1: Product: syz [ 1160.152956][ T5709] usb 9-1: Manufacturer: syz [ 1160.152973][ T5709] usb 9-1: SerialNumber: syz [ 1160.771128][ T5709] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1161.193415][ T5709] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1161.201945][ T5709] snd_usb_podhd 9-1:1.0: Line 6 POD HD300 found [ 1161.201972][ T5709] usb 9-1: selecting invalid altsetting 5 [ 1161.201989][ T5709] snd_usb_podhd 9-1:1.0: set_interface failed [ 1161.220778][ T5709] snd_usb_podhd 9-1:1.0: Line 6 POD HD300 now disconnected [ 1161.222532][ T5709] snd_usb_podhd 9-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 1161.294585][ T5709] snd_usb_podhd 9-1:1.1: Line 6 POD HD300 found [ 1161.294606][ T5709] usb 9-1: selecting invalid altsetting 5 [ 1161.294619][ T5709] snd_usb_podhd 9-1:1.1: set_interface failed [ 1161.321798][ T5709] snd_usb_podhd 9-1:1.1: Line 6 POD HD300 now disconnected [ 1161.322134][ T5709] snd_usb_podhd 9-1:1.1: probe with driver snd_usb_podhd failed with error -22 [ 1161.397453][ T5709] snd_usb_podhd 9-1:1.2: Line 6 POD HD300 found [ 1161.397481][ T5709] usb 9-1: selecting invalid altsetting 5 [ 1161.397498][ T5709] snd_usb_podhd 9-1:1.2: set_interface failed [ 1161.405772][ T5709] snd_usb_podhd 9-1:1.2: Line 6 POD HD300 now disconnected [ 1161.406285][ T5709] snd_usb_podhd 9-1:1.2: probe with driver snd_usb_podhd failed with error -22 [ 1161.418484][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1161.542784][ T5709] usb 9-1: USB disconnect, device number 27 [ 1161.543056][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1161.574640][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1161.621941][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1161.626755][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1161.972394][T15927] usbhid 10-1:0.0: can't add hid device: -71 [ 1161.972528][T15927] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1162.197273][T15927] usb 10-1: USB disconnect, device number 27 [ 1162.299906][T21539] udevd[21539]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1162.752442][ T40] INFO: task syz.7.4553:19587 blocked for more than 143 seconds. [ 1162.752473][ T40] Tainted: G L syzkaller #0 [ 1162.752487][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1162.752498][ T40] task:syz.7.4553 state:D stack:28056 pid:19587 tgid:19586 ppid:17133 task_flags:0x400140 flags:0x00080002 [ 1162.752575][ T40] Call Trace: [ 1162.752584][ T40] [ 1162.752598][ T40] __schedule+0x16f9/0x5500 [ 1162.752653][ T40] ? do_raw_spin_lock+0x12b/0x2f0 [ 1162.752693][ T40] ? __pfx___schedule+0x10/0x10 [ 1162.752736][ T40] ? schedule+0x90/0x360 [ 1162.752772][ T40] schedule+0x164/0x360 [ 1162.752807][ T40] cgroup_lock_and_drain_offline+0x516/0x650 [ 1162.752848][ T40] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1162.752874][ T40] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1162.752904][ T40] ? bpf_lsm_capable+0x9/0x20 [ 1162.752926][ T40] ? security_capable+0x7e/0x2c0 [ 1162.752959][ T40] cgroup1_get_tree+0xa2/0x8a0 [ 1162.752999][ T40] ? bpf_lsm_capable+0x9/0x20 [ 1162.753025][ T40] vfs_get_tree+0x92/0x2a0 [ 1162.753063][ T40] do_new_mount+0x341/0xd30 [ 1162.753089][ T40] ? apparmor_capable+0x126/0x170 [ 1162.753126][ T40] ? __pfx_do_new_mount+0x10/0x10 [ 1162.753154][ T40] ? ns_capable+0x89/0xe0 [ 1162.753192][ T40] ? path_mount+0x690/0x10e0 [ 1162.753218][ T40] ? user_path_at+0xd4/0x160 [ 1162.753262][ T40] ? user_path_at+0xd4/0x160 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1162.753296][ T40] __se_sys_mount+0x31d/0x420 [ 1162.753330][ T40] ? __pfx___se_sys_mount+0x10/0x10 [ 1162.753366][ T40] ? __x64_sys_mount+0x20/0xc0 [ 1162.753395][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.753422][ T40] do_syscall_64+0x174/0x580 [ 1162.753457][ T40] ? trace_irq_disable+0x3b/0x140 [ 1162.753484][ T40] ? clear_bhb_loop+0x40/0x[ 1162.753484][ T40] ? clear_bhb_loop+0x40/0x90 [ 1162.753514][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.753538][ T40] RIP: 0033:0x7f39ba65ce59 [ 1162.753559][ T40] RSP: 002b:00007f39b88b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1162.753585][ T40] RAX: ffffffffffffffda RBX: 00007f39ba8d5fa0 RCX: 00007f39ba65ce59 [ 1162.753604][ T40] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 1162.753621][ T40] RBP: 00007f39ba6f2d6f R08: 0000200000000180 R09: 0000000000000000 [ 1162.753638][ T40] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000 [ 1162.753654][ T40] R13: 00007f39ba8d6038 R14: 00007f39ba8d5fa0 R15: 00007ffd06ff8768 [ 1162.753690][ T40] [ 1162.753769][ T40] [ 1162.753769][ T40] Showing all locks held in the system: [ 1162.753783][ T40] 1 lock held by khungtaskd/40: [ 1162.753797][ T40] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1162.785653][ T40] 2 locks held by klogd/4969: [ 1162.785721][ T40] #0: ffff88803633e108 (&u->lock){+.