last executing test programs: 3m15.121004431s ago: executing program 3 (id=4): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0x2, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x6, 0x1, 0x1, 0x41, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0x5, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) syz_usb_connect(0x3, 0x24, &(0x7f0000000880)=ANY=[@ANYBLOB="12010003e15d841044060f802f0d01020301090212"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@migrate={0xa0, 0x21, 0x5, 0x0, 0x0, {{@in=@private=0xa010102, @in=@local, 0x4e20, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x80, 0x2c}, 0x6e6bbd}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@local, @in=@empty, @in=@rand_addr=0x64010102, 0xff, 0x4, 0x0, 0x3506, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x24024810) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) 3m13.64221581s ago: executing program 3 (id=6): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfe4c2df50d7eea11) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000280)=0x400a354, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa8000000060a0b040000000000000000020000007c000480780001800b00010074617267657400006800028050000300cd4b6abe4203f10e000000000000ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a0001004e464c4f4700000008000240000000000900010073797a30000000000900020073797a32"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3ff, 0xe, 0x2, 0x1af5, 0x0, 0x3, 0x3, 0xfffffffffffffffa, 0x8, 0x7f, 0x5, 0x6, 0x3, 0x3, 0x3], 0xe000, 0x12}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m13.305778043s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xf6ffffff, 0x2c) 3m13.092970039s ago: executing program 3 (id=8): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0xe}) 2m58.051586891s ago: executing program 32 (id=8): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0xe}) 1m51.800959491s ago: executing program 2 (id=445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x5) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400"], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 1m51.698834449s ago: executing program 2 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000140)="f91d9189", 0x4}], 0x4) 1m51.269341524s ago: executing program 2 (id=451): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f00000009c0)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.199622349s ago: executing program 1 (id=452): r0 = syz_io_uring_setup(0x18ed, &(0x7f00000000c0)={0x0, 0x5402, 0x400, 0x0, 0x2cd}, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x500, &(0x7f0000000340)={0x0, 0xdf75, 0xb2, 0x0, 0x4, 0x0, r0}, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x6}) r3 = memfd_create(&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00z\x9b\xb6/\xf5j\x8f\xadS\xa1X9\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbf\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x80\xc4\x0f\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)M\n\xce\xbe\x8e\xdc\b8wX\x18\xe2\x94\xad\xea\xe3\xce\x02D\xc2\xf2\x11\x88s', 0x4) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r6 = dup(r5) read$FUSE(r6, &(0x7f0000007cc0)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 1m51.198969694s ago: executing program 2 (id=453): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3c}, 0x0, &(0x7f0000000040)={0x3fc, 0x300000000000000, 0x0, 0x1, 0x100, 0x0, 0x80000003}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1m50.99616147s ago: executing program 1 (id=455): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0, 0xd00}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x1d, 0x8000, 0x3, 0x10001, 0x0, 0x0, 0x8, 0xfffffffe, 0x2}) 1m50.283576935s ago: executing program 2 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) 1m50.196298576s ago: executing program 2 (id=457): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="34220200000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d00)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc}, @broadcast, @broadcast, @initial, {0x6, 0x5}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xae}, @val={0x2d, 0x1a, {0x1490, 0x1, 0x6, 0x0, {0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x1}}, @void}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1m50.054164589s ago: executing program 1 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x700, 0x20, 0x62, 0x2, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@cipso={0x86, 0x37, 0xffffffffffffffff, [{0x6, 0xc, "2100119616d5a5b3b4a4"}, {0x5, 0xd, "11ea660b366ae5da56ce1c"}, {0x5, 0x5, "040217"}, {0x0, 0x11, "21fc0d84b2f4431802907b0ae9db63"}, {0x1, 0x2}]}, @rr={0x7, 0xb, 0x4c, [@rand_addr=0x64010100, @multicast1]}, @generic={0x88, 0xa, "d217b9f4873e2f21"}]}}}}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3f031c000302140006001e00895a05eb88a8", 0x12, 0x2004c8d5, &(0x7f0000000080)={0xc9, 0x8100, r4, 0x1, 0x1, 0x6, @local}, 0x14) r5 = socket(0xa, 0x3, 0x87) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r7}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r7}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x7800, 0x9, 0x10001, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) 1m50.02898235s ago: executing program 1 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0xd4}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/240, &(0x7f0000000000)=0xf0) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r2, 0x1) splice(r2, 0x0, r4, 0x0, 0x1, 0x3) io_setup(0xcb31, &(0x7f0000000340)=0x0) io_submit(r5, 0x3, &(0x7f00000006c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000380)="883ae4594592fb6c211545c2792ae399461cfe21e658f0d97a97f3bf244abb491be795017414ed923db7ffd60d79106f2e82a92d8d3f1aece4f7357a3d32dbfb10c7c78b2eb78db0a32005f06a030697d6be65c8e8df11d32214e88534f3924fab2f2080f85a6c5ff24093c9f11dcde50d64c285aa0079cf62cd80a135b0541b34feef7c85c3d0db888b739d2301231cac156fea5b880bdf90178fc33990578aea8b7ff53a63957ffe9d33154a2daea72d8f54f2ef456293d40f252147f7d269b9", 0xc1, 0x4b64, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f00000004c0)="b637f197874f2779fe49d932ff737c667751f0a77bddf76cb5f85b4b8a27e44c3bcf4ba552306b146662f6d3c42c57c9e7688f91f33f633ae5b482a63606ecee8cc599a6a019f4cde2e1c77dba8c69a5e481e2973d6d2b8651f1e8d94907ec06ff49510028ab4b36722c613b575baee6fab134300204e4d282a9023f57120095d8ff0d4ddcccbc7234eeeafa81da6e0f23939f8a7cca305a60998e70af56a462cc8aca554ed04818cea97dacc011addbae786160d8c903517632e0b7ed0281ac92c056d1", 0xc4, 0x2, 0x0, 0x1, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000600)="6349219571e5281a6c50764c8dd0c6b737852aa7aa6db69001d22d98936a221abdae44aede159bed42f34b58f04c1b3244e45b91fa1521ca72e84735c52ec39a9651ea9b2c17a2602f33f0d8", 0x4c, 0x2, 0x0, 0x0, r4}]) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000240)="5d6c09f3310e049731507490d0802f6d00910ffd1379ce7c112b80f14917b5c72beb38f347887fa19e3eca615975b4b633ac4ae8013e3d93b3800becd0f96152ba6788ce2e12677a8e49aed1942818dd9cd9d5652cdf4f531633a17d17262487e0c5ba41f7187ee0c33c6a06344be84b8f5c976cf02d5cf984c06290430c01bb30ca7d8d68785590e06855a14937c9ebc3bfec0ce287d7e0dfe02ef6736135768c52f082af5a8855ba86266a96d6e37d3d136659c5cb0acbe511b8c816ae4e0c71f5441db2e6a3299cf13fe08c7b7ce3f8218cacc59df6b39472d8fcb37397dc70a77c49", 0xe4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x40000000015, 0x5, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0xd4}}, 0x0) (async) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/240, &(0x7f0000000000)=0xf0) (async) socket$inet(0x2, 0x801, 0x0) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async) pipe2(&(0x7f0000000100), 0x0) (async) shutdown(r2, 0x1) (async) splice(r2, 0x0, r4, 0x0, 0x1, 0x3) (async) io_setup(0xcb31, &(0x7f0000000340)) (async) io_submit(r5, 0x3, &(0x7f00000006c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x2, r0, &(0x7f0000000380)="883ae4594592fb6c211545c2792ae399461cfe21e658f0d97a97f3bf244abb491be795017414ed923db7ffd60d79106f2e82a92d8d3f1aece4f7357a3d32dbfb10c7c78b2eb78db0a32005f06a030697d6be65c8e8df11d32214e88534f3924fab2f2080f85a6c5ff24093c9f11dcde50d64c285aa0079cf62cd80a135b0541b34feef7c85c3d0db888b739d2301231cac156fea5b880bdf90178fc33990578aea8b7ff53a63957ffe9d33154a2daea72d8f54f2ef456293d40f252147f7d269b9", 0xc1, 0x4b64, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x9, r1, &(0x7f00000004c0)="b637f197874f2779fe49d932ff737c667751f0a77bddf76cb5f85b4b8a27e44c3bcf4ba552306b146662f6d3c42c57c9e7688f91f33f633ae5b482a63606ecee8cc599a6a019f4cde2e1c77dba8c69a5e481e2973d6d2b8651f1e8d94907ec06ff49510028ab4b36722c613b575baee6fab134300204e4d282a9023f57120095d8ff0d4ddcccbc7234eeeafa81da6e0f23939f8a7cca305a60998e70af56a462cc8aca554ed04818cea97dacc011addbae786160d8c903517632e0b7ed0281ac92c056d1", 0xc4, 0x2, 0x0, 0x1, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000600)="6349219571e5281a6c50764c8dd0c6b737852aa7aa6db69001d22d98936a221abdae44aede159bed42f34b58f04c1b3244e45b91fa1521ca72e84735c52ec39a9651ea9b2c17a2602f33f0d8", 0x4c, 0x2, 0x0, 0x0, r4}]) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000240)="5d6c09f3310e049731507490d0802f6d00910ffd1379ce7c112b80f14917b5c72beb38f347887fa19e3eca615975b4b633ac4ae8013e3d93b3800becd0f96152ba6788ce2e12677a8e49aed1942818dd9cd9d5652cdf4f531633a17d17262487e0c5ba41f7187ee0c33c6a06344be84b8f5c976cf02d5cf984c06290430c01bb30ca7d8d68785590e06855a14937c9ebc3bfec0ce287d7e0dfe02ef6736135768c52f082af5a8855ba86266a96d6e37d3d136659c5cb0acbe511b8c816ae4e0c71f5441db2e6a3299cf13fe08c7b7ce3f8218cacc59df6b39472d8fcb37397dc70a77c49", 0xe4) (async) 1m49.877141046s ago: executing program 1 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) (fail_nth: 1) 1m49.550199272s ago: executing program 1 (id=461): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r1, &(0x7f0000001c00)={0xa, 0x4e20, 0xfc, @private0, 0x6}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044004}, 0x80) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="8f86795e8bf78e7e42c6ed5ed5c5a342df8490f1aabdc27cc0a284ee31f01df5ba577f161f9f50b869056653159483b34dcfb2df296addc27f12a308cd3110b57c891f7534f6cd2c4c0e5d41ba20e3e7a18d03c66e0c2da82d46dc75420b4fcc287e1262fcfa4cde212f977e810756cf57d7f9dcfdc06a73d26ebab6582fa1094881c3ec7b68c41cb2169a7aef447b7558131374c4712fb251681593703400d14978d26e92b646f131113e2534f04789805141b6517ef95c5556a11d71be28eebceda6", @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000180d04a0100", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x405240, 0x40}, 0x18) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x8) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r8) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7, 0x1000000}}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r5, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) setpgid(0x0, r5) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 1m34.680352691s ago: executing program 33 (id=457): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="34220200000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d00)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x49, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc}, @broadcast, @broadcast, @initial, {0x6, 0x5}, @value=@ver_80211n={0x0, 0x3, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0xae}, @val={0x2d, 0x1a, {0x1490, 0x1, 0x6, 0x0, {0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x7, 0x1}}, @void}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 1m34.317080747s ago: executing program 34 (id=461): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r1, &(0x7f0000001c00)={0xa, 0x4e20, 0xfc, @private0, 0x6}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044004}, 0x80) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="8f86795e8bf78e7e42c6ed5ed5c5a342df8490f1aabdc27cc0a284ee31f01df5ba577f161f9f50b869056653159483b34dcfb2df296addc27f12a308cd3110b57c891f7534f6cd2c4c0e5d41ba20e3e7a18d03c66e0c2da82d46dc75420b4fcc287e1262fcfa4cde212f977e810756cf57d7f9dcfdc06a73d26ebab6582fa1094881c3ec7b68c41cb2169a7aef447b7558131374c4712fb251681593703400d14978d26e92b646f131113e2534f04789805141b6517ef95c5556a11d71be28eebceda6", @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000180d04a0100", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x405240, 0x40}, 0x18) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x8) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r8) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r7, 0x1000000}}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r5, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r9, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) setpgid(0x0, r5) open(&(0x7f00000000c0)='./file0\x00', 0xf6, 0x2c) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 1m7.578089418s ago: executing program 5 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="3f031c000302140006001e00895a05eb88a8", 0x12, 0x2004c8d5, &(0x7f0000000080)={0xc9, 0x8100, r4, 0x1, 0x1, 0x6, @local}, 0x14) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r7}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r9}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r9}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x7800, 0x9, 0x10001, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) 1m7.32200368s ago: executing program 5 (id=668): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200001000000}) 1m6.896674203s ago: executing program 5 (id=669): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000040000701feffffff0042801400018010000400cab1893a20b8d2a93521800a0400028000000000000000b66cc70e43077d4f8cf1e29e6f8b8e351bf0fca211a724694e"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400f5727e418a74de9fff3c2d135576f736445fc474bb4223ad000103000000092106000001220500080581030002000007ca0297e116000000000000000097a5a7322fa60cb58a8e3dc4ff36d01692310f0c6e64b3d66aec73b93397b289af7f84e719ea0c1c4d20"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf25010000000500010041"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040010) clock_adjtime(0xa, &(0x7f0000002900)={0x6, 0x5, 0x0, 0x4, 0x417b5fab, 0x7, 0x80000001, 0x6f9, 0x920, 0x1, 0x9, 0x4, 0x7, 0x9, 0x1, 0x2, 0xcc6, 0x7fff, 0x7fff, 0xc, 0x1, 0xaec, 0x100000001, 0x5}) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f00000001c0)="4085") 