last executing test programs: 7m32.478338507s ago: executing program 2 (id=100): r0 = eventfd(0x1000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0xf, 0x0, 0x66c3}, 0x20) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x60, 0x22, 0x78, {0x78, 0x1, "d0041624ebb1c23afa3dde2d0f36743c79689603300e1101a36091ee583ac44a4b8655135f6095d243f823d4ab21e2322291882b437c25a47215f9c4978bdcb6f5f50e4293d33af847ec1a5b4e1895bf1e2404fa37d68eb79d1cb88393046753559ca11214228d1cd80c4db2979156b6ca25004dc316"}}, &(0x7f0000000080)={0x0, 0x3, 0xac, @string={0xac, 0x3, "9ef28dda60ca20e91c7f0d9ef8039ec1690bc33249f963696ca624b57d280dd3c803c634121d7d628b80379b8bed9962a97706e73530b4c889b3f5af11a132be5d45300adab5d60d07ab1c2c36a57c55dd8ea689f61f0092cea5d1325081554a62f4cf467656fb0c0b9a0343edb121196e25697f39a9fadba1b73d37b21bc1858e216c321a6546210dcfb98d56b5148b0121fb2ffc04bf81e2d19b05398f53e0a6f19c75c4931160a5e5"}}}, &(0x7f0000000380)={0x34, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x0, 0x3a, {0x38, "4f3181a5017a4b78612e1bad8ceca475666a44193862eccbbca5401279a938283ba49d010658328f74dad6a873993e09df1ffb5487210d97"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x8}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'wlan0\x00', @random="33d1c100"}) 7m31.759938735s ago: executing program 2 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000014c0)=ANY=[@ANYBLOB="12fcffffffffffffff0502800a03010203010902120001190b1090090421300067a0eaa4"], &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0}) setns(r5, 0x10000000) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f0000000580)) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f00000003c0)={0x2, 0x1, [{0x0, 0x0, 0x4}, {0x4, 0x0, 0x3ff}, {0x3, 0x0, 0x4}, {0x10001, 0x0, 0x9}, {0x7ff, 0x0, 0x474}, {0x5, 0x0, 0x4}, {0xfffffffb, 0x0, 0x1}, {0xa, 0x0, 0x80}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0xffffffffffffffff}, {0x7, 0x0, 0x6}, {0x2, 0x0, 0x6}, {0x10000, 0x0, 0x2}, {0x12c8, 0x0, 0x8000}, {0x8, 0x0, 0xfffffffffffffffe}, {0x52, 0x0, 0x6}]}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x87b, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6, 0x6, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b0016"], 0x78}}, 0x0) 7m28.495136061s ago: executing program 2 (id=114): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000080)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000700)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x20, 0x23, 0xb, {0xb, 0x8, "6400002c7df768ee10"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000cc0)={0x34, &(0x7f0000000e00)={0x40, 0x8, 0x100, "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"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x46}, &(0x7f0000000b40)={0xc0, 0xa1, 0x4, 0x1de}, &(0x7f0000000c40)={0x40, 0xa0, 0x4}, &(0x7f0000000c80)={0xc0, 0xa2, 0x2f, "5cd18d1dc83f0a70e9fc0e75adfa49baa06894e20e61fce0d0930b582426fe9263b1cb92a9077e4fe0cc999ed2cb2e"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40a0c1) syz_usb_control_io$lan78xx(r0, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x40, 0x21, 0xd9, {0xd9, 0x11, "b96756a7522e5ea6badd1f96089a38b1ec20d6e5d044098a6ec090c3a95b4df330b470fd048e14f7bc937de81ac49ed56b731ea9af1b26c670182a76bb7e597d77b7651a0116c28dfbee80d2a297aca077e4c9e26b3ff91a20210211f15bbabd08419abd4eedb8065ee934ab932184a524e19e65628554db7772c313227268770ba91595d95c973c669e99df0a174f1069c6331e5f97fd838b397048c5e841baac5a387705cd8edd77a1fdadcd7bc4e830c679c53773b853d663214b68467bcd0c8f21f54f50b1cffb9d7b8fdf87e7aa9364ce66bd34be"}}, &(0x7f00000001c0)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "cd77b229773c48fb71b28118f240c4e6137d69483734c5adcbdf8c5baa0ade6239b238b64b57f85e9b8203ba2ca7a25a1defb5eb9a39b9a64edd12e954bf2c5be25c46ba8c2d6ed29ba4a94ac5e9b363ae7536dbfa318b18f1460f8664ce55c361b9533dd2ed78d90bd3123265df7e2c5676b619d66a9866cb32a1efa2f9193701bba288ab1e489f5e332dd43b5153323c246158829a9be5690fbe052c8e471228696365f1de2746e6ae1cddbbd4cb4a721d8a7e8ba3824f74830442b64b5ecdee0bde55a8f9ed78128d744cddc49f7de36632"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000300)={0x40, 0x31, 0xd2, "c509e66c6e24dca77c9f2160aa727f708d928113c316e4b01ffe4ac86c139c26f39852403a001db96b8b081d5219c08e27a95de118d14e33bec261c1dd01603df026a8f7604e86442d92a50f4af2f3f0ca3d089d795b03e9d32e5c811e5705fa7d6b9e01b629df87e914012c3115ef671dea7954e9c0bf183a00784d0f3c3acdb16a13cc6f4cca5733d66892f5e29232ec603c25ce163d7b21f88a67af4120ed33b42470802d12eb9529d85cccc18f21d1396d8fa8810418e367be9c95cc14fc8d8a17920cf297a0737d067b98a97661d7c6"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000480)={0xc0, 0xa1, 0x4}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "30371d00649aab553972dc59b80ca8946de0d591d89d243a69d653a42beb1daeae196b17e94aae0a4e0c8a3e2dd07b"}}) 7m24.972712373s ago: executing program 2 (id=123): r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x181083) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0xfffffffc, 0xffffffff}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) tee(r1, 0xffffffffffffffff, 0x8, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x3, 0x80, 0x3}) sendto$inet6(r3, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x40010) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf252800000008000300", @ANYRES32=0x0, @ANYBLOB="74002a003752d5001df2df057fe96516a1db37e8a37abb9027be7411c1bd65bed3285b96ede72b6ee3e2348dd5d878fca7bef297d58c7c5a74c1e9e9cb7d1883e343c082c9c62f28d3c56a67d30b8c2010eb3439242d1a10001708000000000000008100b4001500000000080104000002000000"], 0x90}, 0x1, 0x0, 0x0, 0x4800}, 0x80004) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x40045702, &(0x7f0000000100)={0x1, 0xaf1, 0x4, 0x0, 0x1}) 7m24.771584531s ago: executing program 2 (id=125): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_connect$uac1(0x3, 0x101, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x4, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x2e}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x7, 0x4, "84"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x4, 0x3, "cf"}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x5, "f94c01"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x4, 0x7, 0x7fff, 0x6, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x20, 0xa, 0x7, 0xef}, @as_header={0x7, 0x24, 0x1, 0x2, 0x2, 0x2}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7, 0xf7, "4f982e", "f89c"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x2, 0x3c, "e75221", "1a"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xe, 0x3, 0x5, 0xe, "c5a807"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x5, 0x6, {0x7, 0x25, 0x1, 0xc, 0x7f, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x8, 0x8, 0x7f}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xe, 0x4, 0x7, 0x4, "92e91c806d8f7ef40d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffe, 0x3, 0x6, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7f, 0x8, 0x9c, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x1, 0xa, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x39, 0xc, 0x51, {0x7, 0x25, 0x1, 0x0, 0x9, 0x7}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x9, 0xff, 0xa, 0x8, 0xff}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x5, [{0x7, &(0x7f0000000300)=@string={0x7, 0x3, "d1759a3cef"}}, {0x52, &(0x7f0000000340)=@string={0x52, 0x3, "d2ccfd8c1562a7dca20bac1cdf1fc2773b4a197a5aa04bc08019df0f58b9f1f6005f68ae3b6874aa85573e6dd557ca02256d68688294a69d961a7127a51127f0fca7fa924fa7b906d4a09138863d098b"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x28, &(0x7f0000000400)=@string={0x28, 0x3, "6764f786c54658f512459d065f6d6d2b271ba52382042f7af8b7c7e95e3e0df98a1d1f833bf2"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3009}}]}) 7m23.423964506s ago: executing program 2 (id=136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca249b2f00000000000000556eabdca3f6729b0ec1218002a6e5", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}], 0x20}}], 0x1, 0x4800) 7m23.06588994s ago: executing program 32 (id=136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca249b2f00000000000000556eabdca3f6729b0ec1218002a6e5", 0x20}], 0x1, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}], 0x20}}], 0x1, 0x4800) 4m1.479830705s ago: executing program 0 (id=944): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x0, 0x0, 0x3}, 0x2}, 0x18) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r7, 0x3a, 0xcd, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005"], 0x60}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x143141, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae03, 0x3d) (async) ioctl$KVM_CREATE_VM(r9, 0xae03, 0x3d) accept4(r8, 0x0, 0x0, 0x800) (async) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0a", 0x92}], 0x2}], 0x1, 0x40800) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) bind$can_j1939(r0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYRES64=r8, @ANYRES32=r13, @ANYBLOB="71e1f03bd636baff72cf457ed70b34bbce033098e196290c4c2aeac30c668f1cdaec765643b8519476af318cc719b6df83f6cb01bb350700000000000000ca3c39cea0cb47c64e66a8e21ee64b794789b33617a8df48d49d66b3573200"/108], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYRES64=r8, @ANYRES32=r13, @ANYBLOB="71e1f03bd636baff72cf457ed70b34bbce033098e196290c4c2aeac30c668f1cdaec765643b8519476af318cc719b6df83f6cb01bb350700000000000000ca3c39cea0cb47c64e66a8e21ee64b794789b33617a8df48d49d66b3573200"/108], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x7, 0x40002) (async) r14 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x7, 0x40002) ioctl$FE_SET_PROPERTY(r14, 0x40106f52, &(0x7f00000001c0)={0x2f, &(0x7f0000000000)=[{0x1b, '\x00', @data=0x80000002, 0x44}]}) 4m1.33776905s ago: executing program 0 (id=945): syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090429000002020100052402000005"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/230) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x2, 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000200)) fanotify_init(0x10, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1000002, @empty, 0x19}}, 0x7, 0x8000}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x5a4, @local, 0xa}]}, &(0x7f0000000140)=0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000200)={0x2, 0x1, 0x80, "a608000000bb00000000e8000002effc32b60be396f3d700", 0x41414770}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xc9, {0x9, 0x21, 0xe4, 0x3, 0x1, {0x22, 0x49b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000600)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[{}, {}], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x5, 0x0, r1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32, @ANYBLOB="0c003a8008010100d1e323bc1061f29dc1bcd92a771d"], 0x2c}], 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000680)={&(0x7f00000000c0)=[0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], r7, 0x0, '\x00', 0x1, 0x8}) lseek(r0, 0x8005, 0x4) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) ioctl$GIO_UNIMAP(r9, 0x4b66, &(0x7f0000000140)={0x0, 0x0}) 3m57.927369933s ago: executing program 0 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000880)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000480)={0x3c0, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9011}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d0331bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x463e2061}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3320}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x365f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb641}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8a6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75c031c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x694a86a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd282}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d04}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10cf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x724bf33d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79cbbaf4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4099}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dc63490}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78e66a8d}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9975}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5b57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7e4}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1a8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4edc4a5d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70b867f5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e77f6e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71ffd44f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c69ae4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12cf0993}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x681d4e4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74bf6215}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7784028d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f87b17b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5589d59a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bc13fa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b1199ac}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28c61dc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4df88d16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53362fcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d08f563}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bde77f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x711fcae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4ba063}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a9928db}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3579d95b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20f4fde6}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e4b0b73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aed35fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x68}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7128d71e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35c3db42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59f65f75}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31e536ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5654c441}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a8898fc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36316786}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe995600}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c242ca5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f1c9cdd}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc792b87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x777a9e41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x682aabdd}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x484}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x3000000, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x484}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x3000000, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1002, 0xb, 0x8012, r4, 0x83000000) (async) mmap$snddsp_control(&(0x7f0000ffc000/0x4000)=nil, 0x1002, 0xb, 0x8012, r4, 0x83000000) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) (async) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m56.903598778s ago: executing program 0 (id=968): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0x8000000000000000, 0x315, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa401, 0x0) fgetxattr(r0, &(0x7f0000000080)=@random={'user.', '#+\x00'}, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x71f4}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4000c800}, 0x0) 3m56.86242617s ago: executing program 0 (id=969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(r1, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x111) write(r2, &(0x7f0000000a00)="c7", 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(r3, r1, 0x0, 0x7ffff000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x7f, 0x14, 0x3, 0x0, 0x4, 0xc, 0x6, 0x5, 0x3, 0x4f, 0x81, 0x5, 0x0, 0xa8, 0x8, 0xf9, 0xfe, 0x6, 0xd, '\x00', 0x4, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m56.589992085s ago: executing program 0 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) unshare(0x26020480) r1 = memfd_create(&(0x7f0000000380)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\x06\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6nIV\x15\xc7\xac\xef\x87\xbf\xd07l\xc2\xc4+\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJ\x7f\x00\x00\x00\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x84\x9f3\x85\xf5\xe0zYf\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x16\xebG\xa2\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xd3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfaP\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb0\x02\x00\x00\x00\x00\x00\x00\x00V\xe8\xc1\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\x00\x00Y\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f', 0x4) pwrite64(r1, 0x0, 0x0, 0xd) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file1', [{0x20, '\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\x06\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6nIV\x15\xc7\xac\xef\x87\xbf\xd07l\xc2\xc4+\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJ\x7f\x00\x00\x00\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x84\x9f3\x85\xf5\xe0zYf\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x16\xebG\xa2\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xd3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfaP\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb0\x02\x00\x00\x00\x00\x00\x00\x00V\xe8\xc1\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\x00\x00Y\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f'}], 0xa, "94a42a94478e437db8264ca597ca3a2d3d13730cc46a4bc6b77c4d5fb4c8cd7410fda251843ef820cee3bbbb64bb7217e6a4bf307f233d97603fd2a6956050ac82d3da4991113b614adbe8b2007cfb943a2c3a3e5d98d5a159aff78f3c64596368a26f3850a7f7b894688acb949e349cf1abfe6e9a52984f846108c5889645696b3b1409d12f50dd1bb71725ce2d50d294c9c965fcaa6b412b1d57a9f989f082efab755c458000db279269069dffebaa822000dc4d074afe6b0cd11f9eb38f89981bac6d3da313321f116c9654447abcf0a9b9a02bd53b04e2a041"}, 0x258) 3m41.393349021s ago: executing program 33 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) unshare(0x26020480) r1 = memfd_create(&(0x7f0000000380)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\x06\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6nIV\x15\xc7\xac\xef\x87\xbf\xd07l\xc2\xc4+\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJ\x7f\x00\x00\x00\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x84\x9f3\x85\xf5\xe0zYf\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x16\xebG\xa2\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xd3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfaP\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb0\x02\x00\x00\x00\x00\x00\x00\x00V\xe8\xc1\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\x00\x00Y\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f', 0x4) pwrite64(r1, 0x0, 0x0, 0xd) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file1', [{0x20, '\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\x06\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6nIV\x15\xc7\xac\xef\x87\xbf\xd07l\xc2\xc4+\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJ\x7f\x00\x00\x00\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x84\x9f3\x85\xf5\xe0zYf\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x16\xebG\xa2\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xd3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfaP\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb0\x02\x00\x00\x00\x00\x00\x00\x00V\xe8\xc1\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\x00\x00Y\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f'}], 0xa, "94a42a94478e437db8264ca597ca3a2d3d13730cc46a4bc6b77c4d5fb4c8cd7410fda251843ef820cee3bbbb64bb7217e6a4bf307f233d97603fd2a6956050ac82d3da4991113b614adbe8b2007cfb943a2c3a3e5d98d5a159aff78f3c64596368a26f3850a7f7b894688acb949e349cf1abfe6e9a52984f846108c5889645696b3b1409d12f50dd1bb71725ce2d50d294c9c965fcaa6b412b1d57a9f989f082efab755c458000db279269069dffebaa822000dc4d074afe6b0cd11f9eb38f89981bac6d3da313321f116c9654447abcf0a9b9a02bd53b04e2a041"}, 0x258) 2m33.466696095s ago: executing program 4 (id=1342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x18}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x0, 0x0, 0x8, 0xa, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0x0, 0x2}, 0x70bd28, 0x0, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000040)='ext2\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffd, 0x101000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) 2m33.093378055s ago: executing program 4 (id=1344): r0 = socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1040}], 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0040030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160048010a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) 2m32.895412318s ago: executing program 4 (id=1346): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) r1 = socket(0x2, 0x3, 0xff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x20, r3, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r6, 0x0) setresuid(0x0, 0x0, r6) r7 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r4, r6, r7}, 0xc) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, 0x0) ioctl$IOMMU_DESTROY$ioas(r2, 0x3b80, &(0x7f0000000d00)={0x8, r3}) syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x200100) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$netlink(r1, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000000140)={0x10, 0x3d, 0x2, 0x70bd27, 0x25dfdbfc}, 0x10}, {&(0x7f0000001240)={0x10, 0x3c, 0x1, 0x70bd25, 0x25dfdbfb}, 0x10}], 0x2, 0x0, 0x0, 0x4000000}, 0x4094) 2m31.895876361s ago: executing program 4 (id=1353): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x17, 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) (async, rerun: 64) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x40000, '\x00', @ptr=0x2}}) r3 = fsopen(&(0x7f0000000100)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)='=:,\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) (async) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003000000083512100040000102030109021f00010118100409040001010103200609058e"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000080)=0x5, 0x4) (async) r5 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f00000005c0)="f5", 0x1, 0x4c810, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) geteuid() (async, rerun: 32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x2, 0x4}, 0x8) (async, rerun: 32) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000140)='hfs\x00', 0x0, r0) 2m31.164987667s ago: executing program 4 (id=1354): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f00000003c0)={0x1, 0x0, {0x5247, 0xffffffff, 0xfffffffd}}) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m30.269350504s ago: executing program 4 (id=1356): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000b870e30ddbdf256600000008020000", @ANYRES32=r7, @ANYBLOB="0800b700760000000800a0e036f7ffff080026008a090000080027000000d34af7c3"], 