+.}-{3:3}, at: unix_dgram_sendmsg+0x907/0x18d0 [ 1162.785895][ T40] #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1162.786051][ T40] 1 lock held by udevd/4980: [ 1162.786084][ T40] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 1162.786296][ T40] 2 locks held by getty/5368: [ 1162.786350][ T40] #0: ffff888036bae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1162.786506][ T40] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1162.786724][ T40] 2 locks held by syz-executor/15220: [ 1162.786766][ T40] #0: ffff88805e06e0d0 (&type->s_umount_key#58){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 1162.786943][ T40] #1: ffff8880b8642d18 (&pcp->lock){+.+.}-{3:3}, at: free_unref_folios+0x120a/0x1980 [ 1162.803131][ T40] 9 locks held by syz-executor/19673: [ 1162.803181][ T40] #0: ffffffff8e29d2b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1162.803385][ T40] #1: ffff88805f9f1f30 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70 [ 1162.803578][ T40] #2: ffff888037ec62b0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70 [ 1162.803833][ T40] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1162.803987][ T40] #4: ffff888066a68a18 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1162.804147][ T40] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1162.804295][ T40] #6: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1162.804443][ T40] #7: ffff88802b9b3898 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x5ae/0x5550 [ 1162.804626][ T40] #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock_nested+0x1de/0x3f0 [ 1162.829868][ T40] 3 locks held by syz-executor/19806: [ 1162.829930][ T40] #0: ffffffff8e29d2b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 1162.830120][ T40] #1: ffff88803854e2b0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x184/0x1d70 [ 1162.830274][ T40] #2: ffff888038d0ba30 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x272/0x1d70 [ 1162.830474][ T40] 9 locks held by kworker/u8:54/21336: [ 1162.830507][ T40] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1162.830682][ T40] #1: ffffc9000f507c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1162.830854][ T40] #2: ffff88805c066310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1162.830993][ T40] #3: ffff88803cc39120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1162.831188][ T40] #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1162.847081][ T40] #5: ffff8880b8736e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 1162.847253][ T40] #6: ffff8880b873b8a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1162.847432][ T40] #7: ffff8880b8724500 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1162.847616][ T40] #8: ffff8880b873b8a0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1162.847793][ T40] 6 locks held by kworker/u8:59/21338: [ 1162.847834][ T40] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1162.848006][ T40] #1: ffffc9000f527c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1162.848182][ T40] #2: ffff8880320ce310 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 1162.848364][ T40] #3: ffff88802c60f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 1162.848531][ T40] #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1162.869648][ T40] #5: ffff8880b8736e90 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0 [ 1162.869859][ T40] 2 locks held by kworker/u8:61/21341: [ 1162.869900][ T40] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1162.870107][ T40] #1: ffffc9000f547c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1162.870289][ T40] 4 locks held by syz.6.5160/21605: [ 1162.870323][ T40] #0: ffff88804008ba30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 1162.870486][ T40] #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1162.870641][ T40] #2: ffff88803f884298 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1162.870781][ T40] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1162.870952][ T40] 2 locks held by modprobe/21629: [ 1162.870992][ T40] #0: ffff888038d09f30 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x237/0x4f0 [ 1162.871169][ T40] #1: ffff888034604248 (&mapping->i_mmap_rwsem){++++}-{4:4}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1162.895649][ T40] [ 1162.895706][ T40] ============================================= [ 1162.895706][ T40] [ 1162.895804][ T40] NMI backtrace for cpu 1 [ 1162.895857][ T40] CPU: 1 UID: 0 PID: 40 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1162.895949][ T40] Tainted: [L]=SOFTLOCKUP [ 