last executing test programs: 2m43.699467243s ago: executing program 1 (id=489): socket$inet_udp(0x2, 0x2, 0x0) socket(0x1, 0x2, 0x0) select(0x52, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x70, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025e00020110d0070904000001020d000007240600015fe805240005000d240fff03000706241af7ff0009058103100f000000090401"], 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4001af84, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0xfffffffffffffffd, 0x14a042) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000000)) ioctl$HIDIOCGRAWPHYS(r4, 0x4004480d, 0x0) dup(r4) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) socket$packet(0x11, 0x2, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b5b007ae03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000240)="37a6ce00", 0x4}, {&(0x7f00000029c0)="32e496b26cb156fc17de651bb0059979555c10b710b18f6a6eb3e0edacecac6e537e", 0x22}, {&(0x7f0000000280)="400a81161db474fb", 0x8}], 0x4) 2m41.755707549s ago: executing program 1 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="14005080050002000000000005000900020000000a0006"], 0x3c}, 0x1, 0x0, 0x0, 0x40006895}, 0x40800) 2m41.631417991s ago: executing program 1 (id=501): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_usb_connect(0x5, 0xe4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501"], 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2m39.849502324s ago: executing program 1 (id=517): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x14, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2m39.647666803s ago: executing program 1 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="14005080050002000000000005000900020000000a0006"], 0x3c}, 0x1, 0x0, 0x0, 0x40006895}, 0x40800) 2m39.641072289s ago: executing program 1 (id=521): sync() (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xde, 0x35}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) (rerun: 64) 2m24.254790705s ago: executing program 32 (id=521): sync() (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0xde, 0x35}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) (rerun: 64) 1m40.311229602s ago: executing program 0 (id=1006): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x3000002, 0x22052, r0, 0x93774000) 1m40.303389607s ago: executing program 0 (id=1007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffbffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000340)={0x1ff, 0x4, 0x80a0000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x8000}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f0000000000)="2d3020da", 0x4) syz_usb_connect(0x2, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2403020005029a010209240603040001a5301124d500000000000000050006000100050924030506030501f909240702020005cbad092403060101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="03684a7b99a4fde940f3ec0d105ea2c8267323117153aa4a4f099c3835a607cd5cbd77b83cc33d13bbb6c6bcae59db739af84a4b5d34bffc145f3cc27ed3d4f9d9b3103699a1e1cc4ddfb6c1afd07ddfc18e358cd62649479724ce867fefc0a15041bee9f6084842fb982d5c2cf1488d668b741c64f0a6fd2643e729ac5a56462a6b64d5a0a751fda4fadf63ba0dc2fd14ecbf546918db77095545b41ab170e5d6e8ec8bf9ce9b8d53b832e90c701fe52af7999f8fd509577ead1be27891ada8564167f2c7d2eea1c1c9c65d8e151c58ddee43ec34e74d330ec50cbbb2bb21892c7ca995066e3cbea8a69d94dc6bcef5f3c0ef630e774d092ea58627f3e09c66a9c7d1abcf4f8f8af87f4269df288aca9bbf758275ce9695256e764d185a91a7570fca3aab16c75ecaff6b8dda371c3226d6ec6e55c5c4d8cfc5c33892bacc956a3613bcfa849da1b5e070a7911d7488b3e628d9339718e8b821f1bb5d5c45f0316bb563d0a442801412dfd5a4d61ca657e04d6686f7d5863d57954400aeee8e79be8f3cc4cbb3d4b91269df039c3d3543e500b90a2bdc6eb60cc7afab7b5187d88fbd76e6212ea29e872b73f925287bdc808b4a4f8ec7f8aa08bc90b29e217c3eef69d8deae4141f4f9bd110b7bde9320e7b45f422e9a6111bcaf99c9911e46e219d3bab477926bd5d2e78d4cd0eca133c232b1e863fd7799dbf609f3670b323e5518e8f4bd36e9b3da2c68a28eaec9cac688b4dd0b73adc24a8c7acc264399b7facbc2f43e8e40b6cae9f8e956d1dbfe259f12bae75ad362c354050ffdd6e954f2d7615fafce888bd6f672a81c9fd4318caba765069c0a425e898bf7611b77f0fe61c27d318159dba42f011900246c64557d27b77aef928ab04a147baca37863cf998a2ac30b903c0314449ddb218887c309ec7184c8c733f5d4e7b2d79516e9531c9a5becf8294d6ccd777f285b13160e1c949d3069c6c66c0daa62bac679bc9b69825398d1c290d765e882fa2c8708b20ccec885ab6785dc22696b61c109ff84bc5407932c3e5bf12069a68b8e3333a26d3dd390ef9bc01b86013fbcb5c28a1f4d2b8084f1502fccc4027a124c3629d8f4a8befd14b597cebda5f94f36050a31b95087cbac347788a71a90e87f2187fae600aa42719c05c2859cb30ae0fd58a7bba681f7a6027a00583071def2c9a94456e5d9acb9fd2d11fdea524582489c02377bf7f590948985c769b3822cb6366681d79113c6a6c752f2475caba77b7b2e8f293d7fd9b991f63e254c98dec94f4f3def4fee9cdb56ff3ba7fe6a718cbe9a7f04710e257ea8a49d6605266048fc122d4f3173d4b04b3e282bd3c5198d7fcb72ec38e0b07dd8a541b2807e601e5a0a01f07a281e0e1a261c65977088a54597efd0997c59647aeebb2605a89705eeff3ec780e302e24b23a0cbe4f81367c3f118545f01328d22eb8e802667389143166a9db9477c9b58eb5c76a19b8f8b2692b0d356003f08ae54dfc820d8e357ecbf91fb7e212cbef1262171abaf2f613a5bb59b783cad476fec50d16ca0ac13c08a59a3097e6e3fde700a4b987d10311fc22d4aa210956cd859799f78010e4c0f25b715876aa253df15009490f71be3b0022875161f537c70b14bdb9e2d87a5a11b414a1198533c7de6fc4d22228133bc26b19d9f1e7627b14c72e3c39d3fa2186a42e50a0d1867dc312f94c7209d51475ed4aa80b2ccb0557a40422bf7317de2fdf3296727723a2d23babd5e23f7c3edf4942bb485b95a122e6aba41b8f80f684f84605462448d5a4fd66dfe9bbf80590b9999b4780d4f4f189a20f4400b2975df85b584c8c8f9fa3095f13aede1f52dac98be358b0a0d72bed4df71cd23973e326179580268c4e5d1be4b2ae2e1e2dba913998faa6088af128fc8fd3ae26203a898882b67d86d63f6ee8f8e216337330db6d928facf9d0ca273845ee5b33a0a136aeb48b7c52d3b95fe73efaf06197ec8753ee0349f19db8730917d0f18a2de9602d3b887bc583ff64dfee67e2bdf4d5cc1c341b89acd3dd5176d2c15ec2a77120b8a49591ca438ae36c52845e5dca550e539da9ba2a2eda49be316f3d6d4b7c83666bd4759940347c29dedd273adac722630a940e104316b4806553ded47132be4e31a50600f5a4dd56825b245b7aae853f56f79e0ec31f7b5db945ee3bb92865acb0d8828598e77446ee50ecd8bf5e7ccbd963445a09e3be215709b0b3bff2e9d12e6549924338f236b4ff973682e2e03fbf6b167e3b3a0f8c3f3c1e8d0e21a71937c918cabab50dd74c011a1a5531cfcf88a5df5fa58f17715f7c7b3a64d9dab6f20a596288969191420ed71daccbae7c1ec88bf74811b5e1f4bd306f3d810c4f3600df2903ffdf8db40ac7153fd93327a1065cf2c4590c8ba9f9391eb6aa600cb42aff8793e4721afeb3d470beda45dad9adfc6f4fdb24eafc63792f5015c656ca37cee82b7ee382bda31d786d6e03d4c8611c4ca464e2360ca747815c9eebd38c8fc7d5eea2db96b29d771a96dc5c884029077125bcc31980564555d21ecce5d0388e1bc1e618c7dfb31b02b1a6730db7eda387dd4ceb96f65178bb088e81133e5086f73c458f84139685ef930945a51979faeab539e4964244709dcb8b38f575d3a3ec1328a0df65fb34241db7cb3250b8ae0dbc44670d2b5cc3a1785d8d281c05256ef2beee3b202d8bce053e55ce1fb2bb208e65d488ae24484b00c2e343fc3544ca546406688022db6e29ceca9539ec095a2a2cfc5f516230f75fc961c5de1e8d33222331f57db02cac5f9208029c6114d041bb1cc7f959f77511f5790a564600c018afc253e5ecd5010bd769b45a04296ca09e87fb63bf3d3b51dd8b3f6d4426a03c0944d09dff654c5718ab1fef063caba34029be6811502e8bb785011dd1e34b0c192915adeeb40faad0725a8f9a62acf61b944a271d20567f350cdee22d76e3cc5966ba742d9c43823af19ba74c60da0df0c5f4e7e26af7224147774a1f8ae09f929066e1769ffb3c40ba9fed13d2670b9e865a155426ed5c83648c0ad34e46f5308b455e0835730fe529668b606f3f52b0d04534d0e14bc0ff0f742359550e6980ac9978455adb3de0f292af12a3700453e035a49eafe98fc0d7f26e42a6c41f380448607b7c96291f98fa6bbd7e32c249a49171f8fa81762a490a1ce5c39d66d35c6ed6c0679440c06197c2e24d48e1de81c711164c02820816afb5393d3d6c801c3c062ac46d1494f52c45ca36faf94894eec9d71e1be6c7256f4aee8dc080156b28623c821ef8d1826ebf0a41332620f42589270e142561374c825e828e2bd9ae41fd34959db48319d54ffe7a1b58ae8f7361cbaee8e26e0e7e1b7f125f8cd99788825efd01c38ec987904190a0ad52bc20cd36cc7209f9269ac87b2fa44d2456661d3056d893cf912c69ae6b2b83d0c781a6d6c33df1910867b71257ab74e244e3ebbac07445069418fe2e440a384e16feedf8e3165676e67866430eb6a8a5334620d8c2cda15b0328bb0c50630886353f95241cf4f3b647a4ff812c70e1b074c4befdc70fbfdbf868bcc81652034b5bfa831f1b686724046dcd17ac91ace83711e9ec7465d14c9d508bce93676a58ef7dae37221436865ad34ac2fd691e3b3e12aee6736dbdeec9b1c05fcedf8b9ced547259a1a40471ebe8b4bfda69d2f884da025e2809fb9f159150bbcb331ca3c502012a7fe76b4fc2771976aeb624ad7f2d72c707f5f19d8ded84581ac5afa697ff99d27d88c9588fe769839c9cc9d6786a0f814667527c53b6253b1825bfe17e7d734d96d61da0ae7349d0922774fa9b4baf332a4568e32cafa417ec659c4ad72cd656a1e2c59c8dee38890ed3acd8b4f8657de41f670106c38c38ba1a553f0f589a57c61f5105d70e0c0953459383cb9337ca972cda1d2cd3056eb07f21c1f5b995a04997fecf501bb201c67fd2afe4d44fedea595969b6b3706087b0f59d2ddbb099d60436a94f0ba33282b29f6e914fe92add4b33cf70b680b905cfa2b2ccb00b9967f99806e8d69783fd35a2d7fbb424e9fde2647609aecb0208bc3864bf95f05e50ba12123edaca8de927b338dfcb3cc597947c606c08315061a7fec98c48f480e2febd26fcc8dc12289aeb0adefa2c2be1766a5bc74ef1aab6c2cdbdfbf1810d956bc889c8e614b7b933ff6e336bb208db5b592775fe71c3ebfad5f47e0d074e1c0cb36761481ec677794f23c3698bd35875719f242e3fc939bc3668f9723f31effe189dabdf4ebbed073eab952c88f13059eee22230bc7724d7266b15726a0b0898cdd274e3e56d0a356166b5d16456249e9e92e84e39f61c0ecdf99ec2cd230440c03fd21cf68f27306628d35ea47367775f39d20a07f3959b38d49e3674061fc1018b647047ad39f77027878badd29927c5806f95aebde5f070fed28ed34052550678d3c6b677a3b5a46f76a98264c42206bf62caa95df5437092b68e025ee9ce2ad733b6db3ec97fd33cdc3b2f77ee90dd86d8bd289ae1a437c86f4153ddcff5e846347bfecc1499bb42980e4fa91790faee1b1991dfead5d7c460348631f0469b2b9e8f65207a00985511e0c41f441d9a3154f5a0298c172fd7135d4bf95c11cdf1769db1cc55f392aec309037599327a7c53c10a56d1ace8ad19186a2fc75dfa9d657c114eae99c1c1a6b4a58440718bea82290bd1c2a67048938c381648ea2b2c7110d748c9c8d782f20430b1427b51d7036e55b0997c6f75717db67a82c88d3647ee036b49392f0467d6010b32f9de3e5e79ef082c5bb975d11d2bf76a97f7159c11a7753db8a065d3126ccda9abbebd2c54374e389942c24b27435868fadb45bb060d3c1084b211e2afa8dfaa2d8dab8dc47fe10e6c32afece7c4976176a7c66d704125c0948c238c843b41b0246be1f50f8e07884cfe7ae8885ca06339a339c8d5978b079e0eb78facfa1dc67ca70733dfefc6c868ca149e0661b70e0134870a3107c8c46711fed14f892d6fc66d95306838688f13b19e904416a8d161cc33527878b38ad10b1c08db21457b2075608be7300d39748e4fcebe02b190f3e8ed32a0ef734b11ca43a21f5f809bba795f5aa0ea01050021d0f5213620af5b08fda6421a42b7c82804a20a6ef6d471babf76f46538327f943476d1d109a3f0dc531233d6f93d8dc27f4745735085f92adf63d617b373fba24f289035710e69eb80da12d36e8eaec22620ffaabadfb824bd5fc309a2c74959505856b5b890bba8f22bc571a9d87e93ba3b9aba6dcf26f7076c0c2e271641835ea25fd49d96c69d4fb8bb8731bd2cbc75146aed10d269f9060462339cde8830b535920be3dbf143eace0f1ea9469b95a64fbd7e5057eb880d4422cbf97cfc3f7140251d4923580ca2113f345cf24a66499ceffd2e39dc4fd74cf448638962957b409f0d218c165c13ffe107aa1dd1d9a02092cd46cf2b353dd2d2ca7b8a7ae8eda0ee18bba269bbffed0c7d400497aee4da0896cf6329d76ccea098fbef9075412d1c2a3644cf0f202b884303d204314ae92c56217b2feb5e7c1e15a99fbdd655fb8f6bbc3ab1259bf03b2ee17c5b7e9443695177ec5040eeff3fc36ceafe143393d76a3d735cfe6c9b632e52dbe64dc1265961e8a27ee9f76c0add9e0581e474d7678214f5b64c932903715befc6b766611f1d7e495573b9a3e009cfcb0ffef7ac57c3561badbfa41c119e541180aa2364de61a601699cd1bf3de01d15794b728e1444efd6ffa1e57d95489c8df91fbc057b66dd6d9f3a01b19f36bc99f0b54ed1f9905067dd1608bce47f5ff1981a25184aacd39e331d8ff3dfa7c012d7e667a69249cb4803b23f7eeaab8ed29c69ba3d2a1b88821ffefc5825650c53b6364f38e0a178312f5d29d5375423cceabc8e1c4e51a566ba3f9b176b858c8860440ff8ebdde725640d2dff6b9160bb69f188755b0ff766b410704cda4c33e1ae2c73b5799a00d2f55de73109728b350302b64df2ce3eaf2e0c6561009b60c2701ac493076305e97ed20c3b42f40b2bc7f13bba4ab8181e2085b07930c6f5579205dff696902be824e65ddc774e886e8d261fe74712a31e406b0f7725b4559d7ad0f27a1a870261aa5bb8a720e7c89ba933770d48821416de070df1abcc6eee1147c20bda090d940aeee2bd48c0f3d94675d9b9cf1a62ba50e31a7af0714dd8325d5fb7142e88c4d22ddb8f0278ee6ba88e361524e291b6d000f6523ad4188b021da9ef4a634ed09eb2002b9c726746c9ffc32f261edb448106aa1e2daaed865255fd1d296fedbbb2de3f7c1f15935e52006492b632ad125aa1e000c9d71bdb945792668e16b26122a3fd7cba1a40db8083068c5c48fd2aaa621c87d9f5621bba442fc26839030dbe4e37fda4046d6503bb03e0f928de25d4cd4e2a40ec93c9021dfcbb25f6e2c943cc85eba8123340d6364949581e8c8c2913d59dafe4297672c0b9e7418485f00cbcf672a588904beb3c074bebf339815b91c7c374ceed5a701e1ade8f5d87ca536120116307ac259577a8e12958425317c482d2c7089bf3d83e12318d1526107a050f3c094492de7255b22e18ca2ff261b3ed197f2f8e67b71b1c5a6a04b99158b58e9baad75201aabe13254617d0de0a9073af62491c67fc18d1ccbf7686a85a99b39e9d7d9c85a0777e47c9fd0e10c932c20f13ef287b44b9b706ec818aa0c48a10caac58a9b8355e84bc820698c2501f0c12e1b67df701cfcbe72dc47a2c87d43753ebfdb24cc838507e241d9fcd3d4955a373209ccda903a3ffced05e4232f2cca9bba197fdba8a9357cb1d6da6d9b4095027dc03e17d59ebc2d358e171da0044df102b193c79390ebcb58023b40c621df71e064b0056bfcf1eaee1eca85357cd1ac78feaa54bbbd85596977ba85003ea60d8685f4e3b756e4f81453077396590fa214f672929e81569442023667b798c24e06ee20dbf64cfccb51b2bca4e2a5b0df137bb37ab3e2854dc7e1b879866a72a5809b563596cc9fd3e53abdbccfd5dbc60662252ddc5c290d72230d79b7504b40fdb45ded2f02e926652c1e04ea4c1c488025ad1098adeebe98e385ab1caec4b9eb4d3bbd5ef3ddf1fd0d72784604a989558fd37f6d4fee20609090b3331e254fec98414a2c54589ee01c9429b7cb574b9167efede1d966a227bf2a8e422f38680d77d3c555cf1117e7d7e804ad730c36a78b7846473d6481bd0839bd3e6982ed47246c370a90b76e5b88de202346fb20b8b6b5ecb6a90b8478d17b175a1821df75b48ecc34866fe5c8960bf64d5ff92831bb9357474bec65e0dd1699b0f0340ee5ac5e9e9d3df66edca20201371fc21ad80aacd49c6b0abcfee9c876c15edcfccde823b55b61cb7b254487ef8c8781a22043f4adaf25df34580a6b3904fd014b50c59fa90eff75fa5fd32aaec9aa10df8a2b9b824952e475c964533942bbe30f4167a11fc15d548e0a31f911030569722f0c67e79e90483f6f0bee1c7f80face1a1b0f940c891be688cb16394f6c07fd29b5f248c211d1f76ec1292755d8bd963e191b3a8851472fbbd2cb732f4fd9fef3a8fb29aea097328173fdeaf56fa2279e86fb954306b040c960d0b601b3a741c96cf1f0bd1172f848585cb3b57d7d2e2a84914526f5a6f9895cf5aa4425b4dbf9f59037756a0321bba204a737e36277e86fd268f6047921f4f8fab69dfee137c07874f12f89084e7117e2c9221690a27f880f17d08d56f9dbc96ffef3920b55fb773dde72e1ba35f3e0c9872e339508281426ab04941df4885f7e0293149f1642c2573e2b6594b8fd953ae2468cf917cdaa0692cf461e3628860935def39af78af5e1540147ab1c70c3ab7f7c76abea0d8541feb43e632d7a2cc7bef15a4700304048ecf135968d0a9644ce899aad05b186a2224bab3836248cc6137472203ebceb29b3e87610df12417ee722f309c54b2e65591d8b929440f3ec43ee9ff8f7b7710668e4312610d1591303d5270394da0ab61e4515af5215dc81137f0dc90f951972731f8d98ceb8b4ea38da7d8dc153ccbae5068781eaf9a4a7b11b4319090261b61aa65a8536292eb5392020eb285b2db07f81e7f764d65037050f1e3748593474c6c1dc11cfcb56e1c916157280098a437265e1c682cbfed717e7275bc6c3bb6c6ef7f0f9fdd19ef82ff2c82284c3a061f57b21d3705aff97710108a7d1217a7ea3feda021d20f1fdca94bbef67e0aeaa3db6ccc2d060f7b33707fe19cb2d0232f1239373bb38e666cbbbf3a697c6d0e957ec6730f56034440e789a7a37304d09eb742f21019a77c608cf578162a55d0aea113c051b110b5281ed8b6638d2b31604e965cb019f2f106bc4e96d1313c70612f1ff18afdce7926270dd242c49cc53792f160d1e143e04d7eb3ca40828b153fac466bc53a084281987b47b806a4ef668859eb9035ef68e9c20bd6bb790fdf6f921569b4e97fae5b7edc761b4944c1d6d90f4df40bc3203ed838d4c61cdeb7a9bbb68d59b2cc00125eecaf06b759ac1b9dd68028225d0a60efa499e4436962362727011eef6cc55962dd4ffe2fd3892907e837045883cc9ba8892ab265a31924f3055d4dee68feff05d9f10ebdf1e8c1c1e7001b5b02a7fe26b9c0641e054ae37854187fb1bb6e9fae05b09e85a1e0e14bc801f2d8b9a178a9a72b147e137e0d83192664a88a3aca4fb6a4f0c5787b20c31bc5975dfbc8bcff8987573bd14b1ca434d93452e67ed01c60be99e535bb3f848888d224520b61cfc1de2d6b2ebef9f24674c31aada52784a0b7b60f351653c71d546cf951e6b4a0d917ac6afd0a713f41833f9f74a3a7d3c19b523299666da2b48676ca7aafebadef05b3bbf4b6b62834046f51d3d4582fb4c9de27a3f5e992853368e4f17f9dba27c8c4438307fc7405f53fb27cc81c1521452a1a5edb0cabdf7a73b1cab0675b619fd5a0fadb7147776e74695c042d9d8bfda045bcef7542b42249f34c7590605d0201a762390f2fee5f3cdb488426609c663c9fc4dc2a5277f3f589a14e6dcc202dfcd89bb148a368ff1792d230c19934143d2c260dbdfb334af863b856e415febd22fba01c568d8f48dba6d92f493cd1164a376f006d55db609cc2c9532a9f56da3b06e3db2a05f797eed57892e2fb677541324bcd763cf4669e7a871e322d0cc6e21befe3c767976f058dbe7a059d673c94c7ac5d49178bf19d32907b6fe66a92cc8ea30a858da43f74354390d6e97021da50812c59a78915e5b33221531bfa054c594ce3a2300e5a7d712773181901dfcf6922e980566fa62b1f2b669a27fbecce29e9be6d22058463e350163f33d18ce92a72d1b470857b6a37998aec5672521a8f0d66ab2bd01de516036ec47d1f63b95b437dc6d5a0168189d5a963cb0a80a9a5f20b03515396e3525f0ab13b0c1e5dd051b4c930da6d57ab6f7dd94ab3e689e0355af0b34871296152a76cce170d7b14d471ee4d9daa93de4ed755f30d45344f724288c17e4b22583158f1305ff55fecf7d526e207fa609886e14c9a168bf364b049409f63590f18a5515de8c1fd8c5a9710b6e33d2ecd01466b799f14be787612b8f17df0c05483a16097c0a504880249e28f1e067663c640a550a8c7ad9d090f7b2e902c5c20936869a5f3d3a014817f90babf847b43cf67ec23f120ae4abc63a418d1d99f359fc2c33a5bb34e1f5780576111a88c5ede834bc41e498548ddd128f9e884f4cd3e1bf1aaa1204079ce74e709306f38f2d6859128fc35d3a74c534ff1dccadfc8fe41f1be9510349af8710eb6d2dbc758be12b65622dad1cf48abc2fc409f5ed6a3af8d0b6548643c46dfba9db4e5827475e6e317c9c018a4dd5de391cc9cca85ec527537e26949e5091baca4f0b563d4c3969f15115e5ccdeb9e40788fe12f9d32d9488a70ae53b819726e4483ea6bbcb76f99775ca5e4f93c76edae462c08d596209f985aa55ef5e786701edcee8d831dd6dc0fee9ad01b6bdd63e886a5e55bdc593390c81e18dfd8c685b81306bad6b7a19a86b2bab5cbf4754708422e99f8f2497d798b3db565e709bcbba4c376c1c60b22b994fe8fdcb25215d505511cc1927f6a35344023d5da0a3ac0830e6aa80f5f7f0d94a67c99c6b22717078aecba2a599daa2acc054cda25e3965172e5fef464ec19aa71de5e84b6de30cc673fbab8c441ea37bfb3fc321a504371bc0996702e9be38db762e339ad7ad66dc2caa887e4ab60272d7963f85b14c941d31e545b85c640427302efe7142f0e0897a8c623ce57da213fbc2d1f90677142fd48cafca0b2934e572833ed6473218d0513dd1f6ecc578e5a1109ddae552b3be0cfe7246d7682a59fe9ae783a0f318d1800d5c466c80c5fd3facd0340f455f081068dd2cda5cda744018d902217152b6c05d37c090f8348b0471053152c2a4570fbab3f6dc30c8e49a63b88a00b3aac75180a633692e35ea976821694e133eb8bb4d31237d002fce1dd2ce55528dafcef2f0e00690562d144bb0e19576ce6ab72deac22067d8edac916b1b07e4eb57ff0b885b1b79f37dcf88135eedc17ffd948b61e4df4985033bcf891dd5b1448c8668947a271d93d03ce31216810a6bb45a6c5a12e290d97a60ad4b5c7384cf19421ac1ca64d346b50771e0b50e5caf1d9dfe056e8da247aa502ff04c8e29ca810a1d3ec7a89bc17dba2936f03a80228171f7999b3f2768617970efe57b14011c80666ac4999a568ebef74e2ca14df0ff6f0fcd47c538be96aaca1e65b53b98447101e49672b48167c0afc1afffe669b0f9718bd3305805c292db9738740b362564e4691cbdf061db1ed3f9db1f8bed82939f835d14f46818e3eb4e25f7a8d77d9d0d7913c45d8a81115c1a5e37b1d3bd1b7b5e6afaaefc81d9700bf83506fbf15457bc0f59f7008cc803efdcb6d39e388f6b28e80d47134265cc5438804b12d50e61a489da829dca05792d2ac182ba747331e88a7118f7dd38067f7d38f37be362260effacbc33863bb47aeebbadeae648a1090718266eedd2ed5a2c23f168759198aa92b2ac45c2a68ff212f29260e641a38541b066d39df4e95cd1c8e7e6ffae1b8017e6f629db3910b07496c8a81e4e66ac2321fd9e7ebfecf5bf6e922d7a79fb710a2d42dad1916c9b186c2c50c818fdb1afa19be867d943ee98f732fe3a01364281c0f6d0eb64a278721dc7bff5316256b0f4251abbd9b8ba7c7c12a3bf02a1fbc9ca94b965588fbc82343d07df8e06eaa5ed2137fec129351d80a9048a7d78b31ffaf2e388864a763c4af7aa53000e0bb2eb8ac0e4272cbb79dc6a7d65890f125c523c7cfddacdedbe87938aca915c92c807dab26be7d748827d4e3188676312ef1ac8460b29e8e715f4075e33104ce82e6785aadf17a7cf82d2a705e9f2d0fd25810ba33d76e54b48eda3effc01f37c89db38af81922fadc8c3361fe74ed51eac5e4437108106ffdedb339b406c082d62a8bf718989846d23f966e1ea39103010f767b3a6f0a0a2041b1dafcb787e69ffad75ed2a0081b92a4136ad5ae557c55a4b6219a390103428181ab36f329ad182a92957495c", 0x2000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1f) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000002000)={0x2e, 0x6, 0x0, {0x4, 0x1, 0x5, 0x0, '&.