0x3c}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0), 0x1, 0x40, 0x1}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000080)) syz_ublk_add_dev(r0, r10, r2, r3, &(0x7f0000000540)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) 2m14.832973442s ago: executing program 34 (id=1356): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000b870e30ddbdf256600000008020000", @ANYRES32=r7, @ANYBLOB="0800b700760000000800a0e036f7ffff080026008a090000080027000000d34af7c3"], 0x3c}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r4, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0), 0x1, 0x40, 0x1}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000080)) syz_ublk_add_dev(r0, r10, r2, r3, &(0x7f0000000540)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) 1m27.279627992s ago: executing program 3 (id=1622): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000640)="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", 0x3a2}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@private, @private, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, r2, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4, 0x4000}, {0x0, 0x8, 0x9}}}, 0xb8}}, 0x40010) shutdown(r1, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x2, 0x12) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m27.000915079s ago: executing program 3 (id=1624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000140)=0x2f2, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0xf8, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200, 0x0, 0x140, 0x0, 0xff}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffdfffffffc, 0x0, 0x2}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@proto={0x5, 0x19, 0x3c}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4050) 1m26.766192773s ago: executing program 3 (id=1626): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x4006, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x5, 0xfffffffc, 0x5, 0x4, 0x8, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x3, 0x6, 0xe661, 0x4, 0x7, 0x8, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x0, 0x8000009, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x2, 0x4e0, 0x5, 0x4, 0xb, 0x1, 0x9, 0x81, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0xfffffff9, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x4, 0x3, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x200, 0xd, 0x6d03, 0x6, 0x8, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xb, 0xa9, 0x85, 0x6, 0xac8, 0xc2, 0xfff, 0x3, 0x7ff, 0x12b, 0x7, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ef, 0x4, 0x25], [0x9, 0xbb30, 0x80000000, 0xb, 0x5, 0x9, 0x6, 0x3, 0x0, 0xb9, 0x1000ce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x100, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x6ea8, 0x407e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xffffffff, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1002]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x2f, 0x20, 0x1e70000000000000, 0xfffffffffffffffd}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0x9, @remote, 0x1}}, 0xfffffffb, 0x86f6, 0xeca, 0x6, 0xc5, 0xc5, 0xff}, 0x9c) 1m26.651923411s ago: executing program 3 (id=1627): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x1) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 1m26.507115386s ago: executing program 3 (id=1628): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x3, 0xff) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x10}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={r4, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={r4, 0xb3, "d051f0b7f55473f801a006e6d008e975a3d7e8cc3491b18bd43b996ab53b98b701d21126c555071fde49e4b0d21768c1e25d4a8db90b4f801acb3b745e01f90726150a45f0c944a34762cc42c5576c7cd60da691b34b3293c43bcf4c07e060dacd24027099d285de45a8cdf6a3b6ad0bb2d973dde016b89f0726b8bde2b7d05110df67832e44b01e464c3552ebf4dce055e053002927a4b3d2d0b06b9744f6356d436ede6473308dae09bb13d7ad572261abe3"}, &(0x7f00000000c0)=0xbb) 1m25.323169769s ago: executing program 3 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x0, 0x0, 0x3, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x3]}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x0, r4}) 1m24.961778284s ago: executing program 35 (id=1633): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r2, 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x0, 0x0, 0x3, 0x18, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x3]}}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x0, r4}) 58.032980673s ago: executing program 1 (id=1728): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x40800) 57.922109018s ago: executing program 1 (id=1729): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000140a030000000000000000000300000008000340000000000900020073797a300000000014000000110001000000000000000060a5185f0e"], 0x50}}, 0x200580c5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x223, @tick=0x1ff, 0x2, {0x87}, 0xe8, 0x2, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r4, 0x4b63, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) (async) ftruncate(r3, 0xc17a) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x1000, 0x1}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, 0x1000, 0x1}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) (async) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b80)={0x0, &(0x7f0000000840)=[@nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x456b}}, @wrmsr={0x65, 0x20, {0x9ad, 0xecb}}, @uexit={0x0, 0x18, 0xffffffffffffffc0}, @wr_drn={0x68, 0x20, {0x1, 0xbbf}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x6}}, @out_dx={0x6a, 0x28, {0xc342, 0x0, 0x1}}, @wrmsr={0x65, 0x20, {0xb50, 0x8000}}, @wr_drn={0x68, 0x20, {0x3, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest32=0x4826, 0x401, 0x1, 0x2}}, @wrmsr={0x65, 0x20, {0x400000b1, 0x7}}, @nested_amd_stgi={0x17e, 0x10}, @cpuid={0x64, 0x18, {0x8, 0x4}}, @in_dx={0x69, 0x20, {0xcc8f, 0x7}}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xeafd, 0x6, 0x7}}, @nested_vmresume={0x130, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x9, 0x974}}, @code={0xa, 0x7d, {"48b80e000000000000000f23c00f21f835010008000f23f83e66440f50c70fc76e18260f01d065433d9a310000c744240068f966cbc744240200300000c7442406000000000f011c24b805000000b9273500000f01d9410f00d0420f00deb9800000c00f3235000400000f30"}}, @nested_vmresume={0x130, 0x18}], 0x315}) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYRES32], 0x208}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f00003c4000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000380)="0f0665670fc77e00b8575a00000f23d00f21f835300000020f23f8670f01dfc4c2759d641a0bf3d0bab000000066baf80cb87e52c587ef66bafc0c66b8de6266efc4c37169caa766ba200066b8f0ff66ef66b86e000f00d0", 0x58}], 0x1, 0xd, &(0x7f0000000240)=[@cr0], 0x1) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x30002, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000300)={0x2f98, 0xb, 0x3, 0x0, 0x9}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) 57.527585843s ago: executing program 1 (id=1730): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) (async) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x7c5ad000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x7c5ad000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) fcntl$addseals(r2, 0x409, 0xfd21ffdc5030b6d5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000)={0xb, 0xc, 0xb, 0x1040, 0xffffc58b}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000000)={0xb, 0xc, 0xb, 0x1040, 0xffffc58b}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x114, 0x16, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f00007f3000/0x2000)=nil, 0x2000, 0x10) 55.559900243s ago: executing program 1 (id=1739): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1df}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000010c0)={0x101000, 0x0, 0x5}, 0x0, 0x18, 0x0, 0x12345}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_ublk_setup_io_uring(0x3d9b, &(0x7f0000000080)={0x0, 0xb82d, 0x2, 0x3, 0x3c4}, &(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0xc64e, 0x80, 0x2, 0x294}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xdbd, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) syz_io_uring_submit(r2, r5, r9, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xc, 0x1, &(0x7f0000000240)="df07a9b8a33379110126ed98f6641d6c6bb1aef29152c2be0495c50e611065a77f66ab3a1eda686b93345c9c41ec87270de8c84ebc3bb9c7a341a932f70ab261f7475f5dad2d631fc641a4a3a1", 0x9, 0x0, 0x1, {0x1}}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r10, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r10, 0x1) r11 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x2, 0x1e5, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$cec(0x0, 0x0, 0x442e60) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x200000, 0x0, 0x0, 0x7}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) r15 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r15, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 54.807827877s ago: executing program 1 (id=1748): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x40800) 54.563569455s ago: executing program 1 (id=1749): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r0, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) (async) socket$nl_generic(0x10, 0x3, 0x10) 39.432063985s ago: executing program 36 (id=1749): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r0, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) (async) socket$nl_generic(0x10, 0x3, 0x10) 12.273523222s ago: executing program 7 (id=2068): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) setrlimit(0x40000000000008, &(0x7f0000000000)) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x36) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, 0x0) shutdown(r0, 0x1) 12.049986173s ago: executing program 7 (id=2071): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x25, 0xa, 0x6, 0x10, 0x8, 0xa9, 0x3, 0x23, 0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0x6f75, 0x2, 0x2, 0xfffffffd, 0x0, r1}, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000000)) syz_io_uring_setup(0x756d, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x34f, 0x0, r2}, 0x0, 0x0, 0x0) 11.787959127s ago: executing program 7 (id=2074): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a80080090400000103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="14002c80080000009d03"], 0x48}, 0x1, 0x0, 0x0, 0x400c080}, 0x22000000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) read$nci(r5, 0x0, 0x0) write$nci(r5, 0x0, 0x5) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) writev(r0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="f481afca2aa6a121d8e91e5aaed5f10d98ec3ded16eb1fe2362ced9f9f8153d9ee3afa5f509420729ed92c13a4b00114b63bffc8d6e5e35a14478de54e536f6a1e3f106771741a411cdc935f57d780a9994688d96846ed3d3d1ee8590fabbf619d51e10571988dcbe698d1bcf20ad0f572865d1ceaa974e84edad8f96031a987a9", 0x81}], 0x1) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[], 0x2a) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000140032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 11.13957766s ago: executing program 8 (id=2085): bind$alg(0xffffffffffffffff, &(0x7f0000001140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200000024"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3a0100000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588000880"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) 11.08096785s ago: executing program 8 (id=2087): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x81}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44000) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000080)={0x40, 0x30, 0x71, "ee4794e2670cf9358def7abd8fd5b22a8d183b63f1c2c3102edc3e99cffb121a92e9ad068cf76b4103df381bc2831f2da53f431d7a5b80f8a1e588f44cd68a685e987ab950667110cac20a73c5f2ee9058312a1c491ea2770f7851154e109970343e8d2686dce8ff0c5cbc4a5fd410e353"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10.22914899s ago: executing program 7 (id=2090): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x40) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 7.859735224s ago: executing program 8 (id=2108): syz_usb_connect$uac2(0x5, 0xde, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2a39, 0x3fb0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x5, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x2e, 0x3}, [@multiply_unit={0x7, 0x24, 0xc, 0x3, 0x3, 0x2}, @extension_unit={0x7, 0x24, 0x9, 0x4, 0x9, 0x3e}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x101, 0x3, 0x5, 0xb, 0x6, 0xd4}, @effect_unit={0xb, 0x24, 0x7, 0x5, 0x3, 0x1, [0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x0, 0x6, 0x3, 0x5, 0x9, 0x58e4701e, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfc, 0x6, 0x3, {0x8, 0x25, 0x1, 0x3, 0x3c, 0xf8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xd, 0x6, 0x5f, "03"}, @as_header={0x10, 0x24, 0x1, 0x3, 0x0, 0x2, 0x5, 0x0, 0x5, 0xd}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xbe9, 0xc0, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xd9, 0xaa, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0xd0, 0xc, {0x8, 0x25, 0x1, 0x0, 0x3, 0x7}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0xab, 0x5, 0xf, 0x10, 0xa}, 0x8, &(0x7f00000001c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0xcb, &(0x7f0000000400)=@string={0xcb, 0x3, "f8b5e1510c7695960f044b81c4a9c197bf45d4fb31b5a8af6e261d339751970318a82e92988a88d53c8bc80ac5b8ae430e228fc7a3830b22e84368b70bdeba265fdae1c052f11391537031edeb480f8930c8f6bc0f302f12a662424caca67f2330a882cd73e3e162918239325cd72f01e39e0a64030afd9131d8a9bae44f988930fac35f4da7bc7d2cfa13a9af77f1eb9b1fafe16efd694e4e6fafb6f3214ea3e8cddf09d0ea27d42bafe292267bbeb9f8f94e27428cb0904819bcf01e38698132e3d7c9be5ae2a630"}}, {0x3a, &(0x7f0000000500)=@string={0x3a, 0x3, "fc47d4186ef5be99dba40c9ba83974e37242009b3bd6c9f9f511af4132b0c9f678762efc3f3056beef72af85d3dfdf79a80005e1341ba888"}}, {0x10, &(0x7f0000000540)=@string={0x10, 0x3, "4920d833c85c10a4a18f3cff37a3"}}, {0x8c, &(0x7f0000000580)=@string={0x8c, 0x3, "5c8067b80425765219f847ee1027d2c83220717546f8f5100709ed1923dca27da1a73bfdbee3503e26731f89e1118f7419fec933aa2fbd604e4b631a8ae4b4a5a0e583e1793871fd1b0f7b9b2376f28be948fe67f81c34b8293c4c63dfbf0a5488d4af56b15382672be28e12152c984eb9070adbd54cb9cd22031ab14cee1540b000af51203084223c9d"}}, {0x21, &(0x7f0000000640)=@string={0x21, 0x3, "6114465cd98819f6a9d2a56cce4d9d8641050b486787bf7eed283b18b02250"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x2809}}]}) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000300)={0x118, 0x6, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x7fff, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) 7.267733864s ago: executing program 7 (id=2110): unshare(0x6a040000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local, 0x80, r1}) 6.577406101s ago: executing program 8 (id=2111): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x104, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff7321", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="202336000000360583efb930f00f4a3d16af575a9d31f4ec4368187ff0478fa22a61a54607b71ea9e43d359c479ca21a1413491fef7c7b08fc0a59a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x104, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@empty}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff7321", @typed={0xc, 0xe9, 0x0, 0x0, @u64=0xd0}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="202336000000360583efb930f00f4a3d16af575a9d31f4ec4368187ff0478fa22a61a54607b71ea9e43d359c479ca21a1413491fef7c7b08fc0a59a7"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 3.729341769s ago: executing program 7 (id=2124): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xd393, 0x20, 0x0, 0xa1}, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8334, 0x8, 0x0, 0x28f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b10, 0x0, 0x0, 0x50}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17e2, 0x8000, 0x1, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x982f, 0x8000, 0x0, 0x14c}, 0xffffffffffffffff}], 0x4, &(0x7f00000019c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0xc91, 0x0, &(0x7f00000009c0)=@buf_4k="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"}}, &(0x7f0000001a40)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fstat(r2, &(0x7f00000025c0)) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001640)={0x2e, 0x43, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xe}, 0x0, 0x0, '\x00', {0x3, 0x5fe, 0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x7c5ad000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x0, 0x5, 0x28, {0x28, 0x21, "83efb930f0180013cfc3e3550378d171a9682069231bdbc992a1bda5b9521601970900000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.487445314s ago: executing program 8 (id=2126): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="0c0100001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000a8000580a400ce80a0003e809c00a0809800618094009d808d0063800400a500100090800c00198008001000", @ANYRES32=r0, @ANYBLOB="040070800c001c00090000000000000008002e00", @ANYRES32=0x0, @ANYBLOB="2800de8008004d00", @ANYRES32=r0, @ANYBLOB="1c00328008000800f7ffffff0400888008002f006401b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f04e8a5831b744ae9997123bfc43c00b880000000"], 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000480)={@val={0xa}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x5}}, {@ipv6={0x86dd, @tcp={0x3, 0x6, "97aca7", 0x15, 0x6, 0x0, @empty, @mcast1, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x401, 0x0, 0x800}, {"84"}}}}}}}}, 0x57) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) lsm_get_self_attr(0x68, &(0x7f0000000100)={0x0, 0x0, 0x44, 0x24, ""/36}, &(0x7f0000000180)=0x44, 0x0) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 3.286017955s ago: executing program 6 (id=2129): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7", 0x12, 0x100, 0x9}], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffe) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20005005) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a11", 0x1f}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, &(0x7f00000039c0), 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.578406381s ago: executing program 6 (id=2133): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x11, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xaf\x86%\xa5\x83\xa6\xb5\\\x8a#\x0f\xe6E\x84;\t\xee\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x16\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0c@\x00*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\x01\x00\x00\x00h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&\xa6\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\t\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xa8:\x8f|\x8f\xe9\x8d\x9cH6`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xc3E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCu\n\xd8;\x0e%\x99\x9fk\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04L\xfbT2\xd4\"\x1e\xf0\x16N\xd8O\xaf}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0\a\x00\x00\x00\x00\x00\x00\x00T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}EY\x95&\x03\xf5U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xb1\xd8\xe1\xda\xcb\x14\xb8K\x12\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_\x8e\r\xa14\xd2\x99d \x97c9G\x99\xe3\xcc$\x96au\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xebK\xc5+y\xfe\v\x9aq\xe3\xa0wwG=\x7f\xd3\xc5S!\xff\xd2\xcaX\xcb%\xfdg\x9f\x1fC\xedY\xb6q*\xd8\x1f\x1a\xe7LX\x7fXX\xa5\x9b*&b\x85\xady\xfd\xf6\xe3,\x82d\xcd2;?\xb4\xdb\xd0O\xb6-7I1\"\xd8\x1e\xacPp\xf7PnB\xdb\x93\x8e\x1b\xad\xf5t\nq\x161X\xcc,\x1fk\xc7\xb9\x03\\\x89 \xd2\xaa\xf96\xad\x93\xe6!\r\xbdjue\xb4\v\xc0\x04\xf0f1q\x16\xcfh\'\xbd\xae\xa7u\xb6\x82Q\xd5V&;\x86zOf\xccQ:>Nq\xf5)^\x10\xae\xad\xc8\xb8\xc0\xed|W{*\xce}v!x\xbf\xe1P\xd9\x9fXf\x84\x00\x00\x00\x00\xa7\xbc\x9f#\xd7{V\x1b\xa3\vp\v\x00\xc1n\xa4C\xf2p\x96`w\xb5YDW\x99\xb7V\xa2Nc\xdd\xe09\x00\xb4\x8a\xa4\xd8\xd8/\xf1\xf6\xf6]\x8a\xaf\xe0\vIf\n\xc4\xae\xad\xac\xf8S@\x87X\xa6\xc6i\xa3Z\x03\x1a\x1f\xdc\x99\xf0f\xf1\xa7\xe8Mc\v\a\xe2x\"\xc3k\xf0\x91 \xd8\xa7\xa8\xab\xff\xe3M\xd5\x1fEvLhO\xa0Ef\xcf\xdd\x05\xaftm\xe8\xfa\xa3\x8d\xca\x8f2\x98\xac\xdf\x93\x13&:MC\xc2^\x8c\xc9\xe3f', 0x6) fcntl$addseals(r1, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x12, 0x0, 0x0, 0x80}) r2 = socket(0x9, 0x6, 0x4000003) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write(r4, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r9, 0x410, &(0x7f00000000c0)={0x2, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r9, 0xa9525000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r2, @ANYRES16=r7, @ANYBLOB="00032dbd7000fddbdf251b00000008000100", @ANYRES32=r5, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="060019001f9200005e0019004e377be2b2bc1a24a8e4aff9643617f7b7325f19875f675d08545da25bfd25121bb79c3738b456580d690d7f9c4c5de59990cf02b3f6b6a4ddecf19e48f5611f7e0ca1c6d82b6164c7d5aaf28f20095f5246aecffeb7147f6e0e000008000100", @ANYRES32=r5, @ANYBLOB="08001500c000000008001500000000000800150002000000"], 0xac}, 0x1, 0x0, 0x0, 0x10040880}, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000003b40)=[{0x6, 0xb, 0x0, 0xe4}, {0x3, 0x3, 0x2f}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r10, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="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", 0x33f}], 0x1}}], 0x1, 0x2892) 1.273606493s ago: executing program 5 (id=2143): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058acf"], 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002dbbe8308d112888b59f3010203410902"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (rerun: 32) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@empty}, 0x14) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002440), 0x82000, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xc6, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0xf9, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6b9, 0x4e}, [@feature_unit={0xb, 0x24, 0x6, 0x5, 0x5, 0x2, [0xe, 0xa], 0x7}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x2, 0x4, [0x8, 0x1, 0x9, 0x7], 0x80}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x4, 0x3, [0xa, 0x4, 0x4], 0x1}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x2, "2044090bd2"}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x6, 0x6, [0x1, 0x5, 0x8, 0x7, 0x7, 0x1], 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0xd7, 0x7f, 0x0, 0xff}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x3, 0x0, {0x7, 0x25, 0x1, 0x0, 0x7f, 0x8f0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x0, 0x91, {0x7, 0x25, 0x1, 0xc, 0x5}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x1, 0x56, 0x6, 0x40, 0x9}, 0x83, &(0x7f0000000180)={0x5, 0xf, 0x83, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x44, 0x4, 0x8000, 0xf00, 0x40, [0xc030, 0x3ff0, 0xc180, 0xffc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0xf, 0x1}, @generic={0x3b, 0x10, 0x4, "415035e5720f14de7f539fd819f9604ebbcc21c07f2fe86536dbcc0f4ebb47f4b6eb34c1b130717697f74f32e906a65e70add603cc331c55"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x6, 0xf000, 0x5}, @ss_container_id={0xfffffffffffffff3, 0x10, 0x4, 0x9, "50dc16c5000000a0a837c400"}]}, 0x4, [{0x17, &(0x7f0000000240)=@string={0x17, 0x3, "c6dc6c91406e731d155b4e6db64bbaafa12ea43141"}}, {0x94, &(0x7f0000000280)=@string={0x94, 0x3, "882f59da67ab40f398dcc19e375bf784b28570c41f3db3677c77a0c6987657a741c690dd469b5c881b501058f7205144504aac387a83ddf8ca9a644c49c8868099cb712da9fa0fefddceb42f82198b729bee5b90743f0e6e235a13027d7206999190f502c562f7b510d726cd46e2f6c77755d85b8ce7ba3ac3327cbd1a0e1aa557c79fefe169255310893d507b22525a760d"}}, {0x17, &(0x7f0000000340)=@string={0x17, 0x3, "df3cfadd70807aef8bf4bcfb187c59dc962f534a58"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x457}}]}) (async) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) (async) syz_usb_connect$uac2(0x0, 0xb2, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x7, 0x20, 0x40, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x9, 0x1c, 0x54}, [@effect_unit={0x13, 0x24, 0x7, 0x5, 0x0, 0x1, [0x1, 0x1, 0x3, 0x3, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0x1, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x81}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x2, 0x6, 0xff, "d4f3d0bd11b1b8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x260, 0x81, 0x0, 0x3, {0x8, 0x25, 0x1, 0x3, 0xc, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x7f, 0x0, {0x8, 0x25, 0x1, 0x2, 0x3, 0x0, 0xfffa}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x201, 0x80, 0x4b, 0x0, 0x10, 0x6b}, 0x19, &(0x7f00000007c0)={0x5, 0xf, 0x19, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x22, 0xf, 0x9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0xfd, 0x4}, @ptm_cap={0x3}]}, 0x3, [{0x101, &(0x7f0000000800)=@string={0x101, 0x3, "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"}}, {0xc7, &(0x7f0000000940)=@string={0xc7, 0x3, "4ec3e09eb87c53e3818debc8d6b04db1fabf43315455de25030d465763422af392d3357acce48b9bf816d0c942b5c3c414ffc89c1018e0f825443402cd74a25b333cd24d978a52edbf402d12cbcc15df72a84ab7c10f23308c83414a15b6844abc8d434177bf64d046347cc4908f178f9fb4ab02e841d58f584b019188c0b2124fce43ecd59c727f449a008db8ae82eacb01a1cf7e11326ad5be5a0e3efb60fa9fdfe77691187c9d2fe2d74ea5bb31632efe184f2f064d8c6a2f0b4b74b7fb4d753fbb4760"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x424}}]}) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000680)={0x0, 0x1, &(0x7f00000004c0)=""/85, &(0x7f0000000540)=""/15, &(0x7f0000000580)=""/248, 0x58000}) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async, rerun: 32) r8 = accept$alg(r7, 0x0, 0x0) (rerun: 32) write$binfmt_script(r8, &(0x7f0000000300)={'#! ', '', [{0x20, '?