last executing test programs: 5m11.075182503s ago: executing program 1 (id=1201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x141a82, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0xa, 0xb9, 0x3, 0x8e, 0x5, 0x204}, {0xffff967e, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0xbaf7}, {0x1, 0x3, 0x38, 0xb, 0x84, 0x7, 0x43, 0x50, 0x0, 0x5, 0x4, 0x5, 0x7ffffff7}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 5m10.861403514s ago: executing program 1 (id=1202): mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000003a80)={{0x12, 0x1, 0x310, 0x5d, 0xeb, 0x24, 0x40, 0xbc2, 0x3010, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1f, 0x0, 0x10, [{{0x9, 0x4, 0xc7, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb}}]}}]}}, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 5m9.578366136s ago: executing program 1 (id=1210): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/59, 0x0, 0x4000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r2, 0x731, 0x2000000, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x20, 0x10, 0xffffffff, 0x400, {{0xf, 0x4, 0x1, 0x2e, 0x3c, 0x65, 0x0, 0xa, 0x2f, 0x0, @empty, @local, {[@ssrr={0x89, 0x17, 0x98, [@broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote]}, @rr={0x7, 0xf, 0x61, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1]}]}}}}}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/89, 0x59}], 0x1, &(0x7f0000000740)=""/156, 0x9c}, 0x2041) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmsg$nl_xfrm(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2c, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x6e6bba, 0x0, 0x0, 0x6, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r9 = socket$inet6(0x2d, 0x2, 0x0) accept4$inet6(r9, 0x0, 0x0, 0x80800) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000300)={0x2, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000800)={r11, @in={{0x2, 0x4e22, @multicast2}}, 0x40, 0x9}, 0x90) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000140}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x2c, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000180)=0x0) 5m9.563866001s ago: executing program 1 (id=1211): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x400, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x980) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x200) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r11, 0x5452, &(0x7f0000000040)=0x8001) r12 = getpgid(0x0) fcntl$setownex(r11, 0xf, &(0x7f0000000140)={0x2, r12}) r13 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) ptrace$pokeuser(0x6, r13, 0xd8, 0x0) syz_clone3(&(0x7f00000085c0)={0x0, &(0x7f00000073c0)=0xffffffffffffffff, &(0x7f0000007400), &(0x7f0000007440), {0x32}, &(0x7f0000007480)=""/214, 0xd6, &(0x7f0000007580)=""/4096, &(0x7f0000008580)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r0}}, 0x58) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000008640)=0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000008680)=0x0) r17 = getpgid(0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f00000089c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="64bf8a6a442c5ad074b8d9b9d6a24b4c3b463e3943b7bebaa96af6fbaf5e2e4604dbbc94f024225963a475e225ec8eb707f05e8df98f0766b02b85a6cdf346fdfcd9566e0c8705f58c4cadbea061b1ea6d1146bfd01cea0120ef8acadd6bda677d56d2683d721d563d9048bc2db14f9280abb5cac042d53121fed96a315d6201e8fd54370f8c89e50611c876b11ecb16f559950d580a9ce1a18e", 0x9a}], 0x1, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r2, r2, r1, r2]}}], 0x70, 0x800}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000740)="58faf821f7db350a47e9e6be43a480e44a005bf7051e444bb73eec52c9d2b5113050179cb61d44956da247a31bb005b63a21707dbc87aa6b57bf4b5040fee40a99a0d54f776cf373b3d5120269004df6b3926dde52dd1a09fa01116fea5f111d8389f8b7382d48c1e72eeaf37f55fb64be5b23452f7c30bfddfbd73743108071d977df3266be54d66edf53c25277270bbec322832593b295e7d0939a81ae627f466293186462c06462593ac7854bfc18bd27a64a82fa467796427de7591f217cad00358157ed358652216a168fd74e984d5839a5de456c450abfd65881d14de5b94bb778b42a4b0b21cc59", 0xeb}, {&(0x7f0000000840)="2f9412c468f569bc7db206201af8411cfcfda13cc7d60234368570005fe1086ef948cc5948f38b6313f6d17d0425185264d83f65a4258f20794858d6547115e429679872f680053f4d2fdc1d498f9414b2e40e54d213257e8bc097b8d174be90b57c111fb4bf5b3df9a159f80b5472dbf15cc6a6f1352046c79982929e6a795a810679184a93e7f41af3ce6207f9d700762860fe7731484d9fedd1a57e75b9e1e47a1466d25e051db5c924d56a0af65dea27b2ba042c54938c9b3dbee7898f36494bc5a290132d4f3ee5f5854f5ad16fd8535aad8347fa50313079475b418abcc5297d2d4615", 0xe6}, {&(0x7f0000000940)="203b5936b123f0e4e0792d620dbaf06162e7f621ac343f2ab2bd79f1984c6eaab47bb88fbd2f63a7981a26321434283c1029531fa2ea7846783575f9ff9711222099e0f71c5e26d7c33030dabe473d017140a479d76a30cf570e073cb287370293ecc11b608a56f4f20d21370a31082c9e805602ac31504755c25d275f827fdb94f509", 0x83}, {&(0x7f0000000a00)="cf7b0e760940ac9b9048408a40b64ff8f2c03b5c219df75465917fd76ee4683d2f6cb25691b400b12b898896160623aadcb7b04ad17b34b8f2b9f6ad1cf6bf739eec7e1ae9b54acbf991699f36d8d40b43539dba1f99570a6f9d869d4f2dd2e9a053ccd4be59c94176102514e079ceafccd396af7df2b2c42a100f2c507f9f510b2e9ea15c5facd44146f1008e1c88294bfca2a39bb088a16c8548327a90a35b96be7015519156fa0c", 0xa9}, {&(0x7f00000004c0)="b67f15082b7c65c0c170b40f7a", 0xd}], 0x5, 0x0, 0x0, 0x408a5}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f0000000b40)="8eb62ba64a62467837cc993f54c7172cb9d0a6d1de96d43364e82223ebcb394c54a725dad0331bc21e535fc4b8c2e951f5fc2fb1098544c532cf1693f488aa169bdf1e2b25416a30ceff79ae52cf70993c2dd1f6e398ce109cc3c7958462d2ad809afca23fc01e32cdda49e678267e3e24eb7f7ff5faa52bda7e0ed487055227d7b1fc993649ab1bb4e3a5e154dd8554b8e141503c48a12bac4684e02b", 0x9d}, {&(0x7f0000000c00)="b23881451fd7ba833c13bcfcbfc698c802a2946e610d8f1fdecbd7b7408b9c7471e828eef7840974b7762be9b0378d3db056896fc39c6cd3a9a4ea3c10b1be113b240062c34261ce56f173c921b7d7dad505dcf933625780a500925ac9f29feabaa5f31e388acbcfc7b7e933b973bb9af7e5e919ce62b672e610473bc8950b06dc9b454571f93ca58dcd12b72af067a6993e8ad321ba0c6a07f97a81361fe43b0f212e927862f837aa519adbb46230", 0xaf}, {&(0x7f0000000cc0)="ebedf5fcdff0fe4a5aeea2b4f3caff8fd718296d1c46537f5993044c3c253c041c2408f3a70feb0f4b0fbcbee0c7b94956e055ec24d94f4280e6783d0bb7309139971127f38a68985cf6e3cf945c78829ee7018f8d15d2d70c9afb983f1d7316e6815e01ffda3559d5f44f70d2e0ea17a5438c7b190725d5903927184c1a990e1f4034c10c48a9432cb29cf22ed58738bf13b9", 0x93}, {&(0x7f0000000d80)="1dce2077a86284514d33f2572603d6ee36472e3044a39b1b735dbb12392b7d46b756b30195bc1df3fa5df9e1514cb2b671e01d770ba87a7d5da2f28b98f8614b2f1632b87d93fcf56521ea4587630f0b528c886b3b2b7b561d71178339949ea586dd72a857b3882a886cb250ca9275959d87412bc6afffbf389039354f3b7516bc9889afb5bae0ad9ba661b6aefea1812e76a2455f3d9990cc61deec5823b6c563", 0xa1}, {&(0x7f0000000e40)="d1a510", 0x3}], 0x6, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x1c, 0x1, 0x1, [r8, r7, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}], 0x80, 0x40080}}, {{&(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000001040)="99e62bd4e611b52705cb0aef195243693ca5381a6684ae88e83266fdc655aa221305505bf96b4be5911543a518383c9af79e43cf7b8beadb95623c4c87bbfa9f814af7a422a9089806ad5b2604d45244c0c0bd49e1ecd3afeba32e4e412ecc36c6e333ce5735ffa7648dbdbedecc0922b5e120f7f27a73c15ed15ca944418bd79ea5b93a833cb25cb86b560ce5d0ea63ba1e68606161a3ef9c17f3a8322d71de39f382c4d594c019e98c1edb008dfc", 0xaf}], 0x1, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x2c, 0x1, 0x1, [r7, r5, 0xffffffffffffffff, r0, r8, r9, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, r8, r1, r2, r0, r9, r8, r7]}}], 0xa0, 0x800}}, {{&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006580)=[{&(0x7f0000006440)="70073ad65ddd4973b98ceed1ce28ef969485a44467b90fc21710a1911d456a4b778caf77cac0e4a3c2ece4d0aef06aaf035ea11dd159503b81af8539bab55b0c7a8947a9f2c7bf73650634d640f527a1370b5cbaf50608e3d8305b2a124961d48739782a3d5af40596925346fb6f3aad2502610dc189bf4bff888c3e2c57a5ddbb09ae4bfd185f4452ee619032ceb8d3dbe08607c52737ec8f562573998f8b875cce7fb72516c2e31eed8b3972da5bf319ee76b85ced807b332b6ec2bfea5ca74ca7002946c6bcecbac237f7f77a70e638ae608944d38dab4bd547cb0340f6c59d258e8b79d08c64e2af", 0xea}, {&(0x7f0000006540)="f4bb1081d07dfe0378fa0f31c000a988b02cd46d211b5befafe618951edb677340f69ee50f89", 0x26}], 0x2, &(0x7f0000006640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}], 0x40, 0x24000840}}, {{&(0x7f0000006680)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000006700)="1c46f5dfb2438777b8340e1151cad5cb643f33f18d25dc58814cf3e2c2206d6d34da61a5d4c04cf88cd0f7a7678776cae0", 0x31}, {&(0x7f0000006740)="5187c044141b7ee5dd4a0f930f33d1d420b2aacf8eab76b18f06b4a824d876220946a266d806f4907843f5ccab283b91abf6658928882c6798ad357c4ae3799e4fe815cf1bfd8be2e3c26ecc86f23a7a433502105f70944f7ff18836ae5c86299e545b77d2f4edca748f10b37903c5794e69a4d22886caaba0048814928dc81be46f7d2fe02d3432187f7b2859e9b88806f41bf4dd3c2c90a5f274ab802bd0cf8773264b4fcf4fc53c2cb9bcbfa54e906fd84948ba47a77c26839332a6acc2fe2d8e0a39e7fb0acf135617d24551e09cd40c02a96b887c30791da50d", 0xdc}, {&(0x7f0000006840)="2f8dd845e88479bdce5d5053610a9196d9ce492e8ba47e655327150ecefe67a91a78b0a1d20051f72e94f6dd9c3d797e4063ad5540fb3a3240c8fb389acc810d2dc839a02188ea99f72dc332236ae3c3d3ca56eda2901fcdb07c33062dc4a3a2ac77e3a4c6136d5bb912e4837c474e246f64ed0da35a95ce1846c571ca36ace7f58bc5057f0e62e98e5fb0b289df370cb2fe0c7677d3c2a4d3e209adec1bed44bc1734782e57f688ca9f1c551bb0bf82f4dfcd49c3", 0xb5}, {&(0x7f0000006900)="cf2ead46776d195540211ea16f8788d543aa485bc61d0e999e06409a3acf8c999b91eb6fc8125509482d072a71341c74f2794c4551d3d3fa9df6b929d0b40b51723a9a1ee344640d5c2b19727515188bacb840ce22eddcef25f7370a44dffa7b68d894d73efa3ff3f399cf59836a603184e024e67a9bd5f3001855dca6d6c78075160b111d327879030995eea06237adb953832c54e1c261bf704fb1595597fceac1028f97639ed551f9a7ae6eef84028fd1eaa13b072548776cc3dc30960a15c24188ae636bfc2b76f7243122bfd87aab62565980fe088107a7369594", 0xdd}, {&(0x7f0000006a00)="79951458d661565a16f8a0724f7dc8521c16d8d6", 0x14}, {&(0x7f0000006a40)="7eefb27dbda1b6845e2178d498a0ff2a5ed2dcf59c64c120c5c1919d7acc69a7949975242e01e01bd85535337e0a22a33837f361b86d2ebc560d2ba29fe9cbd8ce58b2d2da52f7ffc814f60160d8df9befde0d73e90a", 0x56}, {&(0x7f0000006ac0)="69f1b5c377cdfcec1350470e50b241a8319e2deb4f4dbdab77981d825a132fc0b895925097e349cf63cce21713ca11dd580874578c275dd3218e238ec4a2", 0x3e}, {&(0x7f0000006b00)="cb2ddd576f12154d0f0c3e5a29df6826d7f890a36c97f1ee97b63835d21365593b15639a28f977a49a273252ed54d729a4dfb89fa2b03fc1270e96dc818d39a9b91f24ecdde93d8f234c642d5cf21843a69af026020c35494048571d7fc47c413cc837c2ba2529246ce542026e4a79cf501d059afdb602f6d25643d00f123d7005fb51e0ee2499c2bfea98f6f98f380c860368b0", 0x94}, {&(0x7f0000006bc0)="1f5f7ba43d64c9aa3805e8bc5e412f55364369d88b2fd2903916d88ebad60f95e68d2b00324980c967314b1d11976290ceab56377decdbb86c17382c3091233c0e32f2b696d988855379faf3095ee65cb2b7325852e7adcb51a3045a63eced92fd6bf6544c303e0356a44dc62a6022fac9dbb8f343cff353d12ee91122bb7c6f406782815472b48b2066a61b7d805cbce825a2fa18304e7b3ded1253", 0x9c}, {&(0x7f0000006c80)="ed1074f4ab9cb21fd8b84e8a5a537596b0581704b56da4020350b4", 0x1b}], 0xa, &(0x7f0000006e40)=[@rights={{0x28, 0x1, 0x1, [r9, 0xffffffffffffffff, r8, 0xffffffffffffffff, r9, r6]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r6, r5, r2, r6, r8, r9, r7]}}], 0x78, 0x24008041}}, {{&(0x7f0000006ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007100)=[{&(0x7f0000006f40)="ba86f80416ac961e4f14709f860e3dbaf6f343ed263bba4645cf46494c4bf853f9580425a5c64f00083cc4c3f12c0d5d4586f261de1fa890bf8876d234961be52a4d52f5683b2cd35506a8fc0e47f00611cf3eaa37a8a97fb9f38b0875ad9077e12ca51782b148b83f7ba6c8574e3b96ce7d9222ab6979a4fc54636c16a5cd30836456765b69da52635dd22773c01ad5eb53a8658794d835104afd6c42865e997f2a7291fabdff07557d518b086715ce8e9e1da03ca61ba9bedd4b1e694ae8b7e03553078772ee44988cad128e953fbb7f0884207943dec0b1341ab827", 0xdd}, {&(0x7f0000007040)="40c416872f59144cd19ea61bdcc9f418a73d8daada41d5b8f4585c3eb587d6be234d71427de775441c2dd89e59605ce9e2a24356464502cd62b9edfbcf599e77d1cf81fdc436d1a0d370d07892cc155f84", 0x51}, {&(0x7f00000070c0)="bd07561eac5e7441afcce47a747db323f2015cb7c2", 0x15}], 0x3, &(0x7f0000000340)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r8, r6, r10]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r14, r1, r10]}}, @cred={{0x1c, 0x1, 0x2, {r16, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r13, r3, r4}}}], 0x88, 0x4044094}}, {{&(0x7f0000007300)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000007380), 0x0, &(0x7f00000086c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r12, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r13, r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r6, r14, r7, r6]}}, @cred={{0x1c, 0x1, 0x2, {r15, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r16, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r17, r3, r4}}}], 0x120}}, {{&(0x7f0000008800)=@file={0x0, './file2\x00'}, 0x6e, &(0x7f0000008940)=[{&(0x7f0000008880)="4b6b7ff4eff6c8635842ffee80aa254e571686359ada5182bfc467eea737c7cd525e509f1a27f970a9a422cd2c3ef01617e996dadb7218259a8b7ba575a2fbdf1f0162e6572beab5b260045b87e775b6748179f280a64c384d467563bfb630092e9cd59c7d3dd3e5c2074f5c08047f9deb85e9018b43893752b54873fa399799786072881ee2", 0x86}], 0x1, &(0x7f0000008980)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="00000000180000197e0d21d5ccc647f4c0afa621", @ANYRES32=r6, @ANYRES32=r6], 0x30, 0x8010}}], 0x9, 0x20044040) open_by_handle_at(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r8], 0x0) 5m9.45893967s ago: executing program 1 (id=1212): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x208980) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x220401, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000001, 0x101, 0x7, 0x0, 0xfffffffffffffffd, 0xe00, 0x8000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x400, 0x6, 0x0, 0x401, 0x200000010007f, 0xfffffffffffffffe, 0x3, 0x0, 0x60d6, 0x6, 0x1, 0x3, 0xfffffffffffffff5}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES8, @ANYRES16=r2, @ANYRES16=r3], 0x0) 5m8.667839151s ago: executing program 1 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x9a, 0x6, 0x8, 0x2c, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x700, 0x1, 0xee}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x7, 0x10, 0x367f, 0x5, {{0xf, 0x4, 0x1, 0x15, 0x3c, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0xf, "994d6ad74e1fd9e6d71e254395"}, @generic={0x94, 0xf, "792abdecf74051b94c42de5656"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) 5m8.312674041s ago: executing program 32 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x9a, 0x6, 0x8, 0x2c, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x700, 0x700, 0x1, 0xee}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x7, 0x10, 0x367f, 0x5, {{0xf, 0x4, 0x1, 0x15, 0x3c, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x88, 0xf, "994d6ad74e1fd9e6d71e254395"}, @generic={0x94, 0xf, "792abdecf74051b94c42de5656"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) 3m36.012743906s ago: executing program 0 (id=1848): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x50) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0) 3m35.625900302s ago: executing program 0 (id=1849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x2}, 0x15, [0x40000, 0x2000000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, 0x0, 0x0, 0x2, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xd5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa]}, 0x45c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$isdn(0x22, 0x3, 0x11) read(r3, &(0x7f0000000800)=""/149, 0x95) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x16) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x2, 0x800011, 0x6af6, 0x6, 0xa, "84899df67b85d4e19a2d933ddaaa753e83f453"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000580)) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x1, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x48000) r9 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r9) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000740)={[&(0x7f0000000780)='#-}*[&-^!#-\x00', &(0x7f00000005c0)='\x00', &(0x7f00000007c0)='syz0\x00']}, 0x0, 0x1000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) sendmsg$nl_xfrm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a0001"], 0x48}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a30000000004400040020000100"], 0x6c}}, 0x0) 3m35.463306314s ago: executing program 0 (id=1850): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xa8) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$uinput_user_dev(r1, &(0x7f0000001080)={'syz1\x00', {0xc, 0x1, 0x8, 0x140}, 0x1, [0x1, 0x9ff, 0x5, 0x2, 0xbee0, 0x2, 0x0, 0x7ff, 0x2, 0xe80, 0x5, 0x7, 0x4, 0x1, 0x7, 0x7, 0x5, 0x4, 0x7fff, 0x3, 0xc9, 0xbf0, 0x401, 0x5, 0x6, 0x10, 0x2, 0x401, 0xffff7d50, 0x7, 0x0, 0x400, 0x1, 0x4, 0x8, 0x9, 0x9, 0x3, 0x80000001, 0x10000, 0x19c2, 0xf, 0x5, 0x6, 0x57, 0x2, 0x9, 0x6, 0x10, 0x7, 0x497, 0x8, 0x2, 0x3, 0x8d, 0x8, 0x1, 0x0, 0xff, 0x9, 0x7, 0x6, 0x9, 0x401], [0x800, 0x9, 0x3, 0x6, 0x790fc63b, 0x7, 0x1, 0x4, 0x81, 0x4, 0x0, 0xbef2, 0x200, 0x9, 0x6, 0x2, 0x9, 0x0, 0x9, 0x7d, 0xc8f, 0x2, 0xd58f, 0x80000000, 0x7, 0x650, 0x1, 0x6, 0x3c1, 0x7, 0x6, 0x4, 0x5, 0x54, 0x7, 0x1, 0x4bf, 0x2, 0x6, 0x0, 0x4, 0x4, 0x7fffffff, 0x1, 0x6, 0x8, 0x7, 0xffffffb0, 0x3, 0x6, 0x2, 0x600000, 0x2, 0x7, 0x5, 0x4, 0x4, 0x8, 0x3, 0x8, 0x8, 0xa, 0x58a6, 0x80], [0x0, 0x7f, 0x4, 0x7, 0x401, 0x6, 0x3, 0x3, 0xffff, 0x3, 0x4, 0x10, 0x10001, 0x64d3, 0xaf6, 0x1, 0xff, 0x57, 0x3, 0x9, 0xab, 0x5, 0xe5d4, 0x6, 0xae0a, 0x1e5c, 0x1, 0x2, 0x9, 0x9, 0x4bd, 0x3bfe, 0x7, 0x200, 0x7, 0x0, 0x5, 0x3, 0x5, 0x1, 0x40, 0x8, 0x80, 0x7, 0x2, 0xa00000, 0x1, 0x3, 0x6, 0x0, 0x7, 0x0, 0x9, 0x1, 0x26a, 0x9, 0x6, 0x1a6, 0x6846, 0xdb4, 0xfff, 0x5, 0x3, 0x1], [0xfffffffb, 0x9, 0x3, 0x8fa, 0xcd93, 0x0, 0xff, 0xc, 0x6, 0x5, 0xfffffffe, 0x8, 0x5, 0xffffd0c4, 0x10001, 0x6, 0x63, 0x8000, 0x1, 0x0, 0x60c6a455, 0x5, 0x75, 0x5, 0x8, 0x680, 0x4, 0x5, 0x6, 0x0, 0x2, 0x1, 0x9, 0xfffffffc, 0x2, 0xffffff7f, 0x5, 0xffff1f58, 0xffff4e68, 0x87d, 0x6, 0x3, 0x9, 0xa, 0x15, 0x7, 0x57b5e7ad, 0x1, 0x5, 0xffff9902, 0x3400000, 0x7, 0x5, 0x1, 0x9, 0x1, 0x8, 0xe, 0x0, 0x7b38de0d, 0x0, 0xf31e, 0x9, 0x6]}, 0x45c) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x6, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x2}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0xfd, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x6af3, 0x5}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x4}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x6, 0x9}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xc}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {}, @note={0x0, 0x0, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0x8}, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x8}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000400)=[{0x8, 0x53, 0x7, 0x65, @time={0x4, 0x8}, {0x7, 0x1}, {0x6, 0x5}, @raw8={"424a46f27d2a45434e135bda"}}, {0x7, 0x2, 0x64, 0x8, @tick=0x5, {0xc5, 0xf9}, {0x9, 0x16}, @addr={0x7, 0x40}}, {0x88, 0xfd, 0x7a, 0xd, @tick=0x1158, {0x9, 0x6}, {0x4, 0x4}, @connect={{}, {0xf, 0x6}}}], 0x54) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) 3m35.375037415s ago: executing program 0 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000580)={{0x80, 0xfe}, 'port0\x00', 0x511e36599023629, 0x40c58, 0x3, 0x4000002, 0xfffffdff, 0xfffffffe, 0x2, 0x0, 0x5, 0x4}) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)="924ab8995cbcc96e2f9f07077ccadcf5a5aee62cc1996d72df562dc6115e8d38d6a1ca16f1a166e2c717b29dbd04d5cd1d70482f0b118fc1421838c13d3584bef3c1f64ca387fefb834cdea9db24f7804714a2dedcccbac30c5c56b8e46ba27a7710a5117e8925aff6d1e3d978b36ddcd545ede64d4dc3ac04a7d7934c2f8a3dfc5833153f11aae7e25ca9f44a6ce07cfe8bab3472dd934083083909678f7b4c", 0xa0, 0x2) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@empty, @loopback, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x7800, 0x8, 0x6, 0x8, {{0x3b, 0x4, 0x1, 0x3f, 0xec, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@generic={0x82, 0x12, "e8b5b27aa3269223e3764da57f05367f"}, @ssrr={0x89, 0xb, 0xe3, [@rand_addr=0x64010100, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x5e, 0x3, 0x3, [{@rand_addr=0x64010100, 0x1}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x8a, [@loopback, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @remote, @remote]}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x2b, 0xf3, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @loopback, @remote]}, @timestamp_addr={0x44, 0x4c, 0x70, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@private=0xa010102, 0x1}, {@remote, 0x80000001}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@rand_addr=0x64010102, 0x1}, {@broadcast, 0x4}, {@empty, 