1162.895971][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1162.896024][ T40] Call Trace: [ 1162.896047][ T40] [ 1162.896058][ T40] dump_stack_lvl+0xe8/0x150 [ 1162.896135][ T40] nmi_cpu_backtrace+0x274/0x2d0 [ 1162.896214][ T40] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1162.896244][ T40] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1162.896309][ T40] sys_info+0x135/0x170 [ 1162.896365][ T40] watchdog+0xfd3/0x1030 [ 1162.896399][ T40] ? watchdog+0x1c9/0x1030 [ 1162.896506][ T40] kthread+0x388/0x470 [ 1162.896587][ T40] ? __pfx_watchdog+0x10/0x10 [ 1162.896648][ T40] ? __pfx_kthread+0x10/0x10 [ 1162.896713][ T40] ret_from_fork+0x514/0xb70 [ 1162.896797][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 1162.896870][ T40] ? __switch_to+0xc79/0x1410 [ 1162.896941][ T40] ? __pfx_kthread+0x10/0x10 [ 1162.897012][ T40] ret_from_fork_asm+0x1a/0x30 [ 1162.897129][ T40] [ 1162.897290][ T40] Sending NMI from CPU 1 to CPUs 0: [ 1162.897396][ C0] NMI backtrace for cpu 0 [ 1162.897414][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1162.897439][ C0] Tainted: [L]=SOFTLOCKUP [ 1162.897447][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1162.897459][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1162.897487][ C0] Code: e8 de 35 7a fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f e1 e4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1162.897504][ C0] RSP: 0018:ffffc900001679f0 EFLAGS: 00000202 [ 1162.897521][ C0] RAX: 1ffffffff33c2000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1162.897535][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1162.897546][ C0] RBP: ffffffff99e102d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.897559][ C0] R10: dffffc0000000000 R11: ffffffff854b6470 R12: dffffc0000000000 [ 1162.897574][ C0] R13: 0000000000000000 R14: ffffffff99e10040 R15: 0000000000000000 [ 1162.897586][ C0] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 1162.897602][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.897615][ C0] CR2: 00007f2f626d56b8 CR3: 0000000037af8000 CR4: 00000000003526f0 [ 1162.897632][ C0] DR0: 0000000000000005 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 1162.897644][ C0] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1162.897656][ C0] Call Trace: [ 1162.897663][ C0] [ 1162.897672][ C0] wait_for_lsr+0x1aa/0x2f0 [ 1162.897700][ C0] serial8250_console_write+0x114b/0x1b50 [ 1162.897731][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1162.897760][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1162.897786][ C0] ? console_flush_one_record+0x48f/0xb90 [ 1162.897809][ C0] console_flush_one_record+0x68b/0xb90 [ 1162.897834][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1162.897857][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1162.897880][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1162.897911][ C0] legacy_kthread_func+0x1b6/0x250 [ 1162.897933][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1162.897953][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1162.897974][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1162.898008][ C0] kthread+0x388/0x470 [ 1162.898029][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1162.898048][ C0] ? __pfx_kthread+0x10/0x10 [ 1162.898068][ C0] ret_from_fork+0x514/0xb70 [ 1162.898091][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1162.898113][ C0] ? __switch_to+0xc79/0x1410 [ 1162.898131][ C0] ? __pfx_kthread+0x10/0x10 [ 1162.898152][ C0] ret_from_fork_asm+0x1a/0x30 [ 1162.898185][ C0] [ 1162.937998][ T40] Kernel panic - not syncing: hung_task: blocked tasks [ 1162.938072][ T40] CPU: 1 UID: 0 PID: 40 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1162.938163][ T40] Tainted: [L]=SOFTLOCKUP [ 1162.938186][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1162.938221][ T40] Call Trace: [ 1162.938231][ T40] [ 1162.938255][ T40] vpanic+0x56c/0xa60 [ 1162.938346][ T40] ? __pfx___schedule+0x10/0x10 [ 1162.938407][ T40] ? __pfx_vpanic+0x10/0x10 [ 1162.938521][ T40] panic+0xc5/0xd0 [ 1162.938608][ T40] ? __pfx_panic+0x10/0x10 [ 1162.938701][ T40] ? preempt_schedule_thunk+0x16/0x40 [ 1162.938824][ T40] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1162.938919][ T40] watchdog+0x102c/0x1030 [ 1162.939032][ T40] ? watchdog+0x1c9/0x1030 [ 1162.939128][ T40] kthread+0x388/0x470 [ 1162.939195][ T40] ? __pfx_watchdog+0x10/0x10 [ 1162.939250][ T40] ? __pfx_kthread+0x10/0x10 [ 1162.939323][ T40] ret_from_fork+0x514/0xb70 [ 1162.939405][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 1162.939479][ T40] ? __switch_to+0xc79/0x1410 [ 1162.939539][ T40] ? __pfx_kthread+0x10/0x10 [ 1162.939585][ T40] ret_from_fork_asm+0x1a/0x30 [ 1162.939664][ T40] [ 1162.940292][ T40] Kernel Offset: disabled