\x14\xf9+\xd3\xa5d\xe0\x8a,\x17\xfbM\x87T\x87p\x90\xd4\x1b\xf9?l\xad\x19\xe8\xcd7\x8c#\xcf\f\x00F\xec\xc8\x01\x1a\xccO\x1aj7}\xdaz\xd7\xfe\x91\xffs\xb2r\xc8|l\xde\xaf\xac\xd0Z\xdb1\xbb\x02N2\x01\xbeI#\x0f\xd1P$\x81\xb6\xf6\x116\x01 \xbd\xe8\x9e9\x89F0\x8f\xe8h\xf0\x12\x8f,\xdcMx\x9d\xcf\x01\x8a\xdb'}]}, 0x6d) (async) recvmmsg(r8, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000b40)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r3}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4001) 1.019220834s ago: executing program 5 (id=2144): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa00090581"], 0x0) 1.017098559s ago: executing program 8 (id=2145): getrusage(0xa91cf7235ff6ad6d, 0x0) r0 = getpgrp(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) lseek(r2, 0x8, 0x2) waitid(0x2, r0, &(0x7f0000000080), 0x1000000, &(0x7f0000000100)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r4 = socket$netlink(0x10, 0x3, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1, 0x0, 0x20001) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 803.680563ms ago: executing program 5 (id=2146): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) lstat(0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_emit_vhci(&(0x7f00000022c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x9}}, @l2cap_create_chan_rsp={{0xd, 0xbd, 0x8}, {0x6, 0x6, 0x5, 0x3}}]}}, 0x1b) r1 = syz_open_dev$mouse(0x0, 0x1, 0x500) fstat(r0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000005a40), 0x2, 0x0) pipe2$9p(&(0x7f0000005a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) close(r2) setxattr$security_evm(0x0, &(0x7f0000005b00), &(0x7f0000005b40)=@ng={0x4, 0x4, "d18634ff1f59fd257fba171fa0df"}, 0x10, 0x3) lchown(&(0x7f0000005b80)='./file0\x00', 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000005bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x46e, 0x5578, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1e, 0x60, 0x81, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x6f, 0xb0, 0x1, {0x22, 0x3dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfe, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7f, 0xc0, 0x3}}]}}}]}}]}}, &(0x7f0000005dc0)={0xa, &(0x7f0000005c00)={0xa, 0x6, 0x300, 0x3, 0x81, 0x80, 0x20, 0x2}, 0xd8, &(0x7f0000005c40)={0x5, 0xf, 0xd8, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xc9, 0xd4, 0x4, 0x4, 0x7}, @generic={0xc8, 0x10, 0x1, "b48566e18cf272f29861abc2f1b3d07aad25edb0de2fe031363d2042370abd28cebdd923f5a0d4ea896bc061856c937b1bc43fd31ad4aaf0bcd5d95a50677d668df8fb158ac324fc2dd6571230605c42850b69454391bed4a232c9a3a06a239101cf6b8788add4c5c7516da05c68b14feb1f80a468be48f5a5c0de365630fae1fa5b2856dc8c5c2bc67a62819df4ca4a9bd9348761e1fa1afdc67ecad74f61b0ae8ade87d5e535c60d173553395dea83916cec6ff05d14b9b6a5da5a51461ee3daab4abfed"}]}, 0x2, [{0x4, &(0x7f0000005d40)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000005d80)=@lang_id={0x4, 0x3, 0x80c}}]}) syz_usb_control_io$hid(r3, &(0x7f0000006000)={0x24, &(0x7f0000005e00)={0x20, 0x23, 0xa4, {0xa4, 0x22, "57c59a0da59333fad65b3c32ade9580cbb1bd24fa12354520a067271b466bdccfa2cc32b31a80b658a64f962b09c929b477d8812413e82943e73fd55cefd9c567fabd8593549a208c354415664ba4d4e77f14395805698ececfe234308ec7d8ed206ea217873b3cf6ba807272cfb06a5dd3007815f59e202978c472ebe9cedb0c4f3b314194f25a1bba755eb45fdbec3b7255d6092ad2f4523c3230a12ec1ff97ff5"}}, &(0x7f0000005ec0)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "c7e9ee11dfb80f2acb74681cb53ec76d579bff935106d1ae662906fb15e0eaa0ac5f97f43414ee5f6319f43e189ce974ffbea8b202fcf6966feb742d8ba4419117808cc848edbb8d4ae60297b395556574b33739ebe5834303fce12d36c94e7f882fe2cbe2027def1a8a39695b93c568ae5be07c2b33cf5c589f6f6e5f6b841e3698a110eca62233ab6e07386a89ae001113797614decf5af56143f539b35082a3f777b497a46cae8751350ae3036c"}}, &(0x7f0000005f80), &(0x7f0000005fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x1da}}}}, &(0x7f0000006240)={0x2c, &(0x7f0000006040)={0x40, 0xf, 0xfa, "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"}, &(0x7f0000006140)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000006180)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000061c0)={0x20, 0x1, 0x9, "e891aa098ce06903a8"}, &(0x7f0000006200)={0x20, 0x3, 0x1}}) connect$unix(0xffffffffffffffff, &(0x7f0000006280)=@file={0x0, './file0\x00'}, 0x6e) open(&(0x7f0000006880)='./file0\x00', 0x403, 0x48) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f00000068c0)) 803.322745ms ago: executing program 6 (id=2147): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd, 0x42, 0x6, "3eccd200"}) (fail_nth: 1) 591.371141ms ago: executing program 5 (id=2148): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000080)={0x2, r0}) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd, 0x42, 0x6, "3eccd200"}) 482.050089ms ago: executing program 6 (id=2149): bind$alg(0xffffffffffffffff, &(0x7f0000001140)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200000024"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3a0100000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588000880"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) 388.039822ms ago: executing program 5 (id=2150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6a3, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x7, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x20, 0x8, 0x5b, {0xffffffffffffffc7, 0x8, "e759cf47a88a35257e746fb1404290136b7103fa8811ba6760f3de610b545a108c927447cefa13e8bec30a6115f5543869d9b5be331a78b29648cea19216dd5e451b9358d6c8c0ca0e2dac5135001a689eebab0f40e14f34e9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 248.951291ms ago: executing program 6 (id=2151): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'ni_daq_700\x00', [0x1000100, 0x2, 0x80000003, 0x6, 0x28, 0x0, 0xf7, 0x8, 0x80ffe, 0x2, 0x0, 0x6, 0x1003, 0xd2, 0xf, 0x5, 0x63, 0x7ffffffd, 0xdf, 0x200009ea, 0x20000010, 0x40000, 0xc, 0x3fd, 0x10, 0x4, 0x5, 0x7, 0xfffff801, 0x200002, 0xfffffffe]}) (fail_nth: 3) 168.917983ms ago: executing program 5 (id=2152): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff, 0x1}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2088}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x57}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}}, 0x0) (async) syz_usb_connect(0x0, 0x198, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0xf6, 0x9a, 0x89, 0xff, 0x1740, 0x7100, 0xce17, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x186, 0x2, 0x3, 0xa, 0x0, 0x4, "", [{{0x9, 0x4, 0x88, 0x8, 0x9, 0x1d, 0x2d, 0xb0, 0xc, [@hid_hid={0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x705}}], [{{0x9, 0x5, 0x6, 0x3, 0x7cf, 0x7, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0xd}, @uac_iso={0x7}]}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x9, 0x2, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xce, 0x40, 0xb}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0xf5, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0xb, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x200, 0xf, 0xc, 0x5}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x80, 0x5, 0x9, [@generic={0x5a, 0xc, "c3f612ef1ac250d3c93dc0bb95570094e22bf1cfd5372aef4b4c41c34b8d479e75ebbafb08143d6c3ae7cc314619c3451c8d1df404cec7d692acc05dd0185546eb58929e9ab3e1159e409727e3e498e8bfd5ab83665226c6"}]}}, {{0x9, 0x5, 0xb, 0x16, 0x8, 0xc6, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4}]}}]}}, {{0x9, 0x4, 0x1d, 0x7, 0x6, 0xdb, 0x6e, 0xed, 0x8, [], [{{0x9, 0x5, 0x5, 0x1, 0x40, 0x8, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x2, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0xaf910ba52471a0e0, 0x400, 0xfb, 0x4}}, {{0x9, 0x5, 0x0, 0x13, 0x200, 0x10, 0xf9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xff, 0xff, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x6, 0x6, 0x7, [@generic={0x3b, 0x6, "79accc0d0eba626d081d0a446cb97debc139cc7db2cd159479a0dffefb94396696659fe08718e5d9f6eaaa8fa653fee7b95484f62d3bff7279"}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x9, 0x2, 0x0, 0x40}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x3, [{0xbe, &(0x7f0000000400)=@string={0xbe, 0x3, "5abe1e24359270521fdec48c76ca905401e0ee957ef87914e0e00ab70d5ab4f72b3bcdcd7ad4434c0967076b729c78a59d674c85372320495c4fe0607bee8f5fd91ba8059401c98961e1d7bad6108bf5231661ed959e2516bb28f864b3366e8d02060376a91f0b4ee16c39d0bae514cdb79c7d3a232e5d66d4f51279497c49a502fd94ca8391b8a53e61cde1056ee6c4aa4d8eb3d76f5e44b4cce366e6d35b44d050a86962cbc3ac536a2152c30bca3e14dd7bf55f6709cd00869a25"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x400a}}]}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000580)={0x9, 0x5, 0xd8, 0x908, 0x8}) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000700), &(0x7f0000000740)={0x0, 0xfb, 0xe8, 0x7, 0x7, "5ac910cd6faabb34e66b38c7ae21b02b", "223c0390f7c2adaa7d1a42c7ff102452f49f88e22a1e2332cac36e62955cabd1cf3205cee02c32b44f30e4ba630917c6f369b82f0b1ad586e748c3a9aabf33e7d7289781ed96a41127b1449c48e716fb06367ce7690fbafb6929fe5152562cd383cf633801f7e2525ddb12a0a8c772daf8c2affa3b0766537eaab1ac4ec897e7a9dc752a1e035dc391537317292c171f64a09abe490f4eae563b3172ce4a90e363938e58134c2379f2abbbb071a772123aaa5c07c9dd78fa7509193b6db4696afc2ee9fab8a2136bfcede39f5bcc62ec17d372"}, 0xe8, 0x3) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000940)={&(0x7f0000000840)=""/232, 0x0, 0x1000, 0x5, 0x2}, 0x20) (rerun: 64) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x65}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) fsetxattr$security_capability(r0, &(0x7f0000000a80), &(0x7f0000000ac0)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x3) (async) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000b00)='+)[r@\\\xf6+]{&*\xaa\x00') r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000b40)={'#! ', './file0', [{0x20, ' -'}, {0x20, '#}'}, {0x20, '}\\]'}, {0x20, 'trusted.overlay.upper\x00'}], 0xa, "0f9102de090cbc"}, 0x33) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x48, 0x1404, 0x2, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x20000814) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2480, 0x0) ioctl$int_out(r4, 0x0, &(0x7f0000000d00)) (async) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2dda2635d2"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000e40)=0x8000, 0x4) (rerun: 64) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000f40)={{[0x400, 0x8, 0x8, 0x9]}, 0x0, 0x3, 0x1, 0x0, &(0x7f0000000e80)=[{{@_ha_fsid={[0x3, 0x2]}, {0x7, 0x1, 0x6, 0xffff}}, 0xecb8, 0x0, 'security.capability\x00'}, {{@_ha_fsid={[0x7, 0x1]}, {0xfa, 0x39, 0x1, 0x9}}, 0x6c, 0x0, 'security.capability\x00'}, {{@_ha_fsid={[0x9, 0xffffffff]}, {0x2, 0x0, 0xcd, 0x6}}, 0x449, 0x0, '+)[r@\\\xf6+]{&*\xaa\x00'}]}) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000f80)={'veth1_to_bond\x00', {0x2, 0x0, @local}}) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/sys/kernel/softlockup_count', 0x240, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) getpeername$unix(r5, &(0x7f0000001000)=@abs, &(0x7f0000001080)=0x6e) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000010c0)={0x0, 'ipvlan1\x00', 0x1}, 0x18) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r5) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000001340)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f0000001180)={0x150, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbc6d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x10008401) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r7, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 6 (id=2153): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090400810000002001000000000000080004000100006d", 0x24) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f40700090400810000002001000000000000080004000100006d", 0x24) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)={0x5c, 0x0, 0x0, 0x0, 0x3, [{0x5b, &(0x7f0000000040)=@string={0x5b, 0x3, "d880291ffbf599e6beab845f4029c5c9312784d59c1987fc31c91cb5fbb09b5fbf634fcc37283a9278a9b99bceb57762ebc62df4cc5c8804de2e9bf9a065c20e22e813281a6a70d51ded8388db80523350e30af4e5de238325"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x44d}}, {0x34, &(0x7f0000000280)=@string={0x0, 0x3, "bf9aa7f6f09b359969db35983507182d091869ceac38e96f3d3c066888874c9396f52b4f64d88a77555644044ad636ea5f5e97ae438dededa04b83d1c8ec8f2d18b613046a65e6572504adea172cd44b5d8ca71155ba889d417d02be5c14db5232f894dfbb5618dddf7785fb3862ab6773ba2f5936ecb028474faa62201af57830615e75607ba9"}}]}) kernel console output (not intermixed with test programs): ax_send_sge=6 max_recv_sge=6 [ 500.509638][T11530] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 500.549523][T11530] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 500.596658][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.596693][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 500.596707][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.596729][ T5716] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 500.596741][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.612670][ T5716] usb 6-1: config 0 descriptor?? [ 500.635999][T11236] veth0_macvtap: entered promiscuous mode [ 500.704559][T11236] veth1_macvtap: entered promiscuous mode [ 500.831435][T11236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.836471][T11530] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 500.885874][T11236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.914424][ T5716] hid_parser_main: 6 callbacks suppressed [ 500.914447][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914478][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914539][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914566][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914592][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914618][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914643][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914668][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914709][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.914734][ T5716] magicmouse 0003:05AC:0324.0016: unknown main item tag 0x0 [ 500.995453][ T5716] magicmouse 0003:05AC:0324.0016: hidraw0: USB HID v7f.fd Device [HID 05ac:0324] on usb-dummy_hcd.5-1/input0 [ 501.013107][ T6024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.028590][ T6024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.029241][ T6024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.030662][ T6024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.084205][ T5716] usb 6-1: USB disconnect, device number 64 [ 501.311549][T11531] fido_id[11531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 501.328160][T11530] lo speed is unknown, defaulting to 1000 [ 501.434094][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.434151][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.525743][T11530] lo speed is unknown, defaulting to 1000 [ 501.556967][T11530] lo speed is unknown, defaulting to 1000 [ 501.566346][T11530] lo speed is unknown, defaulting to 1000 [ 501.578849][T11530] lo speed is unknown, defaulting to 1000 [ 501.581497][T11530] lo speed is unknown, defaulting to 1000 [ 502.254620][ T32] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 502.417549][ T5703] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 502.423749][ T8469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.423768][ T8469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.447717][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 502.454206][ T32] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 7 [ 502.472007][ T32] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 502.472036][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.472057][ T32] usb 2-1: Product: ﳿ [ 502.472072][ T32] usb 2-1: Manufacturer:   [ 502.472087][ T32] usb 2-1: SerialNumber: 뗸凡瘌隕Џ腋꧄韁䖿ﯔ딱꾨♮㌝冗Ηꠘ鈮誘했謼ૈ룅䎮∎잏莣∋䏨띨⚺샡鄓灓䣫褏젰볶』ሯ抦䱂ꚬ⍿꠰춂拡芑㈹흜į黣搊ਃ釽목俤覘侮心ꝍ綼館ꤓ瞯ᾛﵮ乩潎뚯⇳ꍎ취য়퐧꼫鋢符릾笠❎豂邰᥈㠞腩짗媾ꛢ [ 502.581638][T11549] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1694'. [ 502.617736][ T5703] usb 6-1: Using ep0 maxpacket: 16 [ 502.620573][ T5703] usb 6-1: config 4 has an invalid interface number: 106 but max is 0 [ 502.620598][ T5703] usb 6-1: config 4 has no interface number 0 [ 502.620629][ T5703] usb 6-1: config 4 interface 106 has no altsetting 0 [ 502.624506][ T5703] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=62.b1 [ 502.624534][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.624555][ T5703] usb 6-1: Product: syz [ 502.624569][ T5703] usb 6-1: Manufacturer: syz [ 502.624635][ T5703] usb 6-1: SerialNumber: syz [ 502.652903][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.652921][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.814312][T11551] netlink: 122 bytes leftover after parsing attributes in process `syz.6.1695'. [ 502.829417][ T32] usb 2-1: unit 11 not found! [ 502.984485][ T5703] as10x_usb: device has been detected [ 502.985355][ T5703] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 503.039096][ T5703] usb 6-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 503.298882][ T32] usb 2-1: USB disconnect, device number 39 [ 503.737722][ T5703] as10x_usb: error during firmware upload part1 [ 503.740135][ T5703] Registered device PCTV Systems picoStick (74e) [ 503.755614][ T5703] usb 6-1: USB disconnect, device number 65 [ 503.889256][ T5703] Unregistered device PCTV Systems picoStick (74e) [ 503.893743][ T5703] as10x_usb: device has been disconnected [ 504.174601][T11578] netlink: 122 bytes leftover after parsing attributes in process `syz.6.1703'. [ 504.206367][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.978645][T11601] FAULT_INJECTION: forcing a failure. [ 504.978645][T11601] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 504.978682][T11601] CPU: 1 UID: 0 PID: 11601 Comm: syz.7.1707 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.978710][T11601] Tainted: [L]=SOFTLOCKUP [ 504.978717][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 504.978729][T11601] Call Trace: [ 504.978737][T11601] [ 504.978745][T11601] dump_stack_lvl+0xe8/0x150 [ 504.978776][T11601] should_fail_ex+0x46b/0x600 [ 504.978810][T11601] prepare_alloc_pages+0x22a/0x6b0 [ 504.978848][T11601] __alloc_frozen_pages_noprof+0x12f/0x380 [ 504.978879][T11601] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 504.978911][T11601] ? __pfx_policy_nodemask+0x10/0x10 [ 504.978947][T11601] alloc_pages_mpol+0xd1/0x380 [ 504.978978][T11601] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 504.979008][T11601] vma_alloc_folio_noprof+0xe1/0x1e0 [ 504.979038][T11601] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 504.979075][T11601] copy_pmd_range+0x4ba0/0x5550 [ 504.979125][T11601] ? lockdep_hardirqs_on+0x7a/0x110 [ 504.979161][T11601] ? __pfx_copy_pmd_range+0x10/0x10 [ 504.979186][T11601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.979213][T11601] ? rt_spin_unlock+0x14f/0x200 [ 504.979240][T11601] ? rt_spin_unlock+0x160/0x200 [ 504.979266][T11601] ? __pud_alloc+0x348/0x460 [ 504.979293][T11601] copy_page_range+0xb3f/0x1150 [ 504.979341][T11601] ? __pfx_copy_page_range+0x10/0x10 [ 504.979392][T11601] dup_mmap+0xf5a/0x1d70 [ 504.979440][T11601] ? __pfx_dup_mmap+0x10/0x10 [ 504.979464][T11601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 504.979499][T11601] ? copy_mm+0x10f/0x480 [ 504.979528][T11601] ? copy_mm+0x10f/0x480 [ 504.979571][T11601] copy_mm+0x11a/0x480 [ 504.979602][T11601] copy_process+0x1e30/0x43d0 [ 504.979637][T11601] ? copy_process+0xd4e/0x43d0 [ 504.979684][T11601] ? __pfx_copy_process+0x10/0x10 [ 504.979713][T11601] ? get_pid_task+0x20/0x1f0 [ 504.979732][T11601] ? get_pid_task+0x20/0x1f0 [ 504.979762][T11601] kernel_clone+0x2d7/0x940 [ 504.979797][T11601] ? __pfx_kernel_clone+0x10/0x10 [ 504.979824][T11601] ? do_raw_spin_lock+0x12b/0x2f0 [ 504.979862][T11601] __x64_sys_clone+0x1b6/0x230 [ 504.979885][T11601] ? __pfx___x64_sys_clone+0x10/0x10 [ 504.979921][T11601] ? __pfx_ksys_write+0x10/0x10 [ 504.979957][T11601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.979979][T11601] do_syscall_64+0x174/0x580 [ 504.980007][T11601] ? trace_irq_disable+0x3b/0x140 [ 504.980029][T11601] ? clear_bhb_loop+0x40/0x90 [ 504.980054][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.980073][T11601] RIP: 0033:0x7f09d574ce59 [ 504.980092][T11601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.980108][T11601] RSP: 002b:00007f09d3984fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 504.980129][T11601] RAX: ffffffffffffffda RBX: 00007f09d59c6090 RCX: 00007f09d574ce59 [ 504.980144][T11601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 504.980157][T11601] RBP: 00007f09d3985090 R08: 0000000000000000 R09: 0000000000000000 [ 504.980169][T11601] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 504.980182][T11601] R13: 00007f09d59c6128 R14: 00007f09d59c6090 