*,#'}}, 0x2e) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r6, 0x7dfff000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041817ffffffffffff7d5ad085607a1d193fc9b11e7d689740ece4efa76d000001"], 0x1a) 1m38.951329s ago: executing program 0 (id=1021): socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) setreuid(0x0, 0xee00) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x20, 0x7, 0x2, 0x9, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x67, 0x0, 0x7f, 0x4, 0x0, @multicast1, @multicast2}}}}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(r2, 0x4001af84, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace(0x420e, r4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x76241000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r5, 0x4004480d, 0x0) dup(r5) (async) r6 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) (async) socket$packet(0x11, 0x2, 0x300) socket$phonet(0x23, 0x2, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$uac1(r7, &(0x7f0000000140)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="00075b0000005b0fd3930622d87072d924ffed493c76ededac50272c96a4005eb92ade61c3e4ea258a5a0738f0ef0b338dc124000668f5f6f33d77ab20761a3089e9b6f8ae1dd0c03d591bbf1927a8cbb63d595af185082d04e3985e14149b50aaf00e7d0f7a0fdfb9ef640b39e4dd4caba12783e66bbdb076c14f3e20ffbd91bbc4528b734193ec7eea031d2ebb9ba63a6b76facd909a1e8bf694d2adef2fd36769ea127149af1991b23f769e33960068550b8b99aa8684213d751d04b8c80ac86ff72e681399c49b9c2ce2cb3f21e744e05f4f9b45941e4ba2e9107aae099be6885bc60d525dbc5b004df7e35745810fe72cb60debd9a29c"], 0x0}, 0x0) (async) syz_usb_control_io(r7, 0x0, &(0x7f00000017c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20000400000028002000c9ab3d87eb31590049a08fbbf3dbef0500e75c8f5070d0360f37"], 0x0, &(0x7f0000001540)={0x40, 0x9, 0x1, 0x9}, 0x0, &(0x7f00000015c0)={0x40, 0xf, 0x2, 0xe}, 0x0, 0x0, &(0x7f0000001680)={0x40, 0x19, 0x2, "1420"}, &(0x7f00000016c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001700)={0x40, 0x1c, 0x1}, 0x0, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x8b}}) 1m38.011182357s ago: executing program 0 (id=1029): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x6) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') rt_sigaction(0x1e, &(0x7f00000001c0)={&(0x7f0000000140)="0f18d5c401f8ae95adec000066660f3a40cc0bc4c2753664df00c4c1c9149a9078fffff3410f5ac98f69b092ae995ca410400f38f037c481fc514c7902c402f91dba4db00000", 0x98000001, 0x0, {[0x118d]}}, 0x0, 0x8, &(0x7f0000000300)) read$FUSE(r2, &(0x7f0000003240)={0x2020}, 0x2020) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024202, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) socket$kcm(0x29, 0x2, 0x0) 1m37.447696776s ago: executing program 0 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140048001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m37.380852995s ago: executing program 0 (id=1032): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_DISCONNECT(r0, 0xab1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x804, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x70, 0x0, &(0x7f00000001c0)=[@enter_looper, @request_death={0x400c630e, 0x1}, @dead_binder_done, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r2}, @fd, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x6, 0x0, &(0x7f0000000240)="4e4c0dde33b8"}) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) fsopen(&(0x7f00000002c0)='rootfs\x00', 0x0) 1m22.808117695s ago: executing program 4 (id=1106): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x6, 0x9, 0xffff, 0x9}}) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x4, 0x0) 1m22.722022669s ago: executing program 4 (id=1108): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 1m22.632010311s ago: executing program 4 (id=1109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)={0x2000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendfile(r2, r2, 0x0, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)={0x2000}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) sendfile(r2, r2, 0x0, 0x5) (async) 1m22.419204192s ago: executing program 4 (id=1111): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) cachestat(r0, &(0x7f0000000000)={0x8001, 0x33}, &(0x7f0000000080), 0x0) mmap(&(0x7f000012a000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0xca28d000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 1m22.335062344s ago: executing program 33 (id=1032): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) ioctl$NBD_DISCONNECT(r0, 0xab1c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x804, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x70, 0x0, &(0x7f00000001c0)=[@enter_looper, @request_death={0x400c630e, 0x1}, @dead_binder_done, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r2}, @fd, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x6, 0x0, &(0x7f0000000240)="4e4c0dde33b8"}) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) fsopen(&(0x7f00000002c0)='rootfs\x00', 0x0) 1m22.317809862s ago: executing program 4 (id=1113): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5d9bc136c96325686621b620108b6f72bfa75bc13499f8039077d85d879711d98b7e00"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x2040403) keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0xc) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, 0x0, r2}, &(0x7f0000000040)=""/32, 0x20, &(0x7f00000000c0)={&(0x7f0000000080)={'cryptd(sha512-ssse3)\x00'}}) sendfile(r1, r1, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m21.30581654s ago: executing program 4 (id=1116): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r2, r0, 0x0, 0x7ffff000) 1m6.286962024s ago: executing program 34 (id=1116): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r2, r0, 0x0, 0x7ffff000) 3.650280736s ago: executing program 2 (id=1704): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0xe) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_VMA(0x53564d41, 0xf4, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = openat$cgroup_ro(r1, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x1}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000340)={0xa000001c}) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@int=0x200, 0x4) unshare(0x22020600) r8 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x100, 0x0) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000700)) r9 = socket$tipc(0x1e, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x1) fremovexattr(r9, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x403}}], 0x18}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x9, 0xcf, 0x5, 0x21, 0x9, 0x3, 0xce, 0x9, 0xb8, 0x5, 0x9, 0x7, 0x8, 0x69}, 0xe) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x464, 0x400, 0x70bd29, 0x25dfdbfb, "3908c423934218a826d8e5a15d54716300ecf888bc2335062278cbeed5c1c1351c690cc61c13da5ad0832081c00ac81455cf73a7a112ee8ca10a7fd6fb38a8acdb90d41fbebe93d127511a05058eca", ["", "", "", ""]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008080) sendfile(r0, r0, 0x0, 0x7ffff000) 3.254787216s ago: executing program 5 (id=1709): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000080)={'lo\x00', @ifru_flags=0x1}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x442342, 0x0) ioperm(0x3, 0x7, 0x7) socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000600)=0x3) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd", @ANYRES16=r4], 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x3, 0xc6, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d"], 0x1c}], 0x1}, 0x0) r6 = dup(r0) mmap(&(0x7f0000511000/0x3000)=nil, 0x3000, 0x5, 0x110, r6, 0xc668a000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000180)={0x2, 0x81, "8a04d7", 0xe1, 0x80}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) clock_gettime(0x0, &(0x7f0000002e00)) 3.091714588s ago: executing program 5 (id=1710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004044}, 0x4008000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000080000000000000000000000002044000000120a0900000000000000000002050000090002ef72797a30000000000900010073797a30000000000800034000000001080008010000000114e3ffff1000000000000a0000000000000000000000000000000000cfb136bdd799c13b5430d8d2ab"], 0x6c}}, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='dax\x00', 0x81000, 0x0) 3.016304624s ago: executing program 5 (id=1711): set_mempolicy(0x8006, 0x0, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) set_mempolicy(0x4000, &(0x7f0000000080)=0x5, 0x100000001) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 2.760200283s ago: executing program 5 (id=1712): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0x9b, 0x6011, 0x0, 0x0}], 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a000000000021802c00018014000300fe8000000000000000000800000000aa14000400fe8000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe80004a58085c85e212c1bc000000000000000000000000aa08000740000000001800068014000400fffffffffffffff50000000000000001f3f9154078501027c80d8c278b2bd8bde04d03c67dab"], 0xac}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0xa99ab1c0c695e676, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000005"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000150001002dbd700000030000e000000200000000000000000000000000000000000000000000000000000000030000004e2000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000300)={&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0x20000, @loopback, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x4000804) sendmsg$NFT_BATCH(r0, &(0x7f0000001480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000034c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x268, 0x2, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0xeb, 0x6, "31bd0e86850ee2db027da82f3218524efc77a6bb6e7d85b55a385fa0cd7bb3c3c2ee4f26bf77df1eaca0058145e0c2b95c1ca62f9a12370f20b6d192f416402796ba5df477c7788c15504999ba528b3797f51ba92332f41e0756ddbf9d5c6058393351a9aaf4e4aa12f4e8e1ebd165d6039f99ece066bfbce641eebe8ee9c9f30a22181af45dfa50f2e74225211c22558262b198f381ed09c717da0985b05250338a283738dd75c74a7adf7fe8af4138688ee04a32a8eda32cc31be36cf084df3615de2548b7766b2515432f8e4a85fd9fe9b10490290076970739034f2363c8905ce333fbdfbb"}, @NFTA_TABLE_USERDATA={0x47, 0x6, "b87fa92cdbd61644f4db773d6888c1338e30fd5c194ac0bf95b4119377e66b1593da6aa49e44e548c7f2caf190e977c3b756c149879aed2124f5a9b639eb26848097dc"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x80, 0x6, "4a4a40f06e329c936c203c6a37297a536b78d451b336515fad4286214f50c6b39a7630609b5d6d1bd048b45e75734f83770a5b8291446f4c4e087650ec319fe40c13099e72a0020e0b33ae43ae805b1f92e5f7476ab54e1e85d2b3af2bc84a710f4d8eeb7965149bdb9b2ef218e0a13a2ba23a0572863f84d7638f80"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x6c, 0x6, "6ac7212303485951e403399dc1acad49459abf38caf2c9fde10d5b72fb7ecc5b20ae0f53fd4d9d439bcfd19b380614b6ad9212d71fcdae8170c7fde1cb999a2aefb82de48c221fbe5fc9ac22095f67e299c226722ab28321515d61fbf5a61011ad9f460e6d14250c"}]}, @NFT_MSG_DELSETELEM={0x1c98, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c70, 0x3, 0x0, 0x1, [{0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "8d0e652b5c1a0c1067d54b032669863b0930e7037cb1de1854de7756b1d57659ee987424e2d77dee75559b0aba05aa13df844ef5b72f0f1421b31d0b576e847b02053ad2a21113e92052854121ac09412e4d9034b2f3451e3f13f68f83a861"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff90d0}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x1b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "8c96b4c3e99cc85dbee5daa49c0543c5d9154fc0920ebce1320ce85e1af31b033138fd6e4df686ac0105f5b87a8d1b9262f6ebb474fd12c12d838b9400139bff56c5638edef2fadd37f9ac2c5bb34839c4716fa9023cf078747336d281891de0af650c268cc92d4a01703380aa4813b649152841e73e8d9f943334637b68e38748065e1c57e63cdc97d4bfb65f8600f1fe5863a1d32d3edc91ad1d7e03f25ba96814c791434583c2def1d3de5ff767a256d66ce4789a6ed2d53e6a703f56b5ac61392a73f88558c9e02e6b5cc70f67d4201fe6e5"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xae, 0x1, "8d26de073a871ef060f423ec53cc5e3474f8c996a1e888e5a721df98640c77ebb35ae1add9de9cc5fbc8505655bc05c8f60f54f7087d18178d4ba0203f504202825caf12b46a4c63cd966b891e3e3a0b7678453bf2987614f33b5b00c20589111ab42a790d27a49ec965659de925a821e67a074bee9940812f26bdc8870ea3279f3c804391d6abcc29ca21c267645b3c1951d4bbd5ea4dbbbc9c67c6bfa21d20061a2e091dc458f8efa2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x16ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0xd5, 0x6, 0x1, 0x0, "d1c06d53da9ed4a2c70426a9c2d023dcad0b0e2851e4674ee1218b972fe9addcedcc8e0d49a0b9b911d435f128165ee80c11001746ed6c5b15fbe7a78adb5c104730649b8213967006d18b9adbcb489a05be836d6ea2c528c0cc4cb16078a3dc246439310cb8b9e7a31d1cdb2e912fa5df8abaf07ca2c379e2934d69458ce6c0fc9c85c5c19a700af95ae9d049a8c60893c4597bdbe1b63a515d41274d27f7c143bfd4e1b33b528c4f016647e38efc8a170c8fb37355d0f0b9cb846841b010fe56745f9507e4c99717174914666031d1cb"}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}, @NFTA_SET_ELEM_DATA={0x28c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0x1c, 0x1, "1955b9d8c82794d35102c50209e29f3b631296ef1ace2bb3"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x98, 0x1, "1dc5d47d613937573681fbde9272a5c7fb48800f4a022f92f6e3c4e784c51435f6ae5bacdd55fe3f6bd0cd324114ad0be5b0729a5989bc76deebf1dc62f48a6acbec20860b37da6fe3fbf52bd2a5b74c92956581e602144c57a64e22a11c8326aac3631e66cb31b7dea63da84eaa286096a7c0fe80ecfd3f7f7ddb3c10064a8d7a83045e6261545183095b96d0a04669df74900b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x8e, 0x1, "89aa9895e9091d840d70d2c382b1262714a36dc6687c9aeaa441bb90877224504b62690a4eafd60f7d9d3fb046cba4c096f248f6e3a2506686c89c92b6c9774f91df2b753491f466eade7a8b68b6f61a1f1c5e11c4a5f21220d5a46e623d534a0607659abfd908c28ccf6b9ed8a56865f7a99b9acf012f626bde854e12d588f734184df8b47df41d57b8"}]}, @NFTA_SET_ELEM_DATA={0x10ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x298, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "920a98be541a78fba4c1edcdce0d43ef87e23d419ea0d70bef2463b5f6f8e617ed"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "52cbe55de9205d74e32d735650bf3c8641245948f7af2bf348fb1aa13bddad8d21480c852cf577a9a57810313fac84b316352d7956ab1c84cb36d774bf43c73e12b00ba0a4d704955f743a26a99a897a28e4c645959bf5e99f3a176b50738a94d96adda066e00dbe5198f21f24ff2abb2227f6e13e3a98e57d29f8c8c7278b70a669231928487fb0ef5c589f67f73498b03baee7245ffec160c777365e25c5e9f7a8ded0d2afcbcdf88bf37cdcedc307096b3902fa28c124b7b71e9f6a5d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xb1, 0x1, "4112cb14c08171e210cc1c4abc9c39488ed439b1a9c8ff66a832b9fe48945afee3e508972b419b9cb46f0160d41a99279895959af1f8c515fbd947cc7bf40c8515544dd84da4adf509caeff205e2f6370f6acc818239b62cfe2a2d15c01684a435fc04112e8571b1fc6ed5482f5d3d4e04a79cd55e3e254d758e37221e684b15410445c4f1c56a2a44740a48384b9a337a4e25e55b77107ab7e3b43eec95d3545cbb896dd2bafb839e51058ce9"}, @NFTA_DATA_VALUE={0xa, 0x1, "42f9feaf877e"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "bf22a6db022e448789ebc9810daa0780043ef4c7544f4ef5e893e173eee7e0321718b7b93a0c033a240e724ef8953509d8a924742523348ca03c4758a7e56f4f3abaa5187d9bc3e8d4102caffd62d4b7b2906b161777098a0060662da318b765bc17cd644111dc1fc735169a24952dce19e1b74340f0d828f260e291fdc3c1b002112c8e298ad3226e4169a3983902a7ad40c31450342d92dce130eefbd55b358241151535b15616a5ae"}]}, @NFTA_SET_ELEM_DATA={0x218, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "0750f6ac8659c03e8e39c69089bc34fe09a027abdf99177e2f1447438f838956045adc7c920eaab38216a362538e0706d14f949ad455349ecc5a2abda4bf1bf04d8163fbe9d1021ebaa23a188ff2ac1c206d156519651bac5476931ff223bb76fc4d9727f616ea9408caa93c5f9fb47595611a09a8155356feb3fd7cd3b5f002c9e13deccdd671b4a0c7ee08213d7f7208083d23cb7de3f55c5571b00ed53f4015305882c608f1c4f83c1b832e84789c2dcc56"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "404ac47a10c3da637f415543dcdf3f5279db4272c003a769a4de489ffcf88dc5c343c1cd48a624a11a1a59720f9a7a1811a8329fcadd0b46c90c785fdaf81839a41d2e8669d110f5f4ffd3cc3ee008dd24457c9c546ff40e15a06097425c562f84e92954f2b168707384d31740c2406772b5a43610a442f360581ea7764f1eba9d9a414eae0dad70848e8c37724dbd896988ab643e122d54b465319c"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x200}]}}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x18}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}]}}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}]}]}, @NFT_MSG_DELOBJ={0x110, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xe5, 0x8, "cf1208974187ac46daac654d7b15a5cbd1547746bad0118612132507b71160d4ba1cc4b05a36dd1e6775b6a0f92c6b6e2a052b5dff9817f1ae005bcd73007efdb2de786e8e864d082aeb34b94187c025675a265997646eea8e23f97a27de8a0235f899cd891641752de149a74ead7eee538a7f87d7d11ef69576fdc8770ebc1f3dce711120de626d3755a223748f6c01a23071d6219953384a9c8713c0e8e432feb6da406761388549da6d71779702252f6e3150ac6c21547834c2d84add6f8ee571dc83e0f9ea34f6e2d48c17ed46e0f9b2c3fcd8a4f91a414556ea6cdcca0589"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2038}, 0x1, 0x0, 0x0, 0x40041}, 0x48001) r9 = dup(r8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x8}, 0xc) 2.69158355s ago: executing program 2 (id=1713): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001, 0x7fffffff}}, '.\x00'}) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40880) ioctl(r0, 0x121e, &(0x7f0000000180)="8168d1cdc13029131efb0bbfa94159f8c38e3e5d6dab761b678c788fcadbde86db3606261ea22e0372516bd83b97070e58fb2cf2c540ac6dcb9021fe585a78f2e34496da7288f8107a45cc207a35630103b476ca0cbf8f3fe45e53cd0e0488f1c7426514f3aa6449d48e2cccb65440bb56a8d928359694f334ebf0be4b10640f090991596683759a8eb39a8f8dd5080b1c0df22cd25d8118e387719e748bf0b5ab9a7a452579a586eb165091da41d9ffc0920e44abf3bcf2cdaa6186e2ce32ae2d11a129c914b3527de096fd1ab8b703e2ee41ae528df314d8b8b8daa2388773183feaec90e62572daa3c5f90c46d304f30ca7856a5fe148bfdae99a1cd28454aed9d8bd3b71dabc677574c8219647c34f67c18acdf5d83d7d3e5cc5d46e4f7861a400ae45345469978cc9bab4608211d03677f0321179d18dd5ed68ffd4c1fcd795c2dccb92503c6daece7e4d64c9d6872f3c4d20d7f90584f8a7d8ab9bdda7c1a8bf25bd9d11150e40bf8f7a876ec3c37b14ef32a0cb0ba755b60fb36f1f1de6cfa54475172b9fd628a73daa919d77183f7d2224be9ca5e9676fe1f45cf70bcc9660e2733c8489a44ed1e148482a13488f84b08f6d8aff205f71b79dd29b62a4e20cb1a725d2a93eeb043387dd8f21a6b374670a7fbb8b557c761af996ee96dc92c8362f182f392e2e4065371413116bf88660184e3bf34f1ee83f48a2d977552c6d35ddfa679caee92466fa45474592a46314c43fe980e33dca35383c677f525ce843ed837474e6953cd7858d1e079c8c335c2ec4bab0ab5239101f0c5c0d864e7220ac508f1aa26b9c62fedb09a662f9c78e12f95bbf09dd0b8cdc6a874b3f58fdfe7d49ea180190b751190493a03500052dd033b979a186d0896a590e4af9caa2329261a43d5c122df1a6ba7d781812c26b842284f630f7260098228381bbae1aefab1dcf16ebb687e916575dfac043616da1037c69e8f81bdfe5d13af156aea3775af3b65f8d4d2c270cde8df20b7d0b41483b1807952eaa4f43ebec982a370ddaeb7f194a3fef0b03ef02a10aa4cebf9b94b03112c09fccb4f127c9bfabe53eacdabdd4260aa0afc28121a19a09637018299aec35460f7006352df3745633cd2c28779166607a3be4edf03f4a6d940a3ad1e1984c2c9f70df0f0d0037478778c44253369453704c4656f211501a2ed3dc808d994ff48c05b935822fb77f3bb703ffedb5c3347da62c22232ed7b201e2cbf4568767565d568cbf697df54435ae4a61259c50066b4084eaec6bdf8171bbd4430b3231134a7a2dc667b6550ddaef8dfdd45ef2a5fe76746462f90ab1f8fb3ac6a422530e928e3385f4ff1fa27f681e0ab3188aaaa78796675494fe6d6a9ed51726ff5db4435cdf962bfb74c2b1c1805874dbef303c6c55e0e16304d8a75a3199872503b1aed0ff60e60e6da104b133d8193ad561918015fd1b3b124e2f95cd1965bdf4867b574d951d84457c1515183dfc432b214a42f8e3c44e9a28ca9bd8ace402e6e3d794347bdb871cdc36ca3a52001ac67a6d05a7f3231e6b2fcee891127d4686b23cb094e8306a667d8764b1d7e82a473919f300fe7dc8c15ce34f7c42e96d9900ffb2df688aa380339a44d04e68ca6efc9334db19de7019827891dd0f1cd547a33f7b609146faf12df3916825d326d59dafad7908cf0e194fd4690287599468cfb08a52dfecad3863aef77984b1bc24e4c6e3a73819943420a8ad3951c42dba107a31f1f0769f8ec90f9c3037bc635c70e235029a14a31387841d45a2dd6a0be6573c047763631eb3f297054e689e10b93997e757bee1ceb002715236548222cd7d7166e6380d91c0f1a7efc1d0c44a41b2a2632b230f90c288575e545603d85acc9a86e3d05d79d235a48657c62e41d6eeda84371ce62beb9cd15fea8313db664721f6cfbde2ca506d7ac24fe6a4512662fe32b689ca74caed9f8d4cc31d7056a91f292ef2f11ef5291078f3d450ce133be3a0cfa8d410143ed516b1e7b5f70d6c7244e81915b7a1fb3cd43046b028b8ef85d253a296141f01d012f5be231a62a368e2fc38878e5407d868ef3d1cc9e676dcad760dc3603a4679ebd00c1813813a53a310b50fd96acff30f5eee15332651fe1bdd5b5520ff84e4e03c69ee76a6eb0ffc6a506ab0ee76111a1a01cf0f0a5ccba166716e1417af2d5daa71bcada2476c1ddb56de844e19217c064fdf2cc95514d9ba7b377afb5fc7bf16c12e798e9d92398f2797d1428408b0d230453315c6217a6847d435212c673e0e7cc9e0f0a6ee3b6a468a87309cd0aa782459756de65c1f110acf31fae53b94280cda2acd7eaf944f3acf478adf06dd8990ee3ebb99a102ed7d8d1ae89102bd5df6bb33a5a8705e7c56c4b147df782716ccae2f641214666707844586898c4e5277cd636569846e02bd09139b84b3a7fa1f055c3455a3675fc4fae372a4831a515cd61dc899554537198df7fb7f16c8549b7a15a7b6156c8181cf9151fcac032b3336b873a2b29061d74c831491ec0ab3623f8b26536418cb7969b98557789973ae699fbf94afaa8d14aad2c30e28b10f6795a07386efa436708bff2cfc527240330af0a6fa46044f5a0a008a9890fe7b7a1e9f5cc4a02c4d323b1e555fcaaa8e3c3b2c8a51cb99decb658828b831b6a6ac8d8219888d45f94b153b89a1ee07fefa4727f2de4d43581f9c9023a1d5fd65ec571bdd6fe1dbb75ecb92cfe13d5b348d69480a552085d24bf65f4f8d1759838c389121802ca87b6282af4e193e63ab2aa814778608e3234ad1d5b3004bdc34f6c8f4c5649b3bf8cd32d3013a11ff6b17905c06537ed15951e2f00d831d77eea12bea59ac3925ed0c2aa236d095c7b00992878219fafe869739708c8ed0dd49dc5ceea8f9750532f8ec6c85e4a3e2c8d77da12e8e3661515208bec05dc068d6907850169c4226b75174e4183cf9f9bd277b17dac729005a454af5ce1f0bb16155673141a516245fa57a09856e78cc6869f0c48a6bc00a7cb7e329956779e4ac5e4c468956f3310a4de07c375516dc27625a30ca86a5699cd7cf6455aa1ef456de26117c06b808bf8f9a97efeb60ebbf9466e6b96fa971024f300d16d792108b7ac17e0f2bd088cca781188bb6cb26d64c6c283810bb97ef06e9b24b1ec3b788049f15fbd4a61aedf27ccbbaef9573e80f21957275f8ea75c714bcb308189b9059564cf6a8556c4fe76bcb810f407a6da9d5d093ca0bb57bb2be7182aef7ab945e39f69a978062050bddbff919dc2354173fc1572d6777c23b0c87f0388c9d02ce33b1f7d2f595264b367a62447812c5adad40e96ce27a3f45486f632e044e94383d22cdf034aa8129d69cf17b2236e5970edad4f33577fcac298e9b72782c2ea7f51718ef848b84e67169800d00ed9316fe0cdb39008045b41fa38b60072544bd02ceb6b92bdbd927d6fc60a71d5f2861cecd0cc30a0762c990242f80eadc65dd33c3aa599bf7a33d6e856ce182204dc6a64bd0dac4af54322fa9d0bd6c72d363cf86b0c655b4e2054173543a25c2b1cf2b91f44917fe3a89839f6d90edfb60402bfe055451b049415ae49ef1634c28f9a261a2162e28b74546bb589969c306a53bf751bf738618fe610c8ac111a2d63c73b07da27aa3acd7e090c045f5111a1d0b0525f2685f45f40f0ec20238f8b5932b3a0476a44fe6093b43fd80bb67b4f09807ec2291cf876ae87f3ff8f6b55726bfc03cc7efba41bb9a632ac2596c124186b6d349f86870e819ae733e554103ab4923a54f50d5de8ca532c74176d77e0c6614a91d5fb8d2b99837df8459c54dbfd4dd95dfb98521231ca51c6b597fb48f930f7222e86aaddcd31593a84c524556a2be2f6a6418af876703ede6c62f7f990d30a1c30bcffc35af67ffe69994d42d94990d562ff18cb269961e722f7ca0d8e1a898ac51d78ed421738ace7cac8fc726e46eafc55400794e71bc3001eec6e977b18c729ffbcf385dd17124bf3f1073ce73070c56628d01b0ad2a4e789aa775516f8423bd689629a39b8056b9de203bb37d7a1eddde2759b1c216da9dc8510bdf21e25ae2f33651d4bc523dfa291189c12bd1f8d80d8245db6a2d37a48a13901d5a57bc29f4c51e7b937c06e5ae835203dde43ac1bba47c700ae700dc5710375d41f69be477211506087640533b842b4c4f808b979efd1b29fc66e4d3eefd8ae2a2cec9893baff8bf0e213fa23e16c3696703a89ae417d66b6e880bd47bfa3b6dbbadb3f6e8ff20f0e811eed35a457da6e869a24451831bd83ac8070bde52d7fb4a523831081963afc93e3cd157de6ea5ed6ba3b4b3a01ef851f375aae189c38ad03d0aa669916efeba523e514eb56d35488b5121f32dffe22e8fde9693a3dff97f395dc13967ce7504e850102969d20746b89c22f7f119c8102b6d511a1f4b3ab9d2cbce261f813d4fb37a27c6c2f46c813810829a397c0d2d56bb0101ce4c8012ea447ef10be451662c3fda7bc687419afdd160d6cca5af3bd97218ffcb8e5729d04c9906b0b38b320c1ff891eb3b7161b79aeaca805c58048832a7072b1c333972125b1e09e69a69f45c992a14bd4b1e69bd83cbf6495bead07aabb5809c7a3cb0fc100acd3084dfaddd4dd827445e130afe89d574a452b82988c55166ab914f05c85a160b1c53b8bf22cc589d27b491290bbe532c3509cb3598bb86e7717e1810530d619074338bf940c7f0382b82b93ba12355f1f972eca1186ed0e8c29dd70b97211e29dd66e11529736ac0377807d5684f4eecd165937717ccb1014b7a9ff20a74b0cb138c53dfa719e1e14530a8689720ce9f6df2fa80b468eeb03aa6f9f4d70c52d3974e7e5115fb11759dbf871f41a70cf3bc917cb4a4d981f018f7c6beba3af6ff6f402f919250383b7f0cd247ad2ac0606176a10daae84a9dcb5d54bb9a8e211c5419ab42835bb890ec4705314b1fdd64e451c8a099e6adbb3217a3da93b149ea71ddd8f1b6282f07847a5e7772b8b4873d3a6bdf89355d0f848555aeee75aaea7bacc9f87cc3497db2fb12da9d6758313418b99d9210cae37fc9825ab3466e4bec432a0ad8d6d24951d982c0aa382438fce2bb97cebbc22ba6e7306d318a2276e1e184da7472b34d8eaa067a4fe9a43a01172fe92007c642bc82ca3f077168b29b9ba4cf496faa1fa738e643a6bd15cec46480c88989a3a56c166eb30f01b13d9e284439d1031e5be582324b15cb3951b5c5dd5de8a89ef06f1cf9e5e07a0fda68c07accc5ce4354f85eb063e0b22b10c8806c9de3ac6f847539de9e16d34a429eb1291b3571aa3e0a4c95653e35c79d29816f6743852a0510ff324ab03c2bc1b54b7d077b14ad35fdcc14743a697def9aadb64a09b6f4be5fad4baa117868681270478bd71b209980e63df099b9f506437f35fc9f83ee66b1ec6d2436bc703fcb9d0d1537bd24882f9e323fde7f3db7a7d614a4b68d576ec48d8a7ed1b50655bcdb9099e5a6e3078abaf12ff606fec7c99a0a0c9fc6d85fdfdeb0ced465f4c08dbad751b579a5edf64eabd6fe5a9d9dbb66d13c8bd0561c9ec0483a50084e8902505ec0907ac2cf2726510fd664f2abb08ac95ca7a2ebe0f8bc8dc96c34f417b897da07d15369d66976f261342f66e040fb38919976d08fcf9851bad7907e3f9d1c5f13b6c58eb5b41ea276bee573b7349831de842321e5e503416d7190085feca8d3856255fac7c4981e74f1bc2fe753320021e1fc05c62dc38bcfae3169ed30ca3f499b42f173cb32f5f8d5d2d8cadeb47d") r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c810}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40200008}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001400)={0x0, 