last executing test programs: 11m38.552086356s ago: executing program 1 (id=1616): arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0}) 11m38.47241597s ago: executing program 1 (id=1617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003280), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000003380)={0x0, 0xffc3, &(0x7f0000003340)={&(0x7f00000032c0)={0x28, r1, 0x521, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x80b0) 11m38.428326709s ago: executing program 1 (id=1618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c403000200092100105c0122070009058103"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0xa, 0x33}, @in6=@loopback, 0x4, 0x3505}}, 0x40}}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="4027f9000000f9057b0d6b79fb567b22bec7a9720fdd546f4a1e1e362aed9b55ff4fd4060306b4943e862bbf64cbbcb038c614c935c0d21e27c2a40894187b97418feb2e7d1228"], 0x0, 0x0, 0x0}, 0x0) 11m37.897775499s ago: executing program 1 (id=1624): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x1210042, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) chdir(&(0x7f00000001c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x4) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) (async) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 11m37.859365323s ago: executing program 1 (id=1625): r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x11}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000400)={0xa000001c}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="318300000001000000001900000018000180"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) 11m36.956209399s ago: executing program 1 (id=1636): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000000c0)) r4 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000180)=0x10000) r5 = openat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f0000000440)={0xd4, 0x0, 0x9}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) renameat2(r2, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000140)='./file1\x00', 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x2, 0x3, 0x4000001, 0x6, 0x7ffffff5}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x8001, 0x400000) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r7, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f00000003c0)="655906209cebfc7a2634", 0xa}) 11m36.479253657s ago: executing program 32 (id=1636): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xb, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000000c0)) r4 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000180)=0x10000) r5 = openat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f0000000440)={0xd4, 0x0, 0x9}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) renameat2(r2, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000140)='./file1\x00', 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x2, 0x3, 0x4000001, 0x6, 0x7ffffff5}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x8001, 0x400000) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r7, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f00000003c0)="655906209cebfc7a2634", 0xa}) 9m21.559992236s ago: executing program 4 (id=2489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x2004, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000680)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x8e2}, 0x0, 0x0, 0xfffffffffffffffa, 0x1, 0x8000000000000001, 0x3, 0x0, 0x1ff}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x7fffffff}, {&(0x7f0000000340)=""/46, 0x2e}, &(0x7f0000000b40)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/38, 0x26}, {&(0x7f0000000980)=""/177, 0xb1}, {&(0x7f0000000a40)=""/241, 0xf1}], 0x6, 0x10, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2a, 0x8001}, &(0x7f0000000bc0)=0x9, &(0x7f0000000c00)=0x2, 0x5, 0x1, 0x5, 0x18000000000, 0x22, 0xa}}], 0x140, 0x29ff1109601b30a4}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0xfffffffffffffdfd, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x703b}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x4000000000000002, 0xf5b}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) close(0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r9 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r9}) fcntl$setsig(r4, 0xa, 0x1c) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 9m21.227976347s ago: executing program 4 (id=2491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x2]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 9m21.125853411s ago: executing program 4 (id=2493): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x124, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x54, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASK={0xbc, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x4048080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 9m20.872839642s ago: executing program 4 (id=2498): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c328ec81891141ac85298b040000"], 0x4) 9m20.771635023s ago: executing program 4 (id=2500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00}'], 0x28}, 0x1, 0x0, 0x0, 0x46b2d3ba8e16ae51}, 0x4000) 9m20.062438243s ago: executing program 4 (id=2505): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2122, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) socket(0x10, 0x3, 0x0) 9m19.479351562s ago: executing program 33 (id=2505): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2122, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) socket(0x10, 0x3, 0x0) 4m9.228490259s ago: executing program 5 (id=4501): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r3, 0xfffffffd) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r6, 0x7) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x10000, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0x0, 0x0, 0x0, 0xc6df]], '\x00', [{0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x62}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xbd0}, {0x8000000, 0x3}], '\x00', 0x1000}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x2000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x64, r10, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xba, 0x9, 0xbc]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000000440)={0x4, 0x4, [{0x0, 0x0, 0x90}, {0x6, 0x0, 0x4}, {0x8, 0x0, 0x5}, {0x5, 0x0, 0x10001}, {0x6, 0x0, 0x3}, {0x8d, 0x0, 0x7}, {0x100, 0x0, 0x7}, {0x80000001, 0x0, 0x9}, {0x9, 0x0, 0x70}, {0x1000, 0x0, 0x4}, {0x60, 0x0, 0x2}, {0xe119, 0x0, 0x3ff}, {0xa, 0x0, 0x101}, {0x8, 0x0, 0x3}, {0x8001, 0x0, 0xfff}, {0x8f, 0x0, 0x5}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4m8.767816656s ago: executing program 5 (id=4503): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0xef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="11480000003d4121c4f18fb4686c941c9fd1db6441450668fd25f124fa85f9b230b5f8173ca0ecb6a9ccee604db409d4f2eaccfa1b6841801d4380050cbdc70c73114f247378dc27928f11e34466e7cbebd40065b10f63e7362cef7670324ed530c399269fe3d6017d6e82706c18adbbf8a1187bec9643980a458ea5ababd43250b9aad1609a9f5b2083756f1a8d37b316d07ebfc465b46fe21da586b14f35d96c", @ANYRES16=r3, @ANYBLOB="07000000000000000000050000001c000380080002000e000000100003800c00018008000100fc000000180001801400020073797a5f74756e000000000000000000"], 0x48}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x7, 0xa, 0x6, 0x9, 0x2, "0e147a5f5d3eb8d8b8049e3b5432e1c9d9c234", 0x7fff, 0x3}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="2011040600000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 4m6.916403711s ago: executing program 5 (id=4515): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r2, &(0x7f0000003340)=""/48, 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') (fail_nth: 1) 4m6.783000382s ago: executing program 5 (id=4517): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000102f17020500000000000109022400010000200809040004ff0300010009210500fc012a280009058103ff03038102"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200928000000280883efb930f018a14c0c20b203"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000100)='efivarfs\x00', 0x8, &(0x7f00000003c0)='\x00\v\x00\x00\x00\x86\xea\xb1\xcd\xc9;\xefm\x02 \x87\xbfL\xb1y\x1e5\xca\xc4\xdabp\x86j\xf6\xad\xc6\xfc\xaa\xe9\xa5d+\x05\x11^N\xa9\xc2\tD\xa8pF\x1b\xa3\xc3\xb0\xed\xa7\x9fn%\xa2\xe7\xb2\xee\x81\xef\x8d\xd4\x91\xa6i\t\xb3\rf|h\xf2%T\x84jne') chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x1b3f, 0x3, 0x40000000000001a, 0x6, 0x6, 0xb, 0x100fff}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800c21dc21d0005000000", 0x29}], 0x1) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) read$eventfd(r2, &(0x7f0000000040), 0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000280)={0x3, 0x7}, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, &(0x7f0000000440)={0x40, 0x30, 0x100, {0x100, 0x22, "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"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f00000005c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "3e3abb28"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff00, 0x4, 0x1, {0x22, 0xb12}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0xaf, "4b6f842268b01e68c710526797db762583ae52a5b73451549ebcc7c84c7bb584fbb8cae3a999240c3f603cc01b49aa5f47a4f8438d1d143167081069f63b2c29a251300f893bc4a31bb40ebdab022a56c9985ab02549ed49f8cda3a21bb65115ef0236dc7b5290508aa5ce3eb97f45e68871d634a5ff35292061db6ec2ba5b45f5f0b46c6e24d73d558e1327b6370330b119ca5835103934546506856367ec7f2a3a5f5a1856cdea2df9d3215303a5"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x4b}, &(0x7f00000007c0)={0x20, 0x1, 0x61, "b2730276623e907d05e3717ee3c0699e6c36a6e6099f6a219e8f5baf444fed46a4fe0ec65593394c918170c131e233cb6292c7bf46f1824e74306ce5dd97afa418a4bf0b91743b8c5587496d59924acb03c2b2017296f8032193e9de407ab074b8"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x2}}) 4m3.378750601s ago: executing program 5 (id=4528): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x81000) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04022b03000000000400020c0025f0560700ffffff"], 0x2e) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x9, 0x0, 0x20, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast1, 0x8, 0x7800, 0x7, 0x6}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r2 = socket(0x1d, 0x2, 0x6) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x1f, 0x6, 0x56544943, 0x6, 0x0, [{0x2, 0x20}, {0x80000000, 0x950}, {0x400, 0x1}, {0x7f, 0xad}, {0x81, 0xb}, {0x8, 0x6}, {0x5}, {0x10000, 0x3}], 0x1, 0x3, 0x7, 0x1, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000726) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xac42) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, 0x0) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r8}, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xb}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x20040800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={0x0, @private, @broadcast}, &(0x7f0000000340)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@dev, @dev}, &(0x7f00000003c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x700, 0x8, 0xa4f, 0x6, {{0x3e, 0x4, 0x0, 0x3, 0xf8, 0x68, 0x0, 0x81, 0x2, 0x0, @multicast1, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xff, [@multicast2]}, @cipso={0x86, 0x3e, 0x3, [{0x0, 0xb, "9cb97fd6737f325506"}, {0x9, 0xd, "3a773e16169b497355d463"}, {0x2, 0x5, "de764b"}, {0x6, 0x9, "8f751ae6662075"}, {0x3e1eb795c07aeb3d, 0x12, "321ed830adaabe39adca4577d16f990a"}]}, @ssrr={0x89, 0x1b, 0x7d, [@loopback, @multicast2, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x25, 0x1, 0x1, [{@local, 0x2}, {@rand_addr=0x64010102, 0x5}, {@remote, 0xe}, {@broadcast, 0x864}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc611}, {@multicast1, 0x7283b486}, {@broadcast, 0x101}, {@remote, 0x3ff}]}, @timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0x2, [{@remote, 0x80000000}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @remote, @dev={0xac, 0x14, 0x14, 0x18}]}, @lsrr={0x83, 0x17, 0xf2, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010101, @private=0xa010102]}]}}}}}) 4m3.040151219s ago: executing program 5 (id=4530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r3, 0xfffffffd) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r6, 0x7) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x10000, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0x0, 0x0, 0x0, 0xc6df]], '\x00', [{0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x62}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xbd0}, {0x8000000, 0x3}], '\x00', 0x1000}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0xef2}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x64, r10, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xba, 0x9, 0xbc]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000000440)={0x4, 0x4, [{0x0, 0x0, 0x90}, {0x6, 0x0, 0x4}, {0x8, 0x0, 0x5}, {0x5, 0x0, 0x10001}, {0x6, 0x0, 0x3}, {0x8d, 0x0, 0x7}, {0x100, 0x0, 0x7}, {0x80000001, 0x0, 0x9}, {0x9, 0x0, 0x70}, {0x1000, 0x0, 0x4}, {0x60, 0x0, 0x2}, {0xe119, 0x0, 0x3ff}, {0xa, 0x0, 0x101}, {0x8, 0x0, 0x3}, {0x8001, 0x0, 0xfff}, {0x8f, 0x0, 0x5}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m46.294308317s ago: executing program 34 (id=4530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r3, 0xfffffffd) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r6, 0x7) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x10000, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0x0, 0x0, 0x0, 0xc6df]], '\x00', [{0x0, 0x1}, {0x3, 0x8}, {0x1}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x62}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0xbd0}, {0x8000000, 0x3}], '\x00', 0x1000}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0xef2}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r7) sendmsg$SEG6_CMD_GET_TUNSRC(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x64, r10, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xba, 0x9, 0xbc]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000000440)={0x4, 0x4, [{0x0, 0x0, 0x90}, {0x6, 0x0, 0x4}, {0x8, 0x0, 0x5}, {0x5, 0x0, 0x10001}, {0x6, 0x0, 0x3}, {0x8d, 0x0, 0x7}, {0x100, 0x0, 0x7}, {0x80000001, 0x0, 0x9}, {0x9, 0x0, 0x70}, {0x1000, 0x0, 0x4}, {0x60, 0x0, 0x2}, {0xe119, 0x0, 0x3ff}, {0xa, 0x0, 0x101}, {0x8, 0x0, 0x3}, {0x8001, 0x0, 0xfff}, {0x8f, 0x0, 0x5}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 27.760376454s ago: executing program 3 (id=5700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x35, r2}, 0x10) 11.797275806s ago: executing program 2 (id=5744): mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) (async) write$tcp_congestion(r0, &(0x7f0000001700)='cdg\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x29) (async) r2 = socket(0xa, 0x3, 0xff) (async) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='-@[\x00', &(0x7f0000000100)='\x00']}, &(0x7f0000000300)={[&(0x7f0000000180)='&^}\x00', &(0x7f00000001c0)='/}\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='\xa9({-\\.+:.\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='\\\x00']}) move_mount(r1, &(0x7f0000001740)='./file0\x00', r1, &(0x7f0000001780)='./file0\x00', 0x214) (async) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getrusage(0x1, &(0x7f0000000880)) (async) setresuid(0x0, 0xee01, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) (async) futex_waitv(&(0x7f0000001180)=[{0x6, &(0x7f0000000340)=0x5, 0x2}, {0x59, &(0x7f0000000380)=0xffff, 0x82}, {0x2b05, &(0x7f00000003c0)=0x5, 0x2}, {0x6f78, &(0x7f0000000400)=0x972, 0x2}, {0x5, &(0x7f0000000440)=0x4d, 0x2}, {0x7, &(0x7f0000000480)=0xbe57, 0x2}, {0x6, &(0x7f00000004c0)=0xf, 0x82}, {0xa70, &(0x7f0000000500)=0x1, 0x2}, {0x2, &(0x7f0000000540)=0x3, 0x2}, {0xb65, &(0x7f0000000580)=0x2c, 0x82}, {0x6, &(0x7f00000005c0)=0x1, 0x2}, {0x10001, &(0x7f0000000600)=0x81, 0x82}, {0x3, &(0x7f0000000640)=0x5, 0x2}, {0x1, &(0x7f0000000680)=0x7fffffffffffffff, 0x2}, {0x0, &(0x7f00000006c0)=0x5, 0x82}, {0x4, &(0x7f0000000700)=0x8, 0x2}, {0x1ff, &(0x7f0000000740)=0x2, 0x82}, {0x0, &(0x7f0000000780)=0x7, 0x82}, {0x2, &(0x7f00000007c0)=0x2, 0x82}, {0xc5, &(0x7f0000000800)=0x6, 0x82}, {0x6, &(0x7f0000000840)=0x9, 0x2}, {0x7d5f, &(0x7f0000000940)=0x4, 0x82}, {0x7ff, &(0x7f0000000980)=0x6, 0x82}, {0x9, &(0x7f00000009c0)=0xf3, 0x82}, {0x8, &(0x7f0000000a00)=0x9, 0x82}, {0x8000, &(0x7f0000000a40)=0x6, 0x82}, {0x5c24, &(0x7f0000000a80)=0x5, 0x82}, {0x80000001, &(0x7f0000000ac0)=0xfffffffffffffffd, 0x2}, {0x81, &(0x7f0000000b00)=0x9, 0x2}, {0x3, &(0x7f0000000b40)=0x80, 0x2}, {0x2, &(0x7f0000000b80)=0x3, 0x82}, {0x0, &(0x7f0000000bc0)=0x9, 0x2}, {0x0, &(0x7f0000000c00)=0x5, 0x82}, {0x0, &(0x7f0000000c40), 0x2}, {0x2, &(0x7f0000000c80)=0x7fffffffffffffff, 0x82}, {0x8000, &(0x7f0000000cc0)=0x7, 0x82}, {0x0, &(0x7f0000000d00)=0x1, 0x2}, {0x7f, &(0x7f0000000d40)=0x3cfb, 0x2}, {0x40, &(0x7f0000000d80)=0x9, 0x82}, {0x8, &(0x7f0000000dc0)=0x400, 0x82}, {0x0, &(0x7f0000000e00)=0x7fffffff, 0x82}, {0xb181, &(0x7f0000000e40)=0x3, 0x2}, {0x100000001, &(0x7f0000000e80)=0x3, 0x2}, {0x100000000, &(0x7f0000000ec0)=0x3}, {0x5, &(0x7f0000000f00)=0x7, 0x2}, {0x1000000000000, &(0x7f0000000f40)=0x2, 0x82}, {0x7, &(0x7f0000000f80)=0x9, 0x2}, {0x9a4e, &(0x7f0000000fc0)=0x4, 0x82}, {0x7, 0x0, 0x2}, {0x10000, &(0x7f0000001000)=0xffffffff, 0x82}, {0x1f822cfd, &(0x7f0000001040)=0xfffffffffffffffb}, {0x0, &(0x7f0000001080)=0x6e5, 0x82}, {0x6, &(0x7f00000010c0)=0x59777bbc, 0x82}, {0x54a, &(0x7f0000001100)=0x8000, 0x2}, {0xffffffffffffffff, &(0x7f0000001140)=0xffffffffffffa80e, 0x2}], 0x37, 0x0, &(0x7f00000016c0)={0x77359400}, 0x0) 11.579972064s ago: executing program 2 (id=5745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac42000ec20afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x16, 0x7e, {0x7e, 0x1, "a862611b2fa5e7a15a79d925063585efb0832fb6cf2a52f612998dbff56a72d28dab0806f5faffe39201a24c4be9bf0ee81ec19edd862eb7446cb28df9ab26ccb6a9a4e9e0e743da628cba98e3470361aa45edf6175a7cc61e39270ec8055597cff8311b7ae82ad53f8aebfb29b03b33f10032902f941a6265459d34"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000240)={0x20, 0xa, 0xf3, "440a710bb8861243e5d3d5616e61a73af10e1a7efcaf3ff5fb1acc238c32ca0705b9afc09c008a1dcb7ebb984781f692bcd0163971b21ad1388e727a19ed0e1bb80dac4c2e18096ab90990e5b082c1d888e03bd04160b8b51306e738e6abbab8b2e7aeeb6f55d8a1175a3ba7be06276050d4cb2b4300447daf7cedd72ae35143d897090e4e1ec074ef8fcc3e4de1ee2b60dced6f71aec87f5faaa1c3408a6d239be33a9f2c52c721c8d6779643154d855cdfa7ddca9091e3565dc07b4e5584589a1265b7a3aa827f108f42a6e453c2708a9232d4609aa061f7d8a8c055c31c79198120a7598319268c85b587062b1dd67df061"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xfffffffa, 0x101, 0x1, 0x3, 0x9, 0x9215, 0x8, 0x7, 0x4, 0x2afe}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0xfffffffa}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x522}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}}) 10.784595286s ago: executing program 6 (id=5748): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009080e140fc044a5002430102030109021200"], 0x0) userfaultfd(0x80001) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000ac0)={0x14, &(0x7f0000000300)={0x20, 0x11, 0x54, {0x54, 0x10, "3700f5981a14939f9b1221ad80663507fc667fd369ab972d193e58752f6e11549da3690b07d7e6c588c8b1cdf6a309a8222ae78eeafeb4cd2e925897c66a2b3d09f5cfb2372f63aae25d155d830b9a92816a"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x1c, &(0x7f0000000e00)={0x0, 0x15, 0xca, "83402ee74732f38c6d4c4422aea1595b137d739810d627a05bbf2c0fc7a4a3e5da3ccea3daf2bcd15e0a3e34cb9033271c7b61c3c84c1979a2820b5ec43ed816de6b870d9ea0476b1bd5accdc8c60a37ab40c4a50e4b3eeca9328e3536daa4ed801de5609c240f6c0175cdf85a7b9be0339c5a3f35a9a68d4281f641295975d5d6f1e8037df137ba8be7024d8cdc1349f968142d6b2ee07e05960e9c66ee95511e75fa950bcfeb1db12a019f052816471bab4550d83535307266c89dcbe92bb5b129b9c335a0cdc47abe"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x30}}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80202, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 9.659297003s ago: executing program 2 (id=5749): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r4, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000180)={0x0}) connect$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0x0, 0xfffeffff, 0x6, 0xd4, 0xd8, "c59123df3abc8db60e382822c624d530277a220f8fd06f4f4471669a97b3dfe1b4a25fb23cea3fd5dd93a966c6249ccab954885d2e047fb23377670ac64131", 0xe}, 0x60) 8.447963666s ago: executing program 2 (id=5752): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000048c0)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 7.456717758s ago: executing program 6 (id=5753): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) 7.3464669s ago: executing program 6 (id=5754): r0 = syz_open_dev$audion(&(0x7f0000000140), 0x8, 0x1) clock_getres(0x8, 0x0) r1 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0) r2 = syz_usb_connect$hid(0x3, 0x6c, &(0x7f0000002600)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2c6}, @iv={0x50, 0x117, 0x2, 0x36, "5176f9a632d6847ebf6c48ff553819a44030bc6a91c032926a7f439d7c3c11229dec6bff32d9c6cab582649cfbc07a308c741dcc7094"}], 0x98, 0x40041}], 0x1, 0x810) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80800) syz_clone3(&(0x7f0000000480)={0x100, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x26}, &(0x7f0000000240)=""/11, 0xb, &(0x7f00000002c0)=""/178, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r0}}, 0x58) fcntl$lock(r4, 0x5, &(0x7f0000000500)={0x1, 0x2, 0x4, 0xffff, r5}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e000119"], 0x1c}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x8, "c6630d6f"}, @local=@item_012={0x1, 0x2, 0x0, "10"}]}}, 0x0}, 0x0) 6.806588504s ago: executing program 2 (id=5755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a010400000000000000000a0004050900010073797a31000000002c00048028000180090001006c61737400000000180002800c000240000000000000000408000140000003ff0900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x200, 0x2, 0x80000000}, 0x14}}, 0x1) 6.603086636s ago: executing program 2 (id=5757): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in=@rand_addr=0x64010101, 0x4e24, 0x1, 0x4e20, 0xfffa, 0x2, 0x20, 0x0, 0x16}, {0x9, 0x7, 0x9, 0xffffffff, 0x1, 0x3, 0x1, 0x200}, {0x1, 0x4, 0x3, 0x81}, 0x1c4a, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x7, 0x1, 0x4, 0x5e, 0x4, 0x6}}, 0xe8) rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000080)={0x36, 0x207, 0xfffffff3}) r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x13, r1, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x7fff, 0x103080) ioctl$I2C_SLAVE_FORCE(r2, 0x706, 0x13) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x40, 0x23, 0xff, {0xff, 0x23, "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"}}, &(0x7f0000000300)={0x0, 0x3, 0x52, @string={0x52, 0x3, "bac7af52c3f41e8dc87a979454014a6b9bbbeeb259ca2817ae705d0b7b1f81aa1fc5ac6611658d85609189e94b8deb957c9233b13f28d9eb27cfaa77374c98cc191c8ba424bded7f6810ea14ae3543ad"}}}, &(0x7f0000000800)={0x34, &(0x7f00000003c0)={0x0, 0x30, 0xe9, "198e88e32cc33d8d942eb52d47b98e3bcd5c1692a5f5f1d0f6aa548490115530e0ee65e05e1e7dd75dbb76b856ff676fc4dafef94ff2dee4cc74bf56684c699d9410fa8cdd75037811029d276b624cdc125c79234e1a7f00b81b3333b9f1548a0780ee13c788c4c43e9c37c4ca450e97b2b063244a78c8ee3b96d2bafcb5dc012674c6049361dfa4db4a732a6b84f0efc0c5c89b17a5f3c3b0f096b24db997a20f5276b4a582708f32b6072a39cbf0ee15f782d08df4ef8a9b6adc6d3d91726d2864faa5df6542adce0b0454ca537e1c4ca49d4bb1df28d81edf8c8709a294cd66b656ef39e0f7c940"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x6c}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000680)={0x20, 0x0, 0xfa, {0xf8, "0ea118a5c1756d3d19af3c867db33abb9919a5cd08a478ab0ab7213dcac74ad12733ab5dc251c3a0b3e663d7e393bc95e05a7cc359a6281a71f9a55db06b9b7d8e7de9fb27cfc9dfe7cc2dad0c51cc1f0b3e774c67f7f058da3cd0c290e8509bdf5cf91ab533024a52ca0b14d997188d49f6a9e9c31262accd71a4b2e7849a7001edd51f98eaf2db0d147bbf13a1219f7afcab91951d9762a161a43c164721d330a87008dadc19a1e334b2bdd4b0d7f6262050c4bde6c10b3a9854ee47052bff618d4275f171255f2a8dc492a4b478f854089288d72c557c1100571b3d06e288fedb114b8de2beaaa4c2692a438e5ec0a33107342e303077"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x9}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) close(r1) 4.940806071s ago: executing program 0 (id=5758): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000005) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000500)={&(0x7f0000000300), 0x0, 0x10, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$TIOCOUTQ(r1, 0x4bfb, &(0x7f0000000000)) 4.624855082s ago: executing program 0 (id=5759): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000008) 4.371152978s ago: executing program 0 (id=5760): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000"], 0x0) userfaultfd(0x80001) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="3e000100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000ac0)={0x14, &(0x7f0000000300)={0x20, 0x11, 0x54, {0x54, 0x10, "3700f5981a14939f9b1221ad80663507fc667fd369ab972d193e58752f6e11549da3690b07d7e6c588c8b1cdf6a309a8222ae78eeafeb4cd2e925897c66a2b3d09f5cfb2372f63aae25d155d830b9a92816a"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x1c, &(0x7f0000000e00)={0x0, 0x15, 0xca, "83402ee74732f38c6d4c4422aea1595b137d739810d627a05bbf2c0fc7a4a3e5da3ccea3daf2bcd15e0a3e34cb9033271c7b61c3c84c1979a2820b5ec43ed816de6b870d9ea0476b1bd5accdc8c60a37ab40c4a50e4b3eeca9328e3536daa4ed801de5609c240f6c0175cdf85a7b9be0339c5a3f35a9a68d4281f641295975d5d6f1e8037df137ba8be7024d8cdc1349f968142d6b2ee07e05960e9c66ee95511e75fa950bcfeb1db12a019f052816471bab4550d83535307266c89dcbe92bb5b129b9c335a0cdc47abe"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x30}}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80202, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.796209208s ago: executing program 6 (id=5761): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x600, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 3.359424917s ago: executing program 6 (id=5762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000048c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 3.289838877s ago: executing program 3 (id=5701): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) socket$kcm(0x2b, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000540)='\xe9)-.[*\x00', 0x7) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="58d8e764d9487be91c14b3489aaf78c3e8b191ea9bb17d23cde598c4b97ebfa415164f99a216f9baa1cb04ffa0ddaaf6a8a5ca01dfbb96de2771ce5b4c59e5dc796627", 0x43}, {&(0x7f0000000280)="8a4c20fde6b17d2e137e87ab0ab3941529888fb2653b93412d7437a565d8d709c6bec15b7017c964eb7630230d24489c9d0fc7b1e48c1337d4557f670bf0157ed86cb92e08ee6a00bda8c13b17716dd24a08f043e7c6b972402c1ffa054831958a982d1a7743306e632eb214ce24305f5dd7749e537a2650e9d7ad55538194c62b968d0ce682a51de7b872e1858486c6943405c36c0d9598f51bca8ce2c09530c90a35afca36b53d3864a2d3319a63", 0xaf}, {&(0x7f0000000340)="ef3a011786849eb33d6f97d60a54a48c4cbea855b8b663a3db4d0f884a7b347f5e843d46c6d2725e5b50976d4134ccaf6816b79c84c727e807ac2289310df99cb0d71985b8409832f4a88129dfbda80c7a93c9e53ccc83eaee9228089fb0f859915b655864cf1f46e0c280dee1d38c2156e7c5c87b331e3d6847de2d29c2f0b7908745f9935506d8bb80a84254432bfaf9c47f71c85581f65ce2c6ffefe170f3de8502dcf5d9", 0xa6}], 0x3}}], 0x1, 0x4c144) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) unlink(&(0x7f0000000340)='./file0/file1\x00') linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', r0, 0x0, 0x1000) 3.21624526s ago: executing program 6 (id=5763): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002"], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}], 0x1, 0x800) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="00000a000300884806090009bd21a3b0b56a84d23ee53b79973b0caaaaaaaaaa3b89bb6e8571ff844ab7e1fc661a3ab653f7f70d2881680925cdca43ba733f773683e7cad6d9718b6807d07d16157ce3c46e44fbf66987bf86d3481681e31328993ab0940412ccb5fe0922ccf48baad5d004effbc344eddcb734e997cd355db1f3afab771af8522934f76fb4f50cba0dd3a8a41d297735438ecdcb306db04e5e35086ba2d163520babecc4f6761fa5609dc6fd6931939f15f0113b9249b1cd55e04e6c003babe03f822a2a1825e9e5dd9490c8a447431f"], 0x29) r5 = socket$inet(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0xbb, 0x480060, 0x200, 0x3f, 0x7, 0x100, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000006280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40100000097b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f73df42eda36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d4478e476d7b5ee10579bda100686db9b3fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024852e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48fbe73097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a6269bff09be4da7640fb600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9aca1f23f1245473be8bc6b5c51afc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492b47d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c96bd7c8d2303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc8a28c8f37de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db163200300513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880e0a35a04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae34337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d680f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e2091009c5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755569621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b66918c1eb5a811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd3900", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0x0, 0x4000000a74e, {0x1, 0x0, 0xf, 0xffff, 0xfffffff8, 0x84, {0x4, 0x1, 0x7, 0x1000000080000000, 0xfff, 0xffff, 0x7d58, 0x5ffe, 0x2, 0x1000, 0x7f, r9, r10, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4e22, 0x1000, 0x4e21, 0xb, 0xa, 0xa0, 0x0, 0xa5, r6, r9}, {0xb, 0x2c8, 0x9, 0x1, 0xfffffffffffffffe, 0x7, 0xfffffffffffffff8, 0xfffffffffffffffa}, {0x7, 0x0, 0x6, 0xbad1}, 0xfff, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d6, 0x6c}, 0xa, @in6=@local, 0x3500, 0x2, 0x0, 0xc3, 0xfffffffc, 0x4, 0x7ff}}, 0xe8) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbb}}}, 0xd) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r5, 0x8) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) r12 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r12, 0x7) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000080)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 3.133468304s ago: executing program 3 (id=5765): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 2.670783226s ago: executing program 3 (id=5766): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x4000005) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000000500)={&(0x7f0000000300), 0x0, 0x10, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$TIOCOUTQ(r1, 0x4bfb, &(0x7f0000000000)) 2.559485095s ago: executing program 3 (id=5767): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000006600)={0x16, 0x1, 0x200, "d06d8b3ea23c1dcab6fe41f40e2797173cd2dc8d6d4c903d209fec2da6a33f9d", 0x49433553}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x22, 0x4, 0x7fffffff, 0x7fffffff, {0x5, 0x7, 0xfe, 0xf859, 0x4, 0xffff, 0x7f, 0x2, 0x7, 0xb, 0x1, 0x8, 0x503, 0x3, "2573d25909070000002c859667287ed0b595cc996c46257ee6aeae634e0b4180"}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="010300000000fbd9df251c000000040001807792"], 0x18}, 0x1, 0x0, 0x0, 0x2204008c}, 0x40886) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.208062957s ago: executing program 3 (id=5768): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000c00078008000600000000030500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x20, 0x12, 0x1b, 0x10, 0x41e, 0x4041, 0x4025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x7, 0x40, 0x7}}]}}, 0x0) 527.70453ms ago: executing program 0 (id=5769): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x856, 0x0, 0x0, 0x9, 0x0, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x8dbc, 0x8, [0x2, 0x5]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) r5 = eventfd(0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1, r5}) 216.087013ms ago: executing program 0 (id=5770): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x55, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000100)={0xacc5, 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x600, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x1534, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x35c, 0x3, 0x0, 0x1, [{0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x2fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe6, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a5b"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1134, 0x3, 0x0, 0x1, [{0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}]}, @NFTA_SET_ELEM_KEY_END={0xf8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "879dc3147ec50cdf35ce64bbdd210bdf57178c35b26f2aad3137d5d6ed5b9bac7c2581da20e387f8e6d231d54cc24293d57633a5d12a1472f53085cac17815df0124aaa05146144f7b8037b6390e5fa43bd03990d561f61438f58b90485b5eb8eeb54a40fbfb314ce8cb71e45a0c8b7aa2658940815cd0877682b6fa6cc311111566e08023effefc0845911d44f0ab5684b3b47e2ba3e38f7613efd1e715659f5dc734b730c9e0c07c6e0b3dc9a9d13b898a8d813c3b4e402a"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "58c28461e2a7e19df7d349ab92ce4980dcf7cabde264a466a52921bfef9c1d7a90d69d4030211c6794bb210e7846b730d7718c0ccffd49cab9a286fe2d2bca29261f31d97c5a7dd02ab65032df3348a4f990c770252920df219c7550e21d536d7815510d8c481dc40232b01c413e788caf68757d253588ff0b5c2493f286e4a0ee"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d889b1e8988ffd6d89e4da17f0ff2842cf49e4af1be7946f1bf8f129381c022f56cdd5538b4ebf696914dbf1e41e60e72735fec07fba6c23f9a1d830a30387a22c869ae16fd02735df900f575012cef3536b7eef55d6181e84c309b4db6984465b8f824a8d4112b37f7f862b565d282c9bbbb49ff6aa8023569059bef91de9718a83d19a7c7138ecc4e47069fb86e2c0971afd7a97796ebff"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xd, 0x2, 0x1, 0x0, '/dev/sg#\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x800}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_SNAPLEN={0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x534, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x1c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "400d5a5a6c82b528db"}, @NFTA_DATA_VALUE={0x9, 0x1, "1dcd5394ba"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f59066141f597fd4bb55dd7d5988367486998faf204c7076044da57d580e99e374fa1d74c7ede4870f5d89fd6d4e609479ebb5072ebe57f08351540e585f86767e57b6ff6b0d3ab0e35b3b90b07255d8acea9d2c5352a580793e144b4a165781253187e83904fb9d6bf0968643a9df84b67d7b38b662ffc9f85aa7303a20930d7bd5beb8427f4395b4a8c08feede45f1046120b58e5510d6328c05f672f9eda95ec040cf06a3f4f22227559780"}, @NFTA_DATA_VALUE={0xa1, 0x1, "5a4d1622c3809ebd03a708e39c3baf1b05626d61c0c6fdfc49328fb1148c575f66069e07ee4e8838041b80a34605a75e97e359435a54757da4b2ca89a4357c500e8bcddbabe844b2107b3c2f28742ef8ba57e1d9f32d06775275960402da730b607a7a7d94779adc9367ac00bb5819cf636e7978aa9e7d4d839a0f632f532cb5e241e89046d62e099b162cbd516eff52662b01ae884c07bb14ec480120"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x270, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "7d9c6a23ee8fc18227c3c755e8a34d0ee87ec480ae99efedfae4316aa37b77f22ffdf5d4aea189fa985399c163d99ee688448a94f01d20c5e74c051cd56b2a28158f72da2d361427740d08d71aa5284be883438dea6ecf08876c88993bcdee3330a7045f7d90c3fe24ec984593b1cf6266fd188a997c7553cd0ab3d9a028bb5d2f4c34d3c4c1674842fd043c387f2acac89b3c7c686255bef226dba277df43213110390b6fa42434a17520a26012135155ef6e7ecd2ab19fe507157daebca30b0e4195940556d92f53bba37d040f025ec3fcbfe6bf929a99afedb52f95b424a84bcd018feb473585d5"}, @NFTA_DATA_VALUE={0x36, 0x1, "4e9957e22609836e805cd35ab84e6993cf56638c3211e44da3fa80c8a73aa2f954779f7c58f1d5155f1e6e117c21aadde5e5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "35f42d63ba4bf949e96a0b9efae2beba22d039440430bc8e9729953af21cea8e82aa9d1157c87d4917"}, @NFTA_DATA_VALUE={0xd1, 0x1, "6d8b41f25f316ceba6198cf71c34eae2fec89c8c9a361a39e41e068464d412dcf9428cbb7e039e2a63b3ada5e9e9fc09b48ad8f9d2fc664ca8d287dee7af7f60efa7a3355ba70c7dc5459d30801e4282b15ef7e453870c636f3ff7fbef35493587afa4a07093790f38cea6881fc360cfd9fd22b6ff513d63e241de7be73b31afdef74b1e9d03a7441fbb2115b019abf6970ec747f4f5de9dfb7ee15a53bbc4cb7599a725e20e008f04fbdfb31b4afda55b4f8681c0d0b57d83a54b6d0b5af088b74316d2c50fa81cd7c2b19dca"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0xb4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x220, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb5, 0x1, "9c668180943534491d385454d80479ce52db48be9f33af5f941fceff58619993d3831cd7b8809da1ad9fd8907dfdb68f51a009314ec4d036bbfd448cddc51bc6cdb6e5fef18cdb3471a7945083f237b9038df5464ab82510979db946e95c9338ce64cbbd0d80bccf467d64344b89bb792f4dad33a0b24a36aefc6e3c61b131a890adb1a518c3f99115b94ec91f44d18c29098f109124cf0de61657d50d970158751e8cf6bc63bcfd28bb610e6f1e68059a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "9fd9840f2eee05f7c79090178ef651719692618d1e954c4cb06e4dcabbff2415243092cb8dd87b1a3fe640cddc3de5a8493a3841d77d2e1e13e0ffbb8f4c9414988c65cd575407ce8bbf53efb54e8bb9b470567d27aa618ece22b9f0fb3156c29701fd608225a5490d0b04c8017bcde20bd55f5febe467a370210b8e0d2fcfc6586fed3fb2a3840b388ae57d88cbb431fc86a226c4abdc9667cef0f0b9d332523862aec7407d15b29804b90b1df31a12a959fe49bfc033fb51ceba007333e9f91e6315aa63583381769cd8e5780cdc751f14491542"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "935a6908a7c66a3ca70dc3778a2f6851e62a7823a1d43c0bc1ae10c53bbc82aed9d8ab9847f841bd2f11fc938ce9d5a01b267ea38af2aad637c010685a"}]}, @NFTA_SET_ELEM_KEY={0x180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "cb6a172b62d997201d09ec637d0a515ff782f4c1c38c9eae15cdd58a5e668da3662cd96be4c74cc39051b8eab525c74b7c4083fed66fe62be69dc18b8d32cd4f7085ee077b6f70b7029f45f6e404734c77ab50a27aa6c928fda1215ac6cfd4eb91b8f4d18ba7be3ca627610fc3d217a509333ddc12311d59d5f2078d595900ac2ad60b866b2683e15fecae9b4531821f5c7984365fd3997f3f3dbc6443e1f97a1f"}, @NFTA_DATA_VALUE={0xc5, 0x1, "6c80eda3273c221e91844d6ffa0071d2bb7cf40b9bb037731be2c0d1bc09a0e9b61a056e49afcbdecc1b53d3e0d321d3d983e66facf1bd16cdb3eb74b990b5a536ae8a44e6a924ae7181cac1e80733d233d2406f73f31738351db91314a65dd4d421e8b11e4864b8bc5dca8e2c50936c63adf68506a2644b1e3b35679d0bfdc5e08692fbf39d3f654833b3c0ee04712d191be45987757578b700cbcc3cb347c5645291fe505aafecbe4ba2dcb19f7d6dd13928458e04f0093c4df27833ad4f0528"}]}]}, {0x26c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x240, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "ac6d474db7942dd5e86ed999d3431e80cf9df42749f065fd095dbeced54a22dc02613349eb8d3c4f9497dfb9d1e23f0070b8b6119cf9ed5391045425ac6ed0d820249ed8fa030a902a"}, @NFTA_DATA_VALUE={0xf1, 0x1, "8797e47763589a8df8869756af52727e919d3ed9e00d982ca20fdb991b263955f18240a01fb1582cddc500990147501b4e37b78d745c2f319484be5474658d3c4817395d54e043e0319d430eaebbff9a0c53f3856f796b6e90c9e9d241453c588fcdfee3217a2f38c8f487e09ee007043586e647169c09431b1a3c28157e83960fdf2f93043b78a3da97affa4a19c92429f4bb4b51b72862cd3f8a379d8bdb258bc399554f00be42b33bc04cfe1af6e96b672c578b418ed22c6c8275be2450a73562920f9834d5b0d4beddbfc5b9e0df0c5cd0c277ba76530584cd2f85d7e967d3e666a69662388df10e3da8e2"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x95, 0x1, "efa3011438f72b5455339097519ee3878ade055d6beb08e4cb092190be018db8b4ca1d5bc59003c8ca9919f354bfeb2dbcde7b3ee29216bd7a207359d719cec5d7abb151a5579bf6f6079e001b53a61549f6bbe23da7ee7b4c73e8b251ef1fa6f4440aaf9b735049a2acb9f1b362d8b05c87e74535214747d137446eb2a8a57716c7eece421128fd0738a573f21ad6df35"}, @NFTA_DATA_VALUE={0x5, 0x1, "d6"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x372}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x258, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY_END={0x15c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "52fb905e7348db874093bcb40d"}, @NFTA_DATA_VALUE={0x89, 0x1, "2bb1eb2d0aa7fb27713ae6900c35befd0112784f813bc1466068ca22fcd30905af3ecadb3debc28593f891e74e522b2f124f6ad6eb24a08287fb369cf485fe3a76af431217d26eb894f0b9798b067468358f12ab8101899787096d314087a97c0b127e138b47b260ddbcd66403776a5d5928375dd7ec459c555440aacaf5d74d3a1771421d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x49, 0x1, "48a3eeec8d13ec7a1fcb10d9bd5edbc6922b6282895315100ec04b20fa8f5fa919f8aef563d23582c347e64793da6c297416d2def67d76d8ddb9e61acb9a856c016792513c"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "0117441eac5bf63a713d876bd7ae9e2aa5ab0c5b7aeeb2da52ee01f9cd22c92977076f6112504879f0e2e9a6adfd20cf9faef9b7eb972d90686a4d985f6fd15d129a1dbf11c7587fb3fc052b3268a17fe38e92a1b2"}, @NFTA_SET_ELEM_USERDATA={0x31, 0x6, 0x1, 0x0, "d5510775ae1b7e730779aa2791452089999b3ce61e74b53d518f175dc662cefef921a4f087123d282d0cee3b34"}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "08348c570d3ad3b51f1f32c18353f69523aafaf1753d1a8cf19d8fc3aa6f9396dec2baa42e61d4a3e96610c52f6883c18f3458b45fc4e3ccc4322eef63df9fdca2b0fd8691a5c1e7f793d52d3265f2624c"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x175c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000400)={0x7b4, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}, @NL80211_ATTR_CSA_IES={0x4c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0x40, 