R15: 00007ffdea637b48 [ 504.980214][T11601] [ 505.466875][T11574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.206088][T11639] 9p: Bad value for 'wfdno' [ 506.377640][ T1254] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 506.382374][T11644] FAULT_INJECTION: forcing a failure. [ 506.382374][T11644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 506.382409][T11644] CPU: 0 UID: 0 PID: 11644 Comm: syz.1.1720 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 506.382437][T11644] Tainted: [L]=SOFTLOCKUP [ 506.382444][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 506.382456][T11644] Call Trace: [ 506.382463][T11644] [ 506.382472][T11644] dump_stack_lvl+0xe8/0x150 [ 506.382501][T11644] should_fail_ex+0x46b/0x600 [ 506.382536][T11644] prepare_alloc_pages+0x22a/0x6b0 [ 506.382571][T11644] __alloc_frozen_pages_noprof+0x12f/0x380 [ 506.382601][T11644] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 506.382638][T11644] ? __pfx_policy_nodemask+0x10/0x10 [ 506.382674][T11644] alloc_pages_mpol+0xd1/0x380 [ 506.382703][T11644] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 506.382731][T11644] vma_alloc_folio_noprof+0xe1/0x1e0 [ 506.382758][T11644] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 506.382795][T11644] copy_pmd_range+0x4ba0/0x5550 [ 506.382844][T11644] ? lockdep_hardirqs_on+0x7a/0x110 [ 506.382880][T11644] ? __pfx_copy_pmd_range+0x10/0x10 [ 506.382905][T11644] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 506.382932][T11644] ? rt_spin_unlock+0x14f/0x200 [ 506.382960][T11644] ? rt_spin_unlock+0x160/0x200 [ 506.382982][T11644] ? __pud_alloc+0x348/0x460 [ 506.383009][T11644] copy_page_range+0xb3f/0x1150 [ 506.383053][T11644] ? __pfx_copy_page_range+0x10/0x10 [ 506.383098][T11644] dup_mmap+0xf5a/0x1d70 [ 506.383142][T11644] ? __pfx_dup_mmap+0x10/0x10 [ 506.383166][T11644] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 506.383199][T11644] ? copy_mm+0x10f/0x480 [ 506.383228][T11644] ? copy_mm+0x10f/0x480 [ 506.383268][T11644] copy_mm+0x11a/0x480 [ 506.383299][T11644] copy_process+0x1e30/0x43d0 [ 506.383333][T11644] ? copy_process+0xd4e/0x43d0 [ 506.383379][T11644] ? __pfx_copy_process+0x10/0x10 [ 506.383408][T11644] ? get_pid_task+0x20/0x1f0 [ 506.383427][T11644] ? get_pid_task+0x20/0x1f0 [ 506.383454][T11644] kernel_clone+0x2d7/0x940 [ 506.383488][T11644] ? __pfx_kernel_clone+0x10/0x10 [ 506.383514][T11644] ? do_raw_spin_lock+0x12b/0x2f0 [ 506.383553][T11644] __x64_sys_clone+0x1b6/0x230 [ 506.383576][T11644] ? __pfx___x64_sys_clone+0x10/0x10 [ 506.383620][T11644] ? __pfx_ksys_write+0x10/0x10 [ 506.383656][T11644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.383678][T11644] do_syscall_64+0x174/0x580 [ 506.383705][T11644] ? trace_irq_disable+0x3b/0x140 [ 506.383727][T11644] ? clear_bhb_loop+0x40/0x90 [ 506.383751][T11644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.383771][T11644] RIP: 0033:0x7f773904ce59 [ 506.383790][T11644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.383808][T11644] RSP: 002b:00007f773729dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 506.383829][T11644] RAX: ffffffffffffffda RBX: 00007f77392c5fa0 RCX: 00007f773904ce59 [ 506.383844][T11644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 506.383856][T11644] RBP: 00007f773729e090 R08: 0000000000000000 R09: 0000000000000000 [ 506.383869][T11644] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 506.383882][T11644] R13: 00007f77392c6038 R14: 00007f77392c5fa0 R15: 00007ffd86670e58 [ 506.383914][T11644] [ 506.507413][ T1254] usb 8-1: device descriptor read/64, error -71 [ 506.657863][T11656] netlink: 122 bytes leftover after parsing attributes in process `syz.1.1723'. [ 506.748770][ T1254] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 506.878757][ T1254] usb 8-1: device descriptor read/64, error -71 [ 506.993212][ T1254] usb usb8-port1: attempt power cycle [ 507.367373][ T1254] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 507.388905][ T1254] usb 8-1: device descriptor read/8, error -71 [ 507.546934][T11685] Invalid source name [ 507.546952][T11685] UBIFS error (pid: 11685): cannot open "./file0", error -22 [ 507.552184][T11686] Invalid source name [ 507.552194][T11686] UBIFS error (pid: 11686): cannot open "./file0", error -22 [ 507.627406][ T1254] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 507.648162][ T1254] usb 8-1: device descriptor read/8, error -71 [ 507.758989][ T1254] usb usb8-port1: unable to enumerate USB device [ 507.994906][T11689] FAULT_INJECTION: forcing a failure. [ 507.994906][T11689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.994943][T11689] CPU: 1 UID: 0 PID: 11689 Comm: syz.5.1731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 507.994971][T11689] Tainted: [L]=SOFTLOCKUP [ 507.994978][T11689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.994990][T11689] Call Trace: [ 507.994997][T11689] [ 507.995006][T11689] dump_stack_lvl+0xe8/0x150 [ 507.995036][T11689] should_fail_ex+0x46b/0x600 [ 507.995070][T11689] prepare_alloc_pages+0x22a/0x6b0 [ 507.995112][T11689] __alloc_frozen_pages_noprof+0x12f/0x380 [ 507.995144][T11689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 507.995175][T11689] ? __pfx_policy_nodemask+0x10/0x10 [ 507.995212][T11689] alloc_pages_mpol+0xd1/0x380 [ 507.995243][T11689] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 507.995272][T11689] vma_alloc_folio_noprof+0xe1/0x1e0 [ 507.995302][T11689] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 507.995340][T11689] copy_pmd_range+0x4ba0/0x5550 [ 507.995392][T11689] ? lockdep_hardirqs_on+0x7a/0x110 [ 507.995429][T11689] ? __pfx_copy_pmd_range+0x10/0x10 [ 507.995455][T11689] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 507.995482][T11689] ? rt_spin_unlock+0x14f/0x200 [ 507.995510][T11689] ? rt_spin_unlock+0x160/0x200 [ 507.995537][T11689] ? __pud_alloc+0x348/0x460 [ 507.995563][T11689] copy_page_range+0xb3f/0x1150 [ 507.995611][T11689] ? __pfx_copy_page_range+0x10/0x10 [ 507.995656][T11689] dup_mmap+0xf5a/0x1d70 [ 507.995702][T11689] ? __pfx_dup_mmap+0x10/0x10 [ 507.995727][T11689] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 507.995761][T11689] ? copy_mm+0x10f/0x480 [ 507.995791][T11689] ? copy_mm+0x10f/0x480 [ 507.995833][T11689] copy_mm+0x11a/0x480 [ 507.995864][T11689] copy_process+0x1e30/0x43d0 [ 507.995901][T11689] ? copy_process+0xd4e/0x43d0 [ 507.995948][T11689] ? __pfx_copy_process+0x10/0x10 [ 507.995978][T11689] ? get_pid_task+0x20/0x1f0 [ 507.995997][T11689] ? get_pid_task+0x20/0x1f0 [ 507.996026][T11689] kernel_clone+0x2d7/0x940 [ 507.996061][T11689] ? __pfx_kernel_clone+0x10/0x10 [ 507.996089][T11689] ? do_raw_spin_lock+0x12b/0x2f0 [ 507.996134][T11689] __x64_sys_clone+0x1b6/0x230 [ 507.996157][T11689] ? __pfx___x64_sys_clone+0x10/0x10 [ 507.996194][T11689] ? __pfx_ksys_write+0x10/0x10 [ 507.996231][T11689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.996252][T11689] do_syscall_64+0x174/0x580 [ 507.996280][T11689] ? trace_irq_disable+0x3b/0x140 [ 507.996302][T11689] ? clear_bhb_loop+0x40/0x90 [ 507.996327][T11689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.996347][T11689] RIP: 0033:0x7feb9a29ce59 [ 507.996366][T11689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.996382][T11689] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 507.996403][T11689] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 507.996418][T11689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 507.996430][T11689] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 507.996442][T11689] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 507.996455][T11689] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 507.996487][T11689] [ 509.047373][ T5716] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 509.204935][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.204991][ T5716] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.205019][ T5716] usb 6-1: config 0 interface 0 has no altsetting 0 [ 509.205053][ T5716] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 509.205077][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.242633][ T5716] usb 6-1: config 0 descriptor?? [ 509.265939][ T5716] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 509.604425][T11726] tmpfs: Bad value for 'nr_blocks' [ 509.761246][ T5716] usbhid 6-1:0.0: can't add hid device: -71 [ 509.761370][ T5716] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 509.800096][ T5716] usb 6-1: USB disconnect, device number 66 [ 509.989953][ T32] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 510.141077][ T32] usb 8-1: unable to get BOS descriptor or descriptor too short [ 510.141782][ T32] usb 8-1: not running at top speed; connect to a high speed hub [ 510.143382][ T32] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.143406][ T32] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.143456][ T32] usb 8-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 510.143483][ T32] usb 8-1: config 1 interface 0 has no altsetting 0 [ 510.206544][ T32] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 510.206575][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.206596][ T32] usb 8-1: Product: syz [ 510.206611][ T32] usb 8-1: Manufacturer: syz [ 510.206626][ T32] usb 8-1: SerialNumber: syz [ 510.464479][T11737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.476537][T11737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.525348][ T32] usb 8-1: USB disconnect, device number 6 [ 511.116514][T11781] netlink: 'syz.7.1754': attribute type 10 has an invalid length. [ 511.147935][T11781] syz_tun: entered promiscuous mode [ 511.157434][ T5716] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 511.163385][T11781] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 511.329515][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.329570][ T5716] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 511.329596][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.335654][T11787] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1755'. [ 511.376633][ T5716] usb 6-1: config 0 descriptor?? [ 511.386953][ T5716] pwc: Askey VC010 type 2 USB webcam detected. [ 511.782971][ T5716] pwc: recv_control_msg error -32 req 02 val 2b00 [ 511.783805][ T5716] pwc: recv_control_msg error -32 req 02 val 2700 [ 511.784529][ T5716] pwc: recv_control_msg error -32 req 02 val 2c00 [ 511.786111][ T5716] pwc: recv_control_msg error -32 req 04 val 1000 [ 511.786621][ T5716] pwc: recv_control_msg error -32 req 04 val 1300 [ 511.787165][ T5716] pwc: recv_control_msg error -32 req 04 val 1400 [ 511.787874][ T5703] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 511.836405][ T5716] pwc: recv_control_msg error -32 req 02 val 2000 [ 511.837051][ T5716] pwc: recv_control_msg error -32 req 02 val 2100 [ 511.851876][ T5716] pwc: recv_control_msg error -32 req 04 val 1500 [ 511.852490][ T5716] pwc: recv_control_msg error -32 req 02 val 2500 [ 511.952777][ T5703] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 511.952811][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 511.952840][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.991017][ T5703] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 511.991048][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.991068][ T5703] usb 8-1: Product: syz [ 511.991084][ T5703] usb 8-1: Manufacturer: syz [ 511.991099][ T5703] usb 8-1: SerialNumber: syz [ 511.995812][ T5703] usb 8-1: config 0 descriptor?? [ 512.035565][ T5703] iguanair 8-1:0.0: probe with driver iguanair failed with error -12 [ 512.057078][ T5716] pwc: recv_control_msg error -71 req 02 val 2600 [ 512.058216][ T5716] pwc: recv_control_msg error -71 req 02 val 2900 [ 512.061975][ T5716] pwc: recv_control_msg error -71 req 02 val 2800 [ 512.069359][ T5716] pwc: recv_control_msg error -71 req 04 val 1100 [ 512.069819][ T5716] pwc: recv_control_msg error -71 req 04 val 1200 [ 512.112680][ T5716] pwc: Registered as video103. [ 512.115918][ T5716] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 512.124648][ T5716] usb 6-1: USB disconnect, device number 67 [ 512.213942][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.214491][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.215415][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.215736][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.236393][ T5717] usb 8-1: USB disconnect, device number 7 [ 513.047473][ T5717] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 513.088045][ T37] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 513.201137][ T5717] usb 6-1: unable to get BOS descriptor or descriptor too short [ 513.205257][ T5717] usb 6-1: not running at top speed; connect to a high speed hub [ 513.207074][ T5717] usb 6-1: config 3 has an invalid interface number: 169 but max is 1 [ 513.207105][ T5717] usb 6-1: config 3 has an invalid interface number: 83 but max is 1 [ 513.207126][ T5717] usb 6-1: config 3 has no interface number 0 [ 513.207142][ T5717] usb 6-1: config 3 has no interface number 1 [ 513.207184][ T5717] usb 6-1: config 3 interface 169 has no altsetting 0 [ 513.210358][ T5717] usb 6-1: config 3 interface 83 has no altsetting 0 [ 513.267737][ T5717] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=d8.5e [ 513.267768][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.267789][ T5717] usb 6-1: Product: syz [ 513.267803][ T5717] usb 6-1: Manufacturer: syz [ 513.267818][ T5717] usb 6-1: SerialNumber: syz [ 513.288295][ T37] usb 8-1: Using ep0 maxpacket: 32 [ 513.300479][ T37] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 513.300497][ T37] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.336999][ T37] usb 8-1: config 0 descriptor?? [ 513.352622][ T37] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 513.494188][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1767'. [ 513.545855][ T5717] qmi_wwan 6-1:3.169: probe with driver qmi_wwan failed with error -22 [ 513.566612][ T5717] usb 6-1: selecting invalid altsetting 0 [ 513.566637][ T5717] usb 6-1: Could not set interface, error -22 [ 513.600742][ T5717] usb 6-1: USB disconnect, device number 68 [ 513.766648][ T37] gspca_vc032x: reg_w err -71 [ 513.766666][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766677][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766687][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766696][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766706][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766716][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766725][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766734][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766742][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766750][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766759][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766767][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766776][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766785][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766794][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766803][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766812][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766820][ T37] gspca_vc032x: I2c Bus Busy Wait 00 [ 513.766829][ T37] gspca_vc032x: Unknown sensor... [ 513.766908][ T37] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 513.890476][ T37] usb 8-1: USB disconnect, device number 8 [ 514.013654][T11824] netlink: 122 bytes leftover after parsing attributes in process `syz.6.1769'. [ 514.354535][T11835] batadv_slave_0: entered promiscuous mode [ 514.437459][T11835] batadv_slave_0: left promiscuous mode [ 514.619246][T11850] netlink: 122 bytes leftover after parsing attributes in process `syz.7.1778'. [ 514.927866][ T5716] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 515.077612][ T5716] usb 8-1: Using ep0 maxpacket: 16 [ 515.080152][ T5716] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 515.080180][ T5716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.113049][T11871] netlink: 122 bytes leftover after parsing attributes in process `syz.6.1790'. [ 515.134730][ T5716] usb 8-1: config 0 descriptor?? [ 515.145314][ T5716] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 515.338719][ T5716] usb 8-1: Detected FT232B [ 515.752683][ T5716] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 515.765357][ T5716] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 515.781097][ T5716] usb 8-1: USB disconnect, device number 9 [ 515.792014][ T5716] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 515.792464][ T5716] ftdi_sio 8-1:0.0: device disconnected [ 516.597416][ T32] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 516.747415][ T32] usb 8-1: device descriptor read/64, error -71 [ 516.997457][ T32] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 516.999967][T11918] FAULT_INJECTION: forcing a failure. [ 516.999967][T11918] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 516.999991][T11918] CPU: 1 UID: 0 PID: 11918 Comm: syz.5.1809 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 517.000007][T11918] Tainted: [L]=SOFTLOCKUP [ 517.000011][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 517.000021][T11918] Call Trace: [ 517.000025][T11918] [ 517.000030][T11918] dump_stack_lvl+0xe8/0x150 [ 517.000048][T11918] should_fail_ex+0x46b/0x600 [ 517.000067][T11918] prepare_alloc_pages+0x22a/0x6b0 [ 517.000087][T11918] __alloc_frozen_pages_noprof+0x12f/0x380 [ 517.000103][T11918] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 517.000124][T11918] ? __pfx_policy_nodemask+0x10/0x10 [ 517.000144][T11918] alloc_pages_mpol+0xd1/0x380 [ 517.000160][T11918] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 517.000175][T11918] vma_alloc_folio_noprof+0xe1/0x1e0 [ 517.000191][T11918] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 517.000211][T11918] copy_pmd_range+0x4ba0/0x5550 [ 517.000237][T11918] ? lockdep_hardirqs_on+0x7a/0x110 [ 517.000257][T11918] ? __pfx_copy_pmd_range+0x10/0x10 [ 517.000270][T11918] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 517.000284][T11918] ? rt_spin_unlock+0x14f/0x200 [ 517.000299][T11918] ? rt_spin_unlock+0x160/0x200 [ 517.000312][T11918] ? __pud_alloc+0x348/0x460 [ 517.000326][T11918] copy_page_range+0xb3f/0x1150 [ 517.000351][T11918] ? __pfx_copy_page_range+0x10/0x10 [ 517.000375][T11918] dup_mmap+0xf5a/0x1d70 [ 517.000399][T11918] ? __pfx_dup_mmap+0x10/0x10 [ 517.000414][T11918] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 517.000445][T11918] ? copy_mm+0x10f/0x480 [ 517.000466][T11918] ? copy_mm+0x10f/0x480 [ 517.000488][T11918] copy_mm+0x11a/0x480 [ 517.000504][T11918] copy_process+0x1e30/0x43d0 [ 517.000523][T11918] ? copy_process+0xd4e/0x43d0 [ 517.000547][T11918] ? __pfx_copy_process+0x10/0x10 [ 517.000563][T11918] ? get_pid_task+0x20/0x1f0 [ 517.000573][T11918] ? get_pid_task+0x20/0x1f0 [ 517.000588][T11918] kernel_clone+0x2d7/0x940 [ 517.000607][T11918] ? __pfx_kernel_clone+0x10/0x10 [ 517.000624][T11918] ? do_raw_spin_lock+0x12b/0x2f0 [ 517.000645][T11918] __x64_sys_clone+0x1b6/0x230 [ 517.000657][T11918] ? __pfx___x64_sys_clone+0x10/0x10 [ 517.000675][T11918] ? __pfx_ksys_write+0x10/0x10 [ 517.000694][T11918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.000706][T11918] do_syscall_64+0x174/0x580 [ 517.000720][T11918] ? trace_irq_disable+0x3b/0x140 [ 517.000733][T11918] ? clear_bhb_loop+0x40/0x90 [ 517.000746][T11918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.000757][T11918] RIP: 0033:0x7feb9a29ce59 [ 517.000768][T11918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.000777][T11918] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 517.000790][T11918] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 517.000797][T11918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 517.000804][T11918] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 517.000811][T11918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 517.000818][T11918] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 517.000835][T11918] [ 517.137351][ T32] usb 8-1: device descriptor read/64, error -71 [ 517.248230][ T32] usb usb8-port1: attempt power cycle [ 517.482058][T11932] sg_write: data in/out 25564/2 bytes for SCSI command 0x3b-- guessing data in; [ 517.482058][T11932] program syz.5.1815 not setting count and/or reply_len properly [ 517.607531][ T32] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 517.629084][ T32] usb 8-1: device descriptor read/8, error -71 [ 517.728546][ T5703] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 517.877401][ T32] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 517.880346][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 517.881404][ T5703] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 517.881430][ T5703] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 517.881451][ T5703] usb 6-1: config 63 has no interface number 0 [ 517.881472][ T5703] usb 6-1: config 63 interface 66 has no altsetting 0 [ 517.883794][ T5703] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 517.883823][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.883844][ T5703] usb 6-1: Product: syz [ 517.883857][ T5703] usb 6-1: Manufacturer: syz [ 517.883865][ T5703] usb 6-1: SerialNumber: syz [ 517.917800][ T32] usb 8-1: device descriptor read/8, error -71 [ 518.028610][ T32] usb usb8-port1: unable to enumerate USB device [ 518.161542][ T5703] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 518.163182][ T5703] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 518.163852][ T5703] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 518.164360][ T5703] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 518.164871][ T5703] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 518.165373][ T5703] uvcvideo 6-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 518.165453][ T5703] uvcvideo 6-1:63.66: No streaming interface found for terminal 29. [ 518.165550][ T5703] uvcvideo 6-1:63.66: Entity type for entity Output 32773 was not initialized! [ 518.263703][ T5703] usb 6-1: USB disconnect, device number 69 [ 518.415980][T11943] FAULT_INJECTION: forcing a failure. [ 518.415980][T11943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 518.416013][T11943] CPU: 0 UID: 0 PID: 11943 Comm: syz.5.1819 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 518.416033][T11943] Tainted: [L]=SOFTLOCKUP [ 518.416039][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.416048][T11943] Call Trace: [ 518.416055][T11943] [ 518.416062][T11943] dump_stack_lvl+0xe8/0x150 [ 518.416097][T11943] should_fail_ex+0x46b/0x600 [ 518.416126][T11943] prepare_alloc_pages+0x22a/0x6b0 [ 518.416156][T11943] __alloc_frozen_pages_noprof+0x12f/0x380 [ 518.416182][T11943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 518.416203][T11943] ? __pfx_policy_nodemask+0x10/0x10 [ 518.416232][T11943] alloc_pages_mpol+0xd1/0x380 [ 518.416264][T11943] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 518.416288][T11943] vma_alloc_folio_noprof+0xe1/0x1e0 [ 518.416310][T11943] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 518.416339][T11943] copy_pmd_range+0x4ba0/0x5550 [ 518.416377][T11943] ? lockdep_hardirqs_on+0x7a/0x110 [ 518.416411][T11943] ? __pfx_copy_pmd_range+0x10/0x10 [ 518.416431][T11943] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 