1m5.448932027s ago: executing program 5 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x700, 0x20, 0x62, 0x2, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x64, 0x0, 0x9, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x40}, {[@cipso={0x86, 0x37, 0xffffffffffffffff, [{0x6, 0xc, "2100119616d5a5b3b4a4"}, {0x5, 0xd, "11ea660b366ae5da56ce1c"}, {0x5, 0x5, "040217"}, {0x0, 0x11, "21fc0d84b2f4431802907b0ae9db63"}, {0x1, 0x2}]}, @rr={0x7, 0xb, 0x4c, [@rand_addr=0x64010100, @multicast1]}, @generic={0x88, 0xa, "d217b9f4873e2f21"}]}}}}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="3f031c000302140006001e00895a05eb88a8", 0x12, 0x2004c8d5, &(0x7f0000000080)={0xc9, 0x8100, r3, 0x1, 0x1, 0x6, @local}, 0x14) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x18, r6}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r8}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x7800, 0x9, 0x10001, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop]}}}}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) 1m5.357326201s ago: executing program 5 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x105) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2c) 1m5.298792407s ago: executing program 5 (id=680): r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket(0xa, 0x3, 0x3a) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) (async) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[{}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x1}) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000080)={&(0x7f00000001c0)=[r8, r7, r7], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000680)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000580)=[{}], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x2, 0x0, r8}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000240), 0x1, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000780)={0x200, 0x1, &(0x7f0000000280)=[r11], &(0x7f00000002c0)=[0x9], &(0x7f0000000400)=[r12], 0x0, 0x0, 0x522}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000740)={0x1, 0x0, &(0x7f0000000700)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000800)={&(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x7, 0x9, 0x7fffffff, 0x8, 0x8], &(0x7f0000000840)=[r5, r9, r12, r13, r14], &(0x7f0000000880)=[0x4], 0x0, 0xcdf1}) (async) close_range(r4, 0xffffffffffffffff, 0x0) 1m4.374553286s ago: executing program 6 (id=682): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c004000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 1m3.844767936s ago: executing program 6 (id=684): syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0xa0, 0x30, 0xa2, 0x40, 0x1235, 0x4661, 0xae13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x90, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xd6, 0x82, 0x40}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x1c, 0x30, 0x0, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}, @ib={0x1b, 0x40, 0x7, {"4e310000f7ff0000005a1c234e4f8700"}, 0x8, 0x2, 0x4}}}, 0x118) syz_usb_connect$uac1(0x4, 0xc1, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x8, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x9}, [@processing_unit={0xa, 0x24, 0x7, 0x1, 0x1, 0x1, "5e7dbe"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x4, 0x8, "d46a7fd76f"}, @processing_unit={0x7, 0x24, 0x7, 0x5, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x101, 0x4, 0x6, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x9, {0x7, 0x25, 0x1, 0x2, 0x6, 0x996}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb, 0x3, 0x6, 0x0, "", "dc5d"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x2, 0x4, "2b2f3281a219"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x80, 0x4, 0x7, 0x9, "", "3280"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1a, 0x8, 0x7, {0x7, 0x25, 0x1, 0x2, 0x4}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x100, 0x2, 0x8, 0xf9, 0x8, 0xdc}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "9b849171554a38e8e9f267bfc7730311"}, @ext_cap={0x7, 0x10, 0x2, 0x34, 0x1, 0x6, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "9fbe23bb9682496b88c61cd7eb50a2e4"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2801}}]}) 1m0.718211075s ago: executing program 6 (id=699): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8}}], 0x1, 0x810) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24088804) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) chown(&(0x7f0000000280)='\x00', r2, r4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = epoll_create1(0x0) epoll_pwait2(r5, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) vmsplice(r10, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="000000010000000900"], 0x0, 0x0, 0x0, 0x0}, 0x0) 57.654042427s ago: executing program 6 (id=709): r0 = timerfd_create(0x0, 0x0) write(r0, &(0x7f0000000000)="2cf776b01283951f097c9551113db3c6a190ce95a0f907dbdce47fc45c2d8ebd42b2855417711cf698aee55467eb28ed3b4df667e9d54d3f4e3fb3901cd3e4e4bafa0cf6e15187ef95cd1974eba265ed6b61241eb715d3ad1b028f5c4aee39829d306c7d14c290468d8f73105e63beba4dbb5f0ca3c43365a08a1049f52aabb6b18c33043b8a2224572a19b957ecb9ddd0b05d2acb62fe0e5a4159c96ea580669fa97dc7a6c8f788c9c7ce4e7c3c0ae110617f73a298596edfff4a953c46a6317e47064b5e4e473577cb82536a429231afdf2ab891a1cf11", 0xd8) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000100)=[@nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0xfffffffffffffff8}, @out_dx={0x6a, 0x28, {0x7d14, 0x3, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x3}, @uexit={0x0, 0x18}, @out_dx={0x6a, 0x28, {0x8237, 0x1, 0x7fffffffffffffff}}, @nested_load_code={0x12e, 0x60, {0x0, "f2ac0f009104000000460bbb74160000673e2e0f01c9470c3b0f01df0fc79c690000000048b809000000000000000f23d00f21f835300000050f23f8b9024d564b0f328f89a89130"}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xe3c3, 0x6}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0x87, 0x2}}, @nested_load_code={0x12e, 0x50, {0x2, "42dfd766baa000b0aeee0fc7a2bf430000f36467673e0f0764f20f2d1ef344e1de440f01f8653e4c0fc75df036660f38828a810000000f30"}}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host_nat=0x6c04, 0x1, 0x5, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0x258}}], 0x280}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)={{0xfec00000, 0x3000, 0x3, 0x8, 0x3, 0x4, 0x0, 0xff, 0x0, 0x4, 0x2, 0x7}, {0x100000, 0xeeee0000, 0xa, 0x0, 0x3, 0xf7, 0x4, 0x7, 0x4, 0x4, 0x1, 0x2}, {0xdddd0000, 0x40000, 0x4, 0xb, 0x0, 0x8, 0x2, 0x1a, 0xf, 0xf9, 0x4, 0x3}, {0x1, 0x3000, 0x9, 0xff, 0x3, 0x2, 0x0, 0x2, 0x4, 0x7, 0x9e}, {0xdddd1000, 0xd000, 0x4, 0x81, 0x5, 0x1, 0xd6, 0xa, 0x7, 0x6, 0xff, 0x8a}, {0xeeee8000, 0x70000, 0xc, 0x2, 0x8, 0x7, 0x7f, 0xe, 0x0, 0xf6, 0x2, 0x1}, {0x50000, 0x1000, 0xe, 0x2, 0xd, 0x5, 0x5, 0xfc, 0xff, 0x0, 0x2, 0x9}, {0x6000, 0x4000, 0x9, 0x4, 0x40, 0xed, 0x6, 0x0, 0x5, 0xa0, 0x7f, 0x6}, {0xf7f77fff, 0xe011}, {0x70000, 0xff}, 0x10024, 0x0, 0x1, 0x10000, 0xa, 0x5001, 0xeeef0000, [0x81, 0xffffffffffffffff, 0x3, 0x4]}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000500)={'gre0\x00', {0x2, 0x0, @initdev}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x77, 0x73, 0x1, 0xc, 0x3, 0x7f, 0x7f, 0x3, 0x15, [0xf0e, 0x4, 0x8, 0x80000000, 0x3, 0x1, 0x1000, 0x8], [0x7fffffff]}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000005c0)={0x5, r2, 0x80000}) ioctl(r3, 0x6, &(0x7f0000000600)="5bec5a5ee32fe13fa761f407c86aebe65c") r4 = syz_open_dev$usbfs(&(0x7f0000000640), 0xfffffffffffffffa, 0x40) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000680), 0x220300, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a00)={0x0, &(0x7f00000006c0)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x21, 0x1}}, @cpuid={0x64, 0x18, {0xbf, 0x800000}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x589, 0xa193, 0x7, 0xe982}}, @nested_vmresume={0x130, 0x18, 0x3}, @wrmsr={0x65, 0x20, {0x30a, 0x8}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0xb7f, 0x60000000}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host64=0x2c00, 0x101, 0x0, 0x5}}, @nested_amd_invlpga={0x17d, 0x20, {0xe000, 0xe0a6}}, @rdmsr={0x66, 0x18, {0x8da}}, @wr_drn={0x68, 0x20, {0x7, 0x9}}, @cpuid={0x64, 0x18, {0x100, 0x80000000}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xcd, 0x4, 0x2, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xef, 0x0, 0x7}}, @wr_crn={0x67, 0x20, {0x3, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x80}}, @nested_amd_clgi={0x17f, 0x10}], 0x318}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000a40)={0x5, 0x1, 0x9, 0x0, 0x0, [{{r4}, 0x6}, {{r0}, 0x1}, {{r0}, 0xd985}, {{r2}, 0x7}, {{r0}, 0x7}, {{r5}, 0xffffffffffffff00}, {{}, 0x5}, {{r2}, 0xb509}, {{r6}, 0x120}]}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000b80)=@assoc_value, 0x8) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ec0)={0x0, &(0x7f0000000bc0)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x10001, 0x5, 0x1000}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x986}}, @uexit={0x0, 0x18, 0x7ff}, @wrmsr={0x65, 0x20, {0xb4c, 0x6}}, @nested_load_code={0x12e, 0x89, {0x0, "470f350f01c567f242e1bd66baf80cb8a8491384ef66bafc0cb898000000ef6545dbe348b836f22004000000000f23d00f21f8353000000c0f23f8c744240000300000c7442402fbffffffc7442406000000000f011c24c4c17de614ca440f20c03507000000440f22c0c403757d0c2c00"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x2811, 0x8000000000000000, 0xfffffffffffffffc, 0x2}}, @set_irq_handler={0xc8, 0x20, {0xe3, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x2d, 0x7, 0xf19, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x100000000, 0x1, 0x1}}, @rdmsr={0x66, 0x18, {0xc0010020}}, @nested_load_code={0x12e, 0x59, {0x0, "66ba410066edc4c1bd72e071470f30c461dd6bacf903000000470f01c50f20e035000001000f22e0450f09490fc79c330e00000066baa000b8db000000ef0f01d1"}}, @in_dx={0x69, 0x20, {0x2a1, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x2d2}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000f00)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x4}}}, &(0x7f0000000fc0)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001000)={r8, 0xd9d0}, &(0x7f0000001040)=0x8) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000010c0)=@riscv64_sbi_fwft={0x803000000a010002, &(0x7f0000001080)=0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xd0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x254}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x740}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x180}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x801}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x44004}, 0x20040040) clock_gettime(0x0, &(0x7f0000001380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000012c0)={0xfffffffffffffffd, 0xc2f0, 0x80000000, 0xbd, 0x7, 0xaa61, 0x10001}, &(0x7f0000001300)={0xfffffffffffffffa, 0x7df, 0x5, 0x6, 0x2, 0x60000000000000, 0x4, 0x8}, &(0x7f0000001340)={0x5, 0x8000000000000001, 0xf1cf, 0x5, 0x3, 0x9, 0xf1, 0x8}, &(0x7f00000013c0)={r9, r10+60000000}, &(0x7f0000001440)={&(0x7f0000001400)={[0x9]}, 0x8}) ioctl$KVM_GET_TSC_KHZ_cpu(r7, 0xaea3) io_setup(0xfffffffa, &(0x7f0000001480)=0x0) io_pgetevents(r11, 0x41, 0xa, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000001640)={&(0x7f0000001600)={[0x2c78]}, 0x8}) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000001680)="1ac408dfa4f9920b05a063447a833f1507884ab0bf43b60bf6d13264b192334234c4ea06f2edc2df9937c08857290127394d248e742648550ee562a613cc8425d1bc75f2b807d44d70dc6655d1b6dd03f95b6776d7ba81a0eddab53aca068c", 0x5f) sendto$netrom(r3, &(0x7f0000001700)="7ed8e1531c9aa2f4c238542165ef2f9d002c50a1b80bf574452a4a39207fe0573d12a81284cd30fa9b6a676fc3660ef9c9fcccbd287d8b4f8bcfedea747662b9ac3ae8821a8a80940b24e6638a02582483b8d579080d6058716315ceeb9e357dd5db8cfa3017325fa0e04a5fb0eb2ed62b596bdc7e4588cc8305cb15f0f5b762b545bb17b2997d3584e0c509766ebea225493b431fecca187523e7b173f6d7ce8f96ff74b4881b454a30c0ba01fd9a", 0xaf, 0x4, &(0x7f00000017c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001840)={r8, 0xef}, &(0x7f0000001880)=0x8) fcntl$notify(r0, 0x402, 0x80000008) 57.643961828s ago: executing program 6 (id=710): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='./file0\x00', 0xfffffff6, 0x2c) 57.538627831s ago: executing program 6 (id=711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 49.341979036s ago: executing program 35 (id=680): r0 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket(0xa, 0x3, 0x3a) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008001400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) (async) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/109, 0x6d}], 0x1) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[{}, {}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x1}) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000080)={&(0x7f00000001c0)=[r8, r7, r7], 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000680)={&(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000580)=[{}], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x2, 0x0, r8}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000240), 0x1, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000780)={0x200, 0x1, &(0x7f0000000280)=[r11], &(0x7f00000002c0)=[0x9], &(0x7f0000000400)=[r12], 0x0, 0x0, 0x522}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000740)={0x1, 0x0, &(0x7f0000000700)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000800)={&(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x7, 0x9, 0x7fffffff, 0x8, 0x8], &(0x7f0000000840)=[r5, r9, r12, r13, r14], &(0x7f0000000880)=[0x4], 0x0, 0xcdf1}) (async) close_range(r4, 0xffffffffffffffff, 0x0) 42.046405268s ago: executing program 36 (id=711): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21.340681485s ago: executing program 8 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4, 0x0, 0x3000}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 21.190397004s ago: executing program 8 (id=849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004440), 0x200000, 0x0) open_by_handle_at(r2, &(0x7f00000056c0)=@reiserfs_4={0x10, 0x4, {0x3400000, 0x3d4, 0x8, 0xe}}, 0x303000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0xc}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c00)={0x88, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffc85, 