0x2a, [@ssid={0x0, 0x1e, @random="2a77eb7fdb71ddf1d04d11cc50ad3bb04d4871a872fe4114fdee2f68fed8"}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac, @device_b}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x5, 0xb]}]}, @NL80211_ATTR_CSA_IES={0x40, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4, 0x7b8, 0x9, 0x5, 0x8, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x4f68, 0x4, 0x7, 0x3, 0x5, 0x7fff, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x9, 0x3ff, 0x8c, 0xffff, 0x9, 0x999d, 0x8, 0xff84, 0xffff, 0x0]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}], @NL80211_ATTR_CSA_IES={0x6e8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x1]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x5, 0x81, 0xa, 0x401, 0x8000, 0x7]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0xf9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @random="1ccaffeb8bbf", {0x9, 0x9}}, 0xffffffffffffffc0, @default, 0x2000, @void, @void, @val={0x3, 0x1, 0xab}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x7, 0x4}}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x6, 0xf, 0x10, 0xca4}}, [{0xdd, 0x6b, "76d049cfa60c559fb75a59f94aef764772bb028262a94d7f9ac30c71f5b3cd2da0c41704188700615b07d2009c7e8897ad4eb9ca547fb6405f9cfd22475de95779f9ce0531955f12bcf9384c6a81fc2db88197ae71ccec624c447a38bc85eca9f6f81300085035bd08d316"}, {0xdd, 0x52, "d0cadf16023963e23e53c876570c427d6e8ce3a0393b2228f3673a6b09afe50c925e34edc19065c075b915f0ee5fb2d38710417a8023769acec14649991c1bd79ca3cea50ec4fe5503e19639a34b377cfb75"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x66, 0x7f, [@random={0x5, 0x60, "2d3808958ef7d3d5f17837a8f4f5329a9b0a1b16a58a799cd984c136f6a9b2fadae55c777a92291bb2d89246f91acc7c54002aa8e8eca746af25b89d775f36075be10f82293c8067818ba88aea3c5da994c80a5cf5ba1786f5480bd349135af5"}]}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x384, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x90, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x46, 0x2, "b27f3166344804ee8e0fb35c8ae2930b954154067fa770d08ea4f7b15cf44485cc8bd25ae2cfdf31df03e59b01ec888980a7d8ad2d1072cddfb13dfa7a32e64bc025"}, @NL80211_FTM_RESP_ATTR_LCI={0x41, 0x2, "4b413dba8a00fbdc4d75ad562fa4cd33b03e00c71517afdb97d594c7d5c5e8fb0fae9555e63ca022a7c1d210030bc58b333b2e18e40d83e1464ae418c2"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x152, 0x80, [@measure_req={0x26, 0x35, {0x7, 0x4, 0x2, "4defc98978410ee5f40647d60cf2f60d7506a14c4610a328c6322530b0d2bd51d27a4a8da55928041ac8d5fbbeb8d37de64c"}}, @random_vendor={0xdd, 0xf9, "271bf5504262f5484922d04d3cb4dfa9d24bd64a4d8891c54226430124a19add247529f7765723c187626fd32b658e31c9acb085e23303060e8d6ef263b15c7587a2f920940c88232595fed0fccd4c56ea468fe8b4c895c2efa03dd469bfccc45938e23b1f2525c4617b79e4da9119c2fd6e0b8b46a347aaa6e158244b9a8dfcefe3d938c4b86caf1bce1fb1cb4e565180907b0e483bdbcc7045a70c067368c0bfbd4fe3dd57585037cf471706ca5638ac3237c2383d98e1d26c4495eea468df34d1e6fd8b2a49029a0669448c11fc5ca6afe4f492c652e6777021c78a94150fca26eb482e49657c6b6fb44f6f63efc521d61477e267b66c49"}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x81, 0x6, @broadcast, 0xc, 0xfffffffb, 0x7}}, @supported_rates={0x1, 0x3, [{0x3}, {0x18}, {0x48}]}]}]]}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) 0s ago: executing program 0 (id=5771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000048c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) kernel console output (not intermixed with test programs): raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.798449][T13669] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 949.798494][T13669] usb 7-1: MIDIStreaming interface descriptor not found [ 949.929513][T21528] binder: 21527:21528 ioctl c0306201 0 returned -14 [ 949.970576][ T5616] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 950.007834][ T5338] usb 3-1: NFC: intf ffff888035e4b000 id ffffffff8edb52a0 [ 950.036617][ T5338] usb 3-1: USB disconnect, device number 41 [ 950.133028][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 950.133573][T13669] usb 7-1: USB disconnect, device number 27 [ 950.136407][ T5616] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 950.136433][ T5616] usb 4-1: config 251 has no interface number 0 [ 950.136498][ T5616] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 950.136524][ T5616] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 950.136546][ T5616] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 950.136572][ T5616] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 950.136598][ T5616] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.136623][ T5616] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.136649][ T5616] usb 4-1: config 251 interface 202 has no altsetting 0 [ 950.238951][ T5616] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 950.238993][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.239015][ T5616] usb 4-1: Product: syz [ 950.239030][ T5616] usb 4-1: Manufacturer: syz [ 950.239046][ T5616] usb 4-1: SerialNumber: syz [ 950.291244][T21523] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 950.311956][ T8614] udevd[8614]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.507454][T21535] tipc: Enabling of bearer rejected, failed to enable media [ 950.516761][T21523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.536714][T21523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.559346][ T5616] cxacru 4-1:251.202: cxacru_bind: interface has incorrect endpoints [ 950.559479][ T5616] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 950.593867][ T5616] usb 4-1: USB disconnect, device number 119 [ 950.820793][T21544] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5245'. [ 951.029697][T21546] netlink: 6036 bytes leftover after parsing attributes in process `syz.0.5246'. [ 951.289853][T21557] dlm: plock device version mismatch: kernel (1.2.0), user (1.16384.0) [ 951.563575][ T5338] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 951.564404][ T5616] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 951.726033][ T5616] usb 1-1: Using ep0 maxpacket: 8 [ 951.727969][ T5616] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 951.727998][ T5616] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 951.728025][ T5616] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.728053][ T5616] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.728096][ T5616] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.728121][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.748221][ T5338] usb 4-1: Using ep0 maxpacket: 8 [ 951.753084][ T5338] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 951.753114][ T5338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 75, changing to 10 [ 951.753142][ T5338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1104, setting to 64 [ 951.756889][ T5338] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 951.756915][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.756933][ T5338] usb 4-1: Product: а [ 951.756946][ T5338] usb 4-1: Manufacturer: 뱚ꟄӪឃ㮚阛묺讬爒陵̘ࢶ閧ٺ噐닿轷뜠葫 [ 951.756962][ T5338] usb 4-1: SerialNumber: Г [ 951.979900][ T5616] usb 1-1: GET_CAPABILITIES returned 0 [ 951.979946][ T5616] usbtmc 1-1:16.0: can't read capabilities [ 952.072277][ T5338] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 952.072312][ T5338] usb 4-1: MIDIStreaming interface descriptor not found [ 952.324929][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.402768][ T5338] usb 4-1: USB disconnect, device number 120 [ 952.415705][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.415790][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.415852][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.415911][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.536888][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.536970][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.537019][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.576658][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.576731][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.576788][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.577055][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.577120][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.577191][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.577468][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.577534][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 952.580573][ T9] usb 1-1: USB disconnect, device number 20 [ 952.652408][T21567] netlink: 6036 bytes leftover after parsing attributes in process `syz.2.5256'. [ 952.732233][T21565] FAULT_INJECTION: forcing a failure. [ 952.732233][T21565] name failslab, interval 1, probability 0, space 0, times 0 [ 952.732272][T21565] CPU: 1 UID: 0 PID: 21565 Comm: syz.6.5255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 952.732300][T21565] Tainted: [L]=SOFTLOCKUP [ 952.732308][T21565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 952.732319][T21565] Call Trace: [ 952.732328][T21565] [ 952.732337][T21565] dump_stack_lvl+0xe8/0x150 [ 952.732366][T21565] should_fail_ex+0x46b/0x600 [ 952.732395][T21565] should_failslab+0xa8/0x100 [ 952.732417][T21565] __kmalloc_cache_noprof+0xa0/0x6d0 [ 952.732438][T21565] ? sctp_stream_init_ext+0x57/0x180 [ 952.732464][T21565] ? sctp_stream_init_ext+0x57/0x180 [ 952.732497][T21565] sctp_stream_init_ext+0x57/0x180 [ 952.732527][T21565] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 952.732561][T21565] ? irqentry_exit+0x218/0x8c0 [ 952.732584][T21565] ? lockdep_hardirqs_on+0x7a/0x110 [ 952.732602][T21565] ? irqentry_exit+0x218/0x8c0 [ 952.732631][T21565] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 952.732658][T21565] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 952.732686][T21565] sctp_sendmsg+0x110a/0x29b0 [ 952.732722][T21565] ? __pfx_sctp_sendmsg+0x10/0x10 [ 952.732760][T21565] ? aa_sk_perm+0x703/0x950 [ 952.732792][T21565] ? __pfx_aa_sk_perm+0x10/0x10 [ 952.732816][T21565] ? sock_rps_record_flow+0x19/0x350 [ 952.732837][T21565] ? inet_sendmsg+0x2f4/0x370 [ 952.732855][T21565] ? aa_sock_msg_perm+0x122/0x200 [ 952.732876][T21565] ? __pfx_inet_sendmsg+0x10/0x10 [ 952.732894][T21565] sock_sendmsg_nosec+0x10e/0x180 [ 952.732926][T21565] ____sys_sendmsg+0x55c/0x870 [ 952.732953][T21565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.732984][T21565] ? import_iovec+0x73/0xa0 [ 952.733009][T21565] ___sys_sendmsg+0x2a5/0x360 [ 952.733032][T21565] ? __lock_acquire+0x6b5/0x2d10 [ 952.733059][T21565] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.733112][T21565] ? __fget_files+0x2a/0x420 [ 952.733132][T21565] ? __fget_files+0x3a6/0x420 [ 952.733159][T21565] __x64_sys_sendmsg+0x1b7/0x290 [ 952.733185][T21565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 952.733227][T21565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.733247][T21565] do_syscall_64+0x174/0x580 [ 952.733274][T21565] ? clear_bhb_loop+0x40/0x90 [ 952.733297][T21565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.733316][T21565] RIP: 0033:0x7f136dffce59 [ 952.733335][T21565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.733351][T21565] RSP: 002b:00007f136c235028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.733373][T21565] RAX: ffffffffffffffda RBX: 00007f136e276090 RCX: 00007f136dffce59 [ 952.733388][T21565] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 952.733400][T21565] RBP: 00007f136c235090 R08: 0000000000000000 R09: 0000000000000000 [ 952.733411][T21565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.733424][T21565] R13: 00007f136e276128 R14: 00007f136e276090 R15: 00007fff83b9b308 [ 952.733454][T21565] [ 952.859527][T21571] trusted_key: syz.2.5258 sent an empty control message without MSG_MORE. [ 953.239597][ T8614] udevd[8614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.579287][ T5616] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 953.720094][ T5616] usb 4-1: device descriptor read/64, error -71 [ 953.982194][ T5616] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 954.072473][T21589] netlink: 6036 bytes leftover after parsing attributes in process `syz.2.5266'. [ 954.123871][ T5616] usb 4-1: device descriptor read/64, error -71 [ 954.243891][ T5616] usb usb4-port1: attempt power cycle [ 954.270615][T21595] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.604262][T21607] loop9: detected capacity change from 0 to 7 [ 954.605404][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.605509][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.605578][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.605647][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.605723][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.605790][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.605862][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.605877][T21607] ldm_validate_partition_table(): Disk read failed. [ 954.605943][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.606000][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.606056][T21607] Buffer I/O error on dev loop9, logical block 0, async page read [ 954.606114][T21607] Dev loop9: unable to read RDB block 0 [ 954.606330][T21607] loop9: unable to read partition table [ 954.610974][ T5616] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 954.614770][T21607] loop9: partition table beyond EOD, truncated [ 954.616442][T21607] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 954.648624][ T5616] usb 4-1: device descriptor read/8, error -71 [ 954.903031][ T5616] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 954.928292][ T5616] usb 4-1: device descriptor read/8, error -71 [ 954.980063][T21615] netlink: 6036 bytes leftover after parsing attributes in process `syz.6.5276'. [ 955.051656][ T5616] usb usb4-port1: unable to enumerate USB device [ 955.500338][T21633] FAULT_INJECTION: forcing a failure. [ 955.500338][T21633] name failslab, interval 1, probability 0, space 0, times 0 [ 955.500361][T21633] CPU: 1 UID: 0 PID: 21633 Comm: syz.0.5283 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 955.500377][T21633] Tainted: [L]=SOFTLOCKUP [ 955.500381][T21633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 955.500388][T21633] Call Trace: [ 955.500392][T21633] [ 955.500397][T21633] dump_stack_lvl+0xe8/0x150 [ 955.500413][T21633] should_fail_ex+0x46b/0x600 [ 955.500431][T21633] should_failslab+0xa8/0x100 [ 955.500445][T21633] kmem_cache_alloc_node_noprof+0xae/0x710 [ 955.500463][T21633] ? __alloc_skb+0x1d0/0x7d0 [ 955.500474][T21633] ? __alloc_skb+0x1d0/0x7d0 [ 955.500488][T21633] __alloc_skb+0x1d0/0x7d0 [ 955.500501][T21633] rtmsg_ifinfo_build_skb+0x84/0x260 [ 955.500521][T21633] rtnetlink_event+0x1b7/0x270 [ 955.500535][T21633] notifier_call_chain+0x1ad/0x3d0 [ 955.500551][T21633] call_netdevice_notifiers+0x90/0xd0 [ 955.500567][T21633] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 955.500584][T21633] ? tun_get+0x1c/0x2f0 [ 955.500597][T21633] __tun_chr_ioctl+0x171a/0x1e30 [ 955.500612][T21633] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 955.500626][T21633] ? __fget_files+0x2a/0x420 [ 955.500637][T21633] ? __fget_files+0x3a6/0x420 [ 955.500646][T21633] ? __fget_files+0x2a/0x420 [ 955.500658][T21633] ? bpf_lsm_file_ioctl+0x9/0x20 [ 955.500671][T21633] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 955.500682][T21633] __se_sys_ioctl+0xff/0x170 [ 955.500696][T21633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.500707][T21633] do_syscall_64+0x174/0x580 [ 955.500720][T21633] ? trace_irq_disable+0x3b/0x140 [ 955.500734][T21633] ? clear_bhb_loop+0x40/0x90 [ 955.500747][T21633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.500758][T21633] RIP: 0033:0x7fe4f56ace59 [ 955.500769][T21633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.500778][T21633] RSP: 002b:00007fe4f38fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 955.500790][T21633] RAX: ffffffffffffffda RBX: 00007fe4f5925fa0 RCX: 00007fe4f56ace59 [ 955.500798][T21633] RDX: 000000000000010e RSI: 00000000400454cd RDI: 0000000000000003 [ 955.500805][T21633] RBP: 00007fe4f38fe090 R08: 0000000000000000 R09: 0000000000000000 [ 955.500812][T21633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.500819][T21633] R13: 00007fe4f5926038 R14: 00007fe4f5925fa0 R15: 00007ffd5aa44378 [ 955.500835][T21633] [ 955.562491][T20163] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 955.845394][T20163] usb 3-1: Using ep0 maxpacket: 8 [ 955.848458][T20163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 955.848490][T20163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 955.848502][T20163] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 955.848515][T20163] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 955.848541][T20163] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 955.848554][T20163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.854504][T20163] usb 3-1: config 0 descriptor?? [ 955.856758][T21628] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 956.060796][T21638] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.5285'. [ 956.145186][ T5615] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 956.147669][T20163] usb 3-1: USB disconnect, device number 42 [ 956.516155][ T5616] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 956.683739][ T5616] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 956.683773][ T5616] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 956.686350][ T5616] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 956.686387][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.686408][ T5616] usb 1-1: Product: syz [ 956.686422][ T5616] usb 1-1: Manufacturer: syz [ 956.686436][ T5616] usb 1-1: SerialNumber: syz [ 956.705308][ T5616] usb 1-1: config 0 descriptor?? [ 956.707481][T21645] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 956.708017][T21645] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 956.932932][T21645] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 956.933012][T21645] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 957.014568][T20163] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 957.177123][T20163] usb 4-1: Using ep0 maxpacket: 32 [ 957.179964][T20163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.179997][T20163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.180035][T20163] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 957.180060][T20163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.237730][T20163] usb 4-1: config 0 descriptor?? [ 957.252661][T20163] hub 4-1:0.0: USB hub found [ 957.374947][ T5616] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 957.464885][T20163] hub 4-1:0.0: 1 port detected [ 957.680466][T21663] netlink: 'syz.0.5288': attribute type 28 has an invalid length. [ 957.680491][T21663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5288'. [ 957.683957][T21653] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 957.683975][T21653] overlayfs: missing 'lowerdir' [ 957.738086][T21662] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.5295'. [ 957.779755][T20163] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 957.779905][T20163] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 957.812462][T20163] usbhid 4-1:0.0: can't add hid device: -71 [ 957.812583][T20163] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 957.861089][T20163] usb 4-1: USB disconnect, device number 125 [ 958.326290][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 958.450762][ T5616] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 958.468921][ T5616] usb 1-1: USB disconnect, device number 21 [ 958.538994][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 958.539025][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.539053][ T9] usb 3-1: Product: syz [ 958.539067][ T9] usb 3-1: Manufacturer: syz [ 958.539081][ T9] usb 3-1: SerialNumber: syz [ 958.582530][ T9] usb 3-1: config 0 descriptor?? [ 958.596993][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 958.677750][T21677] FAULT_INJECTION: forcing a failure. [ 958.677750][T21677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.677773][T21677] CPU: 0 UID: 0 PID: 21677 Comm: syz.3.5300 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 