0xda, "41326d9c6722f60bc667ada9d00ccc1f14767b08d0b2631f60c3388d3ae00c465800cc8f56053e815d25dae100cef56fd5d6a00d9bb9bbaa1a7524b447b3306f18045c4ccbd081c1a4f48934cd16749eee4fb4d8b49135efdd364ecacf02999aa734faa98f310abe50f577c815ef0aa66c63c7e65d8f2786088dc3e9b987de5a244d60f68a27376accde35809f52a879cbfd25fc57ced35f5a2f22a7868a8998c0a46e96410305a8bacf583cce0b43a7d2fbb006383675b3858c74040ab454703a9c684d2057515761343710ef2c00c675619302de76635f2992"}, &(0x7f0000001500)=0xe2) syz_emit_vhci(&(0x7f00000015c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xc, 0x4}, {0x7, 0x8}}}}, 0x11) syz_genetlink_get_family_id$mptcp(&(0x7f00000026c0), r1) 2.682184446s ago: executing program 2 (id=1714): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = socket$netlink(0x10, 0x3, 0x2) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/139, &(0x7f00000000c0)=0x8b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) (async) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x93774000) 2.644072101s ago: executing program 2 (id=1715): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000004}, 0x44) write(r1, &(0x7f0000000200)="ef3446a6672939f501b4b8fe6192ef4a96da1092e7f1bdf707ae17f7bc837e402bfe20946107e872df34c3db0e5fb2a2fff5126f53c68ae1904fb1a0e66322a7a6124e7c73b6298a1315f7f8ad64aff6f6dc788e311edadf69c2fbc6a6600e217d632eaa5f59000a055917060f9db5518bdd0d331005c731ec4043ebb108f8c35f61ca106aa583ef59e857b167abc64fa840634313c64bbeb415423a754b6811abbe359cad9890cbced0c2e266598c52b1e86a4ccdaaa4", 0xb7) (async) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r5, 0x0) (async) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x5c, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async) mlock(&(0x7f0000682000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.467448095s ago: executing program 2 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a32"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) syz_usb_connect(0x3, 0x146, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002a4b4b708b40402005ce20102030109023401020509300209043426fe37dbd244cfae3d94fdb906008e826200fd16b64bad23344c2c5d53743ae6c68d0aaae0eb512c93fb14748a0633128ea4e41b340205c7c674adebaa6d99fab197b3a0b1486d32274efffb8a7e7b09e716c398de7c3ffff01848b793ffed71e7da3db4fa9d3c7dc5447cdb4aa58b06d768cae33680c329e153c9f00b35b4c6fe2ac95b204c05134332b64b9d78394f5035bc200fc08fc2ad82528ecfbcf1a93858d9f593c1fe81890dbc2d86cb7bca74f8c12eff6ec23242e432f63e0de5bff653b9dbba59fe5a3b95abc7c3cde3e8a15046d9b575043c20d5efeedbac5edf08bee2ae8b13e5f56c8740ba8402631a99f6b4e7fe78bbc97295078063879d6ad206dc33308ce8de7ae40020c07779357726c2fa5b85ae674306a1286df6e14e5dec2bedf25d9d55420d1f60d3c518f246149be3a6f3257f6bb82cac80928fca155f84ef55690f0d1df5e4d827955b020ea13b470873f67e95c9b7cc5bcc0cefcb6822e99ba169150000ae4af673339c0721af1dd3e4d99b385111f580eab2ce49007ff9b2aee5789c54eb684f7230737cf4c387e6b48119b4858ab8ab12b73e9d2ca766d1b6e3995c7410cea09d2339360be8c5e395338315d0d2773a409225dbabbcfdbcff4c0ca20e0542fe44a78c1438d9cbeebcd5bfdb8595"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xd83ba000) r2 = syz_open_dev$video4linux(&(0x7f00000006c0), 0x5, 0x0) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0x7ff, 0x7}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="f04d9392dde1e622f54607f337b7a0464fbecc090581b3d00ccfed967323730fdc01baec9d3558470ee1ddda96f5a6cf88c9bcff5205e46c96d373663adca3dfa5b37d0eafdc00c9c3991dd982a8fd0086190876998888aa6ed0d884e6f399af2e7f263e2879c06421339272e1d2c3a2b91a2c392e9d4650e3d3ebc7c44b6ad02731e5620774594db6276079901cae02df8b91475c910f007c86e217bd91d1fe5843b60b061e9cd9", 0xa8}, {&(0x7f0000000440)="318ff0d4044350e3039ddfcd149424ec171154864c59147de302dbf8139929a1910c3e3ec8ec5663a4a867d709a6a4ef5d40a5166eee04d2b1124d28465cd584446b447c3e2672dc3f4c1842e3f53b6a12a8f5f1d3f6a56bc9475dcc90d11bd48c58b8a9fe9722e30dc85407a91c51ccb65b7bbe426fadaaf8f7f8de5026", 0x7e}, {&(0x7f00000004c0)="f647e88c02221556cf44287e", 0xc}, {&(0x7f0000000500)="0a86168835999e2841efa76f49d7a5e0915c1fb5cb7401b58bb0ea24083cb917b2a23a7458cc9208d4debc72234bd8e6a783bbe8d4db10727cab1f5b0e46e655136ac5b01fc5bebb9a69fb82d15617e67a6ba8679fd22cf9ab9f3859762b90b9f02dd80ec81ee43d40925205429d83a791349175aa999095c70086084ea8056bfe2b419fba7cb580568092a354fa49a606cb97de3ff86bccbc", 0x99}, {&(0x7f00000005c0)="5ee4500d3aed814e0d688a7a9cdab34f9ced3bd8737211778ea92f96f88dbe0a26025b2291e67949be3c6b19685385f20dd1b11129ed2e8b396df106f67c8142802d25073ddc32ca53035bc28b01236fb308c99dcfd9248b319c7eac132cd1cd731a961396329b77a68143f671ce40a45d67769bf2918707516d32589d3006948afda3", 0x83}, {&(0x7f0000000680)="fbc7a5180893936c970c1a4f43ad4f6a4380c316989c0e56928d7ef3386e5acbf6cbc5d596fc10b1046669f023c1eb09109538e981", 0x35}, {&(0x7f0000001bc0)="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", 0x1000}], 0x7, &(0x7f0000000740)=[@ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x43, 0x3, 0x1, [{@local, 0x14}, {@multicast2, 0x24aa289a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xea}, {@local, 0x1}, {@multicast2, 0x20fb4fdc}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x7, 0x3, 0xb, [{@local, 0x4f}, {@private=0xa010100, 0x7319}, {@rand_addr=0x64010100, 0x5}, {@multicast2}, {@private=0xa010101, 0x4}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@broadcast, 0x4}]}, @ssrr={0x89, 0x1f, 0x13, [@empty, @multicast1, @loopback, @loopback, @loopback, @empty, @empty]}, @ssrr={0x89, 0x2b, 0x9a, [@private=0xa010102, @multicast1, @loopback, @private=0xa010100, @loopback, @multicast2, @broadcast, @remote, @rand_addr=0x64010102, @multicast1]}, @generic={0x88, 0x12, "7c55706ab136a70c38a977f351b8c03f"}]}}}], 0xe0}}], 0x2, 0x8001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x83d7baabfa07d40c, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.15994204s ago: executing program 3 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="020520000300000000000000000000010018000502000000"], 0x18}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmote=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r0], 0x25c}}, 0x4040000) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f00000000c0)={0x8000001, 0x0, 0x0, 0x0, 0x80000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x1) mlockall(0x1) shmget(0x3, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) mlockall(0x4) syz_emit_vhci(&(0x7f0000002280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc9, 0x9b}}}}, 0x9) sched_setattr(0x0, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x12701, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000002340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000002380)=""/4096) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000003500)={{}, 0x2, &(0x7f00000034c0)=[0x2, 0x6], 0xff, 0x4}) write$FUSE_INTERRUPT(r6, &(0x7f0000003580)={0x10, 0xfffffffffffffffe}, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 1.254520875s ago: executing program 5 (id=1723): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001, 0x7fffffff}}, '.\x00'}) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40880) ioctl(r0, 0x121e, &(0x7f0000000180)="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") r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c810}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40200008}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x0) syz_emit_vhci(&(0x7f00000015c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xc, 0x4}, {0x7, 0x8}}}}, 0x11) syz_genetlink_get_family_id$mptcp(&(0x7f00000026c0), r1) 1.151453161s ago: executing program 5 (id=1724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x500000e, 0x4008032, 0xffffffffffffffff, 0x4000) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000c00)={0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000bc0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r7], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3e}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000500)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000940)={&(0x7f0000000580), &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0), &(0x7f0000000800), 0x7, 0x0, 0x400000000000008b, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a80)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640), &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), 0x0, 0x4, 0x8, 0x0, r11}) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000600)={&(0x7f0000000400)=[0x0], 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000680)={&(0x7f00000000c0), &(0x7f0000000180), 0x0, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r12, 0xc01864ba, &(0x7f0000000300)={0x20, 0x0, r10}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000b80)={0x700, 0xa, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, r4, r5, r7, r8, 0x0, r9], &(0x7f00000004c0)=[0x65, 0xfcb, 0x80000001, 0x6, 0xfffffff3, 0x9, 0x7ff, 0x9, 0xd], &(0x7f0000000b00)=[r11, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x3], 0x0, 0x3}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000000000006, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x2, 0x41}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffea8, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX=r12]) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r13, 0x7dfff000) 1.151008597s ago: executing program 6 (id=1725): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xa8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r1, 0x93774000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xa8000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r1, 0x93774000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async) 958.428387ms ago: executing program 2 (id=1726): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) fanotify_mark(r0, 0x200, 0x1002, r0, &(0x7f0000000080)='./file0\x00') r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100005acf0610b810b1fb2c2f010203010902120001000000000904480800dc1c4a00"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x10f010, 0x0) 770.448743ms ago: executing program 6 (id=1727): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 707.498311ms ago: executing program 3 (id=1728): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) (async) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000002080)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002240)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002240)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @mcast1, 0x3}}, 0x1800000, 0x2, 0xffff1896, 0x3, 0x6, 0x7, 0x1b}, 0x9c) sendmsg$netlink(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)={0x24, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x144, 0x0, 0x0, @u32=0x3}, @generic='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) socket(0x8, 0x5, 0x7ff) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x54, 0xb, {0xffffffffffffffff}, {}, 0x1, 0xa}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000140)=r5) 649.450787ms ago: executing program 6 (id=1729): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000970000/0x3000)=nil, 0x3000, 0xa10}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 508.894007ms ago: executing program 3 (id=1730): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00006d0000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000002100)={0x18, 0x0, r3, {0x3}}, 0x18) 183.700166ms ago: executing program 3 (id=1731): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000102, 0x0, 0x8000}]}) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x208c, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 167.670752ms ago: executing program 6 (id=1732): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001, 0x7fffffff}}, '.\x00'}) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40880) ioctl(r0, 0x121e, &(0x7f0000000180)="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") r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c810}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x40200008}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x0) syz_emit_vhci(&(0x7f00000015c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xc, 0x4}, {0x7, 0x8}}}}, 0x11) syz_genetlink_get_family_id$mptcp(&(0x7f00000026c0), r1) 140.468929ms ago: executing program 6 (id=1733): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x48a00, 0x17, 0x2}, 0x18) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) utimensat(r0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000500)={{r1, r2/1000+10000}, {0x0, 0x2710}}, 0x100) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) open(&(0x7f0000000440)='./file1\x00', 0x0, 0x73) (async) linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x0, 0xb5, 0xe1, 0x45}}]}}]}}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x6000) (async, rerun: 64) unlink(&(0x7f0000000280)='./file1\x00') (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$sndctrl(&(0x7f00000021c0), 0x1, 0x80102) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, 0x0) (async, rerun: 32) r6 = socket$inet(0x2, 0x3, 0x5) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x8, 0x0, 0x2f, 0x0, @local, @private=0xa010100}}}}) ioctl$TIOCL_SETSEL(r4, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0x8000, 0x0, 0x4}}) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 92.49049ms ago: executing program 6 (id=1734): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) recvfrom$inet_nvme(r0, &(0x7f0000000780)=""/244, 0xf4, 0x0, &(0x7f0000000880)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) lstat(&(0x7f0000000040)='./file0\x00', 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0xc0001, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000000c0), &(0x7f0000000140)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000200)={r2}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="4ef3a27045702c3d7343f38bf19bce8c129e34871e5ad4e894f7930bbe93d83dc54c2a96a53a5d85bdebba6372905b4039563035646e8d5e043d4789482fa75635727dea43461472cbe86234a93c932b03ce9a4b5d6b8495a4d4b4dd518630fa453f0f0119b910edc9ec320c4c07ec6a472087ca1ba479a3a7ead3483f4bbcf0fc143e4e62a10b2ecee2be6faa9c912d5d7a66f505c9c70ae52d5eefd6362852318a46804ae2a882e39c8a381d7deff6a4cbd9107d7dc0141af48c9298eb43e4e12d303fea3cbc3fbf0b387156b8997ac92f1df393374b62224261576e2f1ac2622efc9bfde41c94f108940fb7cc2185821fbf3592", 0xf5}, {&(0x7f0000000400)="b79725db93af3a7def5e75d8929b2436cb6c47fca16a20b859f986feedfbde30f4c664e21c603d3bf68a36aa05c035ba33cfd589442b4fa91dd6930b8c474eaa48ea2c6d2122827c81b53f407f2793fa3cf28d14c900548823b2451015ded2a480ee34d46e93802251b94beecccdbb43cb05cb15811a935851a2bfe01b2022397c79aeaad041a6ff56684d1e33d7bf33a2d7f2f15ff8fe1d9ba632180b3af25d864576f88c90039506c02f0401522cdce99be6a60b034c2425a960e7a3807d0b3185c20978d028cea382ee9589693812f102634f5decdb", 0xd7}, {&(0x7f0000000500)="aea006684d3df955a96f54725be0641ec44799ae6c05b627ed2f5e53f11d3ebcd3e745096d897c0683fdd54b05b8dc35ca9fecbb2dead1871e64556de890e5c66cf0ea2448bfc9ba4a014d2054c0dc2db87efddcee0b0dc628bc024def672d00223f4c385383721584b76f5dabc74ff7386d51dea5e0bef8beab2201d0a9e6561e17ca8c26eefe21d3fd0a98f6a27cc5238b80411b46e7747a26703c2092c186406948a1b54f3a5f108aa85a5858a57c39651a79a5e02436dd213b2b82e055869eb18dc136c4", 0xc6}, {&(0x7f0000000600)="3b21064f348f1991765e20adbe45e87a1f341fbc0664a00b8d7085e8d0b09e79382c3bfd916434ab79a1b46e46f863910e11653b70ef2b4c0a3a020de0fcc44aa39b19ddd7217515114112961c1fb7c4540ce69fb95bcb14c91061b951331416", 0x60}], 0x4, &(0x7f00000006c0)=[@ip_retopts={{0x48, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x57, 0x0, 0x9, [0x100, 0xfffffffd, 0x5d9d47d2, 0x9, 0xd]}, @rr={0x7, 0xf, 0x91, [@multicast1, @private=0xa010102, @private=0xa010100]}, @ssrr={0x89, 0xf, 0xd4, [@empty, @dev={0xac, 0x14, 0x14, 0x14}, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0x60}, 0x80) 35.638817ms ago: executing program 3 (id=1735): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 0s ago: executing program 3 (id=1736): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xa, 0x2, 0x0, 0x0, @binary="b27d9adc61c3"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}]}]}, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): bf98 [ 184.361825][ T8806] [ 184.789133][ T8808] netlink: 'syz.4.960': attribute type 4 has an invalid length. [ 184.803347][ T8808] netlink: 'syz.4.960': attribute type 4 has an invalid length. [ 184.811778][ T5897] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 184.837411][ T5897] usb 3-1: device descriptor read/8, error -71 [ 184.867389][ T8814] overlayfs: conflicting options: userxattr,metacopy=on [ 184.875217][ T8814] /dev/rnullb0: Can't open blockdev [ 185.075737][ T5897] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 185.106367][ T5897] usb 3-1: device descriptor read/8, error -71 [ 185.227147][ T5897] usb usb3-port1: unable to enumerate USB device [ 185.237685][ T5958] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 185.398272][ T5958] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 185.418491][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.432446][ T5958] usb 5-1: config 0 descriptor?? [ 185.547287][ T8846] @: renamed from vlan0 (while UP) [ 185.690104][ T5958] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 185.715576][ T5958] usb 5-1: USB disconnect, device number 9 [ 185.723940][ T8855] netlink: 'syz.3.972': attribute type 27 has an invalid length. [ 185.763718][ T8855] /dev/rnullb0: Can't open blockdev [ 186.099660][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.140879][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.232009][ T8888] netlink: 14 bytes leftover after parsing attributes in process `syz.3.982'. [ 187.491181][ T8893] capability: warning: `syz.3.983' uses 32-bit capabilities (legacy support in use) [ 187.777124][ T8900] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 187.784112][ T8900] /dev/rnullb0: Can't open blockdev [ 187.941339][ T8912] /dev/rnullb0: Can't open blockdev [ 188.181198][ T8924] /dev/rnullb0: Can't open blockdev [ 188.480337][ T8928] /dev/rnullb0: Can't open blockdev [ 188.578288][ T8939] /dev/rnullb0: Can't open blockdev [ 188.667991][ T94] block nbd0: Possible stuck request ffff888025677000: control (read@0,4096B). Runtime 90 seconds [ 188.691947][ T8944] /dev/rnullb0: Can't open blockdev [ 188.710953][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.772604][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.804328][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.821868][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.065488][ T5897] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 189.211838][ T8965] syzkaller1: entered promiscuous mode [ 189.225488][ T8965] syzkaller1: entered allmulticast mode [ 189.228551][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 189.249704][ T5897] usb 1-1: not running at top speed; connect to a high speed hub [ 189.266355][ T5897] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 189.275447][ T5897] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 189.286331][ T5897] usb 1-1: config 4 has no interface number 0 [ 189.294593][ T5897] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 189.315466][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.323625][ T5897] usb 1-1: Product: syz [ 189.329116][ T8974] /dev/rnullb0: Can't open blockdev [ 189.331582][ T5897] usb 1-1: Manufacturer: syz [ 189.339154][ T5897] usb 1-1: SerialNumber: syz [ 189.568887][ T5897] usb 1-1: Found UVC 0.00 device syz (04f2:b746) [ 189.597601][ T5897] usb 1-1: No streaming interface found for terminal 6. [ 189.625230][ T5897] usb 1-1: USB disconnect, device number 29 [ 189.987698][ T24] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 190.011154][ T24] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 190.210113][ T24] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 190.254137][ T24] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 190.490124][ T8986] /dev/rnullb0: Can't open blockdev [ 190.625411][ T5958] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.717613][ T9007] syzkaller1: entered promiscuous mode [ 190.723227][ T9007] syzkaller1: entered allmulticast mode [ 190.776719][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.789582][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.807181][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.827121][ T5958] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.839935][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.853950][ T5958] usb 5-1: config 0 descriptor?? [ 190.884688][ T9010] syz.3.1027: attempt to access beyond end of device [ 190.884688][ T9010] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 190.900505][ T9010] XFS (nbd3): SB validate failed with error -5. [ 191.023475][ T5897] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 191.198050][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.218496][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 191.255396][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 191.266671][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.274117][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.275437][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 191.311779][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.325411][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.331800][ T5897] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 191.333730][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.342559][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 191.366913][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.374357][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.376368][ T5897] usb 3-1: Product: syz [ 191.396727][ T5897] usb 3-1: Manufacturer: syz [ 191.400042][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.402163][ T5897] usb 3-1: SerialNumber: syz [ 191.425476][ T5958] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 191.432930][ T5897] usb 3-1: config 0 descriptor?? [ 191.434743][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 191.457638][ T5958] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 