0xfffffff7}, {@rand_addr=0x64010102}]}, @timestamp={0x44, 0x18, 0xb3, 0x0, 0xf, [0x7, 0xff, 0x6, 0x2, 0x6]}]}}}}}) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000640)="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", 0x1000}], 0x1, &(0x7f0000001640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @loopback}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x64, 0x0, 0xe, [0x0]}]}}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x70, 0x0, 0x5, [0x8, 0x6]}, @rr={0x7, 0x13, 0x8b, [@broadcast, @remote, @multicast1, @local]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x0, 0x7, "661eb8ca4c"}, {0x7, 0x9, "a3018712b081a7"}, {0x1, 0x2}]}, @cipso={0x86, 0x63, 0x3, [{0x2, 0x11, "cd5c3e47fb8543aacc7312f8ca5186"}, {0x5, 0xc, "9f2c671fc56dfc099eff"}, {0x0, 0x5, "201e33"}, {0x7, 0x9, "a38205efdb984c"}, {0x1, 0x10, "5b2c0a15ffe9ab6f3262b9490eb7"}, {0x1, 0xe, "36a0463577402166b0c0bed7"}, {0x1, 0x8, "31f60cb6e6f4"}, {0x6, 0xc, "75940c966069430bdc64"}]}, @rr={0x7, 0x7, 0x18, [@loopback]}]}}}], 0x140}, 0x4040000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x100000a, 0x8, 0x5}, &(0x7f0000000080)=0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 3m35.209828364s ago: executing program 0 (id=1852): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x42003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000280)=[{0x0, 0x2000, 0xfff5, 0x0}, {0x40, 0x0, 0x0, 0x0}], 0x2}) 3m34.975351766s ago: executing program 0 (id=1853): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="08001000", @ANYRES32=r0], 0x28}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, @vifc_lcl_addr=@private=0xa010101, @multicast2}, 0x10) 3m34.682168852s ago: executing program 33 (id=1853): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="08001000", @ANYRES32=r0], 0x28}], 0x1}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, @vifc_lcl_addr=@private=0xa010101, @multicast2}, 0x10) 2m24.014542131s ago: executing program 3 (id=2252): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905e3abd4c8251357b9b3b5e52df8a9d14ea5770fa24b", @ANYRES8], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 2m22.301691994s ago: executing program 3 (id=2262): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x20, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 2m22.106786981s ago: executing program 3 (id=2264): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x20000000) 2m21.91344212s ago: executing program 3 (id=2268): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x98}}, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000280)=@get={0x1, &(0x7f0000000240)=""/49, 0x1}) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) read$FUSE(r2, &(0x7f0000005140)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002f80)={0x2020}, 0x206e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x8a}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xf4, 0xe000, 0x41, 0x21, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x13}}}}}}}, 0x26) 2m21.332284783s ago: executing program 3 (id=2273): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x6, 0x6, 0x9, 0x3, 0x4}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) mkdirat(r4, &(0x7f0000000400)='./bus\x00', 0x19) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x82) 2m21.084462833s ago: executing program 3 (id=2275): socket(0x2b, 0x80801, 0x1) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a004000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}}, 0x0) 2m4.783406772s ago: executing program 34 (id=2275): socket(0x2b, 0x80801, 0x1) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060803b"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a004000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}}, 0x0) 55.874394995s ago: executing program 6 (id=2623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x15, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@tipc_packet={0x0, 0x6, "f4d4a7", 0x224, 0x6, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[@fragment={0x5e, 0x0, 0xe4, 0x1, 0x0, 0x4, 0x68}, @hopopts={0xc5, 0x1f, '\x00', [@ra={0x5, 0x2, 0xc}, @generic={0x40, 0xf5, "209846ad9576523a2562ef04406f384bd7ceb7efef9cfa1f44c0cafe9035a2f54f6305cd50fd2d454a552293b2874f930bfd72ea5face2d3a4f4cc5aca50e3f1d363aacdcb351b7a55d9f4ba6de93527e86f736476f8fa9846a3864dc8722b9bf9d6c3441a4e5504c619c8aa6ed27589776c77e3ab7a67aa250b56b758bafa5b57d64f74a216de3b1fe78dac3cefe189eaffc4788ce346fc046b5425c422b071ff8f07b4a216d277f72c3750729c787e0a63bdaf2c4d7368ac26d60cfa321e1d6d5230af92042d7be43dac6e29f7248c251e4bb1c49b476318fed251b54f513eb53066ec897dda84815e3015d90a56ea0955ea76e3"}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x0, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xb9}, @pad1, @hao={0xc9, 0x10, @empty}, @pad1]}, @routing={0x29, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}]}, @fragment={0x84, 0x0, 0x7f, 0x0, 0x0, 0x16, 0x68}, @srh={0x1, 0x8, 0x4, 0x4, 0x8, 0x48, 0x4, [@local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x1, 0x0, 0x1, 0x6, 0x100, 0x2, 0x4e24, 0x4e23, 0x2, 0x3}, [{0x9, 0x2, 0x8, 0x2, 0x4, 0x1, 0x6, 0x5}, {0x0, 0x8, 0xfff, 0x4, 0x10000, 0x91f, 0xd, 0xb9}, {0xef, 0x7f, 0x81, 0x8, 0x100, 0x1, 0x5, 0xb}]}}}}}, 0x25a) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_clone(0x2226000, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB='mpol=Bind=st`tic:7-N:N/7']) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0xa, {0x2, 0x4e20, @rand_addr=0x64010100}, 'veth1_macvtap\x00'}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x1e, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r4 = inotify_init() r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x10000006, @remote}}}, 0x108) 52.197893733s ago: executing program 6 (id=2639): open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1301"], 0x16) 51.803658698s ago: executing program 6 (id=2640): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x0, 0x0, 0x3, 0x0, 0x9}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = dup(r2) ioctl$HIDIOCSREPORT(r3, 0x400c4808, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0xc4c03d16, 0x0) connect$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x1ff, @mcast1, 0x2}}, 0x24) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) memfd_secret(0x4b17fffefa466180) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) kexec_load(0x5e, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x6, 0xfffffffffffffffb}], 0x0) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 51.759124538s ago: executing program 6 (id=2641): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="1201000000008040ac054382408b0b00000909022400010000002009040000fd0301200641999e790000095e0000000122e039a0e1750b7f1f0b"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, 0x0) r6 = accept4$alg(r2, 0x0, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmmsg$alg(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011}], 0x1, 0x2004001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0x41}]) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x20, 0xf, 0x1d, {0x1d, 0x8, "1af70160d21a4ba761360ed88786603263045a0992f3b8dfb3fef5"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}, &(0x7f0000000180)={0x0, 0xf, 0xf4, {0x5, 0xf, 0xf4, 0x4, [@generic={0x86, 0x10, 0x1, "70444482e730c2973d2ec4309e07286f37727da333bcb42feec69d87bcfde76da1673f64eb2526b58b0bf0653234c68cc2cca306bab2b92f6d8e6867d7036988849762a998ed9877d9242d71fbb3119dbd323502c601d122451d879cc90a702be7989c688641fc0487758c409d6ea5afc26884744a39109ec29c18c4ea5e49e4b1ab86"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x7, 0xf}, @generic={0x5f, 0x10, 0x1, "c16e0662f356880edd1a9c4ca4b570524a526239d4257fd9b86b0e4b5d33e28f490d53111bf008b77cdd6358de468bb2a3a254c60987678de6a837811e55250dd4d2885f56806c6b63e129bc6593bedc3ef2b2438934abaa422bff2b"}, @ptm_cap={0x3}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd5, 0x10, 0xa1, 0x1, "a4e3a42a", "2a530e5d"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0x8, 0x9, 0x87, 0x55, 0x9}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0x31, 0x79, "0777133a45dbe92efd4faec8abd9ad9ecb51120f25d767bc52f506be95ea19189d287f48b7991bdd921267d37e9b09c0b1dd44551551e6063cbe70d23090a8f7cb5bd6305c6657c08ffebe6ca3aa433b9d5d2788efd525e3fc1d25d1ed705f8f49b724b53e9a32f55604f86cc4e969e3b8e7dff50255eb0109"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x120, 0x8}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "cd9d"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @random="c2bf5a74fb80"}, &(0x7f0000000600)={0x40, 0x17, 0x6, @random="3a0da7dc686d"}, &(0x7f0000000640)={0x40, 0x19, 0x2, "175f"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x7}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x217, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xfe5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x3, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0xb, 0xb3}}]}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x201, 0x6, 0x0, 0xed, 0x40, 0xe}, 0xc3, &(0x7f00000008c0)={0x5, 0xf, 0xc3, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x40, 0x2, 0x6}, @generic={0xb4, 0x10, 0x4, "c61c5738417db83116a93ef0106972c9c9db0784478ad10ab8a8de1065dde926f6ef67cedb31af148934ad4720134e7907aa3498cb77f014dd76187f8417271516d53f139b4e1f0dee1c470f77e53259aeed6349b6fa6410144f678a9e740f80e74925e2670990eacd341631256057609a61bce2cd35086aa87a883f24aa6d2da746f302d778f83f273571a43767dd8a4a87264158b4a500a26d55558856710da86ac1c5d9163347e7cfb4a8cd5b9d3d4a"}]}, 0x3, [{0xf4, &(0x7f0000000ac0)=@string={0xf4, 0x3, "1c516577929dc71fb70b800679941b9c58326917ed42289d2ba37c2dbe54d64245666556fbed1fac3a6ff9910cbfa8b77d3e67f4abcef5bd86f08398e647ab175286c5961aff899ae28b0ff1d17a3334d7614a7bb21e6d09e17a9c7e400d76dbafae871aa1aab4f9d25682b0bafc869d75d2149a1ed6fcc3450af752f84ff1a81df2a0a6cdc39a58f31de113ab242f124797666d4e2b6475eaeee43f39a22f80c113db8ce15e2008dbe8e0587b830c7554d80b956b3720b34f0fdffea8792e24b37d0c62b1882cd85e7a2ea4468b9c60f4295c1a2bcddeda69c2004f7e60f8290181c85a6f64234d8c9542e9fbf4a63dbf2e"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$hid(r10, &(0x7f0000001040)={0x24, &(0x7f0000000bc0)={0x20, 0x23, 0x86, {0x86, 0x22, "a14c7eb9af508ddeed30f64c17ecbecb082c98e6a44619e466efbb0a49dc22e1a4488e1a7365f6cb28744baeb82f06b2be55f5fcbc7dd74912210140860c26f27ace7e7b699ab25f08f64f97f294e7956baa4bf948ce0f6530f8e8e5b9a99dea37ffaff342a1bbb2db6341861eec432094bfc8ab0d0f5f4bb4f57b821b0ea0a94ab7deb5"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f0000000cc0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x6, "b10a3c77"}, @global=@item_4={0x3, 0x1, 0x9, "c792d2a4"}, @global=@item_4={0x3, 0x1, 0x1, "eaa5d115"}]}}, &(0x7f0000000d00)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x8, 0x1, {0x22, 0x7c5}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000d80)={0x40, 0xe, 0x7c, "7f98406219af1837ef9e0f6ae74a56a63a82a633b2ee0b4dd47ef8d8a74ae36b45a4d5040d88660f835e90017311c2b8b9807b6be970a9b62734388fb2895b5d9e930aef9643016bc01b16eb504c437a06926f1e7a964a483188c9ba7f229a82f3187af5dfc8f19dddcb7125a4a4b05e4b7230cffad9961fe3f3fc38"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x55}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000ec0)={0x20, 0x1, 0xef, "5b9c651378fe742d7d6615493e8fda5e16d33b172aabebd712fd2f9fb8de55083be6ff1a01554bc09d3da44c693217574575d977984e8b3eae0fab21d7d05bf28ec966304b49ee56cf9639f25fc432eb9ae854557ee4636083af94a7a0c1a1945b15d198f796be2cc9d0d8e47f7d43298e98337ad1876d244924da3feea0fe25d0f4d3bfd1e39199702c137c806d8aef263e8792fe2a3f2843e4596ae930f95b9af24a444d4f32313ce41be610182d4b6f3de65ec706074964d313415f066e8df21e5ded116be8c04582331a8a7b0f9ed8d9bdf08e64c5b75578d97f919f8d6a81f53215bef9cb057f1b17ac19228f"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0xff}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) 49.295546546s ago: executing program 6 (id=2656): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='f2fs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.stat\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0xc869, 0x1009, 0x4000000201, 0x80000001, 0x48ce, 0xfffffffffffffffc, 0x800000df}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lstat(&(0x7f0000000240)='./file2\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) fchown(r2, r4, r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x88, 0x0, 0x2, 0x0, 0x6, 0x9, 0xd}, {0x8080000, 0x0, 0xc, 0x4, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0xa, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, {0x100000, 0xd000, 0xb, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x4000, 0xe, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0xd000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0xa}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) r10 = geteuid() r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r11, 0x29, 0x41, &(0x7f0000000180)=ANY=[], 0x58) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) quotactl_fd$Q_GETINFO(r12, 0xffffffff80000501, r10, &(0x7f0000000140)) fcntl$setstatus(r2, 0x4, 0x44800) 48.830612588s ago: executing program 6 (id=2657): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x4000000000000000, 0x7f03) 32.748285881s ago: executing program 35 (id=2657): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080)=0x4000000000000000, 0x7f03) 15.685850661s ago: executing program 7 (id=2780): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x208980) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x220401, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000001, 0x101, 0x7, 0x0, 0xfffffffffffffffd, 0xe00, 0x8000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x400, 0x6, 0x0, 0x401, 0x200000010007f, 0xfffffffffffffffe, 0x3, 0x0, 0x60d6, 0x6, 0x1, 0x3, 0xfffffffffffffff5}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES8, @ANYRES16=r2, @ANYRES16=r4], 0x0) 12.325967311s ago: executing program 7 (id=2791): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x3, 0x6, 0x8, 0x45e, 0x927, 0xe394, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0xed, 0x2, 0x0, 0x8, 0x8f, 0x47}}]}}]}}, 0x0) r0 = userfaultfd(0x801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r2, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r0, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}}) 11.524427179s ago: executing program 2 (id=2795): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000680)={{0x9, 0x5, 0xf7, 0x5, 'syz0\x00'}, 0x0, [0x7f, 0x4, 0x400, 0x2, 0x9, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x0, 0x7, 0xd11c, 0x0, 0x29, 0x1eff400000000000, 0xc127, 0x3, 0x400, 0xa7e7, 0x0, 0x28, 0x22, 0x4, 0x2b, 0x0, 0x100000000, 0x10, 0x9, 0x3, 0x2, 0x3, 0xffffffff, 0xe6, 0x90, 0x7fffffff, 0x3, 0xa, 0xfff, 0x6, 0xb5a, 0x0, 0x2, 0x0, 0x80, 0xf, 0x8000000000000001, 0x0, 0xa, 0x5, 0xb40, 0x2, 0x3, 0x3, 0x71, 0x8, 0x1, 0x0, 0x0, 0x9, 0x9, 0x3, 0x7fe, 0x4, 0x0, 0x8c, 0xffffffffffffffff, 0x2, 0x7f, 0x2, 0x6, 0x3, 0x9, 0x1, 0x9, 0x3, 0x800, 0x5, 0x3, 0xb947, 0x2, 0x8, 0x80000001, 0x2, 0x54, 0x3c, 0x5, 0x4, 0x3, 0x7fffffff, 0x97c, 0x9, 0x10001, 0x8, 0x400, 0xf, 0xfffffffffffffff6, 0x10001, 0x14, 0xffffffffffffffff, 0x6, 0x6, 0xcb26, 0xa, 0x100000001, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0xf2, 0x9, 0xffff, 0x5, 0x76, 0x8, 0x8, 0x1ff, 0x6, 0xffff, 0xbe6, 0x9, 0x3, 0x3, 0x5, 0x2, 0x401, 0x6, 0x5]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc058560f, &(0x7f0000000180)={0x0, 0xa}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 10.597169666s ago: executing program 5 (id=2796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000240)="3e0f7fb1040066b9d20a000066b8da00000066ba000000000f300f070b02ba2000b80000ef66b9da0900000f32ba200066b80b00c0fe66ef670faabaa100edf36d", 0x41}], 0x1, 0x4c, &(0x7f0000000300)=[@cr4={0x1, 0x100}, @cstype3={0x5, 0x5}], 0x2) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000000001) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) connect$inet(r2, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c421fc107500c4417877c744240039010000c74424028a000000ff1c240f20c035040000002e0f4019400f1278c8c443a96c13053e41220a48b861000000000000000f23c00f21f84c3500000b000023f8f20f1eca66baf80cb8b428c987ef66bafc0cb843b50000ef", 0x69}], 0x1, 0x11, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000055098a403a0901268f08000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.046297958s ago: executing program 7 (id=2797): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0xffffff97) 8.935224299s ago: executing program 7 (id=2798): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r2, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000080)="d9", 0x1}], 0x3, 0x5, 0x2, 0x3) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0xa080) ioctl$I2C_FUNCS(r4, 0x705, &(0x7f0000000300)=0x34e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x3, 0x6, 0x0, 0x671d}, {0xc, 0xb5, 0x0, 0x8}, {0x0, 0x2e, 0x3, 0x3}, {0xff7e, 0x9, 0x4, 0xd70c}, {0x4, 0xe, 0x8, 0x7}, {0xf, 0x2, 0x9, 0x4}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x4, @string={0x4, 0x3, "9ff0"}}, 0x0, 0x0, 0x0}, 0x0) 8.734172958s ago: executing program 5 (id=2799): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48d1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x4080) 8.70250195s ago: executing program 5 (id=2800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@handle, @flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x18}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 8.546504598s ago: executing program 5 (id=2802): mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000000100), 0x0, 0x3000000000000000}]) 7.739735175s ago: executing program 2 (id=2803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002700), r1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfebc) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f00000000c0), 0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005980), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '-'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x9) pwritev(r4, &(0x7f0000000380)=[{&(0x7f00000003c0)="a1", 0x1}], 0x1, 0x0, 0x0) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002780)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x561}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8880) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0xffff, 0x4000, 0x0, 0x7fff, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}, @encap={0x1c, 0x4, {0x2, 0x4e21}}]}, 0x170}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x15}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x48, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, [@dstopts={0x11, 0x0, '\x00', [@generic={0x7f}]}]}}}}}}, 0x7e) 7.553722739s ago: executing program 2 (id=2804): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000700)={{0x2, 0x0, 0x0, 0x1000000}, 0x0, [0x2000000, 0x0, 0x3, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xba, 0xfffffffffffffdfc, 0x4, 0x40000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffffc, 0x8001, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]}) 7.466318722s ago: executing program 2 (id=2805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0xd, @meta={0x48505356, 0x53434664, 0xdddb, 0x1120, 0xd7f8c38}}) 7.45006152s ago: executing program 2 (id=2806): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500020000000800124000000000050005000a000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="2000000076001f0b4abd7000fbdbdf25080000000000000008000a"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x99}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, 0x0, 0x0) 5.662958249s ago: executing program 7 (id=2807): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x208980) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x220401, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000001, 0x101, 0x7, 0x0, 0xfffffffffffffffd, 0xe00, 0x8000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x0, 0x400, 0x6, 0x0, 0x401, 0x200000010007f, 0xfffffffffffffffe, 0x3, 0x0, 0x60d6, 0x6, 0x1, 0x3, 0xfffffffffffffff5}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES8=r0, @ANYRES8, @ANYRES16=r2, @ANYRES16=r4], 0x0) 5.258724714s ago: executing program 4 (id=2809): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x3) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000340)={0xbe, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000340)={0xbe, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @local}}}, 0x108) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2c, &(0x7f0000000040)=0x2, 0xf6) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) (async) r3 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00', 0xfffffffffffffff8) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000140)=""/153, 0x99}, {&(0x7f0000001880)=""/134, 