958.677789][T21677] Tainted: [L]=SOFTLOCKUP [ 958.677793][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 958.677800][T21677] Call Trace: [ 958.677805][T21677] [ 958.677811][T21677] dump_stack_lvl+0xe8/0x150 [ 958.677829][T21677] should_fail_ex+0x46b/0x600 [ 958.677847][T21677] _copy_to_user+0x31/0xb0 [ 958.677864][T21677] simple_read_from_buffer+0xe1/0x170 [ 958.677879][T21677] proc_fail_nth_read+0x1be/0x230 [ 958.677893][T21677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.677906][T21677] ? rw_verify_area+0x2ac/0x4e0 [ 958.677919][T21677] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.677930][T21677] vfs_read+0x212/0xa80 [ 958.677947][T21677] ? __pfx_vfs_read+0x10/0x10 [ 958.677967][T21677] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 958.677982][T21677] ? lockdep_hardirqs_on+0x7a/0x110 [ 958.677995][T21677] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 958.678008][T21677] ? mutex_lock_nested+0x152/0x1d0 [ 958.678025][T21677] ? fdget_pos+0x252/0x320 [ 958.678040][T21677] ksys_read+0x156/0x270 [ 958.678054][T21677] ? __pfx_ksys_read+0x10/0x10 [ 958.678071][T21677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.678082][T21677] do_syscall_64+0x174/0x580 [ 958.678095][T21677] ? trace_irq_disable+0x3b/0x140 [ 958.678109][T21677] ? clear_bhb_loop+0x40/0x90 [ 958.678121][T21677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.678132][T21677] RIP: 0033:0x7f24c6b7d68e [ 958.678143][T21677] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 958.678152][T21677] RSP: 002b:00007f24c4e0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.678165][T21677] RAX: ffffffffffffffda RBX: 00007f24c4e0e6c0 RCX: 00007f24c6b7d68e [ 958.678172][T21677] RDX: 000000000000000f RSI: 00007f24c4e0e0a0 RDI: 0000000000000005 [ 958.678179][T21677] RBP: 00007f24c4e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 958.678185][T21677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.678192][T21677] R13: 00007f24c6e36038 R14: 00007f24c6e35fa0 R15: 00007ffc0ad448e8 [ 958.678207][T21677] [ 958.846192][T21679] netlink: 'syz.3.5302': attribute type 2 has an invalid length. [ 959.221704][T21688] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.5305'. [ 959.382129][T21693] binder: 21692:21693 ioctl c0306201 2000000004c0 returned -14 [ 959.382760][T21693] binder: 21692:21693 ioctl c0306201 0 returned -14 [ 959.806471][ T5616] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 959.876589][T21702] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.5311'. [ 959.985049][ T5616] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 959.985085][ T5616] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.985109][ T5616] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 959.985135][ T5616] usb 1-1: config 0 interface 0 has no altsetting 0 [ 959.985162][ T5616] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 959.985185][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.993697][ T5616] usb 1-1: config 0 descriptor?? [ 960.165472][ T9] gspca_sunplus: reg_w_riv err -71 [ 960.165563][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 960.167985][ T37] audit: type=1326 audit(1781332685.683:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21703 comm="syz.3.5312" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24c6bbce59 code=0x0 [ 960.208111][ T9] usb 3-1: USB disconnect, device number 43 [ 960.269383][T21699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.271530][T21699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.414539][T21711] syzkaller1: entered promiscuous mode [ 960.414557][T21711] syzkaller1: entered allmulticast mode [ 960.594744][T21713] netlink: 348 bytes leftover after parsing attributes in process `syz.6.5315'. [ 960.775479][ T5616] usbhid 1-1:0.0: can't add hid device: -71 [ 960.775599][ T5616] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 960.791263][ T5616] usb 1-1: USB disconnect, device number 22 [ 961.001545][T21719] binder: 21718:21719 ioctl c0306201 2000000004c0 returned -14 [ 961.003897][T21719] binder: 21718:21719 ioctl c0306201 0 returned -14 [ 961.027234][T21720] FAULT_INJECTION: forcing a failure. [ 961.027234][T21720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.027270][T21720] CPU: 0 UID: 0 PID: 21720 Comm: syz.6.5317 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 961.027298][T21720] Tainted: [L]=SOFTLOCKUP [ 961.027305][T21720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 961.027329][T21720] Call Trace: [ 961.027337][T21720] [ 961.027345][T21720] dump_stack_lvl+0xe8/0x150 [ 961.027372][T21720] should_fail_ex+0x46b/0x600 [ 961.027404][T21720] _copy_from_user+0x2d/0xb0 [ 961.027427][T21720] ___sys_recvmsg+0x175/0x5a0 [ 961.027458][T21720] ? __pfx____sys_recvmsg+0x10/0x10 [ 961.027487][T21720] ? __fget_files+0x2a/0x420 [ 961.027535][T21720] do_recvmmsg+0x32b/0x7e0 [ 961.027568][T21720] ? __pfx_do_recvmmsg+0x10/0x10 [ 961.027602][T21720] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 961.027630][T21720] __x64_sys_recvmmsg+0x198/0x250 [ 961.027657][T21720] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 961.027691][T21720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.027712][T21720] do_syscall_64+0x174/0x580 [ 961.027736][T21720] ? trace_irq_disable+0x3b/0x140 [ 961.027760][T21720] ? clear_bhb_loop+0x40/0x90 [ 961.027784][T21720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.027804][T21720] RIP: 0033:0x7f136dffce59 [ 961.027822][T21720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.027839][T21720] RSP: 002b:00007f136c235028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 961.027860][T21720] RAX: ffffffffffffffda RBX: 00007f136e276090 RCX: 00007f136dffce59 [ 961.027875][T21720] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 961.027889][T21720] RBP: 00007f136c235090 R08: 0000000000000000 R09: 0000000000000000 [ 961.027901][T21720] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 961.027915][T21720] R13: 00007f136e276128 R14: 00007f136e276090 R15: 00007fff83b9b308 [ 961.027945][T21720] [ 961.386022][T21729] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.5323'. [ 961.652898][ T5616] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 961.822508][ T5616] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 961.822539][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.822555][ T5616] usb 1-1: Product: syz [ 961.822563][ T5616] usb 1-1: Manufacturer: syz [ 961.822571][ T5616] usb 1-1: SerialNumber: syz [ 961.828811][ T5616] usb 1-1: config 0 descriptor?? [ 961.838710][ T5616] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 962.147365][T21736] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5325'. [ 962.312847][T21743] binder: 21742:21743 ioctl c0306201 2000000004c0 returned -14 [ 962.313161][T21743] binder: 21742:21743 ioctl c0306201 0 returned -14 [ 963.172697][T21764] netlink: 348 bytes leftover after parsing attributes in process `syz.6.5335'. [ 963.448199][ T5616] gspca_sunplus: reg_w_riv err -71 [ 963.448298][ T5616] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 963.456005][ T5616] usb 1-1: USB disconnect, device number 23 [ 963.734646][T21775] binder: 21774:21775 ioctl c0306201 2000000004c0 returned -14 [ 964.007191][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5343'. [ 964.113886][T21791] netlink: 348 bytes leftover after parsing attributes in process `syz.3.5344'. [ 964.318768][T12162] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 964.481394][T12162] usb 7-1: Using ep0 maxpacket: 16 [ 964.484363][T12162] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 964.484394][T12162] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 964.486669][T12162] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 964.486697][T12162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.486814][T12162] usb 7-1: Product: syz [ 964.486829][T12162] usb 7-1: Manufacturer: syz [ 964.486843][T12162] usb 7-1: SerialNumber: syz [ 964.505185][T12162] usb 7-1: config 0 descriptor?? [ 964.517067][T21804] binder: 21803:21804 ioctl c0306201 2000000004c0 returned -14 [ 964.542882][T12162] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 964.542919][T12162] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 965.141912][T21811] /dev/sg0: Can't lookup blockdev [ 965.187629][T12162] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 965.188581][T12162] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 965.663993][ T824] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 965.702264][ T5616] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 965.805726][ T824] usb 3-1: device descriptor read/64, error -71 [ 965.859459][T12162] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 965.903267][ T5616] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 965.903300][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.903374][ T5616] usb 1-1: Product: syz [ 965.903390][ T5616] usb 1-1: Manufacturer: syz [ 965.903405][ T5616] usb 1-1: SerialNumber: syz [ 965.927119][ T5616] usb 1-1: config 0 descriptor?? [ 965.976238][ T5616] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 966.065906][ T824] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 966.204520][ T824] usb 3-1: device descriptor read/64, error -71 [ 966.264858][T21824] netlink: 6036 bytes leftover after parsing attributes in process `syz.3.5355'. [ 966.360349][ T824] usb usb3-port1: attempt power cycle [ 966.630574][ T9] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 966.724780][ T824] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 966.747650][ T824] usb 3-1: device descriptor read/8, error -71 [ 966.791753][ T9] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 966.791788][ T9] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 966.791815][ T9] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 966.791843][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 967.006573][ T824] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 967.031539][ T824] usb 3-1: device descriptor read/8, error -71 [ 967.147770][ T824] usb usb3-port1: unable to enumerate USB device [ 967.455790][T12162] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 967.477384][T12162] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 967.477922][T12162] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 967.478389][T12162] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 967.508617][ T5616] gspca_sunplus: reg_w_riv err -71 [ 967.508701][ T5616] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 967.517066][ T5616] usb 1-1: USB disconnect, device number 24 [ 967.821495][ T824] usb 7-1: USB disconnect, device number 28 [ 968.187781][T21829] binder: 21828:21829 ioctl c0306201 2000000004c0 returned -14 [ 968.568358][ T5338] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 968.664586][ T5616] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 968.744602][ T5338] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 968.744656][ T5338] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 968.744736][ T5338] usb 1-1: config 2 interface 0 has no altsetting 0 [ 968.748702][ T5338] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 968.748733][ T5338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.748973][ T5338] usb 1-1: Product: syz [ 968.748990][ T5338] usb 1-1: Manufacturer: syz [ 968.749005][ T5338] usb 1-1: SerialNumber: syz [ 968.842584][ T5616] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 968.842613][ T5616] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 968.842633][ T5616] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 968.842652][ T5616] usb 7-1: config 220 has no interface number 2 [ 968.842718][ T5616] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 968.842747][ T5616] usb 7-1: config 220 interface 0 has no altsetting 0 [ 968.842766][ T5616] usb 7-1: config 220 interface 76 has no altsetting 0 [ 968.842784][ T5616] usb 7-1: config 220 interface 1 has no altsetting 0 [ 968.848347][ T5616] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 968.848366][ T5616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.848379][ T5616] usb 7-1: Product: syz [ 968.848394][ T5616] usb 7-1: Manufacturer: syz [ 968.848409][ T5616] usb 7-1: SerialNumber: syz [ 969.017567][ T5338] ims_pcu 1-1:2.0: Missing CDC union descriptor [ 969.017680][ T5338] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 969.044015][ T5338] usb 1-1: USB disconnect, device number 25 [ 969.380436][ T5616] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 969.380471][ T5616] uvcvideo 7-1:220.0: No valid video chain found. [ 969.380533][ T5616] usb 7-1: selecting invalid altsetting 0 [ 969.399131][ T5616] usb 7-1: selecting invalid altsetting 0 [ 969.399167][ T5616] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 969.408441][ T5616] usb 7-1: USB disconnect, device number 29 [ 969.662847][ T9] usb 4-1: New USB device found, idVendor=18b1, idProduct=2037, bcdDevice= 0.00 [ 969.662878][ T9] usb 4-1: New USB device strings: Mfr=0, Product=6, SerialNumber=0 [ 969.684928][ T9] usb 4-1: config 0 descriptor?? [ 969.689236][ T9] usb 4-1: can't set config #0, error -71 [ 969.710854][ T9] usb 4-1: USB disconnect, device number 126 [ 969.780931][T21844] netlink: 6036 bytes leftover after parsing attributes in process `syz.3.5364'. [ 969.931108][T21850] binder: 21848:21850 ioctl c0306201 2000000004c0 returned -14 [ 970.194734][T20163] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 970.344299][T20163] usb 3-1: Using ep0 maxpacket: 32 [ 970.347846][T20163] usb 3-1: unable to get BOS descriptor or descriptor too short [ 970.349842][T20163] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 970.349874][T20163] usb 3-1: can't read configurations, error -61 [ 970.389250][ T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 970.495975][T20163] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 970.550300][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 970.554303][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 970.574154][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 970.574185][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 970.574205][ T9] usb 4-1: Product: syz [ 970.574219][ T9] usb 4-1: Manufacturer: syz [ 970.574234][ T9] usb 4-1: SerialNumber: syz [ 970.580294][ T9] usb 4-1: config 0 descriptor?? [ 970.581228][T21858] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 970.669276][T20163] usb 3-1: Using ep0 maxpacket: 32 [ 970.673342][T20163] usb 3-1: unable to get BOS descriptor or descriptor too short [ 970.676410][T20163] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 970.676445][T20163] usb 3-1: can't read configurations, error -61 [ 970.676982][T20163] usb usb3-port1: attempt power cycle [ 970.926833][T13669] usb 4-1: USB disconnect, device number 127 [ 971.037932][T20163] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 971.071229][T20163] usb 3-1: Using ep0 maxpacket: 32 [ 971.074394][T20163] usb 3-1: unable to get BOS descriptor or descriptor too short [ 971.079573][T20163] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 971.079612][T20163] usb 3-1: can't read configurations, error -61 [ 971.222616][T20163] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 971.244639][T20163] usb 3-1: Using ep0 maxpacket: 32 [ 971.246446][T20163] usb 3-1: unable to get BOS descriptor or descriptor too short [ 971.247786][T20163] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 971.247805][T20163] usb 3-1: can't read configurations, error -61 [ 971.248061][T20163] usb usb3-port1: unable to enumerate USB device [ 971.393456][T21876] FAULT_INJECTION: forcing a failure. [ 971.393456][T21876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 971.393482][T21876] CPU: 0 UID: 0 PID: 21876 Comm: syz.0.5374 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 971.393498][T21876] Tainted: [L]=SOFTLOCKUP [ 971.393502][T21876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 971.393509][T21876] Call Trace: [ 971.393516][T21876] [ 971.393522][T21876] dump_stack_lvl+0xe8/0x150 [ 971.393540][T21876] should_fail_ex+0x46b/0x600 [ 971.393558][T21876] prepare_alloc_pages+0x22a/0x6b0 [ 971.393574][T21876] __alloc_frozen_pages_noprof+0x12f/0x380 [ 971.393589][T21876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 971.393604][T21876] ? __pfx_policy_nodemask+0x10/0x10 [ 971.393619][T21876] ? mtree_range_walk+0x6fc/0x8b0 [ 971.393637][T21876] alloc_pages_mpol+0xd1/0x380 [ 971.393652][T21876] alloc_pages_noprof+0xd2/0x2f0 [ 971.393666][T21876] __pud_alloc+0x3a/0x460 [ 971.393679][T21876] handle_mm_fault+0xef7/0x14d0 [ 971.393691][T21876] ? handle_mm_fault+0xed/0x14d0 [ 971.393701][T21876] ? __lock_acquire+0x6b5/0x2d10 [ 971.393716][T21876] ? __pfx_handle_mm_fault+0x10/0x10 [ 971.393735][T21876] ? lock_mm_and_find_vma+0xa7/0x340 [ 971.393749][T21876] do_user_addr_fault+0x75b/0x1340 [ 971.393769][T21876] exc_page_fault+0x6a/0xc0 [ 971.393783][T21876] asm_exc_page_fault+0x26/0x30 [ 971.393794][T21876] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 971.393805][T21876] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 971.393814][T21876] RSP: 0018:ffffc9000d3bfcc8 EFLAGS: 00050202 [ 971.393825][T21876] RAX: ffffffff84ba6f01 RBX: 0000000000000078 RCX: 0000000000000078 [ 971.393833][T21876] RDX: 0000000000000000 RSI: ffffc9000d3bfd40 RDI: 00002000000000c0 [ 971.393840][T21876] RBP: ffffc9000d3bfee0 R08: ffffc9000d3bfdb7 R09: 1ffff92001a77fb6 [ 971.393848][T21876] R10: dffffc0000000000 R11: fffff52001a77fb7 R12: 0000200000000138 [ 971.393855][T21876] R13: 00007ffffffff000 R14: ffffc9000d3bfd40 R15: 00002000000000c0 [ 971.393867][T21876] ? _copy_to_user+0x41/0xb0 [ 971.393882][T21876] _copy_to_user+0x8a/0xb0 [ 971.393895][T21876] __se_sys_fstatfs+0x1d8/0x2c0 [ 971.393906][T21876] ? __pfx_vfs_write+0x10/0x10 [ 971.393919][T21876] ? __pfx___se_sys_fstatfs+0x10/0x10 [ 971.393958][T21876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.393970][T21876] do_syscall_64+0x174/0x580 [ 971.393983][T21876] ? trace_irq_disable+0x3b/0x140 [ 971.393996][T21876] ? clear_bhb_loop+0x40/0x90 [ 971.394014][T21876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.394025][T21876] RIP: 0033:0x7fe4f56ace59 [ 971.394035][T21876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.394044][T21876] RSP: 002b:00007fe4f38fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 971.394055][T21876] RAX: ffffffffffffffda RBX: 00007fe4f5925fa0 RCX: 00007fe4f56ace59 [ 971.394063][T21876] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 971.394069][T21876] RBP: 00007fe4f38fe090 R08: 0000000000000000 R09: 0000000000000000 [ 971.394076][T21876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.394082][T21876] R13: 00007fe4f5926038 R14: 00007fe4f5925fa0 R15: 00007ffd5aa44378 [ 971.394098][T21876] [ 972.075689][T21883] binder: 21882:21883 ioctl c0306201 2000000004c0 returned -14 [ 973.140196][T20163] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 973.316079][T20163] usb 7-1: Using ep0 maxpacket: 8 [ 973.352259][T20163] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 973.352301][T20163] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 973.352355][T20163] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 973.352380][T20163] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.406581][T20163] usb 7-1: config 0 descriptor?? [ 973.902893][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.902933][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.902961][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.906436][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.906474][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.906502][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.906528][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.906555][T20163] lenovo 0003:17EF:6047.0024: unknown main item tag 0x0 [ 973.996575][T20163] lenovo 0003:17EF:6047.0024: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0 [ 974.349946][T21898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.350494][T21898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.434717][T20163] lenovo 0003:17EF:6047.0024: Fn-lock setting failed: -71 [ 974.435313][T20163] lenovo 0003:17EF:6047.0024: Sensitivity setting failed: -71 [ 974.459691][T20163] usb 7-1: USB disconnect, device number 30 [ 974.699854][T21929] FAULT_INJECTION: forcing a failure. [ 974.699854][T21929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.699886][T21929] CPU: 1 UID: 0 PID: 21929 Comm: syz.3.5391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 974.699908][T21929] Tainted: [L]=SOFTLOCKUP [ 974.699914][T21929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 974.699924][T21929] Call Trace: [ 974.699931][T21929] [ 974.699938][T21929] dump_stack_lvl+0xe8/0x150 [ 974.699959][T21929] should_fail_ex+0x46b/0x600 [ 974.699984][T21929] _copy_to_user+0x31/0xb0 [ 974.700003][T21929] simple_read_from_buffer+0xe1/0x170 [ 974.700025][T21929] proc_fail_nth_read+0x1be/0x230 [ 974.700046][T21929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 974.700065][T21929] ? rw_verify_area+0x2ac/0x4e0 [ 974.700084][T21929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 974.700112][T21929] vfs_read+0x212/0xa80 [ 974.700139][T21929] ? __pfx_vfs_read+0x10/0x10 [ 974.700162][T21929] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 974.700184][T21929] ? lockdep_hardirqs_on+0x7a/0x110 [ 974.700204][T21929] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 974.700224][T21929] ? mutex_lock_nested+0x152/0x1d0 [ 974.700251][T21929] ? fdget_pos+0x252/0x320 [ 974.700278][T21929] ksys_read+0x156/0x270 [ 974.700304][T21929] ? __pfx_ksys_read+0x10/0x10 [ 974.700336][T21929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.700358][T21929] do_syscall_64+0x174/0x580 [ 974.700381][T21929] ? trace_irq_disable+0x3b/0x140 [ 974.700406][T21929] ? clear_bhb_loop+0x40/0x90 [ 974.700430][T21929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.700450][T21929] RIP: 0033:0x7f24c6b7d68e [ 974.700469][T21929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 974.700489][T21929] RSP: 002b:00007f24c4e0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 974.700509][T21929] RAX: ffffffffffffffda RBX: 00007f24c4e0e6c0 RCX: 00007f24c6b7d68e [ 974.700524][T21929] RDX: 000000000000000f RSI: 00007f24c4e0e0a0 RDI: 0000000000000004 [ 974.700537][T21929] RBP: 00007f24c4e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 974.700549][T21929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.700561][T21929] R13: 00007f24c6e36038 R14: 00007f24c6e35fa0 R15: 00007ffc0ad448e8 [ 974.700588][T21929] [ 974.889421][T21932] netlink: 'syz.0.5395': attribute type 32 has an invalid length. [ 975.015020][T13669] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 975.181677][T13669] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.181704][T13669] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.184420][T13669] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 975.184447][T13669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 975.184467][T13669] usb 3-1: SerialNumber: syz [ 975.297206][ T5616] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 975.466532][T13669] usb 3-1: 0:2 : does not exist [ 975.466665][ T5616] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.466686][ T5616] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.510457][ T5616] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 975.510488][ T5616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.510507][ T5616] usb 7-1: Product: syz [ 975.510520][ T5616] usb 7-1: Manufacturer: syz [ 975.510535][ T5616] usb 7-1: SerialNumber: syz [ 975.581162][T13669] usb 3-1: USB disconnect, device number 52 [ 975.653322][T11654] udevd[11654]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.697818][ T824] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 975.802141][ T5616] usb 7-1: USB disconnect, device number 31 [ 975.860476][ T824] usb 1-1: Using ep0 maxpacket: 8 [ 975.867339][ T824] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 975.867372][ T824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 75, changing to 10 [ 975.867400][ T824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1104, setting to 64 [ 975.870948][ T824] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 975.872116][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.872140][ T824] usb 1-1: Product: а [ 975.872155][ T824] usb 1-1: Manufacturer: 뱚ꟄӪឃ㮚阛묺讬爒陵̘ࢶ閧ٺ噐닿轷뜠葫 [ 975.872173][ T824] usb 1-1: SerialNumber: Г [ 976.199443][ T824] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 976.199509][ T824] usb 1-1: MIDIStreaming interface descriptor not found [ 976.307396][ T824] usb 1-1: USB disconnect, device number 26 [ 976.567328][ T8660] udevd[8660]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.761875][T13669] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 976.935682][T21964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 976.935757][T13669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.935785][T13669] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 976.935797][T13669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.941393][T13669] usb 3-1: config 0 descriptor?? [ 977.128393][ T824] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 977.290997][ T824] usb 4-1: Using ep0 maxpacket: 16 [ 977.299098][ T824] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 977.299125][ T824] usb 4-1: config 1 has no interface number 0 [ 977.299185][ T824] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 977.299211][ T824] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 977.299249][ T824] usb 4-1: config 1 interface 105 has no altsetting 0 [ 977.345087][ T824] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 977.345117][ T824] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 977.345137][ T824] usb 4-1: Product: syz [ 977.345151][ T824] usb 4-1: Manufacturer: syz [ 977.345166][ T824] usb 4-1: SerialNumber: syz [ 977.380919][T21962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 977.381623][T21962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 977.698853][T13669] usbhid 3-1:0.0: can't add hid device: -71 [ 977.699006][T13669] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 977.757730][T13669] usb 3-1: USB disconnect, device number 53 [ 977.855239][T21962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 977.856172][T21962] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 978.040963][T21975] tipc: Failed to remove unknown binding: 66,0,0/0:931505531/931505532 [ 978.041005][T21975] tipc: Failed to remove unknown binding: 66,0,0/0:931505531/931505532 [ 978.115084][ T5616] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 978.241124][T21976] tipc: Failed to remove unknown binding: 66,0,0/0:3395098214/3395098216 [ 978.263614][T21962] bridge0: port 3(dummy0) entered blocking state [ 978.264204][T21962] bridge0: port 3(dummy0) entered disabled state [ 978.264709][T21962] dummy0: entered allmulticast mode [ 978.314601][ T5616] usb 7-1: Using ep0 maxpacket: 16 [ 978.324029][ T5616] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 978.324056][ T5616] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 978.324076][ T5616] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 978.324093][ T5616] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 978.324164][ T5616] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 978.324185][ T5616] usb 7-1: config 0 has no interface number 0 [ 978.324228][ T5616] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 978.324263][ T5616] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 978.324333][ T5616] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 978.324368][ T5616] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 978.324396][ T5616] usb 7-1: config 0 interface 125 has no altsetting 0 [ 978.357780][ T5616] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 978.357864][ T5616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.357885][ T5616] usb 7-1: Product: syz [ 978.357900][ T5616] usb 7-1: Manufacturer: syz [ 978.357915][ T5616] usb 7-1: SerialNumber: syz [ 978.381224][T21962] dummy0: entered promiscuous mode [ 978.422662][ T5616] usb 7-1: config 0 descriptor?? [ 978.652508][T21962] bridge0: port 3(dummy0) entered blocking state [ 978.701865][T21962] bridge0: port 3(dummy0) entered forwarding state [ 978.792332][ T824] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 978.792643][ T824] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 978.830741][ T824] usb 4-1: USB disconnect, device number 2 [ 978.907377][T12162] usb 7-1: USB disconnect, device number 32 [ 978.972711][T21988] FAULT_INJECTION: forcing a failure. [ 978.972711][T21988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.972735][T21988] CPU: 1 UID: 0 PID: 21988 Comm: syz.2.5416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 978.972750][T21988] Tainted: [L]=SOFTLOCKUP [ 978.972754][T21988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 978.972762][T21988] Call Trace: [ 978.972766][T21988] [ 978.972771][T21988] dump_stack_lvl+0xe8/0x150 [ 978.972788][T21988] should_fail_ex+0x46b/0x600 [ 978.972805][T21988] _copy_from_iter+0x1d3/0x1670 [ 978.972824][T21988] ? rcu_is_watching+0x15/0xb0 [ 978.972843][T21988] ? __pfx__copy_from_iter+0x10/0x10 [ 978.972858][T21988] ? __alloc_skb+0x27d/0x7d0 [ 978.972869][T21988] ? __alloc_skb+0x27d/0x7d0 [ 978.972883][T21988] ? netlink_sendmsg+0x650/0xb40 [ 978.972895][T21988] ? skb_put+0x11b/0x210 [ 978.972908][T21988] netlink_sendmsg+0x6c0/0xb40 [ 978.972926][T21988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.972940][T21988] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 978.972955][T21988] ? aa_sock_msg_perm+0x122/0x200 [ 978.972968][T21988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.972980][T21988] sock_sendmsg_nosec+0x13a/0x180 [ 978.972997][T21988] ____sys_sendmsg+0x55c/0x870 [ 978.973013][T21988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.973029][T21988] ? import_iovec+0x73/0xa0 [ 978.973060][T21988] ___sys_sendmsg+0x2a5/0x360 [ 978.973073][T21988] ? __lock_acquire+0x6b5/0x2d10 [ 978.973089][T21988] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.973123][T21988] ? __fget_files+0x2a/0x420 [ 978.973133][T21988] ? __fget_files+0x3a6/0x420 [ 978.973149][T21988] __x64_sys_sendmsg+0x1b7/0x290 [ 978.973163][T21988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 978.973184][T21988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.973196][T21988] do_syscall_64+0x174/0x580 [ 978.973210][T21988] ? trace_irq_disable+0x3b/0x140 [ 978.973224][T21988] ? clear_bhb_loop+0x40/0x90 [ 978.973237][T21988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.973247][T21988] RIP: 0033:0x7fefddc2ce59 [ 978.973258][T21988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.973271][T21988] RSP: 002b:00007fefdbe86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.973283][T21988] RAX: ffffffffffffffda RBX: 00007fefddea5fa0 RCX: 00007fefddc2ce59 [ 978.973291][T21988] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 978.973298][T21988] RBP: 00007fefdbe86090 R08: 0000000000000000 R09: 0000000000000000 [ 978.973305][T21988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.973311][T21988] R13: 00007fefddea6038 R14: 00007fefddea5fa0 R15: 00007ffde7098ec8 [ 978.973327][T21988] [ 979.317478][T13669] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 979.405254][T21992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5418'. [ 979.490742][T13669] usb 1-1: Using ep0 maxpacket: 8 [ 979.510123][T13669] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 979.510165][T13669] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 75, changing to 10 [ 979.543990][T13669] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 979.544019][T13669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.544039][T13669] usb 1-1: Product: а [ 979.544053][T13669] usb 1-1: Manufacturer: 뱚ꟄӪឃ㮚阛묺讬爒陵̘ࢶ閧ٺ噐닿轷뜠葫 [ 979.544070][T13669] usb 1-1: SerialNumber: Г [ 979.675336][T12162] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 979.840611][T13669] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 979.840668][T13669] usb 1-1: MIDIStreaming interface descriptor not found [ 979.847195][T12162] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 979.847225][T12162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.847246][T12162] usb 3-1: Product: syz [ 979.847260][T12162] usb 3-1: Manufacturer: syz [ 979.847275][T12162] usb 3-1: SerialNumber: syz [ 980.095075][T13669] usb 1-1: USB disconnect, device number 27 [ 980.222797][T21992] bond0: (slave gre0): refused to change device type [ 980.271386][ T824] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 980.328993][T22013] udevd[22013]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.356893][T12162] rtl8150 3-1:1.0: couldn't reset the device [ 980.357113][T12162] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 980.390285][T12162] usb 3-1: USB disconnect, device number 54 [ 980.436514][ T824] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 980.436541][ T824] usb 4-1: config 0 has no interface number 0 [ 980.436587][ T824] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 980.436617][ T824] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 980.438350][ T824] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 980.438380][ T824] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 980.438400][ T824] usb 4-1: Manufacturer: syz [ 980.438414][ T824] usb 4-1: SerialNumber: syz [ 980.462659][ T824] usb 4-1: config 0 descriptor?? [ 980.639707][T22020] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5429'. [ 980.708221][T22008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.708779][T22008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.814428][ T32] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 980.874655][T22025] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5429'. [ 980.875081][T22025] openvswitch: netlink: Message has 4 unknown bytes. [ 980.956833][ T32] usb 1-1: device descriptor read/64, error -71 [ 981.175978][ T824] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 981.187647][ T824] usb 4-1: USB disconnect, device number 3 [ 981.213899][ T32] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 981.398137][ T32] usb 1-1: device descriptor read/64, error -71 [ 981.409322][T13669] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 981.519052][ T32] usb usb1-port1: attempt power cycle [ 981.583903][T13669] usb 3-1: Using ep0 maxpacket: 16 [ 981.587096][T13669] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 981.587123][T13669] usb 3-1: config 1 has no interface number 0 [ 981.587160][T13669] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 981.587175][T13669] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 981.587188][T13669] usb 3-1: config 1 interface 105 has no altsetting 0 [ 981.589299][T13669] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 981.589328][T13669] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 981.589347][T13669] usb 3-1: Product: syz [ 981.589355][T13669] usb 3-1: Manufacturer: syz [ 981.589363][T13669] usb 3-1: SerialNumber: syz [ 981.593606][T22031] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 981.593724][T22031] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 981.885916][ T32] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 981.915649][ T32] usb 1-1: device descriptor read/8, error -71 [ 982.046080][T22031] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 982.046202][T22031] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 982.168145][ T32] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 982.204346][ T32] usb 1-1: device descriptor read/8, error -71 [ 982.320746][ T32] usb usb1-port1: unable to enumerate USB device [ 982.381753][T22048] kvm: pic: non byte read [ 982.381825][T22048] kvm: pic: non byte read [ 982.381893][T22048] kvm: pic: non byte read [ 982.381938][T22048] kvm: pic: non byte read [ 983.114184][T13669] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 983.183445][T13669] aqc111 3-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ae:71:92:b4:7a:a5 [ 983.211651][T13669] usb 3-1: USB disconnect, device number 55 [ 983.216181][T13669] aqc111 3-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 983.339078][T13669] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 983.339220][T13669] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 983.339447][T13669] aqc111 3-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 984.302450][T13669] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 984.465350][T13669] usb 1-1: Using ep0 maxpacket: 32 [ 984.469026][T13669] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 984.469055][T13669] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 984.469079][T13669] usb 1-1: config 0 interface 0 has no altsetting 0 [ 984.471258][T13669] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 984.471286][T13669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.471307][T13669] usb 1-1: Product: syz [ 984.471319][T13669] usb 1-1: Manufacturer: syz [ 984.471327][T13669] usb 1-1: SerialNumber: syz [ 984.475230][T13669] usb 1-1: config 0 descriptor?? [ 984.921733][T13669] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 985.365647][T13669] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 985.365804][T13669] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 985.397280][T13669] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 985.432376][T22117] tmpfs: Unknown parameter '' [ 985.591201][T22080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.620231][T22080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.202911][T22140] syzkaller0: entered promiscuous mode [ 986.202928][T22140] syzkaller0: entered allmulticast mode [ 986.457206][T22142] netlink: 356 bytes leftover after parsing attributes in process `syz.6.5476'. [ 986.703971][ T9] usb 1-1: USB disconnect, device number 32 [ 987.002306][T22154] devpts: Unknown parameter 'wlan1' [ 987.245794][T22166] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5485'. [ 987.323065][T22169] overlayfs: missing 'lowerdir' [ 987.924909][T22190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5495'. [ 988.057318][T22193] netlink: 356 bytes leftover after parsing attributes in process `syz.0.5496'. [ 988.143342][T22195] overlayfs: missing 'lowerdir' [ 988.244505][T22197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5498'. [ 989.104912][T22216] tipc: Enabling not permitted [ 989.104955][T22216] tipc: Enabling of bearer rejected, failed to enable media [ 989.287906][T22221] overlayfs: missing 'workdir' [ 989.329605][T22223] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5505'. [ 990.880207][T22246] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5515'. [ 990.964804][ T4921] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 991.008610][ T4921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 991.010988][ T4921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 991.067821][ T4921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 991.073754][ T4921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 991.148589][T22250] overlayfs: missing 'workdir' [ 991.554283][T22258] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5518'. [ 991.853753][T22258] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5518'. [ 992.478011][T22272] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5523'. [ 992.863177][T22280] overlayfs: missing 'workdir' [ 993.042827][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 993.112333][T22284] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5526'. [ 993.234166][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 993.234198][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.234218][ T9] usb 3-1: Product: syz [ 993.234232][ T9] usb 3-1: Manufacturer: syz [ 993.234248][ T9] usb 3-1: SerialNumber: syz [ 993.275988][ T9] usb 3-1: config 0 descriptor?? [ 993.302952][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 993.453330][T22291] fuse: Bad value for 'fd' [ 993.622403][ T5615] Bluetooth: hci1: command tx timeout [ 993.759017][ T7405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.559375][T22308] overlayfs: missing 'lowerdir' [ 994.854831][ T9] gspca_sunplus: reg_w_riv err -71 [ 994.854926][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 994.885847][ T9] usb 3-1: USB disconnect, device number 56 [ 995.377192][ T7405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.877495][ T5615] Bluetooth: hci1: command tx timeout [ 995.941500][ T32] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 996.104062][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 996.106186][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 996.107275][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.107323][ T32] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 996.107351][ T32] usb 3-1: config 1 interface 0 has no altsetting 0 [ 996.109571][ T32] usb 3-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 996.109598][ T32] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 996.109614][ T32] usb 3-1: Product: syz [ 996.109621][ T32] usb 3-1: Manufacturer: syz [ 996.109629][ T32] usb 3-1: SerialNumber: syz [ 996.223394][T12162] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 996.253024][ T7405] bond0: (slave netdevsim1): Releasing backup interface [ 996.314620][ T7405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.377040][T22247] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.377387][T22247] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.377663][T22247] bridge_slave_0: entered allmulticast mode [ 996.380365][T22247] bridge_slave_0: entered promiscuous mode [ 996.385897][T12162] usb 4-1: Using ep0 maxpacket: 32 [ 996.388415][T12162] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 996.388445][T12162] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.388531][T12162] usb 4-1: config 0 interface 0 has no altsetting 0 [ 996.388565][T12162] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 996.388589][T12162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.390329][T22247] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.390711][T22247] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.390971][T22247] bridge_slave_1: entered allmulticast mode [ 996.394003][T22247] bridge_slave_1: entered promiscuous mode [ 996.439422][T22324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.443763][T22324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.547052][T12162] usb 4-1: config 0 descriptor?? [ 996.614682][ T32] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input102 [ 996.674983][T22331] overlayfs: missing 'lowerdir' [ 996.698117][T22247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.701398][ T4957] bcm5974 3-1:1.0: could not read from device [ 996.720871][T22247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.810788][ T32] usb 3-1: USB disconnect, device number 57 [ 996.816068][ T4957] bcm5974 3-1:1.0: could not read from device [ 997.225629][ T7405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.289490][T12162] usbhid 4-1:0.0: can't add hid device: -71 [ 997.289608][T12162] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 997.294688][T22342] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5544'. [ 997.319956][T12162] usb 4-1: USB disconnect, device number 4 [ 997.377781][T22247] team0: Port device team_slave_0 added [ 997.387727][T22247] team0: Port device team_slave_1 added [ 997.641581][T22247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.641599][T22247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.641624][T22247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.665547][T22247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.665564][T22247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.665596][T22247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.782378][T22247] hsr_slave_0: entered promiscuous mode [ 997.784274][T22247] hsr_slave_1: entered promiscuous mode [ 997.785874][T22247] debugfs: 'hsr0' already exists in 'hsr' [ 997.785897][T22247] Cannot create hsr debugfs directory [ 997.969319][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5548'. [ 998.093964][T22353] overlayfs: missing 'lowerdir' [ 998.130622][ T5615] Bluetooth: hci1: command tx timeout [ 998.334559][T22360] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5552'. [ 998.830634][T22373] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 998.830690][T22373] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 998.975592][T22377] FAULT_INJECTION: forcing a failure. [ 998.975592][T22377] name failslab, interval 1, probability 0, space 0, times 0 [ 998.975641][T22377] CPU: 1 UID: 0 PID: 22377 Comm: syz.2.5559 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 998.975667][T22377] Tainted: [L]=SOFTLOCKUP [ 998.975678][T22377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 998.975689][T22377] Call Trace: [ 998.975696][T22377] [ 998.975704][T22377] dump_stack_lvl+0xe8/0x150 [ 998.975732][T22377] should_fail_ex+0x46b/0x600 [ 998.975760][T22377] should_failslab+0xa8/0x100 [ 998.975791][T22377] __kmalloc_noprof+0xfe/0x7e0 [ 998.975810][T22377] ? video_usercopy+0x1b1/0x1450 [ 998.975838][T22377] ? video_usercopy+0x1b1/0x1450 [ 998.975870][T22377] video_usercopy+0x1b1/0x1450 [ 998.975903][T22377] ? __pfx___video_do_ioctl+0x10/0x10 [ 998.975931][T22377] ? __pfx_video_usercopy+0x10/0x10 [ 998.975969][T22377] ? __fget_files+0x2a/0x420 [ 998.975992][T22377] ? __fget_files+0x2a/0x420 [ 998.976011][T22377] ? __fget_files+0x3a6/0x420 [ 998.976033][T22377] v4l2_ioctl+0x190/0x1e0 [ 998.976061][T22377] ? __pfx_v4l2_ioctl+0x10/0x10 [ 998.976087][T22377] __se_sys_ioctl+0xff/0x170 [ 998.976113][T22377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.976133][T22377] do_syscall_64+0x174/0x580 [ 998.976156][T22377] ? trace_irq_disable+0x3b/0x140 [ 998.976180][T22377] ? clear_bhb_loop+0x40/0x90 [ 998.976202][T22377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.976222][T22377] RIP: 0033:0x7fefddc2ce59 [ 998.976240][T22377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.976256][T22377] RSP: 002b:00007fefdbe86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.976277][T22377] RAX: ffffffffffffffda RBX: 00007fefddea5fa0 RCX: 00007fefddc2ce59 [ 998.976290][T22377] RDX: 0000200000000140 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 998.976303][T22377] RBP: 00007fefdbe86090 R08: 0000000000000000 R09: 0000000000000000 [ 998.976316][T22377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.976328][T22377] R13: 00007fefddea6038 R14: 00007fefddea5fa0 R15: 00007ffde7098ec8 [ 998.976357][T22377] [ 998.998199][T12162] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 999.186595][T12162] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 999.186623][T12162] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.186643][T12162] usb 4-1: config 0 has no interface number 0 [ 999.186687][T12162] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 999.186712][T12162] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 999.186735][T12162] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.196270][T22381] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5561'. [ 999.252044][ T7405] bridge_slave_1: left allmulticast mode [ 999.252082][ T7405] bridge_slave_1: left promiscuous mode [ 999.252587][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.269639][T12162] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 999.269668][T12162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.269688][T12162] usb 4-1: Product: syz [ 999.269702][T12162] usb 4-1: Manufacturer: syz [ 999.269717][T12162] usb 4-1: SerialNumber: syz [ 999.283147][T12162] usb 4-1: config 0 descriptor?? [ 999.464171][ T7405] bridge_slave_0: left allmulticast mode [ 999.464207][ T7405] bridge_slave_0: left promiscuous mode [ 999.479038][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.642068][ T7405] pimreg9: left allmulticast mode [ 999.757088][T22369] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5556'. [ 1000.384876][ T5615] Bluetooth: hci1: command tx timeout [ 1000.613130][ T7405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.699600][ T7405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.728985][ T7405] bond0 (unregistering): Released all slaves [ 1000.770115][T22369] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5556'. [ 1000.775749][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1000.791603][ T824] usb 4-1: USB disconnect, device number 5 [ 1001.738956][T22427] FAULT_INJECTION: forcing a failure. [ 1001.738956][T22427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.738992][T22427] CPU: 1 UID: 0 PID: 22427 Comm: syz.3.5568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1001.739018][T22427] Tainted: [L]=SOFTLOCKUP [ 1001.739025][T22427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1001.739037][T22427] Call Trace: [ 1001.739045][T22427] [ 1001.739054][T22427] dump_stack_lvl+0xe8/0x150 [ 1001.739082][T22427] should_fail_ex+0x46b/0x600 [ 1001.739113][T22427] _copy_to_user+0x31/0xb0 [ 1001.739139][T22427] simple_read_from_buffer+0xe1/0x170 [ 1001.739163][T22427] proc_fail_nth_read+0x1be/0x230 [ 1001.739185][T22427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.739207][T22427] ? rw_verify_area+0x2ac/0x4e0 [ 1001.739228][T22427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.739249][T22427] vfs_read+0x212/0xa80 [ 1001.739280][T22427] ? __pfx_vfs_read+0x10/0x10 [ 1001.739306][T22427] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1001.739331][T22427] ? lockdep_hardirqs_on+0x7a/0x110 [ 1001.739354][T22427] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1001.739378][T22427] ? mutex_lock_nested+0x152/0x1d0 [ 1001.739407][T22427] ? fdget_pos+0x252/0x320 [ 1001.739435][T22427] ksys_read+0x156/0x270 [ 1001.739466][T22427] ? __pfx_ksys_read+0x10/0x10 [ 1001.739496][T22427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.739517][T22427] do_syscall_64+0x174/0x580 [ 1001.739540][T22427] ? trace_irq_disable+0x3b/0x140 [ 1001.739565][T22427] ? clear_bhb_loop+0x40/0x90 [ 1001.739589][T22427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.739608][T22427] RIP: 0033:0x7f24c6b7d68e [ 1001.739627][T22427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1001.739644][T22427] RSP: 002b:00007f24c4e0dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1001.739665][T22427] RAX: ffffffffffffffda RBX: 00007f24c4e0e6c0 RCX: 00007f24c6b7d68e [ 1001.739680][T22427] RDX: 000000000000000f RSI: 00007f24c4e0e0a0 RDI: 0000000000000005 [ 1001.739693][T22427] RBP: 00007f24c4e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.739705][T22427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.739718][T22427] R13: 00007f24c6e36038 R14: 00007f24c6e35fa0 R15: 00007ffc0ad448e8 [ 1001.739748][T22427] [ 1001.771868][ T5338] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1001.850614][ T7405] tipc: Disabling bearer [ 1001.916171][ T7405] tipc: Left network mode [ 1001.948368][ T5338] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1001.948399][ T5338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.948419][ T5338] usb 3-1: Product: syz [ 1001.948433][ T5338] usb 3-1: Manufacturer: syz [ 1001.948447][ T5338] usb 3-1: SerialNumber: syz [ 1001.982240][ T5338] usb 3-1: config 0 descriptor?? [ 1002.004491][ T5338] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1002.056543][T22430] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5569'. [ 1002.693464][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1003.916800][ T5338] gspca_sunplus: reg_w_riv err -71 [ 1003.916896][ T5338] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1003.929034][ T5338] usb 3-1: USB disconnect, device number 58 [ 1004.289022][ T9] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1004.486734][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1004.486770][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.486808][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1004.486832][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.521703][ T9] usb 4-1: config 0 descriptor?? [ 1005.101313][ T9] aquacomputer_d5next 0003:0C70:F0B6.0025: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0 [ 1005.412014][ T824] usb 4-1: USB disconnect, device number 6 [ 1005.422425][T22474] fido_id[22474]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0C70:F0B6.0025/report_descriptor': No such device [ 1005.504586][T22476] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5577'. [ 1006.208812][T22478] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5578'. [ 1006.660161][ T824] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1006.825888][ T824] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1006.825921][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.825939][ T824] usb 4-1: Product: syz [ 1006.825947][ T824] usb 4-1: Manufacturer: syz [ 1006.825956][ T824] usb 4-1: SerialNumber: syz [ 1006.829972][ T824] usb 4-1: config 0 descriptor?? [ 1006.875366][ T824] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1008.024821][ T7405] hsr_slave_0: left promiscuous mode [ 1008.068315][ T7405] hsr_slave_1: left promiscuous mode [ 1008.070353][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.070382][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.144282][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.144302][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.388429][ T824] gspca_sunplus: reg_w_riv err -71 [ 1008.388514][ T824] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1008.396669][ T7405] veth1_macvtap: left promiscuous mode [ 1008.396784][ T7405] veth0_macvtap: left promiscuous mode [ 1008.403221][ T7405] veth0_vlan: left promiscuous mode [ 1008.445945][ T824] usb 4-1: USB disconnect, device number 7 [ 1008.636147][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1008.636249][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1009.059150][T22539] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5586'. [ 1009.737931][ T7405] team0 (unregistering): Port device team_slave_1 removed [ 1009.795952][ T7405] team0 (unregistering): Port device team_slave_0 removed [ 1011.159090][ T32] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1011.326763][ T32] usb 3-1: device descriptor read/64, error -71 [ 1011.485530][T22247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1011.571671][ T824] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1011.593200][T22247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1011.594363][T22247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1011.676127][ T32] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1011.714328][T22247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.809773][ T824] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1011.809803][ T824] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.811124][ T824] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1011.811153][ T824] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1011.811173][ T824] usb 4-1: Manufacturer: syz [ 1011.821138][ T824] usb 4-1: config 0 descriptor?? [ 1011.826882][T22247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1011.861231][ T32] usb 3-1: device descriptor read/64, error -71 [ 1011.912901][ T824] igorplugusb 4-1:0.0: incorrect number of endpoints [ 1011.958435][T22247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.970029][T22247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1011.980742][ T32] usb usb3-port1: attempt power cycle [ 1012.030317][T22247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1012.041945][T20163] usb 4-1: USB disconnect, device number 8 [ 1012.348834][ T32] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1012.371342][ T32] usb 3-1: device descriptor read/8, error -71 [ 1012.398879][T22247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.438047][ T7405] IPVS: stop unused estimator thread 0... [ 1012.505567][T22247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.561428][T16676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.561588][T16676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.594690][T16676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.594920][T16676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.641498][ T32] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1012.668013][ T32] usb 3-1: device descriptor read/8, error -71 [ 1012.785540][ T32] usb usb3-port1: unable to enumerate USB device [ 1013.099576][T22637] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5597'. [ 1013.692999][T22247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.701482][T22659] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1013.727054][T22659] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5599'. [ 1014.019353][T22247] veth0_vlan: entered promiscuous mode [ 1014.072817][T22247] veth1_vlan: entered promiscuous mode [ 1014.329088][T22247] veth0_macvtap: entered promiscuous mode [ 1014.360155][T22247] veth1_macvtap: entered promiscuous mode [ 1014.457875][T22247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.501076][T22247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1014.596062][ T2079] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.598891][ T2079] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.601270][ T2079] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.622934][ T2079] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.965966][T22689] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5605'. [ 1015.266636][ T32] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1015.432984][ T32] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1015.433119][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.433140][ T32] usb 4-1: Product: syz [ 1015.433154][ T32] usb 4-1: Manufacturer: syz [ 1015.433171][ T32] usb 4-1: SerialNumber: syz [ 1015.551769][ T32] usb 4-1: config 0 descriptor?? [ 1015.792108][T22704] FAULT_INJECTION: forcing a failure. [ 1015.792108][T22704] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.792146][T22704] CPU: 0 UID: 0 PID: 22704 Comm: syz.6.5607 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1015.792174][T22704] Tainted: [L]=SOFTLOCKUP [ 1015.792181][T22704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.792193][T22704] Call Trace: [ 1015.792201][T22704] [ 1015.792210][T22704] dump_stack_lvl+0xe8/0x150 [ 1015.792250][T22704] should_fail_ex+0x46b/0x600 [ 1015.792288][T22704] should_failslab+0xa8/0x100 [ 1015.792312][T22704] kmem_cache_alloc_node_noprof+0xae/0x710 [ 1015.792343][T22704] ? __alloc_skb+0x1d0/0x7d0 [ 1015.792361][T22704] ? __alloc_skb+0x1d0/0x7d0 [ 1015.792383][T22704] __alloc_skb+0x1d0/0x7d0 [ 1015.792406][T22704] netlink_sendmsg+0x5d4/0xb40 [ 1015.792440][T22704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.792472][T22704] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1015.792499][T22704] ? aa_file_perm+0x51a/0x15f0 [ 1015.792520][T22704] ? aa_sock_msg_perm+0x122/0x200 [ 1015.792540][T22704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1015.792561][T22704] sock_sendmsg_nosec+0x13a/0x180 [ 1015.792596][T22704] sock_write_iter+0x2e4/0x3f0 [ 1015.792625][T22704] ? __pfx_sock_write_iter+0x10/0x10 [ 1015.792668][T22704] do_iter_readv_writev+0x62b/0x8d0 [ 1015.792698][T22704] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1015.792726][T22704] ? rw_verify_area+0x25b/0x4e0 [ 1015.792751][T22704] vfs_writev+0x345/0x9a0 [ 1015.792787][T22704] ? __pfx_vfs_writev+0x10/0x10 [ 1015.792823][T22704] ? __fget_files+0x2a/0x420 [ 1015.792846][T22704] ? __fget_files+0x3a6/0x420 [ 1015.792865][T22704] ? __fget_files+0x2a/0x420 [ 1015.792892][T22704] do_writev+0x15a/0x2e0 [ 1015.792923][T22704] ? __pfx_do_writev+0x10/0x10 [ 1015.792991][T22704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.793013][T22704] do_syscall_64+0x174/0x580 [ 1015.793037][T22704] ? trace_irq_disable+0x3b/0x140 [ 1015.793093][T22704] ? clear_bhb_loop+0x40/0x90 [ 1015.793115][T22704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.793134][T22704] RIP: 0033:0x7f136dffce59 [ 1015.793153][T22704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.793170][T22704] RSP: 002b:00007f136c256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1015.793191][T22704] RAX: ffffffffffffffda RBX: 00007f136e275fa0 RCX: 00007f136dffce59 [ 1015.793206][T22704] RDX: 0000000000000001 RSI: 0000200000019440 RDI: 0000000000000005 [ 1015.793219][T22704] RBP: 00007f136c256090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.793232][T22704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.793244][T22704] R13: 00007f136e276038 R14: 00007f136e275fa0 R15: 00007fff83b9b308 [ 1015.793284][T22704] [ 1016.137457][ T32] usb 4-1: Firmware: major: 71, minor: 81, hardware type: UNKNOWN (45) [ 1016.395608][ T32] usb 4-1: no permanent extended address found, random address set [ 1016.395639][ T32] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1016.396406][ T32] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 1016.443532][T15331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.443552][T15331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.557750][T22715] FAULT_INJECTION: forcing a failure. [ 1016.557750][T22715] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.557804][T22715] CPU: 0 UID: 