last executing test programs: 17m3.087892623s ago: executing program 32 (id=415): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x34) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 12m55.304126336s ago: executing program 33 (id=1981): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESOCT=r0], 0x28) mmap(&(0x7f00009e3000/0x1000)=nil, 0x1000, 0x100000e, 0x40010, r0, 0x1f264000) 12m51.489644667s ago: executing program 0 (id=1997): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x1a, 0x65bb, 0x5, 0xa, 0x9}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="0f1ee0d9f9bad104ed660f3882b00b0066b98a03000066b8f1ff000066ba000000000f3066b9800000c00f326635000800000f30f40f300f060f01c4", 0x3c}], 0x1, 0x12, &(0x7f0000000100)=[@dstype0={0x6, 0x2}, @efer], 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x408000, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x5, 0x0, [{0x2, 0x8, 0x4, 0x9, 0x2, 0x4, 0x8000}, {0x1, 0xaf62, 0x7, 0x6, 0x3ff, 0x8}, {0xd, 0x7, 0x2, 0x0, 0x3, 0x248, 0xe3}, {0x80000000, 0x5, 0x0, 0xfffff1f8, 0x94e8, 0x4, 0x401}, {0x0, 0x4, 0x4, 0xe494, 0x8, 0x1}]}) r3 = dup(r0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0xd, 0x3, 0x7, 0x9, 0x1, 0x0, 0x96ce}, {0xa, 0xff, 0x0, 0x5, 0x2, 0x8, 0x3}, {0x40000001, 0x200, 0x0, 0xffffffff, 0x4, 0xfffffc01, 0x7ff}]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x4, 0x0, [{0xa, 0x85, 0x600000, 0x3ff}, {0x1, 0xfffffffe, 0x10, 0xfffffffc, 0x1000}, {0x80000008, 0xe5, 0x6, 0x5642, 0x6}, {0x1, 0x2, 0x8, 0x2, 0x8}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x7, 0x0, [{0x8fa, 0x0, 0x800}, {0x1f990c797284e35e, 0x0, 0xffffffffffffffff}, {0x32f, 0x0, 0x8000000000000000}, {0x9dd, 0x0, 0xe}, {0xbae, 0x0, 0x6}, {0x257, 0x0, 0x2}, {0x20b, 0x0, 0xffffffffffffffff}]}) r4 = dup(r1) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0x2, @pix_mp={0xe, 0x8, 0x3631564e, 0x2, 0x9, [{0x3, 0x800}, {0x7fff, 0xffffa122}, {0xfffffffd, 0x1800000}, {0x9, 0xf2}, {0x1, 0xf}, {0xd, 0x8}, {0x3, 0x10}, {0x8, 0x2}], 0x0, 0xfc, 0x7, 0x1, 0x5}}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000500)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x10001, 0x4, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x5}, &(0x7f00000005c0)=0x8) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000600)=0x7) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0xf, 0x5}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x10001}, @uexit={0x0, 0x18, 0x4}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @wrmsr={0x1e, 0x20, {0x40000084, 0x5}}, @wrmsr={0x1e, 0x20, {0x205, 0x6}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x14, 0x18, {0x7, 0xb5b}}, @code={0xa, 0x5f, {"c7442400c1c10000c744240200600000c7442406000000000f011424260f07c74424001c010000c744240200380000ff1c24650f1f00410f0139f242e0000f01cff340902ef3450f098fe9389006"}}, @cpuid={0x14, 0x18, {0x4, 0x10}}, @rdmsr={0x32, 0x18, {0x8f2}}, @rdmsr={0x32, 0x18, {0x648}}, @rdmsr={0x32, 0x18, {0x2a3}}, @rdmsr={0x32, 0x18, {0x33}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @rdmsr={0x32, 0x18, {0x3ac}}, @wrmsr={0x1e, 0x20, {0x833}}, @cpuid={0x14, 0x18, {0x401, 0x5}}, @wrmsr={0x1e, 0x20, {0xbcb, 0x1}}, @rdmsr={0x32, 0x18, {0x81f}}, @wrmsr={0x1e, 0x20, {0x951, 0x7ff}}, @cpuid={0x14, 0x18, {0x3152, 0x67c}}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @wrmsr={0x1e, 0x20, {0x92a, 0x800}}, @code={0xa, 0x7d, {"3e65400f013d1a0e000066baf80cb868bfe98cef66bafc0ced0f082664c00a052e64670f0748b8cb000000000000000f23d00f21f8350000000c0f23f82e0f0f91060000009e453864d3008f69400231c74424005a7287bac744240200000000c7442406000000000f011c24"}}, @cpuid={0x14, 0x18, {0x0, 0x80}}, @wr_crn={0x46, 0x20, {0x2}}, @cpuid={0x14, 0x18, {0x8, 0x6}}, @wrmsr={0x1e, 0x20, {0x2cc, 0x5}}], 0x3f4}) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000a80)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000e80)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x3375cfa2}}, [0x100000000, 0x0, 0x7f, 0x4, 0x7ff, 0x401, 0xf4, 0x3, 0x3, 0xfffffffffffffff9, 0x43, 0x1, 0x83f, 0x5, 0x887]}, &(0x7f0000000f80)=0x100) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000fc0)) socket(0x21, 0x2, 0x7) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000001000)=0x9) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000001040)={0x8, 0x0, [{0x7, 0x10000, 0x4, 0x4e, 0x81, 0x3, 0x5}, {0xd, 0xfffffffd, 0x1, 0x6, 0x97e, 0x4e, 0xc}, {0x80000001, 0x856e, 0x1, 0x4, 0x4, 0x3, 0x6}, {0xc0000000, 0x73, 0x7, 0x4f58, 0x7, 0x4, 0x80}, {0x40000001, 0x5, 0x5, 0x9, 0x1, 0x7fffffff, 0x401}, {0xd, 0x5, 0x6, 0xffffffb3, 0x3, 0x3, 0x3}, {0x4, 0x7, 0x4, 0xaf7b, 0x7, 0x9, 0x3}, {0x40000000, 0x100, 0x7, 0x6, 0xfffffff7, 0x100000, 0x7f}]}) syz_usb_connect(0x5, 0x161, &(0x7f00000011c0)={{0x12, 0x1, 0x251, 0x62, 0x24, 0x8b, 0x9f, 0x4b4, 0x930b, 0xc0aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14f, 0x1, 0x40, 0x1, 0x80, 0x8, [{{0x9, 0x4, 0x19, 0x8, 0x2, 0x17, 0x69, 0x80, 0x15, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ce"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfff8, 0x2000, 0x3}, [@acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0xe2, 0x2}]}], [{{0x9, 0x5, 0x5, 0x1, 0x20, 0x9, 0x81, 0x62}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x3, 0x1, 0x5, [@generic={0xef, 0x3, "00a4ad841c05eba60d2a35db6963a99ecd198e126db82474cd08c0f65069ada5edadd23e3c8212047a1d23763fe195981eb0933d47323d98368ef26f6ddeacce3c86a519ca7ffe5810907fdacdc3ab48718e8ee5b8cb9321e3c0a731c7251a5377e746e6d9687dff1783c8997e02c6bd6b85a365af85d0f4ad566caafdaa88139a0cd1c8f6b8f6ad96de63b8b15bbf1db79ca8bfbb267203918047ef16f63e3981cf5b42c37149762b9fd33ecbba16323948735d163cfcfe68292dbaeb7a265af14079bd2ec665b1831eab20ef226ad67295db1476ef83757d85218fe93614a7634cb880287bb3fcba81b0a881"}, @generic={0x19, 0x11, "75ea7a8df015a9c5240f4800e8a8e387b506120f52fb33"}]}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x201, 0x1, 0xf9, 0xf8, 0x8, 0x5}, 0x45, &(0x7f0000001380)={0x5, 0xf, 0x45, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x78, 0x2, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c089b5ac467a65e42eabd1b967a5858d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "3826d349d4e2580f8d028d0f36772758"}]}, 0x6, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x2401}}, {0xcd, &(0x7f00000014c0)=@string={0xcd, 0x3, "5082f052bc14b037aae9b91d3a0c86791cbeddc0bca891766cedd686216acf311adfcef937b92ec127147df79e7bed53bdd66745f6314862342ea9fbe81fdd1dc84fc0c8335b68e5bc40a2fd89c562ba3b34d60409100ad7866180e0607ce14bba2117e8ded89234284cae17aca9cc98317ef64ea4814432f4af21e56b8f8dadd1be5a5b5dadc6456f7062a0eeab16ce7c24ece85ba3313c7933840c38a42d41d921138225db7f147e5e545258ccb308402992152dcb76afadd088a7815857f617defbecc3299e777d935d"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x26, &(0x7f0000001600)=@string={0x26, 0x3, "a1c2e31b8ce6097d3fa84fac2614c43395fbbe8c9ebb90babbc08c8d1911d7d0f52a1f12"}}]}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000016c0)=@attr_pmu_init) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 12m51.121547364s ago: executing program 34 (id=1997): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x1a, 0x65bb, 0x5, 0xa, 0x9}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="0f1ee0d9f9bad104ed660f3882b00b0066b98a03000066b8f1ff000066ba000000000f3066b9800000c00f326635000800000f30f40f300f060f01c4", 0x3c}], 0x1, 0x12, &(0x7f0000000100)=[@dstype0={0x6, 0x2}, @efer], 0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x408000, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x5, 0x0, [{0x2, 0x8, 0x4, 0x9, 0x2, 0x4, 0x8000}, {0x1, 0xaf62, 0x7, 0x6, 0x3ff, 0x8}, {0xd, 0x7, 0x2, 0x0, 0x3, 0x248, 0xe3}, {0x80000000, 0x5, 0x0, 0xfffff1f8, 0x94e8, 0x4, 0x401}, {0x0, 0x4, 0x4, 0xe494, 0x8, 0x1}]}) r3 = dup(r0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000000280)={0x3, 0x0, [{0xd, 0x3, 0x7, 0x9, 0x1, 0x0, 0x96ce}, {0xa, 0xff, 0x0, 0x5, 0x2, 0x8, 0x3}, {0x40000001, 0x200, 0x0, 0xffffffff, 0x4, 0xfffffc01, 0x7ff}]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)={0x4, 0x0, [{0xa, 0x85, 0x600000, 0x3ff}, {0x1, 0xfffffffe, 0x10, 0xfffffffc, 0x1000}, {0x80000008, 0xe5, 0x6, 0x5642, 0x6}, {0x1, 0x2, 0x8, 0x2, 0x8}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0x7, 0x0, [{0x8fa, 0x0, 0x800}, {0x1f990c797284e35e, 0x0, 0xffffffffffffffff}, {0x32f, 0x0, 0x8000000000000000}, {0x9dd, 0x0, 0xe}, {0xbae, 0x0, 0x6}, {0x257, 0x0, 0x2}, {0x20b, 0x0, 0xffffffffffffffff}]}) r4 = dup(r1) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0x2, @pix_mp={0xe, 0x8, 0x3631564e, 0x2, 0x9, [{0x3, 0x800}, {0x7fff, 0xffffa122}, {0xfffffffd, 0x1800000}, {0x9, 0xf2}, {0x1, 0xf}, {0xd, 0x8}, {0x3, 0x10}, {0x8, 0x2}], 0x0, 0xfc, 0x7, 0x1, 0x5}}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000500)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x10001, 0x4, 0x3000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x5}, &(0x7f00000005c0)=0x8) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000600)=0x7) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f0000000640)=[@uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0xf, 0x5}}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x10001}, @uexit={0x0, 0x18, 0x4}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @wrmsr={0x1e, 0x20, {0x40000084, 0x5}}, @wrmsr={0x1e, 0x20, {0x205, 0x6}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x14, 0x18, {0x7, 0xb5b}}, @code={0xa, 0x5f, {"c7442400c1c10000c744240200600000c7442406000000000f011424260f07c74424001c010000c744240200380000ff1c24650f1f00410f0139f242e0000f01cff340902ef3450f098fe9389006"}}, @cpuid={0x14, 0x18, {0x4, 0x10}}, @rdmsr={0x32, 0x18, {0x8f2}}, @rdmsr={0x32, 0x18, {0x648}}, @rdmsr={0x32, 0x18, {0x2a3}}, @rdmsr={0x32, 0x18, {0x33}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @rdmsr={0x32, 0x18, {0x3ac}}, @wrmsr={0x1e, 0x20, {0x833}}, @cpuid={0x14, 0x18, {0x401, 0x5}}, @wrmsr={0x1e, 0x20, {0xbcb, 0x1}}, @rdmsr={0x32, 0x18, {0x81f}}, @wrmsr={0x1e, 0x20, {0x951, 0x7ff}}, @cpuid={0x14, 0x18, {0x3152, 0x67c}}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @wrmsr={0x1e, 0x20, {0x92a, 0x800}}, @code={0xa, 0x7d, {"3e65400f013d1a0e000066baf80cb868bfe98cef66bafc0ced0f082664c00a052e64670f0748b8cb000000000000000f23d00f21f8350000000c0f23f82e0f0f91060000009e453864d3008f69400231c74424005a7287bac744240200000000c7442406000000000f011c24"}}, @cpuid={0x14, 0x18, {0x0, 0x80}}, @wr_crn={0x46, 0x20, {0x2}}, @cpuid={0x14, 0x18, {0x8, 0x6}}, @wrmsr={0x1e, 0x20, {0x2cc, 0x5}}], 0x3f4}) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000a80)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000e80)={r5, @in6={{0xa, 0x4e22, 0x5, @mcast2, 0x3375cfa2}}, [0x100000000, 0x0, 0x7f, 0x4, 0x7ff, 0x401, 0xf4, 0x3, 0x3, 0xfffffffffffffff9, 0x43, 0x1, 0x83f, 0x5, 0x887]}, &(0x7f0000000f80)=0x100) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000fc0)) socket(0x21, 0x2, 0x7) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000001000)=0x9) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000001040)={0x8, 0x0, [{0x7, 0x10000, 0x4, 0x4e, 0x81, 0x3, 0x5}, {0xd, 0xfffffffd, 0x1, 0x6, 0x97e, 0x4e, 0xc}, {0x80000001, 0x856e, 0x1, 0x4, 0x4, 0x3, 0x6}, {0xc0000000, 0x73, 0x7, 0x4f58, 0x7, 0x4, 0x80}, {0x40000001, 0x5, 0x5, 0x9, 0x1, 0x7fffffff, 0x401}, {0xd, 0x5, 0x6, 0xffffffb3, 0x3, 0x3, 0x3}, {0x4, 0x7, 0x4, 0xaf7b, 0x7, 0x9, 0x3}, {0x40000000, 0x100, 0x7, 0x6, 0xfffffff7, 0x100000, 0x7f}]}) syz_usb_connect(0x5, 0x161, &(0x7f00000011c0)={{0x12, 0x1, 0x251, 0x62, 0x24, 0x8b, 0x9f, 0x4b4, 0x930b, 0xc0aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14f, 0x1, 0x40, 0x1, 0x80, 0x8, [{{0x9, 0x4, 0x19, 0x8, 0x2, 0x17, 0x69, 0x80, 0x15, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ce"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xfff8, 0x2000, 0x3}, [@acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0xe2, 0x2}]}], [{{0x9, 0x5, 0x5, 0x1, 0x20, 0x9, 0x81, 0x62}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x3, 0x1, 0x5, [@generic={0xef, 0x3, "00a4ad841c05eba60d2a35db6963a99ecd198e126db82474cd08c0f65069ada5edadd23e3c8212047a1d23763fe195981eb0933d47323d98368ef26f6ddeacce3c86a519ca7ffe5810907fdacdc3ab48718e8ee5b8cb9321e3c0a731c7251a5377e746e6d9687dff1783c8997e02c6bd6b85a365af85d0f4ad566caafdaa88139a0cd1c8f6b8f6ad96de63b8b15bbf1db79ca8bfbb267203918047ef16f63e3981cf5b42c37149762b9fd33ecbba16323948735d163cfcfe68292dbaeb7a265af14079bd2ec665b1831eab20ef226ad67295db1476ef83757d85218fe93614a7634cb880287bb3fcba81b0a881"}, @generic={0x19, 0x11, "75ea7a8df015a9c5240f4800e8a8e387b506120f52fb33"}]}}]}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x201, 0x1, 0xf9, 0xf8, 0x8, 0x5}, 0x45, &(0x7f0000001380)={0x5, 0xf, 0x45, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x78, 0x2, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c089b5ac467a65e42eabd1b967a5858d"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xc, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "3826d349d4e2580f8d028d0f36772758"}]}, 0x6, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x2401}}, {0xcd, &(0x7f00000014c0)=@string={0xcd, 0x3, "5082f052bc14b037aae9b91d3a0c86791cbeddc0bca891766cedd686216acf311adfcef937b92ec127147df79e7bed53bdd66745f6314862342ea9fbe81fdd1dc84fc0c8335b68e5bc40a2fd89c562ba3b34d60409100ad7866180e0607ce14bba2117e8ded89234284cae17aca9cc98317ef64ea4814432f4af21e56b8f8dadd1be5a5b5dadc6456f7062a0eeab16ce7c24ece85ba3313c7933840c38a42d41d921138225db7f147e5e545258ccb308402992152dcb76afadd088a7815857f617defbecc3299e777d935d"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x26, &(0x7f0000001600)=@string={0x26, 0x3, "a1c2e31b8ce6097d3fa84fac2614c43395fbbe8c9ebb90babbc08c8d1911d7d0f52a1f12"}}]}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000016c0)=@attr_pmu_init) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 11m57.847203081s ago: executing program 35 (id=2209): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x8006576, 0x9, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=ANY=[@ANYBLOB="5c0000000b060108000026a9a143000005000002050001000700000034000700180014bcea000240fe80000000000000000000000000001f1800018014000240fc010000000000000000000000000000090002"], 0x5c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r3, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x12080, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) 9m1.298560817s ago: executing program 36 (id=3100): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 8m46.720534625s ago: executing program 37 (id=3197): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2022, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 8m23.804200699s ago: executing program 38 (id=3318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x24020400) fcntl$setstatus(r4, 0x4, 0x40200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@broadcast, 0x7}, {@local, 0xc64}]}]}}}], 0x30}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000020105000000000000000000020000084e2a5419597656b7e98908f691bfb2caa405bf100a0ac5bb1c6998ab779b7a97b012"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) r7 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r8) 8m5.766096578s ago: executing program 39 (id=3385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d61637674617000000006"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 8m2.342613985s ago: executing program 40 (id=3391): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="e13650b5290a576ace6e3cec562d7a97bea9209657a104d4221cd217163a0b401c37406907a67e54bcd5f478a326ec692ffcf847478bb1c2bd65fc571e8b31f2de93a2219657967b65a0d7a2ef93dd8e577225c6b32260406f437117a0c9509babbe97a1b27fe399c7de49b92ae5", 0x6e}, {&(0x7f0000000180)="8209bca041c10503f6f9859a626cf690e30e662dde5b425d85e9f42c0533b6c0ab66ff1b86acc84c305fdf3a1810a0568b6f96e503f73beec59879d4d49432ddab8d2b9bb2170b65f24de0d46f5599d38caf89d40a567cfff552b8eac0364ba5e6bc8d078e227970bda57df3db94bde7fb73272fee171fa97d9bc83eced556028040b79d730c9de41f1c3b07f5415811610caa614b60d9d7dd", 0x99}, {&(0x7f0000000740)="e96d9fca86f114e0072c4a8198a11e1fa85ffaeb7a1d338707fc9e4e5d8b03a3875cdad201cf80baa3e6bf0b778547614703ab1e7ac9e4", 0x37}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c37", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}], 0x1}}], 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m57.427707379s ago: executing program 41 (id=3399): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) 7m54.140065652s ago: executing program 42 (id=3406): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x2000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7m41.403083262s ago: executing program 0 (id=3392): madvise(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x66) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000124000/0x1000)=nil, &(0x7f0000839000/0x1000)=nil, 0x4009, 0x0, 0x0, 0x9, 0x0, 0xe4, 0x0, 0xa}) 7m41.177284355s ago: executing program 0 (id=3408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) 7m39.942516845s ago: executing program 1 (id=3409): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) writev(r0, &(0x7f0000000180)=[{0x0, 0x39}, {0x0}, {&(0x7f0000001480)}, {&(0x7f0000000080)="51bf69f22c1248822c57855232956b27e27727a57ba4829bcb020e1730b303424fc93d854c372565cc97c097f4aff978d9d252999252d097fbbd8914bbd6dfc5164b11c193652e87de80c59df18915100c2bd352696f801fad5301d3979bbb30253c92571c060831eb103cd70cbc2b6195497cf19ab0155ba05fa0ccb5b21c3981935ff5dcc1513d0e67816ca3624ee3a570fbe995baf1a7a6831210b01f90987427c994c795"}, {&(0x7f0000000140)="3b7c9433288244d80c532aba5a758570cc27482b5a0d998f9269eb1f81fd5c4b2cc304107c83d31dc1817086b369f1e703e3b4afaa956e2d"}], 0x3) epoll_create(0x0) 7m39.344174081s ago: executing program 0 (id=3410): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m38.943175351s ago: executing program 0 (id=3411): r0 = openat$sw_sync(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x1, "340000dce368f6620945d44c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"0e337b42cc00d331ff0007000000000000001a00", r5}) 7m38.582613082s ago: executing program 0 (id=3412): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 7m38.133167852s ago: executing program 43 (id=3412): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 7m37.91184724s ago: executing program 1 (id=3414): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x4008031, 0xffffffffffffffff, 0x2000) socket$kcm(0x2, 0x3, 0x2) r0 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) 7m36.782589408s ago: executing program 1 (id=3415): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a504033007c8d1b93c010902120011000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7m34.708072742s ago: executing program 1 (id=3417): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m34.539490921s ago: executing program 1 (id=3418): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0) 7m33.391030475s ago: executing program 6 (id=3419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000014c0)={0xb, 0x5, 0xf1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) 7m33.01032072s ago: executing program 1 (id=3421): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m32.536032646s ago: executing program 44 (id=3421): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m32.524836755s ago: executing program 6 (id=3423): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 7m32.373643882s ago: executing program 6 (id=3424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0x2, 0x6, 0x1, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278a, 0x4, 0x3, 0x7, 0x5, 0x10, '\x00', 0x28, 0x80000001}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f00000001c0)=0x40) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000b7000040"]) 7m31.189735775s ago: executing program 6 (id=3425): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m31.144177696s ago: executing program 6 (id=3426): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KDENABIO(r0, 0x4b36) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x58, 0x1c, 0x29, 0x8, 0xb57, 0x8528, 0x6d39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x0, 0xb, [{{0x9, 0x4, 0xc8, 0x2, 0x1, 0x3, 0x1, 0x2, 0x3, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x0, 0x8}}]}}]}}]}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x21, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) syz_io_uring_setup(0x1f97, &(0x7f0000000380)={0x0, 0xe244, 0x13580}, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') r8 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) lseek(r7, 0x2000, 0x2) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x0, @rc={0x1f, @any, 0x1a}, @tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x7}}, @qipcrtr={0x2a, 0x0, 0x1}, 0x200, 0x0, 0x0, 0x0, 0x50b7, 0x0, 0x7, 0x9, 0x7f}) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) sync() 7m30.744487412s ago: executing program 6 (id=3427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f67", 0x1a}], 0x1}}], 0x1, 0x4044805) close(r0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 7m30.431207707s ago: executing program 45 (id=3427): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="b6bfe5d12e5894a76921d2adc0f0f58aa1e55520876e89106f67", 0x1a}], 0x1}}], 0x1, 0x4044805) close(r0) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 7m30.156059701s ago: executing program 7 (id=3429): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000014c0)={0xb, 0x5, 0xf1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) 7m29.868654628s ago: executing program 7 (id=3430): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 7m29.756753146s ago: executing program 7 (id=3431): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r6, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2c, 0x10100, 0x2, 0x315, 0x0, r7}, &(0x7f0000000500), &(0x7f00000001c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) 7m26.51006434s ago: executing program 7 (id=3432): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m26.447358868s ago: executing program 7 (id=3433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) shutdown(r0, 0x1) 7m26.062423875s ago: executing program 7 (id=3434): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x1d, 0x0, 0xc, 0x9}]}) 7m25.759799309s ago: executing program 46 (id=3434): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x1d, 0x0, 0xc, 0x9}]}) 7m16.330240495s ago: executing program 8 (id=3413): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b912f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0xdf, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m16.133163871s ago: executing program 8 (id=3436): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000c000, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, 0x0) 7m15.972796717s ago: executing program 8 (id=3437): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0xfffffffd}, {0xa, 0x4e24, 0x2, @local, 0x80000000}, r3, 0xfffffe4d}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private0, 0x9}, {0xa, 0x4e24, 0x8d1, @mcast1, 0x4005}, r3, 0x8}}, 0x48) 7m15.759032239s ago: executing program 8 (id=3438): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m15.522351559s ago: executing program 8 (id=3439): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = eventfd2(0x8, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000040)=0x6, 0x8) 7m15.066600741s ago: executing program 8 (id=3440): socket$kcm(0x10, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) umount2(0x0, 0x4) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000200)="e5000a03d847879268683cf525db15416a954cb1d7e22717396355a22ca2a25b914f8bf220d27f18a620c5d9c70716b98d2b7f5d069ee36231bd5567ec77bc0e087bdd9a6c16a09b5d65a0cdcf67b76659", 0x51}], 0x2) 7m14.516754019s ago: executing program 47 (id=3440): socket$kcm(0x10, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) umount2(0x0, 0x4) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000200)="e5000a03d847879268683cf525db15416a954cb1d7e22717396355a22ca2a25b914f8bf220d27f18a620c5d9c70716b98d2b7f5d069ee36231bd5567ec77bc0e087bdd9a6c16a09b5d65a0cdcf67b76659", 0x51}], 0x2) 2m12.277594577s ago: executing program 2 (id=4735): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x208041, 0x0) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, &(0x7f00000002c0)="53270447968d9ed6df00c8ed557d2b21a55d408b70b30427c2d2045457fa266037ae7b2801b951df3338ef2966471c6f2c2217d28ac103d9f12d30e43f05e7ddeb88e7ee1728e06d97aa7044d0bebaac0683bcb4e60171b78d06056d3ab4f255"}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d616328616573290000000000000000000014c79ba1efc7c712000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000005c0)={0x18}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2, 0x2}}, 0x80, 0x0}, 0x40) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) writev(r9, &(0x7f00000001c0)=[{&(0x7f00000015c0)="580000001400192340834b80040d8c560a0677bc45ff810500000300000058000b480400945f6402ff07000028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x3, r1, 0x0, 0x59, 0x33, &(0x7f0000000380)="88dccb46e6316f3b23e5a851b5d282ea7c17efd86f3cc6ccd6c7eb2480ceadd7960a2ff82e716bb769f941cf75d95763bbeb17"}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$system_posix_acl(r11, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[], 0x34, 0x2) open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2m12.143864947s ago: executing program 2 (id=4737): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {}, [], {}, [{0x8, 0x2}], {}, {0x20, 0x4}}, 0x2c, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffff7}, 0x0, 0x1, 0x2}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000080)={&(0x7f0000000580)={{@any, 0x4}, {@host, 0x5}, 0x400, "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"}, 0x418, 0x5}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r5, 0x545c, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 2m11.146631918s ago: executing program 2 (id=4743): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)="580000001400add4050000000000000002", 0x11}, {&(0x7f0000000280)="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", 0x14a}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x2, 0x3, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 2m10.982475981s ago: executing program 2 (id=4745): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, 0x0, 0x4000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 2m10.172716282s ago: executing program 2 (id=4750): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1a4, 0x4000, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x8, 0x5, 0x1, 0x3, 0x9, 0x9, 0x9, 0x9, 0x21, 0x7, 0x9380000, 0x8, 0x6, 0x9, 0x1, 0x6], 0x80a0000, 0x291842}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m9.468712351s ago: executing program 2 (id=4757): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r3, r4, 0x3, 0x100, 0xffffffff, 0x804, {0xac7c, 0x1, 0x67, 0x67, 0xf48, 0x1, 0x2, 0x5, 0x4130, 0xe154, 0x200, 0x7f, 0x158, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 2m9.022717213s ago: executing program 48 (id=4757): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r3, r4, 0x3, 0x100, 0xffffffff, 0x804, {0xac7c, 0x1, 0x67, 0x67, 0xf48, 0x1, 0x2, 0x5, 0x4130, 0xe154, 0x200, 0x7f, 0x158, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 6.890918967s ago: executing program 3 (id=5270): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902010000764422d4c7486a7cbcdc000000000004000001030000000921050000012205855901e7a4343826c5505f29fcbf3cb7f45ccbc6541acabcb3e9737155e1"], 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x80000000) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x0, 0xa, 0x57, {0x57, 0xf, "132c9d2f1b0fce8dce8d438d6ac3432965b7750db05943c3a49017418ba69866cba538eae6d8cf51b536e479df02ce58c68ed4768d7687e8178d314a12f1afc56121523659c72a8b6af58cf704609474d94d6c93ae"}}, &(0x7f0000000240)={0x0, 0x3, 0x86, @string={0x86, 0x3, "2f1b39d979826f9b4ca54cffebb2d5aaa703dcaf49053ed7881eb1422bc79db27a7b6138c96586ec50908f11b572182d991c6c4c9206734dba41aa7e84da908858fa76c19ae03edb030c4178d0f9676badad59308685b6cd6f536359d123e20216502a8ee95996a4a62b836b85d7c1610763c455297a47b951fb171db48c1723681da4fb"}}, &(0x7f0000000300)={0x0, 0xf, 0x3f, {0x5, 0xf, 0x3f, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x6e6, 0x0, 0x8, [0xff3fcf, 0xff00f0, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x4, 0x8, 0x6, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x81, 0x0, 0x6, 0xf00, 0xff00}, @wireless={0xb, 0x10, 0x1, 0x0, 0x2, 0x7, 0xf, 0x2, 0x7}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x5, 0x9, "177bd64e", "ad222d66"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0xc, 0x1, 0xe, 0x2, 0x5}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x0, 0x90f6f4060f4221d8, 0xd0, "48d71738ca06a9bf3606428751d5ccf3f9bea4b2fef4b0552e9a2891ff42b2ba83a187e92db19cc6679759081d9c837d1aed36f3a8cd5068994ca1a3d4aa10ddd5dafb92d6a18ecd907d20c50c82c9161efe13ed1053b2d3e5480c17dd27c370de1180b631ab6b43fde9cf6491f2fbfe1791343249958c8d0e9f9237df6bdec0ffca992555919c4f4a9a5fc2af3a1746f0d5eefcc9cf3e8e4cd7f4ce601eecc9201cccf694bddc0714209fac46da97e22d501000af23ac56391af38e1367d8641042d83a6517b743c64948c4f3c0ccd0"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x200, 0x1, [0xf]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x25f1}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000000700)={0x40, 0xb, 0x2, "7280"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000800)={0x40, 0x19, 0x2, "aff2"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xf}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0xfb}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x9}}) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="b0") 4.377399209s ago: executing program 9 (id=5276): r0 = socket$nl_generic(0x10, 0x3, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x31, 0x300, 0x70bd2a, 0x25dfdbfe, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08000300"/18, @ANYRES32=r4, @ANYBLOB="040013000600b500850100000a000600080211000001000006001200040000000600120108000000"], 0x44}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000004) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r7, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x280c00, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r8, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7133, 0x41}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r9 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) 3.946361791s ago: executing program 9 (id=5278): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000180)={{@local, 0x2}, @hyper, 0x0, 0x100000000000000, 0x5e, 0xfffffffffffffff9}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[], 0x1a8}], 0x1, 0x0, 0x0, 0x80}, 0x880) recvmmsg$unix(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) r3 = syz_usb_connect(0x0, 0xe4, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006809c2b4006806ff00000000000000000000000000000000ff0200000000000000000000000000013b060000000000000031ecfacd"], 0x9e) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYRES64=0x0, @ANYRESOCT=r3], 0x22) 3.566185953s ago: executing program 4 (id=5280): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7f, 0x240800) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0xfffffff7, 0x183]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0x5, 0x83ca]) 3.462543441s ago: executing program 4 (id=5281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="240000002e000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="09000080976b640868060000"], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = creat(&(0x7f0000001380)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000) copy_file_range(r4, &(0x7f0000000040)=0x5, r4, 0x0, 0x6, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, r1, 0x1, 0x8000, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xfffffffffffffe3a}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.434562103s ago: executing program 5 (id=5282): syz_usb_connect(0x0, 0xe4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000028c0)={'wlan0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22) syz_usb_connect(0x5, 0x47d, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x17, 0xc2, 0xf0, 0x10, 0x1462, 0x8807, 0x358, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46b, 0x4, 0x3f, 0x7, 0x0, 0x4, [{{0x9, 0x4, 0xba, 0x9, 0x4, 0x9f, 0xe1, 0x8f, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "fe3b"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x4, 0x101, 0x8}, {0x6, 0x24, 0x1a, 0xc01a}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f8e4311e"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0x6120, 0x3, 0x9, 0x4}, {0x6, 0x24, 0x1a, 0xc, 0xc}, [@country_functional={0xc, 0x24, 0x7, 0x4, 0x1000, [0x6, 0x5, 0x9]}, @mbim={0xc, 0x24, 0x1b, 0xa48, 0xa24, 0xd, 0x2, 0x9, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0xc, 0xc, 0x20, 0x80, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xde, 0xfe00}]}}, {{0x9, 0x5, 0x7, 0x11, 0x8, 0x40, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xfff7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xd8, 0xeb, 0xb3, [@generic={0xb5, 0x8, "e9542e9798a8d0878d4700f84d76fe4af26f3b3ed9eac3c9ed014ec6799439e287613ce059d78258ac704249721d68ae77a84a9c5cc39140d138241c7bcf33df9c3dbd7aea29737f04f71569c5faed303a109292d0faa89321d5c52f21452a856fbfd63ac64221d7204a775a1ecb4b3666516c93fb451afe354d952d2174e6b79581d3d263d4b8058e3a3409ee59d9be4a1e2baadb0ec84a1f524901ad34092302b265fa38564945a3df20aa1310ecc94b3d59"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0xa, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x7a6b}]}}]}}, {{0x9, 0x4, 0x54, 0x1, 0x4, 0x4c, 0xa, 0x9, 0x1, [], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x1, 0xf, 0x7, [@generic={0x47, 0x2, "d813930b0b57d112e237bd1be15b1365519b3a0d620380ecfc83de7080eee2876ac5a98b96e6a02b47b2e4eab4357b49f301a091c5323d2c22f4c3d3609b9701bdbc927373"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x40, 0x8, 0x3, 0x7, [@generic={0x42, 0x2, "abc1f7ce2c71c4a63a54673ea5a35e77e14d24732b1dc9181f7fc0c4717dab0a98e11621584995e02464f4e01adfdbe005906aa9d4713048efdb2f3ec346c5e0"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x3}]}}, {{0x9, 0x5, 0x6, 0x10, 0x448, 0x1, 0x1, 0x81, [@generic={0x5b, 0x24, "2d2c688c63978103894aeb47d6c617251c32acf32293480c378277d2c946c7d24a9f33affde07fb5216bb8d68746c5f42c11590808e64a5343e27164554838b3901d9c0722692cb37fbc3415cf8104b88a7a1a60d4c5cbc54a"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x33, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0x3, 0x5, 0x4, 0xc6, 0xe8, 0xcb, 0xd9, [@generic={0x1a, 0x30, "b211c9eb6b6aa55485390b9f4f9bb74057adcbab927abf4a"}, @hid_hid={0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5e8}}], [{{0x9, 0x5, 0x4, 0x3, 0x200, 0xc, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0xfc, 0x3924}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x49, 0xf3, 0x2, [@generic={0x7a, 0xe, "1c7379abe99181527f965f3427dcd095770669f2962d36c4876574a3e23fc63437f5b0184d481404cb27447a6d6bf36b4be562b5020822898e453da1faaa233d0f5500fa03a513a2be47be5870c737b77cc85750fb214645bac2eb45d62e25335b71df9a91db8a9083236eab0b7da3c9a065776099ad1a3b"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x2, 0x4, 0x10}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xc, 0x25, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfffb}]}}]}}, {{0x9, 0x4, 0x5e, 0x6, 0x5, 0x54, 0xe2, 0x3e, 0xa, [], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x5, 0x0, 0x9}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x22, 0xc0, 0x40}}, {{0x9, 0x5, 0x80, 0x3, 0x10, 0xbd, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x1}, @generic={0xa0, 0x11, "cb3c73479d2fd2880f023459d90e00a8dffcf8623522a0f7ff64bdeb96eefd8d95577ebe1593f262b0c0ca6ee0a81c889194944edc678e9024dc49b5c81c138a5fc53ce47beb910bebde6ed9f8011fb09ef8b3c2d4fccc71d55245e8f893437d3a8b8dfeb5dd61a1f860b3df8da70a12bb9e5e048f513138c85fe7abee5a37833fe31ae395b6a6dae1fe666622d66417aa232a0f68c2dae2780250abb193"}]}}, {{0x9, 0x5, 0xc, 0x6, 0x40, 0x8, 0xe9, 0xec}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x6, 0xc2, 0xfa}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x5, 0x7c, 0x3, 0x8, 0x6}, 0x19, &(0x7f0000000940)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "eb435dd2071028a294615fc0b9c7a94d"}]}, 0x1, [{0x94, &(0x7f0000000980)=@string={0x94, 0x3, "39eb8abf96dc690685e063f1a598f9a9fe50c28e5291041c1aac40d1c17eeb688eb5f22778b905eb94df3f3bc044802d72d17eeb0552bf28686d64459612bc5e6af380f220d5c34e344af4b89d297ba83bd979d3d1c0e1d9a5b56058a9f491eb48d9f2cf01c115e592af48e4c8fb02ee386df24e944ebd357d4b1bb7f03f0068afdc3f5caf94aecc39ff94455c99c33e4e15"}}]}) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x6, 0x20, 0x8f, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x9, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd2, 0xe, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x10, 0x7, 0x2d}}, {{0x9, 0x5, 0x3, 0x2, 0x808, 0x8, 0x7f, 0xf}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x2, 0x3, 0x1f, 0x40, 0xe}, 0x58, &(0x7f00000000c0)={0x5, 0xf, 0x58, 0x4, [@ptm_cap={0x3}, @generic={0x25, 0x10, 0xb, "bed294b2c5ef91844baab3f4d22ddda6debb3a84ec7fb12adffc24f0a679ccba83e0"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x2, 0xdf, 0x800}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x1, 0xf, 0xff, [0x30, 0xff00f0, 0x7f8000, 0x7e00, 0xc0]}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x164e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xfcff}}, {0xe3, &(0x7f00000001c0)=@string={0xe3, 0x3, "891e1b70bd1f63089830500b91b949f867ad8797e02245857f6948838e5cecd300908e754a44b51bf3b601c5609065b8cd21b2f638d70879c40629e717a36e9728a437ac61b947d39da357d98e12de10ebbf9beecce6058250ccb0c56ef83328664bbad11964d823a5794d0a53b45068689900bfe5f811dbd3fc5463228a1c1cd0ad937eba7c6d3015bb67707eb314f836fe227e83c5f1753e50c6ba000e9d998c2803c613d5fbd98f76729351c692e42f36f3f461b65e55166bea67affd3e646ba083eb9fb48a4ce9e5aa81b18584ffc140f79dfc45f8706bc383b4c4ac925bc0"}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "800fef89810170d004d632a0af201c6da7a3682b38beefe81d20f459654f001fd289cef8dd2b2f"}}, {0x1f, &(0x7f0000000400)=ANY=[@ANYBLOB="4203f409a6aa4456aee35ae464438eac73af23b34355dbbf38ebb55cdce918690808b8e94d7e71ba1de93ece9691327d89f397f6438ad7df949e254a721156ec38560ea58e7d1874fd237b6dc6be2e1edad3b7bbe602d8806e32ad173e46440e0f3217e50763740e22bcb7853078543c0fad26e2129193bfbc7476b1ad31c464c482fc3d956bfc4410908086bbdebb3f89466bdfa6bc95740000000000"]}]}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 3.121875591s ago: executing program 3 (id=5283): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x98f907, 0x9}) creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2.994625051s ago: executing program 3 (id=5284): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9"], 0x30}}, 0x0) 2.994041294s ago: executing program 9 (id=5285): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 2.918293514s ago: executing program 3 (id=5286): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x10001, 0x50200) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1) 2.405556408s ago: executing program 9 (id=5287): io_setup(0x8, &(0x7f0000000600)=0x0) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, 0xffffffffffffffff, 0x5708e000) 1.635201489s ago: executing program 9 (id=5288): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000211", 0x12}], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0xffffffff, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 1.558392202s ago: executing program 9 (id=5289): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000001740), &(0x7f0000001780)=0x40) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) unshare(0x20000000) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="40aacfda5de5"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x5, 0x7, {0x7, 0x5, "2bc84a3ffc"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000000100)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xa, "13bd97aa"}, @global=@item_4={0x3, 0x1, 0x1, "1a6e889f"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x2, "1e9c0eb7"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x18, 0x1, {0x22, 0x3bf}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x3, 0x99, "b033b1c3d022e737db6d400d52527d546a2c60056ae0d9b0bad0e4fa9921270632c22bc5b0b3b995a85cc325cbf0ccce2aac0850c3ddbc5eefbfc2c86875d6e5127573e738f40e7876a8ec479f28cf937f5262d5910239ecf5d85d536561082f19f8c0f9c06296bc98a96e5587b3ea2cc9854c28ba97ef43803b8d1e77de18c418a1ae49c77dbcd559364a86a5575e4ed195e74751076dc870"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000340)={0x20, 0x1, 0x32, "af808686005787c1fa8e71b73ca1d1762a2b1866e895aa0b1b4b386aa3918f5e673a0e501b3e7e6c21ad91a97e94e7ae4b53"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x4}}) 1.487644955s ago: executing program 3 (id=5290): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='bpf\x00', 0x1808022, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000000c0)="3f030e5010358ceaaee6510089e900a911d7c2290f0086dd1327c9167c6420090000000000000055b1b141ab059b24d0fbc50df71548a3f6c5629063382a0c1511fdf9435e3ffe46", 0x5cc, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x65, r9}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r12, 0x29, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1.383761808s ago: executing program 5 (id=5291): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r2, &(0x7f0000000080), 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000080)=0xe8) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 0', 0x18) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@filename='./file0\x00', r4, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.314476253s