191.531573][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.540327][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.571475][ T5958] usb 5-1: USB disconnect, device number 10 [ 191.822121][ T9035] /dev/rnullb0: Can't open blockdev [ 191.965578][ T5897] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 191.974321][ T5897] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 191.992634][ T9044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.002822][ T9044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.525531][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 193.667076][ T2153] usb 3-1: USB disconnect, device number 39 [ 193.695521][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 193.702170][ T5897] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 193.713439][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.724851][ T5897] usb 5-1: config 0 descriptor?? [ 193.741734][ T5897] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 193.942727][ T5897] usb 5-1: Detected FT232A [ 193.963687][ T5897] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 193.991492][ T5897] usb 5-1: USB disconnect, device number 11 [ 194.012830][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 194.028717][ T5897] ftdi_sio 5-1:0.0: device disconnected [ 194.442022][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.448454][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.024853][ T9063] use of bytesused == 0 is deprecated and will be removed in the future, [ 195.033500][ T9063] use the actual size instead. [ 195.534091][ T5897] hid_parser_main: 7 callbacks suppressed [ 195.534112][ T5897] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 195.557846][ T5897] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.728614][ T9068] /dev/rnullb0: Can't open blockdev [ 195.778601][ T9077] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20004 [ 195.836908][ T9080] fuse: Unknown parameter '017777777777777777777770x0000000000000004' [ 195.967784][ T9084] /dev/rnullb0: Can't open blockdev [ 196.056020][ T5897] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 196.083022][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.093655][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.215462][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 196.223008][ T5897] usb 3-1: config 0 has an invalid interface number: 233 but max is 0 [ 196.232903][ T5897] usb 3-1: config 0 has no interface number 0 [ 196.239076][ T5897] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=98.7f [ 196.248275][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.257796][ T5897] usb 3-1: config 0 descriptor?? [ 196.316611][ T2153] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 196.475706][ T2153] usb 5-1: device descriptor read/64, error -71 [ 196.505823][ T5189] Bluetooth: hci0: command 0x0406 tx timeout [ 196.508729][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 196.512058][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 196.735415][ T2153] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.865853][ T2153] usb 5-1: device descriptor read/64, error -71 [ 196.990892][ T2153] usb usb5-port1: attempt power cycle [ 196.997475][ T9106] binder: 9105:9106 ioctl c00c620f 200000000180 returned -22 [ 197.092266][ T5868] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 197.112874][ T5868] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.193807][ T9112] fido_id[9112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 197.338448][ T2153] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.378411][ T2153] usb 5-1: device descriptor read/8, error -71 [ 197.628690][ T2153] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 197.666693][ T2153] usb 5-1: device descriptor read/8, error -71 [ 197.793345][ T2153] usb usb5-port1: unable to enumerate USB device [ 198.833862][ T5897] usb 3-1: string descriptor 0 read error: -71 [ 198.843838][ T5897] gspca_main: spca501-2.14.0 probing 0497:c001 [ 198.856006][ T5897] gspca_spca501: reg write: error -71 [ 198.861427][ T5897] spca501 3-1:0.233: Reg write failed for 0x02,0x07,0x05 [ 198.891430][ T5897] spca501 3-1:0.233: probe with driver spca501 failed with error -22 [ 198.906789][ T5897] usb 3-1: USB disconnect, device number 40 [ 201.654756][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1073'. [ 201.673248][ T9162] af_packet: tpacket_rcv: packet too big, clamped from 64332 to 3944. macoff=96 [ 201.675056][ T9164] /dev/rnullb0: Can't open blockdev [ 201.899609][ T9167] ubi0: attaching mtd0 [ 201.912816][ T9175] /dev/rnullb0: Can't open blockdev [ 202.050814][ T9189] /dev/rnullb0: Can't open blockdev [ 202.121948][ T9196] /dev/rnullb0: Can't open blockdev [ 202.295577][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 202.325718][ T5897] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 202.428490][ T10] usb 5-1: device descriptor read/64, error -71 [ 202.498438][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.513052][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 202.527526][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.539314][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.552822][ T5897] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.563014][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.573665][ T5897] usb 3-1: config 0 descriptor?? [ 202.585982][ T9191] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 202.667710][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 202.805724][ T10] usb 5-1: device descriptor read/64, error -71 [ 202.925673][ T10] usb usb5-port1: attempt power cycle [ 203.007533][ T5897] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 203.034693][ T5897] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 203.122065][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.131573][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.142440][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.151059][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.258250][ T5958] usb 3-1: USB disconnect, device number 41 [ 203.265879][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 203.298170][ T10] usb 5-1: device descriptor read/8, error -71 [ 203.535575][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.555855][ T10] usb 5-1: device descriptor read/8, error -71 [ 203.665732][ T10] usb usb5-port1: unable to enumerate USB device [ 203.752318][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.760971][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.773167][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.783146][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.810109][ T9212] syzkaller1: entered promiscuous mode [ 203.816126][ T9212] syzkaller1: entered allmulticast mode [ 203.927147][ T9214] tipc: Started in network mode [ 203.932099][ T9214] tipc: Node identity ac14140f, cluster identity 4711 [ 203.939121][ T9214] tipc: New replicast peer: 255.255.255.255 [ 203.947868][ T9214] tipc: Enabled bearer , priority 10 [ 205.464438][ T5897] tipc: Node number set to 2886997007 [ 205.543196][ T9234] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 205.549751][ T9234] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 205.558831][ T9234] vhci_hcd vhci_hcd.0: Device attached [ 205.567711][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.578367][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.845629][ T10] usb 40-1: SetAddress Request (2) to port 0 [ 205.851777][ T10] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 206.257451][ T9249] /dev/rnullb0: Can't open blockdev [ 206.438516][ T9257] /dev/rnullb0: Can't open blockdev [ 207.113751][ T9269] could not allocate digest TFM handle cryptd(sha512-ssse3) [ 207.308376][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.315833][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.323198][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.331086][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.338671][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.631697][ T9285] FAULT_INJECTION: forcing a failure. [ 207.631697][ T9285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.647609][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 207.648860][ T9285] CPU: 0 UID: 0 PID: 9285 Comm: syz.2.1115 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 207.648889][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.648904][ T9285] Call Trace: [ 207.648912][ T9285] [ 207.648921][ T9285] dump_stack_lvl+0x189/0x250 [ 207.648961][ T9285] ? __pfx____ratelimit+0x10/0x10 [ 207.648988][ T9285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.649027][ T9285] ? __pfx__printk+0x10/0x10 [ 207.649057][ T9285] ? __might_fault+0xb0/0x130 [ 207.649084][ T9285] ? rcu_is_watching+0x15/0xb0 [ 207.649134][ T9285] should_fail_ex+0x414/0x560 [ 207.649172][ T9285] _copy_from_user+0x2d/0xb0 [ 207.649204][ T9285] ___sys_sendmsg+0x158/0x2a0 [ 207.649241][ T9285] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.649292][ T9285] ? __fget_files+0x2a/0x420 [ 207.649323][ T9285] ? __fget_files+0x3a0/0x420 [ 207.649359][ T9285] __x64_sys_sendmsg+0x19b/0x260 [ 207.649394][ T9285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.649432][ T9285] ? __pfx_ksys_write+0x10/0x10 [ 207.649458][ T9285] ? rcu_is_watching+0x15/0xb0 [ 207.649490][ T9285] ? rcu_is_watching+0x15/0xb0 [ 207.649520][ T9285] do_syscall_64+0xfa/0x3b0 [ 207.649549][ T9285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.649572][ T9285] ? clear_bhb_loop+0x60/0xb0 [ 207.649597][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.649624][ T9285] RIP: 0033:0x7f9932f8ebe9 [ 207.649644][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.649664][ T9285] RSP: 002b:00007f9933e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.649689][ T9285] RAX: ffffffffffffffda RBX: 00007f99331b5fa0 RCX: 00007f9932f8ebe9 [ 207.649707][ T9285] RDX: 00000000140cc014 RSI: 0000200000000540 RDI: 0000000000000011 [ 207.649722][ T9285] RBP: 00007f9933e46090 R08: 0000000000000000 R09: 0000000000000000 [ 207.649735][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.649750][ T9285] R13: 00007f99331b6038 R14: 00007f99331b5fa0 R15: 00007ffede3a67d8 [ 207.649775][ T9285] [ 207.921907][ T9292] tmpfs: Bad value for 'mpol' [ 207.959688][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.970684][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.978251][ T9277] bridge_slave_0: entered allmulticast mode [ 207.985586][ T9277] bridge_slave_0: entered promiscuous mode [ 207.994443][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.001774][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.009345][ T9277] bridge_slave_1: entered allmulticast mode [ 208.016375][ T9277] bridge_slave_1: entered promiscuous mode [ 208.050667][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.068169][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.108333][ T9277] team0: Port device team_slave_0 added [ 208.118806][ T9277] team0: Port device team_slave_1 added [ 208.147753][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.154806][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.183964][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.185764][ T5958] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 208.209847][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.219309][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.247597][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.293712][ T9277] hsr_slave_0: entered promiscuous mode [ 208.301478][ T9277] hsr_slave_1: entered promiscuous mode [ 208.310630][ T9277] debugfs: 'hsr0' already exists in 'hsr' [ 208.318375][ T9277] Cannot create hsr debugfs directory [ 208.416985][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 208.423537][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.435380][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 208.458639][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 208.461956][ T9277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 208.482128][ T9277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 208.485803][ T5958] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 208.500844][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.523974][ T5958] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 208.533577][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.543423][ T5958] usb 3-1: SerialNumber: syz [ 208.550205][ T9277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.551780][ T5958] usb 3-1: config 0 descriptor?? [ 208.564004][ T5958] hso 3-1:0.0: Can't find BULK OUT endpoint [ 208.577355][ T9277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.589507][ T9235] vhci_hcd: connection reset by peer [ 208.596577][ T1109] vhci_hcd: stop threads [ 208.601756][ T1109] vhci_hcd: release socket [ 208.607631][ T1109] vhci_hcd: disconnect device [ 208.670983][ T9277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.694471][ T9277] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.709028][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.716198][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.744365][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.751587][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.784774][ T9293] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.804850][ T9293] overlayfs: failed to set xattr on upper [ 208.819885][ T9293] overlayfs: ...falling back to redirect_dir=nofollow. [ 208.833137][ T9293] overlayfs: ...falling back to metacopy=off. [ 208.843654][ T9293] overlayfs: ...falling back to index=off. [ 208.857483][ T9293] overlayfs: ...falling back to uuid=null. [ 208.905186][ T121] usb 3-1: USB disconnect, device number 42 [ 208.941793][ T9277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.950773][ T9310] /dev/rnullb0: Can't open blockdev [ 209.003998][ T9318] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 209.016396][ T9319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.135331][ T9277] veth0_vlan: entered promiscuous mode [ 209.149355][ T9277] veth1_vlan: entered promiscuous mode [ 209.170276][ T9277] veth0_macvtap: entered promiscuous mode [ 209.179992][ T9277] veth1_macvtap: entered promiscuous mode [ 209.194670][ T9277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.208928][ T9277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.221167][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.230166][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.240803][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.250018][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.290670][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.304423][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.327392][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.335889][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.385579][ T5870] Bluetooth: hci5: command tx timeout [ 209.419692][ T9328] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1122'. [ 209.976063][ T9342] /dev/rnullb0: Can't open blockdev [ 210.046757][ T9344] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 210.066148][ T9344] /dev/rnullb0: Can't open blockdev [ 210.256155][ T9354] /dev/rnullb0: Can't open blockdev [ 210.575501][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 210.725388][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 210.732583][ T5897] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 210.742826][ T5897] usb 6-1: config 0 has no interface number 0 [ 210.749455][ T5897] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.761425][ T5897] usb 6-1: config 0 interface 85 has no altsetting 0 [ 210.770427][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 210.779743][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.787906][ T5897] usb 6-1: Product: syz [ 210.792097][ T5897] usb 6-1: Manufacturer: syz [ 210.795586][ T9] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 210.796787][ T5897] usb 6-1: SerialNumber: syz [ 210.813518][ T5897] usb 6-1: config 0 descriptor?? [ 210.814901][ T9367] /dev/rnullb0: Can't open blockdev [ 210.906567][ T10] usb 40-1: device descriptor read/8, error -110 [ 210.969167][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.982379][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 210.994636][ T9] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 211.005304][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.025605][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 211.041978][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.051655][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.109498][ T9377] FAULT_INJECTION: forcing a failure. [ 211.109498][ T9377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.122919][ T9377] CPU: 0 UID: 0 PID: 9377 Comm: syz.3.1141 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 211.122946][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.122958][ T9377] Call Trace: [ 211.122966][ T9377] [ 211.122971][ T9377] dump_stack_lvl+0x189/0x250 [ 211.123002][ T9377] ? __pfx____ratelimit+0x10/0x10 [ 211.123020][ T9377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.123054][ T9377] ? __pfx__printk+0x10/0x10 [ 211.123079][ T9377] ? __might_fault+0xb0/0x130 [ 211.123102][ T9377] ? rcu_is_watching+0x15/0xb0 [ 211.123128][ T9377] should_fail_ex+0x414/0x560 [ 211.123151][ T9377] _copy_from_iter+0x1de/0x1790 [ 211.123169][ T9377] ? rcu_is_watching+0x15/0xb0 [ 211.123192][ T9377] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 211.123215][ T9377] ? __pfx__copy_from_iter+0x10/0x10 [ 211.123236][ T9377] ? __build_skb_around+0x262/0x3f0 [ 211.123263][ T9377] ? netlink_sendmsg+0x642/0xb30 [ 211.123284][ T9377] ? skb_put+0x11b/0x210 [ 211.123303][ T9377] netlink_sendmsg+0x6b2/0xb30 [ 211.123324][ T9377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.123351][ T9377] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.123380][ T9377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.123406][ T9377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.123430][ T9377] __sock_sendmsg+0x219/0x270 [ 211.123445][ T9377] ____sys_sendmsg+0x505/0x830 [ 211.123467][ T9377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.123496][ T9377] ? import_iovec+0x74/0xa0 [ 211.123523][ T9377] ___sys_sendmsg+0x21f/0x2a0 [ 211.123551][ T9377] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.123589][ T9377] ? __fget_files+0x2a/0x420 [ 211.123607][ T9377] ? __fget_files+0x3a0/0x420 [ 211.123630][ T9377] __x64_sys_sendmsg+0x19b/0x260 [ 211.123662][ T9377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.123694][ T9377] ? __pfx_ksys_write+0x10/0x10 [ 211.123719][ T9377] ? rcu_is_watching+0x15/0xb0 [ 211.123739][ T9377] do_syscall_64+0xfa/0x3b0 [ 211.123759][ T9377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.123772][ T9377] ? clear_bhb_loop+0x60/0xb0 [ 211.123792][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.123812][ T9377] RIP: 0033:0x7fead718ebe9 [ 211.123828][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.123844][ T9377] RSP: 002b:00007fead80c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.123864][ T9377] RAX: ffffffffffffffda RBX: 00007fead73b5fa0 RCX: 00007fead718ebe9 [ 211.123879][ T9377] RDX: 00000000140cc014 RSI: 0000200000000540 RDI: 0000000000000011 [ 211.123888][ T9377] RBP: 00007fead80c1090 R08: 0000000000000000 R09: 0000000000000000 [ 211.123896][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.123904][ T9377] R13: 00007fead73b6038 R14: 00007fead73b5fa0 R15: 00007ffd226fdc78 [ 211.123920][ T9377] [ 211.413483][ T10] usb usb40-port1: attempt power cycle [ 211.465451][ T5870] Bluetooth: hci5: command tx timeout [ 211.608096][ T5897] appletouch 6-1:0.85: Geyser mode initialized. [ 211.626125][ T5897] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input17 [ 211.751907][ T9] usb 3-1: 0:2 : does not exist [ 211.768321][ T9] usb 3-1: USB disconnect, device number 43 [ 211.934244][ T5868] usb 6-1: USB disconnect, device number 2 [ 211.954851][ T5868] appletouch 6-1:0.85: input: appletouch disconnected [ 211.988676][ T10] usb usb40-port1: unable to enumerate USB device [ 212.361817][ T9386] netlink: 'syz.3.1144': attribute type 27 has an invalid length. [ 212.373974][ T9388] syzkaller1: entered promiscuous mode [ 212.379888][ T9388] syzkaller1: entered allmulticast mode [ 212.628171][ T9392] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 212.660882][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'. [ 212.688808][ T9394] /dev/rnullb0: Can't open blockdev [ 212.745300][ T9397] /dev/rnullb0: Can't open blockdev [ 212.883624][ T9407] /dev/rnullb0: Can't open blockdev [ 212.939373][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 212.952098][ T9409] /dev/rnullb0: Can't open blockdev [ 212.963087][ T9410] /dev/rnullb0: Can't open blockdev [ 213.076090][ T9413] /dev/sg0: Can't lookup blockdev [ 213.123339][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.150938][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.175499][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.215510][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.305740][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.346758][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.378239][ T10] usb 3-1: config 0 descriptor?? [ 213.557084][ T5870] Bluetooth: hci5: command tx timeout [ 213.749718][ T9419] syz.3.1156 (9419): drop_caches: 2 [ 213.755149][ T9418] syz.3.1156 (9418): drop_caches: 2 [ 214.495912][ T9457] /dev/rnullb0: Can't open blockdev [ 214.527096][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 214.534238][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 214.585795][ T10] usb 3-1: USB disconnect, device number 44 [ 214.734220][ T9467] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1173'. [ 214.760311][ T9469] /dev/rnullb0: Can't open blockdev [ 214.944889][ T9478] syz.3.1176: attempt to access beyond end of device [ 214.944889][ T9478] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 215.180311][ T5870] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 215.485413][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 215.625416][ T5870] Bluetooth: hci5: command tx timeout [ 215.635501][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 215.644677][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 