0 PID: 22715 Comm: syz.2.5609 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1016.557843][T22715] Tainted: [L]=SOFTLOCKUP [ 1016.557850][T22715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.557863][T22715] Call Trace: [ 1016.557871][T22715] [ 1016.557880][T22715] dump_stack_lvl+0xe8/0x150 [ 1016.557909][T22715] should_fail_ex+0x46b/0x600 [ 1016.557941][T22715] should_failslab+0xa8/0x100 [ 1016.557966][T22715] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 1016.557996][T22715] ? mas_start+0x3d8/0x560 [ 1016.558018][T22715] ? mas_dup_build+0x155/0x1210 [ 1016.558040][T22715] ? mas_dup_build+0x155/0x1210 [ 1016.558074][T22715] mas_dup_build+0x155/0x1210 [ 1016.558104][T22715] ? __lock_acquire+0x6b5/0x2d10 [ 1016.558144][T22715] __mt_dup+0x197/0x2c0 [ 1016.558168][T22715] ? __pfx___mt_dup+0x10/0x10 [ 1016.558190][T22715] ? do_raw_spin_lock+0x12b/0x2f0 [ 1016.558218][T22715] ? get_mm_exe_file+0x1c/0x170 [ 1016.558255][T22715] ? get_mm_exe_file+0x1c/0x170 [ 1016.558279][T22715] ? get_mm_exe_file+0x1c/0x170 [ 1016.558311][T22715] dup_mmap+0x41b/0x1d70 [ 1016.558350][T22715] ? rt_spin_lock+0x1e0/0x400 [ 1016.558369][T22715] ? __pfx_dup_mmap+0x10/0x10 [ 1016.558389][T22715] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1016.558420][T22715] ? copy_mm+0x10f/0x480 [ 1016.558447][T22715] ? copy_mm+0x10f/0x480 [ 1016.558488][T22715] copy_mm+0x11a/0x480 [ 1016.558519][T22715] copy_process+0x1e65/0x42e0 [ 1016.558555][T22715] ? copy_process+0xd4e/0x42e0 [ 1016.558602][T22715] ? __pfx_copy_process+0x10/0x10 [ 1016.558631][T22715] ? get_pid_task+0x20/0x1f0 [ 1016.558651][T22715] ? get_pid_task+0x20/0x1f0 [ 1016.558679][T22715] kernel_clone+0x2d7/0x940 [ 1016.558703][T22715] ? __pfx_kernel_clone+0x10/0x10 [ 1016.558720][T22715] ? do_raw_spin_lock+0x12b/0x2f0 [ 1016.558759][T22715] __x64_sys_clone+0x1b6/0x230 [ 1016.558781][T22715] ? __pfx___x64_sys_clone+0x10/0x10 [ 1016.558824][T22715] ? __pfx_ksys_write+0x10/0x10 [ 1016.558857][T22715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.558879][T22715] do_syscall_64+0x174/0x580 [ 1016.558900][T22715] ? trace_irq_disable+0x3b/0x140 [ 1016.558925][T22715] ? clear_bhb_loop+0x40/0x90 [ 1016.558950][T22715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.558969][T22715] RIP: 0033:0x7fefddc2ce59 [ 1016.558988][T22715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.559004][T22715] RSP: 002b:00007fefdbe64fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1016.559023][T22715] RAX: ffffffffffffffda RBX: 00007fefddea6090 RCX: 00007fefddc2ce59 [ 1016.559035][T22715] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000000020000000 [ 1016.559047][T22715] RBP: 00007fefdbe65090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.559058][T22715] R10: 0000200000000280 R11: 0000000000000206 R12: 0000000000000002 [ 1016.559071][T22715] R13: 00007fefddea6128 R14: 00007fefddea6090 R15: 00007ffde7098ec8 [ 1016.559103][T22715] [ 1016.829574][T13669] usb 4-1: USB disconnect, device number 9 [ 1017.123662][ T6902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.123683][ T6902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.511661][T22730] netlink: 356 bytes leftover after parsing attributes in process `syz.6.5613'. [ 1017.652238][T22739] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 1017.786933][T22745] overlayfs: missing 'lowerdir' [ 1018.244447][T13669] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1018.407008][T13669] usb 1-1: Using ep0 maxpacket: 8 [ 1018.410189][T13669] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 75, changing to 10 [ 1018.412670][T13669] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 1018.412699][T13669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.412720][T13669] usb 1-1: Product: а [ 1018.412734][T13669] usb 1-1: Manufacturer: 뱚ꟄӪឃ㮚阛묺讬爒陵̘ࢶ閧ٺ噐닿轷뜠葫 [ 1018.412746][T13669] usb 1-1: SerialNumber: Г [ 1018.570282][T22757] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5621'. [ 1018.659615][T22759] netlink: 356 bytes leftover after parsing attributes in process `syz.3.5622'. [ 1018.728514][T13669] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1018.728570][T13669] usb 1-1: MIDIStreaming interface descriptor not found [ 1018.945932][T13669] usb 1-1: USB disconnect, device number 33 [ 1018.947846][T22765] tipc: Enabling not permitted [ 1018.949153][T22765] tipc: Enabling of bearer rejected, failed to enable media [ 1019.026140][T13575] udevd[13575]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.160178][T22767] overlayfs: missing 'lowerdir' [ 1019.160717][T22769] IPVS: set_ctl: invalid protocol: 58 100.1.1.5:20000 [ 1019.363718][T22777] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5631'. [ 1019.493416][T22785] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5635'. [ 1019.566411][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1019.767309][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1019.767348][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1019.767389][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1019.767412][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.786476][T22773] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1019.807809][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.468938][T22792] overlayfs: missing 'lowerdir' [ 1020.479388][T20163] usb 4-1: USB disconnect, device number 10 [ 1020.718165][T22800] netlink: 356 bytes leftover after parsing attributes in process `syz.0.5641'. [ 1020.846831][ T32] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1021.007750][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 1021.010763][ T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 75, changing to 10 [ 1021.014078][ T32] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 1021.014108][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.014123][ T32] usb 3-1: Product: а [ 1021.014130][ T32] usb 3-1: Manufacturer: 뱚ꟄӪឃ㮚阛묺讬爒陵̘ࢶ閧ٺ噐닿轷뜠葫 [ 1021.014141][ T32] usb 3-1: SerialNumber: Г [ 1021.229419][T22809] IPVS: length: 24 != 1610634264 [ 1021.324539][ T32] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1021.324604][ T32] usb 3-1: MIDIStreaming interface descriptor not found [ 1021.450181][T22811] 9p: Bad value for 'rfdno' [ 1021.505865][ T32] usb 3-1: USB disconnect, device number 63 [ 1021.545119][T22813] overlayfs: missing 'lowerdir' [ 1021.604376][T22816] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[15974] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[22816] [ 1021.841103][ T8488] udevd[8488]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.985189][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1022.016946][T22828] FAULT_INJECTION: forcing a failure. [ 1022.016946][T22828] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.016981][T22828] CPU: 1 UID: 0 PID: 22828 Comm: syz.3.5654 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1022.017009][T22828] Tainted: [L]=SOFTLOCKUP [ 1022.017017][T22828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1022.017029][T22828] Call Trace: [ 1022.017037][T22828] [ 1022.017046][T22828] dump_stack_lvl+0xe8/0x150 [ 1022.017078][T22828] should_fail_ex+0x46b/0x600 [ 1022.017110][T22828] should_failslab+0xa8/0x100 [ 1022.017134][T22828] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 1022.017165][T22828] ? __anon_vma_prepare+0xcb/0x4a0 [ 1022.017183][T22828] ? __anon_vma_prepare+0xcb/0x4a0 [ 1022.017206][T22828] __anon_vma_prepare+0xcb/0x4a0 [ 1022.017223][T22828] ? __pte_alloc+0x15e/0x1a0 [ 1022.017249][T22828] do_pte_missing+0x1d63/0x2940 [ 1022.017287][T22828] handle_mm_fault+0xdc2/0x14d0 [ 1022.017310][T22828] ? handle_mm_fault+0xed/0x14d0 [ 1022.017333][T22828] ? __pfx_handle_mm_fault+0x10/0x10 [ 1022.017350][T22828] ? __lock_acquire+0x6b5/0x2d10 [ 1022.017398][T22828] __get_user_pages+0x16d4/0x2620 [ 1022.017457][T22828] get_user_pages_remote+0x2f6/0xab0 [ 1022.017501][T22828] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1022.017529][T22828] ? create_init_stack_vma+0x7c8/0x9b0 [ 1022.017560][T22828] ? mmap_read_lock_maybe_expand+0xc6/0x3a0 [ 1022.017586][T22828] copy_string_kernel+0x2f9/0x5f0 [ 1022.017620][T22828] ? __pfx_copy_string_kernel+0x10/0x10 [ 1022.017640][T22828] ? rt_spin_unlock+0x160/0x200 [ 1022.017662][T22828] ? alloc_bprm+0x5ab/0x660 [ 1022.017688][T22828] do_execveat_common+0x38b/0x690 [ 1022.017720][T22828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.017741][T22828] __x64_sys_execve+0x97/0xc0 [ 1022.017767][T22828] do_syscall_64+0x174/0x580 [ 1022.017791][T22828] ? trace_irq_disable+0x3b/0x140 [ 1022.017814][T22828] ? clear_bhb_loop+0x40/0x90 [ 1022.017839][T22828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.017858][T22828] RIP: 0033:0x7f24c6bbce59 [ 1022.017877][T22828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.017894][T22828] RSP: 002b:00007f24c4e0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1022.017915][T22828] RAX: ffffffffffffffda RBX: 00007f24c6e35fa0 RCX: 00007f24c6bbce59 [ 1022.017930][T22828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 1022.017943][T22828] RBP: 00007f24c4e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.017954][T22828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1022.017966][T22828] R13: 00007f24c6e36038 R14: 00007f24c6e35fa0 R15: 00007ffc0ad448e8 [ 1022.017996][T22828] [ 1022.154935][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.154971][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.154993][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1022.155033][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1022.155056][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.183465][ T9] usb 1-1: config 0 descriptor?? [ 1022.652102][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1023.012192][T22844] overlayfs: missing 'lowerdir' [ 1023.255798][T22857] 9p: Bad value for 'wfdno' [ 1023.321860][ T824] usb 1-1: USB disconnect, device number 34 [ 1024.105995][T22867] 9p: Bad value for 'wfdno' [ 1024.135175][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5668'. [ 1024.135199][T22867] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5668'. [ 1024.135328][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5668'. [ 1024.252713][T22869] overlayfs: missing 'lowerdir' [ 1024.478969][T22877] blktrace: Concurrent blktraces are not allowed on sg0 [ 1025.006674][ T824] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1025.173917][ T824] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1025.173948][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.173969][ T824] usb 4-1: Product: syz [ 1025.173980][ T824] usb 4-1: Manufacturer: syz [ 1025.173988][ T824] usb 4-1: SerialNumber: syz [ 1025.177862][ T824] usb 4-1: config 0 descriptor?? [ 1025.456236][T22894] overlayfs: missing 'workdir' [ 1025.625405][ T824] usb 4-1: Firmware: major: 71, minor: 81, hardware type: UNKNOWN (45) [ 1025.693786][T22904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5686'. [ 1025.694754][T22904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5686'. [ 1025.796392][T22906] tipc: Enabling of bearer rejected, failed to enable media [ 1025.859896][ T824] usb 4-1: no permanent extended address found, random address set [ 1025.859929][ T824] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1025.860160][ T824] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 1026.085788][T12162] usb 4-1: USB disconnect, device number 11 [ 1026.299709][T22918] overlayfs: missing 'workdir' [ 1026.640639][T22926] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1026.640668][T22926] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1026.824639][T22930] netlink: 'syz.3.5697': attribute type 4 has an invalid length. [ 1026.824654][T22930] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1026.924792][ T824] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1027.067316][ T824] usb 1-1: device descriptor read/64, error -71 [ 1027.348253][ T824] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1027.510003][ T824] usb 1-1: device descriptor read/64, error -71 [ 1027.633450][ T824] usb usb1-port1: attempt power cycle [ 1028.073635][ T824] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1028.099172][ T824] usb 1-1: device descriptor read/8, error -71 [ 1028.359672][ T824] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1028.377678][ T824] usb 1-1: device descriptor read/8, error -71 [ 1028.400510][ T4921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1028.453050][ T4921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1028.457607][ T4921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1028.482960][ T4921] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1028.496657][ T824] usb usb1-port1: unable to enumerate USB device [ 1028.506238][ T4921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1028.965316][T22955] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1028.980262][T22955] netlink: 'syz.2.5704': attribute type 4 has an invalid length. [ 1028.980285][T22955] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1029.449812][T20163] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1029.648911][T20163] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1029.648947][T20163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.648967][T20163] usb 3-1: Product: syz [ 1029.648977][T20163] usb 3-1: Manufacturer: syz [ 1029.648984][T20163] usb 3-1: SerialNumber: syz [ 1029.699227][T20163] usb 3-1: config 0 descriptor?? [ 1030.108586][ T7405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.213953][T20163] usb 3-1: Firmware: major: 71, minor: 81, hardware type: UNKNOWN (45) [ 1030.446555][T20163] usb 3-1: no permanent extended address found, random address set [ 1030.446587][T20163] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1030.447462][T20163] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1030.681889][ T5779] usb 3-1: USB disconnect, device number 64 [ 1030.731147][ T5615] Bluetooth: hci3: command tx timeout [ 1031.191204][ T7405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.299083][T22942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.316860][T22942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.317176][T22942] bridge_slave_0: entered allmulticast mode [ 1031.323682][T22942] bridge_slave_0: entered promiscuous mode [ 1031.346336][ T5779] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1031.391340][T22942] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.396889][T22942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.397195][T22942] bridge_slave_1: entered allmulticast mode [ 1031.411459][T22942] bridge_slave_1: entered promiscuous mode [ 1031.501678][T22993] fuse: Unknown parameter 'g\f##>' [ 1031.512643][ T5779] usb 1-1: Using ep0 maxpacket: 32 [ 1031.515767][ T5779] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1031.518262][ T5779] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1031.518289][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1031.518309][ T5779] usb 1-1: Product: syz [ 1031.518323][ T5779] usb 1-1: Manufacturer: syz [ 1031.518337][ T5779] usb 1-1: SerialNumber: syz [ 1031.544792][ T5779] usb 1-1: config 0 descriptor?? [ 1031.547823][T22985] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1031.780382][T13669] usb 1-1: USB disconnect, device number 39 [ 1031.935444][ T7405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.056012][T22942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.089347][T22942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.282826][T22998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1032.567588][ T7405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.709451][T22942] team0: Port device team_slave_0 added [ 1032.731912][T22942] team0: Port device team_slave_1 added [ 1032.821775][T22942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.821790][T22942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.821810][T22942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1032.824530][T22942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.824544][T22942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.824564][T22942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.993610][ T5615] Bluetooth: hci3: command tx timeout [ 1033.366443][T23019] netdevsim netdevsim6: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1033.484316][T22942] hsr_slave_0: entered promiscuous mode [ 1033.491611][T22942] hsr_slave_1: entered promiscuous mode [ 1033.498697][T22942] debugfs: 'hsr0' already exists in 'hsr' [ 1033.498723][T22942] Cannot create hsr debugfs directory [ 1034.105267][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1034.275567][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1034.280779][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1034.280809][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.280832][ T9] usb 1-1: Product: syz [ 1034.280848][ T9] usb 1-1: Manufacturer: syz [ 1034.280864][ T9] usb 1-1: SerialNumber: syz [ 1034.331518][ T9] usb 1-1: config 0 descriptor?? [ 1034.559549][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1035.183807][ T7405] dummy0: left allmulticast mode [ 1035.219318][ T7405] dummy0: left promiscuous mode [ 1035.221618][ T7405] bridge0: port 3(dummy0) entered disabled state [ 1035.247701][ T5615] Bluetooth: hci3: command tx timeout [ 1035.357317][ T7405] bridge_slave_1: left allmulticast mode [ 1035.357353][ T7405] bridge_slave_1: left promiscuous mode [ 1035.365563][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.474912][ T7405] bridge_slave_0: left allmulticast mode [ 1035.474969][ T7405] bridge_slave_0: left promiscuous mode [ 1035.475420][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.610287][ T7405] pimreg9: left allmulticast mode [ 1035.658791][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1036.560218][ T7405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.646402][ T7405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.673798][ T7405] bond0 (unregistering): Released all slaves [ 1037.080618][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1037.491032][ T5615] Bluetooth: hci3: command tx timeout [ 1037.805341][ T7405] tipc: Disabling bearer [ 1037.819186][ T9] usb 1-1: USB disconnect, device number 40 [ 1037.881690][ T7405] tipc: Left network mode [ 1038.569854][T23077] lo speed is unknown, defaulting to 1000 [ 1039.523805][T23077] lo speed is unknown, defaulting to 1000 [ 1039.611997][T23077] lo speed is unknown, defaulting to 1000 [ 1039.929423][T20163] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1040.139980][T20163] usb 3-1: device descriptor read/64, error -71 [ 1040.517343][T20163] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1040.666397][T20163] usb 3-1: device descriptor read/64, error -71 [ 1040.786013][T20163] usb usb3-port1: attempt power cycle [ 1041.063231][T23077] infiniband syz2: set active [ 1041.063504][T23077] infiniband syz2: added lo [ 1041.251391][T20163] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1041.271477][T20163] usb 3-1: device descriptor read/8, error -71 [ 1041.351320][T23077] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1041.351357][T23077] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1041.351391][T23077] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1041.400834][ T824] lo speed is unknown, defaulting to 1000 [ 1041.535473][T20163] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1041.568241][T20163] usb 3-1: device descriptor read/8, error -71 [ 1041.697038][T20163] usb usb3-port1: unable to enumerate USB device [ 1041.791354][T23077] RDS/IB: syz2: added [ 1041.817595][T23077] smc: adding ib device syz2 with port count 1 [ 1041.949472][T23077] smc: ib device syz2 port 1 has no pnetid [ 1042.242754][ T32] lo speed is unknown, defaulting to 1000 [ 1042.276715][T23077] lo speed is unknown, defaulting to 1000 [ 1043.445307][T23141] syzkaller1: entered promiscuous mode [ 1043.445337][T23141] syzkaller1: entered allmulticast mode [ 1043.770826][T23077] lo speed is unknown, defaulting to 1000 [ 1044.279496][T22942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1044.372577][T20163] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1044.384781][T22942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1044.387422][T22942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1044.423947][T23181] FAULT_INJECTION: forcing a failure. [ 1044.423947][T23181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.423983][T23181] CPU: 