0x86}], 0x4}, 0x20) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x33, 0x38, 0x37, 0x33, 0x65, 0x33, 0x34, 0x63, 0x35, 0x31, 0x30, 0x38, 0x34, 0x39, 0x33, 0x33]}, &(0x7f0000000240)={0x0, "1ca88d9d98b84d11a9e559d86626a9b873a7ab1b106e7f0664a0579a26f13d8491309bcf123971252f2bd3230c189c7d333165f895496d4f79577556b91eea87", 0x2b}, 0x48, r3) 5.211518194s ago: executing program 4 (id=2810): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000740)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000780)) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/77, 0x4d}, {&(0x7f0000000080)=""/237, 0xed}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/155, 0x9b}, {&(0x7f0000000640)=""/31, 0x1f}], 0x9) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x8101, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) syz_clone3(&(0x7f0000001340)={0x20000000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, &(0x7f0000001300)=[r1], 0x1}, 0x58) ioctl$KDENABIO(r0, 0x4b36) 5.072191513s ago: executing program 5 (id=2811): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000680)={{0x9, 0x5, 0xf7, 0x5, 'syz0\x00'}, 0x0, [0x7f, 0x4, 0x400, 0x2, 0x9, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x0, 0x7, 0xd11c, 0x0, 0x29, 0x1eff400000000000, 0xc127, 0x3, 0x400, 0xa7e7, 0x0, 0x28, 0x22, 0x4, 0x2b, 0x0, 0x100000000, 0x10, 0x9, 0x3, 0x2, 0x3, 0xffffffff, 0xe6, 0x90, 0x7fffffff, 0x3, 0xa, 0xfff, 0x6, 0xb5a, 0x0, 0x2, 0x0, 0x80, 0xf, 0x8000000000000001, 0x0, 0xa, 0x5, 0xb40, 0x2, 0x3, 0x3, 0x71, 0x8, 0x1, 0x0, 0x0, 0x9, 0x9, 0x3, 0x7fe, 0x4, 0x0, 0x8c, 0xffffffffffffffff, 0x2, 0x7f, 0x2, 0x6, 0x3, 0x9, 0x1, 0x9, 0x3, 0x800, 0x5, 0x3, 0xb947, 0x2, 0x8, 0x80000001, 0x2, 0x54, 0x3c, 0x5, 0x4, 0x3, 0x7fffffff, 0x97c, 0x9, 0x10001, 0x8, 0x400, 0xf, 0xfffffffffffffff6, 0x10001, 0x14, 0xffffffffffffffff, 0x6, 0x6, 0xcb26, 0xa, 0x100000001, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0xf2, 0x9, 0xffff, 0x5, 0x76, 0x8, 0x8, 0x1ff, 0x6, 0xffff, 0xbe6, 0x9, 0x3, 0x3, 0x5, 0x2, 0x401, 0x6, 0x5]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc058560f, &(0x7f0000000180)={0x0, 0xa}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 4.230011143s ago: executing program 4 (id=2812): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020400090a00000000000000000000000300060002000000ac1414000000000000000000020001000000000000000302fffffffb030005003200000002004e227f0000010000000000000000"], 0x50}}, 0x0) (async, rerun: 32) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x184, 0x10, 0x1, 0x70bdab, 0x0, {{@in=@remote, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x20, 0x2c, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x4, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis256-aesni\x00'}}}]}, 0x184}}, 0x24000000) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) (async) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2, 0x0, 0x8, 0x9}, 0x10) (async) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={0x0, 0x0}}, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xe42, 0x9, 0xfffffffffffffffb, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0x1, 0x0, 0x10000000000400, 0x80, 0x8b, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r8, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9a5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x57b}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8085) (async) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000000000)="312610909758a0", 0x7, 0x4008081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 64) 4.159290846s ago: executing program 2 (id=2813): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e20, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, r1}}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r5, &(0x7f0000000740)=""/384, 0x200008c0) socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x12) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffe"], 0x78) r7 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[]) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000080)=0x801, 0x4) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x1}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000580)={r9, 0x8}, &(0x7f00000005c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, r10, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=@can={{0x3}, 0x0, 0x2, 0x0, 0x0, "0000008700"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$sock_netdev_private(r12, 0x89f2, &(0x7f00000003c0)="27ac4a1370340af986303f658e1de4a5306f1e13815224cbd75cfc0af08d3c02a1ece469179879239f8a3e7d54d19484e4977d70a64354e7a6eb06435b88a7085b6a0c181985ed8e2c6bf826e955d1f7198a6094193706882d33103087bd384755443d574469ede9f4eee158c108375f4e017d3a4e07e5314cffe7f052a056d6a71f597f322dd112f429668aba5c44b3083c") sendmmsg$inet(r11, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 3.255384361s ago: executing program 4 (id=2814): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000023c0)=ANY=[@ANYBLOB="e00100001300000229bd7000ffdbdf25150400034e224e240dfdffff800000000101000040000000040000000300000009000000faffffff33cc8beb43a88261263dbd67fef285c1b9e10ecd344d35d767ee7b4bec2309e1669441a9a0ecf085f493ed4735e4cd344a8a9a869a79f1fe3f260ff6fa367d9afe2aa59181b2d0af44e26ef020e3391e8da204f8000000d610e414c153d5f3d8e8b3050cad639224300e3b8ea3d3940dd3ca783b2ed8685d0cff29800b23b4a2", @ANYRES32=0x0, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(r2, 0x4048aec9, &(0x7f0000000180)={[{0x3, 0x10, 0x0, 0x0, 0x4, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0xff}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000002340)="a33025d98edbca507ea913a2b2231b65cb27c18577589650048f9447bc1d163244fb20dc8e2d82b7b4b06f177ab1fdf0fb4c0fbf7adb1b2b73cba84225f1c6d6d9f23088c52093da699fa246590d999f651e1bf8da70a171f51c9a285f6abc63f198ec2dd80a6ebafe6eb2d4f37a75498b") read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) r5 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) getpeername$unix(r4, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) 2.346228078s ago: executing program 7 (id=2815): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000680)={{0x9, 0x5, 0xf7, 0x5, 'syz0\x00'}, 0x0, [0x7f, 0x4, 0x400, 0x2, 0x9, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x0, 0x7, 0xd11c, 0x0, 0x29, 0x1eff400000000000, 0xc127, 0x3, 0x400, 0xa7e7, 0x0, 0x28, 0x22, 0x4, 0x2b, 0x0, 0x100000000, 0x10, 0x9, 0x3, 0x2, 0x3, 0xffffffff, 0xe6, 0x90, 0x7fffffff, 0x3, 0xa, 0xfff, 0x6, 0xb5a, 0x0, 0x2, 0x0, 0x80, 0xf, 0x8000000000000001, 0x0, 0xa, 0x5, 0xb40, 0x2, 0x3, 0x3, 0x71, 0x8, 0x1, 0x0, 0x0, 0x9, 0x9, 0x3, 0x7fe, 0x4, 0x0, 0x8c, 0xffffffffffffffff, 0x2, 0x7f, 0x2, 0x6, 0x3, 0x9, 0x1, 0x9, 0x3, 0x800, 0x5, 0x3, 0xb947, 0x2, 0x8, 0x80000001, 0x2, 0x54, 0x3c, 0x5, 0x4, 0x3, 0x7fffffff, 0x97c, 0x9, 0x10001, 0x8, 0x400, 0xf, 0xfffffffffffffff6, 0x10001, 0x14, 0xffffffffffffffff, 0x6, 0x6, 0xcb26, 0xa, 0x100000001, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0xf2, 0x9, 0xffff, 0x5, 0x76, 0x8, 0x8, 0x1ff, 0x6, 0xffff, 0xbe6, 0x9, 0x3, 0x3, 0x5, 0x2, 0x401, 0x6, 0x5]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc058560f, &(0x7f0000000180)={0x0, 0xa}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) 1.192931231s ago: executing program 5 (id=2816): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r6}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (fail_nth: 15) 518.21398ms ago: executing program 4 (id=2817): mkdir(&(0x7f0000000400)='./file0\x00', 0xa2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x3, 0x0, 0x16f8000, 0x0, 0x0, 0x2, {0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x1ff, 0xff, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') (fail_nth: 12) 0s ago: executing program 4 (id=2818): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r1}]}, 0x1c}}, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x80101, 0x26c}) kernel console output (not intermixed with test programs): 3500] [ 523.069576][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 523.083900][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 523.097888][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 523.112323][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 523.127682][ T5830] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 523.141025][ T5830] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 523.156977][ T5830] usb 5-1: USB disconnect, device number 72 [ 523.171318][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 523.268832][T13504] program syz.6.2527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.341824][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 523.351456][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 523.360072][ T9] usb 6-1: can't read configurations, error -71 [ 523.562325][ T29] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 523.581755][T13517] netlink: 'syz.4.2532': attribute type 5 has an invalid length. [ 523.734522][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 523.744316][ T29] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 523.773115][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.797204][ T29] usb 3-1: config 0 descriptor?? [ 523.822233][ T29] gspca_main: sunplus-2.14.0 probing 041e:400b [ 523.991208][ T5830] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 524.045359][T13536] overlayfs: missing 'workdir' [ 524.159344][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 524.172728][ T5830] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 524.187334][ T5830] usb 5-1: config 0 has no interface number 0 [ 524.212865][ T5830] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 524.222699][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.236369][ T5830] usb 5-1: Product: syz [ 524.240972][ T5830] usb 5-1: Manufacturer: syz [ 524.247764][ T5830] usb 5-1: SerialNumber: syz [ 524.257328][T13506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.268486][ T5830] usb 5-1: config 0 descriptor?? [ 524.281544][ T5830] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 524.285070][T13506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.374246][ T6113] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 524.505845][ T5830] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 524.526496][ T5830] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 524.558110][ T6113] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 524.568413][ T6113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.582080][ T6113] usb 7-1: Product: syz [ 524.597977][ T6113] usb 7-1: Manufacturer: syz [ 524.608361][ T6113] usb 7-1: SerialNumber: syz [ 524.721657][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 524.732758][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 524.953481][ T29] gspca_sunplus: reg_w_riv err -71 [ 524.961220][ T29] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 524.980798][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 524.987642][ T5925] usb 5-1: USB disconnect, device number 73 [ 525.012071][ T29] usb 3-1: USB disconnect, device number 84 [ 525.020105][ T5925] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 525.051076][ T5925] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 525.072647][ T5925] quatech2 5-1:0.51: device disconnected [ 525.079712][ T6113] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 525.094672][ T6113] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 525.666160][T13560] FAULT_INJECTION: forcing a failure. [ 525.666160][T13560] name failslab, interval 1, probability 0, space 0, times 0 [ 525.679893][T13560] CPU: 0 UID: 0 PID: 13560 Comm: syz.4.2549 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.679926][T13560] Tainted: [L]=SOFTLOCKUP [ 525.679935][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 525.679949][T13560] Call Trace: [ 525.679958][T13560] [ 525.679968][T13560] dump_stack_lvl+0xe8/0x150 [ 525.680002][T13560] should_fail_ex+0x412/0x560 [ 525.680041][T13560] should_failslab+0xa8/0x100 [ 525.680066][T13560] __kmalloc_noprof+0xe8/0x760 [ 525.680096][T13560] ? tomoyo_encode+0x28b/0x550 [ 525.680126][T13560] tomoyo_encode+0x28b/0x550 [ 525.680156][T13560] tomoyo_realpath_from_path+0x58d/0x5d0 [ 525.680193][T13560] ? tomoyo_path_number_perm+0x219/0x630 [ 525.680226][T13560] tomoyo_path_number_perm+0x246/0x630 [ 525.680261][T13560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.680292][T13560] ? __lock_acquire+0x6b5/0x2cf0 [ 525.680337][T13560] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 525.680387][T13560] ? __fget_files+0x2a/0x420 [ 525.680416][T13560] ? __fget_files+0x2a/0x420 [ 525.680440][T13560] ? __fget_files+0x3a0/0x420 [ 525.680466][T13560] ? __fget_files+0x2a/0x420 [ 525.680498][T13560] security_file_ioctl+0xc3/0x2a0 [ 525.680530][T13560] __se_sys_ioctl+0x47/0x170 [ 525.680554][T13560] do_syscall_64+0xe2/0xf80 [ 525.680590][T13560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.680610][T13560] ? trace_irq_disable+0x37/0x100 [ 525.680631][T13560] ? clear_bhb_loop+0x40/0x90 [ 525.680657][T13560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.680679][T13560] RIP: 0033:0x7feda6d9acb9 [ 525.680699][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.680718][T13560] RSP: 002b:00007feda7d38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.680748][T13560] RAX: ffffffffffffffda RBX: 00007feda7015fa0 RCX: 00007feda6d9acb9 [ 525.680764][T13560] RDX: 0000200000000500 RSI: 00000000c0189436 RDI: 0000000000000003 [ 525.680779][T13560] RBP: 00007feda7d38090 R08: 0000000000000000 R09: 0000000000000000 [ 525.680792][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.680804][T13560] R13: 00007feda7016038 R14: 00007feda7015fa0 R15: 00007ffc269e2458 [ 525.680838][T13560] [ 525.681878][T13560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 526.276091][ T5914] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 526.308309][ T5925] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 526.460388][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 526.469532][ T5914] usb 5-1: not running at top speed; connect to a high speed hub [ 526.480434][ T5914] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.492240][ T5914] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.493223][ T5925] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 526.512980][ T5925] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.523015][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 526.529869][ T5925] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 526.539081][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.549113][ T5914] usb 5-1: string descriptor 0 read error: -22 [ 526.556102][ T5914] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.566378][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.576382][ T5925] usb 3-1: config 0 descriptor?? [ 526.593631][ T5914] usb 5-1: 0:2 : does not exist [ 527.013149][ T6113] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 527.038426][ T5925] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 527.046493][ T5925] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 527.054422][ T6113] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 527.068812][ T5925] hid-steam 0003:28DE:1102.0022: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 527.082156][ T6113] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 527.094589][ T6113] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 527.105994][ T6113] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 527.118100][ T6113] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 527.135524][ T6113] usb 7-1: USB disconnect, device number 22 [ 527.142346][ T5925] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' connected [ 527.168958][ T5925] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0022/input/input53 [ 527.212158][ T5925] hid-steam 0003:28DE:1102.0023: unknown main item tag 0x0 [ 527.238720][ T5925] hid-steam 0003:28DE:1102.0023: unknown main item tag 0x0 [ 527.288226][ T5925] hid-steam 0003:28DE:1102.0023: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 527.324517][ T5925] usb 3-1: USB disconnect, device number 85 [ 527.375965][ T5925] hid-steam 0003:28DE:1102.0022: Steam Controller 'XXXXXXXXXX' disconnected [ 527.410736][T13569] fido_id[13569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 527.641556][T13572] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 527.648572][T13572] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 527.659742][T13572] vhci_hcd vhci_hcd.0: Device attached [ 527.669166][T13572] QAT: failed to copy from user cfg_data. [ 527.922791][ T5830] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 527.932752][ T9] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 528.093277][ T9] usb 7-1: device descriptor read/64, error -71 [ 528.135869][ T6388] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 528.298650][ T6388] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.307756][ T6388] usb 3-1: config 0 has no interface number 0 [ 528.314759][ T6388] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.328070][ T6388] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.340474][ T6388] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 528.351817][ T9] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 528.361107][ T6388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.394307][ T6388] usb 3-1: config 0 descriptor?? [ 528.509936][ T9] usb 7-1: device descriptor read/64, error -71 [ 528.627972][ T9] usb usb7-port1: attempt power cycle [ 528.691666][ T6113] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 528.838467][ T6388] uclogic 0003:256C:006D.0024: unknown main item tag 0x0 [ 528.846609][ T6388] uclogic 0003:256C:006D.0024: unknown main item tag 0x0 [ 528.852582][ T6113] usb 6-1: Using ep0 maxpacket: 32 [ 528.857936][ T6388] uclogic 0003:256C:006D.0024: unknown main item tag 0x0 [ 528.869248][ T6388] uclogic 0003:256C:006D.0024: unknown main item tag 0x0 [ 528.877544][ T6388] uclogic 0003:256C:006D.0024: unknown main item tag 0x0 [ 528.879634][ T6113] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 528.898984][ T6113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.917106][ T6388] uclogic 0003:256C:006D.0024: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input1 [ 528.931447][ T6113] usb 6-1: config 0 descriptor?? [ 528.957096][ T6113] gspca_main: sunplus-2.14.0 probing 041e:400b [ 529.013897][ T9] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 529.056064][ T9] usb 7-1: device descriptor read/8, error -71 [ 529.060357][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.076939][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.102995][T12937] Bluetooth: hci4: Malformed Event: 0x13 [ 529.112855][ T6388] usb 3-1: USB disconnect, device number 86 [ 529.309597][ T5914] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 529.328150][ T5914] usb 5-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 529.339754][ T9] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 529.348117][ T5914] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 529.364180][ T5914] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 529.378658][ T5914] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 529.392537][ T9] usb 7-1: device descriptor read/8, error -71 [ 529.403685][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.417458][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.448890][ T5914] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 529.490408][ T5914] usb 5-1: USB disconnect, device number 74 [ 529.515085][ T9] usb usb7-port1: unable to enumerate USB device [ 529.768742][T13584] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 530.057334][T13590] trusted_key: encrypted_key: master key parameter 'ecr+tfz=m' is invalid [ 530.068775][ T6113] gspca_sunplus: reg_w_riv err -71 [ 530.081015][ T6113] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 530.105049][ T6113] usb 6-1: USB disconnect, device number 52 [ 530.573001][ T6113] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 530.736673][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 530.748689][ T6113] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 530.760331][ T6113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.771707][ T6113] usb 5-1: config 0 descriptor?? [ 530.778636][T13599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 530.863250][T13573] vhci_hcd: connection reset by peer [ 530.870769][ T3534] vhci_hcd vhci_hcd.6: stop threads [ 530.877574][ T3534] vhci_hcd vhci_hcd.6: release socket [ 530.883846][ T3534] vhci_hcd vhci_hcd.6: disconnect device [ 531.223281][T13599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.232658][T13599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.385566][ T5914] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 531.457729][T13599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.467446][T13599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.487502][ T6113] elan 0003:04F3:0755.0025: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 531.545764][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 531.559834][ T5914] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 531.576364][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.602919][ T5914] usb 7-1: config 0 has no interface number 0 [ 531.609550][ T5914] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 531.624366][ T5914] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.640492][ T5914] usb 7-1: config 0 interface 52 has no altsetting 0 [ 531.649597][ T5914] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 531.659831][ T5914] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 531.668215][ T5914] usb 7-1: Manufacturer: syz [ 531.675852][ T5914] usb 7-1: config 0 descriptor?? [ 531.873389][ T9] usb 5-1: USB disconnect, device number 75 [ 531.897057][T13611] overlay: Bad value for 'workdir' [ 531.923701][ T5914] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input54 [ 532.131232][T13611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.142623][T13628] overlay: Bad value for 'workdir' [ 532.166488][T13611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.220604][ T29] usb 7-1: USB disconnect, device number 27 [ 532.220883][ C0] synaptics_usb 7-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 532.358222][ T6113] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 532.531751][ T6113] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.540508][ T6113] usb 6-1: config 0 has no interface number 0 [ 532.546867][ T6113] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 532.557512][ T6113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.569920][ T6113] usb 6-1: config 0 descriptor?? [ 532.592612][ T6113] usb 6-1: selecting invalid altsetting 1 [ 532.604145][ T6113] dvb_ttusb_budget: ttusb_init_controller: error [ 532.610731][ T6113] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 532.679178][ T29] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 532.705632][ T6113] DVB: Unable to find symbol cx22700_attach() [ 532.763669][ T6113] DVB: Unable to find symbol tda10046_attach() [ 532.773226][ T6113] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 532.815310][ T6113] usb 6-1: USB disconnect, device number 53 [ 532.861479][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 532.869361][ T29] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 532.878444][ T29] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 532.887280][ T29] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 532.898377][ T29] usb 7-1: config 250 has no interface number 0 [ 532.909206][ T29] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 532.921611][ T29] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 532.932590][ T29] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.943854][ T29] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 532.956093][ T29] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 532.972179][ T29] usb 7-1: config 250 interface 228 has no altsetting 0 [ 532.984100][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 532.994633][ T29] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 533.003226][ T29] usb 7-1: Product: syz [ 533.007636][ T29] usb 7-1: SerialNumber: syz [ 533.023630][ T29] hub 7-1:250.228: bad descriptor, ignoring hub [ 533.033278][ T29] hub 7-1:250.228: probe with driver hub failed with error -5 [ 533.249227][ T29] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 533.327053][ T5925] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 533.396074][ T5830] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 533.504221][ T5925] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 533.518362][ T5925] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 533.529109][ T5925] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 533.548162][ T5925] usb 5-1: Manufacturer: syz [ 533.553736][ T5925] usb 5-1: SerialNumber: syz [ 533.705065][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 533.802032][ T5925] usb 5-1: USB disconnect, device number 76 [ 533.858812][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 533.868723][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 533.876736][ T9] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 533.884988][ T9] usb 6-1: config 0 has no interface number 0 [ 533.891506][ T9] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 533.905539][ T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 533.915565][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.925233][ T9] usb 6-1: Product: syz [ 533.933150][ T9] usb 6-1: Manufacturer: syz [ 533.938049][ T9] usb 6-1: SerialNumber: syz [ 533.946833][ T9] usb 6-1: config 0 descriptor?? [ 533.953903][T13643] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 534.214149][T13643] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 534.225513][T13632] usb 7-1: reset high-speed USB device number 28 using dummy_hcd [ 534.236662][T13643] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 534.401780][T13632] usb 7-1: device firmware changed [ 534.415248][ T29] usb 7-1: USB disconnect, device number 28 [ 534.430836][ T29] usblp0: removed [ 534.467905][ T9] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 534.480461][ T9] asix 6-1:0.188: probe with driver asix failed with error -61 [ 534.581639][ T29] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 534.677844][ T6113] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 534.742738][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 534.749805][ T29] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 534.760532][ T29] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 534.770253][ T29] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 534.780855][ T29] usb 7-1: config 250 has no interface number 0 [ 534.788741][ T29] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 534.801552][ T29] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 534.814446][ T29] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.826036][ T29] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 534.837058][ T29] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 534.851047][ T6113] usb 5-1: Using ep0 maxpacket: 16 [ 534.857020][ T29] usb 7-1: config 250 interface 228 has no altsetting 0 [ 534.870224][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 534.879489][ T29] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 534.888789][ T29] usb 7-1: Product: syz [ 534.893663][ T6113] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 534.905496][ T29] usb 7-1: SerialNumber: syz [ 534.912528][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 534.929668][ T29] hub 7-1:250.228: bad descriptor, ignoring hub [ 534.937119][ T6113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 534.948664][ T29] hub 7-1:250.228: probe with driver hub failed with error -5 [ 534.960974][ T6113] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 534.971167][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.980374][ T6113] usb 5-1: Product: syz [ 534.984994][ T6113] usb 5-1: Manufacturer: syz [ 534.990000][ T6113] usb 5-1: SerialNumber: syz [ 535.010101][ T6113] usb 5-1: config 0 descriptor?? [ 535.016709][T13650] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 535.035262][ T6113] hub 5-1:0.0: bad descriptor, ignoring hub [ 535.041774][ T6113] hub 5-1:0.0: probe with driver hub failed with error -5 [ 535.063175][ T6113] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input55 [ 535.249169][ T9] usb 5-1: USB disconnect, device number 77 [ 535.556376][ T5830] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 535.730006][ T5830] usb 3-1: not running at top speed; connect to a high speed hub [ 535.744668][ T5830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 535.756290][ T5830] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 535.769441][ T5830] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 535.784939][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.795944][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.804690][ T5830] usb 3-1: Product: 耄୩嗺籝硫鞐㸹랭父庣곥⪟嚉⸮ਕꨖᆕ⒄褄΀ᗊ䋁㊭忺赎隼࠙駏䣎헬䲕ꡅ蠚Ꮸ측꺹╾曐웰엏᥊缓衿ဨ㜩ꏽᐾ틏靘冤 [ 535.824406][ T5830] usb 3-1: Manufacturer: ఊ [ 535.829268][ T5830] usb 3-1: SerialNumber: ｀ȴ䧈담缊致闖鍹歋짌￞싹韥흆現벤潪ર㳼궡㬯骢증⻿ゥ㬭劅⊒㐷쏰㤰栊⑇横ꅲ⒞拀읳♢ᕸ淏⡬ﴜස螮䆔쇽ⴕ兤큁钗▎塖犷䳽̗肻遼ᧅ㙕૪蹙买᪔槨䢚ꩻཏꚤ곕Ԋ [ 535.879461][T13657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.475904][T13657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.571645][T13657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.877921][ T5830] cdc_ncm 3-1:1.0: bind() failure [ 536.907477][ T29] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 29 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 536.909859][ T5830] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 536.930905][ T5830] cdc_ncm 3-1:1.1: bind() failure [ 536.943286][T13671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.956200][ T5830] usb 3-1: USB disconnect, device number 87 [ 536.976919][T13671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.152128][ T9] usb 6-1: USB disconnect, device number 54 [ 537.192454][ T29] usb 7-1: reset high-speed USB device number 29 using dummy_hcd [ 537.206235][ T29] usb 7-1: device reset changed ep0 maxpacket size! [ 537.223866][ T29] usb 7-1: USB disconnect, device number 29 [ 537.238416][ T29] usblp0: removed [ 537.563953][ T29] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 537.724235][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 537.731736][ T29] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 537.746479][ T29] usb 7-1: config 0 has no interface number 0 [ 537.752745][ T29] usb 7-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 537.769039][ T29] usb 7-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=74.d1 [ 537.778647][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.786696][ T29] usb 7-1: Product: syz [ 537.791182][ T29] usb 7-1: Manufacturer: syz [ 537.795828][ T29] usb 7-1: SerialNumber: syz [ 537.803937][ T29] usb 7-1: config 0 descriptor?? [ 537.813482][T13670] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 538.069224][T13670] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 538.376527][ T24] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 538.509485][ T29] asix 7-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 538.524387][ T29] asix 7-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 538.537882][ T24] usb 5-1: device descriptor read/64, error -71 [ 538.545037][ T29] asix 7-1:0.191: probe with driver asix failed with error -71 [ 538.563159][ T29] usb 7-1: USB disconnect, device number 30 [ 538.803921][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 538.864446][ T30] audit: type=1800 audit(6060679766.964:68): pid=13700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2596" name="bus" dev="overlay" ino=1131 res=0 errno=0 [ 538.942909][ T24] usb 5-1: device descriptor read/64, error -71 [ 539.071484][ T24] usb usb5-port1: attempt power cycle [ 539.220873][ T5830] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 539.280235][T13708] syzkaller1: entered promiscuous mode [ 539.288411][T13708] syzkaller1: entered allmulticast mode [ 539.381123][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 539.399454][ T5830] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 539.409096][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.417436][ T5830] usb 3-1: Product: syz [ 539.421755][ T5830] usb 3-1: Manufacturer: syz [ 539.427523][ T5830] usb 3-1: SerialNumber: syz [ 539.435307][ T24] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 539.444649][ T5830] usb 3-1: config 0 descriptor?? [ 539.454414][ T5830] usbtest 3-1:0.0: FX2 device [ 539.460145][ T5830] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 539.488851][ T24] usb 5-1: device descriptor read/8, error -71 [ 539.543206][T13712] comedi comedi3: bad chanlist[0]=0x0000ffff chan=65535 range length=2 [ 539.617559][T13713] Invalid/unusable pipe [ 539.744539][ T24] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 539.766766][ T24] usb 5-1: device descriptor read/8, error -71 [ 539.778817][ T29] usb 3-1: USB disconnect, device number 88 [ 539.892489][ T24] usb usb5-port1: unable to enumerate USB device [ 540.182904][ T5830] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 540.353890][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 540.368609][ T5830] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 540.380572][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.389974][ T5830] usb 7-1: Product: syz [ 540.394575][ T5830] usb 7-1: Manufacturer: syz [ 540.399327][ T5830] usb 7-1: SerialNumber: syz [ 540.407045][ T5830] usb 7-1: config 0 descriptor?? [ 540.419772][ T5830] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 540.427610][ T5830] dvb-usb: bulk message failed: -22 (2/0) [ 540.440003][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.450711][ T5830] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 540.458888][ T5830] usb 7-1: media controller created [ 540.475056][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.514551][ T5830] usb 7-1: selecting invalid altsetting 7 [ 540.520554][ T5830] cxusb: set interface failed [ 540.534280][ T5830] dvb-usb: bulk message failed: -22 (1/0) [ 540.571723][ T5830] DVB: Unable to find symbol lgdt330x_attach() [ 540.582207][ T5830] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 540.634621][T13717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.650023][T13717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.659086][ T5830] rc_core: IR keymap rc-dvico-portable not found [ 540.668650][ T5830] Registered IR keymap rc-empty [ 540.675760][ T5830] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 540.688910][ T5830] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input56 [ 540.703767][ T5830] dvb-usb: schedule remote query interval to 100 msecs. [ 540.712259][ T5830] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 540.730097][ T5830] usb 7-1: USB disconnect, device number 31 [ 540.826999][ T5830] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 541.241165][ T29] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 541.404356][ T29] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 541.422793][ T29] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 541.435770][ T29] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 541.453473][ T29] usb 6-1: config 220 has no interface number 2 [ 541.462486][ T29] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 541.477656][ T29] usb 6-1: config 220 interface 0 has no altsetting 0 [ 541.486606][ T29] usb 6-1: config 220 interface 76 has no altsetting 0 [ 541.495717][ T29] usb 6-1: config 220 interface 1 has no altsetting 0 [ 541.506982][ T29] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 541.523329][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.535782][ T29] usb 6-1: Product: syz [ 541.541281][ T29] usb 6-1: Manufacturer: syz [ 541.547519][ T29] usb 6-1: SerialNumber: syz [ 541.658329][ T6113] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 541.814214][ T29] uvcvideo 6-1:220.1: Unknown video format 0d00ad00-0000-0000-0000-000000000000 [ 541.823877][ T6113] usb 3-1: device descriptor read/64, error -71 [ 541.833439][ T29] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 541.844885][ T29] uvcvideo 6-1:220.0: No valid video chain found. [ 541.853114][ T29] usb 6-1: selecting invalid altsetting 0 [ 541.895332][ T29] usb 6-1: selecting invalid altsetting 0 [ 541.901154][ T29] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 541.921000][ T29] usb 6-1: USB disconnect, device number 55 [ 542.085877][ T6113] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 542.160420][ T5830] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 542.224592][ T6113] usb 3-1: device descriptor read/64, error -71 [ 542.320777][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 542.330021][ T5830] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 542.339653][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.345928][ T6113] usb usb3-port1: attempt power cycle [ 542.354171][ T5830] usb 5-1: Product: syz [ 542.358553][ T5830] usb 5-1: Manufacturer: syz [ 542.364821][ T5830] usb 5-1: SerialNumber: syz [ 542.373329][ T5830] usb 5-1: config 0 descriptor?? [ 542.382301][ T5830] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 542.716658][ T6113] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 542.759813][ T6113] usb 3-1: device descriptor read/8, error -71 [ 542.791218][ T5914] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 542.974629][ T5914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.985250][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.996463][ T5914] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 543.006222][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 543.014853][ T5914] usb 6-1: SerialNumber: syz [ 543.016068][ T6113] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 543.050885][ T6113] usb 3-1: device descriptor read/8, error -71 [ 543.166132][ T6113] usb usb3-port1: unable to enumerate USB device [ 543.251107][T13744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.263709][T13752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.266642][T13744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.285643][T13752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.308672][ T5914] usb 6-1: 0:2 : does not exist [ 543.351598][ T5914] usb 6-1: USB disconnect, device number 56 [ 543.386014][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.828345][ T5830] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 543.935621][T13757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 543.946652][T12937] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 544.426618][ T6113] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 544.586899][ T6113] usb 6-1: Using ep0 maxpacket: 8 [ 544.594745][ T6113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.624337][ T6113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.634823][ T6113] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.660487][ T6113] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 544.674401][ T6113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.697047][ T6113] usb 6-1: config 0 descriptor?? [ 545.117913][ T24] usb 5-1: USB disconnect, device number 82 [ 545.136977][ T30] audit: type=1326 audit(6060679768.829:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13761 comm="syz.5.2617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cfc19acb9 code=0x0 [ 545.186582][ T29] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 545.369312][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.388923][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.401581][ T29] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 545.418264][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 545.428355][ T29] usb 3-1: SerialNumber: syz [ 545.550770][ T24] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 545.666334][ T29] usb 3-1: 0:2 : does not exist [ 545.672925][ T29] usb 3-1: unit 255 not found! [ 545.717983][ T29] usb 3-1: USB disconnect, device number 93 [ 545.735260][ T24] usb 5-1: config index 0 descriptor too short (expected 56867, got 36) [ 545.745928][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 545.761676][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.774508][ T5830] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 545.793230][ T24] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 545.810230][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 545.819435][ T24] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 545.825403][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.828918][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.857805][ T24] usb 5-1: config 0 descriptor?? [ 545.944667][ T5830] usb 7-1: Using ep0 maxpacket: 32 [ 545.953304][ T5830] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 545.963219][ T5830] usb 7-1: config 0 has no interface number 0 [ 545.969988][ T5830] usb 7-1: config 0 interface 12 has no altsetting 0 [ 545.981756][ T5830] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 545.997166][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.006790][ T5830] usb 7-1: Product: syz [ 546.013861][ T5830] usb 7-1: Manufacturer: syz [ 546.018929][ T5830] usb 7-1: SerialNumber: syz [ 546.028802][ T5830] usb 7-1: config 0 descriptor?? [ 