0x0, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21.113263492s ago: executing program 8 (id=850): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106412, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x51, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) 21.071653152s ago: executing program 8 (id=851): membarrier(0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x141140) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) lseek(r2, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xc4}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) ptrace(0x10, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000200)={0x5e, 0x4, 0x101, 0x35, &(0x7f0000000100)=[{}, {}, {}, {}]}) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 20.992626785s ago: executing program 8 (id=852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x500000000000000, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 16.807474624s ago: executing program 8 (id=868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0xf0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 16.723411073s ago: executing program 37 (id=868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1001, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0xf0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8.930279293s ago: executing program 0 (id=910): syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x44000) ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f0000000140)=0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) capset(&(0x7f0000000080)={0x19980330, r1}, &(0x7f00000000c0)={0x26a, 0x80000000, 0x2, 0xfffffffc, 0x45, 0x3}) 8.197900748s ago: executing program 0 (id=913): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x80079a0) userfaultfd(0x80001) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c00000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000000feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a0101020000000000000000000000000000000032"], 0x23c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48004) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0xffffffffffffff5d, &(0x7f00000005c0)={0x100000000, 0xd, 0x10}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc, r7}) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201f100000000400602000000000000000100fa51000904000005030002000921000033012205000905810340000b0607"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x7, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x3ff, 0x12) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r2, @ANYRES16=r6, @ANYRES16=r10, @ANYRES16=r1, @ANYRES16=r8], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40008000) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f00000030c0)={0xf, {"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", 0x1000}}, 0x1006) ioctl$PPPIOCSFLAGS(r12, 0x40047459, &(0x7f0000000100)=0x20) 8.022774523s ago: executing program 9 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x910, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004810}, 0x44000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x15) open$dir(0x0, 0x1, 0x19d) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1000000000, 0x80) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x9, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'veth0_vlan\x00', @random="01350700"}) 7.901385488s ago: executing program 9 (id=919): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24d81, 0x2) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0xee00, 0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f00000001c0)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000440)="2d3a79d79fb0", 0x6, 0x6, 0x0, 0x500}]) 5.098266187s ago: executing program 0 (id=927): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd9", 0x55}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.076413581s ago: executing program 0 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010120ee0e"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc4a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, 0x0) listen(r3, 0xbf7c) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) 4.616382311s ago: executing program 9 (id=932): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x20000000000000, 0x0, 0x0) 2.834811341s ago: executing program 7 (id=937): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="1a07d7a752d0e0b473", 0x9}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @local}}}], 0x20, 0x2900}, 0x0) 2.77954202s ago: executing program 7 (id=938): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2509000000050008000d00001a050007000500000005000800000000000c000600000000000000000008000300", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.714050873s ago: executing program 7 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x0, 0x600, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) 2.591080406s ago: executing program 7 (id=940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x3000, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.525197833s ago: executing program 7 (id=941): unshare(0x20040600) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8001) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000034000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write(r0, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90130001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94946fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038", 0x7a) 2.360670978s ago: executing program 7 (id=942): socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0xc, 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000080)='\r2', 0x2}]) socket$pppl2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r1], 0x0) 1.970304347s ago: executing program 0 (id=943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x700}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 1.923460073s ago: executing program 0 (id=944): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x9, 0x8, 0x2}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) r4 = fsopen(&(0x7f0000000000)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) connect$can_bcm(r2, &(0x7f0000000540), 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, r5, 0x0, 0x46) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x800c1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000280)={0x690, 0x320, 0x356, 0x80, 0x9, 0x100, 0x18, 0x2, {0x9e3a, 0xe71, 0x1}, {0x17090000, 0x1218dfb5}, {0x80000, 0x2525, 0x1}, {0x7f, 0xc, 0x1}, 0x3, 0x40, 0x0, 0x4, 0x0, 0x4, 0x6, 0x5, 0x8, 0x3, 0xae4, 0xc05c, 0x4, 0x200, 0x0, 0x3}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1201000000000040c50f80b00100000000090400000103000000092100000001fe2203003205810300"/54], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x4, {0x4, 0x0, "34d0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x0, 0x4}) bind(r5, &(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x34992ebc, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x80) 1.74646277s ago: executing program 9 (id=946): r0 = socket(0x10, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) write(r0, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 1.739622379s ago: executing program 9 (id=947): socket$inet(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x805, 0xf9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0x4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0x401, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff6, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x6, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000c, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5392, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0xb, 0xe, 0x5337, 0x26d, 0x6, 0x7ffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x1cd, 0x14000, 0x1, 0x9]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000881) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x10000000000, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r12}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r12, 0x80000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 1.452610892s ago: executing program 9 (id=948): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_SCAN_PARAM={{0x5}, 0x3}}}, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x6c, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0xa36e}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x81, 0xb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x6, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x6, 0x3}}}}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0xa8, &(0x7f0000000580)={0x5, 0xf, 0xa8, 0x1, [@generic={0xa3, 0x10, 0x0, "3d257257cd2887a25d2da4e30b120377922491d03a8fd0d61d5eafbac5c3349ffb93a53442b516e8ac51f22af83c13c6d39e0a6466c7f4428e9c60726175e7aece8cda06e447085d6374aa983cf8b3fbf1e152f5f595cb548a4aca322b300210d7e33b159d166acfe9c10b7e21a0725a1c8107e1ff39374b5bb5f056fcb991dd152737e0856298d7961b4d921d0b9a93ede9e61db5edca49d1fed360bc3128e9"}]}}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 998.211023ms ago: executing program 4 (id=949): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 56) 413.653124ms ago: executing program 4 (id=950): prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x6180, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f0000000040)) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1003, r3, &(0x7f0000000480)="e4b5", 0x2, 0x494, 0x0, 0x1}]) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000001180)="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", 0x1000) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010001, 0xec000000, 0x9}]}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r3, 0x0) 212.129971ms ago: executing program 4 (id=951): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000d000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 62.277566ms ago: executing program 4 (id=952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000380)="b2", 0x1}], 0x1, 0x0, 0x0, 0x15}, 0x800) 59.57101ms ago: executing program 4 (id=953): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) (async, rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async, rerun: 64) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x32, 0x0, &(0x7f0000000300)="8bc474a3fd91df6339159fbd69eefe1eb44d71e0aa0f46941673946fa48d8a81b663eb7d873b8ffe203b9b55b2a60f0794a3"}) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001"], 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40008800) (async, rerun: 64) r9 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) getsockopt$sock_int(r9, 0x1, 0x47, 0x0, &(0x7f0000000680)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') read$FUSE(r10, &(0x7f0000002e40)={0x2020}, 0x2020) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) preadv(r11, &(0x7f0000002580)=[{&(0x7f00000013c0)=""/4102, 0x1006}], 0x1, 0x80000001, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)) (async) ioctl$VT_SETMODE(r0, 0x5602, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724", @ANYRES32=r12], 0x0) 0s ago: executing program 4 (id=954): syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) inotify_init1(0x80800) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x40100) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00200000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) kernel console output (not intermixed with test programs): red promiscuous mode [ 194.328334][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.345655][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.380067][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386584][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.393104][ T1722] block nbd1: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 60 seconds [ 194.410200][ T1722] block nbd1: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 60 seconds [ 194.422503][ T1722] block nbd1: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 60 seconds [ 194.433508][ T1722] block nbd1: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 60 seconds [ 194.508289][ T7497] team0: Port device team_slave_0 added [ 194.537606][ T7497] team0: Port device team_slave_1 added [ 194.616291][ T5826] Bluetooth: hci2: command tx timeout [ 194.732135][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.739602][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.769329][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.824239][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.831262][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.862191][ T153] IPVS: stop unused estimator thread 0... [ 194.894149][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.955810][ T7489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 194.977498][ T7489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.019195][ T7489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.034150][ T7489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 195.093496][ T5826] Bluetooth: hci1: command tx timeout [ 195.158800][ T7497] hsr_slave_0: entered promiscuous mode [ 195.166654][ T7497] hsr_slave_1: entered promiscuous mode [ 195.173782][ T7497] debugfs: 'hsr0' already exists in 'hsr' [ 195.179665][ T7497] Cannot create hsr debugfs directory [ 195.207944][ T7585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 195.354657][ T5911] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 195.549180][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.560508][ T5911] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 195.575377][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.580284][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.607067][ T5911] usb 5-1: config 0 descriptor?? [ 195.675411][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.711464][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.718735][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.753878][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.761172][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.784656][ T7497] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 195.818266][ T7579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.829080][ T7579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.848477][ T7497] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 195.872945][ T7497] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 195.900412][ T7497] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.074967][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 196.086965][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.107677][ T5911] usb 5-1: USB disconnect, device number 30 [ 196.124846][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.160556][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.180420][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.187638][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.219227][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.226512][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.388587][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.705104][ T5826] Bluetooth: hci2: command tx timeout [ 196.820369][ T7640] program syz.4.