518.416452][T11943] ? rt_spin_unlock+0x14f/0x200 [ 518.416474][T11943] ? rt_spin_unlock+0x160/0x200 [ 518.416495][T11943] ? __pud_alloc+0x348/0x460 [ 518.416519][T11943] copy_page_range+0xb3f/0x1150 [ 518.416562][T11943] ? __pfx_copy_page_range+0x10/0x10 [ 518.416595][T11943] dup_mmap+0xf5a/0x1d70 [ 518.416629][T11943] ? __pfx_dup_mmap+0x10/0x10 [ 518.416647][T11943] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 518.416672][T11943] ? copy_mm+0x10f/0x480 [ 518.416694][T11943] ? copy_mm+0x10f/0x480 [ 518.416725][T11943] copy_mm+0x11a/0x480 [ 518.416750][T11943] copy_process+0x1e30/0x43d0 [ 518.416779][T11943] ? copy_process+0xd4e/0x43d0 [ 518.416816][T11943] ? __pfx_copy_process+0x10/0x10 [ 518.416839][T11943] ? get_pid_task+0x20/0x1f0 [ 518.416853][T11943] ? get_pid_task+0x20/0x1f0 [ 518.416875][T11943] kernel_clone+0x2d7/0x940 [ 518.416903][T11943] ? __pfx_kernel_clone+0x10/0x10 [ 518.416930][T11943] ? do_raw_spin_lock+0x12b/0x2f0 [ 518.416965][T11943] __x64_sys_clone+0x1b6/0x230 [ 518.416988][T11943] ? __pfx___x64_sys_clone+0x10/0x10 [ 518.417015][T11943] ? __pfx_ksys_write+0x10/0x10 [ 518.417041][T11943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.417056][T11943] do_syscall_64+0x174/0x580 [ 518.417076][T11943] ? trace_irq_disable+0x3b/0x140 [ 518.417109][T11943] ? clear_bhb_loop+0x40/0x90 [ 518.417127][T11943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.417141][T11943] RIP: 0033:0x7feb9a29ce59 [ 518.417155][T11943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.417168][T11943] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 518.417184][T11943] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 518.417196][T11943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 518.417205][T11943] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.417214][T11943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 518.417223][T11943] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 518.417247][T11943] [ 519.428727][T11967] FAULT_INJECTION: forcing a failure. [ 519.428727][T11967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 519.428752][T11967] CPU: 1 UID: 0 PID: 11967 Comm: syz.5.1828 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.428768][T11967] Tainted: [L]=SOFTLOCKUP [ 519.428771][T11967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.428778][T11967] Call Trace: [ 519.428783][T11967] [ 519.428788][T11967] dump_stack_lvl+0xe8/0x150 [ 519.428806][T11967] should_fail_ex+0x46b/0x600 [ 519.428835][T11967] prepare_alloc_pages+0x22a/0x6b0 [ 519.428866][T11967] __alloc_frozen_pages_noprof+0x12f/0x380 [ 519.428883][T11967] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 519.428902][T11967] ? __pfx_policy_nodemask+0x10/0x10 [ 519.428922][T11967] alloc_pages_mpol+0xd1/0x380 [ 519.428938][T11967] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 519.428954][T11967] vma_alloc_folio_noprof+0xe1/0x1e0 [ 519.428969][T11967] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 519.428994][T11967] copy_pmd_range+0x4ba0/0x5550 [ 519.429020][T11967] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.429040][T11967] ? __pfx_copy_pmd_range+0x10/0x10 [ 519.429053][T11967] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 519.429068][T11967] ? rt_spin_unlock+0x14f/0x200 [ 519.429082][T11967] ? rt_spin_unlock+0x160/0x200 [ 519.429095][T11967] ? __pud_alloc+0x348/0x460 [ 519.429110][T11967] copy_page_range+0xb3f/0x1150 [ 519.429135][T11967] ? __pfx_copy_page_range+0x10/0x10 [ 519.429159][T11967] dup_mmap+0xf5a/0x1d70 [ 519.429183][T11967] ? __pfx_dup_mmap+0x10/0x10 [ 519.429196][T11967] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 519.429214][T11967] ? copy_mm+0x10f/0x480 [ 519.429230][T11967] ? copy_mm+0x10f/0x480 [ 519.429252][T11967] copy_mm+0x11a/0x480 [ 519.429268][T11967] copy_process+0x1e30/0x43d0 [ 519.429287][T11967] ? copy_process+0xd4e/0x43d0 [ 519.429312][T11967] ? __pfx_copy_process+0x10/0x10 [ 519.429327][T11967] ? get_pid_task+0x20/0x1f0 [ 519.429337][T11967] ? get_pid_task+0x20/0x1f0 [ 519.429352][T11967] kernel_clone+0x2d7/0x940 [ 519.429371][T11967] ? __pfx_kernel_clone+0x10/0x10 [ 519.429385][T11967] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.429411][T11967] __x64_sys_clone+0x1b6/0x230 [ 519.429423][T11967] ? __pfx___x64_sys_clone+0x10/0x10 [ 519.429442][T11967] ? __pfx_ksys_write+0x10/0x10 [ 519.429461][T11967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.429473][T11967] do_syscall_64+0x174/0x580 [ 519.429487][T11967] ? trace_irq_disable+0x3b/0x140 [ 519.429500][T11967] ? clear_bhb_loop+0x40/0x90 [ 519.429513][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.429523][T11967] RIP: 0033:0x7feb9a29ce59 [ 519.429534][T11967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.429543][T11967] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 519.429555][T11967] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 519.429563][T11967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 519.429570][T11967] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.429577][T11967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 519.429583][T11967] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 519.429600][T11967] [ 520.097403][ T5717] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 520.165678][T11991] FAULT_INJECTION: forcing a failure. [ 520.165678][T11991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 520.165714][T11991] CPU: 0 UID: 0 PID: 11991 Comm: syz.5.1839 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 520.165741][T11991] Tainted: [L]=SOFTLOCKUP [ 520.165749][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 520.165761][T11991] Call Trace: [ 520.165768][T11991] [ 520.165777][T11991] dump_stack_lvl+0xe8/0x150 [ 520.165829][T11991] should_fail_ex+0x46b/0x600 [ 520.165863][T11991] prepare_alloc_pages+0x22a/0x6b0 [ 520.165898][T11991] __alloc_frozen_pages_noprof+0x12f/0x380 [ 520.165928][T11991] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 520.165958][T11991] ? __pfx_policy_nodemask+0x10/0x10 [ 520.165992][T11991] alloc_pages_mpol+0xd1/0x380 [ 520.166020][T11991] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 520.166047][T11991] vma_alloc_folio_noprof+0xe1/0x1e0 [ 520.166075][T11991] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 520.166110][T11991] copy_pmd_range+0x4ba0/0x5550 [ 520.166159][T11991] ? lockdep_hardirqs_on+0x7a/0x110 [ 520.166195][T11991] ? __pfx_copy_pmd_range+0x10/0x10 [ 520.166218][T11991] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 520.166246][T11991] ? rt_spin_unlock+0x14f/0x200 [ 520.166273][T11991] ? rt_spin_unlock+0x160/0x200 [ 520.166299][T11991] ? __pud_alloc+0x348/0x460 [ 520.166325][T11991] copy_page_range+0xb3f/0x1150 [ 520.166372][T11991] ? __pfx_copy_page_range+0x10/0x10 [ 520.166417][T11991] dup_mmap+0xf5a/0x1d70 [ 520.166463][T11991] ? __pfx_dup_mmap+0x10/0x10 [ 520.166487][T11991] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 520.166522][T11991] ? copy_mm+0x10f/0x480 [ 520.166551][T11991] ? copy_mm+0x10f/0x480 [ 520.166593][T11991] copy_mm+0x11a/0x480 [ 520.166623][T11991] copy_process+0x1e30/0x43d0 [ 520.166659][T11991] ? copy_process+0xd4e/0x43d0 [ 520.166706][T11991] ? __pfx_copy_process+0x10/0x10 [ 520.166735][T11991] ? get_pid_task+0x20/0x1f0 [ 520.166754][T11991] ? get_pid_task+0x20/0x1f0 [ 520.166783][T11991] kernel_clone+0x2d7/0x940 [ 520.166824][T11991] ? __pfx_kernel_clone+0x10/0x10 [ 520.166851][T11991] ? do_raw_spin_lock+0x12b/0x2f0 [ 520.166891][T11991] __x64_sys_clone+0x1b6/0x230 [ 520.166913][T11991] ? __pfx___x64_sys_clone+0x10/0x10 [ 520.166948][T11991] ? __pfx_ksys_write+0x10/0x10 [ 520.166984][T11991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.167006][T11991] do_syscall_64+0x174/0x580 [ 520.167034][T11991] ? trace_irq_disable+0x3b/0x140 [ 520.167055][T11991] ? clear_bhb_loop+0x40/0x90 [ 520.167080][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.167099][T11991] RIP: 0033:0x7feb9a29ce59 [ 520.167118][T11991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.167134][T11991] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 520.167154][T11991] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 520.167169][T11991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 520.167181][T11991] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 520.167195][T11991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 520.167205][T11991] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 520.167234][T11991] [ 520.288950][ T5717] usb 8-1: Using ep0 maxpacket: 16 [ 520.310433][ T5717] usb 8-1: config 0 has an invalid interface number: 98 but max is 0 [ 520.310451][ T5717] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.310461][ T5717] usb 8-1: config 0 has no interface number 0 [ 520.310488][ T5717] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 520.310502][ T5717] usb 8-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 520.310515][ T5717] usb 8-1: config 0 interface 98 has no altsetting 0 [ 520.352518][ T5717] usb 8-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 520.352535][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.352547][ T5717] usb 8-1: Product: syz [ 520.352555][ T5717] usb 8-1: Manufacturer: syz [ 520.352562][ T5717] usb 8-1: SerialNumber: syz [ 520.600138][ T5717] usb 8-1: config 0 descriptor?? [ 520.603354][T11969] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 520.603471][T11969] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 520.923756][T11969] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 520.923877][T11969] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 521.409332][T12013] FAULT_INJECTION: forcing a failure. [ 521.409332][T12013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 521.409370][T12013] CPU: 0 UID: 0 PID: 12013 Comm: syz.5.1849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.409401][T12013] Tainted: [L]=SOFTLOCKUP [ 521.409408][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 521.409420][T12013] Call Trace: [ 521.409428][T12013] [ 521.409437][T12013] dump_stack_lvl+0xe8/0x150 [ 521.409466][T12013] should_fail_ex+0x46b/0x600 [ 521.409499][T12013] prepare_alloc_pages+0x22a/0x6b0 [ 521.409531][T12013] __alloc_frozen_pages_noprof+0x12f/0x380 [ 521.409561][T12013] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 521.409591][T12013] ? __pfx_policy_nodemask+0x10/0x10 [ 521.409628][T12013] alloc_pages_mpol+0xd1/0x380 [ 521.409658][T12013] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 521.409688][T12013] vma_alloc_folio_noprof+0xe1/0x1e0 [ 521.409718][T12013] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 521.409755][T12013] copy_pmd_range+0x4ba0/0x5550 [ 521.409806][T12013] ? lockdep_hardirqs_on+0x7a/0x110 [ 521.409842][T12013] ? __pfx_copy_pmd_range+0x10/0x10 [ 521.409868][T12013] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 521.409895][T12013] ? rt_spin_unlock+0x14f/0x200 [ 521.409923][T12013] ? rt_spin_unlock+0x160/0x200 [ 521.409948][T12013] ? __pud_alloc+0x348/0x460 [ 521.409976][T12013] copy_page_range+0xb3f/0x1150 [ 521.410024][T12013] ? __pfx_copy_page_range+0x10/0x10 [ 521.410070][T12013] dup_mmap+0xf5a/0x1d70 [ 521.410115][T12013] ? __pfx_dup_mmap+0x10/0x10 [ 521.410139][T12013] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 521.410172][T12013] ? copy_mm+0x10f/0x480 [ 521.410199][T12013] ? copy_mm+0x10f/0x480 [ 521.410246][T12013] copy_mm+0x11a/0x480 [ 521.410277][T12013] copy_process+0x1e30/0x43d0 [ 521.410313][T12013] ? copy_process+0xd4e/0x43d0 [ 521.410394][T12013] ? __pfx_copy_process+0x10/0x10 [ 521.410424][T12013] ? get_pid_task+0x20/0x1f0 [ 521.410443][T12013] ? get_pid_task+0x20/0x1f0 [ 521.410472][T12013] kernel_clone+0x2d7/0x940 [ 521.410507][T12013] ? __pfx_kernel_clone+0x10/0x10 [ 521.410540][T12013] ? do_raw_spin_lock+0x12b/0x2f0 [ 521.410579][T12013] __x64_sys_clone+0x1b6/0x230 [ 521.410602][T12013] ? __pfx___x64_sys_clone+0x10/0x10 [ 521.410637][T12013] ? __pfx_ksys_write+0x10/0x10 [ 521.410672][T12013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.410694][T12013] do_syscall_64+0x174/0x580 [ 521.410722][T12013] ? trace_irq_disable+0x3b/0x140 [ 521.410744][T12013] ? clear_bhb_loop+0x40/0x90 [ 521.410769][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.410789][T12013] RIP: 0033:0x7feb9a29ce59 [ 521.410808][T12013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.410825][T12013] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 521.410846][T12013] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 521.410861][T12013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 521.410873][T12013] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 521.410886][T12013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 521.410899][T12013] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 521.410931][T12013] [ 521.574011][ T5717] asix 8-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 521.574180][ T5717] asix 8-1:0.98: probe with driver asix failed with error -71 [ 521.774303][ T5717] usb 8-1: USB disconnect, device number 14 [ 522.126979][T12027] usb usb9: usbfs: process 12027 (syz.5.1855) did not claim interface 0 before use [ 522.127182][T12028] usb usb9: usbfs: process 12028 (syz.5.1855) did not claim interface 0 before use [ 522.360981][T12034] FAULT_INJECTION: forcing a failure. [ 522.360981][T12034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 522.361004][T12034] CPU: 0 UID: 0 PID: 12034 Comm: syz.7.1858 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 522.361020][T12034] Tainted: [L]=SOFTLOCKUP [ 522.361024][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 522.361033][T12034] Call Trace: [ 522.361038][T12034] [ 522.361043][T12034] dump_stack_lvl+0xe8/0x150 [ 522.361061][T12034] should_fail_ex+0x46b/0x600 [ 522.361081][T12034] prepare_alloc_pages+0x22a/0x6b0 [ 522.361100][T12034] __alloc_frozen_pages_noprof+0x12f/0x380 [ 522.361116][T12034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 522.361138][T12034] ? __pfx_policy_nodemask+0x10/0x10 [ 522.361158][T12034] alloc_pages_mpol+0xd1/0x380 [ 522.361174][T12034] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 522.361190][T12034] vma_alloc_folio_noprof+0xe1/0x1e0 [ 522.361205][T12034] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 522.361225][T12034] copy_pmd_range+0x4ba0/0x5550 [ 522.361250][T12034] ? lockdep_hardirqs_on+0x7a/0x110 [ 522.361270][T12034] ? __pfx_copy_pmd_range+0x10/0x10 [ 522.361284][T12034] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 522.361299][T12034] ? rt_spin_unlock+0x14f/0x200 [ 522.361313][T12034] ? rt_spin_unlock+0x160/0x200 [ 522.361327][T12034] ? __pud_alloc+0x348/0x460 [ 522.361341][T12034] copy_page_range+0xb3f/0x1150 [ 522.361367][T12034] ? __pfx_copy_page_range+0x10/0x10 [ 522.361391][T12034] dup_mmap+0xf5a/0x1d70 [ 522.361415][T12034] ? __pfx_dup_mmap+0x10/0x10 [ 522.361428][T12034] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 522.361446][T12034] ? copy_mm+0x10f/0x480 [ 522.361463][T12034] ? copy_mm+0x10f/0x480 [ 522.361485][T12034] copy_mm+0x11a/0x480 [ 522.361501][T12034] copy_process+0x1e30/0x43d0 [ 522.361520][T12034] ? copy_process+0xd4e/0x43d0 [ 522.361545][T12034] ? __pfx_copy_process+0x10/0x10 [ 522.361560][T12034] ? get_pid_task+0x20/0x1f0 [ 522.361571][T12034] ? get_pid_task+0x20/0x1f0 [ 522.361586][T12034] kernel_clone+0x2d7/0x940 [ 522.361604][T12034] ? __pfx_kernel_clone+0x10/0x10 [ 522.361619][T12034] ? do_raw_spin_lock+0x12b/0x2f0 [ 522.361639][T12034] __x64_sys_clone+0x1b6/0x230 [ 522.361651][T12034] ? __pfx___x64_sys_clone+0x10/0x10 [ 522.361670][T12034] ? __pfx_ksys_write+0x10/0x10 [ 522.361689][T12034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.361701][T12034] do_syscall_64+0x174/0x580 [ 522.361715][T12034] ? trace_irq_disable+0x3b/0x140 [ 522.361727][T12034] ? clear_bhb_loop+0x40/0x90 [ 522.361740][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.361751][T12034] RIP: 0033:0x7f09d574ce59 [ 522.361761][T12034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.361771][T12034] RSP: 002b:00007f09d39a5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 522.361782][T12034] RAX: ffffffffffffffda RBX: 00007f09d59c5fa0 RCX: 00007f09d574ce59 [ 522.361790][T12034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 522.361797][T12034] RBP: 00007f09d39a6090 R08: 0000000000000000 R09: 0000000000000000 [ 522.361803][T12034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 522.361810][T12034] R13: 00007f09d59c6038 R14: 00007f09d59c5fa0 R15: 00007ffdea637b48 [ 522.361826][T12034] [ 523.106054][T12066] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[9327] was attempted by ""[12066] [ 523.118745][ T5717] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 523.277358][ T5717] usb 8-1: Using ep0 maxpacket: 32 [ 523.279534][ T5717] usb 8-1: config 8 has an invalid interface number: 37 but max is 0 [ 523.279560][ T5717] usb 8-1: config 8 has no interface number 0 [ 523.279617][ T5717] usb 8-1: config 8 interface 37 has no altsetting 0 [ 523.281755][ T5717] usb 8-1: New USB device found, idVendor=0b57, idProduct=89b6, bcdDevice=c8.fb [ 523.281781][ T5717] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.281802][ T5717] usb 8-1: Product: syz [ 523.281817][ T5717] usb 8-1: Manufacturer: syz [ 523.281829][ T5717] usb 8-1: SerialNumber: syz [ 523.497586][ T5717] usbhid 8-1:8.37: couldn't find an input interrupt endpoint [ 523.509428][ T5717] usb 8-1: USB disconnect, device number 15 [ 524.267387][ T32] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 524.427483][ T32] usb 8-1: Using ep0 maxpacket: 32 [ 524.431091][ T32] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 524.433742][ T32] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 524.433771][ T32] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 524.433792][ T32] usb 8-1: Product: syz [ 524.433807][ T32] usb 8-1: Manufacturer: syz [ 524.433818][ T32] usb 8-1: SerialNumber: syz [ 524.438682][ T32] usb 8-1: config 0 descriptor?? [ 524.467636][T12073] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 524.473631][ T32] hub 8-1:0.0: bad descriptor, ignoring hub [ 524.473666][ T32] hub 8-1:0.0: probe with driver hub failed with error -5 [ 524.633565][T12077] ieee802154 phy0 wpan0: encryption failed: -22 [ 524.985195][T12073] netlink: 'syz.7.1872': attribute type 3 has an invalid length. [ 525.225603][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1884'. [ 525.225704][T12103] ksmbd: Daemon and kernel module version mismatch. ksmbd: 70, kernel module: 1. User-space ksmbd should terminate. [ 525.509946][ T32] usb 8-1: USB disconnect, device number 16 [ 525.844925][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 525.886107][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 525.914129][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 525.926089][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 525.926827][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 526.259048][T11237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 526.259067][T11237] Bluetooth: Wrong link type (-22) [ 526.351391][T12116] lo speed is unknown, defaulting to 1000 [ 526.487399][ T32] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 526.554748][T12116] lo speed is unknown, defaulting to 1000 [ 526.648715][ T32] usb 8-1: Using ep0 maxpacket: 32 [ 526.652817][ T32] usb 8-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 526.652851][ T32] usb 8-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 526.652878][ T32] usb 8-1: config 1 interface 0 has no altsetting 0 [ 526.656003][ T32] usb 8-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 526.656029][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.656051][ T32] usb 8-1: Product: syz [ 526.656066][ T32] usb 8-1: Manufacturer: ࠌ [ 526.656081][ T32] usb 8-1: SerialNumber: syz [ 526.959161][T12116] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.959500][T12116] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.959784][T12116] bridge_slave_0: entered allmulticast mode [ 526.962479][T12116] bridge_slave_0: entered promiscuous mode [ 526.967659][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.968052][T12116] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.968639][T12116] bridge_slave_1: entered allmulticast mode [ 526.973430][T12116] bridge_slave_1: entered promiscuous mode [ 527.042654][T12116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.051360][T12116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.111418][ T32] usbhid 8-1:1.0: can't add hid device: -71 [ 527.111538][ T32] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 527.127515][T12116] team0: Port device team_slave_0 added [ 527.133611][T12116] team0: Port device team_slave_1 added [ 527.147878][ T32] usb 8-1: USB disconnect, device number 17 [ 527.223390][T12116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.223401][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.223416][T12116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.225506][T12116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.225516][T12116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.225530][T12116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.340320][T12116] hsr_slave_0: entered promiscuous mode [ 527.341585][T12116] hsr_slave_1: entered promiscuous mode [ 527.343383][T12116] debugfs: 'hsr0' already exists in 'hsr' [ 527.343408][T12116] Cannot create hsr debugfs directory [ 527.711284][T12116] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 527.750715][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.751735][T12116] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 527.785681][T12137] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 527.785681][T12137] The task syz.7.1891 (12137) triggered the difference, watch for misbehavior. [ 527.834583][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 528.028478][T12116] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 528.060046][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.060995][T12116] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 528.077391][ T5716] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 528.094646][T12116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.127835][T11237] Bluetooth: hci6: command tx timeout [ 528.223909][T12116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.243458][ T5716] usb 8-1: Using ep0 maxpacket: 8 [ 528.245784][ T5716] usb 8-1: config 0 has an invalid interface number: 101 but max is 0 [ 528.245810][ T5716] usb 8-1: config 0 has no interface number 0 [ 528.245842][ T5716] usb 8-1: config 0 interface 101 has no altsetting 0 [ 528.289838][ T5716] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 528.289868][ T5716] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.289880][ T5716] usb 8-1: Product: syz [ 528.289887][ T5716] usb 8-1: Manufacturer: syz [ 528.289896][ T5716] usb 8-1: SerialNumber: syz [ 528.296125][ T5716] usb 8-1: config 0 descriptor?? [ 528.338453][ T5716] gspca_main: se401-2.14.0 probing 047d:5003 [ 528.373427][T12116] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.432508][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.432677][T11052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.582838][T11046] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.583018][T11046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.822889][T12150] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 