215.659654][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 215.671065][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.681430][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.701715][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.712323][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.924656][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 215.932571][ T10] usbtmc 3-1:16.0: can't read capabilities [ 215.954832][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1183'. [ 216.014207][ T9507] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20000 [ 216.058720][ T9507] pim6reg1: entered allmulticast mode [ 216.142208][ T9512] /dev/rnullb0: Can't open blockdev [ 216.144038][ T5958] usb 3-1: USB disconnect, device number 45 [ 216.320992][ T9524] ptrace attach of ""[9525] was attempted by "./syz-executor exec"[9524] [ 216.472796][ T9533] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 216.694423][ T9545] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.975491][ T5897] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 217.023126][ T9554] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 217.051543][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.066276][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.155463][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 217.161974][ T5897] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 217.170336][ T5897] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 217.180682][ T5897] usb 6-1: config 0 has no interface number 0 [ 217.186821][ T5897] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 217.198524][ T5897] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 217.210446][ T5897] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 217.221500][ T5897] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 217.232882][ T5897] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 217.243065][ T5897] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 217.257751][ T5897] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 217.266827][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.275426][ T5958] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 217.283764][ T5897] usb 6-1: config 0 descriptor?? [ 217.289398][ T9545] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 217.297014][ T9545] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 217.307783][ T5897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.437145][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.447095][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.459959][ T5958] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 217.469167][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.478976][ T5958] usb 3-1: config 0 descriptor?? [ 217.513011][ T9542] /dev/rnullb0: Can't open blockdev [ 217.611639][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.621142][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.945583][ T5958] hid-picolcd 0003:04D8:C002.0017: No report with id 0x11 found [ 218.386841][ T9568] FAULT_INJECTION: forcing a failure. [ 218.386841][ T9568] name failslab, interval 1, probability 0, space 0, times 0 [ 218.399909][ T9568] CPU: 0 UID: 0 PID: 9568 Comm: syz.3.1202 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 218.399940][ T9568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.399954][ T9568] Call Trace: [ 218.399961][ T9568] [ 218.399969][ T9568] dump_stack_lvl+0x189/0x250 [ 218.400007][ T9568] ? __pfx____ratelimit+0x10/0x10 [ 218.400032][ T9568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.400063][ T9568] ? __pfx__printk+0x10/0x10 [ 218.400093][ T9568] ? fs_reclaim_acquire+0x7d/0x100 [ 218.400118][ T9568] ? __pfx___might_resched+0x10/0x10 [ 218.400144][ T9568] ? lock_acquire+0x5f/0x360 [ 218.400170][ T9568] should_fail_ex+0x414/0x560 [ 218.400203][ T9568] should_failslab+0xa8/0x100 [ 218.400227][ T9568] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 218.400250][ T9568] ? rcu_is_watching+0x15/0xb0 [ 218.400276][ T9568] ? ethnl_default_set_doit+0x3d6/0x890 [ 218.400309][ T9568] kmemdup_noprof+0x2b/0x70 [ 218.400347][ T9568] ethnl_default_set_doit+0x3d6/0x890 [ 218.400381][ T9568] genl_family_rcv_msg_doit+0x215/0x300 [ 218.400405][ T9568] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.400432][ T9568] ? bpf_lsm_capable+0x9/0x20 [ 218.400453][ T9568] ? security_capable+0x7e/0x2e0 [ 218.400485][ T9568] genl_rcv_msg+0x60e/0x790 [ 218.400506][ T9568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.400525][ T9568] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 218.400555][ T9568] ? __asan_memcpy+0x40/0x70 [ 218.400583][ T9568] ? __pfx_ref_tracker_free+0x10/0x10 [ 218.400603][ T9568] ? __skb_clone+0x63/0x7a0 [ 218.400636][ T9568] netlink_rcv_skb+0x205/0x470 [ 218.400662][ T9568] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.400682][ T9568] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.400712][ T9568] ? lock_release+0x4b/0x3e0 [ 218.400737][ T9568] ? down_read+0x1ad/0x2e0 [ 218.400765][ T9568] genl_rcv+0x28/0x40 [ 218.400782][ T9568] netlink_unicast+0x82f/0x9e0 [ 218.400809][ T9568] ? __pfx_netlink_unicast+0x10/0x10 [ 218.400832][ T9568] ? netlink_sendmsg+0x642/0xb30 [ 218.400861][ T9568] ? skb_put+0x11b/0x210 [ 218.400890][ T9568] netlink_sendmsg+0x805/0xb30 [ 218.400920][ T9568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.400948][ T9568] ? aa_sock_msg_perm+0xf1/0x1d0 [ 218.400979][ T9568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.401007][ T9568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.401034][ T9568] __sock_sendmsg+0x219/0x270 [ 218.401057][ T9568] ____sys_sendmsg+0x505/0x830 [ 218.401090][ T9568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.401124][ T9568] ? import_iovec+0x74/0xa0 [ 218.401152][ T9568] ___sys_sendmsg+0x21f/0x2a0 [ 218.401183][ T9568] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.401230][ T9568] ? __fget_files+0x2a/0x420 [ 218.401257][ T9568] ? __fget_files+0x3a0/0x420 [ 218.401289][ T9568] __x64_sys_sendmsg+0x19b/0x260 [ 218.401320][ T9568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.401362][ T9568] ? __pfx_ksys_write+0x10/0x10 [ 218.401385][ T9568] ? rcu_is_watching+0x15/0xb0 [ 218.401414][ T9568] ? rcu_is_watching+0x15/0xb0 [ 218.401442][ T9568] do_syscall_64+0xfa/0x3b0 [ 218.401469][ T9568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.401489][ T9568] ? clear_bhb_loop+0x60/0xb0 [ 218.401512][ T9568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.401532][ T9568] RIP: 0033:0x7fead718ebe9 [ 218.401550][ T9568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.401568][ T9568] RSP: 002b:00007fead80c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.401590][ T9568] RAX: ffffffffffffffda RBX: 00007fead73b5fa0 RCX: 00007fead718ebe9 [ 218.401605][ T9568] RDX: 00000000140cc014 RSI: 0000200000000540 RDI: 0000000000000011 [ 218.401617][ T9568] RBP: 00007fead80c1090 R08: 0000000000000000 R09: 0000000000000000 [ 218.401630][ T9568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.401642][ T9568] R13: 00007fead73b6038 R14: 00007fead73b5fa0 R15: 00007ffd226fdc78 [ 218.401664][ T9568] [ 218.792783][ T94] block nbd0: Possible stuck request ffff888025677000: control (read@0,4096B). Runtime 120 seconds [ 219.681596][ T5897] usb 6-1: USB disconnect, device number 3 [ 220.079941][ T6154] usb 3-1: USB disconnect, device number 46 [ 220.134611][ T9605] FAULT_INJECTION: forcing a failure. [ 220.134611][ T9605] name failslab, interval 1, probability 0, space 0, times 0 [ 220.159115][ T9605] CPU: 1 UID: 0 PID: 9605 Comm: syz.2.1211 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 220.159144][ T9605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.159156][ T9605] Call Trace: [ 220.159173][ T9605] [ 220.159181][ T9605] dump_stack_lvl+0x189/0x250 [ 220.159216][ T9605] ? __pfx____ratelimit+0x10/0x10 [ 220.159240][ T9605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.159268][ T9605] ? __pfx__printk+0x10/0x10 [ 220.159293][ T9605] ? genl_rcv+0x28/0x40 [ 220.159311][ T9605] ? ____sys_sendmsg+0x505/0x830 [ 220.159337][ T9605] ? __x64_sys_sendmsg+0x19b/0x260 [ 220.159364][ T9605] ? do_syscall_64+0xfa/0x3b0 [ 220.159387][ T9605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.159410][ T9605] should_fail_ex+0x414/0x560 [ 220.159442][ T9605] should_failslab+0xa8/0x100 [ 220.159466][ T9605] kmem_cache_alloc_noprof+0x73/0x3c0 [ 220.159486][ T9605] ? skb_clone+0x212/0x3a0 [ 220.159505][ T9605] skb_clone+0x212/0x3a0 [ 220.159523][ T9605] __netlink_deliver_tap+0x404/0x850 [ 220.159556][ T9605] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.159599][ T9605] netlink_deliver_tap+0x19c/0x1b0 [ 220.159626][ T9605] netlink_sendskb+0x68/0x140 [ 220.159650][ T9605] netlink_unicast+0x397/0x9e0 [ 220.159671][ T9605] ? __asan_memcpy+0x40/0x70 [ 220.159704][ T9605] ? __pfx_netlink_unicast+0x10/0x10 [ 220.159732][ T9605] netlink_rcv_skb+0x28c/0x470 [ 220.159757][ T9605] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.159776][ T9605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.159807][ T9605] ? lock_release+0x4b/0x3e0 [ 220.159832][ T9605] ? down_read+0x1ad/0x2e0 [ 220.159861][ T9605] genl_rcv+0x28/0x40 [ 220.159877][ T9605] netlink_unicast+0x82f/0x9e0 [ 220.159904][ T9605] ? __pfx_netlink_unicast+0x10/0x10 [ 220.159928][ T9605] ? netlink_sendmsg+0x642/0xb30 [ 220.159953][ T9605] ? skb_put+0x11b/0x210 [ 220.159981][ T9605] netlink_sendmsg+0x805/0xb30 [ 220.160013][ T9605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.160041][ T9605] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.160072][ T9605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.160103][ T9605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.160130][ T9605] __sock_sendmsg+0x219/0x270 [ 220.160153][ T9605] ____sys_sendmsg+0x505/0x830 [ 220.160194][ T9605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.160229][ T9605] ? import_iovec+0x74/0xa0 [ 220.160257][ T9605] ___sys_sendmsg+0x21f/0x2a0 [ 220.160288][ T9605] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.160335][ T9605] ? __fget_files+0x2a/0x420 [ 220.160363][ T9605] ? __fget_files+0x3a0/0x420 [ 220.160395][ T9605] __x64_sys_sendmsg+0x19b/0x260 [ 220.160426][ T9605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.160461][ T9605] ? __pfx_ksys_write+0x10/0x10 [ 220.160484][ T9605] ? rcu_is_watching+0x15/0xb0 [ 220.160514][ T9605] ? rcu_is_watching+0x15/0xb0 [ 220.160541][ T9605] do_syscall_64+0xfa/0x3b0 [ 220.160566][ T9605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.160585][ T9605] ? clear_bhb_loop+0x60/0xb0 [ 220.160606][ T9605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.160624][ T9605] RIP: 0033:0x7f9932f8ebe9 [ 220.160641][ T9605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.160658][ T9605] RSP: 002b:00007f9933e46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.160678][ T9605] RAX: ffffffffffffffda RBX: 00007f99331b5fa0 RCX: 00007f9932f8ebe9 [ 220.160690][ T9605] RDX: 00000000140cc014 RSI: 0000200000000540 RDI: 0000000000000011 [ 220.160701][ T9605] RBP: 00007f9933e46090 R08: 0000000000000000 R09: 0000000000000000 [ 220.160711][ T9605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.160721][ T9605] R13: 00007f99331b6038 R14: 00007f99331b5fa0 R15: 00007ffede3a67d8 [ 220.160743][ T9605] [ 220.778424][ T9616] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1215'. [ 220.782611][ T5870] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 220.798228][ T5870] Bluetooth: hci5: Injecting HCI hardware error event [ 220.805115][ T5870] Bluetooth: hci5: hardware error 0x00 [ 221.027851][ T9620] /dev/rnullb0: Can't open blockdev [ 221.113063][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1218'. [ 221.115429][ T5958] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.124303][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1218'. [ 221.156098][ T6154] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 221.275405][ T5958] usb 6-1: Using ep0 maxpacket: 16 [ 221.282100][ T5958] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.290478][ T5958] usb 6-1: config 0 has no interface number 0 [ 221.311511][ T5958] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 221.320665][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.329202][ T5958] usb 6-1: Product: syz [ 221.333469][ T5958] usb 6-1: Manufacturer: syz [ 221.338450][ T5958] usb 6-1: SerialNumber: syz [ 221.344381][ T6154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.356140][ T5958] usb 6-1: config 0 descriptor?? [ 221.357994][ T6154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.364260][ T5958] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 221.371473][ T6154] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 221.392812][ T6154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.410669][ T6154] usb 3-1: config 0 descriptor?? [ 221.467637][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.477811][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.489556][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.498317][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.823695][ T6154] hid-u2fzero 0003:10C4:8ACF.0018: unknown main item tag 0x3 [ 221.831204][ T6154] hid-u2fzero 0003:10C4:8ACF.0018: item fetching failed at offset 4/5 [ 221.840234][ T6154] hid-u2fzero 0003:10C4:8ACF.0018: probe with driver hid-u2fzero failed with error -22 [ 222.089424][ T9635] /dev/rnullb0: Can't open blockdev [ 222.129162][ T5868] usb 3-1: USB disconnect, device number 47 [ 222.500381][ T9651] /dev/rnullb0: Can't open blockdev [ 222.591239][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.601430][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.610581][ T5958] gspca_spca1528: reg_w err -71 [ 222.618426][ T5958] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 222.631802][ T5958] usb 6-1: USB disconnect, device number 4 [ 222.711063][ T9668] /dev/sg0: Can't lookup blockdev [ 222.828456][ T5870] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 222.967989][ T30] audit: type=1326 audit(1755554985.082:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.2.1238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9932f8ebe9 code=0x0 [ 223.070396][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.080517][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.088401][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.097807][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.105610][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.374673][ T9690] chnl_net:caif_netlink_parms(): no params data found [ 223.454670][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.462038][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.469702][ T9690] bridge_slave_0: entered allmulticast mode [ 223.477603][ T9690] bridge_slave_0: entered promiscuous mode [ 223.486249][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.493433][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.501038][ T9690] bridge_slave_1: entered allmulticast mode [ 223.508222][ T9690] bridge_slave_1: entered promiscuous mode [ 223.543617][ T9690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.570495][ T9690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.617706][ T9690] team0: Port device team_slave_0 added [ 223.626145][ T9690] team0: Port device team_slave_1 added [ 223.664728][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.677367][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.704854][ T9690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.723462][ T9690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.730685][ T9690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.756991][ T9690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.802786][ T9690] hsr_slave_0: entered promiscuous mode [ 223.810511][ T9690] hsr_slave_1: entered promiscuous mode [ 223.819230][ T9690] debugfs: 'hsr0' already exists in 'hsr' [ 223.825033][ T9690] Cannot create hsr debugfs directory [ 223.965557][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 224.005190][ T9690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 224.016889][ T9690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 224.029988][ T9690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 224.048359][ T9690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 224.078009][ T9731] /dev/rnullb0: Can't open blockdev [ 224.097317][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.104451][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.111902][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.119049][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.156821][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.173558][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.188805][ T10] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 224.198476][ T10] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 224.218703][ T10] usb 6-1: Manufacturer: syz [ 224.236541][ T10] usb 6-1: config 0 descriptor?? [ 224.240935][ T9690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.259711][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.270776][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.293030][ T9690] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.308200][ T200] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.315395][ T200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.331522][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.338872][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.381434][ T9737] /dev/rnullb0: Can't open blockdev [ 224.416694][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.428645][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.554011][ T9690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.657267][ T10] bigben 0003:146B:0902.0019: unexpected rdesc, please submit for review [ 224.671712][ T10] bigben 0003:146B:0902.0019: unbalanced collection at end of report description [ 224.683104][ T10] bigben 0003:146B:0902.0019: parse failed [ 224.691664][ T10] bigben 0003:146B:0902.0019: probe with driver bigben failed with error -22 [ 224.750924][ T9690] veth0_vlan: entered promiscuous mode [ 224.761844][ T9690] veth1_vlan: entered promiscuous mode [ 224.783402][ T9690] veth0_macvtap: entered promiscuous mode [ 224.793095][ T9690] veth1_macvtap: entered promiscuous mode [ 224.808266][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.820139][ T9690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.832110][ T200] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.841643][ T200] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.853243][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.862792][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.931622][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.951351][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.979032][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.988339][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.147438][ T5870] Bluetooth: hci6: command tx timeout [ 225.228740][ T2153] usb 6-1: USB disconnect, device number 5 [ 225.392038][ T9777] /dev/rnullb0: Can't open blockdev [ 225.520922][ T9780] /dev/rnullb0: Can't open blockdev [ 225.985386][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 226.041163][ T9790] /dev/rnullb0: Can't open blockdev [ 226.126068][ T10] usb 7-1: device descriptor read/64, error -71 [ 226.154644][ T9794] loop6: detected capacity change from 0 to 63 [ 226.194247][ T5878] buffer_io_error: 311 callbacks suppressed [ 226.194265][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.210403][ T9794] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.221061][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.229200][ T9794] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.239349][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.247703][ T9794] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.257725][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.267302][ T9794] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.276701][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.285033][ T9800] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.375550][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 226.515419][ T10] usb 7-1: device descriptor read/64, error -71 [ 226.626552][ T10] usb usb7-port1: attempt power cycle [ 226.760479][ T9806] /dev/rnullb0: Can't open blockdev [ 226.830146][ T9809] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 226.943410][ T9815] /dev/rnullb0: Can't open blockdev [ 226.975400][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 227.026498][ T10] usb 7-1: device descriptor read/8, error -71 [ 227.137159][ T5897] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 227.229195][ T5870] Bluetooth: hci6: command tx timeout [ 227.265437][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 227.296083][ T10] usb 7-1: device descriptor read/8, error -71 [ 227.305607][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 227.319332][ T5897] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 227.342544][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.373430][ T5897] usb 3-1: Product: syz [ 227.387702][ T5897] usb 3-1: Manufacturer: syz [ 227.404809][ T5897] usb 3-1: SerialNumber: syz [ 227.419521][ T10] usb usb7-port1: unable to enumerate USB device [ 227.429982][ T5897] usb 3-1: config 0 descriptor?? [ 227.972519][ T9825] FAULT_INJECTION: forcing a failure. [ 227.972519][ T9825] name failslab, interval 1, probability 0, space 0, times 0 [ 227.985393][ T9825] CPU: 1 UID: 0 PID: 9825 Comm: syz.5.1278 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 227.985421][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.985434][ T9825] Call Trace: [ 227.985441][ T9825] [ 227.985449][ T9825] dump_stack_lvl+0x189/0x250 [ 227.985483][ T9825] ? __pfx____ratelimit+0x10/0x10 [ 227.985511][ T9825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.985540][ T9825] ? __pfx__printk+0x10/0x10 [ 227.985566][ T9825] ? genl_rcv+0x28/0x40 [ 227.985583][ T9825] ? ____sys_sendmsg+0x505/0x830 [ 227.985610][ T9825] ? __x64_sys_sendmsg+0x19b/0x260 [ 227.985638][ T9825] ? do_syscall_64+0xfa/0x3b0 [ 227.985662][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.985685][ T9825] should_fail_ex+0x414/0x560 [ 227.985717][ T9825] should_failslab+0xa8/0x100 [ 227.985740][ T9825] kmem_cache_alloc_noprof+0x73/0x3c0 [ 227.985761][ T9825] ? skb_clone+0x212/0x3a0 [ 227.985779][ T9825] skb_clone+0x212/0x3a0 [ 227.985797][ T9825] __netlink_deliver_tap+0x404/0x850 [ 227.985828][ T9825] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.985853][ T9825] netlink_deliver_tap+0x19c/0x1b0 [ 227.985878][ T9825] netlink_sendskb+0x68/0x140 [ 227.985901][ T9825] netlink_unicast+0x397/0x9e0 [ 227.985921][ T9825] ? __asan_memcpy+0x40/0x70 [ 227.985953][ T9825] ? __pfx_netlink_unicast+0x10/0x10 [ 227.985978][ T9825] netlink_rcv_skb+0x28c/0x470 [ 227.986009][ T9825] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.986027][ T9825] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.986057][ T9825] ? lock_release+0x4b/0x3e0 [ 227.986081][ T9825] ? down_read+0x1ad/0x2e0 [ 227.986108][ T9825] genl_rcv+0x28/0x40 [ 227.986124][ T9825] netlink_unicast+0x82f/0x9e0 [ 227.986149][ T9825] ? __pfx_netlink_unicast+0x10/0x10 [ 227.986171][ T9825] ? netlink_sendmsg+0x642/0xb30 [ 227.986195][ T9825] ? skb_put+0x11b/0x210 [ 227.986222][ T9825] netlink_sendmsg+0x805/0xb30 [ 227.986251][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.986278][ T9825] ? aa_sock_msg_perm+0xf1/0x1d0 [ 227.986307][ T9825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.986335][ T9825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.986361][ T9825] __sock_sendmsg+0x219/0x270 [ 227.986382][ T9825] ____sys_sendmsg+0x505/0x830 [ 227.986413][ T9825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.986445][ T9825] ? import_iovec+0x74/0xa0 [ 227.986472][ T9825] ___sys_sendmsg+0x21f/0x2a0 [ 227.986501][ T9825] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.986546][ T9825] ? __fget_files+0x2a/0x420 [ 227.986572][ T9825] ? __fget_files+0x3a0/0x420 [ 227.986603][ T9825] __x64_sys_sendmsg+0x19b/0x260 [ 227.986633][ T9825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.986666][ T9825] ? __pfx_ksys_write+0x10/0x10 [ 227.986692][ T9825] ? rcu_is_watching+0x15/0xb0 [ 227.986719][ T9825] do_syscall_64+0xfa/0x3b0 [ 227.986744][ T9825] ? rcu_is_watching+0x15/0xb0 [ 227.986768][ T9825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.986787][ T9825] ? clear_bhb_loop+0x60/0xb0 [ 227.986808][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.986827][ T9825] RIP: 0033:0x7f938098ebe9 [ 227.986843][ T9825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.986860][ T9825] RSP: 002b:00007f9381719038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.986881][ T9825] RAX: ffffffffffffffda RBX: 00007f9380bb5fa0 RCX: 00007f938098ebe9 [ 227.986896][ T9825] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 227.986908][ T9825] RBP: 00007f9381719090 R08: 0000000000000000 R09: 0000000000000000 [ 227.986920][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.986931][ T9825] R13: 00007f9380bb6038 R14: 00007f9380bb5fa0 R15: 00007fff463125f8 [ 227.986951][ T9825] [ 228.448341][ T30] audit: type=1804 audit(1755554990.522:36): pid=9827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1279" name="/newroot/42/bus/bus" dev="overlay" ino=243 res=1 errno=0 [ 228.671815][ T9813] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.755034][ T5897] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 228.763522][ T5897] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 228.812787][ T9770] Set syz1 is full, maxelem 65536 reached [ 228.826889][ T6154] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 228.834708][ T5897] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -32 [ 228.853755][ T6154] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.866461][ T5897] usb 3-1: USB disconnect, device number 48 [ 228.939857][ T9840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.963394][ T9840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.991806][ T9840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.002652][ T9840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.055733][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 229.076067][ T9833] /dev/rnullb0: Can't open blockdev [ 229.175467][ T9845] /dev/rnullb0: Can't open blockdev [ 229.207773][ T9847] FAULT_INJECTION: forcing a failure. [ 229.207773][ T9847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.222073][ T9847] CPU: 0 UID: 0 PID: 9847 Comm: syz.5.1287 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 229.222094][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.222103][ T9847] Call Trace: [ 229.222108][ T9847] [ 229.222114][ T9847] dump_stack_lvl+0x189/0x250 [ 229.222140][ T9847] ? __pfx____ratelimit+0x10/0x10 [ 229.222157][ T9847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.222183][ T9847] ? __pfx__printk+0x10/0x10 [ 229.222206][ T9847] ? rcu_is_watching+0x15/0xb0 [ 229.222226][ T9847] should_fail_ex+0x414/0x560 [ 229.222250][ T9847] _copy_to_user+0x31/0xb0 [ 229.222270][ T9847] simple_read_from_buffer+0xe1/0x170 [ 229.222290][ T9847] proc_fail_nth_read+0x1b3/0x220 [ 229.222305][ T9847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.222320][ T9847] ? rw_verify_area+0x2a6/0x4d0 [ 229.222336][ T9847] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.222350][ T9847] vfs_read+0x1fd/0xa30 [ 229.222365][ T9847] ? fdget_pos+0x247/0x320 [ 229.222386][ T9847] ? __pfx___mutex_lock+0x10/0x10 [ 229.222405][ T9847] ? __pfx_vfs_read+0x10/0x10 [ 229.222423][ T9847] ? __fget_files+0x3a0/0x420 [ 229.222442][ T9847] ? __fget_files+0x2a/0x420 [ 229.222464][ T9847] ksys_read+0x145/0x250 [ 229.222480][ T9847] ? __pfx_ksys_read+0x10/0x10 [ 229.222496][ T9847] ? rcu_is_watching+0x15/0xb0 [ 229.222516][ T9847] ? rcu_is_watching+0x15/0xb0 [ 229.222535][ T9847] do_syscall_64+0xfa/0x3b0 [ 229.222553][ T9847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.222567][ T9847] ? clear_bhb_loop+0x60/0xb0 [ 229.222582][ T9847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.222596][ T9847] RIP: 0033:0x7f938098d5fc [ 229.222609][ T9847] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 229.222621][ T9847] RSP: 002b:00007f9381719030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.222636][ T9847] RAX: ffffffffffffffda RBX: 00007f9380bb5fa0 RCX: 00007f938098d5fc [ 229.222647][ T9847] RDX: 000000000000000f RSI: 00007f93817190a0 RDI: 0000000000000004 [ 229.222656][ T9847] RBP: 00007f9381719090 R08: 0000000000000000 R09: 0000000000000000 [ 229.222665][ T9847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.222673][ T9847] R13: 00007f9380bb6038 R14: 00007f9380bb5fa0 R15: 00007fff463125f8 [ 229.222689][ T9847] [ 229.224033][ T10] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.335442][ T5870] Bluetooth: hci6: command tx timeout [ 229.338231][ T10] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 229.400957][ T9853] /dev/rnullb0: Can't open blockdev [ 229.475186][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 229.502823][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 229.512362][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.524799][ T10] usb 7-1: config 0 descriptor?? [ 229.616514][ T9862] raw_sendmsg: syz.3.1293 forgot to set AF_INET. Fix it! [ 229.709806][ T9857] /dev/rnullb0: Can't open blockdev [ 229.906239][ T9870] /dev/rnullb0: Can't open blockdev [ 231.950913][ T5870] Bluetooth: hci6: command tx timeout [ 233.055575][ T5238] udevd[5238]: worker [6228] /devices/virtual/block/nbd0 is taking a long time [ 233.321946][ T10] usb 7-1: string descriptor 0 read error: -71 [ 233.358445][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input18 [ 233.436282][ T5223] bcm5974 7-1:0.0: could not read from device [ 233.480404][ T9879] xt_socket: unknown flags 0x50 [ 233.491460][ T10] usb 7-1: USB disconnect, device number 6 [ 233.522041][ T5876] bcm5974 7-1:0.0: could not read from device [ 233.570415][ T5223] bcm5974 7-1:0.0: could not read from device [ 233.597526][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.619341][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.619581][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.644463][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.655740][ T5876] udevd[5876]: Error opening device "/dev/input/event4": No such device [ 233.664223][ T5876] udevd[5876]: Unable to EVIOCGABS device "/dev/input/event4" [ 233.711134][ T5876] udevd[5876]: Unable to EVIOCGABS device "/dev/input/event4" [ 233.732486][ T9883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.735137][ T5876] udevd[5876]: Unable to EVIOCGABS device "/dev/input/event4" [ 233.750540][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.778946][ T9883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.803803][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.889807][ T5876] udevd[5876]: Unable to EVIOCGABS device "/dev/input/event4" [ 234.382466][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 234.413270][ T9908] /dev/rnullb0: Can't open blockdev [ 234.437459][ T9910] sctp: [Deprecated]: syz.5.1309 (pid 9910) Use of int in max_burst socket option deprecated. [ 234.437459][ T9910] Use struct sctp_assoc_value instead [ 234.602122][ T9921] netlink: 'syz.5.1313': attribute type 21 has an invalid length. [ 234.610382][ T9921] netlink: 2452 bytes leftover after parsing attributes in process `syz.5.1313'. [ 234.635525][ T5897] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 234.669915][ T9925] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 234.774108][ T9927] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1315'. [ 234.785471][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 234.792249][ T5897] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 234.802979][ T5897] usb 3-1: config 0 has no interface number 0 [ 234.818245][ T5897] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 234.827605][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.835824][ T5897] usb 3-1: Product: syz [ 234.840138][ T5897] usb 3-1: Manufacturer: syz [ 234.844763][ T5897] usb 3-1: SerialNumber: syz [ 234.851550][ T5897] usb 3-1: config 0 descriptor?? [ 234.858800][ T5897] smsc95xx v2.0.0 [ 235.218610][ T9934] /dev/rnullb0: Can't open blockdev [ 235.259845][ T5897] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 235.268330][ T30] audit: type=1804 audit(1755554997.372:37): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1319" name="/newroot/62/bus/bus" dev="overlay" ino=356 res=1 errno=0 [ 235.270975][ T5897] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 235.403759][ T9944] fuse: Bad value for 'user_id' [ 235.409846][ T9944] fuse: Bad value for 'user_id' [ 235.745501][ T6154] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 235.770194][ T5897] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 235.781287][ T5897] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 235.792883][ T5897] usb 3-1: USB disconnect, device number 49 [ 235.895408][ T6154] usb 6-1: Invalid ep0 maxpacket: 64 [ 236.026709][ T6154] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 236.195546][ T6154] usb 6-1: Invalid ep0 maxpacket: 64 [ 236.201173][ T6154] usb usb6-port1: attempt power cycle [ 236.545393][ T6154] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 236.592805][ T6154] usb 6-1: Invalid ep0 maxpacket: 64 [ 236.769525][ T6154] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 236.825169][ T6154] usb 6-1: Invalid ep0 maxpacket: 64 [ 236.833280][ T6154] usb usb6-port1: unable to enumerate USB device [ 236.945408][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 237.133314][ T5870] Bluetooth: Wrong link type (-57) [ 237.134997][ T9978] sctp: [Deprecated]: syz.3.1331 (pid 9978) Use of int in max_burst socket option deprecated. [ 237.134997][ T9978] Use struct sctp_assoc_value instead [ 237.169478][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 237.185020][ T10] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 237.194215][ T10] usb 3-1: Product: syz [ 237.198561][ T10] usb 3-1: Manufacturer: syz [ 237.203194][ T10] usb 3-1: SerialNumber: syz [ 237.210048][ T10] usb 3-1: config 0 descriptor?? [ 237.230164][ T10] ch341 3-1:0.0: ch341-uart converter detected [ 237.412540][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.443300][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.458373][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.470416][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.500369][ T9991] loop3: detected capacity change from 0 to 1 [ 237.517934][ T5876] Dev loop3: unable to read RDB block 1 [ 237.523634][ T5876] loop3: unable to read partition table [ 237.533008][ T5876] loop3: partition table beyond EOD, truncated [ 238.240840][ T10] ch341-uart ttyUSB0: failed to read break control: -71 [ 238.260810][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 238.286444][ T10] usb 3-1: USB disconnect, device number 50 [ 238.315152][ T10] ch341 3-1:0.0: device disconnected [ 238.755418][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 238.786905][T10025] loop6: detected capacity change from 0 to 63 [ 238.797493][ T5878] buffer_io_error: 739 callbacks suppressed [ 238.797511][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.819191][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.828049][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.837710][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.847318][ T5878] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.911714][T10031] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.921302][T10031] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.930326][T10031] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.939108][T10031] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.946919][ T10] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 238.946951][ T10] usb 7-1: config 0 has no interface number 0 [ 238.946983][ T10] usb 7-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 255 [ 238.947017][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 238.947040][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.955418][T10031] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.966787][ T10] usb 7-1: config 0 descriptor?? [ 239.002993][T10012] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 239.031642][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.145469][ T5897] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 239.212103][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.222136][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.234744][T10012] /dev/rnullb0: Can't open blockdev [ 239.251708][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.260912][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.261145][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.283109][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.305391][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 239.313496][ T5897] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 239.328046][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.341547][ T5897] usb 3-1: config 0 descriptor?? [ 239.344587][T10040] openvswitch: netlink: IP tunnel dst address not specified [ 239.351810][ T6154] usb 7-1: USB disconnect, device number 7 [ 239.374745][ T5897] as10x_usb: device has been detected [ 239.389343][ T5897] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 239.436864][ T5897] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 239.506167][ T5897] as10x_usb: error during firmware upload part1 [ 239.520723][ T5897] Registered device nBox DVB-T Dongle [ 239.568938][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 239.584260][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.593595][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.607644][T10030] /dev/rnullb0: Can't open blockdev [ 239.614594][ T6154] usb 3-1: USB disconnect, device number 51 [ 239.689304][ T6154] Unregistered device nBox DVB-T Dongle [ 239.692849][ T6154] as10x_usb: device has been disconnected [ 240.175411][ T6154] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 240.195396][ T5897] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 240.325600][ T6154] usb 6-1: Using ep0 maxpacket: 32 [ 240.340845][ T6154] usb 6-1: unable to get BOS descriptor or descriptor too short [ 240.367505][ T6154] usb 6-1: config 129 has an invalid interface number: 178 but max is 0 [ 240.376193][ T5897] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.408769][ T5897] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.419199][ T6154] usb 6-1: config 129 has no interface number 0 [ 240.436186][T10079] tmpfs: Bad value for 'mpol' [ 240.441928][ T6154] usb 6-1: config 129 interface 178 has no altsetting 0 [ 240.452753][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.471604][ T6154] usb 6-1: New USB device found, idVendor=0c45, idProduct=627c, bcdDevice=4c.44 [ 240.490729][ T6154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.512489][ T5897] usb 7-1: config 0 descriptor?? [ 240.532298][ T6154] usb 6-1: Product: syz [ 240.540555][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 240.556236][ T6154] usb 6-1: Manufacturer: syz [ 240.570481][ T6154] usb 6-1: SerialNumber: syz [ 240.901448][ T6154] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:627c [ 240.924144][ T6154] gspca_sn9c20x: Write register 1000 failed -71 [ 240.948361][ T6154] gspca_sn9c20x: Device initialization failed [ 240.968987][ T6154] gspca_sn9c20x 6-1:129.178: probe with driver gspca_sn9c20x failed with error -71 [ 241.013731][ T6154] usb 6-1: USB disconnect, device number 10 [ 241.152008][T10082] batadv_slave_1: entered promiscuous mode [ 241.608504][T10098] /dev/rnullb0: Can't open blockdev [ 241.654023][T10066] batadv_slave_1: left promiscuous mode [ 241.695741][T10098] nbd1: detected capacity change from 0 to 549764202496 [ 241.728376][ T5897] pwc: recv_control_msg error -71 req 02 val 2700 [ 241.731384][ T5870] block nbd1: Receive control failed (result -104) [ 241.745115][ T5897] pwc: recv_control_msg error -71 req 02 val 2c00 [ 241.754699][ T5897] pwc: recv_control_msg error -71 req 04 val 1000 [ 241.781918][ T5897] pwc: recv_control_msg error -71 req 04 val 1300 [ 241.794757][ T5897] pwc: recv_control_msg error -71 req 04 val 1400 [ 241.805806][ T5897] pwc: recv_control_msg error -71 req 02 val 2000 [ 241.856018][ T5897] pwc: recv_control_msg error -71 req 02 val 2100 [ 241.868592][ T5897] pwc: recv_control_msg error -71 req 04 val 1500 [ 241.883628][ T5897] pwc: recv_control_msg error -71 req 02 val 2500 [ 241.907948][ T5897] pwc: recv_control_msg error -71 req 02 val 2400 [ 241.914770][ T5897] pwc: recv_control_msg error -71 req 02 val 2600 [ 241.935709][ T5897] pwc: recv_control_msg error -71 req 02 val 2900 [ 241.942607][ T5897] pwc: recv_control_msg error -71 req 02 val 2800 [ 241.958468][ T5897] pwc: recv_control_msg error -71 req 04 val 1100 [ 241.972152][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 241.982308][ T5897] pwc: Registered as video103. [ 241.990187][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input19 [ 242.036061][ T5958] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 242.039458][ T5897] usb 7-1: USB disconnect, device number 8 [ 242.056202][T10105] /dev/rnullb0: Can't open blockdev [ 242.171298][T10109] netlink: 'syz.3.1369': attribute type 5 has an invalid length. [ 242.183212][T10108] netlink: 'syz.3.1369': attribute type 5 has an invalid length. [ 242.192565][T10109] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1369'. [ 242.207577][T10108] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1369'. [ 242.219057][ T5958] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 242.237674][ T5958] usb 6-1: config 0 has no interface number 0 [ 242.244516][T10111] /dev/rnullb0: Can't open blockdev [ 242.252054][ T5958] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.263875][ T5958] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.290490][ T5958] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 242.301140][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.322885][ T5958] usb 6-1: config 0 descriptor?? [ 242.741078][ T5958] uclogic 0003:28BD:0905.001B: Interface probing failed: -22 [ 242.785978][ T5958] uclogic 0003:28BD:0905.001B: interface is invalid, ignoring [ 243.354936][ T10] usb 6-1: USB disconnect, device number 11 [ 244.310069][T10181] /dev/rnullb0: Can't open blockdev [ 244.612093][ T5870] Bluetooth: Wrong link type (-57) [ 244.613459][T10190] sctp: [Deprecated]: syz.2.1393 (pid 10190) Use of int in max_burst socket option deprecated. [ 244.613459][T10190] Use struct sctp_assoc_value instead [ 244.835431][ T44] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 244.854296][T10198] tty tty31: ldisc open failed (-12), clearing slot 30 [ 244.991717][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.003940][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.015238][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.025126][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.038337][ T6154] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 245.047725][ T44] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.057583][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.067319][ T44] usb 7-1: config 0 descriptor?? [ 245.200785][ T6154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.212597][ T6154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.224300][ T6154] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice=ff.fc [ 245.233969][ T6154] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 245.243095][ T6154] usb 3-1: Product: syz [ 245.247472][ T6154] usb 3-1: Manufacturer: syz [ 245.253537][ T6154] usb 3-1: config 0 descriptor?? [ 245.298496][T10214] /dev/rnullb0: Can't open blockdev [ 245.468297][ T6154] holtek 0003:1241:5015.001C: unbalanced collection at end of report description [ 245.488774][ T44] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 245.501358][ T6154] holtek 0003:1241:5015.001C: parse failed [ 245.511592][ T6154] holtek 0003:1241:5015.001C: probe with driver holtek failed with error -22 [ 245.522768][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.526597][ T44] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 245.550619][T10219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.564842][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.578011][T10219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.593852][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.606759][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.664862][ T44] usb 3-1: USB disconnect, device number 52 [ 246.203097][ T5870] Bluetooth: Wrong link type (-57) [ 246.204524][T10227] sctp: [Deprecated]: syz.3.1403 (pid 10227) Use of int in max_burst socket option deprecated. [ 246.204524][T10227] Use struct sctp_assoc_value instead [ 246.423169][T10241] /dev/rnullb0: Can't open blockdev [ 246.495518][ T44] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 246.507774][T10248] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 246.539673][T10248] kvm: Disabled LAPIC found during irq injection [ 246.655953][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 246.668551][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.675220][ T44] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 246.688388][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.697178][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 246.711959][ T44] usb 3-1: config 0 descriptor?? [ 246.835771][ T10] usb 6-1: device descriptor read/64, error -71 [ 247.099739][ T10] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 247.122462][ T44] aquacomputer_d5next 0003:0C70:F003.001E: unknown main item tag 0x0 [ 247.133408][ T44] aquacomputer_d5next 0003:0C70:F003.001E: hidraw1: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 247.320122][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.335478][ T10] usb 6-1: device descriptor read/64, error -71 [ 247.361502][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.387061][T10230] /dev/rnullb0: Can't open blockdev [ 247.402840][T10253] /dev/rnullb0: Can't open blockdev [ 247.431903][ T5868] usb 3-1: USB disconnect, device number 53 [ 247.480869][ T10] usb usb6-port1: attempt power cycle [ 247.566358][ T5958] usb 7-1: USB disconnect, device number 9 [ 247.835477][ T10] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 247.856006][ T10] usb 6-1: device descriptor read/8, error -71 [ 248.236291][ T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 248.256616][ T10] usb 6-1: device descriptor read/8, error -71 [ 248.383174][ T10] usb usb6-port1: unable to enumerate USB device [ 248.407892][ T5870] Bluetooth: Wrong link type (-57) [ 248.414590][T10273] sctp: [Deprecated]: syz.6.1416 (pid 10273) Use of int in max_burst socket option deprecated. [ 248.414590][T10273] Use struct sctp_assoc_value instead [ 248.550439][T10279] ISOFS: Unable to identify CD-ROM format. [ 248.561743][T10280] /dev/rnullb0: Can't open blockdev [ 248.575062][T10279] /dev/rnullb0: Can't open blockdev [ 248.826038][ T94] block nbd0: Possible stuck request ffff888025677000: control (read@0,4096B). Runtime 150 seconds [ 249.193975][ T200] nci: nci_rx_work: unknown MT 0x1 [ 249.569975][ T5897] IPVS: starting estimator thread 0... [ 249.570801][T10317] /dev/rnullb0: Can't open blockdev [ 249.667283][T10318] IPVS: using max 54 ests per chain, 129600 per kthread [ 250.109510][T10331] netlink: 'syz.3.1432': attribute type 64 has an invalid length. [ 250.119604][T10331] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1432'. [ 250.254303][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.263718][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.275578][ T5897] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 250.286892][T10329] /dev/rnullb0: Can't open blockdev [ 250.393285][T10343] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1435'. [ 250.435456][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 250.446229][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.471740][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.503179][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 250.524811][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 250.548255][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.580160][ T5897] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.594382][ T5897] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.616579][ T5897] usb 6-1: Manufacturer: syz [ 250.634312][ T5897] usb 6-1: config 0 descriptor?? [ 251.535185][T10363] /dev/rnullb0: Can't open blockdev [ 252.041583][T10375] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 252.408711][ T30] audit: type=1400 audit(1755555014.522:38): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=10376 comm="syz.2.1445" [ 253.476010][ T5897] rc_core: IR keymap rc-hauppauge not found [ 253.481974][ T5897] Registered IR keymap rc-empty [ 253.492609][T10393] [U]  [ 253.498892][T10393] [U] K{ [ 253.514339][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.514468][T10393] [U] T 1ŠFFˊ`GJǘGO/MC [ 253.525138][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.530349][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 253.566430][T10393] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 253.595418][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 253.622495][ T5897] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 253.641336][T10393] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 253.657664][ T5897] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 253.675105][T10405] kvm: user requested TSC rate below hardware speed [ 253.695077][T10393] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 253.733198][ T30] audit: type=1400 audit(1755555015.802:39): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10404 comm="syz.6.1453" [ 253.759684][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 253.795745][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 253.806320][T10393] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 253.847075][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 253.869056][T10393] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 253.881210][T10393] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 253.894745][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 253.915456][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 253.935785][T10393] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 254.035450][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 254.100957][T10393] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 254.109996][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 254.120301][T10393] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 254.134580][T10393] [U] 22Ʃ۩X?0;3U [ 254.141843][T10393] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 254.167169][ T5897] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 254.203180][T10393] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 254.210047][ T5897] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 254.213438][T10393] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 254.234539][ T5897] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 254.245620][T10393] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 254.252491][T10393] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 254.289310][ T5897] usb 6-1: USB disconnect, device number 16 [ 254.334915][T10393] [U] EC [ 254.352194][T10393] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 254.394177][T10393] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 254.470093][T10419] /dev/rnullb0: Can't open blockdev [ 254.571009][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 254.613138][T10423] /dev/sg0: Can't lookup blockdev [ 254.619380][T10421] /dev/rnullb0: Can't open blockdev [ 254.644163][T10425] No control pipe specified [ 254.659860][T10425] /dev/rnullb0: Can't open blockdev [ 255.764117][T10457] /dev/rnullb0: Can't open blockdev [ 255.773299][T10458] /dev/rnullb0: Can't open blockdev [ 255.872842][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.879387][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.518984][T10486] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002 [ 256.533153][T10486] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20003 [ 256.571207][T10483] /dev/rnullb0: Can't open blockdev [ 256.617878][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'. [ 256.869640][T10505] /dev/rnullb0: Can't open blockdev [ 257.399258][ T5958] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 257.428835][ T5958] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.567511][ T5868] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 257.608793][T10524] netlink: 'syz.2.1493': attribute type 12 has an invalid length. [ 257.628991][T10525] /dev/rnullb0: Can't open blockdev [ 257.640258][T10524] /dev/rnullb0: Can't open blockdev [ 257.705385][ T5868] usb 7-1: device descriptor read/64, error -71 [ 257.790474][T10531] cgroup: release_agent respecified [ 257.839570][T10518] /dev/rnullb0: Can't open blockdev [ 257.906895][T10537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 257.936137][T10531] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 257.975433][ T5868] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 258.052554][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.067625][T10542] /dev/rnullb0: Can't open blockdev [ 258.088289][T10544] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 258.095549][T10544] overlayfs: failed to set xattr on upper [ 258.101286][T10544] overlayfs: ...falling back to redirect_dir=nofollow. [ 258.108423][T10544] overlayfs: ...falling back to index=off. [ 258.114270][T10544] overlayfs: ...falling back to uuid=null. [ 258.120242][T10544] overlayfs: failed to clone lowerpath [ 258.125867][ T5868] usb 7-1: device descriptor read/64, error -71 [ 258.689872][T10548] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 258.955415][ T5868] usb usb7-port1: attempt power cycle [ 259.025443][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 259.057747][T10553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.150119][T10561] /dev/rnullb0: Can't open blockdev [ 259.185509][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 259.197989][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 259.206881][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.216516][ T9] usb 3-1: config 0 has no interface number 0 [ 259.218995][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.229169][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 259.241087][ T9] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 259.253746][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 259.279442][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 259.288944][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.301553][ T9] usb 3-1: Product: syz [ 259.307859][ T9] usb 3-1: Manufacturer: syz [ 259.312652][ T9] usb 3-1: SerialNumber: syz [ 259.323461][ T9] usb 3-1: config 0 descriptor?? [ 259.328582][ T5868] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 259.339676][T10540] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 259.347491][T10540] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 259.356537][ T5868] usb 7-1: device descriptor read/8, error -71 [ 259.569505][T10540] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 259.580423][T10540] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 259.615608][ T5868] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 259.647804][ T5868] usb 7-1: device descriptor read/8, error -71 [ 259.758789][ T5868] usb usb7-port1: unable to enumerate USB device [ 259.895409][ T5897] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 260.035399][ T5897] usb 7-1: device descriptor read/64, error -71 [ 260.191739][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 260.285573][ T5897] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 260.707539][ T5897] usb usb7-port1: attempt power cycle [ 260.830132][T10574] /dev/rnullb0: Can't open blockdev [ 260.884740][T10576] CIFS mount error: No usable UNC path provided in device string! [ 260.884740][T10576] [ 260.894857][T10576] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 261.055974][ T5897] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 261.080927][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 261.098671][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.109808][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.121855][ T5897] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.138696][ T5897] usb 7-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 261.151052][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.163072][ T5897] usb 7-1: config 0 descriptor?? [ 261.215658][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 261.230899][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 261.243694][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 261.263043][ T9] usb 3-1: USB disconnect, device number 54 [ 261.374028][T10570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.384576][T10570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.610433][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x2 [ 261.632488][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.650435][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.668897][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.678583][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.686633][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.702287][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.710772][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.718752][ T5897] hid-multitouch 0003:045E:9994.0020: unknown main item tag 0x0 [ 261.728580][ T5897] hid-multitouch 0003:045E:9994.0020: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.6-1/input0 [ 262.004906][ T5897] usb 7-1: USB disconnect, device number 16 [ 262.045578][ T121] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 262.075503][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 262.205491][ T121] usb 6-1: Using ep0 maxpacket: 16 [ 262.212528][ T121] usb 6-1: unable to get BOS descriptor or descriptor too short [ 262.226752][ T121] usb 6-1: config 106 has an invalid interface number: 15 but max is 0 [ 262.235521][ T121] usb 6-1: config 106 has no interface number 0 [ 262.244251][ T121] usb 6-1: config 106 interface 15 has no altsetting 0 [ 262.252174][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.272389][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.281597][ T121] usb 6-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=56.45 [ 262.291739][ T9] usb 3-1: Product: syz [ 262.296115][ T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.304200][ T9] usb 3-1: Manufacturer: syz [ 262.309142][ T9] usb 3-1: SerialNumber: syz [ 262.314307][ T121] usb 6-1: Product: syz [ 262.318764][ T121] usb 6-1: Manufacturer: syz [ 262.323826][ T121] usb 6-1: SerialNumber: syz [ 262.331253][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 262.352578][ T5868] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 262.562747][ T2153] usb 3-1: USB disconnect, device number 55 [ 262.610058][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.631925][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.658450][T10587] /dev/rnullb0: Can't open blockdev [ 263.345018][ T121] cdc_subset 6-1:106.15: probe with driver cdc_subset failed with error -71 [ 263.365283][ T121] usb 6-1: USB disconnect, device number 17 [ 263.385475][ T5868] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 263.393650][ T5868] ath9k_htc: Failed to initialize the device [ 263.402817][ T2153] usb 3-1: ath9k_htc: USB layer deinitialized [ 263.406958][T10607] /dev/rnullb0: Can't open blockdev [ 263.908692][T10628] /dev/rnullb0: Can't open blockdev [ 264.667430][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 264.805520][ T10] usb 6-1: device descriptor read/64, error -71 [ 264.946349][T10659] binder: 10658:10659 ioctl c0306201 2000000002c0 returned -14 [ 265.065628][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 265.217602][ T10] usb 6-1: device descriptor read/64, error -71 [ 265.327621][ T10] usb usb6-port1: attempt power cycle [ 265.645403][ T2153] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 265.819431][ T2153] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.830440][ T2153] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.853715][ T2153] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.865441][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 265.885914][ T10] usb 6-1: device descriptor read/8, error -71 [ 265.903016][ T2153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.911412][ T2153] usb 7-1: SerialNumber: syz [ 265.936173][T10693] /dev/rnullb0: Can't open blockdev [ 266.053674][T10700] /dev/rnullb0: Can't open blockdev [ 266.125505][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 266.152745][T10686] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 266.166759][ T10] usb 6-1: device descriptor read/8, error -71 [ 266.278104][ T10] usb usb6-port1: unable to enumerate USB device [ 266.456918][T10709] netlink: 'syz.2.1549': attribute type 29 has an invalid length. [ 266.470031][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1549'. [ 266.835395][ T5868] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 266.881578][T10717] /dev/rnullb0: Can't open blockdev [ 266.886833][ T2153] usb 7-1: 0:2 : does not exist [ 266.899674][ T2153] usb 7-1: USB disconnect, device number 17 [ 266.937764][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.972436][T10720] /dev/rnullb0: Can't open blockdev [ 266.977516][T10721] gfs2: gfs2 mount does not exist [ 266.988556][ T5868] usb 3-1: device descriptor read/64, error -71 [ 267.062468][T10723] netlink: 'syz.3.1554': attribute type 3 has an invalid length. [ 267.080836][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.091266][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.172427][T10731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.226020][ T5868] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 267.335540][ T2153] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 267.365495][ T5868] usb 3-1: device descriptor read/64, error -71 [ 267.475906][ T5868] usb usb3-port1: attempt power cycle [ 267.485701][ T5897] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 267.506764][ T2153] usb 7-1: config 127 has too many interfaces: 255, using maximum allowed: 32 [ 267.515888][ T2153] usb 7-1: config 127 has an invalid descriptor of length 255, skipping remainder of the config [ 267.526658][ T2153] usb 7-1: config 127 has 0 interfaces, different from the descriptor's value: 255 [ 267.538050][ T2153] usb 7-1: New USB device found, idVendor=22b8, idProduct=9c9a, bcdDevice=13.2b [ 267.547496][ T2153] usb 7-1: New USB device strings: Mfr=38, Product=2, SerialNumber=3 [ 267.556156][ T2153] usb 7-1: Product: syz [ 267.560464][ T2153] usb 7-1: Manufacturer: syz [ 267.565072][ T2153] usb 7-1: SerialNumber: syz [ 267.572206][ T2153] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 267.581029][ T2153] usb 7-1: no configuration chosen from 1 choice [ 267.635575][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 267.642336][ T5897] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 267.652396][ T5897] usb 6-1: config 0 has no interface number 0 [ 267.658609][ T5897] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 267.667812][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.677571][ T5897] usb 6-1: config 0 descriptor?? [ 267.763558][T10738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1559'. [ 267.795944][ T5897] viperboard 6-1:0.143: version 0.00 found at bus 006 address 022 [ 267.811749][ T5897] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 267.817787][ T5868] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 267.821914][ T5897] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 267.846557][ T5868] usb 3-1: device descriptor read/8, error -71 [ 267.883856][T10736] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 267.984130][ T5897] usb 6-1: USB disconnect, device number 22 [ 268.095696][ T5868] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 268.126190][ T5868] usb 3-1: device descriptor read/8, error -71 [ 268.153301][T10747] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1560'. [ 268.169852][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1560'. [ 268.235741][ T5868] usb usb3-port1: unable to enumerate USB device [ 268.304902][T10749] netlink: 'syz.5.1560': attribute type 1 has an invalid length. [ 268.325722][T10749] netlink: 'syz.5.1560': attribute type 101 has an invalid length. [ 268.339478][T10749] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1560'. [ 268.648296][T10752] /dev/rnullb0: Can't open blockdev [ 269.558852][T10760] /dev/rnullb0: Can't open blockdev [ 269.564340][T10761] /dev/rnullb0: Can't open blockdev [ 269.572301][T10759] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1564'. [ 269.689051][T10764] No control pipe specified [ 269.694441][T10763] /dev/rnullb0: Can't open blockdev [ 269.784725][T10770] 9pnet_fd: Insufficient options for proto=fd [ 269.969099][T10775] 8021q: VLANs not supported on bond0 [ 269.978180][ T2153] usb 7-1: USB disconnect, device number 18 [ 270.133110][T10778] /dev/rnullb0: Can't open blockdev [ 270.346718][T10781] /dev/rnullb0: Can't open blockdev [ 270.492090][T10787] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1574'. [ 270.588881][T10789] /dev/rnullb0: Can't open blockdev [ 271.040492][T10801] netlink: 'syz.6.1580': attribute type 1 has an invalid length. [ 271.203330][T10804] 9p: Unknown parameter 'trns' [ 271.285398][ T5897] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 271.415481][ T5897] usb 7-1: device descriptor read/64, error -71 [ 271.655524][ T5897] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 271.868235][ T55] block nbd1: Possible stuck request ffff8880256b5080: control (read@0,4096B). Runtime 30 seconds [ 271.908225][ T5897] usb 7-1: device descriptor read/64, error -71 [ 272.146609][ T5897] usb usb7-port1: attempt power cycle [ 272.488980][ T5870] Bluetooth: Wrong link type (-57) [ 272.515756][ T5897] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 272.546938][ T5897] usb 7-1: device descriptor read/8, error -71 [ 272.586151][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 272.595122][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 272.627712][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 272.757585][ T30] audit: type=1326 audit(1755555034.862:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.2.