546.103333][T13772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.113761][T13772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.313170][T13776] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 546.413834][T13777] 9p: Bad value for 'wfdno' [ 546.813420][T13774] tmpfs: Bad value for 'mpol' [ 547.405570][ T6113] usbhid 6-1:0.0: can't add hid device: -71 [ 547.419863][ T6113] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 547.442863][ T6113] usb 6-1: USB disconnect, device number 57 [ 548.447560][ T5830] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 548.463592][ T5914] usb 5-1: USB disconnect, device number 83 [ 548.482694][ T5830] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 548.508449][ T5830] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 548.519111][ T5830] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 548.540359][ T5830] usb 7-1: USB disconnect, device number 32 [ 548.963083][ T30] audit: type=1326 audit(6060679772.412:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.4.2638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feda6d9acb9 code=0x0 [ 549.825342][ T5914] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 549.994505][ T5914] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 550.010440][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.022072][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.034303][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.051515][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.062518][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.074383][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.090833][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.101920][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.114520][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.130255][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.141329][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.152560][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.170713][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.181766][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.192944][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.213560][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.225605][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.237705][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.254061][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.266259][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.278950][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.295423][ T5914] usb 7-1: config 0 has an invalid descriptor of length 65, skipping remainder of the config [ 550.306697][ T5914] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 550.319669][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.348722][ T5914] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 550.359107][ T5914] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 550.369198][ T5914] usb 7-1: Manufacturer: syz [ 550.378701][ T5914] usb 7-1: config 0 descriptor?? [ 550.481226][T13838] netlink: 'syz.2.2648': attribute type 11 has an invalid length. [ 550.616348][ T5914] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 550.732675][T13847] netlink: 'syz.4.2652': attribute type 4 has an invalid length. [ 550.742022][T13847] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 550.750525][T13847] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2652'. [ 550.836309][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.851142][ T5914] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 550.851972][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.880471][ T5830] usb 7-1: USB disconnect, device number 33 [ 550.894222][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 551.140045][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 551.152524][ T5914] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 551.161680][ T5914] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 551.172769][ T5914] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.183582][ T5914] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.194516][ T5914] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 551.209381][ T5914] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 551.219444][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.259656][ T5914] usbtmc 3-1:16.0: bulk endpoints not found [ 551.478602][T13841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.044758][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.055899][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.068281][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 552.078021][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 552.086433][ T24] usb 6-1: SerialNumber: syz [ 553.336790][ T24] usb 6-1: 0:2 : does not exist [ 553.342298][ T24] usb 6-1: unit 255 not found! [ 553.837281][ T5830] usb 3-1: USB disconnect, device number 94 [ 554.028912][T13854] netlink: 'syz.4.2655': attribute type 64 has an invalid length. [ 554.036851][T13854] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2655'. [ 554.263846][ T24] usb 6-1: USB disconnect, device number 58 [ 554.392282][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.499170][T13868] netlink: 'syz.5.2661': attribute type 1 has an invalid length. [ 554.526812][T13868] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2661'. [ 555.242410][T13879] FAULT_INJECTION: forcing a failure. [ 555.242410][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 555.256193][T13879] CPU: 1 UID: 0 PID: 13879 Comm: syz.4.2666 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.256227][T13879] Tainted: [L]=SOFTLOCKUP [ 555.256235][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 555.256249][T13879] Call Trace: [ 555.256258][T13879] [ 555.256267][T13879] dump_stack_lvl+0xe8/0x150 [ 555.256302][T13879] should_fail_ex+0x412/0x560 [ 555.256351][T13879] should_failslab+0xa8/0x100 [ 555.256375][T13879] __kmalloc_noprof+0xe8/0x760 [ 555.256405][T13879] ? tomoyo_encode+0x28b/0x550 [ 555.256435][T13879] tomoyo_encode+0x28b/0x550 [ 555.256465][T13879] tomoyo_realpath_from_path+0x58d/0x5d0 [ 555.256501][T13879] ? tomoyo_path_number_perm+0x219/0x630 [ 555.256534][T13879] tomoyo_path_number_perm+0x246/0x630 [ 555.256569][T13879] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 555.256600][T13879] ? __lock_acquire+0x6b5/0x2cf0 [ 555.256645][T13879] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 555.256696][T13879] ? __fget_files+0x2a/0x420 [ 555.256726][T13879] ? __fget_files+0x2a/0x420 [ 555.256752][T13879] ? __fget_files+0x3a0/0x420 [ 555.256777][T13879] ? __fget_files+0x2a/0x420 [ 555.256809][T13879] security_file_ioctl+0xc3/0x2a0 [ 555.256840][T13879] __se_sys_ioctl+0x47/0x170 [ 555.256864][T13879] do_syscall_64+0xe2/0xf80 [ 555.256892][T13879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.256912][T13879] ? trace_irq_disable+0x37/0x100 [ 555.256932][T13879] ? clear_bhb_loop+0x40/0x90 [ 555.256958][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.256979][T13879] RIP: 0033:0x7feda6d9acb9 [ 555.257000][T13879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.257018][T13879] RSP: 002b:00007feda7d38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.257040][T13879] RAX: ffffffffffffffda RBX: 00007feda7015fa0 RCX: 00007feda6d9acb9 [ 555.257056][T13879] RDX: 0000000000000000 RSI: 0000000000004140 RDI: 0000000000000005 [ 555.257068][T13879] RBP: 00007feda7d38090 R08: 0000000000000000 R09: 0000000000000000 [ 555.257081][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.257092][T13879] R13: 00007feda7016038 R14: 00007feda7015fa0 R15: 00007ffc269e2458 [ 555.257120][T13879] [ 555.257139][T13879] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.846768][ T51] Bluetooth: hci0: unexpected event for opcode 0x200d [ 555.856681][ T51] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 555.864683][ T6113] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 555.873093][ T51] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 556.067976][ T6113] usb 5-1: Using ep0 maxpacket: 32 [ 556.076352][ T6113] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 556.087644][ T6113] usb 5-1: config 0 has no interface number 0 [ 556.098729][ T6113] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 556.109455][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.118410][ T6113] usb 5-1: Product: syz [ 556.126711][ T6113] usb 5-1: Manufacturer: syz [ 556.131498][ T6113] usb 5-1: SerialNumber: syz [ 556.150812][ T6113] usb 5-1: config 0 descriptor?? [ 556.168156][ T6113] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 556.388324][ T7727] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 556.406631][ T6113] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 556.426045][ T6113] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 556.560763][ T7727] usb 6-1: Using ep0 maxpacket: 8 [ 556.569541][ T7727] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 556.578953][ T7727] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 556.603588][ T7727] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 556.616432][ T7727] usb 6-1: config 250 has no interface number 0 [ 556.622817][ T7727] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 556.640025][ T7727] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 556.651101][ T7727] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 556.663275][ T7727] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 556.682758][ T7727] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 556.697636][ T7727] usb 6-1: config 250 interface 228 has no altsetting 0 [ 556.714009][ T7727] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 556.724858][ T7727] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 556.735399][ T7727] usb 6-1: Product: syz [ 556.739780][ T7727] usb 6-1: SerialNumber: syz [ 556.764613][ T7727] hub 6-1:250.228: bad descriptor, ignoring hub [ 556.770985][ T7727] hub 6-1:250.228: probe with driver hub failed with error -5 [ 556.972093][ T7727] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 59 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 557.658375][T13899] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 557.939332][T13895] usb 6-1: reset high-speed USB device number 59 using dummy_hcd [ 558.132168][T13895] usb 6-1: device firmware changed [ 558.138725][ T7727] usb 6-1: USB disconnect, device number 59 [ 558.157347][ T7727] usblp0: removed [ 558.323625][ T7727] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 558.390189][ T29] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 558.483440][ T7727] usb 6-1: Using ep0 maxpacket: 8 [ 558.491610][ T7727] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 558.500868][ T7727] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 558.513740][ T7727] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 558.523771][ T7727] usb 6-1: config 250 has no interface number 0 [ 558.530674][ T7727] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 558.550059][ T7727] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 558.562998][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 558.571587][ T7727] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 558.583062][ T29] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 558.593903][ T7727] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 558.604914][ T29] usb 3-1: config 0 has no interface number 0 [ 558.613039][ T7727] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 558.631923][ T7727] usb 6-1: config 250 interface 228 has no altsetting 0 [ 558.644605][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 558.656217][ T7727] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 558.667849][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.677639][ T7727] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 558.688161][ T29] usb 3-1: Product: syz [ 558.692469][ T29] usb 3-1: Manufacturer: syz [ 558.697612][ T7727] usb 6-1: Product: syz [ 558.702578][ T7727] usb 6-1: SerialNumber: syz [ 558.710313][ T29] usb 3-1: SerialNumber: syz [ 558.732918][ T29] usb 3-1: config 0 descriptor?? [ 558.739197][ T7727] hub 6-1:250.228: bad descriptor, ignoring hub [ 558.749709][ T7727] hub 6-1:250.228: probe with driver hub failed with error -5 [ 558.763107][ T29] smsc95xx v2.0.0 [ 558.864788][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 558.874192][ T5925] usb 5-1: USB disconnect, device number 84 [ 558.902488][ T5925] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 558.957948][ T5925] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 558.985071][ T5925] quatech2 5-1:0.51: device disconnected [ 559.194705][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 559.206753][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 559.435387][ T29] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 559.451893][ T29] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 560.071328][ T7727] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 60 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 560.132616][ T7727] usb 6-1: USB disconnect, device number 60 [ 560.167231][ T7727] usblp0: removed [ 560.176111][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 560.187808][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 560.199322][ T51] Bluetooth: hci0: hardware error 0x00 [ 560.261795][T13917] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2681'. [ 560.535879][ T7727] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 560.698400][ T7727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.709888][ T7727] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.723778][ T7727] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.735995][ T7727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.744697][ T7727] usb 5-1: SerialNumber: syz [ 561.098169][T13915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.109609][T13915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.132863][ T7727] usb 5-1: 0:2 : does not exist [ 561.146225][ T7727] usb 5-1: unit 5 not found! [ 561.217026][ T7727] usb 5-1: USB disconnect, device number 85 [ 561.256027][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.151371][ T29] usb 3-1: USB disconnect, device number 95 [ 562.396234][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 562.686589][ T5830] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 562.859739][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 562.877144][ T5830] usb 3-1: not running at top speed; connect to a high speed hub [ 562.886462][ T5830] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.898336][ T5830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.912174][ T5830] usb 3-1: string descriptor 0 read error: -22 [ 562.918554][ T5830] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.932102][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.966710][ T5830] usb 3-1: 0:2 : does not exist [ 563.147942][T13945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2690'. [ 563.488360][ T7727] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 563.667861][ T7727] usb 5-1: Using ep0 maxpacket: 8 [ 563.681198][ T7727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 563.692066][ T7727] usb 5-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 1023 [ 563.702797][ T7727] usb 5-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 563.714827][ T7727] usb 5-1: config 1 interface 0 has no altsetting 0 [ 563.725155][ T7727] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 563.734511][ T7727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.742636][ T7727] usb 5-1: Product: syz [ 563.747481][ T7727] usb 5-1: Manufacturer: syz [ 563.752282][ T7727] usb 5-1: SerialNumber: syz [ 563.763363][T13947] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 563.786412][T13947] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 564.054029][ T7727] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 13 proto 2 vid 0x0525 pid 0xA4A8 [ 564.075811][ T7727] usb 5-1: USB disconnect, device number 86 [ 564.099338][ T7727] usblp0: removed [ 564.170239][ T5925] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 564.335176][ T5925] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 564.345394][ T5925] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 564.355939][ T5925] usb 6-1: config 8 has no interface number 0 [ 564.369914][ T5925] usb 6-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 564.380485][ T5925] usb 6-1: config 8 interface 80 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 564.394888][ T5925] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 564.404064][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.425516][ T5925] usb 6-1: NFC: intf ffff8880237a9000 id ffffffff8f1dc6e0 [ 564.488323][ T5830] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 564.501846][ T5830] usb 3-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 564.512035][ T5830] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 564.528981][ T5830] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 564.544670][ T5830] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 564.609397][ T5830] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 564.643878][ T9] usb 6-1: USB disconnect, device number 61 [ 564.692242][ T5830] usb 3-1: USB disconnect, device number 96 [ 564.961323][ T5925] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 565.129334][ T5925] usb 5-1: device descriptor read/64, error -71 [ 565.196595][T13955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2695'. [ 565.388890][ T5925] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 565.462462][T13963] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2699'. [ 565.539481][ T5925] usb 5-1: device descriptor read/64, error -71 [ 565.670624][ T5925] usb usb5-port1: attempt power cycle [ 566.051595][ T5925] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 566.095493][ T5925] usb 5-1: device descriptor read/8, error -71 [ 566.364183][ T5925] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 566.404810][ T5925] usb 5-1: device descriptor read/8, error -71 [ 566.531878][ T5925] usb usb5-port1: unable to enumerate USB device [ 567.541401][T13982] tmpfs: Bad value for 'mpol' [ 567.697466][T13986] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2709'. [ 567.886730][T13989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.103263][T13993] syzkaller1: entered promiscuous mode [ 568.111295][T13993] syzkaller1: entered allmulticast mode [ 568.262901][T13996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 568.290812][T13996] block device autoloading is deprecated and will be removed. [ 568.499563][ T29] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 568.681758][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 568.712429][ T29] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 568.732369][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.756228][ T29] usb 5-1: Product: syz [ 568.760566][ T29] usb 5-1: Manufacturer: syz [ 568.776449][ T29] usb 5-1: SerialNumber: syz [ 568.841672][T12937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 568.851840][ T29] usb 5-1: config 0 descriptor?? [ 568.857629][T12937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 568.874469][T12937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 568.882617][T12937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 568.892844][T12937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 568.902735][ T29] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 568.947958][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 568.984958][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 569.005735][T14009] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2719'. [ 569.023863][ T29] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 569.032068][ T29] usb 5-1: media controller created [ 569.159037][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.243105][T14006] chnl_net:caif_netlink_parms(): no params data found [ 569.276080][ T29] usb 5-1: selecting invalid altsetting 7 [ 569.322676][ T29] cxusb: set interface failed [ 569.327439][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 569.470272][ T29] DVB: Unable to find symbol lgdt330x_attach() [ 569.483181][ T29] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 569.579120][ T29] rc_core: IR keymap rc-dvico-portable not found [ 569.585635][ T29] Registered IR keymap rc-empty [ 569.593433][ T29] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 569.610811][ T29] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input57 [ 569.632984][ T29] dvb-usb: schedule remote query interval to 100 msecs. [ 569.642276][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.675226][ T29] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 569.683907][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.716132][T14006] bridge_slave_0: entered allmulticast mode [ 569.724136][ T29] usb 5-1: USB disconnect, device number 91 [ 569.756343][T14006] bridge_slave_0: entered promiscuous mode [ 569.797039][T14031] netlink: 'syz.5.2723': attribute type 11 has an invalid length. [ 569.847314][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.856545][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.866012][T14006] bridge_slave_1: entered allmulticast mode [ 569.888866][T14006] bridge_slave_1: entered promiscuous mode [ 569.903122][ T29] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 569.931944][ T5830] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 570.050561][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.075950][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.095560][ T30] audit: type=1326 audit(6060679788.179:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cfc19acb9 code=0x0 [ 570.126581][ T5830] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 570.143042][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.177679][ T5830] usb 3-1: config 0 descriptor?? [ 570.206440][ T1332] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.319709][ T1332] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.418199][ T1332] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.453007][T14006] team0: Port device team_slave_0 added [ 570.469605][T14006] team0: Port device team_slave_1 added [ 570.521935][ T5830] usb 3-1: Cannot set autoneg [ 570.528473][ T5830] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 570.574023][ T5830] usb 3-1: USB disconnect, device number 97 [ 570.631760][ T1332] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.666122][T14047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2728'. [ 570.731086][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.739420][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.771475][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.794080][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.801575][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.831132][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.886227][T14050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2729'. [ 571.021341][T14006] hsr_slave_0: entered promiscuous mode [ 571.066183][T14006] hsr_slave_1: entered promiscuous mode [ 571.086048][T14006] debugfs: 'hsr0' already exists in 'hsr' [ 571.094466][T14006] Cannot create hsr debugfs directory [ 571.118634][T12937] Bluetooth: hci2: command tx timeout [ 571.136034][T14055] FAULT_INJECTION: forcing a failure. [ 571.136034][T14055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.205604][T14055] CPU: 1 UID: 0 PID: 14055 Comm: syz.5.2731 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.205645][T14055] Tainted: [L]=SOFTLOCKUP [ 571.205654][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 571.205668][T14055] Call Trace: [ 571.205677][T14055] [ 571.205687][T14055] dump_stack_lvl+0xe8/0x150 [ 571.205722][T14055] should_fail_ex+0x412/0x560 [ 571.205761][T14055] _copy_from_user+0x2d/0xb0 [ 571.205788][T14055] ___sys_recvmsg+0x175/0x590 [ 571.205816][T14055] ? get_pid_task+0x20/0x1f0 [ 571.205836][T14055] ? get_pid_task+0x20/0x1f0 [ 571.205860][T14055] ? __pfx____sys_recvmsg+0x10/0x10 [ 571.205900][T14055] ? __fget_files+0x2a/0x420 [ 571.205944][T14055] ? __fget_files+0x3a0/0x420 [ 571.205981][T14055] __x64_sys_recvmsg+0x1ba/0x2a0 [ 571.206012][T14055] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 571.206049][T14055] ? __pfx_ksys_write+0x10/0x10 [ 571.206090][T14055] do_syscall_64+0xe2/0xf80 [ 571.206118][T14055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.206137][T14055] ? trace_irq_disable+0x37/0x100 [ 571.206158][T14055] ? clear_bhb_loop+0x40/0x90 [ 571.206183][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.206202][T14055] RIP: 0033:0x7f3cfc19acb9 [ 571.206220][T14055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.206237][T14055] RSP: 002b:00007f3cfcf93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 571.206258][T14055] RAX: ffffffffffffffda RBX: 00007f3cfc415fa0 RCX: 00007f3cfc19acb9 [ 571.206273][T14055] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 571.206287][T14055] RBP: 00007f3cfcf93090 R08: 0000000000000000 R09: 0000000000000000 [ 571.206300][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.206313][T14055] R13: 00007f3cfc416038 R14: 00007f3cfc415fa0 R15: 00007ffe27ef9db8 [ 571.206347][T14055] [ 571.431499][ T1332] bridge_slave_1: left allmulticast mode [ 571.453155][ T1332] bridge_slave_1: left promiscuous mode [ 571.459166][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.471768][ T1332] bridge_slave_0: left allmulticast mode [ 571.478142][ T1332] bridge_slave_0: left promiscuous mode [ 571.485773][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.114234][ T1332] ***** Releasing 0 refcount on 0000000000000000 [ 572.135148][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.152376][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.169089][ T1332] bond0 (unregistering): Released all slaves [ 572.182170][T14055] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2731'. [ 572.201607][T14058] syzkaller1: entered promiscuous mode [ 572.226968][T14058] syzkaller1: entered allmulticast mode [ 572.636437][ T6113] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 572.700222][ T1332] hsr_slave_0: left promiscuous mode [ 572.713670][ T1332] hsr_slave_1: left promiscuous mode [ 572.720015][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.730639][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.743535][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.752141][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.785244][ T1332] veth1_macvtap: left promiscuous mode [ 572.791637][ T1332] veth0_macvtap: left promiscuous mode [ 572.799583][ T1332] veth1_vlan: left promiscuous mode [ 572.804869][ T1332] veth0_vlan: left promiscuous mode [ 572.811397][ T6113] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.822160][ T6113] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.833447][ T6113] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 572.844196][ T6113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 572.853524][ T6113] usb 6-1: SerialNumber: syz [ 573.090248][ T6113] usb 6-1: 0:2 : does not exist [ 573.118561][ T6113] usb 6-1: unit 255 not found! [ 573.133183][ T6113] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 573.158223][ T6113] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 573.185496][ T6113] usb 6-1: 5:0: cannot get min/max values for control 6 (id 5) [ 573.205136][ T6113] usb 6-1: 5:0: cannot get min/max values for control 9 (id 5) [ 573.217550][ T6113] usb 6-1: 5:0: cannot get min/max values for control 13 (id 5) [ 573.239353][ T6113] usb 6-1: 5:0: cannot get min/max values for control 16 (id 5) [ 573.252986][ T6113] usb 6-1: 5:0: cannot get min/max values for control 19 (id 5) [ 573.306593][ T6113] usb 6-1: USB disconnect, device number 62 [ 573.342733][T12937] Bluetooth: hci2: command tx timeout [ 573.381574][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.408195][ T5884] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 573.555965][ T5884] usb 3-1: device descriptor read/64, error -71 [ 573.813648][ T5884] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 573.856876][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2736'. [ 573.867609][T14074] netlink: 'syz.5.2736': attribute type 10 has an invalid length. [ 573.909919][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 573.983578][ T5884] usb 3-1: device descriptor read/64, error -71 [ 573.990617][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 574.103999][ T5884] usb usb3-port1: attempt power cycle [ 574.422088][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 574.485898][ T5884] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 574.519736][ T5884] usb 3-1: device descriptor read/8, error -71 [ 574.592812][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 574.600578][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 574.609328][ T9] usb 5-1: config 0 has no interface number 0 [ 574.615664][ T9] usb 5-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 574.626137][ T9] usb 5-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 574.639477][ T9] usb 5-1: config 0 interface 251 has no altsetting 0 [ 574.648866][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 574.658769][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.666977][ T9] usb 5-1: Product: syz [ 574.674514][ T9] usb 5-1: Manufacturer: syz [ 574.679330][ T9] usb 5-1: SerialNumber: syz [ 574.688350][ T9] usb 5-1: config 0 descriptor?? [ 574.696292][T14078] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 574.704051][T14078] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 574.783632][T14074] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.791561][T14074] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.800515][ T5884] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 574.823498][T14074] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.831120][T14074] bridge0: port 2(bridge_slave_1) entered listening state [ 574.838884][T14074] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.846187][T14074] bridge0: port 1(bridge_slave_0) entered listening state [ 574.856375][ T5884] usb 3-1: device descriptor read/8, error -71 [ 574.868592][T14074] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 574.932260][T14078] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 574.963104][T14078] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 574.994452][ T5884] usb usb3-port1: unable to enumerate USB device [ 575.363641][T14006] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 575.403349][T14006] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 575.457806][T14006] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 575.510229][T14006] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 575.565820][T12937] Bluetooth: hci2: command tx timeout [ 575.853500][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.884694][T14006] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.900949][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.909228][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.935342][T11655] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.942857][T11655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.989065][T14108] syzkaller1: entered promiscuous mode [ 575.998726][T14108] syzkaller1: entered allmulticast mode [ 576.698727][ T6113] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 576.783819][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.896094][ T6113] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 576.907423][ T6113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.918963][ T6113] usb 3-1: Product: syz [ 576.925666][ T6113] usb 3-1: Manufacturer: syz [ 576.930836][ T6113] usb 3-1: SerialNumber: syz [ 577.351556][T14006] veth0_vlan: entered promiscuous mode [ 577.386781][T14006] veth1_vlan: entered promiscuous mode [ 577.387708][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 577.430449][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 577.447083][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 577.469117][ T9] asix 5-1:0.251: probe with driver asix failed with error -5 [ 577.477799][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 577.510403][ T9] usb 5-1: USB disconnect, device number 92 [ 577.537997][T14006] veth0_macvtap: entered promiscuous mode [ 577.552273][T14145] kvm: user requested TSC rate below hardware speed [ 577.595100][T14006] veth1_macvtap: entered promiscuous mode [ 577.646499][T14006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.690041][T14006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.739174][ T3500] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.757947][ T3500] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.781816][ T3500] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.799906][T12937] Bluetooth: hci2: command tx timeout [ 577.806560][ T1332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.948229][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.975964][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.024724][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 578.039570][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.052182][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.184972][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 578.196909][ T9] usb 5-1: config 0 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 578.207984][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 578.217591][ T9] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=c5.bc [ 578.228634][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.236861][ T9] usb 5-1: Product: syz [ 578.242465][ T9] usb 5-1: Manufacturer: syz [ 578.247235][ T9] usb 5-1: SerialNumber: syz [ 578.262797][ T9] usb 5-1: config 0 descriptor?? [ 578.274983][T14148] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 578.517843][ T9] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 578.529096][ T9] kvaser_usb 5-1:0.0: error -EPROTO: Failed to initialize card [ 578.539246][ T9] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -71 [ 578.561328][ T9] usb 5-1: USB disconnect, device number 93 [ 579.340958][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 579.363341][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 579.375202][ T6113] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 579.387187][ T6113] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 579.404136][ T6113] usb 3-1: USB disconnect, device number 102 [ 579.574118][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 579.750423][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 579.760740][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.771018][ T24] usb 5-1: Product: syz [ 579.776125][ T24] usb 5-1: Manufacturer: syz [ 579.781973][ T24] usb 5-1: SerialNumber: syz [ 580.233441][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 580.253803][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 580.385887][T14199] ALSA: seq fatal error: cannot create timer (-19) [ 581.744050][ T5914] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 581.758479][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 581.798272][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 581.830145][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 581.846635][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 581.857975][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 581.872389][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 581.890557][ T24] usb 5-1: USB disconnect, device number 94 [ 581.904428][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 581.910466][ T5914] usb 6-1: too many configurations: 34, using maximum allowed: 8 [ 581.923275][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 581.934485][ T5914] usb 6-1: config 0 has no interface number 0 [ 581.943662][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 581.956037][ T5914] usb 6-1: config 0 has no interface number 0 [ 581.978603][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 581.989992][ T5914] usb 6-1: config 0 has no interface number 0 [ 581.997837][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 582.007919][ T5914] usb 6-1: config 0 has no interface number 0 [ 582.016729][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 582.028287][ T5914] usb 6-1: config 0 has no interface number 0 [ 582.037324][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 582.048633][ T5914] usb 6-1: config 0 has no interface number 0 [ 582.060992][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 582.072192][ T5914] usb 6-1: config 0 has no interface number 0 [ 582.080559][ T5914] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 582.090365][ T5914] usb 6-1: config 0 has no interface number 0 [ 582.101147][ T5914] usb 6-1: New USB device found, idVendor=19d2, idProduct=c2d5, bcdDevice=cf.98 [ 582.112142][ T5914] usb 6-1: New USB device strings: Mfr=75, Product=85, SerialNumber=179 [ 582.121592][ T5914] usb 6-1: Product: syz [ 582.126206][ T5914] usb 6-1: Manufacturer: syz [ 582.131482][ T5914] usb 6-1: SerialNumber: syz [ 582.143639][ T5914] usb 6-1: config 0 descriptor?? [ 582.369063][T14231] sg_write: data in/out 768/46 bytes for SCSI command 0x0-- guessing data in; [ 582.369063][T14231] program syz.4.2762 not setting count and/or reply_len properly [ 582.393405][ T24] usb 6-1: USB disconnect, device number 63 [ 582.483412][T14234] program syz.4.2763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 582.498158][T14234] syzkaller1: entered promiscuous mode [ 582.516308][T14234] syzkaller1: entered allmulticast mode [ 583.176697][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 583.362765][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.373119][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.384237][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 583.394138][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 583.402931][ T24] usb 5-1: SerialNumber: syz [ 583.551045][ T29] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 583.640916][ T24] usb 5-1: 0:2 : does not exist [ 583.646092][ T24] usb 5-1: unit 255 not found! [ 583.659212][ T24] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 583.672850][ T24] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 583.686880][ T24] usb 5-1: 5:0: cannot get min/max values for control 6 (id 5) [ 583.701693][ T24] usb 5-1: 5:0: cannot get min/max values for control 9 (id 5) [ 583.717275][ T29] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 583.727706][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.738313][ T24] usb 5-1: 5:0: cannot get min/max values for control 13 (id 5) [ 583.746726][ T29] usb 6-1: Product: syz [ 583.751043][ T29] usb 6-1: Manufacturer: syz [ 583.756472][ T29] usb 6-1: SerialNumber: syz [ 583.764334][ T24] usb 5-1: 5:0: cannot get min/max values for control 16 (id 5) [ 583.786388][ T24] usb 5-1: 5:0: cannot get min/max values for control 19 (id 5) [ 583.825667][ T24] usb 5-1: USB disconnect, device number 95 [ 583.866571][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.213053][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 584.227651][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 584.272233][T14257] binder: 14256:14257 unknown command 0 [ 584.279911][T14257] binder: 14256:14257 ioctl c0306201 200000004a40 returned -22 [ 585.439380][T14273] netlink: 'syz.4.2777': attribute type 1 has an invalid length. [ 585.541302][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 585.591781][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 585.592870][ T5830] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 585.629676][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 585.644330][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 585.666609][ T29] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 585.680239][ T29] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 585.704536][ T29] usb 6-1: USB disconnect, device number 64 [ 585.790729][T14282] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 585.797742][T14282] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 585.811964][ T5830] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 585.822136][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.834322][ T5830] usb 3-1: Product: syz [ 585.839074][ T5830] usb 3-1: Manufacturer: syz [ 585.844634][ T5830] usb 3-1: SerialNumber: syz [ 585.854421][ T5830] usb 3-1: config 0 descriptor?? [ 586.087597][T14269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.098548][T14269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.169133][ T5914] usb 3-1: USB disconnect, device number 103 [ 586.235445][ T5830] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 586.394590][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 586.402124][ T5830] usb 5-1: config 127 has an invalid interface number: 102 but max is 2 [ 586.410952][ T5830] usb 5-1: config 127 has no interface number 2 [ 586.418249][ T5830] usb 5-1: config 127 interface 0 has no altsetting 0 [ 586.425232][ T5830] usb 5-1: config 127 interface 1 has no altsetting 0 [ 586.432344][ T5830] usb 5-1: config 127 interface 102 has no altsetting 0 [ 586.442119][ T5830] usb 5-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 586.452073][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.461032][ T5830] usb 5-1: Product: syz [ 586.466014][ T5830] usb 5-1: Manufacturer: syz [ 586.471066][ T5830] usb 5-1: SerialNumber: syz [ 586.703845][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2782'. [ 586.719916][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.730278][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.755895][ T5830] usb 5-1: selecting invalid altsetting 0 [ 586.762076][ T5830] usb 5-1: Could not set interface, error -22 [ 586.774305][ T5830] usb 5-1: selecting invalid altsetting 0 [ 586.780703][ T5830] usb 5-1: Could not set interface, error -22 [ 586.799438][ T5830] usb 5-1: USB disconnect, device number 96 [ 587.174947][ T5830] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 587.335260][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 587.343332][ T5830] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 587.356968][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.368564][ T5830] usb 3-1: config 0 descriptor?? [ 587.395308][ T5830] gspca_main: sunplus-2.14.0 probing 041e:400b [ 587.424032][T14305] FAULT_INJECTION: forcing a failure. [ 587.424032][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 587.438013][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.4.2787 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.438048][T14305] Tainted: [L]=SOFTLOCKUP [ 587.438056][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 587.438069][T14305] Call Trace: [ 587.438077][T14305] [ 587.438092][T14305] dump_stack_lvl+0xe8/0x150 [ 587.438119][T14305] should_fail_ex+0x412/0x560 [ 587.438162][T14305] should_failslab+0xa8/0x100 [ 587.438186][T14305] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 587.438218][T14305] ? vfs_parse_monolithic_sep+0x21d/0x360 [ 587.438259][T14305] kmemdup_nul+0x36/0xf0 [ 587.438276][T14305] vfs_parse_monolithic_sep+0x21d/0x360 [ 587.438299][T14305] ? __pfx_ovl_next_opt+0x10/0x10 [ 587.438336][T14305] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 587.438371][T14305] ? get_user_ns+0xff/0x1f0 [ 587.438403][T14305] ? alloc_fs_context+0x4b0/0x590 [ 587.438439][T14305] do_new_mount+0x304/0xd30 [ 587.438463][T14305] ? apparmor_capable+0x137/0x1a0 [ 587.438508][T14305] ? security_capable+0x7e/0x2c0 [ 587.438529][T14305] ? __pfx_do_new_mount+0x10/0x10 [ 587.438553][T14305] ? ns_capable+0x89/0xe0 [ 587.438586][T14305] ? path_mount+0x63d/0x1000 [ 587.438608][T14305] ? user_path_at+0xd4/0x160 [ 587.438646][T14305] __se_sys_mount+0x31d/0x420 [ 587.438680][T14305] ? __pfx___se_sys_mount+0x10/0x10 [ 587.438711][T14305] ? __x64_sys_mount+0x20/0xc0 [ 587.438743][T14305] do_syscall_64+0xe2/0xf80 [ 587.438765][T14305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.438780][T14305] ? trace_irq_disable+0x37/0x100 [ 587.438814][T14305] ? clear_bhb_loop+0x40/0x90 [ 587.438840][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.438869][T14305] RIP: 0033:0x7feda6d9acb9 [ 587.438889][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.438908][T14305] RSP: 002b:00007feda7d38028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 587.438925][T14305] RAX: ffffffffffffffda RBX: 00007feda7015fa0 RCX: 00007feda6d9acb9 [ 587.438936][T14305] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000 [ 587.438946][T14305] RBP: 00007feda7d38090 R08: 0000200000000700 R09: 0000000000000000 [ 587.438974][T14305] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 587.438986][T14305] R13: 00007feda7016038 R14: 00007feda7015fa0 R15: 00007ffc269e2458 [ 587.439019][T14305] [ 587.913403][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.923357][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.297473][ T5914] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 588.468282][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 588.482708][ T5914] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.500607][ T5914] usb 5-1: config 0 has no interface number 0 [ 588.511181][ T5914] usb 5-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 588.546503][ T5914] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.557022][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.567583][ T5914] usb 5-1: Product: syz [ 588.576595][ T5914] usb 5-1: Manufacturer: syz [ 588.582983][ T5914] usb 5-1: SerialNumber: syz [ 588.596723][ T5914] usb 5-1: config 0 descriptor?? [ 588.612321][ T5914] smsc95xx v2.0.0 [ 588.627462][ T5914] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 588.639125][ T5914] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 588.693329][ T5830] gspca_sunplus: reg_w_riv err -110 [ 588.699150][ T5830] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 588.832042][T14313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.845529][T14313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.856367][ T5914] usb 5-1: USB disconnect, device number 97 [ 589.122783][ T29] usb 3-1: USB disconnect, device number 104 [ 589.783117][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 589.943513][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 589.958003][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 589.983345][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 589.993477][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.002295][ T24] usb 5-1: Product: syz [ 590.007195][ T24] usb 5-1: Manufacturer: syz [ 590.012315][ T24] usb 5-1: SerialNumber: syz [ 590.035493][ T24] usb 5-1: config 0 descriptor?? [ 590.052280][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 590.221362][ T5914] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 590.381709][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 590.389073][ T5914] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 590.398644][ T5914] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 590.412601][ T5914] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 590.423997][ T5914] usb 3-1: config 250 has no interface number 0 [ 590.436368][ T5914] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 590.448721][ T5914] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 590.471518][ T5914] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 590.483372][ T24] gspca_zc3xx: reg_w_i err -71 [ 590.494638][ T5914] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 590.506942][ T5914] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 590.540085][ T5914] usb 3-1: config 250 interface 228 has no altsetting 0 [ 590.552346][ T5914] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 590.565527][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 590.575389][ T5914] usb 3-1: Product: syz [ 590.579716][ T5914] usb 3-1: SerialNumber: syz [ 590.595092][ T5914] hub 3-1:250.228: bad descriptor, ignoring hub [ 590.602114][ T5914] hub 3-1:250.228: probe with driver hub failed with error -5 [ 590.816258][ T5914] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 105 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 591.108684][ T5830] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 591.138257][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 591.148761][ T24] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 591.172450][ T24] usb 5-1: USB disconnect, device number 98 [ 591.271203][ T5830] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 591.282881][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.295885][ T5830] usb 6-1: config 0 descriptor?? [ 591.332653][ T5830] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 591.389899][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 591.399015][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 591.486742][T14333] usb 3-1: reset high-speed USB device number 105 using dummy_hcd [ 591.507925][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 591.676056][T14333] usb 3-1: device firmware changed [ 591.683558][ T5818] usb 3-1: USB disconnect, device number 105 [ 591.693400][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 591.709530][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 591.719850][ T5818] usblp0: removed [ 591.732938][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 591.747411][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.756408][ T24] usb 5-1: Product: Ŋ웭䄫僄ﷰ䈌㟲ꘔ⫔唣㞙럭楓跬滖倴㫄쨲⣏Ὃ䋄슈垲伭❅샊䲖翱⁂쬃 [ 591.772496][ T24] usb 5-1: Manufacturer: Љ [ 591.777100][ T24] usb 5-1: SerialNumber: ࠓ [ 591.785743][ T24] usb 5-1: config 0 descriptor?? [ 591.798874][ T5830] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 591.815757][ T5830] pac7311 6-1:0.0: probe with driver pac7311 failed with error -71 [ 591.830001][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 591.844186][ T5830] usb 6-1: USB disconnect, device number 65 [ 591.878357][ T5818] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 592.015670][ T24] gspca_zc3xx: reg_w_i err -71 [ 592.038768][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 592.046195][ T5818] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 592.055818][ T5818] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 592.067273][ T5818] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 592.079498][ T5818] usb 3-1: config 250 has no interface number 0 [ 592.088110][ T5818] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 592.100955][ T5818] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 592.118488][ T5818] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 592.129586][ T5818] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 592.141832][ T5818] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 592.157804][ T5818] usb 3-1: config 250 interface 228 has no altsetting 0 [ 592.168670][ T5818] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 592.178098][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 592.186734][ T5818] usb 3-1: Product: syz [ 592.192009][ T5818] usb 3-1: SerialNumber: syz [ 592.209705][ T5818] hub 3-1:250.228: bad descriptor, ignoring hub [ 592.217135][ T5818] hub 3-1:250.228: probe with driver hub failed with error -5 [ 592.669435][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 592.677312][ T24] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 592.702664][ T24] usb 5-1: USB disconnect, device number 99 [ 593.214614][ T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 593.358743][ T24] usb 5-1: device descriptor read/64, error -71 [ 593.539969][ T5818] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 106 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 593.600650][ T5818] usb 3-1: USB disconnect, device number 106 [ 593.616460][T14411] netlink: 'syz.2.2803': attribute type 32 has an invalid length. [ 593.618605][ T5818] usblp0: removed [ 593.631396][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 593.780991][ T24] usb 5-1: device descriptor read/64, error -71 [ 593.817360][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2805'. [ 593.872817][T14417] sit0: entered promiscuous mode [ 593.882887][T14417] netlink: 'syz.2.2806': attribute type 1 has an invalid length. [ 593.890788][T14417] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2806'. [ 593.909519][ T24] usb usb5-port1: attempt power cycle [ 594.155269][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 594.274813][ T24] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 594.294074][ T9] usb 3-1: device descriptor read/64, error -71 [ 594.305429][ T24] usb 5-1: device descriptor read/8, error -71 [ 594.550967][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 594.561304][ T24] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 594.583420][ T24] usb 5-1: device descriptor read/8, error -71 [ 594.689634][ T9] usb 3-1: device descriptor read/64, error -71 [ 594.701156][ T24] usb usb5-port1: unable to enumerate USB device [ 594.808201][ T9] usb usb3-port1: attempt power cycle [ 595.170868][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 595.192791][ T9] usb 3-1: device descriptor read/8, error -71 [ 595.448834][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 595.470606][ T9] usb 3-1: device descriptor read/8, error -71 [ 595.589548][ T9] usb usb3-port1: unable to enumerate USB device [ 596.000352][T14424] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2808'. [ 596.571690][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 596.731829][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 596.739921][ T24] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 596.749244][ T24] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 596.759442][ T24] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 596.770091][ T24] usb 6-1: config 250 has no interface number 0 [ 596.778416][ T24] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 596.790935][ T24] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 596.802124][ T24] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 596.813225][ T24] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 596.823734][ T24] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 596.838255][ T24] usb 6-1: config 250 interface 228 has no altsetting 0 [ 596.847210][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 596.857204][ T24] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 596.867327][ T24] usb 6-1: Product: syz [ 596.872402][ T24] usb 6-1: SerialNumber: syz [ 596.886103][ T24] hub 6-1:250.228: bad descriptor, ignoring hub [ 596.893647][ T24] hub 6-1:250.228: probe with driver hub failed with error -5 [ 597.112582][ T24] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 66 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 597.692293][T14437] cgroup: fork rejected by pids controller in /syz4 [ 598.085461][T14434] usb 6-1: reset high-speed USB device number 66 using dummy_hcd [ 598.252947][T14434] usb 6-1: device firmware changed [ 598.258869][ T24] usb 6-1: USB disconnect, device number 66 [ 598.268374][ T24] usblp0: removed [ 598.356879][ T5818] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 598.410895][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 598.519331][ T5818] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 598.529930][ T5818] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 598.539205][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.560462][ T5818] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 598.570332][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 598.578161][ T24] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 598.586961][ T24] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 598.596208][ T24] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 598.605965][ T24] usb 6-1: config 250 has no interface number 0 [ 598.612385][ T24] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 598.625959][ T24] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 598.638133][ T24] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.649005][ T24] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 598.659541][ T24] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 598.673818][ T24] usb 6-1: config 250 interface 228 has no altsetting 0 [ 598.683234][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 598.693743][ T24] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 598.702252][ T24] usb 6-1: Product: syz [ 598.706776][ T24] usb 6-1: SerialNumber: syz [ 598.721226][ T24] hub 6-1:250.228: bad descriptor, ignoring hub [ 598.728651][ T24] hub 6-1:250.228: probe with driver hub failed with error -5 [ 599.000894][ T66] bridge_slave_1: left allmulticast mode [ 599.014058][ T66] bridge_slave_1: left promiscuous mode [ 599.020504][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.034552][ T66] bridge_slave_0: left allmulticast mode [ 599.042126][ T66] bridge_slave_0: left promiscuous mode [ 599.048579][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.619023][ T66] ***** Releasing 0 refcount on 0000000000000000 [ 599.631209][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.643970][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.655974][ T66] bond0 (unregistering): Released all slaves [ 599.726782][ T66] tipc: Disabling bearer [ 599.745876][ T66] tipc: Left network mode [ 599.795851][ T66] IPVS: stopping master sync thread 8604 ... [ 599.899542][ T5818] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 599.935673][ T5818] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 599.947182][ T5818] stv0680 5-1:4.0: last error: 86, command = 0x78 [ 599.970471][ T5818] usb 5-1: USB disconnect, device number 104 [ 600.084787][ T24] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 67 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 600.125260][ T24] usb 6-1: USB disconnect, device number 67 [ 600.168614][ T24] usblp0: removed [ 600.196765][T14484] FAULT_INJECTION: forcing a failure. [ 600.196765][T14484] name failslab, interval 1, probability 0, space 0, times 0 [ 600.212666][T14484] CPU: 0 UID: 0 PID: 14484 Comm: syz.5.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.212701][T14484] Tainted: [L]=SOFTLOCKUP [ 600.212708][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 600.212721][T14484] Call Trace: [ 600.212730][T14484] [ 600.212739][T14484] dump_stack_lvl+0xe8/0x150 [ 600.212776][T14484] should_fail_ex+0x412/0x560 [ 600.212814][T14484] should_failslab+0xa8/0x100 [ 600.212837][T14484] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 600.212869][T14484] ? __get_vm_area_node+0x13f/0x300 [ 600.212903][T14484] __get_vm_area_node+0x13f/0x300 [ 600.212935][T14484] __vmalloc_node_range_noprof+0x372/0x1730 [ 600.212965][T14484] ? system_heap_vmap+0x1b5/0x570 [ 600.212996][T14484] ? rcu_is_watching+0x15/0xb0 [ 600.213032][T14484] ? system_heap_vmap+0xaa/0x570 [ 600.213052][T14484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 600.213080][T14484] ? system_heap_vmap+0x1b5/0x570 [ 600.213098][T14484] vmalloc_noprof+0xb2/0xe0 [ 600.213118][T14484] ? system_heap_vmap+0x1b5/0x570 [ 600.213136][T14484] system_heap_vmap+0x1b5/0x570 [ 600.213154][T14484] ? rcu_is_watching+0x15/0xb0 [ 600.213177][T14484] ? __pfx_system_heap_vmap+0x10/0x10 [ 600.213193][T14484] ? __ww_mutex_lock+0x63a/0x2840 [ 600.213222][T14484] ? __pfx_system_heap_vmap+0x10/0x10 [ 600.213239][T14484] dma_buf_vmap+0x244/0x3c0 [ 600.213258][T14484] ? __pfx_dma_buf_vmap+0x10/0x10 [ 600.213273][T14484] ? __pfx___ww_mutex_lock+0x10/0x10 [ 600.213299][T14484] drm_gem_shmem_vmap_locked+0x14c/0x7d0 [ 600.213326][T14484] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 600.213346][T14484] ? drm_gem_vmap+0x25/0x1d0 [ 600.213368][T14484] drm_gem_vmap+0x10a/0x1d0 [ 600.213386][T14484] drm_gem_fb_vmap+0xaa/0x8d0 [ 600.213409][T14484] drm_atomic_helper_prepare_planes+0x2d6/0xb60 [ 600.213436][T14484] drm_atomic_helper_commit+0x19d/0xb10 [ 600.213457][T14484] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 600.213473][T14484] drm_atomic_commit+0x246/0x2b0 [ 600.213501][T14484] ? __pfx_drm_atomic_commit+0x10/0x10 [ 600.213518][T14484] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 600.213535][T14484] ? __pfx___drm_printfn_info+0x10/0x10 [ 600.213559][T14484] ? drm_mode_object_get+0xcf/0x140 [ 600.213581][T14484] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 600.213604][T14484] drm_atomic_helper_update_plane+0x248/0x3b0 [ 600.213627][T14484] drm_mode_cursor_common+0xc37/0x13c0 [ 600.213665][T14484] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 600.213682][T14484] ? kasan_save_free_info+0x46/0x50 [ 600.213727][T14484] ? __lock_acquire+0x6b5/0x2cf0 [ 600.213749][T14484] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 600.213771][T14484] drm_mode_cursor_ioctl+0xd4/0x130 [ 600.213792][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 600.213817][T14484] ? do_raw_spin_unlock+0xf5/0x210 [ 600.213836][T14484] ? _raw_spin_unlock+0x28/0x50 [ 600.213853][T14484] ? drm_is_current_master+0x19f/0x200 [ 600.213877][T14484] drm_ioctl_kernel+0x2df/0x3b0 [ 600.213897][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 600.213915][T14484] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 600.213939][T14484] drm_ioctl+0x6ba/0xb80 [ 600.213960][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 600.213981][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 600.214041][T14484] ? __fget_files+0x2a/0x420 [ 600.214074][T14484] ? bpf_lsm_file_ioctl+0x9/0x20 [ 600.214104][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 600.214121][T14484] __se_sys_ioctl+0xfc/0x170 [ 600.214138][T14484] do_syscall_64+0xe2/0xf80 [ 600.214158][T14484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.214173][T14484] ? trace_irq_disable+0x37/0x100 [ 600.214188][T14484] ? clear_bhb_loop+0x40/0x90 [ 600.214207][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.214222][T14484] RIP: 0033:0x7f3cfc19acb9 [ 600.214237][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.214250][T14484] RSP: 002b:00007f3cfcf93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.214266][T14484] RAX: ffffffffffffffda RBX: 00007f3cfc415fa0 RCX: 00007f3cfc19acb9 [ 600.214277][T14484] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 600.214288][T14484] RBP: 00007f3cfcf93090 R08: 0000000000000000 R09: 0000000000000000 [ 600.214297][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.214306][T14484] R13: 00007f3cfc416038 R14: 00007f3cfc415fa0 R15: 00007ffe27ef9db8 [ 600.214330][T14484] [ 600.214376][ T66] hsr_slave_0: left promiscuous mode [ 600.216939][T14484] syz.5.2816: vmalloc error: size 264, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 600.696603][ T66] hsr_slave_1: left promiscuous mode [ 600.699564][T14484] ,cpuset=/,mems_allowed=0-1 [ 600.726277][T14484] CPU: 1 UID: 0 PID: 14484 Comm: syz.5.