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.881221][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.989946][ T7489] veth0_vlan: entered promiscuous mode [ 197.015956][ T7489] veth1_vlan: entered promiscuous mode [ 197.090202][ T7489] veth0_macvtap: entered promiscuous mode [ 197.111533][ T7489] veth1_macvtap: entered promiscuous mode [ 197.178697][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.186540][ T5826] Bluetooth: hci1: command tx timeout [ 197.216681][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.255818][ T139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.293581][ T139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.354543][ T139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.371394][ T139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.549496][ T7660] binder: 7659:7660 ioctl c0306201 2000000003c0 returned -14 [ 197.625828][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.661078][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.742760][ T7497] veth0_vlan: entered promiscuous mode [ 197.780118][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.801090][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.836272][ T7497] veth1_vlan: entered promiscuous mode [ 197.999768][ T7497] veth0_macvtap: entered promiscuous mode [ 198.038292][ T7497] veth1_macvtap: entered promiscuous mode [ 198.105216][ T7675] sg_write: data in/out 458742/80 bytes for SCSI command 0x0-- guessing data in; [ 198.105216][ T7675] program syz.5.512 not setting count and/or reply_len properly [ 198.144103][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.175619][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.203512][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.216455][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.254615][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.281732][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.441701][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.452603][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.490295][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.499408][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.563076][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 198.690653][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 198.716104][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.728077][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.741170][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.752917][ T10] usb 5-1: config 0 descriptor?? [ 198.784807][ T5826] Bluetooth: hci2: command tx timeout [ 198.823631][ T5894] usb 6-1: device descriptor read/64, error -71 [ 199.064254][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 199.169317][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.178373][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.195754][ T10] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 199.204640][ T5894] usb 6-1: device descriptor read/64, error -71 [ 199.214217][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0025/input/input47 [ 199.265137][ T5826] Bluetooth: hci1: command tx timeout [ 199.325686][ T5894] usb usb6-port1: attempt power cycle [ 199.359460][ T10] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 199.654261][ T7710] syzkaller1: entered promiscuous mode [ 199.662012][ T7710] syzkaller1: entered allmulticast mode [ 199.667922][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.693770][ T5894] usb 6-1: device descriptor read/8, error -71 [ 199.725886][ T5912] usb 5-1: USB disconnect, device number 31 [ 199.936859][ T5894] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 199.957196][ T5894] usb 6-1: device descriptor read/8, error -71 [ 200.067846][ T5894] usb usb6-port1: unable to enumerate USB device [ 200.352668][ T7716] kvm: pic: single mode not supported [ 200.352835][ T7716] kvm: pic: single mode not supported [ 200.358823][ T7716] kvm: pic: single mode not supported [ 200.364393][ T7716] kvm: pic: single mode not supported [ 200.371389][ T7716] kvm: pic: single mode not supported [ 200.378009][ T7716] kvm: pic: single mode not supported [ 200.383726][ T7716] kvm: pic: single mode not supported [ 200.390155][ T7716] kvm: pic: single mode not supported [ 200.395609][ T7716] kvm: pic: single mode not supported [ 200.401174][ T7716] kvm: pic: single mode not supported [ 200.407078][ T7716] FAULT_INJECTION: forcing a failure. [ 200.407078][ T7716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.425638][ T7716] CPU: 1 UID: 0 PID: 7716 Comm: syz.4.560 Not tainted syzkaller #0 PREEMPT(full) [ 200.425660][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.425673][ T7716] Call Trace: [ 200.425681][ T7716] [ 200.425689][ T7716] dump_stack_lvl+0xe8/0x150 [ 200.425717][ T7716] should_fail_ex+0x412/0x560 [ 200.425745][ T7716] __kvm_read_guest_page+0x18d/0x240 [ 200.425764][ T7716] kvm_fetch_guest_virt+0x12b/0x170 [ 200.425787][ T7716] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 200.425808][ T7716] __do_insn_fetch_bytes+0x31c/0x700 [ 200.425829][ T7716] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 200.425858][ T7716] ? trace_kvm_tdp_mmu_spte_changed+0x8a/0x260 [ 200.425880][ T7716] x86_decode_insn+0x38e/0x5df0 [ 200.425894][ T7716] ? handle_changed_spte+0x3f8/0x14a0 [ 200.425926][ T7716] ? kvm_tdp_mmu_map+0xe16/0x1ed0 [ 200.425948][ T7716] ? __pfx_x86_decode_insn+0x10/0x10 [ 200.425965][ T7716] ? kvm_tdp_mmu_map+0x3bf/0x1ed0 [ 200.425982][ T7716] ? kvm_mmu_faultin_pfn+0xebd/0x15e0 [ 200.426004][ T7716] ? vmx_read_guest_seg_ar+0x38f/0x5b0 [ 200.426021][ T7716] ? __asan_memset+0x22/0x50 [ 200.426044][ T7716] ? init_decode_cache+0xea/0x160 [ 200.426061][ T7716] ? init_emulate_ctxt+0x4e7/0x680 [ 200.426087][ T7716] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 200.426112][ T7716] ? do_raw_read_unlock+0x3d/0x80 [ 200.426137][ T7716] ? _raw_read_unlock+0x28/0x50 [ 200.426154][ T7716] ? kvm_tdp_page_fault+0x2f4/0x370 [ 200.426177][ T7716] x86_emulate_instruction+0x64a/0x2100 [ 200.426198][ T7716] ? rcu_qs+0x5e/0xe0 [ 200.426216][ T7716] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 200.426241][ T7716] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 200.426254][ T7716] ? __lock_acquire+0x6b5/0x2cf0 [ 200.426279][ T7716] ? vmx_vcpu_run+0x1bb1/0x2de0 [ 200.426297][ T7716] ? handle_io+0x1e3/0x270 [ 200.426319][ T7716] ? __pfx_handle_io+0x10/0x10 [ 200.426339][ T7716] vmx_handle_exit+0xfd1/0x16c0 [ 200.426368][ T7716] vcpu_run+0x5fa2/0x7b90 [ 200.426402][ T7716] ? vcpu_run+0x4ca8/0x7b90 [ 200.426447][ T7716] ? __pfx_vcpu_run+0x10/0x10 [ 200.426460][ T7716] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 200.426482][ T7716] ? rcu_is_watching+0x15/0xb0 [ 200.426504][ T7716] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 200.426530][ T7716] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 200.426546][ T7716] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 200.426563][ T7716] ? rcu_is_watching+0x15/0xb0 [ 200.426581][ T7716] ? trace_contention_end+0x3d/0x150 [ 200.426604][ T7716] ? __mutex_lock+0x319/0x1300 [ 200.426632][ T7716] ? kasan_quarantine_put+0xbb/0x1f0 [ 200.426656][ T7716] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 200.426673][ T7716] ? __pfx___mutex_lock+0x10/0x10 [ 200.426710][ T7716] ? tomoyo_path_number_perm+0x219/0x630 [ 200.426732][ T7716] ? do_vfs_ioctl+0x1166/0x1530 [ 200.426751][ T7716] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 200.426769][ T7716] kvm_vcpu_ioctl+0xa62/0xfd0 [ 200.426788][ T7716] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 200.426800][ T7716] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 200.426836][ T7716] ? __fget_files+0x2a/0x420 [ 200.426864][ T7716] ? __fget_files+0x2a/0x420 [ 200.426883][ T7716] ? __fget_files+0x3a0/0x420 [ 200.426903][ T7716] ? __fget_files+0x2a/0x420 [ 200.426926][ T7716] ? bpf_lsm_file_ioctl+0x9/0x20 [ 200.426945][ T7716] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 200.426959][ T7716] __se_sys_ioctl+0xfc/0x170 [ 200.426977][ T7716] do_syscall_64+0x14d/0xf80 [ 200.426997][ T7716] ? trace_irq_disable+0x3b/0x150 [ 200.427019][ T7716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.427034][ T7716] ? clear_bhb_loop+0x40/0x90 [ 200.427052][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.427067][ T7716] RIP: 0033:0x7f5b2b39aeb9 [ 200.427082][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.427097][ T7716] RSP: 002b:00007f5b2c20a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.427114][ T7716] RAX: ffffffffffffffda RBX: 00007f5b2b615fa0 RCX: 00007f5b2b39aeb9 [ 200.427125][ T7716] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 200.427134][ T7716] RBP: 00007f5b2c20a090 R08: 0000000000000000 R09: 0000000000000000 [ 200.427143][ T7716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.427152][ T7716] R13: 00007f5b2b616038 R14: 00007f5b2b615fa0 R15: 00007fff2ea87f58 [ 200.427175][ T7716] [ 201.220015][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 201.370503][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 201.377855][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 201.386855][ T24] usb 5-1: config 7 has an invalid interface number: 58 but max is 0 [ 201.395011][ T24] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 201.409838][ T24] usb 5-1: config 7 has no interface number 0 [ 201.416343][ T24] usb 5-1: config 7 interface 58 has no altsetting 0 [ 201.425233][ T24] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 201.434586][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.450561][ T24] usb 5-1: Product: syz [ 201.454741][ T24] usb 5-1: Manufacturer: syz [ 201.459340][ T24] usb 5-1: SerialNumber: syz [ 201.677200][ T24] usb 5-1: USB disconnect, device number 32 [ 201.871767][ T796] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 202.022093][ T796] usb 6-1: Using ep0 maxpacket: 8 [ 202.029391][ T796] usb 6-1: unable to get BOS descriptor or descriptor too short [ 202.038427][ T796] usb 6-1: config 3 has no interfaces? [ 202.046281][ T796] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a3f, bcdDevice=9c.bb [ 202.055400][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.064526][ T796] usb 6-1: Product: 佦줶峲玖袁鯂נּ鍖진蒱꘶ঞ惲ቚ揗꒙㗤世쵘ĩ䊒᰾䍀쉜ᦆꋊ䂽䤄伐靔補㪉㟮乇鴮卢Ẽ돷ꃙ⨵꣎瘂苇䥲犟ࣶ㕰蝿埍옇ﰪᖟந蜈ဴꋰ릁᭫숧ᐾኾ밹剁ﵫ쑾슨҈ӑꎥ祌꼪軍먲୏㋶啂쎒窧❃釟珞帔튗⡩澷⾉ڣയ䪌ⶮ蚉撛纩祉ᗗ⹴㟅▾Ԑ鬣ꛟ፝掰ꉪ颎㙩䳕️嶓ᱪﭙ율᎙ [ 202.099879][ T796] usb 6-1: Manufacturer: 倊 [ 202.105946][ T796] usb 6-1: SerialNumber: з [ 202.273895][ T5894] IPVS: starting estimator thread 0... [ 202.337324][ T796] usb 6-1: USB disconnect, device number 6 [ 202.396502][ T7735] IPVS: using max 30 ests per chain, 72000 per kthread [ 202.643824][ T5894] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 202.774884][ T5894] usb 5-1: device descriptor read/64, error -71 [ 203.024726][ T5894] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 203.175175][ T5894] usb 5-1: device descriptor read/64, error -71 [ 203.288327][ T5894] usb usb5-port1: attempt power cycle [ 203.626343][ T5894] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 203.648825][ T5894] usb 5-1: device descriptor read/8, error -71 [ 203.897136][ T5894] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 203.917797][ T5894] usb 5-1: device descriptor read/8, error -71 [ 203.937127][ T796] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 204.027738][ T5894] usb usb5-port1: unable to enumerate USB device [ 204.092209][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.103314][ T796] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.112411][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.123159][ T796] usb 6-1: config 0 descriptor?? [ 204.541502][ T796] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 204.553679][ T796] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0026/input/input48 [ 204.655378][ T796] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 205.062650][ T42] usb 6-1: USB disconnect, device number 7 [ 205.786282][ T7778] kvm: emulating exchange as write [ 205.801238][ T7785] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.584'. [ 205.817255][ T5831] Bluetooth: Frame is too long (len 71, expected len 47) [ 205.826752][ T5831] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 205.833344][ T5831] Bluetooth: Wrong link type (-22) [ 205.838874][ T5831] Bluetooth: Wrong link type (-71) [ 205.845109][ T5831] Bluetooth: hci4: link tx timeout [ 205.850375][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 206.032601][ T42] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 206.163363][ T42] usb 6-1: device descriptor read/64, error -71 [ 206.403645][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 206.543807][ T42] usb 6-1: device descriptor read/64, error -71 [ 206.636984][ T7797] x_tables: duplicate underflow at hook 2 [ 206.648388][ T7797] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 206.665497][ T42] usb usb6-port1: attempt power cycle [ 206.737731][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 207.014986][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.037195][ T42] usb 6-1: device descriptor read/8, error -71 [ 207.275626][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 