ago: executing program 3 (id=5292): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="110949a486dcf61c0e7f0f7c65cd83d6d6de4427443a94fafaf7a05dfd96d25a5ec632c38002db83871c33cb4879703d63ab5f4d68800d83055fadb8c24939e7bd6a5f35afb7d86e6535bf1c9eead41654dabb254d8be6d41290306773c57cb995c52e27eaac75242d20f3531dcb330a1d62de1adca84bc6a4a96f20ef0009556d60d5d510d75d4734ddf05aa63353e594624e1f34d4ef57c713ea35b0746c04646ab24414ac6e4ee97a26bdbe7ffe95b863d820340a44fc7d68711002ee8f5316c90d916f8463b7c2c3abd6f3f8daec976b4f84471c4588b3323a7f814cd07b4f3c63c2536345c11a520e", @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64, @ANYRES32=r0, @ANYRESDEC=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x31e4dc4}}, './file0\x00'}) accept4$alg(r3, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.181417506s ago: executing program 5 (id=5293): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioperm(0x3, 0x5, 0x6) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) semget(0x3, 0x3d8320cfaffe1bf9, 0x75b16f8fb84d9a21) (async) mmap(&(0x7f0000b28000/0x4000)=nil, 0x4000, 0x3000001, 0x11, r0, 0xfa30000) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 1.139638348s ago: executing program 5 (id=5294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'dvmrp1\x00', 0x2000}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000100), 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000240)=[0x0, 0x7c]) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket$kcm(0x29, 0x0, 0x0) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x17fd00, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)}}], 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x10800000001fb, 0xac4481) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) bind(r6, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/95, 0x5f}], 0x1, 0x0, 0x0, 0x0) 942.571539ms ago: executing program 5 (id=5295): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 597.75018ms ago: executing program 4 (id=5296): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async) 417.646099ms ago: executing program 4 (id=5297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (fail_nth: 18) 366.430051ms ago: executing program 5 (id=5298): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r2, 0x7ca8e000) r3 = epoll_create(0xfffffff9) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) 159.499542ms ago: executing program 4 (id=5299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20c003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@local, @multicast2, 0xffffffffffffffff, "6525f8896b9ed0dbaf188bccff7952266258e19105a7cfdd7f6d97ab10e0c574", 0x8b0a, 0x0, 0x80000001, 0x5}, 0x3c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 4 (id=5300): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) mkdirat(r0, &(0x7f00000004c0)='./bus\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@redirect_dir_on}, {@userxattr}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030306130302c00e447422c3c6eabca64e9086c36c90892cfb89d96f55cf0f8e34c823616d7588fee6880f555a6c4ffd9a40cd0a02e313ec56354663aab519f9e3235bd198dd1ec6dae38b31b4552"]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './bus/file0', [{}, {0x20, '\x00'}, {0x20, 'overlay\x00'}], 0xa, "613c4bfa8d730af92ee24eb0b5a08f94c15a69004fe63ad8a747"}, 0x35) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2a000000d6a320070000000000000000010000000000000000000002002000000100000002000013674179dd0a9b0a7c000008"], 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES8=r4], 0x0, 0x0, 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) kernel console output (not intermixed with test programs): roduct=0, SerialNumber=0 [ 1190.917014][ T5847] usb 6-1: USB disconnect, device number 81 [ 1190.940762][T15082] usb 10-1: config 0 descriptor?? [ 1191.093614][ T9] usb 4-1: usb_control_msg returned -71 [ 1191.099450][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1191.105499][ T9] usbtmc 4-1:16.0: Failed to submit iin_urb [ 1191.111555][ T9] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 1191.124074][ T9] usb 4-1: USB disconnect, device number 39 [ 1191.695365][T27804] fuse: Bad value for 'fd' [ 1191.851559][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1192.027019][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1192.037251][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1192.046745][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.056511][ T9] usb 5-1: Product: syz [ 1192.060957][ T9] usb 5-1: Manufacturer: syz [ 1192.065618][ T9] usb 5-1: SerialNumber: syz [ 1192.073680][ T9] usb 5-1: config 0 descriptor?? [ 1192.235861][T18421] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1192.282245][ T9] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -71 [ 1192.291738][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1192.307219][ T9] usb 5-1: USB disconnect, device number 99 [ 1192.390428][T18421] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1192.399736][T18421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.408237][T18421] usb 6-1: Product: syz [ 1192.412865][T18421] usb 6-1: Manufacturer: syz [ 1192.417850][T18421] usb 6-1: SerialNumber: syz [ 1192.424784][T18421] usb 6-1: config 0 descriptor?? [ 1192.636627][T18421] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1193.110207][ T3099] usb 10-1: USB disconnect, device number 23 [ 1193.227983][ T5906] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1193.252277][T18421] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1193.372112][T27834] fuse: Bad value for 'fd' [ 1193.415965][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1193.421688][ T5906] usb 4-1: no configurations [ 1193.426457][ T5906] usb 4-1: can't read configurations, error -22 [ 1193.555843][ T5906] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1193.626048][ T3099] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1193.705786][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1193.711674][ T5906] usb 4-1: no configurations [ 1193.719825][ T5906] usb 4-1: can't read configurations, error -22 [ 1193.727151][ T5906] usb usb4-port1: attempt power cycle [ 1193.778482][ T3099] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1193.787382][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.800546][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1193.809975][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.818762][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.830132][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1193.839116][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.847085][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.858021][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1193.867038][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.874737][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.885225][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1193.894164][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.902178][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.912410][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1193.921371][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.931237][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.944893][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1193.955006][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.962751][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.972914][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1193.981840][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1193.989769][ T3099] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.000486][ T3099] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1194.009705][ T3099] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1194.020057][ T3099] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1194.029875][ T3099] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1194.038379][ T3099] usb 5-1: Product: syz [ 1194.042575][ T3099] usb 5-1: Manufacturer: syz [ 1194.050598][ T3099] usb 5-1: SerialNumber: syz [ 1194.058694][ T3099] usb 5-1: config 0 descriptor?? [ 1194.067002][ T3099] yurex 5-1:0.0: Could not find endpoints [ 1194.075814][ T5906] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1194.106539][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1194.112094][ T5906] usb 4-1: no configurations [ 1194.117433][ T5906] usb 4-1: can't read configurations, error -22 [ 1194.165895][T15082] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1194.245890][ T5906] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1194.266672][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1194.277006][ T5906] usb 4-1: no configurations [ 1194.281171][T27836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.290149][ T5906] usb 4-1: can't read configurations, error -22 [ 1194.294762][T27836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.297057][ T5906] usb usb4-port1: unable to enumerate USB device [ 1194.311733][ T5847] usb 5-1: USB disconnect, device number 100 [ 1194.326145][T15082] usb 10-1: Using ep0 maxpacket: 8 [ 1194.339580][T15082] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1194.349495][T15082] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.359685][T15082] usb 10-1: Product: syz [ 1194.363957][T15082] usb 10-1: Manufacturer: syz [ 1194.370086][T15082] usb 10-1: SerialNumber: syz [ 1194.382322][T15082] usb 10-1: config 0 descriptor?? [ 1194.590634][T15082] dvb_usb_rtl28xxu 10-1:0.0: chip type detection failed -71 [ 1194.599987][T15082] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1194.616604][T15082] usb 10-1: USB disconnect, device number 24 [ 1194.857467][T27849] FAULT_INJECTION: forcing a failure. [ 1194.857467][T27849] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.870480][T27849] CPU: 1 UID: 0 PID: 27849 Comm: syz.4.5067 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1194.870509][T27849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1194.870528][T27849] Call Trace: [ 1194.870535][T27849] [ 1194.870541][T27849] dump_stack_lvl+0x189/0x250 [ 1194.870563][T27849] ? __pfx____ratelimit+0x10/0x10 [ 1194.870582][T27849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1194.870598][T27849] ? __pfx__printk+0x10/0x10 [ 1194.870618][T27849] ? __pfx___might_resched+0x10/0x10 [ 1194.870632][T27849] ? fs_reclaim_acquire+0x7d/0x100 [ 1194.870648][T27849] should_fail_ex+0x414/0x560 [ 1194.870665][T27849] should_failslab+0xa8/0x100 [ 1194.870679][T27849] __kmalloc_noprof+0xcb/0x4f0 [ 1194.870696][T27849] ? kfree+0x4d/0x440 [ 1194.870710][T27849] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1194.870729][T27849] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1194.870745][T27849] ? tomoyo_domain+0xd9/0x130 [ 1194.870764][T27849] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1194.870776][T27849] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1194.870791][T27849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1194.870814][T27849] ? __lock_acquire+0xab9/0xd20 [ 1194.870839][T27849] ? __fget_files+0x2a/0x420 [ 1194.870855][T27849] ? __fget_files+0x2a/0x420 [ 1194.870869][T27849] ? __fget_files+0x3a0/0x420 [ 1194.870882][T27849] ? __fget_files+0x2a/0x420 [ 1194.870899][T27849] security_file_ioctl+0xcb/0x2d0 [ 1194.870919][T27849] __se_sys_ioctl+0x47/0x170 [ 1194.870940][T27849] do_syscall_64+0xfa/0x3b0 [ 1194.870951][T27849] ? lockdep_hardirqs_on+0x9c/0x150 [ 1194.870968][T27849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.870980][T27849] ? clear_bhb_loop+0x60/0xb0 [ 1194.871002][T27849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.871014][T27849] RIP: 0033:0x7f813bd8eb69 [ 1194.871026][T27849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.871037][T27849] RSP: 002b:00007f813cccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1194.871053][T27849] RAX: ffffffffffffffda RBX: 00007f813bfb5fa0 RCX: 00007f813bd8eb69 [ 1194.871062][T27849] RDX: 0000200000000140 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1194.871070][T27849] RBP: 00007f813cccd090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.871078][T27849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.871086][T27849] R13: 0000000000000000 R14: 00007f813bfb5fa0 R15: 00007fff58a1fe58 [ 1194.871104][T27849] [ 1194.871111][T27849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1195.069927][T15082] usb 6-1: USB disconnect, device number 82 [ 1195.435852][T15082] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1195.468926][T27863] fuse: Bad value for 'fd' [ 1195.515949][ T5847] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1195.598557][T15082] usb 6-1: config 0 has an invalid interface number: 192 but max is 0 [ 1195.610771][T15082] usb 6-1: config 0 has no interface number 0 [ 1195.620339][T15082] usb 6-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 1195.630691][T15082] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 1195.639826][T15082] usb 6-1: Product: syz [ 1195.644016][T15082] usb 6-1: Manufacturer: syz [ 1195.651852][T15082] usb 6-1: SerialNumber: syz [ 1195.656745][ T5847] usb 5-1: device descriptor read/64, error -71 [ 1195.666955][T15082] usb 6-1: config 0 descriptor?? [ 1195.896358][ T5847] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1195.908876][T15082] usb 6-1: USB disconnect, device number 83 [ 1196.045990][ T5847] usb 5-1: device descriptor read/64, error -71 [ 1196.160391][ T5847] usb usb5-port1: attempt power cycle [ 1196.285751][T15082] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1196.462918][T15082] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1196.474768][T15082] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.484480][T15082] usb 6-1: Product: syz [ 1196.489227][T15082] usb 6-1: Manufacturer: syz [ 1196.494005][T15082] usb 6-1: SerialNumber: syz [ 1196.508217][T15082] usb 6-1: config 0 descriptor?? [ 1196.535904][ T5847] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1196.547995][ T3099] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1196.568254][ T5847] usb 5-1: device descriptor read/8, error -71 [ 1196.711622][ T3099] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1196.722541][T15082] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1196.728993][ T3099] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.739729][ T3099] usb 10-1: Product: syz [ 1196.744028][ T3099] usb 10-1: Manufacturer: syz [ 1196.750946][ T3099] usb 10-1: SerialNumber: syz [ 1196.761170][ T3099] usb 10-1: config 0 descriptor?? [ 1196.815887][ T5847] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1196.850818][ T5847] usb 5-1: device descriptor read/8, error -71 [ 1196.970515][ T5847] usb usb5-port1: unable to enumerate USB device [ 1196.983180][T27881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.992506][T27881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.001551][T27881] usb usb8: check_ctrlrecip: process 27881 (syz.9.5078) requesting ep 01 but needs 81 [ 1197.012227][T27881] usb usb8: usbfs: process 27881 (syz.9.5078) did not claim interface 0 before use [ 1197.022125][T27881] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1197.125805][T18286] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1197.238431][ T3099] usb 10-1: USB disconnect, device number 25 [ 1197.296383][T18286] usb 4-1: Using ep0 maxpacket: 8 [ 1197.305621][T18286] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.316482][T18286] usb 4-1: config 0 has no interfaces? [ 1197.324859][T18286] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1197.334350][T18286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.342513][T18286] usb 4-1: Product: syz [ 1197.347090][T15082] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1197.356758][T18286] usb 4-1: Manufacturer: syz [ 1197.361424][T18286] usb 4-1: SerialNumber: syz [ 1197.375157][T18286] usb 4-1: config 0 descriptor?? [ 1198.015884][T18286] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1198.175943][T18286] usb 10-1: Using ep0 maxpacket: 8 [ 1198.183969][T18286] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1198.192534][T18286] usb 10-1: config 0 has no interface number 0 [ 1198.199158][T18286] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1198.210356][T18286] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1198.221301][T18286] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1198.234456][T18286] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1198.243724][T18286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.256557][T18286] usb 10-1: config 0 descriptor?? [ 1198.271548][T18286] ldusb 10-1:0.55: Interrupt in endpoint not found [ 1198.480204][T18286] usb 10-1: USB disconnect, device number 26 [ 1198.788815][T27909] atomic_op ffff88802530d998 conn xmit_atomic 0000000000000000 [ 1198.993507][T18286] usb 6-1: USB disconnect, device number 84 [ 1199.130588][T27918] openvswitch: netlink: Unknown key attributes 2 [ 1199.505808][T18286] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1199.515784][ T5906] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1199.655953][T18286] usb 6-1: Using ep0 maxpacket: 8 [ 1199.664261][T18286] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1199.673441][T18286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.681923][T18286] usb 6-1: Product: syz [ 1199.686211][T18286] usb 6-1: Manufacturer: syz [ 1199.687832][ T5906] usb 10-1: Using ep0 maxpacket: 8 [ 1199.690820][T18286] usb 6-1: SerialNumber: syz [ 1199.703666][ T5906] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1199.706823][T18286] usb 6-1: config 0 descriptor?? [ 1199.719847][ T5906] usb 10-1: config 0 has no interface number 0 [ 1199.732690][ T5906] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1199.745516][ T5906] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1199.749874][T15082] usb 4-1: USB disconnect, device number 44 [ 1199.764358][ T5906] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1199.785171][ T5906] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1199.814805][ T5906] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1199.835497][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.849876][ T5906] usb 10-1: config 0 descriptor?? [ 1199.869068][ T5906] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1199.930142][T27930] FAULT_INJECTION: forcing a failure. [ 1199.930142][T27930] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.942775][T18286] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1199.947451][T18286] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1199.960696][T27930] CPU: 1 UID: 0 PID: 27930 Comm: syz.3.5096 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1199.960724][T27930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1199.960735][T27930] Call Trace: [ 1199.960743][T27930] [ 1199.960751][T27930] dump_stack_lvl+0x189/0x250 [ 1199.960782][T27930] ? __pfx____ratelimit+0x10/0x10 [ 1199.960809][T27930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1199.960833][T27930] ? __pfx__printk+0x10/0x10 [ 1199.960864][T27930] ? __pfx___might_resched+0x10/0x10 [ 1199.960884][T27930] ? fs_reclaim_acquire+0x7d/0x100 [ 1199.960909][T27930] should_fail_ex+0x414/0x560 [ 1199.960935][T27930] should_failslab+0xa8/0x100 [ 1199.960955][T27930] __kmalloc_cache_noprof+0x70/0x3d0 [ 1199.960981][T27930] ? binder_alloc_new_buf+0x268/0x2f30 [ 1199.961013][T27930] binder_alloc_new_buf+0x268/0x2f30 [ 1199.961046][T27930] ? __lock_acquire+0xab9/0xd20 [ 1199.961079][T27930] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 1199.961115][T27930] binder_transaction+0x22d0/0x6470 [ 1199.961133][T27930] ? ima_match_policy+0x10b/0x2150 [ 1199.961164][T27930] ? register_lock_class+0x51/0x320 [ 1199.961210][T27930] ? __lock_acquire+0xab9/0xd20 [ 1199.961233][T27930] ? __pfx_binder_transaction+0x10/0x10 [ 1199.961258][T27930] ? __lock_acquire+0xab9/0xd20 [ 1199.961287][T27930] ? __might_fault+0xb0/0x130 [ 1199.961334][T27930] binder_ioctl_write_read+0xd6a/0xa040 [ 1199.961384][T27930] ? __kernel_text_address+0xd/0x40 [ 1199.961403][T27930] ? arch_stack_walk+0xfc/0x150 [ 1199.961449][T27930] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1199.961478][T27930] ? stack_trace_save+0x9c/0xe0 [ 1199.961503][T27930] ? __pfx_stack_trace_save+0x10/0x10 [ 1199.961532][T27930] ? stack_depot_save_flags+0x40/0x860 [ 1199.961565][T27930] ? kasan_save_track+0x4f/0x80 [ 1199.961589][T27930] ? kasan_save_track+0x3e/0x80 [ 1199.961614][T27930] ? kasan_save_free_info+0x46/0x50 [ 1199.961636][T27930] ? __kasan_slab_free+0x5b/0x80 [ 1199.961662][T27930] ? kfree+0x18e/0x440 [ 1199.961686][T27930] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1199.961705][T27930] ? security_file_ioctl+0xcb/0x2d0 [ 1199.961734][T27930] ? __se_sys_ioctl+0x47/0x170 [ 1199.961763][T27930] ? do_syscall_64+0xfa/0x3b0 [ 1199.961780][T27930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.961824][T27930] ? __pfx_binder_debug+0x10/0x10 [ 1199.961852][T27930] ? do_raw_spin_lock+0x121/0x290 [ 1199.961900][T27930] ? _raw_spin_unlock+0x28/0x50 [ 1199.961926][T27930] ? binder_get_thread+0x178/0x6d0 [ 1199.961961][T27930] binder_ioctl+0x3e0/0x19c0 [ 1199.961981][T27930] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1199.962002][T27930] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1199.962028][T27930] ? do_vfs_ioctl+0xbe8/0x1430 [ 1199.962046][T27930] ? __pfx_binder_ioctl+0x10/0x10 [ 1199.962067][T27930] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1199.962101][T27930] ? __lock_acquire+0xab9/0xd20 [ 1199.962146][T27930] ? __fget_files+0x2a/0x420 [ 1199.962174][T27930] ? __fget_files+0x2a/0x420 [ 1199.962195][T27930] ? __fget_files+0x3a0/0x420 [ 1199.962214][T27930] ? __fget_files+0x2a/0x420 [ 1199.962239][T27930] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1199.962264][T27930] ? __pfx_binder_ioctl+0x10/0x10 [ 1199.962282][T27930] __se_sys_ioctl+0xfc/0x170 [ 1199.962311][T27930] do_syscall_64+0xfa/0x3b0 [ 1199.962327][T27930] ? lockdep_hardirqs_on+0x9c/0x150 [ 1199.962352][T27930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.962370][T27930] ? clear_bhb_loop+0x60/0xb0 [ 1199.962392][T27930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.962410][T27930] RIP: 0033:0x7f97a8b8eb69 [ 1199.962428][T27930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.962452][T27930] RSP: 002b:00007f97a9a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.962474][T27930] RAX: ffffffffffffffda RBX: 00007f97a8db5fa0 RCX: 00007f97a8b8eb69 [ 1199.962488][T27930] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1199.962500][T27930] RBP: 00007f97a9a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.962511][T27930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.962523][T27930] R13: 0000000000000000 R14: 00007f97a8db5fa0 R15: 00007ffd1969c248 [ 1199.962552][T27930] [ 1200.075729][T18421] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1200.099794][T18286] usb 6-1: USB disconnect, device number 85 [ 1200.285903][T18421] usb 5-1: Using ep0 maxpacket: 8 [ 1200.408159][T18421] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1200.429018][T18421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.437939][T18421] usb 5-1: Product: syz [ 1200.442189][T18421] usb 5-1: Manufacturer: syz [ 1200.446940][T18421] usb 5-1: SerialNumber: syz [ 1200.455413][T18421] usb 5-1: config 0 descriptor?? [ 1200.460642][ T5906] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1200.647533][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1200.657970][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.666356][ T5906] usb 4-1: Product: syz [ 1200.670640][ T5906] usb 4-1: Manufacturer: syz [ 1200.678002][T18421] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1200.687204][ T5906] usb 4-1: SerialNumber: syz [ 1200.706252][ T5906] usb 4-1: config 0 descriptor?? [ 1200.793098][T27936] fuse: Bad value for 'fd' [ 1200.923158][ T5906] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1201.284201][T27926] usb usb8: usbfs: process 27926 (syz.4.5094) did not claim interface 0 before use [ 1201.329045][T18421] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1201.384273][T18421] usb 5-1: USB disconnect, device number 105 [ 1201.512689][T27953] FAULT_INJECTION: forcing a failure. [ 1201.512689][T27953] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.526006][T27953] CPU: 0 UID: 0 PID: 27953 Comm: syz.5.5105 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1201.526037][T27953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1201.526050][T27953] Call Trace: [ 1201.526059][T27953] [ 1201.526069][T27953] dump_stack_lvl+0x189/0x250 [ 1201.526102][T27953] ? __pfx____ratelimit+0x10/0x10 [ 1201.526131][T27953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1201.526159][T27953] ? __pfx__printk+0x10/0x10 [ 1201.526192][T27953] ? __pfx___might_resched+0x10/0x10 [ 1201.526215][T27953] ? fs_reclaim_acquire+0x7d/0x100 [ 1201.526245][T27953] should_fail_ex+0x414/0x560 [ 1201.526274][T27953] should_failslab+0xa8/0x100 [ 1201.526296][T27953] __kmalloc_cache_noprof+0x70/0x3d0 [ 1201.526325][T27953] ? binder_alloc_new_buf+0x1d88/0x2f30 [ 1201.526359][T27953] binder_alloc_new_buf+0x1d88/0x2f30 [ 1201.526413][T27953] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 1201.526455][T27953] binder_transaction+0x22d0/0x6470 [ 1201.526526][T27953] ? __lock_acquire+0xab9/0xd20 [ 1201.526554][T27953] ? __pfx_binder_transaction+0x10/0x10 [ 1201.526581][T27953] ? __lock_acquire+0xab9/0xd20 [ 1201.526611][T27953] ? __might_fault+0xb0/0x130 [ 1201.526665][T27953] binder_ioctl_write_read+0xd6a/0xa040 [ 1201.526720][T27953] ? __kernel_text_address+0xd/0x40 [ 1201.526742][T27953] ? arch_stack_walk+0xfc/0x150 [ 1201.526783][T27953] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1201.526810][T27953] ? stack_trace_save+0x9c/0xe0 [ 1201.526837][T27953] ? __pfx_stack_trace_save+0x10/0x10 [ 1201.526867][T27953] ? stack_depot_save_flags+0x40/0x860 [ 1201.526900][T27953] ? kasan_save_track+0x4f/0x80 [ 1201.526926][T27953] ? kasan_save_track+0x3e/0x80 [ 1201.526950][T27953] ? kasan_save_free_info+0x46/0x50 [ 1201.526972][T27953] ? __kasan_slab_free+0x5b/0x80 [ 1201.526997][T27953] ? kfree+0x18e/0x440 [ 1201.527020][T27953] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1201.527039][T27953] ? security_file_ioctl+0xcb/0x2d0 [ 1201.527067][T27953] ? __se_sys_ioctl+0x47/0x170 [ 1201.527095][T27953] ? do_syscall_64+0xfa/0x3b0 [ 1201.527111][T27953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.527154][T27953] ? __pfx_binder_debug+0x10/0x10 [ 1201.527181][T27953] ? do_raw_spin_lock+0x121/0x290 [ 1201.527224][T27953] ? _raw_spin_unlock+0x28/0x50 [ 1201.527249][T27953] ? binder_get_thread+0x178/0x6d0 [ 1201.527284][T27953] binder_ioctl+0x3e0/0x19c0 [ 1201.527303][T27953] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1201.527326][T27953] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1201.527349][T27953] ? do_vfs_ioctl+0xbe8/0x1430 [ 1201.527368][T27953] ? __pfx_binder_ioctl+0x10/0x10 [ 1201.527387][T27953] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1201.527421][T27953] ? __lock_acquire+0xab9/0xd20 [ 1201.527464][T27953] ? __fget_files+0x2a/0x420 [ 1201.527501][T27953] ? __fget_files+0x2a/0x420 [ 1201.527525][T27953] ? __fget_files+0x3a0/0x420 [ 1201.527547][T27953] ? __fget_files+0x2a/0x420 [ 1201.527573][T27953] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1201.527601][T27953] ? __pfx_binder_ioctl+0x10/0x10 [ 1201.527621][T27953] __se_sys_ioctl+0xfc/0x170 [ 1201.527655][T27953] do_syscall_64+0xfa/0x3b0 [ 1201.527671][T27953] ? lockdep_hardirqs_on+0x9c/0x150 [ 1201.527700][T27953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.527720][T27953] ? clear_bhb_loop+0x60/0xb0 [ 1201.527745][T27953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.527765][T27953] RIP: 0033:0x7f1b7d38eb69 [ 1201.527784][T27953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.527802][T27953] RSP: 002b:00007f1b7e1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.527826][T27953] RAX: ffffffffffffffda RBX: 00007f1b7d5b5fa0 RCX: 00007f1b7d38eb69 [ 1201.527842][T27953] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1201.527857][T27953] RBP: 00007f1b7e1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.527870][T27953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1201.527882][T27953] R13: 0000000000000000 R14: 00007f1b7d5b5fa0 R15: 00007ffe7b309128 [ 1201.527914][T27953] [ 1202.005809][ T5906] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1202.139538][T27961] fuse: Bad value for 'fd' [ 1202.184228][ T5906] usb 10-1: USB disconnect, device number 27 [ 1202.213451][ T5906] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1202.282013][ T5850] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 1202.353433][T27968] 9pnet: Found fid 0 not clunked [ 1202.407564][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1202.417794][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u9:2 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1202.417826][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1202.417841][ T5850] Workqueue: hci2 hci_rx_work [ 1202.417874][ T5850] Call Trace: [ 1202.417884][ T5850] [ 1202.417894][ T5850] dump_stack_lvl+0x189/0x250 [ 1202.417932][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1202.417963][ T5850] ? __pfx__printk+0x10/0x10 [ 1202.418001][ T5850] ? kernfs_path_from_node+0x250/0x290 [ 1202.418032][ T5850] ? kernfs_path_from_node+0x2f/0x290 [ 1202.418068][ T5850] sysfs_create_dir_ns+0x259/0x280 [ 1202.418101][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1202.418135][ T5850] ? do_raw_spin_unlock+0x122/0x240 [ 1202.418171][ T5850] kobject_add_internal+0x59f/0xb40 [ 1202.418205][ T5850] kobject_add+0x155/0x220 [ 1202.418233][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 1202.418256][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 1202.418289][ T5850] ? get_device_parent+0x366/0x3a0 [ 1202.418328][ T5850] device_add+0x408/0xb50 [ 1202.418366][ T5850] hci_conn_add_sysfs+0xd5/0x1e0 [ 1202.418396][ T5850] le_conn_complete_evt+0xc3a/0x1220 [ 1202.418443][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1202.418473][ T5850] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1202.418504][ T5850] ? __asan_memcpy+0x40/0x70 [ 1202.418539][ T5850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1202.418570][ T5850] ? skb_pull_data+0xfb/0x200 [ 1202.418603][ T5850] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1202.418637][ T5850] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1202.418676][ T5850] hci_event_packet+0x78f/0x1200 [ 1202.418719][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1202.418755][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 1202.418795][ T5850] ? hci_send_to_monitor+0xe2/0x570 [ 1202.418834][ T5850] hci_rx_work+0x46a/0xe80 [ 1202.418871][ T5850] ? process_scheduled_works+0x9ef/0x17b0 [ 1202.418900][ T5850] process_scheduled_works+0xade/0x17b0 [ 1202.418955][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 1202.418997][ T5850] worker_thread+0x8a0/0xda0 [ 1202.419052][ T5850] kthread+0x70e/0x8a0 [ 1202.419086][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 1202.419110][ T5850] ? __pfx_kthread+0x10/0x10 [ 1202.419141][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 1202.419167][ T5850] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.419195][ T5850] ? __pfx_kthread+0x10/0x10 [ 1202.419227][ T5850] ret_from_fork+0x3fc/0x770 [ 1202.419258][ T5850] ? __pfx_ret_from_fork+0x10/0x10 [ 1202.419291][ T5850] ? __switch_to_asm+0x39/0x70 [ 1202.419322][ T5850] ? __switch_to_asm+0x33/0x70 [ 1202.419351][ T5850] ? __pfx_kthread+0x10/0x10 [ 1202.419383][ T5850] ret_from_fork_asm+0x1a/0x30 [ 1202.419421][ T5850] [ 1202.419455][ T5850] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1202.708807][ T5850] Bluetooth: hci2: failed to register connection device [ 1202.772238][T27973] fuse: Bad value for 'fd' [ 1203.098071][T18421] usb 4-1: USB disconnect, device number 45 [ 1203.216720][ T5906] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1203.376210][T18286] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1203.389823][ T5906] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1203.399822][ T5906] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1203.409635][ T5906] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1203.425344][ T5906] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1203.435191][ T5906] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.443985][ T5906] usb 10-1: Product: syz [ 1203.448327][ T5906] usb 10-1: Manufacturer: syz [ 1203.453019][ T5906] usb 10-1: SerialNumber: syz [ 1203.463276][ T5906] hub 10-1:1.0: bad descriptor, ignoring hub [ 1203.470508][ T5906] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1203.526472][T18286] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1203.535322][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.545091][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.556438][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.564226][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.569961][T18421] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1203.573249][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.591804][ T5905] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1203.604481][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.613652][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.623641][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.634743][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.642582][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.651570][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.662563][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.670861][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.672595][ T5906] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1203.680670][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.702048][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.713066][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.723591][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.739738][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.747968][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.757556][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.768608][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.776635][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.786641][T18286] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1203.787611][T18421] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1203.801413][T18286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1203.807496][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.814494][T18286] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1203.822501][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.845807][T18286] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1203.847335][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.854186][T18286] usb 5-1: Product: syz [ 1203.854209][T18286] usb 5-1: Manufacturer: syz [ 1203.854223][T18286] usb 5-1: SerialNumber: syz [ 1203.858842][T18286] usb 5-1: config 0 descriptor?? [ 1203.867455][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.879078][T18286] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 1203.892088][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1203.892188][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1203.923166][ T5905] usb 6-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1203.934308][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.953994][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1203.963534][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1203.970472][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.985186][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.002096][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1204.012419][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1204.020380][ T5905] usb 6-1: config 0 descriptor?? [ 1204.031675][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.043315][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1204.052637][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1204.062364][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.073022][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1204.082253][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1204.091886][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.110702][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1204.119868][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1204.128567][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.139495][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1204.148516][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1204.160182][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.170896][T18421] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1204.180430][T18421] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1204.204885][T18421] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1204.214530][T18421] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1204.223078][T18421] usb 4-1: Product: syz [ 1204.227505][T18421] usb 4-1: Manufacturer: syz [ 1204.232489][T18421] usb 4-1: SerialNumber: syz [ 1204.242656][T18421] usb 4-1: config 0 descriptor?? [ 1204.264226][T18421] yurex 4-1:0.0: Could not find endpoints [ 1204.290615][T27993] fuse: Unknown parameter '' [ 1204.475006][ T5847] usb 4-1: USB disconnect, device number 46 [ 1204.638492][T27977] usb 10-1: reset high-speed USB device number 28 using dummy_hcd [ 1204.641174][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1204.658522][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1204.671513][ T5905] usb 6-1: USB disconnect, device number 86 [ 1204.736080][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 1204.909916][ T5905] usb 5-1: USB disconnect, device number 106 [ 1204.923044][ T5905] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 1205.021608][T27996] fuse: Bad value for 'fd' [ 1205.063091][T18421] usb 10-1: USB disconnect, device number 28 [ 1205.072769][T18421] usblp0: removed [ 1205.141124][T27998] FAULT_INJECTION: forcing a failure. [ 1205.141124][T27998] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.153920][T27998] CPU: 0 UID: 0 PID: 27998 Comm: syz.3.5122 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1205.153950][T27998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1205.153969][T27998] Call Trace: [ 1205.153977][T27998] [ 1205.153987][T27998] dump_stack_lvl+0x189/0x250 [ 1205.154020][T27998] ? __pfx____ratelimit+0x10/0x10 [ 1205.154050][T27998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.154076][T27998] ? __pfx__printk+0x10/0x10 [ 1205.154111][T27998] ? __pfx___might_resched+0x10/0x10 [ 1205.154134][T27998] ? fs_reclaim_acquire+0x7d/0x100 [ 1205.154156][T27998] should_fail_ex+0x414/0x560 [ 1205.154180][T27998] should_failslab+0xa8/0x100 [ 1205.154197][T27998] __kmalloc_noprof+0xcb/0x4f0 [ 1205.154220][T27998] ? tomoyo_encode+0x28b/0x550 [ 1205.154244][T27998] tomoyo_encode+0x28b/0x550 [ 1205.154269][T27998] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1205.154299][T27998] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1205.154315][T27998] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1205.154335][T27998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1205.154367][T27998] ? __lock_acquire+0xab9/0xd20 [ 1205.154402][T27998] ? __fget_files+0x2a/0x420 [ 1205.154425][T27998] ? __fget_files+0x2a/0x420 [ 1205.154443][T27998] ? __fget_files+0x3a0/0x420 [ 1205.154460][T27998] ? __fget_files+0x2a/0x420 [ 1205.154482][T27998] security_file_ioctl+0xcb/0x2d0 [ 1205.154509][T27998] __se_sys_ioctl+0x47/0x170 [ 1205.154535][T27998] do_syscall_64+0xfa/0x3b0 [ 1205.154549][T27998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.154572][T27998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.154588][T27998] ? clear_bhb_loop+0x60/0xb0 [ 1205.154608][T27998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.154622][T27998] RIP: 0033:0x7f97a8b8eb69 [ 1205.154649][T27998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.154663][T27998] RSP: 002b:00007f97a9a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1205.154682][T27998] RAX: ffffffffffffffda RBX: 00007f97a8db5fa0 RCX: 00007f97a8b8eb69 [ 1205.154700][T27998] RDX: 0000200000000140 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1205.154711][T27998] RBP: 00007f97a9a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.154722][T27998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.154731][T27998] R13: 0000000000000000 R14: 00007f97a8db5fa0 R15: 00007ffd1969c248 [ 1205.154757][T27998] [ 1205.154917][T27998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1205.734084][T28014] NILFS (rnullb0): couldn't find nilfs on the device [ 1205.800182][T28016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1205.816904][T28016] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1205.856206][T18421] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 1206.034122][T18421] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1206.043594][T18421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.053732][T18421] usb 6-1: Product: syz [ 1206.060638][T18421] usb 6-1: Manufacturer: syz [ 1206.065440][T18421] usb 6-1: SerialNumber: syz [ 1206.073648][T18421] usb 6-1: config 0 descriptor?? [ 1206.246169][T15082] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1206.310551][T18421] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1206.385848][T15082] usb 