528.823377][T12150] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1893'. [ 529.039990][T12150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.048740][T12159] overlayfs: workdir and upperdir must be separate subtrees [ 529.121585][T12150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.206781][T12150] bond0 (unregistering): Released all slaves [ 529.322600][ T5716] usb 8-1: reset high-speed USB device number 18 using dummy_hcd [ 530.211412][T11237] Bluetooth: hci6: command tx timeout [ 530.325598][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.563275][ T38] audit: type=1800 audit(1780600024.551:23): pid=12198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1905" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 531.184204][ T5716] usb 8-1: failed to restore interface 101 altsetting 61 (error=-71) [ 531.284612][ T5716] gspca_se401: read req failed req 0x06 error -19 [ 531.305618][ T5716] usb 8-1: USB disconnect, device number 18 [ 531.320614][T12216] netlink: 'syz.7.1910': attribute type 4 has an invalid length. [ 531.320636][T12216] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1910'. [ 531.614724][T12116] veth0_vlan: entered promiscuous mode [ 531.655484][T12116] veth1_vlan: entered promiscuous mode [ 531.917153][T12116] veth0_macvtap: entered promiscuous mode [ 531.977510][T12116] veth1_macvtap: entered promiscuous mode [ 532.025826][T12116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.070381][T12116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.157859][T11046] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.184317][T11046] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.207460][T11052] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.209877][T11046] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.287398][T11237] Bluetooth: hci6: command tx timeout [ 532.912717][ T5716] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 533.113095][ T5716] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 127 [ 533.113134][ T5716] usb 8-1: config 0 has no interfaces? [ 533.124233][ T5716] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 533.124263][ T5716] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 533.124284][ T5716] usb 8-1: Product: syz [ 533.124298][ T5716] usb 8-1: Manufacturer: syz [ 533.124312][ T5716] usb 8-1: SerialNumber: syz [ 533.295108][ T5716] usb 8-1: config 0 descriptor?? [ 533.411042][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.411062][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.476298][T11050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.476311][T11050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.515663][ T5717] usb 8-1: USB disconnect, device number 19 [ 533.617446][ T5625] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 533.767504][ T5625] usb 6-1: device descriptor read/64, error -71 [ 533.771549][T12264] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1930'. [ 533.863225][T12269] vivid-007: ================= START STATUS ================= [ 533.866808][T12269] vivid-007: Generate PTS: true [ 533.866837][T12269] vivid-007: Generate SCR: true [ 533.866859][T12269] tpg source WxH: 320x240 (Y'CbCr) [ 533.866872][T12269] tpg field: 1 [ 533.866879][T12269] tpg crop: (0,0)/320x240 [ 533.866893][T12269] tpg compose: (0,0)/320x240 [ 533.866907][T12269] tpg colorspace: 8 [ 533.866914][T12269] tpg transfer function: 0/0 [ 533.866923][T12269] tpg Y'CbCr encoding: 0/0 [ 533.866933][T12269] tpg quantization: 0/0 [ 533.866943][T12269] tpg RGB range: 0/2 [ 533.866953][T12269] vivid-007: ================== END STATUS ================== [ 533.986358][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1933'. [ 534.007415][ T5625] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 534.099185][T12277] netlink: 122 bytes leftover after parsing attributes in process `syz.7.1935'. [ 534.139485][ T5625] usb 6-1: device descriptor read/64, error -71 [ 534.248072][ T5625] usb usb6-port1: attempt power cycle [ 534.368271][T11237] Bluetooth: hci6: command tx timeout [ 534.382901][ T32] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 534.537360][ T32] usb 8-1: Using ep0 maxpacket: 32 [ 534.539136][ T32] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 534.539161][ T32] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 534.539185][ T32] usb 8-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 534.539197][ T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.542876][ T32] usb 8-1: config 0 descriptor?? [ 534.587480][ T5625] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 534.612600][ T5625] usb 6-1: device descriptor read/8, error -71 [ 534.851490][ T5625] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 534.868178][ T5625] usb 6-1: device descriptor read/8, error -71 [ 534.977793][ T5625] usb usb6-port1: unable to enumerate USB device [ 535.154482][ T32] usbhid 8-1:0.0: can't add hid device: -71 [ 535.154603][ T32] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 535.174527][ T32] usb 8-1: USB disconnect, device number 20 [ 535.272217][T11237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 535.272237][T11237] Bluetooth: Wrong link type (-22) [ 535.537708][ T5703] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 535.697875][ T5703] usb 9-1: Using ep0 maxpacket: 32 [ 535.702353][ T5703] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 535.702386][ T5703] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 535.702413][ T5703] usb 9-1: config 1 interface 0 has no altsetting 0 [ 535.704934][ T5703] usb 9-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 535.704960][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.704980][ T5703] usb 9-1: Product: syz [ 535.704995][ T5703] usb 9-1: Manufacturer: ࠌ [ 535.705009][ T5703] usb 9-1: SerialNumber: syz [ 536.017374][ T5625] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 536.133530][ T5703] usbhid 9-1:1.0: can't add hid device: -71 [ 536.133645][ T5703] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 536.163494][ T5703] usb 9-1: USB disconnect, device number 2 [ 536.181734][ T5625] usb 8-1: unable to get BOS descriptor or descriptor too short [ 536.183306][ T5625] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 536.185959][ T5625] usb 8-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice= 0.03 [ 536.185985][ T5625] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 536.186004][ T5625] usb 8-1: SerialNumber: syz [ 536.472542][ T5625] usb 8-1: probing VID:PID(2201:012C) [ 536.474734][ T5625] usb 8-1: Could not find two sets of bulk-in/out endpoint pairs [ 536.522818][ T5625] vub300 8-1:7.0: probe with driver vub300 failed with error -22 [ 536.534149][ T5625] usb 8-1: USB disconnect, device number 21 [ 537.272625][T12327] netlink: 'syz.7.1958': attribute type 10 has an invalid length. [ 537.325653][T12331] netlink: 'syz.7.1958': attribute type 10 has an invalid length. [ 537.575369][T12327] team0: Port device dummy0 added [ 537.757000][T12331] team0: Port device dummy0 removed [ 537.791857][T12331] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 538.058978][T11237] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 538.058999][T11237] Bluetooth: Wrong link type (-22) [ 538.059117][T11237] Bluetooth: hci2: link tx timeout [ 538.059361][T11237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 538.110713][ T5625] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 538.248985][T12362] netlink: 122 bytes leftover after parsing attributes in process `syz.6.1971'. [ 538.278987][ T5625] usb 6-1: Using ep0 maxpacket: 32 [ 538.298310][ T5625] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 538.298337][ T5625] usb 6-1: config 0 has no interface number 0 [ 538.298374][ T5625] usb 6-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 538.331259][ T5625] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 538.331296][ T5625] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.331318][ T5625] usb 6-1: Product: syz [ 538.331333][ T5625] usb 6-1: Manufacturer: syz [ 538.331349][ T5625] usb 6-1: SerialNumber: syz [ 538.375874][ T5625] usb 6-1: config 0 descriptor?? [ 538.377777][ T5716] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 538.402070][ T5625] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 538.402346][ T5625] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 538.528462][ T5716] usb 8-1: Using ep0 maxpacket: 32 [ 538.541252][ T5716] usb 8-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 538.541287][ T5716] usb 8-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 538.541315][ T5716] usb 8-1: config 1 interface 0 has no altsetting 0 [ 538.545462][ T5716] usb 8-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 538.545491][ T5716] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.545511][ T5716] usb 8-1: Product: syz [ 538.545525][ T5716] usb 8-1: Manufacturer: ࠌ [ 538.545540][ T5716] usb 8-1: SerialNumber: syz [ 538.794179][ T5703] usb 6-1: USB disconnect, device number 74 [ 539.048123][ T5716] usbhid 8-1:1.0: can't add hid device: -71 [ 539.048242][ T5716] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 539.087651][ T5716] usb 8-1: USB disconnect, device number 22 [ 539.325642][T12381] Mount JFS Failure: -22 [ 539.325659][T12381] jfs_mount failed w/return code = -22 [ 539.602179][T12388] netlink: 'syz.8.1978': attribute type 3 has an invalid length. [ 539.949758][ T5716] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 539.997626][ T5625] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 540.107416][ T5716] usb 6-1: Using ep0 maxpacket: 8 [ 540.111520][ T5716] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 157, changing to 11 [ 540.111553][ T5716] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1080, setting to 1024 [ 540.111582][ T5716] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 540.111595][ T5716] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 540.111608][ T5716] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 540.113849][ T5716] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.113877][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.113897][ T5716] usb 6-1: Product: 硺䚾ꌘᚇ瑍뗬ॊ뒔枆侧뺼뻦쇬馈똲큛㸷䒁㕾ធ劺펷壏̗Ҿ⓵䑆䍉朽叢례푲엦䨢䱋ᤡ哣诇ᱤめ横뢜ﳤ垹࿺ሆ釠ཅ褐ꅬ̎؎翗䇴遨㏌黙ƣ笚綆魩䭷鬒㒱텎ᾍ᫹ׂꁶ湈⇟᷇刑ᓜ섡ằ릇쏾깑宅繁斀饧ᄱ則ᾉ⃼㣚蔾 [ 540.113926][ T5716] usb 6-1: Manufacturer: Ⓖ潧悧㇉︻␌詨ਡ᥽슚㇙╚沼弫솟㸬얌哻ꗑ훧渋塯俵刢쑷獪㚡蔯Ẓ铌뱹䂹氊徘ตﯥ뿟섋賀࿏⸗唧Ꮳ㿨䴑樃뿹ﳭ늺팮겡럎暯跇旘꿳栿粤췍뵭ᙖ끡鹫众堊駟྇㶲罦胴辇ợ䙰㟂⣤㑴⦑ꜣㄢ䨡挓㤋│剰ﻺ⁗酐罌櫿椇盫⏡龀뽗㑒凪첀鐠嬧膇ᜋ쟐⭗疇Ꮋ뻠೽넶 [ 540.113945][ T5716] usb 6-1: SerialNumber: syz [ 540.119472][ T5716] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 540.119504][ T5716] usb 6-1: no configuration chosen from 1 choice [ 540.136189][T11237] Bluetooth: hci2: command 0x0406 tx timeout [ 540.178860][ T5717] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 540.197402][ T5625] usb 8-1: Using ep0 maxpacket: 16 [ 540.229063][ T5625] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.229090][ T5625] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.231754][ T5625] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.231781][ T5625] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.231800][ T5625] usb 8-1: Product: syz [ 540.231814][ T5625] usb 8-1: Manufacturer: syz [ 540.231829][ T5625] usb 8-1: SerialNumber: syz [ 540.277300][ T5625] usb 8-1: 0:2 : does not exist [ 540.307347][ T5717] usb 9-1: device descriptor read/64, error -71 [ 540.675843][ T5625] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 540.724780][ T5625] usb 8-1: USB disconnect, device number 23 [ 540.776751][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.777440][ T5717] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 540.927688][ T5717] usb 9-1: device descriptor read/64, error -71 [ 541.000823][T12411] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1987'. [ 541.003679][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1987'. [ 541.037661][ T5717] usb usb9-port1: attempt power cycle [ 541.196448][ T60] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 541.196465][ T60] Bluetooth: Wrong link type (-22) [ 541.196532][ T60] Bluetooth: hci5: link tx timeout [ 541.196540][ T60] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 541.377404][ T5717] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 541.398344][ T5717] usb 9-1: device descriptor read/8, error -71 [ 541.488575][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1991'. [ 541.640373][ T5717] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 541.660210][ T5717] usb 9-1: device descriptor read/8, error -71 [ 541.779007][ T5717] usb usb9-port1: unable to enumerate USB device [ 542.247427][ T5625] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 542.397385][ T5625] usb 8-1: Using ep0 maxpacket: 16 [ 542.400458][ T5625] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 542.400485][ T5625] usb 8-1: config 0 has no interface number 0 [ 542.400519][ T5625] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 542.400533][ T5625] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 542.402610][ T5625] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 542.402637][ T5625] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.402658][ T5625] usb 8-1: Product: syz [ 542.402673][ T5625] usb 8-1: Manufacturer: syz [ 542.402684][ T5625] usb 8-1: SerialNumber: syz [ 542.406125][ T5625] usb 8-1: config 0 descriptor?? [ 542.408056][T12433] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 542.408177][T12433] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 542.641802][T12433] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 542.641927][T12433] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 542.724950][ T5717] usb 6-1: USB disconnect, device number 75 [ 542.849312][ T5625] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 543.258893][T11237] Bluetooth: hci5: command 0x0405 tx timeout [ 543.637173][T12463] comedi comedi0: multiq3: I/O base address not correctly aligned [ 543.934309][T12472] FAULT_INJECTION: forcing a failure. [ 543.934309][T12472] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 543.934335][T12472] CPU: 0 UID: 0 PID: 12472 Comm: syz.5.2012 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 543.934351][T12472] Tainted: [L]=SOFTLOCKUP [ 543.934355][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.934362][T12472] Call Trace: [ 543.934366][T12472] [ 543.934371][T12472] dump_stack_lvl+0xe8/0x150 [ 543.934390][T12472] should_fail_ex+0x46b/0x600 [ 543.934409][T12472] prepare_alloc_pages+0x22a/0x6b0 [ 543.934428][T12472] __alloc_frozen_pages_noprof+0x12f/0x380 [ 543.934445][T12472] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 543.934461][T12472] ? __pfx_policy_nodemask+0x10/0x10 [ 543.934481][T12472] alloc_pages_mpol+0xd1/0x380 [ 543.934497][T12472] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 543.934512][T12472] vma_alloc_folio_noprof+0xe1/0x1e0 [ 543.934528][T12472] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 543.934547][T12472] copy_pmd_range+0x4ba0/0x5550 [ 543.934573][T12472] ? lockdep_hardirqs_on+0x7a/0x110 [ 543.934593][T12472] ? __pfx_copy_pmd_range+0x10/0x10 [ 543.934606][T12472] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.934620][T12472] ? rt_spin_unlock+0x14f/0x200 [ 543.934635][T12472] ? rt_spin_unlock+0x160/0x200 [ 543.934648][T12472] ? __pud_alloc+0x348/0x460 [ 543.934662][T12472] copy_page_range+0xb3f/0x1150 [ 543.934688][T12472] ? __pfx_copy_page_range+0x10/0x10 [ 543.934711][T12472] dup_mmap+0xf5a/0x1d70 [ 543.934736][T12472] ? __pfx_dup_mmap+0x10/0x10 [ 543.934748][T12472] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 543.934767][T12472] ? copy_mm+0x10f/0x480 [ 543.934782][T12472] ? copy_mm+0x10f/0x480 [ 543.934804][T12472] copy_mm+0x11a/0x480 [ 543.934820][T12472] copy_process+0x1e30/0x43d0 [ 543.934839][T12472] ? copy_process+0xd4e/0x43d0 [ 543.934863][T12472] ? __pfx_copy_process+0x10/0x10 [ 543.934879][T12472] ? get_pid_task+0x20/0x1f0 [ 543.934889][T12472] ? get_pid_task+0x20/0x1f0 [ 543.934904][T12472] kernel_clone+0x2d7/0x940 [ 543.934922][T12472] ? __pfx_kernel_clone+0x10/0x10 [ 543.934936][T12472] ? do_raw_spin_lock+0x12b/0x2f0 [ 543.934957][T12472] __x64_sys_clone+0x1b6/0x230 [ 543.934969][T12472] ? __pfx___x64_sys_clone+0x10/0x10 [ 543.934987][T12472] ? __pfx_ksys_write+0x10/0x10 [ 543.935006][T12472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.935017][T12472] do_syscall_64+0x174/0x580 [ 543.935032][T12472] ? trace_irq_disable+0x3b/0x140 [ 543.935044][T12472] ? clear_bhb_loop+0x40/0x90 [ 543.935057][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.935068][T12472] RIP: 0033:0x7feb9a29ce59 [ 543.935079][T12472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.935088][T12472] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 543.935100][T12472] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 543.935108][T12472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 543.935115][T12472] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.935121][T12472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 543.935127][T12472] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 543.935144][T12472] [ 544.237342][ T32] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 544.409674][ T32] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 544.409710][ T32] usb 9-1: config 0 has no interface number 0 [ 544.409742][ T32] usb 9-1: config 0 interface 64 has no altsetting 0 [ 544.412083][ T32] usb 9-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=e9.7b [ 544.412112][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.412132][ T32] usb 9-1: Product: syz [ 544.412147][ T32] usb 9-1: Manufacturer: syz [ 544.412163][ T32] usb 9-1: SerialNumber: syz [ 544.475347][ T32] usb 9-1: config 0 descriptor?? [ 544.634108][T12483] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2017'. [ 544.896638][ T5625] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 544.896671][ T5625] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 544.896944][ T5625] asix 8-1:0.34: probe with driver asix failed with error -71 [ 544.925085][ T5625] usb 8-1: USB disconnect, device number 24 [ 545.028110][T10332] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 545.139354][T12493] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2020'. [ 545.143480][T12494] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2020'. [ 545.146509][ T32] usb 9-1: USB disconnect, device number 7 [ 545.157654][T10332] usb 6-1: device descriptor read/64, error -71 [ 545.400380][T10332] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 545.527386][T10332] usb 6-1: device descriptor read/64, error -71 [ 545.654159][T10332] usb usb6-port1: attempt power cycle [ 545.703551][ T60] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 545.703570][ T60] Bluetooth: Wrong link type (-22) [ 545.877397][ T5703] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 545.967615][ T32] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 545.987343][T10332] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 546.009402][T10332] usb 6-1: device descriptor read/8, error -71 [ 546.027334][ T5703] usb 8-1: Using ep0 maxpacket: 32 [ 546.029695][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 546.029726][ T5703] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 546.029751][ T5703] usb 8-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 546.029763][ T5703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.033137][ T5703] usb 8-1: config 0 descriptor?? [ 546.137499][ T32] usb 9-1: Using ep0 maxpacket: 32 [ 546.149205][ T32] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 546.149226][ T32] usb 9-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 546.149241][ T32] usb 9-1: config 1 interface 0 has no altsetting 0 [ 546.181284][ T32] usb 9-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.40 [ 546.181314][ T32] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.181372][ T32] usb 9-1: Product: syz [ 546.181381][ T32] usb 9-1: Manufacturer: ࠌ [ 546.181389][ T32] usb 9-1: SerialNumber: syz [ 546.277551][T10332] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 546.298069][T10332] usb 6-1: device descriptor read/8, error -71 [ 546.407655][T10332] usb usb6-port1: unable to enumerate USB device [ 546.641139][ T32] usbhid 9-1:1.0: can't add hid device: -71 [ 546.641320][ T32] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 546.643459][ T5703] usbhid 8-1:0.0: can't add hid device: -71 [ 546.643526][ T5703] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 546.684494][ T5703] usb 8-1: USB disconnect, device number 25 [ 546.694308][ T32] usb 9-1: USB disconnect, device number 8 [ 547.237111][T12517] netlink: 'syz.8.2026': attribute type 10 has an invalid length. [ 547.274250][T12517] team0: Port device dummy0 added [ 547.427682][ T37] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 547.517427][ T5703] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 547.577356][ T37] usb 8-1: Using ep0 maxpacket: 32 [ 547.582542][ T37] usb 8-1: unable to get BOS descriptor or descriptor too short [ 547.583584][ T37] usb 8-1: config 7 has an invalid interface number: 187 but max is 0 [ 547.583610][ T37] usb 8-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 547.583629][ T37] usb 8-1: config 7 has no interface number 0 [ 547.586934][ T37] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 547.586958][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.586969][ T37] usb 8-1: Product: syz [ 547.586977][ T37] usb 8-1: Manufacturer: syz [ 547.586984][ T37] usb 8-1: SerialNumber: syz [ 547.727619][ T5703] usb 9-1: device descriptor read/64, error -71 [ 547.855022][T12519] FAULT_INJECTION: forcing a failure. [ 547.855022][T12519] name failslab, interval 1, probability 0, space 0, times 0 [ 547.855047][T12519] CPU: 0 UID: 0 PID: 12519 Comm: syz.5.2027 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 547.855074][T12519] Tainted: [L]=SOFTLOCKUP [ 547.855081][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 547.855093][T12519] Call Trace: [ 547.855101][T12519] [ 547.855110][T12519] dump_stack_lvl+0xe8/0x150 [ 547.855136][T12519] should_fail_ex+0x46b/0x600 [ 547.855169][T12519] should_failslab+0xa8/0x100 [ 547.855184][T12519] kmem_cache_alloc_noprof+0x87/0x680 [ 547.855197][T12519] ? skb_clone+0x212/0x3a0 [ 547.855209][T12519] skb_clone+0x212/0x3a0 [ 547.855225][T12519] __netlink_deliver_tap+0x424/0x8b0 [ 547.855267][T12519] ? netlink_deliver_tap+0x2e/0x1b0 [ 547.855298][T12519] netlink_deliver_tap+0x19c/0x1b0 [ 547.855327][T12519] netlink_unicast+0x754/0x920 [ 547.855354][T12519] netlink_sendmsg+0x813/0xb40 [ 547.855368][T12519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.855379][T12519] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 547.855405][T12519] ? aa_sock_msg_perm+0x122/0x200 [ 547.855428][T12519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.855446][T12519] sock_sendmsg_nosec+0x13a/0x180 [ 547.855472][T12519] ____sys_sendmsg+0x55c/0x870 [ 547.855505][T12519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.855525][T12519] ? import_iovec+0x73/0xa0 [ 547.855538][T12519] ___sys_sendmsg+0x2a5/0x360 [ 547.855556][T12519] ? __lock_acquire+0x6b5/0x2d10 [ 547.855583][T12519] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.855651][T12519] ? __fget_files+0x2a/0x420 [ 547.855670][T12519] ? __fget_files+0x3a6/0x420 [ 547.855687][T12519] __x64_sys_sendmsg+0x1c3/0x2a0 [ 547.855704][T12519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.855731][T12519] ? __pfx_ksys_write+0x10/0x10 [ 547.855767][T12519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.855796][T12519] do_syscall_64+0x174/0x580 [ 547.855824][T12519] ? trace_irq_disable+0x3b/0x140 [ 547.855840][T12519] ? clear_bhb_loop+0x40/0x90 [ 547.855853][T12519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.855864][T12519] RIP: 0033:0x7feb9a29ce59 [ 547.855875][T12519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.855886][T12519] RSP: 002b:00007feb984f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.855907][T12519] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 547.855921][T12519] RDX: 0000000000040800 RSI: 0000200000000240 RDI: 0000000000000004 [ 547.855935][T12519] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 547.855947][T12519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.855959][T12519] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 547.855992][T12519] [ 547.871449][ T37] usb 8-1: Invalid number of CPorts: 0 [ 547.871492][ T37] es2_ap_driver 8-1:7.187: probe with driver es2_ap_driver failed with error -22 [ 548.133363][ T5703] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 548.199370][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.203988][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.211911][T10332] usb 8-1: USB disconnect, device number 26 [ 548.338805][ T5703] usb 9-1: device descriptor read/64, error -71 [ 548.344192][T11047] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.448338][ T5703] usb usb9-port1: attempt power cycle [ 548.763810][T12548] FAULT_INJECTION: forcing a failure. [ 548.763810][T12548] name failslab, interval 1, probability 0, space 0, times 0 [ 548.763858][T12548] CPU: 1 UID: 0 PID: 12548 Comm: syz.6.2036 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 548.763886][T12548] Tainted: [L]=SOFTLOCKUP [ 548.763893][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.763903][T12548] Call Trace: [ 548.763911][T12548] [ 548.763919][T12548] dump_stack_lvl+0xe8/0x150 [ 548.763943][T12548] should_fail_ex+0x46b/0x600 [ 548.763977][T12548] should_failslab+0xa8/0x100 [ 548.764002][T12548] kmem_cache_alloc_noprof+0x87/0x680 [ 548.764026][T12548] ? skb_clone+0x212/0x3a0 [ 548.764049][T12548] skb_clone+0x212/0x3a0 [ 548.764069][T12548] __netlink_deliver_tap+0x424/0x8b0 [ 548.764109][T12548] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.764140][T12548] netlink_deliver_tap+0x19c/0x1b0 [ 548.764169][T12548] netlink_unicast+0x754/0x920 [ 548.764203][T12548] netlink_sendmsg+0x813/0xb40 [ 548.764231][T12548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.764252][T12548] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 548.764280][T12548] ? aa_sock_msg_perm+0x122/0x200 [ 548.764303][T12548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.764321][T12548] sock_sendmsg_nosec+0x13a/0x180 [ 548.764356][T12548] ____sys_sendmsg+0x55c/0x870 [ 548.764392][T12548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.764430][T12548] ? import_iovec+0x73/0xa0 [ 548.764456][T12548] ___sys_sendmsg+0x2a5/0x360 [ 548.764484][T12548] ? __lock_acquire+0x6b5/0x2d10 [ 548.764514][T12548] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.764573][T12548] ? __fget_files+0x2a/0x420 [ 548.764596][T12548] ? __fget_files+0x3a6/0x420 [ 548.764629][T12548] __x64_sys_sendmsg+0x1c3/0x2a0 [ 548.764661][T12548] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.764699][T12548] ? __pfx_ksys_write+0x10/0x10 [ 548.764733][T12548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.764754][T12548] do_syscall_64+0x174/0x580 [ 548.764781][T12548] ? trace_irq_disable+0x3b/0x140 [ 548.764803][T12548] ? clear_bhb_loop+0x40/0x90 [ 548.764828][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.764847][T12548] RIP: 0033:0x7f6ba302ce59 [ 548.764865][T12548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.764881][T12548] RSP: 002b:00007f6ba127e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.764900][T12548] RAX: ffffffffffffffda RBX: 00007f6ba32a5fa0 RCX: 00007f6ba302ce59 [ 548.764915][T12548] RDX: 0000000000040800 RSI: 0000200000000240 RDI: 0000000000000004 [ 548.764928][T12548] RBP: 00007f6ba127e090 R08: 0000000000000000 R09: 0000000000000000 [ 548.764940][T12548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.764950][T12548] R13: 00007f6ba32a6038 R14: 00007f6ba32a5fa0 R15: 00007ffc086eb358 [ 548.764981][T12548] [ 548.883908][ T5703] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 548.909304][ T5703] usb 9-1: device descriptor read/8, error -71 [ 548.947453][ T37] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 549.161622][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.161658][ T37] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.161699][ T37] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 549.161724][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.187435][ T5703] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 549.208783][ T5703] usb 9-1: device descriptor read/8, error -71 [ 549.220722][ T37] usb 6-1: config 0 descriptor?? [ 549.334081][ T5703] usb usb9-port1: unable to enumerate USB device [ 549.623808][ T37] hid_parser_main: 468 callbacks suppressed [ 549.623834][ T37] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 549.623870][ T37] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 549.623899][ T37] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 549.623926][ T37] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 549.623955][ T37] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 549.623982][ T37] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 549.624009][ T37] hid-thrustmaster 0003:044F:B65D.0017: unknown main item tag 0x0 [ 549.627148][ T37] hid-thrustmaster 0003:044F:B65D.0017: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 549.627594][ T37] hid-thrustmaster 0003:044F:B65D.0017: Wrong number of endpoints? [ 549.643632][T10332] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 549.786236][T10332] usb 8-1: Using ep0 maxpacket: 32 [ 549.788217][T10332] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 549.788251][T10332] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.788292][T10332] usb 8-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 549.788311][T10332] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.792992][T10332] usb 8-1: config 0 descriptor?? [ 549.802474][ C1] hid-thrustmaster 0003:044F:B65D.0017: Wheel with model id 0x2 is a Thrustmaster T500RS [ 549.994761][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2035'. [ 550.067601][ C1] hid-thrustmaster 0003:044F:B65D.0017: Success?! The wheel should have been initialized! [ 550.292497][ T37] usb 6-1: USB disconnect, device number 80 [ 550.508653][T10332] usbhid 8-1:0.0: can't add hid device: -71 [ 550.508768][T10332] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 550.540901][T10332] usb 8-1: USB disconnect, device number 27 [ 550.974620][ T37] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 551.148297][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 551.150003][ T37] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 551.150029][ T37] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 551.150049][ T37] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 551.150070][ T37] usb 6-1: config 1 has no interface number 0 [ 551.150106][ T37] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.150121][ T37] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 551.150143][ T37] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 551.150156][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.246450][ T37] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 551.444672][ T37] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 551.679819][ T5600] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 551.714444][ T37] usb 6-1: USB disconnect, device number 81 [ 551.720033][ T37] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 551.852637][ T5600] usb 9-1: Using ep0 maxpacket: 32 [ 551.861644][ T5600] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.861673][ T5600] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 551.861698][ T5600] usb 9-1: config 0 interface 0 has no altsetting 0 [ 551.881111][ T5600] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 551.881142][ T5600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.881161][ T5600] usb 9-1: Product: syz [ 551.881175][ T5600] usb 9-1: Manufacturer: syz [ 551.881190][ T5600] usb 9-1: SerialNumber: syz [ 551.901031][ T5600] usb 9-1: config 0 descriptor?? [ 552.116023][ T5600] gs_usb 9-1:0.0: Couldn't get device config: (err=-32) [ 552.116066][ T5600] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -32 [ 552.267122][T12621] FAULT_INJECTION: forcing a failure. [ 552.267122][T12621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.267146][T12621] CPU: 0 UID: 0 PID: 12621 Comm: syz.5.2061 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.267162][T12621] Tainted: [L]=SOFTLOCKUP [ 552.267166][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.267173][T12621] Call Trace: [ 552.267178][T12621] [ 552.267183][T12621] dump_stack_lvl+0xe8/0x150 [ 552.267202][T12621] should_fail_ex+0x46b/0x600 [ 552.267221][T12621] prepare_alloc_pages+0x22a/0x6b0 [ 552.267240][T12621] __alloc_frozen_pages_noprof+0x12f/0x380 [ 552.267256][T12621] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.267272][T12621] ? __pfx_policy_nodemask+0x10/0x10 [ 552.267292][T12621] alloc_pages_mpol+0xd1/0x380 [ 552.267308][T12621] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 552.267323][T12621] vma_alloc_folio_noprof+0xe1/0x1e0 [ 552.267339][T12621] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 552.267358][T12621] copy_pmd_range+0x4ba0/0x5550 [ 552.267384][T12621] ? lockdep_hardirqs_on+0x7a/0x110 [ 552.267404][T12621] ? __pfx_copy_pmd_range+0x10/0x10 [ 552.267419][T12621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 552.267434][T12621] ? rt_spin_unlock+0x14f/0x200 [ 552.267448][T12621] ? rt_spin_unlock+0x160/0x200 [ 552.267462][T12621] ? __pud_alloc+0x348/0x460 [ 552.267476][T12621] copy_page_range+0xb3f/0x1150 [ 552.267501][T12621] ? __pfx_copy_page_range+0x10/0x10 [ 552.267525][T12621] dup_mmap+0xf5a/0x1d70 [ 552.267549][T12621] ? __pfx_dup_mmap+0x10/0x10 [ 552.267562][T12621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 552.267580][T12621] ? copy_mm+0x10f/0x480 [ 552.267596][T12621] ? copy_mm+0x10f/0x480 [ 552.267619][T12621] copy_mm+0x11a/0x480 [ 552.267635][T12621] copy_process+0x1e30/0x43d0 [ 552.267654][T12621] ? copy_process+0xd4e/0x43d0 [ 552.267679][T12621] ? __pfx_copy_process+0x10/0x10 [ 552.267694][T12621] ? get_pid_task+0x20/0x1f0 [ 552.267704][T12621] ? get_pid_task+0x20/0x1f0 [ 552.267719][T12621] kernel_clone+0x2d7/0x940 [ 552.267737][T12621] ? __pfx_kernel_clone+0x10/0x10 [ 552.267751][T12621] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.267772][T12621] __x64_sys_clone+0x1b6/0x230 [ 552.267784][T12621] ? __pfx___x64_sys_clone+0x10/0x10 [ 552.267803][T12621] ? __pfx_ksys_write+0x10/0x10 [ 552.267821][T12621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.267833][T12621] do_syscall_64+0x174/0x580 [ 552.267848][T12621] ? trace_irq_disable+0x3b/0x140 [ 552.267860][T12621] ? clear_bhb_loop+0x40/0x90 [ 552.267872][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.267883][T12621] RIP: 0033:0x7feb9a29ce59 [ 552.267894][T12621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.267904][T12621] RSP: 002b:00007feb984f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 552.267921][T12621] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 552.267929][T12621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002b00b000 [ 552.267936][T12621] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.267943][T12621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 552.267949][T12621] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 552.267972][T12621] [ 552.352659][ T5600] usb 9-1: USB disconnect, device number 13 [ 552.781005][T12634] netlink: 122 bytes leftover after parsing attributes in process `syz.7.2066'. [ 552.905892][T12640] FAULT_INJECTION: forcing a failure. [ 552.905892][T12640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.905918][T12640] CPU: 0 UID: 0 PID: 12640 Comm: syz.5.2069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.905933][T12640] Tainted: [L]=SOFTLOCKUP [ 552.905937][T12640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.905945][T12640] Call Trace: [ 552.905949][T12640] [ 552.905954][T12640] dump_stack_lvl+0xe8/0x150 [ 552.905969][T12640] should_fail_ex+0x46b/0x600 [ 552.905989][T12640] _copy_to_user+0x31/0xb0 [ 552.906002][T12640] simple_read_from_buffer+0xe1/0x170 [ 552.906018][T12640] proc_fail_nth_read+0x1be/0x230 [ 552.906033][T12640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.906046][T12640] ? rw_verify_area+0x2ac/0x4e0 [ 552.906060][T12640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.906073][T12640] vfs_read+0x212/0xa80 [ 552.906091][T12640] ? __pfx_vfs_read+0x10/0x10 [ 552.906105][T12640] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 552.906122][T12640] ? lockdep_hardirqs_on+0x7a/0x110 [ 552.906138][T12640] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 552.906152][T12640] ? mutex_lock_nested+0x152/0x1d0 [ 552.906164][T12640] ? fdget_pos+0x252/0x320 [ 552.906180][T12640] ksys_read+0x156/0x270 [ 552.906195][T12640] ? __pfx_ksys_read+0x10/0x10 [ 552.906213][T12640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.906225][T12640] do_syscall_64+0x174/0x580 [ 552.906240][T12640] ? trace_irq_disable+0x3b/0x140 [ 552.906252][T12640] ? clear_bhb_loop+0x40/0x90 [ 552.906265][T12640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.906275][T12640] RIP: 0033:0x7feb9a25d68e [ 552.906285][T12640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 552.906294][T12640] RSP: 002b:00007feb984f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.906307][T12640] RAX: ffffffffffffffda RBX: 00007feb984f66c0 RCX: 00007feb9a25d68e [ 552.906315][T12640] RDX: 000000000000000f RSI: 00007feb984f60a0 RDI: 0000000000000005 [ 552.906321][T12640] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.906328][T12640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.906334][T12640] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 552.906350][T12640] [ 552.995166][ T5600] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 553.171805][ T5600] usb 9-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 553.171835][ T5600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.171856][ T5600] usb 9-1: Product: syz [ 553.171870][ T5600] usb 9-1: Manufacturer: syz [ 553.171885][ T5600] usb 9-1: SerialNumber: syz [ 553.187398][ T5600] usb 9-1: config 0 descriptor?? [ 553.381404][ T5600] usb 9-1: USB disconnect, device number 14 [ 553.555764][T10332] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 553.702288][T10332] usb 8-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 553.702344][T10332] usb 8-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.705101][T10332] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 553.705130][T10332] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 553.705151][T10332] usb 8-1: Manufacturer: syz [ 553.705166][T10332] usb 8-1: SerialNumber: syz [ 553.970170][T12675] netlink: 122 bytes leftover after parsing attributes in process `syz.8.2085'. [ 553.989435][T12653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2074'. [ 554.157501][T12682] netlink: 'syz.7.2074': attribute type 2 has an invalid length. [ 554.157515][T12682] netlink: 'syz.7.2074': attribute type 1 has an invalid length. [ 554.157523][T12682] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2074'. [ 554.358815][T12652] ALSA: mixer_oss: invalid OSS volume '*!Z=6,ퟟS' [ 554.358837][T12652] ALSA: mixer_oss: invalid OSS volume 'r]tN`1' [ 554.365848][T10332] usbhid 8-1:36.0: couldn't find an input interrupt endpoint [ 554.378565][T10332] usb 8-1: USB disconnect, device number 28 [ 554.518761][ T5600] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 554.684821][ T5600] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 554.684852][ T5600] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.684873][ T5600] usb 9-1: Product: syz [ 554.684885][ T5600] usb 9-1: Manufacturer: syz [ 554.684893][ T5600] usb 9-1: SerialNumber: syz [ 554.888874][T12692] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 554.889037][ T5795] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 555.054584][ T5795] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 555.054602][ T5795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.054614][ T5795] usb 6-1: config 0 has no interface number 0 [ 555.054640][ T5795] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 555.054718][ T5795] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 555.054744][ T5795] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 555.054756][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.060086][ T5795] usb 6-1: config 0 descriptor?? [ 555.096239][ T5600] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 555.096301][ T5600] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 555.146482][T10332] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 555.213941][ T5795] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 555.271574][T10332] usb 8-1: device descriptor read/64, error -71 [ 555.320448][T12690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.321516][T12690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.501087][T10332] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 555.641540][T10332] usb 8-1: device descriptor read/64, error -71 [ 555.721242][ T3421] usb 6-1: Failed to submit usb control message: -71 [ 555.721277][ T3421] usb 6-1: unable to send the bmi data to the device: -71 [ 555.721294][ T3421] usb 6-1: unable to get target info from device [ 555.721324][ T3421] usb 6-1: could not get target info (-71) [ 555.721411][ T3421] usb 6-1: could not probe fw (-71) [ 555.722376][ T5795] usb 6-1: USB disconnect, device number 82 [ 555.748458][T10332] usb usb8-port1: attempt power cycle [ 556.100059][T10332] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 556.120668][T10332] usb 8-1: device descriptor read/8, error -71 [ 556.346644][T10332] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 556.367683][T10332] usb 8-1: device descriptor read/8, error -71 [ 556.486903][T10332] usb usb8-port1: unable to enumerate USB device [ 556.686951][ T5600] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 556.687015][ T5600] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 556.687916][ T5600] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 556.723796][ T5600] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 556.744866][ T5600] usb 9-1: USB disconnect, device number 15 [ 557.306364][T12749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.307234][T12749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.498817][ T37] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 557.603670][ T5703] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 557.660770][ T37] usb 9-1: Using ep0 maxpacket: 8 [ 557.665483][ T37] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 252, changing to 7 [ 557.667702][ T37] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 557.667720][ T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.667731][ T37] usb 9-1: Product: ﳿ [ 557.667739][ T37] usb 9-1: Manufacturer:   [ 557.667746][ T37] usb 9-1: SerialNumber: 뗸凡瘌隕Џ腋꧄韁䖿ﯔ딱꾨♮㌝冗Ηꠘ鈮誘했謼ૈ룅䎮∎잏莣∋䏨띨⚺샡鄓灓䣫褏젰볶』ሯ抦䱂ꚬ⍿꠰춂拡芑㈹흜į黣搊ਃ釽목俤覘侮心ꝍ綼館ꤓ瞯ᾛﵮ乩潎뚯⇳ꍎ취য়퐧꼫鋢符릾笠❎豂邰᥈㠞腩짗媾ꛢ [ 557.774974][ T5703] usb 6-1: Using ep0 maxpacket: 32 [ 557.780397][ T5703] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 557.780415][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.816827][ T5703] usb 6-1: config 0 descriptor?? [ 557.844503][ T5703] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 557.927114][T12752] lo speed is unknown, defaulting to 1000 [ 557.986487][ T37] usb 9-1: unit 11 not found! [ 558.040453][ T5703] gspca_vc032x: reg_r err -71 [ 558.040473][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040484][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040493][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040502][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040511][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040521][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040529][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040537][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040546][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040555][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040564][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040573][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040582][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040591][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040600][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040609][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040618][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040628][ T5703] gspca_vc032x: I2c Bus Busy Wait 00 [ 558.040637][ T5703] gspca_vc032x: Unknown sensor... [ 558.045379][ T5703] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 558.112777][ T5703] usb 6-1: USB disconnect, device number 83 [ 558.367652][ T37] usb 9-1: USB disconnect, device number 16 [ 558.613476][T12755] netlink: 'syz.8.2111': attribute type 2 has an invalid length. [ 558.613498][T12755] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2111'. [ 558.695879][ T60] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 558.848964][T12752] lo speed is unknown, defaulting to 1000 [ 558.898691][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.099083][ T37] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 559.261024][ T37] usb 9-1: Using ep0 maxpacket: 16 [ 559.274624][ T37] usb 9-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 559.274659][ T37] usb 9-1: config 0 interface 0 has no altsetting 0 [ 559.274692][ T37] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 559.274716][ T37] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.289982][ T37] usb 9-1: config 0 descriptor?? [ 559.498984][ T5716] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 559.656768][ T5716] usb 6-1: not running at top speed; connect to a high speed hub [ 559.663305][ T5716] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.663335][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.663356][ T5716] usb 6-1: Product: 䐊 [ 559.663371][ T5716] usb 6-1: Manufacturer: 폙갔뼝绾㲷뵬䞋篸ẫᚰ샠䠡ⶇᄫ灇㚀正볳㤡ን뇫䤇渺꧒跱ꕖꘝ蕶ܲ됦⾱貈몢⍃ [ 559.663393][ T5716] usb 6-1: SerialNumber: Щ [ 559.697892][ T37] bigben 0003:146B:0902.0018: unexpected rdesc, please submit for review [ 559.698550][ T37] bigben 0003:146B:0902.0018: item fetching failed at offset 16/40 [ 559.699663][ T37] bigben 0003:146B:0902.0018: parse failed [ 559.699765][ T37] bigben 0003:146B:0902.0018: probe with driver bigben failed with error -22 [ 559.889257][T12778] netlink: 'syz.8.2111': attribute type 2 has an invalid length. [ 559.889374][T12778] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2111'. [ 