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.726312][T14484] Tainted: [L]=SOFTLOCKUP [ 600.726320][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 600.726334][T14484] Call Trace: [ 600.726343][T14484] [ 600.726353][T14484] dump_stack_lvl+0xe8/0x150 [ 600.726387][T14484] warn_alloc+0x249/0x340 [ 600.726426][T14484] ? __pfx_warn_alloc+0x10/0x10 [ 600.726458][T14484] ? __get_vm_area_node+0x13f/0x300 [ 600.726491][T14484] ? __get_vm_area_node+0x2b5/0x300 [ 600.726526][T14484] __vmalloc_node_range_noprof+0x397/0x1730 [ 600.726560][T14484] ? rcu_is_watching+0x15/0xb0 [ 600.726612][T14484] ? system_heap_vmap+0xaa/0x570 [ 600.726650][T14484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 600.726696][T14484] ? system_heap_vmap+0x1b5/0x570 [ 600.726721][T14484] vmalloc_noprof+0xb2/0xe0 [ 600.726749][T14484] ? system_heap_vmap+0x1b5/0x570 [ 600.726774][T14484] system_heap_vmap+0x1b5/0x570 [ 600.726800][T14484] ? rcu_is_watching+0x15/0xb0 [ 600.726833][T14484] ? __pfx_system_heap_vmap+0x10/0x10 [ 600.726854][T14484] ? __ww_mutex_lock+0x63a/0x2840 [ 600.726896][T14484] ? __pfx_system_heap_vmap+0x10/0x10 [ 600.726920][T14484] dma_buf_vmap+0x244/0x3c0 [ 600.726946][T14484] ? __pfx_dma_buf_vmap+0x10/0x10 [ 600.726968][T14484] ? __pfx___ww_mutex_lock+0x10/0x10 [ 600.727006][T14484] drm_gem_shmem_vmap_locked+0x14c/0x7d0 [ 600.727044][T14484] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 600.727072][T14484] ? drm_gem_vmap+0x25/0x1d0 [ 600.727103][T14484] drm_gem_vmap+0x10a/0x1d0 [ 600.727128][T14484] drm_gem_fb_vmap+0xaa/0x8d0 [ 600.727162][T14484] drm_atomic_helper_prepare_planes+0x2d6/0xb60 [ 600.727200][T14484] drm_atomic_helper_commit+0x19d/0xb10 [ 600.727230][T14484] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 600.727253][T14484] drm_atomic_commit+0x246/0x2b0 [ 600.727288][T14484] ? __pfx_drm_atomic_commit+0x10/0x10 [ 600.727311][T14484] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 600.727333][T14484] ? __pfx___drm_printfn_info+0x10/0x10 [ 600.727366][T14484] ? drm_mode_object_get+0xcf/0x140 [ 600.727398][T14484] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 600.727431][T14484] drm_atomic_helper_update_plane+0x248/0x3b0 [ 600.727464][T14484] drm_mode_cursor_common+0xc37/0x13c0 [ 600.727521][T14484] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 600.727545][T14484] ? kasan_save_free_info+0x46/0x50 [ 600.727610][T14484] ? __lock_acquire+0x6b5/0x2cf0 [ 600.727648][T14484] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 600.727679][T14484] drm_mode_cursor_ioctl+0xd4/0x130 [ 600.727709][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 600.727740][T14484] ? do_raw_spin_unlock+0xf5/0x210 [ 600.727767][T14484] ? _raw_spin_unlock+0x28/0x50 [ 600.727791][T14484] ? drm_is_current_master+0x19f/0x200 [ 600.727824][T14484] drm_ioctl_kernel+0x2df/0x3b0 [ 600.727853][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 600.727878][T14484] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 600.727914][T14484] drm_ioctl+0x6ba/0xb80 [ 600.727943][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 600.727974][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 600.728011][T14484] ? __fget_files+0x2a/0x420 [ 600.728044][T14484] ? bpf_lsm_file_ioctl+0x9/0x20 [ 600.728074][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 600.728097][T14484] __se_sys_ioctl+0xfc/0x170 [ 600.728121][T14484] do_syscall_64+0xe2/0xf80 [ 600.728150][T14484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.728171][T14484] ? trace_irq_disable+0x37/0x100 [ 600.728191][T14484] ? clear_bhb_loop+0x40/0x90 [ 600.728218][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.728239][T14484] RIP: 0033:0x7f3cfc19acb9 [ 600.728260][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.728278][T14484] RSP: 002b:00007f3cfcf93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.728301][T14484] RAX: ffffffffffffffda RBX: 00007f3cfc415fa0 RCX: 00007f3cfc19acb9 [ 600.728317][T14484] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 600.728332][T14484] RBP: 00007f3cfcf93090 R08: 0000000000000000 R09: 0000000000000000 [ 600.728345][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.728357][T14484] R13: 00007f3cfc416038 R14: 00007f3cfc415fa0 R15: 00007ffe27ef9db8 [ 600.728399][T14484] [ 600.728489][T14484] Mem-Info: [ 600.749939][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.758378][T14484] active_anon:7608 inactive_anon:0 isolated_anon:0 [ 600.758378][T14484] active_file:19145 inactive_file:40209 isolated_file:0 [ 600.758378][T14484] unevictable:768 dirty:58 writeback:0 [ 600.758378][T14484] slab_reclaimable:11869 slab_unreclaimable:100465 [ 600.758378][T14484] mapped:26113 shmem:1371 pagetables:1665 [ 600.758378][T14484] sec_pagetables:0 bounce:0 [ 600.758378][T14484] kernel_misc_reclaimable:0 [ 600.758378][T14484] free:1306260 free_pcp:10553 free_cma:0 [ 600.764815][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.778709][T14484] Node 0 active_anon:30432kB inactive_anon:0kB active_file:76512kB inactive_file:160636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104384kB dirty:232kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13196kB pagetables:6532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 601.142460][T14487] FAULT_INJECTION: forcing a failure. [ 601.142460][T14487] name failslab, interval 1, probability 0, space 0, times 0 [ 601.142543][T14487] CPU: 0 UID: 0 PID: 14487 Comm: syz.4.2817 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.142572][T14487] Tainted: [L]=SOFTLOCKUP [ 601.142581][T14487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 601.142594][T14487] Call Trace: [ 601.142602][T14487] [ 601.142612][T14487] dump_stack_lvl+0xe8/0x150 [ 601.142645][T14487] should_fail_ex+0x412/0x560 [ 601.142695][T14487] should_failslab+0xa8/0x100 [ 601.142718][T14487] __kmalloc_cache_noprof+0x88/0x660 [ 601.142750][T14487] ? fuse_dentry_revalidate+0x38c/0xad0 [ 601.142788][T14487] fuse_dentry_revalidate+0x38c/0xad0 [ 601.142826][T14487] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 601.142888][T14487] ? __d_lookup+0x66/0x780 [ 601.142932][T14487] lookup_one_qstr_excl+0x26e/0x360 [ 601.142999][T14487] __start_renaming+0x1db/0x410 [ 601.143145][T14487] filename_renameat2+0x38c/0x9c0 [ 601.143217][T14487] ? __might_fault+0xaf/0x130 [ 601.143293][T14487] ? __might_fault+0xaf/0x130 [ 601.143384][T14487] ? __pfx_filename_renameat2+0x10/0x10 [ 601.143441][T14487] ? do_getname+0x151/0x250 [ 601.143479][T14487] __se_sys_rename+0x55/0x2c0 [ 601.143556][T14487] do_syscall_64+0xe2/0xf80 [ 601.143630][T14487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.143685][T14487] ? clear_bhb_loop+0x40/0x90 [ 601.143751][T14487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.143813][T14487] RIP: 0033:0x7feda6d9acb9 [ 601.143858][T14487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.143909][T14487] RSP: 002b:00007feda7d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 601.143964][T14487] RAX: ffffffffffffffda RBX: 00007feda7016090 RCX: 00007feda6d9acb9 [ 601.144005][T14487] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000100 [ 601.144038][T14487] RBP: 00007feda7d17090 R08: 0000000000000000 R09: 0000000000000000 [ 601.144071][T14487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.144104][T14487] R13: 00007feda7016128 R14: 00007feda7016090 R15: 00007ffc269e2458 [ 601.144197][T14487] [ 601.513081][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.523346][T14484] Node 1 active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 601.542151][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.582391][ T66] veth1_macvtap: left promiscuous mode [ 601.588107][ T66] veth0_macvtap: left promiscuous mode [ 601.594044][ T66] veth1_vlan: left promiscuous mode [ 601.600020][ T66] veth0_vlan: left promiscuous mode [ 601.614254][T14484] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.656321][T14484] lowmem_reserve[]: 0 2483 2485 2485 2485 [ 601.665090][T14484] Node 0 DMA32 free:1272460kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30436kB inactive_anon:0kB active_file:76512kB inactive_file:160636kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2543116kB mlocked:0kB bounce:0kB free_pcp:41432kB local_pcp:20756kB free_cma:0kB [ 601.707745][T14484] lowmem_reserve[]: 0 0 1 1 1 [ 601.712828][T14484] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 601.750958][T14484] lowmem_reserve[]: 0 0 0 0 0 [ 601.756916][T14484] Node 1 Normal free:3938020kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:68kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 601.790772][T14484] lowmem_reserve[]: 0 0 0 0 0 [ 601.795794][T14484] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 601.813749][T14484] Node 0 DMA32: 2139*4kB (UME) 3240*8kB (UME) 1314*16kB (UME) 903*32kB (UME) 442*64kB (UME) 201*128kB (UME) 148*256kB (UME) 67*512kB (UM) 93*1024kB (UME) 18*2048kB (UME) 227*4096kB (UM) = 1272492kB [ 601.839000][T14484] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 601.852408][T14484] Node 1 Normal: 3*4kB (UM) 5*8kB (UE) 17*16kB (UME) 19*32kB (UME) 11*64kB (UE) 11*128kB (UME) 5*256kB (UME) 7*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 957*4096kB (M) = 3938020kB [ 601.874333][T14484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 601.884497][T14484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 601.895186][T14484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 601.908159][T14484] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 601.918997][T14484] 60723 total pagecache pages [ 601.923743][T14484] 0 pages in swap cache [ 601.930620][T14484] Free swap = 124996kB [ 601.935353][T14484] Total swap = 124996kB [ 601.940480][T14484] 2097051 pages RAM [ 601.944632][T14484] 0 pages HighMem/MovableOnly [ 601.953592][T14484] 429182 pages reserved [ 601.958373][T14484] 0 pages cma reserved [ 601.964384][T14484] ------------[ cut here ]------------ [ 601.971004][T14484] ret [ 601.971032][T14484] WARNING: drivers/dma-buf/dma-buf.c:1606 at dma_buf_vmap+0x30f/0x3c0, CPU#0: syz.5.2816/14484 [ 601.985092][T14484] Modules linked in: [ 602.002151][T14484] CPU: 0 UID: 0 PID: 14484 Comm: syz.5.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.014261][T14484] Tainted: [L]=SOFTLOCKUP [ 602.021061][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 602.031642][T14484] RIP: 0010:dma_buf_vmap+0x30f/0x3c0 [ 602.037064][T14484] Code: cc cc cc e8 33 37 b3 fb 90 0f 0b 90 b8 ea ff ff ff eb b4 e8 23 37 b3 fb 90 0f 0b 90 e9 11 fe ff ff e8 15 37 b3 fb 44 89 f0 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df eb 8e e8 9d 73 7a 05 48 c7 [ 602.057217][T14484] RSP: 0018:ffffc9000254f3a0 EFLAGS: 00010293 [ 602.063362][T14484] RAX: 00000000fffffff4 RBX: 1ffff920004a9e78 RCX: ffff888030e85ac0 [ 602.072099][T14484] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 602.080606][T14484] RBP: ffffc9000254f450 R08: ffffc9000254f227 R09: 1ffff920004a9e44 [ 602.088824][T14484] R10: dffffc0000000000 R11: fffff520004a9e45 R12: 1ffff1100c9a6505 [ 602.097480][T14484] R13: ffffffff86115080 R14: 00000000fffffff4 R15: ffff888064d32830 [ 602.105601][T14484] FS: 00007f3cfcf936c0(0000) GS:ffff88812529d000(0000) knlGS:0000000000000000 [ 602.114958][T14484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.122260][T14484] CR2: 00007feda6de8400 CR3: 0000000036a44000 CR4: 00000000003526f0 [ 602.130793][T14484] DR0: 00000000000000f8 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.138903][T14484] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 602.147387][T14484] Call Trace: [ 602.150715][T14484] [ 602.154078][T14484] ? __pfx_dma_buf_vmap+0x10/0x10 [ 602.159291][T14484] ? __pfx___ww_mutex_lock+0x10/0x10 [ 602.165384][T14484] drm_gem_shmem_vmap_locked+0x14c/0x7d0 [ 602.171202][T14484] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 602.177645][T14484] ? drm_gem_vmap+0x25/0x1d0 [ 602.182388][T14484] drm_gem_vmap+0x10a/0x1d0 [ 602.187312][T14484] drm_gem_fb_vmap+0xaa/0x8d0 [ 602.192163][T14484] drm_atomic_helper_prepare_planes+0x2d6/0xb60 [ 602.198607][T14484] drm_atomic_helper_commit+0x19d/0xb10 [ 602.204215][T14484] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 602.210468][T14484] drm_atomic_commit+0x246/0x2b0 [ 602.215543][T14484] ? __pfx_drm_atomic_commit+0x10/0x10 [ 602.221128][T14484] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 602.227342][T14484] ? __pfx___drm_printfn_info+0x10/0x10 [ 602.233664][T14484] ? drm_mode_object_get+0xcf/0x140 [ 602.239488][T14484] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 602.246155][T14484] drm_atomic_helper_update_plane+0x248/0x3b0 [ 602.252665][T14484] drm_mode_cursor_common+0xc37/0x13c0 [ 602.258324][T14484] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 602.264290][T14484] ? kasan_save_free_info+0x46/0x50 [ 602.269879][T14484] ? __lock_acquire+0x6b5/0x2cf0 [ 602.275079][T14484] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 602.280600][T14484] drm_mode_cursor_ioctl+0xd4/0x130 [ 602.285876][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 602.291865][T14484] ? do_raw_spin_unlock+0xf5/0x210 [ 602.297016][T14484] ? _raw_spin_unlock+0x28/0x50 [ 602.302108][T14484] ? drm_is_current_master+0x19f/0x200 [ 602.307645][T14484] drm_ioctl_kernel+0x2df/0x3b0 [ 602.312624][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 602.318524][T14484] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 602.324051][T14484] drm_ioctl+0x6ba/0xb80 [ 602.328372][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 602.335035][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 602.340364][T14484] ? __fget_files+0x2a/0x420 [ 602.345719][T14484] ? bpf_lsm_file_ioctl+0x9/0x20 [ 602.351410][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 602.357470][T14484] __se_sys_ioctl+0xfc/0x170 [ 602.362328][T14484] do_syscall_64+0xe2/0xf80 [ 602.367495][T14484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.373675][T14484] ? trace_irq_disable+0x37/0x100 [ 602.378928][T14484] ? clear_bhb_loop+0x40/0x90 [ 602.383676][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.389695][T14484] RIP: 0033:0x7f3cfc19acb9 [ 602.394264][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.414253][T14484] RSP: 002b:00007f3cfcf93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.422795][T14484] RAX: ffffffffffffffda RBX: 00007f3cfc415fa0 RCX: 00007f3cfc19acb9 [ 602.430882][T14484] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 602.438898][T14484] RBP: 00007f3cfcf93090 R08: 0000000000000000 R09: 0000000000000000 [ 602.447633][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.456317][T14484] R13: 00007f3cfc416038 R14: 00007f3cfc415fa0 R15: 00007ffe27ef9db8 [ 602.464784][T14484] [ 602.467892][T14484] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 602.475227][T14484] CPU: 0 UID: 0 PID: 14484 Comm: syz.5.2816 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.486437][T14484] Tainted: [L]=SOFTLOCKUP [ 602.490876][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 602.500957][T14484] Call Trace: [ 602.504349][T14484] [ 602.507402][T14484] vpanic+0x1e0/0x670 [ 602.511770][T14484] panic+0xc5/0xd0 [ 602.515522][T14484] ? __pfx_panic+0x10/0x10 [ 602.520001][T14484] __warn+0x315/0x4a0 [ 602.524036][T14484] ? dma_buf_vmap+0x30f/0x3c0 [ 602.528746][T14484] ? dma_buf_vmap+0x30f/0x3c0 [ 602.533736][T14484] __report_bug+0x29a/0x540 [ 602.538473][T14484] ? system_heap_vmap+0x3d6/0x570 [ 602.543744][T14484] ? dma_buf_vmap+0x30f/0x3c0 [ 602.548595][T14484] ? __pfx___report_bug+0x10/0x10 [ 602.553675][T14484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 602.560492][T14484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 602.567026][T14484] ? system_heap_vmap+0x1b5/0x570 [ 602.572624][T14484] ? dma_buf_vmap+0x30f/0x3c0 [ 602.577777][T14484] report_bug+0x16a/0x220 [ 602.582415][T14484] ? dma_buf_vmap+0x30f/0x3c0 [ 602.587641][T14484] ? dma_buf_vmap+0x311/0x3c0 [ 602.592456][T14484] handle_bug+0x98/0x200 [ 602.596845][T14484] exc_invalid_op+0x1a/0x50 [ 602.601566][T14484] asm_exc_invalid_op+0x1a/0x20 [ 602.606531][T14484] RIP: 0010:dma_buf_vmap+0x30f/0x3c0 [ 602.611840][T14484] Code: cc cc cc e8 33 37 b3 fb 90 0f 0b 90 b8 ea ff ff ff eb b4 e8 23 37 b3 fb 90 0f 0b 90 e9 11 fe ff ff e8 15 37 b3 fb 44 89 f0 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df eb 8e e8 9d 73 7a 05 48 c7 [ 602.631749][T14484] RSP: 0018:ffffc9000254f3a0 EFLAGS: 00010293 [ 602.637948][T14484] RAX: 00000000fffffff4 RBX: 1ffff920004a9e78 RCX: ffff888030e85ac0 [ 602.645968][T14484] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 602.654194][T14484] RBP: ffffc9000254f450 R08: ffffc9000254f227 R09: 1ffff920004a9e44 [ 602.662408][T14484] R10: dffffc0000000000 R11: fffff520004a9e45 R12: 1ffff1100c9a6505 [ 602.670592][T14484] R13: ffffffff86115080 R14: 00000000fffffff4 R15: ffff888064d32830 [ 602.678703][T14484] ? __pfx_system_heap_vmap+0x10/0x10 [ 602.684634][T14484] ? __pfx_dma_buf_vmap+0x10/0x10 [ 602.689700][T14484] ? __pfx___ww_mutex_lock+0x10/0x10 [ 602.695211][T14484] drm_gem_shmem_vmap_locked+0x14c/0x7d0 [ 602.700885][T14484] ? __pfx_drm_gem_shmem_vmap_locked+0x10/0x10 [ 602.707353][T14484] ? drm_gem_vmap+0x25/0x1d0 [ 602.712635][T14484] drm_gem_vmap+0x10a/0x1d0 [ 602.717192][T14484] drm_gem_fb_vmap+0xaa/0x8d0 [ 602.722029][T14484] drm_atomic_helper_prepare_planes+0x2d6/0xb60 [ 602.728334][T14484] drm_atomic_helper_commit+0x19d/0xb10 [ 602.734089][T14484] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 602.740198][T14484] drm_atomic_commit+0x246/0x2b0 [ 602.745365][T14484] ? __pfx_drm_atomic_commit+0x10/0x10 [ 602.750856][T14484] ? drm_atomic_get_crtc_state+0x3fb/0x610 [ 602.756972][T14484] ? __pfx___drm_printfn_info+0x10/0x10 [ 602.762664][T14484] ? drm_mode_object_get+0xcf/0x140 [ 602.767909][T14484] ? drm_atomic_set_fb_for_plane+0x1f5/0x280 [ 602.774243][T14484] drm_atomic_helper_update_plane+0x248/0x3b0 [ 602.780377][T14484] drm_mode_cursor_common+0xc37/0x13c0 [ 602.786000][T14484] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 602.792114][T14484] ? kasan_save_free_info+0x46/0x50 [ 602.797386][T14484] ? __lock_acquire+0x6b5/0x2cf0 [ 602.802397][T14484] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 602.807868][T14484] drm_mode_cursor_ioctl+0xd4/0x130 [ 602.813236][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 602.819084][T14484] ? do_raw_spin_unlock+0xf5/0x210 [ 602.824236][T14484] ? _raw_spin_unlock+0x28/0x50 [ 602.829143][T14484] ? drm_is_current_master+0x19f/0x200 [ 602.834646][T14484] drm_ioctl_kernel+0x2df/0x3b0 [ 602.839622][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 602.845454][T14484] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 602.850975][T14484] drm_ioctl+0x6ba/0xb80 [ 602.855276][T14484] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 602.861374][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 602.866205][T14484] ? __fget_files+0x2a/0x420 [ 602.871196][T14484] ? bpf_lsm_file_ioctl+0x9/0x20 [ 602.876198][T14484] ? __pfx_drm_ioctl+0x10/0x10 [ 602.881003][T14484] __se_sys_ioctl+0xfc/0x170 [ 602.885650][T14484] do_syscall_64+0xe2/0xf80 [ 602.890321][T14484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.896452][T14484] ? trace_irq_disable+0x37/0x100 [ 602.901506][T14484] ? clear_bhb_loop+0x40/0x90 [ 602.906227][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.912156][T14484] RIP: 0033:0x7f3cfc19acb9 [ 602.916615][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.936517][T14484] RSP: 002b:00007f3cfcf93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.945005][T14484] RAX: ffffffffffffffda RBX: 00007f3cfc415fa0 RCX: 00007f3cfc19acb9 [ 602.953075][T14484] RDX: 0000200000000280 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 602.961201][T14484] RBP: 00007f3cfcf93090 R08: 0000000000000000 R09: 0000000000000000 [ 602.969293][T14484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 602.977311][T14484] R13: 00007f3cfc416038 R14: 00007f3cfc415fa0 R15: 00007ffe27ef9db8 [ 602.985427][T14484] [ 602.989102][T14484] Kernel Offset: disabled [ 602.993545][T14484] Rebooting in 86400 seconds..