10-1: device descriptor read/64, error -71 [ 1206.436182][T18286] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1206.585804][T18286] usb 5-1: Using ep0 maxpacket: 8 [ 1206.593844][T18286] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1206.608683][T18286] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1206.626606][T15082] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1206.634385][T18286] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1206.647754][T18286] usb 5-1: Product: syz [ 1206.652750][T18286] usb 5-1: Manufacturer: syz [ 1206.658860][T18286] usb 5-1: SerialNumber: syz [ 1206.676557][T18286] usb 5-1: config 0 descriptor?? [ 1206.775806][T15082] usb 10-1: device descriptor read/64, error -71 [ 1206.888215][T15082] usb usb10-port1: attempt power cycle [ 1206.896910][T18286] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1206.915156][T18421] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1207.095577][T28026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.116673][T28026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.245995][T15082] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1207.266554][T15082] usb 10-1: device descriptor read/8, error -71 [ 1207.506153][T15082] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 1207.528490][T18286] gspca_sunplus: reg_w_riv err -71 [ 1207.544340][T15082] usb 10-1: device descriptor read/8, error -71 [ 1207.562941][T18286] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1207.598420][T18286] usb 5-1: USB disconnect, device number 107 [ 1207.686158][T15082] usb usb10-port1: unable to enumerate USB device [ 1207.772045][T28055] misc userio: The device must be registered before sending interrupts [ 1208.026165][T18421] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1208.184463][T18421] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1208.194035][ T5850] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1208.205727][T18421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.215204][T18421] usb 4-1: Product: syz [ 1208.224708][T18421] usb 4-1: Manufacturer: syz [ 1208.233073][T18421] usb 4-1: SerialNumber: syz [ 1208.246578][T18421] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1208.258708][T18421] r8152-cfgselector 4-1: config 0 descriptor?? [ 1208.473565][T28061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.597265][T15082] usb 6-1: USB disconnect, device number 87 [ 1208.679848][ T5905] r8152-cfgselector 4-1: USB disconnect, device number 47 [ 1208.717063][T18286] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 1208.801620][T28069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.855782][T18286] usb 5-1: device descriptor read/64, error -71 [ 1209.126576][T18286] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 1209.186043][ T5938] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1209.244545][T28081] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1209.266009][T18286] usb 5-1: device descriptor read/64, error -71 [ 1209.365886][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 1209.374245][ T5938] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1209.384216][ T5938] usb 6-1: config 0 has no interface number 0 [ 1209.385867][ T5905] usb 10-1: new low-speed USB device number 33 using dummy_hcd [ 1209.391043][T18286] usb usb5-port1: attempt power cycle [ 1209.403971][ T5938] usb 6-1: too many endpoints for config 0 interface 55 altsetting 255: 154, using maximum allowed: 30 [ 1209.416382][ T5938] usb 6-1: config 0 interface 55 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1209.427822][ T5938] usb 6-1: config 0 interface 55 altsetting 255 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1209.439662][ T5938] usb 6-1: config 0 interface 55 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1209.450863][ T5938] usb 6-1: config 0 interface 55 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 154 [ 1209.464808][ T5938] usb 6-1: config 0 interface 55 has no altsetting 0 [ 1209.472331][ T5938] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1209.481557][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.494218][ T5938] usb 6-1: config 0 descriptor?? [ 1209.503879][ T5938] ldusb 6-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 1209.515301][ T5938] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1209.548274][ T5905] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.559355][ T5905] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1209.573882][ T5905] usb 10-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1209.583122][ T5905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.594900][ T5905] usb 10-1: config 0 descriptor?? [ 1209.606012][T15082] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1209.708059][T28075] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 1209.755921][T18286] usb 5-1: new low-speed USB device number 110 using dummy_hcd [ 1209.769255][ T5938] usb 6-1: USB disconnect, device number 88 [ 1209.769374][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1209.777139][T18286] usb 5-1: device descriptor read/8, error -71 [ 1209.783068][T28075] ldusb 6-1:0.55: Couldn't submit HID_REQ_SET_REPORT -71 [ 1209.805964][ T5938] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1209.815839][T15082] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1209.827677][T15082] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.836299][T15082] usb 4-1: Product: syz [ 1209.842594][T15082] usb 4-1: Manufacturer: syz [ 1209.852831][T15082] usb 4-1: SerialNumber: syz [ 1209.862201][T15082] usb 4-1: config 0 descriptor?? [ 1210.057934][T18286] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 1210.077292][T15082] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1210.086801][T18286] usb 5-1: device descriptor read/8, error -71 [ 1210.196992][T18286] usb usb5-port1: unable to enumerate USB device [ 1210.683954][T15082] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1210.816192][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1210.816317][ T5167] Bluetooth: hci0: command 0x0406 tx timeout [ 1211.037464][T18286] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1211.195875][T18286] usb 6-1: Using ep0 maxpacket: 16 [ 1211.203411][T18286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.214752][T18286] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.227489][T18286] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1211.236743][T18286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.252706][T18286] usb 6-1: config 0 descriptor?? [ 1211.676001][ T5906] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1211.840494][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1211.850501][ T5906] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1211.860417][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.876728][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1211.882090][T18286] usbhid 6-1:0.0: can't add hid device: -32 [ 1211.886029][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.886057][ T5906] usb 5-1: Product: syz [ 1211.904298][ T5906] usb 5-1: Manufacturer: syz [ 1211.910359][ T5906] usb 5-1: SerialNumber: syz [ 1211.915202][T18286] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1211.927640][ T5906] hub 5-1:1.0: bad descriptor, ignoring hub [ 1211.934701][ T5906] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1212.043037][ T5905] usb 10-1: string descriptor 0 read error: -71 [ 1212.070143][ T5905] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input95 [ 1212.088426][ T5202] bcm5974 10-1:0.0: could not read from device [ 1212.116501][ T5202] bcm5974 10-1:0.0: could not read from device [ 1212.128436][ T5905] usb 10-1: USB disconnect, device number 33 [ 1212.147467][ T5906] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1212.284367][T28113] No control pipe specified [ 1212.380151][ T5906] usb 4-1: USB disconnect, device number 48 [ 1212.430680][T28117] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1212.439013][T18421] usb 5-1: USB disconnect, device number 112 [ 1212.443085][T28117] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1212.443085][T28117] [ 1212.449504][T18421] usblp0: removed [ 1212.625734][ T5905] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1212.785748][ T5905] usb 10-1: Using ep0 maxpacket: 16 [ 1212.793220][ T5905] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.807948][ T5906] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1212.820118][ T5905] usb 10-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1212.830975][ T5905] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.840080][ T5905] usb 10-1: Product: syz [ 1212.844596][ T5905] usb 10-1: Manufacturer: syz [ 1212.849467][ T5905] usb 10-1: SerialNumber: syz [ 1212.858309][ T5905] usb 10-1: config 0 descriptor?? [ 1212.870950][ T5905] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1212.877817][ T5905] gspca_stv06xx: st6422 sensor detected [ 1212.997868][ T5906] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 1213.015198][ T5906] usb 4-1: config 0 has no interface number 0 [ 1213.022607][ T5906] usb 4-1: config 0 interface 104 has no altsetting 0 [ 1213.030695][ T5167] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 1213.041274][ T5906] usb 4-1: New USB device found, idVendor=045e, idProduct=04e2, bcdDevice=1c.4d [ 1213.055792][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.063958][ T5906] usb 4-1: Product: syz [ 1213.068536][ T5906] usb 4-1: Manufacturer: syz [ 1213.073439][ T5906] usb 4-1: SerialNumber: syz [ 1213.085094][ T5906] usb 4-1: config 0 descriptor?? [ 1213.096151][ T5906] ipaq 4-1:0.104: PocketPC PDA converter detected [ 1213.103072][ T5906] usb 4-1: active config #0 != 1 ?? [ 1213.299592][ T5938] usb 4-1: USB disconnect, device number 49 [ 1213.341559][ T5905] STV06xx 10-1:0.0: probe with driver STV06xx failed with error -71 [ 1213.354332][ T5905] usb 10-1: USB disconnect, device number 34 [ 1213.435874][ T5906] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1213.586082][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 1213.593812][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1213.601641][ T5906] usb 5-1: can't read configurations, error -61 [ 1213.735803][ T5906] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1213.885838][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 1213.910358][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1213.919878][ T5906] usb 5-1: can't read configurations, error -61 [ 1213.941096][ T5906] usb usb5-port1: attempt power cycle [ 1214.216021][ T5905] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1214.288924][ T5906] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1214.300030][ T5938] usb 6-1: USB disconnect, device number 89 [ 1214.318813][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 1214.339403][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1214.357229][ T5905] usb 10-1: device descriptor read/64, error -71 [ 1214.369286][ T5906] usb 5-1: can't read configurations, error -61 [ 1214.407465][T18421] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1214.515924][ T5906] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1214.539180][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 1214.552704][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1214.562810][ T5906] usb 5-1: can't read configurations, error -61 [ 1214.571258][ T5906] usb usb5-port1: unable to enumerate USB device [ 1214.583586][T18421] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1214.597430][T18421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.605541][T18421] usb 4-1: Product: syz [ 1214.610983][T18421] usb 4-1: Manufacturer: syz [ 1214.616090][ T5905] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1214.624260][T18421] usb 4-1: SerialNumber: syz [ 1214.640396][T18421] usb 4-1: config 0 descriptor?? [ 1214.755815][ T5905] usb 10-1: device descriptor read/64, error -71 [ 1214.861629][T18421] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1214.872334][ T5905] usb usb10-port1: attempt power cycle [ 1215.232063][ T5905] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1215.252609][T28158] fuse: Bad value for 'fd' [ 1215.266836][ T5905] usb 10-1: device descriptor read/8, error -71 [ 1215.515856][ T5905] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1215.548169][ T5905] usb 10-1: device descriptor read/8, error -71 [ 1215.655878][T15082] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 1215.668624][ T5905] usb usb10-port1: unable to enumerate USB device [ 1215.818856][T15082] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1215.832536][T15082] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1215.845347][T15082] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1215.855997][T15082] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.873380][T15082] usb 6-1: config 0 descriptor?? [ 1215.881940][T18421] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1216.124682][T15082] ath6kl: Failed to submit usb control message: -71 [ 1216.132305][T15082] ath6kl: unable to send the bmi data to the device: -71 [ 1216.140000][T15082] ath6kl: Unable to send get target info: -71 [ 1216.159055][T15082] ath6kl: Failed to init ath6kl core: -71 [ 1216.167285][T15082] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1216.196215][T15082] usb 6-1: USB disconnect, device number 90 [ 1216.698616][T15082] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1216.860820][T15082] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1216.870068][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.880345][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1216.889406][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1216.898541][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.910153][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1216.919494][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1216.927510][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.939402][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1216.948420][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1216.956437][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.966896][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1216.993374][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1217.001741][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.014071][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1217.028547][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1217.040736][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.053015][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1217.064784][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1217.071691][ T5938] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1217.089980][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.109968][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1217.124751][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1217.141344][T15082] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.151698][T15082] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1217.160702][T15082] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1217.179481][T15082] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1217.195869][T15082] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1217.204257][T15082] usb 5-1: Product: syz [ 1217.216219][T15082] usb 5-1: Manufacturer: syz [ 1217.220866][T15082] usb 5-1: SerialNumber: syz [ 1217.229523][T18286] usb 4-1: USB disconnect, device number 50 [ 1217.243640][T15082] usb 5-1: config 0 descriptor?? [ 1217.273669][ T5938] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1217.300105][T15082] yurex 5-1:0.0: Could not find endpoints [ 1217.306091][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.314122][ T5938] usb 6-1: Product: syz [ 1217.329561][ T5938] usb 6-1: Manufacturer: syz [ 1217.346176][ T5938] usb 6-1: SerialNumber: syz [ 1217.366255][ T5938] usb 6-1: config 0 descriptor?? [ 1217.520939][T28177] netlink: 'syz.4.5171': attribute type 2 has an invalid length. [ 1217.528950][T28177] netlink: 'syz.4.5171': attribute type 1 has an invalid length. [ 1217.543125][ T5938] usb 5-1: USB disconnect, device number 117 [ 1217.612513][T18286] usb 6-1: USB disconnect, device number 91 [ 1217.809845][T18421] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1217.992030][T18421] usb 4-1: config 9 interface 0 altsetting 10 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1218.003216][T18421] usb 4-1: config 9 interface 0 has no altsetting 0 [ 1218.014483][T18421] usb 4-1: New USB device found, idVendor=147a, idProduct=e03e, bcdDevice= 8.f4 [ 1218.023813][T18421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.032041][T18421] usb 4-1: Product: syz [ 1218.036743][T18421] usb 4-1: Manufacturer: syz [ 1218.041416][T18421] usb 4-1: SerialNumber: syz [ 1218.057218][T28196] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1218.132358][T28208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.272892][T28196] /dev/rnullb0: Can't open blockdev [ 1218.297419][T18421] usb 4-1: USB disconnect, device number 51 [ 1218.425778][T18286] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1218.576024][T18286] usb 6-1: Using ep0 maxpacket: 8 [ 1218.597140][T18286] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1218.605413][T18286] usb 6-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 1218.616233][T18286] usb 6-1: config 0 has no interface number 0 [ 1218.622387][T18286] usb 6-1: config 0 interface 55 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1218.636084][T18286] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1218.645151][T18286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.664979][T18286] usb 6-1: config 0 descriptor?? [ 1218.690556][T18286] ldusb 6-1:0.55: Interrupt in endpoint not found [ 1218.913002][T28210] openvswitch: netlink: Key type 4103 is out of range max 32 [ 1218.928670][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.945433][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.954394][ T5850] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1219.035784][ T5938] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 1219.111053][T28228] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.246889][ T5938] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1219.264939][ T5938] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.273632][ T5938] usb 10-1: Product: syz [ 1219.279002][ T5938] usb 10-1: Manufacturer: syz [ 1219.284020][ T5938] usb 10-1: SerialNumber: syz [ 1219.296124][ T5938] usb 10-1: config 0 descriptor?? [ 1219.303773][T28233] FAULT_INJECTION: forcing a failure. [ 1219.303773][T28233] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.321023][T28233] CPU: 0 UID: 0 PID: 28233 Comm: syz.3.5188 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1219.321054][T28233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1219.321073][T28233] Call Trace: [ 1219.321082][T28233] [ 1219.321091][T28233] dump_stack_lvl+0x189/0x250 [ 1219.321127][T28233] ? __pfx____ratelimit+0x10/0x10 [ 1219.321157][T28233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.321185][T28233] ? __pfx__printk+0x10/0x10 [ 1219.321219][T28233] ? __pfx___might_resched+0x10/0x10 [ 1219.321242][T28233] ? fs_reclaim_acquire+0x7d/0x100 [ 1219.321270][T28233] should_fail_ex+0x414/0x560 [ 1219.321300][T28233] should_failslab+0xa8/0x100 [ 1219.321324][T28233] __kmalloc_cache_noprof+0x70/0x3d0 [ 1219.321355][T28233] ? binder_alloc_new_buf+0x1d88/0x2f30 [ 1219.321390][T28233] binder_alloc_new_buf+0x1d88/0x2f30 [ 1219.321449][T28233] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 1219.321501][T28233] binder_transaction+0x22d0/0x6470 [ 1219.321523][T28233] ? ima_match_policy+0x10b/0x2150 [ 1219.321559][T28233] ? register_lock_class+0x51/0x320 [ 1219.321611][T28233] ? __lock_acquire+0xab9/0xd20 [ 1219.321639][T28233] ? __pfx_binder_transaction+0x10/0x10 [ 1219.321669][T28233] ? __lock_acquire+0xab9/0xd20 [ 1219.321702][T28233] ? __might_fault+0xb0/0x130 [ 1219.321759][T28233] binder_ioctl_write_read+0xd6a/0xa040 [ 1219.321817][T28233] ? __kernel_text_address+0xd/0x40 [ 1219.321840][T28233] ? arch_stack_walk+0xfc/0x150 [ 1219.321882][T28233] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1219.321912][T28233] ? stack_trace_save+0x9c/0xe0 [ 1219.321940][T28233] ? __pfx_stack_trace_save+0x10/0x10 [ 1219.321970][T28233] ? stack_depot_save_flags+0x40/0x860 [ 1219.322005][T28233] ? kasan_save_track+0x4f/0x80 [ 1219.322031][T28233] ? kasan_save_track+0x3e/0x80 [ 1219.322057][T28233] ? kasan_save_free_info+0x46/0x50 [ 1219.322079][T28233] ? __kasan_slab_free+0x5b/0x80 [ 1219.322107][T28233] ? kfree+0x18e/0x440 [ 1219.322133][T28233] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1219.322152][T28233] ? security_file_ioctl+0xcb/0x2d0 [ 1219.322181][T28233] ? __se_sys_ioctl+0x47/0x170 [ 1219.322211][T28233] ? do_syscall_64+0xfa/0x3b0 [ 1219.322228][T28233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.322272][T28233] ? __pfx_binder_debug+0x10/0x10 [ 1219.322300][T28233] ? do_raw_spin_lock+0x121/0x290 [ 1219.322346][T28233] ? _raw_spin_unlock+0x28/0x50 [ 1219.322372][T28233] ? binder_get_thread+0x178/0x6d0 [ 1219.322409][T28233] binder_ioctl+0x3e0/0x19c0 [ 1219.322429][T28233] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1219.322452][T28233] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1219.322486][T28233] ? do_vfs_ioctl+0xbe8/0x1430 [ 1219.322505][T28233] ? __pfx_binder_ioctl+0x10/0x10 [ 1219.322526][T28233] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1219.322562][T28233] ? __lock_acquire+0xab9/0xd20 [ 1219.322606][T28233] ? __fget_files+0x2a/0x420 [ 1219.322635][T28233] ? __fget_files+0x2a/0x420 [ 1219.322660][T28233] ? __fget_files+0x3a0/0x420 [ 1219.322683][T28233] ? __fget_files+0x2a/0x420 [ 1219.322712][T28233] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1219.322739][T28233] ? __pfx_binder_ioctl+0x10/0x10 [ 1219.322759][T28233] __se_sys_ioctl+0xfc/0x170 [ 1219.322793][T28233] do_syscall_64+0xfa/0x3b0 [ 1219.322812][T28233] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.322841][T28233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.322862][T28233] ? clear_bhb_loop+0x60/0xb0 [ 1219.322888][T28233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.322909][T28233] RIP: 0033:0x7f97a8b8eb69 [ 1219.322928][T28233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.322947][T28233] RSP: 002b:00007f97a9a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1219.322970][T28233] RAX: ffffffffffffffda RBX: 00007f97a8db5fa0 RCX: 00007f97a8b8eb69 [ 1219.322986][T28233] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1219.323000][T28233] RBP: 00007f97a9a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.323013][T28233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.323026][T28233] R13: 0000000000000000 R14: 00007f97a8db5fa0 R15: 00007ffd1969c248 [ 1219.323059][T28233] [ 1219.805719][T18421] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1219.965760][T18421] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1219.979812][T18421] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1219.999317][T18421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.018672][T18421] usb 5-1: Product: syz [ 1220.028782][T18421] usb 5-1: Manufacturer: syz [ 1220.043333][T18421] usb 5-1: SerialNumber: syz [ 1220.184623][ T5167] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1220.185734][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 1220.206220][ T5938] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1220.501985][T18421] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1220.544345][T28252] /dev/rnullb0: Can't open blockdev [ 1220.771957][T28260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.798830][T28260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.828649][T28266] sctp: [Deprecated]: syz.3.5197 (pid 28266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1220.828649][T28266] Use struct sctp_sack_info instead [ 1221.129213][ T5905] usb 6-1: USB disconnect, device number 92 [ 1221.140429][ T5938] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1221.158411][T18421] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1221.338474][T18421] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1221.351546][T18421] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.362141][T18421] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1221.381233][T18421] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1221.390720][T18421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.398823][T18421] usb 4-1: Product: syz [ 1221.403012][T18421] usb 4-1: Manufacturer: syz [ 1221.407713][T18421] usb 4-1: SerialNumber: syz [ 1221.427551][T18421] usb 4-1: config 0 descriptor?? [ 1221.441130][T18421] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1221.465007][T18421] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1221.645380][T18421] usb 4-1: USB disconnect, device number 52 [ 1222.177553][T18421] usb 10-1: USB disconnect, device number 39 [ 1222.193606][ C0] usblp0: nonzero write bulk status received: -71 [ 1222.218876][ T5905] usb 5-1: USB disconnect, device number 118 [ 1222.237838][ T5905] usblp0: removed [ 1222.299359][T28272] NILFS (rnullb0): couldn't find nilfs on the device [ 1222.419105][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1222.425577][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 1222.644644][T28287] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1222.736957][T18286] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1222.905955][T18286] usb 10-1: Using ep0 maxpacket: 8 [ 1222.911665][ T5938] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1222.921318][T18286] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1222.929748][T18286] usb 10-1: config 0 has no interface number 0 [ 1222.936097][T18286] usb 10-1: too many endpoints for config 0 interface 55 altsetting 255: 154, using maximum allowed: 30 [ 1222.947313][T18286] usb 10-1: config 0 interface 55 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1222.958425][T18286] usb 10-1: config 0 interface 55 altsetting 255 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1222.970561][T18286] usb 10-1: config 0 interface 55 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1222.982641][T18286] usb 10-1: config 0 interface 55 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 154 [ 1222.996920][T18286] usb 10-1: config 0 interface 55 has no altsetting 0 [ 1223.003770][T18286] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1223.013049][T18286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.024662][T18286] usb 10-1: config 0 descriptor?? [ 1223.035894][T18421] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1223.036160][T18286] ldusb 10-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 1223.054377][T18286] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1223.075821][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 1223.082659][ T5938] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1223.090847][ T5938] usb 4-1: config 0 has no interface number 0 [ 1223.097080][ T5938] usb 4-1: too many endpoints for config 0 interface 55 altsetting 255: 154, using maximum allowed: 30 [ 1223.108740][ T5938] usb 4-1: config 0 interface 55 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1223.119786][ T5938] usb 4-1: config 0 interface 55 altsetting 255 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1223.131599][ T5938] usb 4-1: config 0 interface 55 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1223.143668][ T5938] usb 4-1: config 0 interface 55 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 154 [ 1223.157587][ T5938] usb 4-1: config 0 interface 55 has no altsetting 0 [ 1223.164406][ T5938] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1223.174029][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.185057][ T5938] usb 4-1: config 0 descriptor?? [ 1223.195456][ T5938] ldusb 4-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 1223.206874][T18421] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1223.212272][ T5938] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1223.222160][T18421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.240904][T28285] ldusb 10-1:0.55: Write buffer overflow, 1 bytes dropped [ 1223.250435][T28285] FAULT_INJECTION: forcing a failure. [ 1223.250435][T28285] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.263881][T28285] CPU: 0 UID: 0 PID: 28285 Comm: syz.9.5203 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1223.263911][T28285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1223.263923][T28285] Call Trace: [ 1223.263932][T28285] [ 1223.263941][T28285] dump_stack_lvl+0x189/0x250 [ 1223.263963][T18421] usb 6-1: Product: syz [ 1223.263974][T28285] ? __pfx____ratelimit+0x10/0x10 [ 1223.264005][T28285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1223.264029][T28285] ? __pfx__printk+0x10/0x10 [ 1223.264056][T28285] ? __pfx___might_resched+0x10/0x10 [ 1223.264078][T28285] ? fs_reclaim_acquire+0x7d/0x100 [ 1223.264102][T28285] should_fail_ex+0x414/0x560 [ 1223.264129][T28285] should_failslab+0xa8/0x100 [ 1223.264149][T28285] __kmalloc_cache_noprof+0x70/0x3d0 [ 1223.264176][T28285] ? usb_control_msg+0x73/0x3e0 [ 1223.264199][T28285] usb_control_msg+0x73/0x3e0 [ 1223.264225][T28285] ld_usb_write+0x7f4/0xca0 [ 1223.264260][T28285] ? __pfx_ld_usb_write+0x10/0x10 [ 1223.264279][T28285] ? common_file_perm+0x1b5/0x230 [ 1223.264306][T28285] ? bpf_lsm_file_permission+0x9/0x20 [ 1223.264330][T28285] ? security_file_permission+0x75/0x290 [ 1223.264359][T28285] ? rw_verify_area+0x255/0x4d0 [ 1223.264377][T28285] ? __lock_acquire+0xab9/0xd20 [ 1223.264393][T28285] ? __pfx_ld_usb_write+0x10/0x10 [ 1223.264417][T28285] vfs_write+0x27e/0xa90 [ 1223.264455][T28285] ? __pfx_vfs_write+0x10/0x10 [ 1223.264476][T28285] ? __fget_files+0x2a/0x420 [ 1223.264500][T28285] ? __fget_files+0x2a/0x420 [ 1223.264521][T28285] ? __fget_files+0x3a0/0x420 [ 1223.264541][T28285] ? __fget_files+0x2a/0x420 [ 1223.264571][T28285] ksys_write+0x145/0x250 [ 1223.264593][T28285] ? __pfx_ksys_write+0x10/0x10 [ 1223.264609][T28285] ? rcu_is_watching+0x15/0xb0 [ 1223.264636][T28285] ? do_syscall_64+0xbe/0x3b0 [ 1223.264657][T28285] do_syscall_64+0xfa/0x3b0 [ 1223.264673][T28285] ? lockdep_hardirqs_on+0x9c/0x150 [ 1223.264703][T28285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.264722][T28285] ? clear_bhb_loop+0x60/0xb0 [ 1223.264745][T28285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.264763][T28285] RIP: 0033:0x7fda1478eb69 [ 1223.264781][T28285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.264797][T28285] RSP: 002b:00007fda1555a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1223.264817][T28285] RAX: ffffffffffffffda RBX: 00007fda149b5fa0 RCX: 00007fda1478eb69 [ 1223.264831][T28285] RDX: 0000000000000051 RSI: 0000200000000280 RDI: 0000000000000004 [ 1223.264843][T28285] RBP: 00007fda1555a090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.264854][T28285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1223.264865][T28285] R13: 0000000000000000 R14: 00007fda149b5fa0 R15: 00007ffef7bcf508 [ 1223.264896][T28285] [ 1223.264992][T28285] ldusb 10-1:0.55: Couldn't submit HID_REQ_SET_REPORT -12 [ 1223.282309][T18421] usb 6-1: Manufacturer: syz [ 1223.333653][ T5938] usb 10-1: USB disconnect, device number 40 [ 1223.334021][T18421] usb 6-1: SerialNumber: syz [ 1223.356857][ T5938] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1223.379397][T18421] usb 6-1: config 0 descriptor?? [ 1223.403141][ T9] usb 4-1: USB disconnect, device number 53 [ 1223.597767][ T9] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 1223.615590][T18421] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1224.046342][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 1224.061059][T28301] FAULT_INJECTION: forcing a failure. [ 1224.061059][T28301] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.074242][T28301] CPU: 1 UID: 0 PID: 28301 Comm: syz.3.5209 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1224.074270][T28301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1224.074283][T28301] Call Trace: [ 1224.074292][T28301] [ 1224.074300][T28301] dump_stack_lvl+0x189/0x250 [ 1224.074339][T28301] ? __pfx____ratelimit+0x10/0x10 [ 1224.074368][T28301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1224.074405][T28301] ? __pfx__printk+0x10/0x10 [ 1224.074437][T28301] ? __pfx___might_resched+0x10/0x10 [ 1224.074460][T28301] ? fs_reclaim_acquire+0x7d/0x100 [ 1224.074489][T28301] should_fail_ex+0x414/0x560 [ 1224.074516][T28301] should_failslab+0xa8/0x100 [ 1224.074530][T28301] __kmalloc_cache_noprof+0x70/0x3d0 [ 1224.074548][T28301] ? binder_translate_fd+0x1ad/0x690 [ 1224.074565][T28301] binder_translate_fd+0x1ad/0x690 [ 1224.074582][T28301] binder_transaction+0x3c31/0x6470 [ 1224.074594][T28301] ? ima_match_policy+0x10b/0x2150 [ 1224.074638][T28301] ? __pfx_binder_transaction+0x10/0x10 [ 1224.074654][T28301] ? __lock_acquire+0xab9/0xd20 [ 1224.074673][T28301] ? __might_fault+0xb0/0x130 [ 1224.074704][T28301] binder_ioctl_write_read+0xd6a/0xa040 [ 1224.074736][T28301] ? __kernel_text_address+0xd/0x40 [ 1224.074749][T28301] ? arch_stack_walk+0xfc/0x150 [ 1224.074772][T28301] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1224.074789][T28301] ? stack_trace_save+0x9c/0xe0 [ 1224.074805][T28301] ? __pfx_stack_trace_save+0x10/0x10 [ 1224.074822][T28301] ? stack_depot_save_flags+0x40/0x860 [ 1224.074841][T28301] ? kasan_save_track+0x4f/0x80 [ 1224.074861][T28301] ? kasan_save_track+0x3e/0x80 [ 1224.074885][T28301] ? kasan_save_free_info+0x46/0x50 [ 1224.074905][T28301] ? __kasan_slab_free+0x5b/0x80 [ 1224.074931][T28301] ? kfree+0x18e/0x440 [ 1224.074950][T28301] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1224.074962][T28301] ? security_file_ioctl+0xcb/0x2d0 [ 1224.074978][T28301] ? __se_sys_ioctl+0x47/0x170 [ 1224.074994][T28301] ? do_syscall_64+0xfa/0x3b0 [ 1224.075004][T28301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.075029][T28301] ? __pfx_binder_debug+0x10/0x10 [ 1224.075045][T28301] ? do_raw_spin_lock+0x121/0x290 [ 1224.075071][T28301] ? _raw_spin_unlock+0x28/0x50 [ 1224.075086][T28301] ? binder_get_thread+0x178/0x6d0 [ 1224.075107][T28301] binder_ioctl+0x3e0/0x19c0 [ 1224.075119][T28301] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1224.075131][T28301] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1224.075149][T28301] ? do_vfs_ioctl+0xbe8/0x1430 [ 1224.075159][T28301] ? __pfx_binder_ioctl+0x10/0x10 [ 1224.075171][T28301] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1224.075190][T28301] ? __lock_acquire+0xab9/0xd20 [ 1224.075214][T28301] ? __fget_files+0x2a/0x420 [ 1224.075231][T28301] ? __fget_files+0x2a/0x420 [ 1224.075244][T28301] ? __fget_files+0x3a0/0x420 [ 1224.075257][T28301] ? __fget_files+0x2a/0x420 [ 1224.075273][T28301] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1224.075291][T28301] ? __pfx_binder_ioctl+0x10/0x10 [ 1224.075302][T28301] __se_sys_ioctl+0xfc/0x170 [ 1224.075321][T28301] do_syscall_64+0xfa/0x3b0 [ 1224.075332][T28301] ? lockdep_hardirqs_on+0x9c/0x150 [ 1224.075348][T28301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.075360][T28301] ? clear_bhb_loop+0x60/0xb0 [ 1224.075375][T28301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.075394][T28301] RIP: 0033:0x7f97a8b8eb69 [ 1224.075407][T28301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.075418][T28301] RSP: 002b:00007f97a9a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1224.075434][T28301] RAX: ffffffffffffffda RBX: 00007f97a8db5fa0 RCX: 00007f97a8b8eb69 [ 1224.075443][T28301] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1224.075452][T28301] RBP: 00007f97a9a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.075459][T28301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1224.075467][T28301] R13: 0000000000000000 R14: 00007f97a8db5fa0 R15: 00007ffd1969c248 [ 1224.075486][T28301] [ 1224.460429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1224.505701][ T5850] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1224.512512][T21395] Bluetooth: hci0: command 0x0406 tx timeout [ 1224.792732][T18421] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1224.999861][T28314] fuse: Bad value for 'user_id' [ 1225.004796][T28314] fuse: Bad value for 'user_id' [ 1225.525017][T28327] netlink: 'syz.4.5218': attribute type 9 has an invalid length. [ 1225.532956][T28327] netlink: 212384 bytes leftover after parsing attributes in process `syz.4.5218'. [ 1225.543653][ T5938] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1225.552682][T28327] openvswitch: netlink: Message has 5 unknown bytes. [ 1225.685873][ T5938] usb 4-1: device descriptor read/64, error -71 [ 1225.835119][T18286] usb 6-1: USB disconnect, device number 93 [ 1225.926189][ T5938] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1226.075937][ T5938] usb 4-1: device descriptor read/64, error -71 [ 1226.095820][ T5167] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1226.187809][ T5938] usb usb4-port1: attempt power cycle [ 1226.283355][T28338] /dev/rnullb0: Can't open blockdev [ 1226.546450][ T5938] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1226.567801][ T5938] usb 4-1: device descriptor read/8, error -71 [ 1226.681467][ T5905] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1226.695743][T18286] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1226.761112][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fbf4400: rx timeout, send abort [ 1226.805731][ T5938] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1226.846849][ T5938] usb 4-1: device descriptor read/8, error -71 [ 1226.857994][T18286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.885177][T18286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.907189][T18286] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1226.929320][T18286] usb 10-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 1226.941793][T18286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.959334][T18286] usb 10-1: config 0 descriptor?? [ 1226.974775][ T5938] usb usb4-port1: unable to enumerate USB device [ 1227.261265][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fbf4000: rx timeout, send abort [ 1227.271305][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fbf4400: abort rx timeout. Force session deactivation [ 1227.399434][T28344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.414638][T28344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.425937][ T5905] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1227.445554][T18286] hid (null): invalid report_size 1701381599 [ 1227.468730][T18286] itetech 0003:048D:8595.0031: invalid report_size 1701381599 [ 1227.489439][T18286] itetech 0003:048D:8595.0031: item 0 4 1 7 parsing failed [ 1227.499261][T18286] itetech 0003:048D:8595.0031: probe with driver itetech failed with error -22 [ 1227.610750][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1227.620758][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.631109][ T5905] usb 5-1: Product: syz [ 1227.635312][ T5905] usb 5-1: Manufacturer: syz [ 1227.640406][ T5905] usb 5-1: SerialNumber: syz [ 1227.650402][T18421] usb 10-1: USB disconnect, device number 41 [ 1227.664279][ T5905] usb 5-1: config 0 descriptor?? [ 1227.669554][ T5906] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1227.769625][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802fbf4000: abort rx timeout. Force session deactivation [ 1227.845920][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 1227.864341][ T5906] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1227.874722][ T5906] usb 6-1: config 0 has no interface number 0 [ 1227.882916][ T5906] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1227.894994][ T5906] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1227.911405][ T5905] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1227.923009][ T5906] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1227.941270][ T5906] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1227.958998][ T5906] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1227.969062][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.984185][ T5906] usb 6-1: config 0 descriptor?? [ 1228.013799][ T5906] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1228.310356][T28363] exFAT-fs (rnullb0): invalid boot record signature [ 1228.324330][T28363] exFAT-fs (rnullb0): failed to read boot sector [ 1228.338693][T28363] exFAT-fs (rnullb0): failed to recognize exfat type [ 1228.347474][T28363] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1228.718072][ T5906] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1228.876040][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 1228.891249][ T5906] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1228.900643][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1228.908813][ T5906] usb 4-1: Product: syz [ 1228.913033][ T5906] usb 4-1: Manufacturer: syz [ 1228.918635][ T5906] usb 4-1: SerialNumber: syz [ 1228.926351][ T5905] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1228.937980][ T5906] usb 4-1: config 0 descriptor?? [ 1228.953863][ T5906] usbtest 4-1:0.0: FX2 device [ 1228.959242][ T5906] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 1229.163859][T28367] program