559.891488][T12779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.891953][T12779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.958698][ T5716] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 560.200203][ T5716] usb 6-1: 2:1: invalid format type 0x1006 is detected, processed as PCM [ 560.200234][ T5716] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 560.200648][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.213526][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.413631][ T5716] usb 6-1: USB disconnect, device number 84 [ 560.493270][ T7294] udevd[7294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.756353][ T5716] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 560.919578][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.919607][ T5716] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.919619][ T5716] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 560.919644][ T5716] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 560.919656][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.924377][ T5716] usb 6-1: config 0 descriptor?? [ 561.225129][ T5716] usbhid 6-1:0.0: can't add hid device: -71 [ 561.225333][ T5716] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 561.261926][ T5716] usb 6-1: USB disconnect, device number 85 [ 561.552253][ T5703] usb 9-1: USB disconnect, device number 17 [ 561.791632][T12806] Unsupported ieee802154 address type: 0 [ 561.891674][ T821] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 562.055904][ T821] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 562.055965][ T821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 562.055995][ T821] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 562.056039][ T821] usb 8-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 562.056064][ T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.084027][ T821] usb 8-1: config 0 descriptor?? [ 562.090643][T12796] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 562.139432][ T5703] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 562.254027][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.254127][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.299318][ T5703] usb 9-1: Using ep0 maxpacket: 16 [ 562.301843][ T5703] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 562.301895][ T5703] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 562.301986][ T5703] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 562.302011][ T5703] usb 9-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 562.302032][ T5703] usb 9-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 562.302056][ T5703] usb 9-1: config 1 interface 0 has no altsetting 0 [ 562.302088][ T5703] usb 9-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 562.302159][ T5703] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.448758][ T5703] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 562.510130][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x2 [ 562.510154][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x0 [ 562.510171][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x1 [ 562.510187][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x0 [ 562.510202][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x2 [ 562.510219][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x0 [ 562.510235][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x0 [ 562.510249][ T821] logitech 0003:046D:C298.0019: unknown main item tag 0x0 [ 562.759666][ T821] logitech 0003:046D:C298.0019: hidraw0: USB HID v0.05 Device [HID 046d:c298] on usb-dummy_hcd.7-1/input0 [ 562.759783][ T821] logitech 0003:046D:C298.0019: no inputs found [ 562.933287][ T5703] ums-sddr09 9-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 562.998559][ T5703] usb 9-1: USB disconnect, device number 18 [ 563.224230][ T5625] usb 8-1: USB disconnect, device number 33 [ 563.764807][T12851] FAULT_INJECTION: forcing a failure. [ 563.764807][T12851] name failslab, interval 1, probability 0, space 0, times 0 [ 563.764838][T12851] CPU: 1 UID: 0 PID: 12851 Comm: syz.5.2142 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.764854][T12851] Tainted: [L]=SOFTLOCKUP [ 563.764857][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.764864][T12851] Call Trace: [ 563.764868][T12851] [ 563.764874][T12851] dump_stack_lvl+0xe8/0x150 [ 563.764891][T12851] should_fail_ex+0x46b/0x600 [ 563.764923][T12851] should_failslab+0xa8/0x100 [ 563.764949][T12851] __kmalloc_noprof+0xdf/0x7b0 [ 563.764972][T12851] ? tomoyo_encode+0x28b/0x550 [ 563.764997][T12851] tomoyo_encode+0x28b/0x550 [ 563.765022][T12851] tomoyo_realpath_from_path+0x58d/0x5d0 [ 563.765040][T12851] ? tomoyo_path_number_perm+0x219/0x630 [ 563.765057][T12851] tomoyo_path_number_perm+0x246/0x630 [ 563.765073][T12851] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 563.765088][T12851] ? __lock_acquire+0x6b5/0x2d10 [ 563.765103][T12851] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.765129][T12851] ? __fget_files+0x2a/0x420 [ 563.765143][T12851] ? __fget_files+0x2a/0x420 [ 563.765154][T12851] ? __fget_files+0x3a6/0x420 [ 563.765165][T12851] ? __fget_files+0x2a/0x420 [ 563.765178][T12851] security_file_ioctl+0xc3/0x2a0 [ 563.765195][T12851] __se_sys_ioctl+0x47/0x170 [ 563.765210][T12851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.765222][T12851] do_syscall_64+0x174/0x580 [ 563.765237][T12851] ? trace_irq_disable+0x3b/0x140 [ 563.765250][T12851] ? clear_bhb_loop+0x40/0x90 [ 563.765262][T12851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.765273][T12851] RIP: 0033:0x7feb9a29ce59 [ 563.765284][T12851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.765293][T12851] RSP: 002b:00007feb984f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.765305][T12851] RAX: ffffffffffffffda RBX: 00007feb9a515fa0 RCX: 00007feb9a29ce59 [ 563.765316][T12851] RDX: 0000200000000340 RSI: 0000000040946400 RDI: 0000000000000003 [ 563.765324][T12851] RBP: 00007feb984f6090 R08: 0000000000000000 R09: 0000000000000000 [ 563.765330][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.765337][T12851] R13: 00007feb9a516038 R14: 00007feb9a515fa0 R15: 00007ffd753b5d38 [ 563.765353][T12851] [ 563.765365][T12851] ERROR: Out of memory at tomoyo_realpath_from_path. [ 563.765383][T12851] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 563.898646][T12855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.902211][T12855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.318657][T12864] FAULT_INJECTION: forcing a failure. [ 564.318657][T12864] name failslab, interval 1, probability 0, space 0, times 0 [ 564.318692][T12864] CPU: 0 UID: 0 PID: 12864 Comm: syz.6.2147 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.318719][T12864] Tainted: [L]=SOFTLOCKUP [ 564.318727][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.318738][T12864] Call Trace: [ 564.318746][T12864] [ 564.318753][T12864] dump_stack_lvl+0xe8/0x150 [ 564.318781][T12864] should_fail_ex+0x46b/0x600 [ 564.318813][T12864] should_failslab+0xa8/0x100 [ 564.318838][T12864] __kmalloc_noprof+0xdf/0x7b0 [ 564.318859][T12864] ? kfree+0x4d/0x6c0 [ 564.318877][T12864] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 564.318905][T12864] tomoyo_realpath_from_path+0xe3/0x5d0 [ 564.318930][T12864] ? tomoyo_domain+0xd7/0x130 [ 564.318957][T12864] ? tomoyo_path_number_perm+0x219/0x630 [ 564.318986][T12864] tomoyo_path_number_perm+0x246/0x630 [ 564.319017][T12864] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 564.319045][T12864] ? __lock_acquire+0x6b5/0x2d10 [ 564.319071][T12864] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.319125][T12864] ? __fget_files+0x2a/0x420 [ 564.319151][T12864] ? __fget_files+0x2a/0x420 [ 564.319172][T12864] ? __fget_files+0x3a6/0x420 [ 564.319193][T12864] ? __fget_files+0x2a/0x420 [ 564.319218][T12864] security_file_ioctl+0xc3/0x2a0 [ 564.319248][T12864] __se_sys_ioctl+0x47/0x170 [ 564.319284][T12864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.319304][T12864] do_syscall_64+0x174/0x580 [ 564.319333][T12864] ? clear_bhb_loop+0x40/0x90 [ 564.319357][T12864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.319377][T12864] RIP: 0033:0x7f6ba302ce59 [ 564.319395][T12864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.319411][T12864] RSP: 002b:00007f6ba127e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.319431][T12864] RAX: ffffffffffffffda RBX: 00007f6ba32a5fa0 RCX: 00007f6ba302ce59 [ 564.319445][T12864] RDX: 0000200000000040 RSI: 0000000040384708 RDI: 0000000000000003 [ 564.319458][T12864] RBP: 00007f6ba127e090 R08: 0000000000000000 R09: 0000000000000000 [ 564.319470][T12864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.319481][T12864] R13: 00007f6ba32a6038 R14: 00007f6ba32a5fa0 R15: 00007ffc086eb358 [ 564.319512][T12864] [ 564.319795][T12864] ERROR: Out of memory at tomoyo_realpath_from_path. [ 564.675275][T12871] netlink: 122 bytes leftover after parsing attributes in process `syz.6.2149'. [ 564.927153][T12876] FAULT_INJECTION: forcing a failure. [ 564.927153][T12876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.927188][T12876] CPU: 0 UID: 0 PID: 12876 Comm: syz.6.2151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.927223][T12876] Tainted: [L]=SOFTLOCKUP [ 564.927230][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.927241][T12876] Call Trace: [ 564.927249][T12876] [ 564.927258][T12876] dump_stack_lvl+0xe8/0x150 [ 564.927287][T12876] should_fail_ex+0x46b/0x600 [ 564.927321][T12876] _copy_from_user+0x2d/0xb0 [ 564.927345][T12876] comedi_unlocked_ioctl+0x603/0x1b00 [ 564.927389][T12876] ? kasan_quarantine_put+0xbb/0x1f0 [ 564.927412][T12876] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 564.927454][T12876] ? do_vfs_ioctl+0x117b/0x1540 [ 564.927485][T12876] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 564.927541][T12876] ? __fget_files+0x2a/0x420 [ 564.927566][T12876] ? __fget_files+0x2a/0x420 [ 564.927587][T12876] ? __fget_files+0x3a6/0x420 [ 564.927608][T12876] ? __fget_files+0x2a/0x420 [ 564.927634][T12876] ? bpf_lsm_file_ioctl+0x9/0x20 [ 564.927662][T12876] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 564.927689][T12876] __se_sys_ioctl+0xff/0x170 [ 564.927715][T12876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.927737][T12876] do_syscall_64+0x174/0x580 [ 564.927765][T12876] ? trace_irq_disable+0x3b/0x140 [ 564.927789][T12876] ? clear_bhb_loop+0x40/0x90 [ 564.927811][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.927831][T12876] RIP: 0033:0x7f6ba302ce59 [ 564.927849][T12876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.927866][T12876] RSP: 002b:00007f6ba127e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.927887][T12876] RAX: ffffffffffffffda RBX: 00007f6ba32a5fa0 RCX: 00007f6ba302ce59 [ 564.927900][T12876] RDX: 0000200000000340 RSI: 0000000040946400 RDI: 0000000000000003 [ 564.927914][T12876] RBP: 00007f6ba127e090 R08: 0000000000000000 R09: 0000000000000000 [ 564.927926][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.927939][T12876] R13: 00007f6ba32a6038 R14: 00007f6ba32a5fa0 R15: 00007ffc086eb358 [ 564.927971][T12876] [ 565.226754][ T5600] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 565.259195][ T39] INFO: task syz.4.1356:10337 blocked for more than 143 seconds. [ 565.259221][ T39] Tainted: G L syzkaller #0 [ 565.259221][ T39] Tainted: G L syzkaller #0 [ 565.259232][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.259242][ T39] task:syz.4.1356 state:D stack:25528 pid:10337 tgid:10336 ppid:6209 task_flags:0x400140 flags:0x00080002 [ 565.259300][ T39] Call Trace: [ 565.259308][ T39] [ 565.259321][ T39] __schedule+0x16f9/0x5500 [ 565.259368][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.259401][ T39] ? __pfx___schedule+0x10/0x10 [ 565.259436][ T39] ? schedule+0x90/0x360 [ 565.259465][ T39] schedule+0x164/0x360 [ 565.259494][ T39] cgroup_lock_and_drain_offline+0x516/0x650 [ 565.259527][ T39] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 565.259550][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 565.259587][ T39] cgroup_kn_lock_live+0x120/0x230 [ 565.259610][ T39] cgroup_subtree_control_write+0x4b3/0x10a0 [ 565.259642][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 565.259663][ T39] ? kernfs_root+0x1c/0x230 [ 565.259685][ T39] ? kernfs_root+0x1c/0x230 [ 565.259708][ T39] ? kernfs_root+0x1ea/0x230 [ 565.259731][ T39] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 565.259751][ T39] cgroup_file_write+0x331/0x8f0 [ 565.259787][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 565.259815][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 565.259844][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 565.259883][ T39] ? __pfx_cgroup_file_write+0x10/0x10 [ 565.259908][ T39] kernfs_fop_write_iter+0x3b0/0x540 [ 565.259944][ T39] vfs_write+0x629/0xba0 [ 565.259979][ T39] ? __pfx_vfs_write+0x10/0x10 [ 565.260009][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 565.260037][ T39] ? lockdep_hardirqs_on+0x7a/0x110 [ 565.260067][ T39] ? mutex_lock_nested+0x152/0x1d0 [ 565.260089][ T39] ? fdget_pos+0x252/0x320 [ 565.260122][ T39] ksys_write+0x156/0x270 [ 565.260151][ T39] ? __pfx_ksys_write+0x10/0x10 [ 565.260190][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.260212][ T39] do_syscall_64+0x174/0x580 [ 565.260242][ T39] ? clear_bhb_loop+0x40/0x90 [ 565.260267][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.260287][ T39] RIP: 0033:0x7f377992ce59 [ 565.260305][ T39] RSP: 002b:00007f3777b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.260324][ T39] RAX: ffffffffffffffda RBX: 00007f3779ba5fa0 RCX: 00007f377992ce59 [ 565.260339][ T39] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000008 [ 565.260353][ T39] RBP: 00007f37799c2d6f R08: 0000000000000000 R09: 0000000000000000 [ 565.260366][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.260378][ T39] R13: 00007f3779ba6038 R14: 00007f3779ba5fa0 R15: 00007ffced183328 [ 565.260410][ T39] [ 565.263980][ T39] [ 565.263980][ T39] Showing all locks held in the system: [ 565.263994][ T39] 4 locks held by pr/legacy/17: [ 565.264007][ T39] #0: ffffffff8e1bccc0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 565.264060][ T39] #1: ffffffff8e0a45b8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 565.264106][ T39] #2: ffffffff99e10018 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x178/0x1b50 [ 565.264156][ T39] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 565.264214][ T39] 1 lock held by khungtaskd/39: [ 565.264225][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 565.264288][ T39] 3 locks held by kworker/u8:7/1035: [ 565.264299][ T39] #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 565.264349][ T39] #1: ffffc90005f3fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 565.264399][ T39] #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 565.264461][ T39] 3 locks held by kworker/u8:16/3421: [ 565.264472][ T39] #0: ffff8880334d6938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 565.264522][ T39] #1: ffffc9000ecefc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 565.264572][ T39] #2: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 565.264623][ T39] 2 locks held by getty/5370: [ 565.264634][ T39] #0: ffff888029ab50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 565.264680][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 565.264734][ T39] 6 locks held by kworker/1:4/5600: [ 565.264745][ T39] #0: ffff88801af22138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 565.264795][ T39] #1: ffffc900044e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 565.264845][ T39] #2: ffff88802a398210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 565.264889][ T39] #3: ffff88802a468658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 565.264932][ T39] #4: ffff8880295e8e58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 565.264975][ T39] #5: ffffffff8ee53c20 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 565.265024][ T39] 10 locks held by kworker/0:4/5716: [ 565.265035][ T39] #0: ffff88813fe16538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 565.265085][ T39] #1: ffffc90005107c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 565.265136][ T39] #2: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 565.265192][ T39] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 565.265243][ T39] #4: ffffffff8f6db1b8 (&tbl->lock){+...}-{3:3}, at: neigh_periodic_work+0xc64/0xe90 [ 565.265293][ T39] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 565.265339][ T39] #6: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 565.265390][ T39] #7: ffff88802a55a0a8 (&n->lock){++..}-{3:3}, at: neigh_cleanup_and_release+0xb1/0x2d0 [ 565.265437][ T39] #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 565.265484][ T39] #9: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __neigh_notify+0x29/0x310 [ 565.268215][ T39] 3 locks held by syz.4.1356/10337: [ 565.268227][ T39] #0: ffff888038b22728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 565.268275][ T39] #1: ffff888033cee480 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 565.268330][ T39] #2: ffff88805c3c4078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 565.268388][ T39] 2 locks held by syz.7.2124/12794: [ 565.268399][ T39] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: blk_mq_dispatch_queue_requests+0x11a/0x800 [ 565.268454][ T39] #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 565.268502][ T39] 7 locks held by syz.8.2145/12860: [ 565.268513][ T39] #0: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 565.268564][ T39] #1: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 565.268614][ T39] #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 565.268664][ T39] #3: ffff88803e79e328 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{3:3}, at: dev_reset_queue+0x144/0x1f0 [ 565.268716][ T39] #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 565.268762][ T39] #5: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 565.268811][ T39] #6: ffff88803e79e230 (&sch->root_lock_key#9){+...}-{3:3}, at: dev_reset_queue+0x160/0x1f0 [ 565.268868][ T39] 2 locks held by syz.6.2153/12881: [ 565.268879][ T39] #0: ffff88803c8d8928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 565.268932][ T39] #1: ffffffff8f5ac9f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 565.268978][ T39] 1 lock held by syz.6.2153/12882: [ 565.268988][ T39] #0: ffff88803c8d8928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 565.269039][ T39] [ 565.269044][ T39] ============================================= [ 565.269044][ T39] [ 565.269071][ T39] NMI backtrace for cpu 1 [ 565.269088][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.269113][ T39] Tainted: [L]=SOFTLOCKUP [ 565.269120][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.269132][ T39] Call Trace: [ 565.269140][ T39] [ 565.269148][ T39] dump_stack_lvl+0xe8/0x150 [ 565.269179][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 565.269203][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 565.269228][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 565.269254][ T39] sys_info+0x135/0x170 [ 565.269274][ T39] watchdog+0xfd3/0x1030 [ 565.269301][ T39] ? watchdog+0x1c9/0x1030 [ 565.269325][ T39] kthread+0x388/0x470 [ 565.269346][ T39] ? __pfx_watchdog+0x10/0x10 [ 565.269365][ T39] ? __pfx_kthread+0x10/0x10 [ 565.269386][ T39] ret_from_fork+0x514/0xb70 [ 565.269412][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 565.269434][ T39] ? __switch_to+0xc79/0x1410 [ 565.269455][ T39] ? __pfx_kthread+0x10/0x10 [ 565.269476][ T39] ret_from_fork_asm+0x1a/0x30 [ 565.269514][ T39] [ 565.269522][ T39] Sending NMI from CPU 1 to CPUs 0: [ 565.269552][ C0] NMI backtrace for cpu 0 [ 565.269567][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.269589][ C0] Tainted: [L]=SOFTLOCKUP [ 565.269596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.269606][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 565.269629][ C0] Code: e8 de 35 7a fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f e1 e4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 565.269644][ C0] RSP: 0018:ffffc900001679f0 EFLAGS: 00000202 [ 565.269697][ C0] RAX: 1ffffffff33c2000 RBX: 00000000000003fd RCX: 0000000000000000 [ 565.269709][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 565.269719][ C0] RBP: ffffffff99e102d0 R08: 0000000000000000 R09: 0000000000000000 [ 565.269730][ C0] R10: dffffc0000000000 R11: ffffffff854b6470 R12: dffffc0000000000 [ 565.269742][ C0] R13: 0000000000000000 R14: ffffffff99e10040 R15: 0000000000000000 [ 565.269752][ C0] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 565.269766][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.269778][ C0] CR2: 00007f6ba123cd58 CR3: 00000000373c4000 CR4: 00000000003526f0 [ 565.269792][ C0] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 565.269802][ C0] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 565.269813][ C0] Call Trace: [ 565.269819][ C0] [ 565.269827][ C0] wait_for_lsr+0x1aa/0x2f0 [ 565.269850][ C0] serial8250_console_write+0x114b/0x1b50 [ 565.269875][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 565.269896][ C0] ? console_flush_one_record+0xfa/0xb90 [ 565.269916][ C0] ? console_flush_one_record+0x48f/0xb90 [ 565.269935][ C0] console_flush_one_record+0x68b/0xb90 [ 565.269955][ C0] ? console_flush_one_record+0xfa/0xb90 [ 565.269974][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 565.269992][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 565.270017][ C0] legacy_kthread_func+0x1b6/0x250 [ 565.270035][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 565.270052][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 565.270069][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 565.270096][ C0] kthread+0x388/0x470 [ 565.270113][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 565.270129][ C0] ? __pfx_kthread+0x10/0x10 [ 565.270146][ C0] ret_from_fork+0x514/0xb70 [ 565.270165][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 565.270183][ C0] ? __switch_to+0xc79/0x1410 [ 565.270200][ C0] ? __pfx_kthread+0x10/0x10 [ 565.270216][ C0] ret_from_fork_asm+0x1a/0x30 [ 565.270243][ C0] [ 565.274154][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 565.274179][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 565.274206][ T39] Tainted: [L]=SOFTLOCKUP [ 565.274213][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.274225][ T39] Call Trace: [ 565.274233][ T39] [ 565.274241][ T39] vpanic+0x56c/0xa60 [ 565.274271][ T39] ? __pfx___schedule+0x10/0x10 [ 565.274298][ T39] ? __pfx_vpanic+0x10/0x10 [ 565.274332][ T39] panic+0xc5/0xd0 [ 565.274357][ T39] ? __pfx_panic+0x10/0x10 [ 565.274385][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 565.274418][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 565.274445][ T39] watchdog+0x102c/0x1030 [ 565.274473][ T39] ? watchdog+0x1c9/0x1030 [ 565.274498][ T39] kthread+0x388/0x470 [ 565.274520][ T39] ? __pfx_watchdog+0x10/0x10 [ 565.274538][ T39] ? __pfx_kthread+0x10/0x10 [ 565.274559][ T39] ret_from_fork+0x514/0xb70 [ 565.274584][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 565.274606][ T39] ? __switch_to+0xc79/0x1410 [ 565.274627][ T39] ? __pfx_kthread+0x10/0x10 [ 565.274649][ T39] ret_from_fork_asm+0x1a/0x30 [ 565.274689][ T39] [ 565.274952][ T39] Kernel Offset: disabled