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9932f8ebe9 code=0x0 [ 272.795475][ T5897] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 272.826171][ T5897] usb 7-1: device descriptor read/8, error -71 [ 272.908281][T10847] /dev/rnullb0: Can't open blockdev [ 272.951941][ T5897] usb usb7-port1: unable to enumerate USB device [ 273.407959][T10860] /dev/rnullb0: Can't open blockdev [ 273.918636][T10883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.947174][T10883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.259749][T10897] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 274.300359][T10899] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1603'. [ 274.734861][T10910] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 274.745003][T10910] /dev/rnullb0: Can't open blockdev [ 274.754366][ T2153] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 274.905599][ T2153] usb 7-1: Invalid ep0 maxpacket: 16 [ 275.045533][ T2153] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 275.178916][ T5870] Bluetooth: Wrong link type (-57) [ 275.195411][ T2153] usb 7-1: Invalid ep0 maxpacket: 16 [ 275.201208][ T2153] usb usb7-port1: attempt power cycle [ 275.545422][ T2153] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 275.566042][ T2153] usb 7-1: Invalid ep0 maxpacket: 16 [ 275.595256][T10935] /dev/rnullb0: Can't open blockdev [ 275.666828][T10938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.682683][T10938] /dev/rnullb0: Can't open blockdev [ 275.690054][ T5897] IPVS: starting estimator thread 0... [ 275.699640][T10943] overlayfs: failed to resolve './file0': -2 [ 275.705543][ T2153] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 275.707627][T10942] tmpfs: Unknown parameter 'overlay' [ 275.736003][ T2153] usb 7-1: Invalid ep0 maxpacket: 16 [ 275.745644][ T2153] usb usb7-port1: unable to enumerate USB device [ 275.837417][T10939] IPVS: using max 45 ests per chain, 108000 per kthread [ 276.872090][T10974] input: syz1 as /devices/virtual/input/input22 [ 276.993453][ T5870] Bluetooth: Wrong link type (-57) [ 277.057288][T10991] /dev/rnullb0: Can't open blockdev [ 277.135641][ T2153] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 277.376855][ T2153] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.390504][ T2153] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.552252][ T2153] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.563581][T10997] tipc: Started in network mode [ 277.563975][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.585580][ T2153] usb 3-1: Product: syz [ 277.589820][ T2153] usb 3-1: Manufacturer: syz [ 277.594435][ T2153] usb 3-1: SerialNumber: syz [ 277.601604][T10997] tipc: Node identity 7, cluster identity 4711 [ 277.609972][ T2153] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 277.638809][T10997] tipc: Node number set to 7 [ 277.805371][ T5870] Bluetooth: hci0: unexpected event for opcode 0x203d [ 277.816815][ T5897] usb 3-1: USB disconnect, device number 60 [ 278.206752][T11026] /dev/rnullb0: Can't open blockdev [ 278.716694][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1652'. [ 278.732053][T11045] netlink: 'syz.6.1652': attribute type 3 has an invalid length. [ 278.740644][T11045] netlink: 'syz.6.1652': attribute type 1 has an invalid length. [ 278.751136][T11045] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1652'. [ 278.763788][T11045] tmpfs: Bad value for 'mpol' [ 278.771679][T11045] : Can't lookup blockdev [ 278.858187][T11053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.879452][T11053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.887269][T11049] dns_resolver: Unsupported server list version (0) [ 278.907012][ T94] block nbd0: Possible stuck request ffff888025677000: control (read@0,4096B). Runtime 180 seconds [ 279.024658][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1656'. [ 279.764901][T11086] /dev/rnullb0: Can't open blockdev [ 280.202034][T11119] netlink: 'syz.3.1672': attribute type 46 has an invalid length. [ 280.224090][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.233588][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.442759][T11127] netlink: 'syz.6.1675': attribute type 30 has an invalid length. [ 281.252556][T11139] /dev/rnullb0: Can't open blockdev [ 281.305233][T11137] can: request_module (can-proto-0) failed. [ 284.364762][T11172] /dev/rnullb0: Can't open blockdev [ 284.441949][T11174] /dev/rnullb0: Can't open blockdev [ 284.551212][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.561557][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.594792][T11183] /dev/rnullb0: Can't open blockdev [ 284.728403][T11190] /dev/rnullb0: Can't open blockdev [ 284.887994][T11205] sctp: [Deprecated]: syz.3.1698 (pid 11205) Use of int in max_burst socket option. [ 284.887994][T11205] Use struct sctp_assoc_value instead [ 285.498420][T11218] /dev/rnullb0: Can't open blockdev [ 285.535765][T11229] sctp: [Deprecated]: syz.2.1704 (pid 11229) Use of int in max_burst socket option deprecated. [ 285.535765][T11229] Use struct sctp_assoc_value instead [ 285.689489][T11233] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1706'. [ 285.790024][T11236] /dev/rnullb0: Can't open blockdev [ 285.883298][T11241] QAT: failed to copy from user cfg_data. [ 285.901360][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.919769][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1709'. [ 285.945668][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.031804][T11239] /dev/rnullb0: Can't open blockdev [ 286.390772][ T5870] Bluetooth: Wrong link type (-57) [ 286.522179][T11265] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1717'. [ 286.532866][T11265] xt_socket: unknown flags 0xd0 [ 286.586282][ T121] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 286.638644][ T30] audit: type=1804 audit(1755555048.752:41): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1718" name="/newroot/558/cgroup.controllers" dev="tmpfs" ino=2950 res=1 errno=0 [ 286.662241][ T30] audit: type=1800 audit(1755555048.752:42): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1718" name="cgroup.controllers" dev="tmpfs" ino=2950 res=0 errno=0 [ 286.723304][T11268] kvm: kvm [11267]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 286.732207][T11268] kvm: kvm [11267]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 286.742055][ T121] usb 6-1: Using ep0 maxpacket: 32 [ 286.749017][ T121] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 286.755578][ T2153] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 286.758631][ T121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.771990][T11268] kvm_intel: kvm [11267]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 286.785512][ T6064] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 286.792104][ T121] usb 6-1: config 0 descriptor?? [ 286.798408][T11268] kvm: kvm [11267]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 286.807792][T11268] kvm: kvm [11267]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 286.821836][T11268] erofs (device nullb0): cannot find valid erofs superblock [ 286.925593][ T2153] usb 7-1: Using ep0 maxpacket: 32 [ 286.940820][ T2153] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 286.950086][ T6064] usb 3-1: Using ep0 maxpacket: 8 [ 286.955949][ T2153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.964742][ T6064] usb 3-1: config 5 has an invalid interface number: 52 but max is 1 [ 286.967781][T11274] fuse: Unknown parameter 'rootmote' [ 286.974853][ T2153] usb 7-1: config 0 descriptor?? [ 286.984456][ T6064] usb 3-1: config 5 has an invalid descriptor of length 117, skipping remainder of the config [ 287.000495][ T6064] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 287.007077][ T121] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 287.009638][ T6064] usb 3-1: config 5 has no interface number 0 [ 287.024477][ T2153] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 287.033494][ T6064] usb 3-1: too many endpoints for config 5 interface 52 altsetting 38: 254, using maximum allowed: 30 [ 287.037590][ T121] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.056054][ T6064] usb 3-1: config 5 interface 52 altsetting 38 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 287.072615][ T121] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 287.075789][ T6064] usb 3-1: config 5 interface 52 has no altsetting 0 [ 287.081653][ T121] usb 6-1: media controller created [ 287.097944][ T6064] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 287.107523][ T121] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.108731][ T6064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.134769][ T6064] usb 3-1: Product: syz [ 287.139324][ T6064] usb 3-1: Manufacturer: syz [ 287.144870][ T6064] usb 3-1: SerialNumber: syz [ 287.208120][T11250] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1712'. [ 287.278333][T11250] binder: 11249:11250 ioctl c0306201 2000000001c0 returned -14 [ 287.289333][T11250] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1712'. [ 287.300726][ T121] az6027: usb out operation failed. (-71) [ 287.315701][ T121] az6027: usb out operation failed. (-71) [ 287.321779][ T121] stb0899_attach: Driver disabled by Kconfig [ 287.328239][ T121] az6027: no front-end attached [ 287.328239][ T121] [ 287.337543][ T121] az6027: usb out operation failed. (-71) [ 287.343343][ T121] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 287.354757][ T121] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input24 [ 287.376870][ T121] dvb-usb: schedule remote query interval to 400 msecs. [ 287.383877][ T121] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 287.415591][ T121] usb 6-1: USB disconnect, device number 23 [ 287.459522][ T2153] gspca_vc032x: reg_w err -71 [ 287.464396][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.494428][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.508354][ T121] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 287.521876][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.532044][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.549626][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.561107][ T6064] cytherm 3-1:5.52: Cypress thermometer device now attached [ 287.571161][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.579591][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.585637][ T6064] usb 3-1: USB disconnect, device number 61 [ 287.591810][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.601690][ T6064] cytherm 3-1:5.52: Cypress thermometer now disconnected [ 287.609471][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.614807][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.626297][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.631680][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.638729][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.644151][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.649887][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.659380][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.664878][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.670578][ T2153] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.678755][ T2153] gspca_vc032x: Unknown sensor... [ 287.683938][ T2153] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 287.693913][ T2153] usb 7-1: USB disconnect, device number 28 [ 287.850207][T11286] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1722'. [ 287.867834][T11285] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1722'. [ 287.878726][T11285] /dev/rnullb0: Can't open blockdev [ 288.285519][ T121] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 288.455582][ T6154] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 288.467103][ T121] usb 6-1: Using ep0 maxpacket: 32 [ 288.475115][ T121] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 288.487236][ T121] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 288.505702][ T121] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 288.522917][ T121] usb 6-1: config 1 has no interface number 0 [ 288.532560][ T121] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.564057][ T121] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 288.595035][ T121] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 288.604554][ T121] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.615501][ T6154] usb 3-1: Using ep0 maxpacket: 16 [ 288.621823][ T121] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 288.634109][ T6154] usb 3-1: config 0 has an invalid interface number: 72 but max is 0 [ 288.644481][ T6154] usb 3-1: config 0 has no interface number 0 [ 288.670483][ T6154] usb 3-1: config 0 interface 72 has no altsetting 0 [ 288.688703][ T6154] usb 3-1: New USB device found, idVendor=10b8, idProduct=fbb1, bcdDevice=2f.2c [ 288.705716][ T6154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.723965][ T6154] usb 3-1: Product: syz [ 288.728591][ T6154] usb 3-1: Manufacturer: syz [ 288.733217][ T6154] usb 3-1: SerialNumber: syz [ 288.747018][ T6154] usb 3-1: config 0 descriptor?? [ 288.845369][ T121] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 288.902347][T11313] No control pipe specified [ 288.912062][T11313] /dev/rnullb0: Can't open blockdev [ 288.933043][ T5870] Bluetooth: Wrong link type (-57) [ 289.041206][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.052513][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.065656][ T121] usb 6-1: USB disconnect, device number 24 [ 289.072426][ T121] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 289.105872][T11329] netlink: 'syz.3.1736': attribute type 2 has an invalid length. [ 289.115272][T11330] /dev/rnullb0: Can't open blockdev [ 289.806493][ T31] INFO: task syz.1.521:7483 blocked for more than 143 seconds. [ 289.820124][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 289.837103][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 289.856407][ T31] task:syz.1.521 state:D stack:23984 pid:7483 tgid:7481 ppid:5865 task_flags:0x400040 flags:0x00004004 [ 289.904048][ T31] Call Trace: [ 289.918264][ T31] [ 289.936605][ T31] __schedule+0x1798/0x4cc0 [ 289.959004][ T31] ? rcu_is_watching+0x15/0xb0 [ 289.970543][ T31] ? __pfx___schedule+0x10/0x10 [ 289.981597][ T31] ? schedule+0x91/0x360 [ 289.993434][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.003774][ T31] ? lock_release+0x4b/0x3e0 [ 290.017172][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.023213][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.030939][ T31] schedule+0x165/0x360 [ 290.035259][ T31] schedule_preempt_disabled+0x13/0x30 [ 290.040881][ T31] __mutex_lock+0x7e6/0x1350 [ 290.045596][ T31] ? __mutex_lock+0x5bb/0x1350 [ 290.050452][ T31] ? sync_bdevs+0x1ac/0x340 [ 290.055048][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 290.060223][ T31] ? iput+0x398/0x9d0 [ 290.064293][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 290.069651][ T31] sync_bdevs+0x1ac/0x340 [ 290.074098][ T31] ksys_sync+0xb9/0x150 [ 290.078422][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 290.083294][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.088181][ T31] __ia32_sys_sync+0xe/0x20 [ 290.092731][ T31] do_syscall_64+0xfa/0x3b0 [ 290.097438][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.103656][ T31] ? clear_bhb_loop+0x60/0xb0 [ 290.108717][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.114977][ T31] RIP: 0033:0x7faf7a38ebe9 [ 290.119734][ T31] RSP: 002b:00007faf7b1f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 290.128399][ T31] RAX: ffffffffffffffda RBX: 00007faf7a5b5fa0 RCX: 00007faf7a38ebe9 [ 290.136644][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.144826][ T31] RBP: 00007faf7a5b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 290.152918][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.160979][ T31] R13: 00007faf7a5b6038 R14: 00007faf7a5b5fa0 R15: 00007ffff5a5e878 [ 290.169039][ T31] [ 290.172219][ T31] INFO: lockdep is turned off. [ 290.177269][ T31] NMI backtrace for cpu 1 [ 290.177285][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 290.177309][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.177322][ T31] Call Trace: [ 290.177329][ T31] [ 290.177337][ T31] dump_stack_lvl+0x189/0x250 [ 290.177374][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.177404][ T31] ? __pfx__printk+0x10/0x10 [ 290.177436][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.177456][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.177476][ T31] ? __pfx__printk+0x10/0x10 [ 290.177505][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.177532][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.177553][ T31] watchdog+0xf60/0xfa0 [ 290.177577][ T31] ? watchdog+0x1e2/0xfa0 [ 290.177600][ T31] kthread+0x711/0x8a0 [ 290.177619][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.177640][ T31] ? __pfx_kthread+0x10/0x10 [ 290.177658][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.177680][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.177703][ T31] ? __pfx_kthread+0x10/0x10 [ 290.177721][ T31] ret_from_fork+0x3f9/0x770 [ 290.177748][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.177777][ T31] ? __switch_to_asm+0x39/0x70 [ 290.177797][ T31] ? __switch_to_asm+0x33/0x70 [ 290.177816][ T31] ? __pfx_kthread+0x10/0x10 [ 290.177832][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.177860][ T31] [ 290.177875][ T31] Sending NMI from CPU 1 to CPUs 0: [ 290.327269][ C0] NMI backtrace for cpu 0 [ 290.327286][ C0] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 290.327308][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.327319][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 290.327346][ C0] RIP: 0010:do_raw_spin_unlock+0x122/0x240 [ 290.327366][ C0] Code: 03 42 80 3c 20 00 74 0c 48 c7 c7 d8 70 3a 8e e8 44 5c 85 00 48 83 3d a4 1b 9c 0c 00 0f 84 14 01 00 00 48 89 df e8 2e 45 e8 09 <90> 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 83 e8 09 cc e8 c8 26 30 03 [ 290.327381][ C0] RSP: 0018:ffffc90000ad76e8 EFLAGS: 00000046 [ 290.327395][ C0] RAX: 0000000000000001 RBX: ffffffff9a1af030 RCX: 0000000000000000 [ 290.327406][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9a1af030 [ 290.327418][ C0] RBP: 1ffffffff3435e07 R08: ffffffff9a1af033 R09: 1ffffffff3435e06 [ 290.327431][ C0] R10: dffffc0000000000 R11: fffffbfff3435e07 R12: dffffc0000000000 [ 290.327444][ C0] R13: 1ffffffff3435e08 R14: ffffffff9a1af040 R15: ffffffff9a1af038 [ 290.327457][ C0] FS: 0000000000000000(0000) GS:ffff8881257d0000(0000) knlGS:0000000000000000 [ 290.327472][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.327483][ C0] CR2: 0000555592ea65c8 CR3: 000000007d172000 CR4: 00000000003526f0 [ 290.327499][ C0] DR0: 000000000000000a DR1: 0000000000000002 DR2: 0000000000000003 [ 290.327509][ C0] DR3: 0000000080000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 290.327520][ C0] Call Trace: [ 290.327526][ C0] [ 290.327535][ C0] _raw_spin_unlock_irqrestore+0x78/0x110 [ 290.327555][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.327575][ C0] ? debug_object_deactivate+0x9a/0x250 [ 290.327604][ C0] detach_timer+0x33/0x2d0 [ 290.327626][ C0] __mod_timer+0x7d8/0xf30 [ 290.327657][ C0] ieee80211_ibss_work+0x5af/0x1060 [ 290.327675][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.327694][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.327712][ C0] ? rcu_is_watching+0x15/0xb0 [ 290.327734][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 290.327750][ C0] ? kcov_remote_stop+0x78/0x6d0 [ 290.327769][ C0] ? skb_dequeue+0x10e/0x150 [ 290.327787][ C0] ? ieee80211_iface_work+0xfbd/0x12d0 [ 290.327807][ C0] ? ieee80211_iface_work+0x1224/0x12d0 [ 290.327830][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 290.327852][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 290.327884][ C0] process_scheduled_works+0xade/0x17b0 [ 290.327918][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.327958][ C0] worker_thread+0x8a0/0xda0 [ 290.327982][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 290.328003][ C0] ? __kthread_parkme+0x7b/0x200 [ 290.328030][ C0] kthread+0x711/0x8a0 [ 290.328050][ C0] ? __pfx_worker_thread+0x10/0x10 [ 290.328072][ C0] ? __pfx_kthread+0x10/0x10 [ 290.328093][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.328110][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.328129][ C0] ? __pfx_kthread+0x10/0x10 [ 290.328143][ C0] ret_from_fork+0x3f9/0x770 [ 290.328166][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.328190][ C0] ? __switch_to_asm+0x39/0x70 [ 290.328205][ C0] ? __switch_to_asm+0x33/0x70 [ 290.328220][ C0] ? __pfx_kthread+0x10/0x10 [ 290.328235][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.328257][ C0] [ 290.329320][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 290.329336][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 290.329359][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.329372][ T31] Call Trace: [ 290.329381][ T31] [ 290.329391][ T31] dump_stack_lvl+0x99/0x250 [ 290.329431][ T31] ? __asan_memcpy+0x40/0x70 [ 290.329474][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.329506][ T31] ? __pfx__printk+0x10/0x10 [ 290.329547][ T31] vpanic+0x281/0x750 [ 290.329576][ T31] ? __pfx_vpanic+0x10/0x10 [ 290.329602][ T31] ? rcu_is_watching+0x15/0xb0 [ 290.329632][ T31] ? preempt_schedule+0xae/0xc0 [ 290.329671][ T31] ? preempt_schedule_common+0x83/0xd0 [ 290.329699][ T31] panic+0xb9/0xc0 [ 290.329725][ T31] ? __pfx_panic+0x10/0x10 [ 290.329752][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 290.329781][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 290.329806][ T31] watchdog+0xf9f/0xfa0 [ 290.329833][ T31] ? watchdog+0x1e2/0xfa0 [ 290.329859][ T31] kthread+0x711/0x8a0 [ 290.329881][ T31] ? __pfx_watchdog+0x10/0x10 [ 290.329904][ T31] ? __pfx_kthread+0x10/0x10 [ 290.329925][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.329949][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.329993][ T31] ? __pfx_kthread+0x10/0x10 [ 290.330014][ T31] ret_from_fork+0x3f9/0x770 [ 290.330046][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 290.330079][ T31] ? __switch_to_asm+0x39/0x70 [ 290.330109][ T31] ? __switch_to_asm+0x33/0x70 [ 290.330131][ T31] ? __pfx_kthread+0x10/0x10 [ 290.330154][ T31] ret_from_fork_asm+0x1a/0x30 [ 290.330185][ T31] [ 290.334092][ T31] Kernel Offset: disabled