syz.3.5233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1229.184085][T18421] usb 4-1: USB disconnect, device number 58 [ 1229.895750][T18421] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1229.971313][ T5906] usb 5-1: USB disconnect, device number 120 [ 1230.057958][T18421] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1230.069906][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.080876][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.090329][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.105148][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.115457][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.130561][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.139748][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.150863][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.160003][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.168942][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.179901][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.189010][ T5905] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1230.196705][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.205134][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.216340][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.225335][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.233593][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.243983][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.253534][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.262460][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.267407][T18286] usb 6-1: USB disconnect, device number 94 [ 1230.276038][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.295244][T18286] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1230.303874][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.313862][T18421] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.324373][T18421] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1230.334285][T18421] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1230.344954][T18421] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1230.355006][T18421] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1230.363551][ T5906] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1230.371292][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 1230.376377][T18421] usb 10-1: Product: syz [ 1230.380644][T18421] usb 10-1: Manufacturer: syz [ 1230.385821][T18421] usb 10-1: SerialNumber: syz [ 1230.394330][ T5905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1230.404532][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.413826][T18421] usb 10-1: config 0 descriptor?? [ 1230.419381][ T5905] usb 4-1: Product: syz [ 1230.423694][ T5905] usb 4-1: Manufacturer: syz [ 1230.430779][T18421] yurex 10-1:0.0: Could not find endpoints [ 1230.437059][ T5905] usb 4-1: SerialNumber: syz [ 1230.446955][ T5905] usb 4-1: config 0 descriptor?? [ 1230.537444][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.547723][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1230.561198][ T5906] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0a, bcdDevice= 0.00 [ 1230.570378][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.582429][ T5906] usb 5-1: config 0 descriptor?? [ 1230.662733][ T5905] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1230.990450][ T5167] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1231.033441][ T5906] corsair-psu 0003:1B1C:1C0A.0032: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0a] on usb-dummy_hcd.4-1/input0 [ 1231.080884][ T5905] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1231.116829][ T5906] corsair-psu 0003:1B1C:1C0A.0032: unable to initialize device (-38) [ 1231.136416][ T5905] usb 4-1: USB disconnect, device number 59 [ 1231.175200][ T5906] corsair-psu 0003:1B1C:1C0A.0032: probe with driver corsair-psu failed with error -38 [ 1231.221496][ T5906] usb 5-1: USB disconnect, device number 121 [ 1231.520151][T28398] vxfs: WRONG superblock magic 00000000 at 1 [ 1231.526859][T28398] vxfs: WRONG superblock magic 00000000 at 8 [ 1231.532873][T28398] vxfs: can't find superblock. [ 1231.866457][ T5938] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1231.895740][T18286] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1231.995979][ T5847] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1232.020088][ T5938] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1232.029891][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.038334][ T5938] usb 6-1: Product: syz [ 1232.042519][ T5938] usb 6-1: Manufacturer: syz [ 1232.047293][ T5938] usb 6-1: SerialNumber: syz [ 1232.054167][ T5938] usb 6-1: config 0 descriptor?? [ 1232.059269][T18286] usb 4-1: Using ep0 maxpacket: 8 [ 1232.066636][T18286] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.080023][T18286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 48120, setting to 1024 [ 1232.091967][T18286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 1232.102110][T18286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1232.115126][T18286] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1232.124342][T18286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.135244][T18286] usb 4-1: config 0 descriptor?? [ 1232.142050][T28404] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1232.160868][ T5847] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1232.170554][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1232.179969][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.188099][ T5847] usb 5-1: Product: syz [ 1232.192929][ T5847] usb 5-1: Manufacturer: syz [ 1232.199554][ T5847] usb 5-1: SerialNumber: syz [ 1232.271296][ T5938] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1232.357367][ T5905] usb 4-1: USB disconnect, device number 60 [ 1232.618088][ T5847] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 122 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1232.637499][ T5847] usb 5-1: USB disconnect, device number 122 [ 1232.649949][ T5847] usblp0: removed [ 1232.696153][ T5905] usb 10-1: USB disconnect, device number 42 [ 1232.970071][T28416] fuse: blksize only supported for fuseblk [ 1232.996458][T28418] Invalid logical block size (2) [ 1233.281467][ T5938] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1233.639780][ T5905] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1233.805725][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 1233.818018][ T5905] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1233.842475][ T5905] usb 5-1: config 0 has no interface number 0 [ 1233.851067][ T5905] usb 5-1: too many endpoints for config 0 interface 55 altsetting 255: 154, using maximum allowed: 30 [ 1233.863005][ T5905] usb 5-1: config 0 interface 55 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1233.874405][ T5905] usb 5-1: config 0 interface 55 altsetting 255 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1233.886461][ T5905] usb 5-1: config 0 interface 55 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.898883][ T5905] usb 5-1: config 0 interface 55 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 154 [ 1233.920579][ T5905] usb 5-1: config 0 interface 55 has no altsetting 0 [ 1233.935767][ T5905] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1233.950741][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.969316][ T5905] usb 5-1: config 0 descriptor?? [ 1233.984211][ T5905] ldusb 5-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 1233.998164][ T5905] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1234.179412][T28422] ldusb 5-1:0.55: Write buffer overflow, 1 bytes dropped [ 1234.185801][ T5938] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1234.186808][T28422] FAULT_INJECTION: forcing a failure. [ 1234.186808][T28422] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.205954][ T9] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1234.206919][T28422] CPU: 1 UID: 0 PID: 28422 Comm: syz.4.5254 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1234.206944][T28422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1234.206962][T28422] Call Trace: [ 1234.206971][T28422] [ 1234.206979][T28422] dump_stack_lvl+0x189/0x250 [ 1234.207010][T28422] ? __pfx____ratelimit+0x10/0x10 [ 1234.207035][T28422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1234.207057][T28422] ? __pfx__printk+0x10/0x10 [ 1234.207087][T28422] ? __pfx___might_resched+0x10/0x10 [ 1234.207106][T28422] ? fs_reclaim_acquire+0x7d/0x100 [ 1234.207132][T28422] should_fail_ex+0x414/0x560 [ 1234.207158][T28422] should_failslab+0xa8/0x100 [ 1234.207178][T28422] __kmalloc_noprof+0xcb/0x4f0 [ 1234.207202][T28422] ? __kasan_kmalloc+0x93/0xb0 [ 1234.207226][T28422] ? usb_alloc_urb+0x46/0x150 [ 1234.207257][T28422] usb_alloc_urb+0x46/0x150 [ 1234.207296][T28422] usb_control_msg+0x118/0x3e0 [ 1234.207322][T28422] ld_usb_write+0x7f4/0xca0 [ 1234.207358][T28422] ? __pfx_ld_usb_write+0x10/0x10 [ 1234.207377][T28422] ? common_file_perm+0x1b5/0x230 [ 1234.207404][T28422] ? bpf_lsm_file_permission+0x9/0x20 [ 1234.207427][T28422] ? security_file_permission+0x75/0x290 [ 1234.207456][T28422] ? rw_verify_area+0x255/0x4d0 [ 1234.207474][T28422] ? __lock_acquire+0xab9/0xd20 [ 1234.207491][T28422] ? __pfx_ld_usb_write+0x10/0x10 [ 1234.207514][T28422] vfs_write+0x27e/0xa90 [ 1234.207542][T28422] ? __pfx_vfs_write+0x10/0x10 [ 1234.207563][T28422] ? __fget_files+0x2a/0x420 [ 1234.207588][T28422] ? __fget_files+0x2a/0x420 [ 1234.207609][T28422] ? __fget_files+0x3a0/0x420 [ 1234.207629][T28422] ? __fget_files+0x2a/0x420 [ 1234.207660][T28422] ksys_write+0x145/0x250 [ 1234.207682][T28422] ? __pfx_ksys_write+0x10/0x10 [ 1234.207699][T28422] ? rcu_is_watching+0x15/0xb0 [ 1234.207724][T28422] ? do_syscall_64+0xbe/0x3b0 [ 1234.207746][T28422] do_syscall_64+0xfa/0x3b0 [ 1234.207760][T28422] ? lockdep_hardirqs_on+0x9c/0x150 [ 1234.207785][T28422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.207804][T28422] ? clear_bhb_loop+0x60/0xb0 [ 1234.207827][T28422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.207844][T28422] RIP: 0033:0x7f813bd8eb69 [ 1234.207862][T28422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.207878][T28422] RSP: 002b:00007f813cccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1234.207898][T28422] RAX: ffffffffffffffda RBX: 00007f813bfb5fa0 RCX: 00007f813bd8eb69 [ 1234.207913][T28422] RDX: 0000000000000051 RSI: 0000200000000280 RDI: 0000000000000004 [ 1234.207925][T28422] RBP: 00007f813cccd090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.207937][T28422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.207948][T28422] R13: 0000000000000000 R14: 00007f813bfb5fa0 R15: 00007fff58a1fe58 [ 1234.207978][T28422] [ 1234.208076][T28422] ldusb 5-1:0.55: Couldn't submit HID_REQ_SET_REPORT -12 [ 1234.232557][ T5847] usb 5-1: USB disconnect, device number 123 [ 1234.236009][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1234.522354][ T5847] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1234.595908][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 1234.601115][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1234.608137][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.618422][ T5938] usb 4-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1234.631847][ T5938] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1234.639365][ T9] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1234.647817][ T9] usb 10-1: config 0 has no interface number 0 [ 1234.654652][ T9] usb 10-1: too many endpoints for config 0 interface 55 altsetting 255: 154, using maximum allowed: 30 [ 1234.669567][ T9] usb 10-1: config 0 interface 55 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1234.671248][ T5906] usb 6-1: USB disconnect, device number 95 [ 1234.681271][ T9] usb 10-1: config 0 interface 55 altsetting 255 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1234.707191][ T5938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1234.720236][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.733650][ T5938] usb 4-1: Product: syz [ 1234.745828][ T9] usb 10-1: config 0 interface 55 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1234.762708][ T5938] usb 4-1: Manufacturer: syz [ 1234.772940][ T5938] usb 4-1: SerialNumber: syz [ 1234.782684][ T9] usb 10-1: config 0 interface 55 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 154 [ 1234.797684][ T9] usb 10-1: config 0 interface 55 has no altsetting 0 [ 1234.804871][ T9] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1234.814550][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.828008][ T9] usb 10-1: config 0 descriptor?? [ 1234.837861][ T9] ldusb 10-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 1234.848905][ T9] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1234.858417][ T5847] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1235.016600][T28425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.025576][T28425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.035821][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 1235.051999][ T5847] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1235.052910][T28427] ldusb 10-1:0.55: Write buffer overflow, 1 bytes dropped [ 1235.076389][ T5847] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1235.087424][ T5847] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.088224][ T5906] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1235.098643][ T5847] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.118736][ T5847] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1235.132838][ T9] usb 10-1: USB disconnect, device number 43 [ 1235.133043][ C1] ldusb 10-1:0.55: usb_submit_urb failed (-19) [ 1235.145114][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.145558][T28427] ldusb 10-1:0.55: Couldn't submit HID_REQ_SET_REPORT -71 [ 1235.177059][ T9] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1235.224914][ T5938] usb 4-1: bad CDC descriptors [ 1235.249454][ T5938] usb 4-1: USB disconnect, device number 61 [ 1235.332095][ T5906] usb 6-1: config index 0 descriptor too short (expected 7768, got 18) [ 1235.340543][ T5906] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 1235.349763][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.361562][ T5906] usb 6-1: config 0 descriptor?? [ 1235.373289][ T5906] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG [ 1235.400557][ T5847] usb 5-1: GET_CAPABILITIES returned 0 [ 1235.407994][ T5847] usbtmc 5-1:16.0: can't read capabilities [ 1235.576121][ T5906] usb 6-1: USB disconnect, device number 96 [ 1235.616998][T28431] QAT: failed to copy from user cfg_data. [ 1235.624564][ T5905] usb 5-1: USB disconnect, device number 124 [ 1236.085717][ T5847] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1236.239245][ T5847] usb 10-1: config 0 has an invalid interface number: 32 but max is 2 [ 1236.255154][ T5847] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.266759][T28449] program syz.5.5262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1236.280599][ T5847] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1236.290891][ T5847] usb 10-1: config 0 has no interface number 0 [ 1236.300734][ T5847] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1236.319372][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.335239][ T5847] usb 10-1: config 0 descriptor?? [ 1236.695963][ T5847] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1236.744157][T28461] netlink: 336 bytes leftover after parsing attributes in process `syz.3.5268'. [ 1236.862828][ T5847] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1236.874675][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.884559][ T5847] usb 5-1: Product: syz [ 1236.891469][ T5847] usb 5-1: Manufacturer: syz [ 1236.898077][ T5167] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 1236.898428][ T5847] usb 5-1: SerialNumber: syz [ 1236.917213][ T5847] usb 5-1: config 0 descriptor?? [ 1237.134809][ T5847] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1237.210423][ T5905] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1237.367488][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.385271][ T5905] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1237.395223][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.406278][ T5905] usb 4-1: config 0 descriptor?? [ 1237.515776][ T5906] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1237.628806][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 1237.637401][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1237.650347][ T5905] usb 4-1: USB disconnect, device number 62 [ 1237.676133][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 1237.684756][ T5906] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1237.693270][ T5906] usb 6-1: config 0 has no interface number 0 [ 1237.702531][ T5906] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1237.712086][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.720296][ T5906] usb 6-1: Product: syz [ 1237.724937][ T5906] usb 6-1: Manufacturer: syz [ 1237.729640][ T5906] usb 6-1: SerialNumber: syz [ 1237.738030][ T5906] usb 6-1: config 0 descriptor?? [ 1237.747541][ T5906] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1237.952012][ T5906] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1237.969240][ T5906] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1238.142508][ T5847] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1238.151493][T28468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.162640][ T5905] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1238.171583][T28468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.341565][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.352747][ T5905] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1238.361963][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.372696][ T5905] usb 4-1: config 0 descriptor?? [ 1238.393535][T28469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1238.402769][T28469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1238.451109][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1238.451625][ T5847] usb 6-1: USB disconnect, device number 97 [ 1238.491515][ T5847] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1238.519472][ T5847] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1238.544798][ T5847] quatech2 6-1:0.51: device disconnected [ 1238.751896][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.759688][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.788307][ T5905] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor [ 1238.802753][ T5847] usb 10-1: USB disconnect, device number 44 [ 1238.835158][ T5905] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0033/input/input96 [ 1238.981927][ T5905] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1239.393232][T28483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5274'. [ 1239.529301][ T5905] usb 5-1: USB disconnect, device number 125 [ 1240.296332][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a5d5400: rx timeout, send abort [ 1240.415221][ T5850] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1240.431996][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: kworker/u9:2 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1240.432028][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1240.432044][ T5850] Workqueue: hci1 hci_rx_work [ 1240.432075][ T5850] Call Trace: [ 1240.432090][ T5850] [ 1240.432100][ T5850] dump_stack_lvl+0x189/0x250 [ 1240.432137][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1240.432168][ T5850] ? __pfx__printk+0x10/0x10 [ 1240.432201][ T5850] ? kernfs_path_from_node+0x250/0x290 [ 1240.432240][ T5850] ? kernfs_path_from_node+0x2f/0x290 [ 1240.432274][ T5850] sysfs_create_dir_ns+0x259/0x280 [ 1240.432306][ T5850] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1240.432338][ T5850] ? do_raw_spin_unlock+0x122/0x240 [ 1240.432371][ T5850] kobject_add_internal+0x59f/0xb40 [ 1240.432402][ T5850] kobject_add+0x155/0x220 [ 1240.432428][ T5850] ? __pfx_kobject_add+0x10/0x10 [ 1240.432451][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 1240.432482][ T5850] ? get_device_parent+0x366/0x3a0 [ 1240.432518][ T5850] device_add+0x408/0xb50 [ 1240.432552][ T5850] hci_conn_add_sysfs+0xd5/0x1e0 [ 1240.432583][ T5850] le_conn_complete_evt+0xc3a/0x1220 [ 1240.432629][ T5850] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1240.432661][ T5850] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 1240.432697][ T5850] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1240.432725][ T5850] ? skb_pull_data+0xfb/0x200 [ 1240.432755][ T5850] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1240.432781][ T5850] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1240.432802][ T5850] hci_event_packet+0x78f/0x1200 [ 1240.432820][ T5850] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1240.432841][ T5850] ? __pfx_hci_event_packet+0x10/0x10 [ 1240.432858][ T5850] ? kcov_remote_start+0x4d3/0x7f0 [ 1240.432878][ T5850] ? warn_bogus_irq_restore+0x20/0x40 [ 1240.432898][ T5850] ? hci_send_to_monitor+0xe2/0x570 [ 1240.432919][ T5850] hci_rx_work+0x46a/0xe80 [ 1240.432941][ T5850] ? process_scheduled_works+0x9ef/0x17b0 [ 1240.432958][ T5850] process_scheduled_works+0xade/0x17b0 [ 1240.433000][ T5850] ? __pfx_process_scheduled_works+0x10/0x10 [ 1240.433041][ T5850] worker_thread+0x8a0/0xda0 [ 1240.433080][ T5850] kthread+0x70e/0x8a0 [ 1240.433099][ T5850] ? __pfx_worker_thread+0x10/0x10 [ 1240.433113][ T5850] ? __pfx_kthread+0x10/0x10 [ 1240.433131][ T5850] ? _raw_spin_unlock_irq+0x23/0x50 [ 1240.433148][ T5850] ? lockdep_hardirqs_on+0x9c/0x150 [ 1240.433163][ T5850] ? __pfx_kthread+0x10/0x10 [ 1240.433181][ T5850] ret_from_fork+0x3fc/0x770 [ 1240.433197][ T5850] ? __pfx_ret_from_fork+0x10/0x10 [ 1240.433225][ T5850] ? __switch_to_asm+0x39/0x70 [ 1240.433242][ T5850] ? __switch_to_asm+0x33/0x70 [ 1240.433258][ T5850] ? __pfx_kthread+0x10/0x10 [ 1240.433276][ T5850] ret_from_fork_asm+0x1a/0x30 [ 1240.433298][ T5850] [ 1240.433387][ T5850] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1240.682394][ T5906] usb 4-1: USB disconnect, device number 63 [ 1240.684212][ T5850] Bluetooth: hci1: failed to register connection device [ 1240.753603][T28516] Mount JFS Failure: -22 [ 1240.805962][ T5847] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1240.813718][ T9] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1240.821754][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 1240.868214][T28518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5284'. [ 1240.985810][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1240.992825][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1241.003347][ T5847] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1241.013328][ T9] usb 6-1: config 63 has an invalid interface number: 186 but max is 3 [ 1241.021734][ T5847] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.034592][ T9] usb 6-1: config 63 has an invalid interface number: 84 but max is 3 [ 1241.043001][ T9] usb 6-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 1241.052012][ T9] usb 6-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 1241.061392][ T9] usb 6-1: config 63 has an invalid interface number: 94 but max is 3 [ 1241.070034][ T9] usb 6-1: config 63 has no interface number 0 [ 1241.076886][ T9] usb 6-1: config 63 has no interface number 1 [ 1241.083361][ T9] usb 6-1: config 63 has no interface number 2 [ 1241.089699][ T9] usb 6-1: config 63 interface 186 altsetting 9 endpoint 0x7 has an invalid bInterval 64, changing to 7 [ 1241.101675][ T5847] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1241.110777][ T9] usb 6-1: config 63 interface 186 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1241.121668][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.129769][ T5847] usb 5-1: Product: syz [ 1241.133964][ T5847] usb 5-1: Manufacturer: syz [ 1241.138653][ T9] usb 6-1: config 63 interface 186 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1241.149793][ T5847] usb 5-1: SerialNumber: syz [ 1241.155535][ T9] usb 6-1: config 63 interface 84 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1241.170895][ T9] usb 6-1: config 63 interface 84 altsetting 1 endpoint 0x6 has invalid maxpacket 1096, setting to 64 [ 1241.182103][ T5847] hub 5-1:1.0: bad descriptor, ignoring hub [ 1241.188116][ T5847] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1241.195995][ T9] usb 6-1: config 63 interface 84 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1241.207507][ T9] usb 6-1: config 63 interface 3 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 1241.218474][ T9] usb 6-1: config 63 interface 3 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 1241.229234][ T9] usb 6-1: config 63 interface 3 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 1241.240015][ T9] usb 6-1: config 63 interface 94 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1241.250835][ T9] usb 6-1: config 63 interface 94 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1241.261987][ T9] usb 6-1: config 63 interface 94 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1241.265752][ T5906] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1241.272975][ T9] usb 6-1: config 63 interface 94 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 1241.294388][ T9] usb 6-1: config 63 interface 94 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 1241.305238][ T9] usb 6-1: config 63 interface 186 has no altsetting 0 [ 1241.312939][ T9] usb 6-1: config 63 interface 84 has no altsetting 0 [ 1241.319836][ T9] usb 6-1: config 63 interface 3 has no altsetting 0 [ 1241.326599][ T9] usb 6-1: config 63 interface 94 has no altsetting 0 [ 1241.335761][ T9] usb 6-1: New USB device found, idVendor=1462, idProduct=8807, bcdDevice= 3.58 [ 1241.344864][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.352973][ T9] usb 6-1: Product: syz [ 1241.357180][ T9] usb 6-1: Manufacturer: syz [ 1241.361778][ T9] usb 6-1: SerialNumber: syz [ 1241.375356][ T5847] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 126 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1241.440739][ T5906] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1241.460053][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.470252][ T5906] usb 4-1: Product: syz [ 1241.476005][ T5906] usb 4-1: Manufacturer: syz [ 1241.480819][ T5906] usb 4-1: SerialNumber: syz [ 1241.509521][ T5906] usb 4-1: config 0 descriptor?? [ 1241.599126][T28514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.615478][T28514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.760173][ T5905] usb 4-1: USB disconnect, device number 64 [ 1241.766286][ T30] audit: type=1326 audit(3508098408.275:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1241.808791][ T30] audit: type=1326 audit(3508098408.275:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1241.861750][ T30] audit: type=1326 audit(3508098408.275:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1241.910674][ T30] audit: type=1326 audit(3508098408.275:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1241.919297][ T9] usb 6-1: USB disconnect, device number 98 [ 1241.934074][ T30] audit: type=1326 audit(3508098408.275:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1241.977384][ T30] audit: type=1326 audit(3508098408.275:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1242.000344][ T30] audit: type=1326 audit(3508098408.275:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1242.028397][ T30] audit: type=1326 audit(3508098408.275:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1242.051034][ T30] audit: type=1326 audit(3508098408.275:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1242.074005][ T30] audit: type=1326 audit(3508098408.275:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.5282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7d38eb69 code=0x7fc00000 [ 1242.295747][T28512] usb 5-1: reset high-speed USB device number 126 using dummy_hcd [ 1242.392633][T28534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5290'. [ 1242.403900][T28534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5290'. [ 1242.721257][ T5847] usb 5-1: USB disconnect, device number 126 [ 1242.734100][ T5847] usblp0: removed [ 1242.736576][ T5905] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1242.745775][ T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1242.875928][ T9] usb 4-1: device descriptor read/64, error -71 [ 1242.915759][ T5905] usb 10-1: Using ep0 maxpacket: 8 [ 1242.924424][ T5905] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1242.933798][ T5905] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.941971][ T5905] usb 10-1: Product: syz [ 1242.946792][ T5905] usb 10-1: Manufacturer: syz [ 1242.951502][ T5905] usb 10-1: SerialNumber: syz [ 1242.958563][ T5905] usb 10-1: config 0 descriptor?? [ 1243.115722][ T9] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1243.168785][ T5905] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1243.245788][ T9] usb 4-1: device descriptor read/64, error -71 [ 1243.358315][ T9] usb usb4-port1: attempt power cycle [ 1243.437905][T28562] FAULT_INJECTION: forcing a failure. [ 1243.437905][T28562] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.450736][T28562] CPU: 0 UID: 0 PID: 28562 Comm: syz.4.5297 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1243.450765][T28562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1243.450776][T28562] Call Trace: [ 1243.450785][T28562] [ 1243.450794][T28562] dump_stack_lvl+0x189/0x250 [ 1243.450827][T28562] ? __pfx____ratelimit+0x10/0x10 [ 1243.450857][T28562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1243.450884][T28562] ? __pfx__printk+0x10/0x10 [ 1243.450917][T28562] ? __pfx___might_resched+0x10/0x10 [ 1243.450946][T28562] ? fs_reclaim_acquire+0x7d/0x100 [ 1243.450974][T28562] should_fail_ex+0x414/0x560 [ 1243.451003][T28562] should_failslab+0xa8/0x100 [ 1243.451026][T28562] __kmalloc_cache_noprof+0x70/0x3d0 [ 1243.451055][T28562] ? binder_defer_copy+0x5d/0x1e0 [ 1243.451082][T28562] binder_defer_copy+0x5d/0x1e0 [ 1243.451110][T28562] binder_transaction+0x371a/0x6470 [ 1243.451131][T28562] ? ima_match_policy+0x10b/0x2150 [ 1243.451203][T28562] ? __pfx_binder_transaction+0x10/0x10 [ 1243.451231][T28562] ? __lock_acquire+0xab9/0xd20 [ 1243.451262][T28562] ? __might_fault+0xb0/0x130 [ 1243.451316][T28562] binder_ioctl_write_read+0xd6a/0xa040 [ 1243.451372][T28562] ? __kernel_text_address+0xd/0x40 [ 1243.451394][T28562] ? arch_stack_walk+0xfc/0x150 [ 1243.451434][T28562] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1243.451464][T28562] ? stack_trace_save+0x9c/0xe0 [ 1243.451489][T28562] ? __pfx_stack_trace_save+0x10/0x10 [ 1243.451517][T28562] ? stack_depot_save_flags+0x40/0x860 [ 1243.451548][T28562] ? kasan_save_track+0x4f/0x80 [ 1243.451575][T28562] ? kasan_save_track+0x3e/0x80 [ 1243.451600][T28562] ? kasan_save_free_info+0x46/0x50 [ 1243.451622][T28562] ? __kasan_slab_free+0x5b/0x80 [ 1243.451648][T28562] ? kfree+0x18e/0x440 [ 1243.451671][T28562] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1243.451690][T28562] ? security_file_ioctl+0xcb/0x2d0 [ 1243.451719][T28562] ? __se_sys_ioctl+0x47/0x170 [ 1243.451747][T28562] ? do_syscall_64+0xfa/0x3b0 [ 1243.451765][T28562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.451807][T28562] ? __pfx_binder_debug+0x10/0x10 [ 1243.451833][T28562] ? do_raw_spin_lock+0x121/0x290 [ 1243.451904][T28562] ? _raw_spin_unlock+0x28/0x50 [ 1243.451936][T28562] ? binder_get_thread+0x178/0x6d0 [ 1243.451970][T28562] binder_ioctl+0x3e0/0x19c0 [ 1243.451989][T28562] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1243.452009][T28562] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1243.452034][T28562] ? do_vfs_ioctl+0xbe8/0x1430 [ 1243.452053][T28562] ? __pfx_binder_ioctl+0x10/0x10 [ 1243.452073][T28562] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1243.452107][T28562] ? __lock_acquire+0xab9/0xd20 [ 1243.452149][T28562] ? __fget_files+0x2a/0x420 [ 1243.452178][T28562] ? __fget_files+0x2a/0x420 [ 1243.452201][T28562] ? __fget_files+0x3a0/0x420 [ 1243.452222][T28562] ? __fget_files+0x2a/0x420 [ 1243.452250][T28562] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1243.452278][T28562] ? __pfx_binder_ioctl+0x10/0x10 [ 1243.452297][T28562] __se_sys_ioctl+0xfc/0x170 [ 1243.452329][T28562] do_syscall_64+0xfa/0x3b0 [ 1243.452347][T28562] ? lockdep_hardirqs_on+0x9c/0x150 [ 1243.452374][T28562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.452393][T28562] ? clear_bhb_loop+0x60/0xb0 [ 1243.452418][T28562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.452437][T28562] RIP: 0033:0x7f813bd8eb69 [ 1243.452457][T28562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.452475][T28562] RSP: 002b:00007f813cccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1243.452498][T28562] RAX: ffffffffffffffda RBX: 00007f813bfb5fa0 RCX: 00007f813bd8eb69 [ 1243.452514][T28562] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1243.452527][T28562] RBP: 00007f813cccd090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.452539][T28562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.452552][T28562] R13: 0000000000000000 R14: 00007f813bfb5fa0 R15: 00007fff58a1fe58 [ 1243.452586][T28562] [ 1243.566275][T28564] ------------[ cut here ]------------ [ 1243.568367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.573881][T28564] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1243.705883][ T9] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 1243.713670][T28564] WARNING: drivers/gpu/drm/drm_vblank.c:1308 at drm_wait_one_vblank+0x571/0x5b0, CPU#1: syz.5.5298/28564 [ 1243.770420][ T9] usb 4-1: device descriptor read/8, error -71 [ 1243.771617][T28564] Modules linked in: [ 1243.877980][T28569] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1243.881295][T28564] CPU: 1 UID: 0 PID: 28564 Comm: syz.5.5298 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1243.920950][T28564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1243.931177][T28564] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 1243.937183][T28564] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 a9 f9 ab fc 4d 8b 2c 24 48 c7 c7 40 46 17 8c 4c 89 fe 4c 89 ea 44 89 f1 e8 80 31 0c fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 1243.956919][T28564] RSP: 0018:ffffc900043c7ae0 EFLAGS: 00010246 [ 1243.963024][T28564] RAX: 38f7090f1e8f8600 RBX: 1ffff1102837a801 RCX: 0000000000080000 [ 1243.971460][T28570] fuse: Bad value for 'user_id' [ 1243.971484][T28570] fuse: Bad value for 'user_id' [ 1243.983692][T28564] RDX: ffffc90012ef9000 RSI: 000000000004524f RDI: 0000000000045250 [ 1243.991766][T28564] RBP: ffffc900043c7be0 R08: ffffc900043c7807 R09: 1ffff92000878f00 [ 1243.999797][T28564] R10: dffffc0000000000 R11: fffff52000878f01 R12: ffff888141bc7000 [ 1244.007856][T28564] R13: ffffffff8c2a3940 R14: 0000000000000000 R15: ffffffff8c2bd280 [ 1244.016099][T28564] FS: 00007f1b7e1b46c0(0000) GS:ffff88812590a000(0000) knlGS:0000000000000000 [ 1244.025197][T28564] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1244.031878][T28564] CR2: 00007f1b7e192f98 CR3: 000000005fdd0000 CR4: 00000000003526f0 [ 1244.035910][ T9] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1244.039934][T28564] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1244.055494][T28564] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1244.063533][T28564] Call Trace: [ 1244.066897][T28564] [ 1244.069857][T28564] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1244.074382][ T9] usb 4-1: device descriptor read/8, error -71 [ 1244.075861][T28564] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1244.087851][T28564] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1244.093950][T28564] ? drm_vblank_enable+0x297/0x440 [ 1244.099135][T28564] ? drm_vblank_get+0x151/0x270 [ 1244.104006][T28564] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1244.109748][T28564] drm_fb_helper_ioctl+0x116/0x140 [ 1244.114896][T28564] do_fb_ioctl+0x459/0x750 [ 1244.119373][T28564] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1244.124387][T28564] ? __fget_files+0x2a/0x420 [ 1244.129063][T28564] ? __fget_files+0x3a0/0x420 [ 1244.133768][T28564] ? __fget_files+0x2a/0x420 [ 1244.138420][T28564] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1244.143402][T28564] ? __pfx_fb_ioctl+0x10/0x10 [ 1244.148201][T28564] __se_sys_ioctl+0xfc/0x170 [ 1244.152821][T28564] do_syscall_64+0xfa/0x3b0 [ 1244.157414][T28564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.163501][T28564] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.169704][T28564] ? clear_bhb_loop+0x60/0xb0 [ 1244.174608][T28564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.180846][T28564] RIP: 0033:0x7f1b7d38eb69 [ 1244.185292][T28564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.197308][ T9] usb usb4-port1: unable to enumerate USB device [ 1244.204990][T28564] RSP: 002b:00007f1b7e1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.219848][T28564] RAX: ffffffffffffffda RBX: 00007f1b7d5b5fa0 RCX: 00007f1b7d38eb69 [ 1244.227891][T28564] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 1244.235934][T28564] RBP: 00007f1b7d411df1 R08: 0000000000000000 R09: 0000000000000000 [ 1244.243931][T28564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.251973][T28564] R13: 0000000000000000 R14: 00007f1b7d5b5fa0 R15: 00007ffe7b309128 [ 1244.260079][T28564] [ 1244.263216][T28564] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1244.270521][T28564] CPU: 1 UID: 0 PID: 28564 Comm: syz.5.5298 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 1244.281735][T28564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1244.291794][T28564] Call Trace: [ 1244.295086][T28564] [ 1244.298026][T28564] dump_stack_lvl+0x99/0x250 [ 1244.302658][T28564] ? __asan_memcpy+0x40/0x70 [ 1244.307278][T28564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1244.312504][T28564] ? __pfx__printk+0x10/0x10 [ 1244.317130][T28564] vpanic+0x281/0x750 [ 1244.321135][T28564] ? __pfx_vpanic+0x10/0x10 [ 1244.325646][T28564] ? is_bpf_text_address+0x292/0x2b0 [ 1244.330954][T28564] ? is_bpf_text_address+0x26/0x2b0 [ 1244.336187][T28564] panic+0xb9/0xc0 [ 1244.339934][T28564] ? __pfx_panic+0x10/0x10 [ 1244.344371][T28564] __warn+0x334/0x4c0 [ 1244.348365][T28564] ? drm_wait_one_vblank+0x571/0x5b0 [ 1244.353735][T28564] ? drm_wait_one_vblank+0x571/0x5b0 [ 1244.359018][T28564] report_bug+0x2be/0x4f0 [ 1244.363356][T28564] ? drm_wait_one_vblank+0x571/0x5b0 [ 1244.368657][T28564] ? drm_wait_one_vblank+0x571/0x5b0 [ 1244.373950][T28564] ? drm_wait_one_vblank+0x573/0x5b0 [ 1244.379241][T28564] handle_bug+0x84/0x160 [ 1244.383492][T28564] exc_invalid_op+0x1a/0x50 [ 1244.388002][T28564] asm_exc_invalid_op+0x1a/0x20 [ 1244.392859][T28564] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 1244.398779][T28564] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 a9 f9 ab fc 4d 8b 2c 24 48 c7 c7 40 46 17 8c 4c 89 fe 4c 89 ea 44 89 f1 e8 80 31 0c fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 1244.418392][T28564] RSP: 0018:ffffc900043c7ae0 EFLAGS: 00010246 [ 1244.424469][T28564] RAX: 38f7090f1e8f8600 RBX: 1ffff1102837a801 RCX: 0000000000080000 [ 1244.432446][T28564] RDX: ffffc90012ef9000 RSI: 000000000004524f RDI: 0000000000045250 [ 1244.440422][T28564] RBP: ffffc900043c7be0 R08: ffffc900043c7807 R09: 1ffff92000878f00 [ 1244.448396][T28564] R10: dffffc0000000000 R11: fffff52000878f01 R12: ffff888141bc7000 [ 1244.456370][T28564] R13: ffffffff8c2a3940 R14: 0000000000000000 R15: ffffffff8c2bd280 [ 1244.464361][T28564] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1244.469996][T28564] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1244.475903][T28564] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1244.481980][T28564] ? drm_vblank_enable+0x297/0x440 [ 1244.487100][T28564] ? drm_vblank_get+0x151/0x270 [ 1244.491964][T28564] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1244.497599][T28564] drm_fb_helper_ioctl+0x116/0x140 [ 1244.502719][T28564] do_fb_ioctl+0x459/0x750 [ 1244.507143][T28564] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1244.512120][T28564] ? __fget_files+0x2a/0x420 [ 1244.516728][T28564] ? __fget_files+0x3a0/0x420 [ 1244.521411][T28564] ? __fget_files+0x2a/0x420 [ 1244.526097][T28564] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1244.531049][T28564] ? __pfx_fb_ioctl+0x10/0x10 [ 1244.535726][T28564] __se_sys_ioctl+0xfc/0x170 [ 1244.540335][T28564] do_syscall_64+0xfa/0x3b0 [ 1244.544841][T28564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.550908][T28564] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1244.557065][T28564] ? clear_bhb_loop+0x60/0xb0 [ 1244.561752][T28564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.567648][T28564] RIP: 0033:0x7f1b7d38eb69 [ 1244.572071][T28564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.591680][T28564] RSP: 002b:00007f1b7e1b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.600098][T28564] RAX: ffffffffffffffda RBX: 00007f1b7d5b5fa0 RCX: 00007f1b7d38eb69 [ 1244.608079][T28564] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 1244.616076][T28564] RBP: 00007f1b7d411df1 R08: 0000000000000000 R09: 0000000000000000 [ 1244.624071][T28564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.632050][T28564] R13: 0000000000000000 R14: 00007f1b7d5b5fa0 R15: 00007ffe7b309128 [ 1244.640051][T28564] [ 1244.643224][T28564] Kernel Offset: disabled [ 1244.647549][T28564] Rebooting in 86400 seconds..