207.296146][ T42] usb 6-1: device descriptor read/8, error -71 [ 207.406817][ T42] usb usb6-port1: unable to enumerate USB device [ 207.927853][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 208.271568][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 208.433821][ T7837] binder_alloc: 7836: binder_alloc_buf size -1673434846451797704 failed, no address space [ 208.444953][ T7837] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 208.631270][ T7844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.022274][ T7862] openvswitch: netlink: IP tunnel dst address not specified [ 209.032685][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.604'. [ 209.573713][ T7886] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 209.585754][ T7886] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 210.171650][ T7906] FAULT_INJECTION: forcing a failure. [ 210.171650][ T7906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.235865][ T7906] CPU: 1 UID: 0 PID: 7906 Comm: syz.0.615 Not tainted syzkaller #0 PREEMPT(full) [ 210.235894][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 210.235908][ T7906] Call Trace: [ 210.235917][ T7906] [ 210.235925][ T7906] dump_stack_lvl+0xe8/0x150 [ 210.235960][ T7906] should_fail_ex+0x412/0x560 [ 210.235995][ T7906] __kvm_read_guest_page+0x18d/0x240 [ 210.236023][ T7906] kvm_fetch_guest_virt+0x12b/0x170 [ 210.236066][ T7906] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 210.236096][ T7906] __do_insn_fetch_bytes+0x31c/0x700 [ 210.236127][ T7906] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 210.236165][ T7906] x86_decode_insn+0x38e/0x5df0 [ 210.236221][ T7906] ? __pfx_x86_decode_insn+0x10/0x10 [ 210.236249][ T7906] ? emulator_write_gpr+0x176/0x1f0 [ 210.236281][ T7906] ? vmx_read_guest_seg_ar+0x38f/0x5b0 [ 210.236306][ T7906] ? __asan_memset+0x22/0x50 [ 210.236339][ T7906] ? init_decode_cache+0xea/0x160 [ 210.236363][ T7906] ? init_emulate_ctxt+0x4e7/0x680 [ 210.236397][ T7906] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 210.236440][ T7906] x86_emulate_instruction+0x64a/0x2100 [ 210.236466][ T7906] ? rcu_qs+0x5e/0xe0 [ 210.236492][ T7906] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 210.236530][ T7906] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 210.236548][ T7906] ? __lock_acquire+0x6b5/0x2cf0 [ 210.236585][ T7906] ? vmx_vcpu_run+0x1bb1/0x2de0 [ 210.236612][ T7906] ? handle_io+0x1e3/0x270 [ 210.236643][ T7906] ? __pfx_handle_io+0x10/0x10 [ 210.236672][ T7906] vmx_handle_exit+0xfd1/0x16c0 [ 210.236718][ T7906] vcpu_run+0x5fa2/0x7b90 [ 210.236770][ T7906] ? vcpu_run+0x4ca8/0x7b90 [ 210.236840][ T7906] ? __pfx_vcpu_run+0x10/0x10 [ 210.236860][ T7906] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 210.236897][ T7906] ? rcu_is_watching+0x15/0xb0 [ 210.236930][ T7906] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 210.236969][ T7906] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 210.236994][ T7906] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 210.237018][ T7906] ? rcu_is_watching+0x15/0xb0 [ 210.237046][ T7906] ? trace_contention_end+0x3d/0x150 [ 210.237085][ T7906] ? __mutex_lock+0x319/0x1300 [ 210.237122][ T7906] ? kasan_quarantine_put+0xbb/0x1f0 [ 210.237157][ T7906] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 210.237182][ T7906] ? __pfx___mutex_lock+0x10/0x10 [ 210.237212][ T7906] ? tomoyo_path_number_perm+0x219/0x630 [ 210.237242][ T7906] ? do_vfs_ioctl+0x1166/0x1530 [ 210.237267][ T7906] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 210.237294][ T7906] kvm_vcpu_ioctl+0xa62/0xfd0 [ 210.237321][ T7906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 210.237339][ T7906] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 210.237390][ T7906] ? __fget_files+0x2a/0x420 [ 210.237421][ T7906] ? __fget_files+0x2a/0x420 [ 210.237448][ T7906] ? __fget_files+0x3a0/0x420 [ 210.237475][ T7906] ? __fget_files+0x2a/0x420 [ 210.237507][ T7906] ? bpf_lsm_file_ioctl+0x9/0x20 [ 210.237531][ T7906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 210.237551][ T7906] __se_sys_ioctl+0xfc/0x170 [ 210.237576][ T7906] do_syscall_64+0x14d/0xf80 [ 210.237603][ T7906] ? trace_irq_disable+0x3b/0x150 [ 210.237631][ T7906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.237653][ T7906] ? clear_bhb_loop+0x40/0x90 [ 210.237678][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.237698][ T7906] RIP: 0033:0x7f095a59aeb9 [ 210.237718][ T7906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.237737][ T7906] RSP: 002b:00007f095b4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.237759][ T7906] RAX: ffffffffffffffda RBX: 00007f095a815fa0 RCX: 00007f095a59aeb9 [ 210.237774][ T7906] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 210.237786][ T7906] RBP: 00007f095b4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.237798][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.237809][ T7906] R13: 00007f095a816038 R14: 00007f095a815fa0 R15: 00007ffcf0909fb8 [ 210.237841][ T7906] [ 210.655469][ T7915] netlink: 40 bytes leftover after parsing attributes in process `syz.5.614'. [ 211.037301][ T7933] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 211.046373][ T7933] veth0_vlan: entered allmulticast mode [ 211.065360][ T7933] veth0_vlan: left promiscuous mode [ 211.074040][ T7933] veth0_vlan: entered promiscuous mode [ 211.086484][ T7933] team0: Device veth0_vlan failed to register rx_handler [ 212.966314][ T7907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.043211][ T7946] netlink: 'syz.0.620': attribute type 2 has an invalid length. [ 213.608513][ T7979] netlink: 'syz.6.631': attribute type 10 has an invalid length. [ 213.643733][ T7979] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 213.761911][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 213.912238][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 213.919506][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.931986][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.00 [ 213.941091][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.952077][ T10] usb 6-1: config 0 descriptor?? [ 213.967935][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input49 [ 213.977241][ T796] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 214.152620][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 214.161714][ T796] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 214.170350][ T796] usb 5-1: config 0 has no interface number 0 [ 214.174993][ T24] usb 6-1: USB disconnect, device number 12 [ 214.183343][ T796] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 214.193710][ T6261] bcm5974 6-1:0.0: could not read from device [ 214.213186][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.221238][ T796] usb 5-1: Product: syz [ 214.232157][ T796] usb 5-1: Manufacturer: syz [ 214.239821][ T796] usb 5-1: SerialNumber: syz [ 214.249920][ T796] usb 5-1: config 0 descriptor?? [ 214.264747][ T796] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 214.514649][ T796] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 214.527210][ T796] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 214.712935][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 40 [ 214.934065][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 214.936103][ T24] usb 5-1: USB disconnect, device number 37 [ 214.979331][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 215.011778][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 215.047198][ T24] quatech2 5-1:0.51: device disconnected [ 215.896822][ T8001] binder: binder_mmap: 8000 200000001000-20000000b000 bad vm_flags failed -1 [ 215.988754][ T8008] netlink: 'syz.5.641': attribute type 3 has an invalid length. [ 215.996711][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.641'. [ 216.417282][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.648'. [ 216.458121][ T5831] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 216.515680][ T8037] netlink: 408 bytes leftover after parsing attributes in process `syz.4.650'. [ 216.818423][ T8049] usb usb1: usbfs: process 8049 (syz.6.655) did not claim interface 0 before use [ 216.978505][ T8055] FAULT_INJECTION: forcing a failure. [ 216.978505][ T8055] name failslab, interval 1, probability 0, space 0, times 0 [ 216.994280][ T8055] CPU: 1 UID: 0 PID: 8055 Comm: syz.6.657 Not tainted syzkaller #0 PREEMPT(full) [ 216.994305][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 216.994318][ T8055] Call Trace: [ 216.994326][ T8055] [ 216.994334][ T8055] dump_stack_lvl+0xe8/0x150 [ 216.994365][ T8055] should_fail_ex+0x412/0x560 [ 216.994396][ T8055] should_failslab+0xa8/0x100 [ 216.994421][ T8055] __kmalloc_noprof+0xe8/0x760 [ 216.994442][ T8055] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 216.994479][ T8055] tomoyo_realpath_from_path+0xe3/0x5d0 [ 216.994520][ T8055] ? tomoyo_path_number_perm+0x219/0x630 [ 216.994545][ T8055] tomoyo_path_number_perm+0x246/0x630 [ 216.994583][ T8055] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.994612][ T8055] ? __lock_acquire+0x6b5/0x2cf0 [ 216.994650][ T8055] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 216.994700][ T8055] ? __fget_files+0x2a/0x420 [ 216.994731][ T8055] ? __fget_files+0x2a/0x420 [ 216.994757][ T8055] ? __fget_files+0x3a0/0x420 [ 216.994783][ T8055] ? __fget_files+0x2a/0x420 [ 216.994814][ T8055] security_file_ioctl+0xc3/0x2a0 [ 216.994841][ T8055] __se_sys_ioctl+0x47/0x170 [ 216.994866][ T8055] do_syscall_64+0x14d/0xf80 [ 216.994892][ T8055] ? trace_irq_disable+0x3b/0x150 [ 216.994920][ T8055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.994941][ T8055] ? clear_bhb_loop+0x40/0x90 [ 216.994964][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.994984][ T8055] RIP: 0033:0x7f101ab9aeb9 [ 216.995002][ T8055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.995031][ T8055] RSP: 002b:00007f101b9ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.995050][ T8055] RAX: ffffffffffffffda RBX: 00007f101ae15fa0 RCX: 00007f101ab9aeb9 [ 216.995064][ T8055] RDX: 0000200000000180 RSI: 00000000c0185500 RDI: 0000000000000003 [ 216.995076][ T8055] RBP: 00007f101b9ca090 R08: 0000000000000000 R09: 0000000000000000 [ 216.995088][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.995099][ T8055] R13: 00007f101ae16038 R14: 00007f101ae15fa0 R15: 00007ffc49736008 [ 216.995130][ T8055] [ 216.995145][ T8055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.219854][ T8055] usb usb1: usbfs: process 8055 (syz.6.657) did not claim interface 0 before use [ 217.279945][ T8058] usb usb1: usbfs: process 8058 (syz.5.658) did not claim interface 0 before use [ 217.430377][ T8069] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.522300][ T5831] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 217.901605][ T42] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 218.061684][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 218.073798][ T42] usb 5-1: config 255 has an invalid interface number: 207 but max is 0 [ 218.082660][ T42] usb 5-1: config 255 has no interface number 0 [ 218.088989][ T42] usb 5-1: config 255 interface 207 has no altsetting 0 [ 218.098906][ T42] usb 5-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34 [ 218.108341][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.117358][ T42] usb 5-1: Product: syz [ 218.121646][ T42] usb 5-1: Manufacturer: syz [ 218.126902][ T42] usb 5-1: SerialNumber: syz [ 218.302528][ T5894] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 218.353480][ T42] peak_usb 5-1:255.207 can0: unable to request usb[type=0 value=1] err=-71 [ 218.362134][ T42] peak_usb 5-1:255.207: unable to read PCAN-USB Pro FD firmware info (err -71) [ 218.415717][ T42] peak_usb 5-1:255.207: probe with driver peak_usb failed with error -71 [ 218.444416][ T42] usb 5-1: USB disconnect, device number 38 [ 218.458409][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 218.489358][ T5894] usb 6-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 218.503734][ T5894] usb 6-1: too many endpoints for config 0 interface 0 altsetting 245: 114, using maximum allowed: 30 [ 218.519672][ T5894] usb 6-1: config 0 interface 0 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 218.534179][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.540902][ T5894] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.552384][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.569118][ T5894] usb 6-1: config 0 descriptor?? [ 218.638806][ T8091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 218.706429][ T8093] netlink: 'syz.6.672': attribute type 1 has an invalid length. [ 218.777240][ T8094] F2FS-fs: Conflicting test_dummy_encryption options [ 218.989987][ T5894] usb 6-1: string descriptor 0 read error: -71 [ 219.002050][ T5894] usb 6-1: USB disconnect, device number 13 [ 219.169276][ T8100] loop5: detected capacity change from 0 to 7 [ 219.179711][ T8100] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 219.186558][ T8100] loop5: p1 start 2429259420 is beyond EOD, truncated [ 219.193455][ T8100] loop5: p2 start 3773841650 is beyond EOD, truncated [ 219.201159][ T8100] loop5: p3 start 2117034607 is beyond EOD, truncated [ 219.208037][ T8100] loop5: p4 start 1543794713 is beyond EOD, truncated [ 219.214881][ T8100] loop5: p5 start 1815049829 is beyond EOD, truncated [ 219.221650][ T8100] loop5: p6 start 1947514175 is beyond EOD, truncated [ 219.228527][ T8100] loop5: p7 start 2819344148 is beyond EOD, truncated [ 219.605297][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 219.745597][ T24] usb 5-1: device descriptor read/64, error -71 [ 219.986099][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 220.116438][ T24] usb 5-1: device descriptor read/64, error -71 [ 220.228019][ T24] usb usb5-port1: attempt power cycle [ 220.569520][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 220.598398][ T24] usb 5-1: device descriptor read/8, error -71 [ 220.838822][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 220.858596][ T24] usb 5-1: device descriptor read/8, error -71 [ 220.969131][ T24] usb usb5-port1: unable to enumerate USB device [ 221.409316][ T8125] 9p: Bad value for 'wfdno' [ 221.527682][ T8129] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.399677][ T8135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.690'. [ 222.450172][ T8137] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 222.494703][ T8139] netlink: 104 bytes leftover after parsing attributes in process `syz.4.692'. [ 222.540187][ T8141] netlink: 'syz.4.693': attribute type 1 has an invalid length. [ 222.549421][ T8141] netlink: 'syz.4.693': attribute type 4 has an invalid length. [ 222.558043][ T8141] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.693'. [ 222.570384][ T8141] binder: 8140:8141 ioctl 89e3 0 returned -22 [ 223.103136][ T796] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 223.259802][ T796] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.272397][ T796] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.286399][ T796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.293077][ T796] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 223.302697][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.323175][ T796] usb 5-1: config 0 descriptor?? [ 223.774689][ T796] hid_mf 0003:0079:1843.0027: hidraw0: USB HID v0.00 Device [HID 0079:1843] on usb-dummy_hcd.4-1/input0 [ 223.805217][ T796] hid_mf 0003:0079:1843.0027: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 224.528998][ T1722] block nbd1: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 90 seconds [ 224.539824][ T1722] block nbd1: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 90 seconds [ 224.550819][ T1722] block nbd1: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 90 seconds [ 224.561779][ T1722] block nbd1: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 90 seconds [ 224.700917][ T8160] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 224.719676][ T8160] team0: Device veth1_macvtap failed to register rx_handler [ 224.734012][ T8160] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 224.741788][ T8160] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.888020][ T10] usb 5-1: USB disconnect, device number 43 [ 225.983586][ T8169] comedi comedi3: comedi_config --init_data is deprecated [ 227.172098][ T796] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 227.344975][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.356214][ T796] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.365843][ T796] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.379423][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.390643][ T796] usb 5-1: config 0 descriptor?? [ 229.962638][ T10] usb 5-1: USB disconnect, device number 44 [ 230.076377][ T8197] FAULT_INJECTION: forcing a failure. [ 230.076377][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 230.089539][ T8197] CPU: 1 UID: 0 PID: 8197 Comm: syz.4.717 Not tainted syzkaller #0 PREEMPT(full) [ 230.089564][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 230.089576][ T8197] Call Trace: [ 230.089585][ T8197] [ 230.089593][ T8197] dump_stack_lvl+0xe8/0x150 [ 230.089624][ T8197] should_fail_ex+0x412/0x560 [ 230.089656][ T8197] should_failslab+0xa8/0x100 [ 230.089682][ T8197] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 230.089705][ T8197] ? xfrm_add_sa+0x2956/0x4230 [ 230.089742][ T8197] kmemdup_noprof+0x2b/0x70 [ 230.089768][ T8197] xfrm_add_sa+0x2956/0x4230 [ 230.089808][ T8197] ? __pfx_xfrm_add_sa+0x10/0x10 [ 230.089836][ T8197] ? apparmor_capable+0x126/0x170 [ 230.089862][ T8197] ? __nla_parse+0x40/0x60 [ 230.089897][ T8197] xfrm_user_rcv_msg+0x746/0xb20 [ 230.089934][ T8197] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 230.090000][ T8197] ? __pfx___mutex_trylock_common+0x10/0x10 [ 230.090034][ T8197] ? rcu_is_watching+0x15/0xb0 [ 230.090062][ T8197] ? trace_contention_end+0x3d/0x150 [ 230.090093][ T8197] ? __mutex_lock+0x319/0x1300 [ 230.090128][ T8197] netlink_rcv_skb+0x232/0x4b0 [ 230.090151][ T8197] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 230.090183][ T8197] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.090216][ T8197] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.090230][ T8197] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.090246][ T8197] xfrm_netlink_rcv+0x79/0x90 [ 230.090268][ T8197] netlink_unicast+0x80f/0x9b0 [ 230.090296][ T8197] ? __pfx_netlink_unicast+0x10/0x10 [ 230.090318][ T8197] ? netlink_sendmsg+0x650/0xb40 [ 230.090332][ T8197] ? skb_put+0x11b/0x210 [ 230.090350][ T8197] netlink_sendmsg+0x813/0xb40 [ 230.090371][ T8197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.090388][ T8197] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 230.090416][ T8197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.090430][ T8197] sock_sendmsg_nosec+0x18f/0x1d0 [ 230.090453][ T8197] ____sys_sendmsg+0x589/0x8c0 [ 230.090477][ T8197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.090500][ T8197] ? import_iovec+0x73/0xa0 [ 230.090521][ T8197] ___sys_sendmsg+0x2a5/0x360 [ 230.090542][ T8197] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.090584][ T8197] ? __fget_files+0x2a/0x420 [ 230.090604][ T8197] ? __fget_files+0x3a0/0x420 [ 230.090641][ T8197] __x64_sys_sendmsg+0x1bd/0x2a0 [ 230.090660][ T8197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.090683][ T8197] ? __pfx_ksys_write+0x10/0x10 [ 230.090703][ T8197] do_syscall_64+0x14d/0xf80 [ 230.090720][ T8197] ? trace_irq_disable+0x3b/0x150 [ 230.090739][ T8197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.090753][ T8197] ? clear_bhb_loop+0x40/0x90 [ 230.090769][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.090783][ T8197] RIP: 0033:0x7f5b2b39aeb9 [ 230.090796][ T8197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.090807][ T8197] RSP: 002b:00007f5b2c20a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.090821][ T8197] RAX: ffffffffffffffda RBX: 00007f5b2b615fa0 RCX: 00007f5b2b39aeb9 [ 230.090831][ T8197] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000004 [ 230.090840][ T8197] RBP: 00007f5b2c20a090 R08: 0000000000000000 R09: 0000000000000000 [ 230.090848][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.090856][ T8197] R13: 00007f5b2b616038 R14: 00007f5b2b615fa0 R15: 00007fff2ea87f58 [ 230.090877][ T8197] [ 230.769789][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 230.900508][ T24] usb 5-1: device descriptor read/64, error -71 [ 231.140630][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 231.270843][ T24] usb 5-1: device descriptor read/64, error -71 [ 231.381756][ T24] usb usb5-port1: attempt power cycle [ 231.721681][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 231.742438][ T24] usb 5-1: device descriptor read/8, error -71 [ 231.982226][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 232.002667][ T24] usb 5-1: device descriptor read/8, error -71 [ 232.113870][ T24] usb usb5-port1: unable to enumerate USB device [ 232.383309][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 232.689125][ T8207] FAULT_INJECTION: forcing a failure. [ 232.689125][ T8207] name failslab, interval 1, probability 0, space 0, times 0 [ 232.701924][ T8207] CPU: 1 UID: 0 PID: 8207 Comm: syz.0.721 Not tainted syzkaller #0 PREEMPT(full) [ 232.701949][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.701963][ T8207] Call Trace: [ 232.701971][ T8207] [ 232.701979][ T8207] dump_stack_lvl+0xe8/0x150 [ 232.702012][ T8207] should_fail_ex+0x412/0x560 [ 232.702040][ T8207] should_failslab+0xa8/0x100 [ 232.702059][ T8207] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 232.702084][ T8207] kmem_cache_alloc_noprof+0x87/0x650 [ 232.702109][ T8207] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 232.702133][ T8207] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 232.702163][ T8207] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 232.702195][ T8207] mmu_topup_memory_caches+0x21/0x170 [ 232.702222][ T8207] kvm_mmu_load+0x9d/0x22d0 [ 232.702250][ T8207] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 232.702272][ T8207] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 232.702288][ T8207] ? kvm_apic_has_interrupt+0x73c/0x770 [ 232.702325][ T8207] vcpu_run+0x5faf/0x7b90 [ 232.702401][ T8207] ? __pfx_vcpu_run+0x10/0x10 [ 232.702418][ T8207] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 232.702443][ T8207] ? rcu_is_watching+0x15/0xb0 [ 232.702470][ T8207] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 232.702500][ T8207] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 232.702520][ T8207] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 232.702538][ T8207] ? register_lock_class+0x31/0x2e0 [ 232.702564][ T8207] ? __lock_acquire+0x6b5/0x2cf0 [ 232.702602][ T8207] ? kasan_quarantine_put+0xbb/0x1f0 [ 232.702629][ T8207] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 232.702651][ T8207] ? do_raw_write_lock+0x11d/0x260 [ 232.702679][ T8207] kvm_vcpu_ioctl+0xa62/0xfd0 [ 232.702699][ T8207] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.702713][ T8207] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 232.702751][ T8207] ? __fget_files+0x2a/0x420 [ 232.702776][ T8207] ? __fget_files+0x2a/0x420 [ 232.702797][ T8207] ? __fget_files+0x3a0/0x420 [ 232.702818][ T8207] ? __fget_files+0x2a/0x420 [ 232.702842][ T8207] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.702873][ T8207] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.702887][ T8207] __se_sys_ioctl+0xfc/0x170 [ 232.702905][ T8207] do_syscall_64+0x14d/0xf80 [ 232.702926][ T8207] ? trace_irq_disable+0x3b/0x150 [ 232.702947][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.702962][ T8207] ? clear_bhb_loop+0x40/0x90 [ 232.702981][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.702996][ T8207] RIP: 0033:0x7f095a59aeb9 [ 232.703010][ T8207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.703023][ T8207] RSP: 002b:00007f095b4e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.703039][ T8207] RAX: ffffffffffffffda RBX: 00007f095a815fa0 RCX: 00007f095a59aeb9 [ 232.703050][ T8207] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 232.703060][ T8207] RBP: 00007f095b4e6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.703069][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.703078][ T8207] R13: 00007f095a816038 R14: 00007f095a815fa0 R15: 00007ffcf0909fb8 [ 232.703101][ T8207] [ 233.946305][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 234.109168][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.119505][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.129388][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 234.138838][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.150753][ T10] usb 5-1: config 0 descriptor?? [ 235.752070][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.762063][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.770507][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.779357][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.791062][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.015799][ T8218] chnl_net:caif_netlink_parms(): no params data found [ 236.109971][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.117622][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.125510][ T8218] bridge_slave_0: entered allmulticast mode [ 236.135125][ T8218] bridge_slave_0: entered promiscuous mode [ 236.144796][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.152604][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.159878][ T8218] bridge_slave_1: entered allmulticast mode [ 236.168531][ T8218] bridge_slave_1: entered promiscuous mode [ 236.248737][ T153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.321250][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.360902][ T153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.513689][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.557389][ T153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.602642][ T5873] usb 5-1: USB disconnect, device number 49 [ 236.695277][ T153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.733019][ T8218] team0: Port device team_slave_0 added [ 236.921126][ T8218] team0: Port device team_slave_1 added [ 236.961842][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.969281][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.996179][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.032349][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.039663][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.071166][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.164816][ T8218] hsr_slave_0: entered promiscuous mode [ 237.171789][ T8218] hsr_slave_1: entered promiscuous mode [ 237.180276][ T8218] debugfs: 'hsr0' already exists in 'hsr' [ 237.186121][ T8218] Cannot create hsr debugfs directory [ 237.291539][ T153] bridge_slave_1: left allmulticast mode [ 237.297948][ T153] bridge_slave_1: left promiscuous mode [ 237.304184][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.316438][ T153] bridge_slave_0: left allmulticast mode [ 237.322253][ T153] bridge_slave_0: left promiscuous mode [ 237.332428][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.599827][ T8249] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 237.609534][ T8249] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 237.785299][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.797660][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.808328][ T153] bond0 (unregistering): Released all slaves [ 237.835236][ T5831] Bluetooth: hci3: command tx timeout [ 237.854526][ T8255] loop5: detected capacity change from 0 to 4096 [ 238.210699][ T153] hsr_slave_0: left promiscuous mode [ 238.219048][ T153] hsr_slave_1: left promiscuous mode [ 238.226586][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.234126][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.243939][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.252230][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.281823][ T153] veth1_macvtap: left promiscuous mode [ 238.287536][ T153] veth0_macvtap: left promiscuous mode [ 238.293226][ T153] veth1_vlan: left promiscuous mode [ 238.299305][ T153] veth0_vlan: left promiscuous mode [ 238.307383][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 238.469550][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 238.493219][ T10] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 238.514703][ T10] usb 5-1: Product: syz [ 238.519805][ T10] usb 5-1: Manufacturer: syz [ 238.524527][ T10] usb 5-1: SerialNumber: syz [ 238.545020][ T10] usb 5-1: config 0 descriptor?? [ 238.563257][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 238.783941][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.803689][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.820025][ T10] usb 5-1: failed to receive control message: -71 [ 238.832294][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 238.852150][ T10] usb 5-1: USB disconnect, device number 50 [ 238.861151][ T10] ch341 5-1:0.0: device disconnected [ 239.003350][ T153] team0 (unregistering): Port device team_slave_1 removed [ 239.039857][ T153] team0 (unregistering): Port device team_slave_0 removed [ 239.344728][ T8218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 239.372443][ T8218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 239.394813][ T8218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 239.424801][ T8218] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 239.625120][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.663585][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.690768][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.697971][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.733105][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.740325][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.818852][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 239.920716][ T5831] Bluetooth: hci3: command tx timeout [ 239.982236][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 239.992551][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 240.004039][ T10] usb 5-1: config 0 has no interface number 0 [ 240.016052][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 240.028695][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.046966][ T10] usb 5-1: Product: syz [ 240.057091][ T10] usb 5-1: Manufacturer: syz [ 240.067214][ T10] usb 5-1: SerialNumber: syz [ 240.078042][ T10] usb 5-1: config 0 descriptor?? [ 240.090138][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 240.143671][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.300770][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 240.343203][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 240.583236][ T8218] veth0_vlan: entered promiscuous mode [ 240.608565][ T8218] veth1_vlan: entered promiscuous mode [ 240.667331][ T8218] veth0_macvtap: entered promiscuous mode [ 240.684855][ T8218] veth1_macvtap: entered promiscuous mode [ 240.698884][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.725078][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.740670][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 240.741646][ T24] usb 5-1: USB disconnect, device number 51 [ 240.755894][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.770755][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.803380][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 240.818881][ T3482] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.833134][ T3482] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.843766][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 240.870659][ T24] quatech2 5-1:0.51: device disconnected [ 240.879276][ T153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.921367][ T153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.990335][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.000432][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.043561][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.052299][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.649504][ T8344] FAULT_INJECTION: forcing a failure. [ 241.649504][ T8344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.663329][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.4.739 Not tainted syzkaller #0 PREEMPT(full) [ 241.663348][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 241.663357][ T8344] Call Trace: [ 241.663363][ T8344] [ 241.663369][ T8344] dump_stack_lvl+0xe8/0x150 [ 241.663392][ T8344] should_fail_ex+0x412/0x560 [ 241.663415][ T8344] _copy_from_user+0x2d/0xb0 [ 241.663430][ T8344] kstrtouint_from_user+0xd6/0x180 [ 241.663451][ T8344] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 241.663482][ T8344] proc_fail_nth_write+0x8e/0x210 [ 241.663499][ T8344] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.663519][ T8344] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.663537][ T8344] vfs_write+0x29a/0xb90 [ 241.663557][ T8344] ? __pfx_vfs_write+0x10/0x10 [ 241.663572][ T8344] ? __fget_files+0x2a/0x420 [ 241.663595][ T8344] ? __fget_files+0x3a0/0x420 [ 241.663613][ T8344] ? __fget_files+0x2a/0x420 [ 241.663639][ T8344] ksys_write+0x150/0x270 [ 241.663654][ T8344] ? __pfx_ksys_write+0x10/0x10 [ 241.663676][ T8344] do_syscall_64+0x14d/0xf80 [ 241.663695][ T8344] ? trace_irq_disable+0x3b/0x150 [ 241.663715][ T8344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.663729][ T8344] ? clear_bhb_loop+0x40/0x90 [ 241.663747][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.663761][ T8344] RIP: 0033:0x7f5b2b35b78e [ 241.663774][ T8344] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 241.663786][ T8344] RSP: 002b:00007f5b2c209fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.663801][ T8344] RAX: ffffffffffffffda RBX: 00007f5b2c20a6c0 RCX: 00007f5b2b35b78e [ 241.663811][ T8344] RDX: 0000000000000001 RSI: 00007f5b2c20a0a0 RDI: 000000000000001b [ 241.663820][ T8344] RBP: 00007f5b2c20a090 R08: 0000000000000000 R09: 0000000000000000 [ 241.663841][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.663850][ T8344] R13: 00007f5b2b616038 R14: 00007f5b2b615fa0 R15: 00007fff2ea87f58 [ 241.663872][ T8344] [ 242.002252][ T5831] Bluetooth: hci3: command tx timeout [ 242.142506][ T5873] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 242.318399][ T5873] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.334517][ T5873] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 242.343679][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 242.351791][ T5873] usb 5-1: Product: syz [ 242.357971][ T5873] usb 5-1: Manufacturer: syz [ 242.363135][ T5873] usb 5-1: SerialNumber: syz [ 242.582199][ T5873] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 243.071048][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.081448][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.090786][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.099451][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.112600][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.463100][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 243.572090][ T3571] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.633971][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.641464][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.650560][ T8353] bridge_slave_0: entered allmulticast mode [ 243.658911][ T8353] bridge_slave_0: entered promiscuous mode [ 243.669507][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.677311][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.684672][ T8353] bridge_slave_1: entered allmulticast mode [ 243.695137][ T8353] bridge_slave_1: entered promiscuous mode [ 243.746331][ T3571] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.768331][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.784341][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.829771][ T3571] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.866367][ T8353] team0: Port device team_slave_0 added [ 243.877561][ T8353] team0: Port device team_slave_1 added [ 243.915322][ T3571] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.953127][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.961288][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.987422][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.003341][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.012321][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.042257][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.086241][ T5831] Bluetooth: hci3: command tx timeout [ 244.134356][ T8353] hsr_slave_0: entered promiscuous mode [ 244.143432][ T8353] hsr_slave_1: entered promiscuous mode [ 244.153016][ T8353] debugfs: 'hsr0' already exists in 'hsr' [ 244.158903][ T8353] Cannot create hsr debugfs directory [ 244.411110][ T3571] bridge_slave_1: left allmulticast mode [ 244.416974][ T3571] bridge_slave_1: left promiscuous mode [ 244.425021][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.435373][ T3571] bridge_slave_0: left allmulticast mode [ 244.441257][ T3571] bridge_slave_0: left promiscuous mode [ 244.448698][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.737636][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.749657][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.760311][ T3571] bond0 (unregistering): Released all slaves [ 244.870784][ T8377] netlink: 'syz.7.746': attribute type 5 has an invalid length. [ 245.129426][ T5831] Bluetooth: hci2: command tx timeout [ 245.286366][ T8353] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 245.336954][ T8353] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 245.377074][ T3571] hsr_slave_0: left promiscuous mode [ 245.395899][ T3571] hsr_slave_1: left promiscuous mode [ 245.407070][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.429057][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.455217][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.479030][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.534878][ T3571] veth1_macvtap: left promiscuous mode [ 245.559151][ T3571] veth0_macvtap: left promiscuous mode [ 245.564885][ T3571] veth1_vlan: left promiscuous mode [ 245.585402][ T3571] veth0_vlan: left promiscuous mode [ 246.088732][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 246.127994][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 246.477825][ T8353] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 246.493148][ T8353] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 246.666095][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.750'. [ 246.675640][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 246.794941][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.835783][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.867439][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.874661][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.904174][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.911444][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.222153][ T5831] Bluetooth: hci2: command tx timeout [ 247.248088][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.637522][ T8353] veth0_vlan: entered promiscuous mode [ 247.654501][ T8353] veth1_vlan: entered promiscuous mode [ 247.712073][ T8353] veth0_macvtap: entered promiscuous mode [ 247.730145][ T8353] veth1_macvtap: entered promiscuous mode [ 247.771857][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.798140][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.820953][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.835540][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.857621][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.867143][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.977438][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.986793][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.046190][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.054756][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.414341][ T796] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 248.569203][ T796] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.597802][ T796] usb 9-1: config 0 interface 0 has no altsetting 0 [ 248.639035][ T796] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 248.674660][ T796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.682694][ T796] usb 9-1: Product: syz [ 248.689310][ T796] usb 9-1: Manufacturer: syz [ 248.693940][ T796] usb 9-1: SerialNumber: syz [ 248.715310][ T796] usb 9-1: config 0 descriptor?? [ 248.729856][ T796] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 248.756701][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.773907][ T796] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 248.784322][ T796] usb 9-1: media controller created [ 248.802973][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.925779][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.934566][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.954909][ T796] DVB: Unable to find symbol tda10046_attach() [ 248.962690][ T796] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 248.974400][ T796] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 249.190914][ T796] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 249.221051][ T796] usb 9-1: USB disconnect, device number 2 [ 249.296887][ T5831] Bluetooth: hci2: command tx timeout [ 249.397184][ T5873] usb 5-1: USB disconnect, device number 52 [ 249.419251][ T5873] usblp0: removed [ 249.628003][ T8497] netlink: 'syz.4.756': attribute type 4 has an invalid length. [ 249.635785][ T8497] netlink: 152 bytes leftover after parsing attributes in process `syz.4.756'. [ 249.659325][ T8497] .