0 UID: 0 PID: 23181 Comm: syz.6.5747 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1044.424010][T23181] Tainted: [L]=SOFTLOCKUP [ 1044.424017][T23181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1044.424028][T23181] Call Trace: [ 1044.424036][T23181] [ 1044.424044][T23181] dump_stack_lvl+0xe8/0x150 [ 1044.424072][T23181] should_fail_ex+0x46b/0x600 [ 1044.424101][T23181] _copy_from_iter+0x1d3/0x1670 [ 1044.424130][T23181] ? rcu_is_watching+0x15/0xb0 [ 1044.424161][T23181] ? __pfx__copy_from_iter+0x10/0x10 [ 1044.424185][T23181] ? __alloc_skb+0x27d/0x7d0 [ 1044.424202][T23181] ? __alloc_skb+0x27d/0x7d0 [ 1044.424224][T23181] ? netlink_sendmsg+0x650/0xb40 [ 1044.424245][T23181] ? skb_put+0x11b/0x210 [ 1044.424267][T23181] netlink_sendmsg+0x6c0/0xb40 [ 1044.424297][T23181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.424323][T23181] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1044.424350][T23181] ? aa_sock_msg_perm+0x122/0x200 [ 1044.424370][T23181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1044.424392][T23181] sock_sendmsg_nosec+0x13a/0x180 [ 1044.424423][T23181] ____sys_sendmsg+0x55c/0x870 [ 1044.424460][T23181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1044.424491][T23181] ? import_iovec+0x73/0xa0 [ 1044.424512][T23181] ___sys_sendmsg+0x2a5/0x360 [ 1044.424534][T23181] ? __lock_acquire+0x6b5/0x2d10 [ 1044.424563][T23181] ? __pfx____sys_sendmsg+0x10/0x10 [ 1044.424617][T23181] ? __fget_files+0x2a/0x420 [ 1044.424637][T23181] ? __fget_files+0x3a6/0x420 [ 1044.424665][T23181] __x64_sys_sendmsg+0x1b7/0x290 [ 1044.424689][T23181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1044.424729][T23181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.424749][T23181] do_syscall_64+0x174/0x580 [ 1044.424772][T23181] ? trace_irq_disable+0x3b/0x140 [ 1044.424795][T23181] ? clear_bhb_loop+0x40/0x90 [ 1044.424817][T23181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.424837][T23181] RIP: 0033:0x7f136dffce59 [ 1044.424855][T23181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.424871][T23181] RSP: 002b:00007f136c256028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1044.424891][T23181] RAX: ffffffffffffffda RBX: 00007f136e275fa0 RCX: 00007f136dffce59 [ 1044.424904][T23181] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1044.424917][T23181] RBP: 00007f136c256090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.424929][T23181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.424940][T23181] R13: 00007f136e276038 R14: 00007f136e275fa0 R15: 00007fff83b9b308 [ 1044.424967][T23181] [ 1044.509763][T22942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.510978][T22942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1044.672696][T20163] usb 3-1: Using ep0 maxpacket: 32 [ 1044.737062][T20163] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1044.737078][T20163] usb 3-1: config 0 has no interface number 0 [ 1044.737107][T20163] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1044.737122][T20163] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.737134][T20163] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.737148][T20163] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1044.739639][T20163] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1044.739667][T20163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.739678][T20163] usb 3-1: Product: syz [ 1044.739686][T20163] usb 3-1: Manufacturer: syz [ 1044.739694][T20163] usb 3-1: SerialNumber: syz [ 1044.788314][T22942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.789933][T23077] lo speed is unknown, defaulting to 1000 [ 1044.794102][T22942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1044.847383][T20163] usb 3-1: config 0 descriptor?? [ 1044.857116][T23174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1044.898068][T22942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.306755][T20163] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1045.308977][T20163] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 1045.344683][T22942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.413558][T20163] usb 3-1: USB disconnect, device number 69 [ 1045.451309][T22942] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.474202][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.474311][ T6910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.614442][T23077] lo speed is unknown, defaulting to 1000 [ 1045.617673][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.617858][ T6910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.946246][T23077] lo speed is unknown, defaulting to 1000 [ 1046.732886][T22942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.933320][T22942] veth0_vlan: entered promiscuous mode [ 1047.103859][ T7405] hsr_slave_0: left promiscuous mode [ 1047.104620][ T32] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1047.146841][ T7405] hsr_slave_1: left promiscuous mode [ 1047.147652][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.147676][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.207275][ T7405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.207303][ T7405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.212337][T23209] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1047.268618][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1047.269171][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 1047.270250][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.270272][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.273854][ T32] usb 1-1: string descriptor 0 read error: -22 [ 1047.273969][ T32] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1047.273984][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.299129][ T7405] veth1_macvtap: left promiscuous mode [ 1047.299235][ T7405] veth0_macvtap: left promiscuous mode [ 1047.299519][ T7405] veth1_vlan: left promiscuous mode [ 1047.299743][ T7405] veth0_vlan: left promiscuous mode [ 1047.367137][ T32] usb 1-1: 0:2 : does not exist [ 1048.281594][T23214] binder: 23213:23214 ioctl c00c620f 200000000000 returned -22 [ 1048.409351][ T32] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1048.426717][ T32] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1048.433698][ T32] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1048.465531][ T7405] team0 (unregistering): Port device team_slave_1 removed [ 1048.520162][ T32] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1048.560388][ T32] usb 1-1: USB disconnect, device number 41 [ 1048.575114][ T7405] team0 (unregistering): Port device team_slave_0 removed [ 1048.847111][T22942] veth1_vlan: entered promiscuous mode [ 1048.993167][T22942] veth0_macvtap: entered promiscuous mode [ 1049.014537][T22942] veth1_macvtap: entered promiscuous mode [ 1049.174885][T22942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.263776][T22942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.367722][T14294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.372871][T14294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.376074][T14294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.376276][T14294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.433421][ T824] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1049.681036][ T824] usb 3-1: Using ep0 maxpacket: 32 [ 1049.689388][ T824] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1049.689414][ T824] usb 3-1: config 0 has no interface number 0 [ 1049.689457][ T824] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1049.689480][ T824] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1049.698673][ T824] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1049.698702][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.698723][ T824] usb 3-1: Product: syz [ 1049.698737][ T824] usb 3-1: Manufacturer: syz [ 1049.698752][ T824] usb 3-1: SerialNumber: syz [ 1049.740866][ T824] usb 3-1: config 0 descriptor?? [ 1051.397023][T15083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.397042][T15083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.590648][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1051.831971][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.832000][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1051.838908][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1051.838939][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.838959][ T9] usb 1-1: Product: syz [ 1051.838973][ T9] usb 1-1: Manufacturer: syz [ 1051.838987][ T9] usb 1-1: SerialNumber: syz [ 1051.899692][ T9] usb 1-1: config 0 descriptor?? [ 1052.081309][T16676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.081331][T16676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.381733][T23237] netlink: 356 bytes leftover after parsing attributes in process `syz.6.5762'. [ 1052.451854][T23239] overlayfs: missing 'workdir' [ 1052.453018][ T824] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1052.453078][ T824] cx231xx 3-1:0.1: Not found matching IAD interface [ 1052.456680][ T7405] IPVS: stop unused estimator thread 0... [ 1052.475270][ T824] usb 3-1: USB disconnect, device number 70 [ 1052.651484][ T9] IPVS: starting estimator thread 0... [ 1052.750149][T23246] IPVS: using max 12 ests per chain, 28800 per kthread [ 1052.777324][ T4921] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1052.812943][ T4921] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1052.869623][ T4921] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1052.875933][ T4921] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1052.876604][ T4921] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1053.201505][T23254] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5767'. [ 1053.201614][T23254] 0: renamed from hsr0 (while UP) [ 1053.263267][T23254] 0: entered allmulticast mode [ 1053.263293][T23254] hsr_slave_0: entered allmulticast mode [ 1053.263319][T23254] hsr_slave_1: entered allmulticast mode [ 1053.280602][T23254] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1053.737065][ T5616] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1053.953325][ T5616] usb 4-1: Using ep0 maxpacket: 8 [ 1053.973340][ T5616] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1053.983757][ T5616] usb 4-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.983776][ T5616] usb 4-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 1054.005109][ T5616] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1054.005136][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.005156][ T5616] usb 4-1: Product: syz [ 1054.005170][ T5616] usb 4-1: Manufacturer: syz [ 1054.005184][ T5616] usb 4-1: SerialNumber: syz [ 1054.827985][ T6910] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.891755][T23247] lo speed is unknown, defaulting to 1000 [ 1055.109478][ T32] usb 1-1: USB disconnect, device number 42 [ 1055.196277][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1055.196312][T23269] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1055.196323][T23269] netlink: 'syz.0.5769': attribute type 3 has an invalid length. [ 1055.196330][T23269] netlink: 'syz.0.5769': attribute type 2 has an invalid length. [ 1055.196337][T23269] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5769'. [ 1055.267713][ T5615] Bluetooth: hci4: command tx timeout [ 1055.277648][ T5616] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 1055.392707][ T5616] usb 4-1: device reset changed ep0 maxpacket size! [ 1055.489723][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1055.545582][T23272] program syz.0.5770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.658906][T23274] netlink: 356 bytes leftover after parsing attributes in process `syz.0.5771'. [ 1055.698979][ T5616] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1055.704138][ T824] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1055.704156][ T824] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1055.721011][ T5616] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1055.747153][ T5616] usb 4-1: USB disconnect, device number 12 [ 1055.877065][ T824] ------------[ cut here ]------------ [ 1055.877078][ T824] !atomic_read(&kn->count) [ 1055.877090][ T824] WARNING: fs/kernfs/dir.c:560 at __kernfs_new_node+0x8b8/0xa70, CPU#1: kworker/1:2/824 [ 1055.877124][ T824] Modules linked in: [ 1055.877142][ T824] CPU: 1 UID: 0 PID: 824 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1055.877164][ T824] Tainted: [L]=SOFTLOCKUP [ 1055.877169][ T824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1055.877180][ T824] Workqueue: events request_firmware_work_func [ 1055.877199][ T824] RIP: 0010:__kernfs_new_node+0x8b8/0xa70 [ 1055.877216][ T824] Code: 08 e9 44 fb ff ff e8 77 2d 59 ff e8 e2 c6 27 ff e9 8f fa ff ff e8 68 2d 59 ff e8 a3 e0 c6 fe e9 26 fb ff ff e8 59 2d 59 ff 90 <0f> 0b 90 e9 d1 fc ff ff e8 db 55 d1 08 89 f9 80 e1 07 80 c1 03 38 [ 1055.877229][ T824] RSP: 0018:ffffc90005147440 EFLAGS: 00010293 [ 1055.877242][ T824] RAX: ffffffff826c9e47 RBX: 0000000000000000 RCX: ffff888026b5be00 [ 1055.877254][ T824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1055.877263][ T824] RBP: ffffc90005147598 R08: 0000000000000000 R09: 0000000000000000 [ 1055.877273][ T824] R10: dffffc0000000000 R11: ffffed100d7b392d R12: ffff88806bd9c960 [ 1055.877285][ T824] R13: 1ffff92000a28e94 R14: dffffc0000000000 R15: ffff888034d12690 [ 1055.877297][ T824] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 1055.877310][ T824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1055.877321][ T824] CR2: 00007f2ed94aff24 CR3: 000000002235e000 CR4: 00000000003526f0 [ 1055.877336][ T824] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 1055.877347][ T824] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1055.877359][ T824] Call Trace: [ 1055.877367][ T824] [ 1055.877384][ T824] ? __pfx___kernfs_new_node+0x10/0x10 [ 1055.877406][ T824] ? kernfs_root+0x1c/0x230 [ 1055.877427][ T824] ? kernfs_root+0x1c/0x230 [ 1055.877442][ T824] ? kernfs_root+0x1c/0x230 [ 1055.877458][ T824] ? kernfs_root+0x1c/0x230 [ 1055.877478][ T824] kernfs_create_dir_ns+0xfe/0x230 [ 1055.877503][ T824] sysfs_create_dir_ns+0x12f/0x2a0 [ 1055.877530][ T824] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1055.877551][ T824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1055.877580][ T824] ? rt_spin_unlock+0x160/0x200 [ 1055.877608][ T824] kobject_add_internal+0x631/0xd10 [ 1055.877642][ T824] kobject_add+0x163/0x240 [ 1055.877667][ T824] ? rcu_is_watching+0x15/0xb0 [ 1055.877696][ T824] ? __pfx_kobject_add+0x10/0x10 [ 1055.877728][ T824] ? kobject_init+0x83/0x1e0 [ 1055.877756][ T824] get_device_parent+0x31d/0x3a0 [ 1055.877784][ T824] device_add+0x2e1/0xb90 [ 1055.877810][ T824] firmware_fallback_sysfs+0x2e4/0xa30 [ 1055.877842][ T824] ? kfree+0x1c5/0x6c0 [ 1055.877871][ T824] _request_firmware+0x1052/0x1780 [ 1055.877899][ T824] ? __pfx__request_firmware+0x10/0x10 [ 1055.877918][ T824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1055.877939][ T824] ? process_one_work+0x8be/0x1630 [ 1055.877965][ T824] ? process_one_work+0x8be/0x1630 [ 1055.877991][ T824] request_firmware_work_func+0xba/0x2e0 [ 1055.878018][ T824] ? process_one_work+0x8be/0x1630 [ 1055.878054][ T824] process_one_work+0x98b/0x1630 [ 1055.878096][ T824] ? __pfx_process_one_work+0x10/0x10 [ 1055.878115][ T824] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.878148][ T824] worker_thread+0xb49/0x1140 [ 1055.878181][ T824] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1055.878213][ T824] kthread+0x388/0x470 [ 1055.878233][ T824] ? __pfx_worker_thread+0x10/0x10 [ 1055.878257][ T824] ? __pfx_kthread+0x10/0x10 [ 1055.878303][ T824] ret_from_fork+0x514/0xb70 [ 1055.878326][ T824] ? __pfx_ret_from_fork+0x10/0x10 [ 1055.878345][ T824] ? __switch_to+0xc79/0x1410 [ 1055.878365][ T824] ? __pfx_kthread+0x10/0x10 [ 1055.878406][ T824] ret_from_fork_asm+0x1a/0x30 [ 1055.878445][ T824] [ 1055.878464][ T824] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1055.878481][ T824] CPU: 1 UID: 0 PID: 824 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1055.878506][ T824] Tainted: [L]=SOFTLOCKUP [ 1055.878511][ T824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1055.878521][ T824] Workqueue: events request_firmware_work_func [ 1055.878540][ T824] Call Trace: [ 1055.878546][ T824] [ 1055.878552][ T824] vpanic+0x56c/0xa60 [ 1055.878573][ T824] ? __pfx__printk+0x10/0x10 [ 1055.878588][ T824] ? __pfx_vpanic+0x10/0x10 [ 1055.878605][ T824] ? is_bpf_text_address+0x292/0x2b0 [ 1055.878625][ T824] ? is_bpf_text_address+0x26/0x2b0 [ 1055.878650][ T824] panic+0xc5/0xd0 [ 1055.878669][ T824] ? __pfx_panic+0x10/0x10 [ 1055.878695][ T824] ? ret_from_fork_asm+0x1a/0x30 [ 1055.878718][ T824] __warn+0x315/0x4c0 [ 1055.878736][ T824] ? __kernfs_new_node+0x8b8/0xa70 [ 1055.878753][ T824] ? __kernfs_new_node+0x8b8/0xa70 [ 1055.878769][ T824] __report_bug+0x339/0x540 [ 1055.878787][ T824] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1055.878805][ T824] ? __kernfs_new_node+0x8b8/0xa70 [ 1055.878821][ T824] ? __pfx___report_bug+0x10/0x10 [ 1055.878840][ T824] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.878866][ T824] ? __kernfs_new_node+0x8b8/0xa70 [ 1055.878882][ T824] report_bug+0x16a/0x220 [ 1055.878901][ T824] ? __kernfs_new_node+0x8b8/0xa70 [ 1055.878924][ T824] ? __kernfs_new_node+0x8ba/0xa70 [ 1055.878939][ T824] handle_bug+0x9c/0x200 [ 1055.878961][ T824] exc_invalid_op+0x1a/0x50 [ 1055.878982][ T824] asm_exc_invalid_op+0x1a/0x20 [ 1055.878998][ T824] RIP: 0010:__kernfs_new_node+0x8b8/0xa70 [ 1055.879016][ T824] Code: 08 e9 44 fb ff ff e8 77 2d 59 ff e8 e2 c6 27 ff e9 8f fa ff ff e8 68 2d 59 ff e8 a3 e0 c6 fe e9 26 fb ff ff e8 59 2d 59 ff 90 <0f> 0b 90 e9 d1 fc ff ff e8 db 55 d1 08 89 f9 80 e1 07 80 c1 03 38 [ 1055.879037][ T824] RSP: 0018:ffffc90005147440 EFLAGS: 00010293 [ 1055.879051][ T824] RAX: ffffffff826c9e47 RBX: 0000000000000000 RCX: ffff888026b5be00 [ 1055.879062][ T824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1055.879071][ T824] RBP: ffffc90005147598 R08: 0000000000000000 R09: 0000000000000000 [ 1055.879082][ T824] R10: dffffc0000000000 R11: ffffed100d7b392d R12: ffff88806bd9c960 [ 1055.879095][ T824] R13: 1ffff92000a28e94 R14: dffffc0000000000 R15: ffff888034d12690 [ 1055.879115][ T824] ? __kernfs_new_node+0x8b7/0xa70 [ 1055.879149][ T824] ? __pfx___kernfs_new_node+0x10/0x10 [ 1055.879168][ T824] ? kernfs_root+0x1c/0x230 [ 1055.879187][ T824] ? kernfs_root+0x1c/0x230 [ 1055.879201][ T824] ? kernfs_root+0x1c/0x230 [ 1055.879214][ T824] ? kernfs_root+0x1c/0x230 [ 1055.879232][ T824] kernfs_create_dir_ns+0xfe/0x230 [ 1055.879253][ T824] sysfs_create_dir_ns+0x12f/0x2a0 [ 1055.879277][ T824] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1055.879293][ T824] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1055.879318][ T824] ? rt_spin_unlock+0x160/0x200 [ 1055.879335][ T824] kobject_add_internal+0x631/0xd10 [ 1055.879365][ T824] kobject_add+0x163/0x240 [ 1055.879386][ T824] ? rcu_is_watching+0x15/0xb0 [ 1055.879412][ T824] ? __pfx_kobject_add+0x10/0x10 [ 1055.879440][ T824] ? kobject_init+0x83/0x1e0 [ 1055.879464][ T824] get_device_parent+0x31d/0x3a0 [ 1055.879488][ T824] device_add+0x2e1/0xb90 [ 1055.879511][ T824] firmware_fallback_sysfs+0x2e4/0xa30 [ 1055.879531][ T824] ? kfree+0x1c5/0x6c0 [ 1055.879564][ T824] _request_firmware+0x1052/0x1780 [ 1055.879596][ T824] ? __pfx__request_firmware+0x10/0x10 [ 1055.879611][ T824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1055.879628][ T824] ? process_one_work+0x8be/0x1630 [ 1055.879649][ T824] ? process_one_work+0x8be/0x1630 [ 1055.879670][ T824] request_firmware_work_func+0xba/0x2e0 [ 1055.879690][ T824] ? process_one_work+0x8be/0x1630 [ 1055.879709][ T824] process_one_work+0x98b/0x1630 [ 1055.879744][ T824] ? __pfx_process_one_work+0x10/0x10 [ 1055.879763][ T824] ? do_raw_spin_lock+0x12b/0x2f0 [ 1055.879790][ T824] worker_thread+0xb49/0x1140 [ 1055.879817][ T824] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1055.879845][ T824] kthread+0x388/0x470 [ 1055.879862][ T824] ? __pfx_worker_thread+0x10/0x10 [ 1055.879882][ T824] ? __pfx_kthread+0x10/0x10 [ 1055.879899][ T824] ret_from_fork+0x514/0xb70 [ 1055.879918][ T824] ? __pfx_ret_from_fork+0x10/0x10 [ 1055.879936][ T824] ? __switch_to+0xc79/0x1410 [ 1055.879953][ T824] ? __pfx_kthread+0x10/0x10 [ 1055.879971][ T824] ret_from_fork_asm+0x1a/0x30 [ 1055.880004][ T824] [ 1055.882274][ T824] Kernel Offset: disabled