`: renamed from bond0 (while UP) [ 249.770437][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 249.790750][ T5831] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 250.037183][ T42] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 250.187436][ T796] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 250.196985][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.210199][ T42] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.223612][ T42] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 250.232778][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.243748][ T42] usb 9-1: config 0 descriptor?? [ 250.253631][ T42] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 250.339792][ T796] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.347948][ T796] usb 5-1: config 0 has no interface number 0 [ 250.354072][ T796] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.367183][ T796] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.376975][ T796] usb 5-1: config 0 interface 1 has no altsetting 0 [ 250.385148][ T796] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 250.394315][ T796] usb 5-1: New USB device strings: Mfr=20, Product=0, SerialNumber=0 [ 250.402472][ T796] usb 5-1: Manufacturer: syz [ 250.410418][ T796] usb 5-1: config 0 descriptor?? [ 250.843535][ T796] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0028/input/input51 [ 250.919638][ T796] holtek_kbd 0003:04D9:A055.0028: input,hidraw0: USB HID v1.00 Keyboard [syz] on usb-dummy_hcd.4-1/input1 [ 251.046412][ T5918] usb 5-1: USB disconnect, device number 53 [ 251.379665][ T5831] Bluetooth: hci2: command tx timeout [ 252.339281][ T8533] netlink: 104 bytes leftover after parsing attributes in process `syz.7.768'. [ 252.477694][ T8537] netlink: 'syz.7.770': attribute type 6 has an invalid length. [ 252.486871][ T8537] netlink: 'syz.7.770': attribute type 6 has an invalid length. [ 252.521622][ T42] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 252.683774][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 252.699153][ T42] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 252.711092][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.722661][ T42] usb 5-1: Product: syz [ 252.728031][ T42] usb 5-1: Manufacturer: syz [ 252.739738][ T42] usb 5-1: SerialNumber: syz [ 252.759540][ T42] r8152-cfgselector 5-1: Unknown version 0x0000 [ 252.776079][ T42] r8152-cfgselector 5-1: config 0 descriptor?? [ 252.843234][ T5918] usb 9-1: USB disconnect, device number 3 [ 253.290339][ T5918] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 253.302424][ T42] r8152-cfgselector 5-1: USB disconnect, device number 54 [ 253.444977][ T5918] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.457136][ T5918] usb 9-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 253.466339][ T5918] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.477470][ T5918] usb 9-1: config 0 descriptor?? [ 253.487043][ T5918] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 253.881266][ T8589] vivid-001: ================= START STATUS ================= [ 253.894035][ T5918] pwc: recv_control_msg error -71 req 02 val 2b00 [ 253.900676][ T8589] vivid-001: FM Deviation: 75000 [ 253.916878][ T8589] vivid-001: ================== END STATUS ================== [ 253.917036][ T5918] pwc: recv_control_msg error -71 req 02 val 2700 [ 253.964775][ T5918] pwc: recv_control_msg error -71 req 04 val 1700 [ 253.971704][ T5918] pwc: recv_control_msg error -71 req 02 val 2c00 [ 253.978816][ T5918] pwc: recv_control_msg error -71 req 04 val 1000 [ 254.014385][ T5918] pwc: recv_control_msg error -71 req 04 val 1300 [ 254.021544][ T5918] pwc: recv_control_msg error -71 req 04 val 1400 [ 254.039960][ T5918] pwc: recv_control_msg error -71 req 02 val 2000 [ 254.047311][ T5918] pwc: recv_control_msg error -71 req 02 val 2100 [ 254.060490][ T5918] pwc: recv_control_msg error -71 req 02 val 2200 [ 254.070009][ T5918] pwc: recv_control_msg error -71 req 06 val 0600 [ 254.078137][ T5918] pwc: recv_control_msg error -71 req 04 val 1500 [ 254.085162][ T5918] pwc: recv_control_msg error -71 req 02 val 2500 [ 254.092099][ T5918] pwc: recv_control_msg error -71 req 02 val 2400 [ 254.100954][ T5918] pwc: recv_control_msg error -71 req 02 val 2600 [ 254.109632][ T5918] pwc: recv_control_msg error -71 req 02 val 2900 [ 254.117332][ T5918] pwc: recv_control_msg error -71 req 02 val 2800 [ 254.125372][ T5918] pwc: recv_control_msg error -71 req 04 val 1100 [ 254.134423][ T5918] pwc: recv_control_msg error -71 req 04 val 1200 [ 254.148553][ T5918] pwc: Registered as video103. [ 254.163596][ T5918] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input52 [ 254.205859][ T5918] usb 9-1: USB disconnect, device number 4 [ 254.286072][ T5873] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 254.434965][ T5873] usb 5-1: device descriptor read/64, error -71 [ 254.666580][ T1722] block nbd1: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 120 seconds [ 254.677544][ T1722] block nbd1: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 120 seconds [ 254.688694][ T5873] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 254.696475][ T1722] block nbd1: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 120 seconds [ 254.707551][ T1722] block nbd1: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 120 seconds [ 254.865734][ T5873] usb 5-1: device descriptor read/64, error -71 [ 254.976152][ T5873] usb usb5-port1: attempt power cycle [ 255.203368][ T8641] netlink: 48 bytes leftover after parsing attributes in process `syz.8.786'. [ 255.318044][ T5873] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 255.347320][ T5873] usb 5-1: device descriptor read/8, error -71 [ 255.385496][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.789'. [ 255.587106][ T8658] nbd8: detected capacity change from 0 to 63 [ 255.596003][ T5972] block nbd8: Send control failed (result -32) [ 255.596167][ T5831] block nbd8: Receive control failed (result -32) [ 255.604082][ T5972] block nbd8: Request send failed, requeueing [ 255.618635][ T5873] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 255.627266][ T1744] block nbd8: Dead connection, failed to find a fallback [ 255.635657][ T1744] block nbd8: shutting down sockets [ 255.641589][ T1744] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.653286][ T1744] buffer_io_error: 4 callbacks suppressed [ 255.653302][ T1744] Buffer I/O error on dev nbd8, logical block 0, async page read [ 255.671452][ T5972] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.671670][ T5873] usb 5-1: device descriptor read/8, error -71 [ 255.681197][ T5972] Buffer I/O error on dev nbd8, logical block 1, async page read [ 255.696189][ T5972] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.706820][ T5972] Buffer I/O error on dev nbd8, logical block 2, async page read [ 255.715141][ T5972] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.724904][ T5972] Buffer I/O error on dev nbd8, logical block 3, async page read [ 255.732990][ T5972] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.744025][ T5972] Buffer I/O error on dev nbd8, logical block 0, async page read [ 255.752220][ T5972] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.761779][ T5972] Buffer I/O error on dev nbd8, logical block 1, async page read [ 255.776239][ T5972] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.786348][ T5972] Buffer I/O error on dev nbd8, logical block 2, async page read [ 255.794690][ T5972] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.811762][ T5972] Buffer I/O error on dev nbd8, logical block 3, async page read [ 255.829144][ T5972] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.838799][ T5972] Buffer I/O error on dev nbd8, logical block 0, async page read [ 255.846846][ T5972] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 255.858656][ T5873] usb usb5-port1: unable to enumerate USB device [ 255.865155][ T5972] Buffer I/O error on dev nbd8, logical block 1, async page read [ 255.874270][ T5972] ldm_validate_partition_table(): Disk read failed. [ 255.881392][ T5972] Dev nbd8: unable to read RDB block 0 [ 255.887714][ T5972] nbd8: unable to read partition table [ 255.900821][ T5972] ldm_validate_partition_table(): Disk read failed. [ 255.918745][ T5972] Dev nbd8: unable to read RDB block 0 [ 255.926524][ T5972] nbd8: unable to read partition table [ 255.960794][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.970261][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003973][ T8665] netlink: 'syz.7.793': attribute type 3 has an invalid length. [ 256.061660][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.794'. [ 256.071434][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.794'. [ 256.081113][ T8667] netlink: 40 bytes leftover after parsing attributes in process `syz.7.794'. [ 256.147999][ T5912] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 256.402137][ T5912] usb 9-1: unable to get BOS descriptor or descriptor too short [ 256.431391][ T5912] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 256.446074][ T5912] usb 9-1: can't read configurations, error -71 [ 256.546380][ T8685] netlink: 'syz.7.799': attribute type 10 has an invalid length. [ 256.580005][ T8685] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.630950][ T8688] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.713416][ T8691] Invalid logical block size (16777216) [ 256.855055][ T8696] Option ' ' to dns_resolver key: bad/missing value [ 256.867570][ T8696] trusted_key: encrypted_key: master key parameter '' is invalid [ 256.966726][ T8701] FAULT_INJECTION: forcing a failure. [ 256.966726][ T8701] name failslab, interval 1, probability 0, space 0, times 0 [ 256.979647][ T8701] CPU: 1 UID: 0 PID: 8701 Comm: syz.8.805 Not tainted syzkaller #0 PREEMPT(full) [ 256.979665][ T8701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 256.979680][ T8701] Call Trace: [ 256.979688][ T8701] [ 256.979693][ T8701] dump_stack_lvl+0xe8/0x150 [ 256.979716][ T8701] should_fail_ex+0x412/0x560 [ 256.979738][ T8701] should_failslab+0xa8/0x100 [ 256.979754][ T8701] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 256.979774][ T8701] kmem_cache_alloc_noprof+0x87/0x650 [ 256.979794][ T8701] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 256.979813][ T8701] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 256.979837][ T8701] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 256.979863][ T8701] mmu_topup_memory_caches+0x21/0x170 [ 256.979884][ T8701] kvm_mmu_load+0x9d/0x22d0 [ 256.979903][ T8701] ? kvm_msr_allowed+0x3f4/0x490 [ 256.979916][ T8701] ? kvm_msr_allowed+0x9a/0x490 [ 256.979932][ T8701] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 256.979946][ T8701] ? kvm_apic_has_interrupt+0x73c/0x770 [ 256.979967][ T8701] vcpu_run+0x5faf/0x7b90 [ 256.979981][ T8701] ? trace_ipi_send_cpu+0x7e/0x220 [ 256.980042][ T8701] ? __pfx_vcpu_run+0x10/0x10 [ 256.980055][ T8701] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 256.980075][ T8701] ? rcu_is_watching+0x15/0xb0 [ 256.980097][ T8701] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 256.980121][ T8701] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 256.980136][ T8701] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 256.980151][ T8701] ? register_lock_class+0x31/0x2e0 [ 256.980170][ T8701] ? __lock_acquire+0x6b5/0x2cf0 [ 256.980191][ T8701] ? kasan_quarantine_put+0xbb/0x1f0 [ 256.980214][ T8701] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 256.980231][ T8701] ? do_raw_write_lock+0x11d/0x260 [ 256.980255][ T8701] kvm_vcpu_ioctl+0xa62/0xfd0 [ 256.980271][ T8701] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.980282][ T8701] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 256.980315][ T8701] ? __fget_files+0x2a/0x420 [ 256.980335][ T8701] ? __fget_files+0x2a/0x420 [ 256.980352][ T8701] ? __fget_files+0x3a0/0x420 [ 256.980369][ T8701] ? __fget_files+0x2a/0x420 [ 256.980389][ T8701] ? bpf_lsm_file_ioctl+0x9/0x20 [ 256.980405][ T8701] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 256.980417][ T8701] __se_sys_ioctl+0xfc/0x170 [ 256.980434][ T8701] do_syscall_64+0x14d/0xf80 [ 256.980451][ T8701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.980464][ T8701] ? clear_bhb_loop+0x40/0x90 [ 256.980481][ T8701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.980494][ T8701] RIP: 0033:0x7f4f9319aeb9 [ 256.980506][ T8701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.980518][ T8701] RSP: 002b:00007f4f913f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.980532][ T8701] RAX: ffffffffffffffda RBX: 00007f4f93415fa0 RCX: 00007f4f9319aeb9 [ 256.980542][ T8701] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 256.980551][ T8701] RBP: 00007f4f913f6090 R08: 0000000000000000 R09: 0000000000000000 [ 256.980559][ T8701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.980566][ T8701] R13: 00007f4f93416038 R14: 00007f4f93415fa0 R15: 00007ffc6e9fcb08 [ 256.980587][ T8701] [ 257.573254][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 257.637236][ T8720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.652498][ T8720] trusted_key: encrypted_key: hex blob is missing [ 257.667648][ T8720] input: syz0 as /devices/virtual/input/input53 [ 258.001169][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 258.154298][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.164715][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.180863][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 258.190123][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.200724][ T9] usb 5-1: config 0 descriptor?? [ 258.210877][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 258.692486][ T8746] FAULT_INJECTION: forcing a failure. [ 258.692486][ T8746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 258.705927][ T8746] CPU: 1 UID: 0 PID: 8746 Comm: syz.8.821 Not tainted syzkaller #0 PREEMPT(full) [ 258.705947][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 258.705956][ T8746] Call Trace: [ 258.705962][ T8746] [ 258.705968][ T8746] dump_stack_lvl+0xe8/0x150 [ 258.705992][ T8746] should_fail_ex+0x412/0x560 [ 258.706015][ T8746] prepare_alloc_pages+0x22a/0x650 [ 258.706037][ T8746] __alloc_frozen_pages_noprof+0x12f/0x380 [ 258.706057][ T8746] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 258.706077][ T8746] ? __pfx_policy_nodemask+0x10/0x10 [ 258.706096][ T8746] ? rcu_is_watching+0x15/0xb0 [ 258.706119][ T8746] alloc_pages_mpol+0x232/0x4a0 [ 258.706139][ T8746] alloc_pages_noprof+0xa8/0x190 [ 258.706158][ T8746] get_free_pages_noprof+0xf/0x80 [ 258.706175][ T8746] __kvm_mmu_topup_memory_cache+0x24f/0x610 [ 258.706204][ T8746] mmu_topup_memory_caches+0xd6/0x170 [ 258.706227][ T8746] kvm_mmu_load+0x9d/0x22d0 [ 258.706253][ T8746] ? kvm_msr_allowed+0x3f4/0x490 [ 258.706267][ T8746] ? kvm_msr_allowed+0x9a/0x490 [ 258.706285][ T8746] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 258.706300][ T8746] ? kvm_apic_has_interrupt+0x73c/0x770 [ 258.706323][ T8746] vcpu_run+0x5faf/0x7b90 [ 258.706391][ T8746] ? __pfx_vcpu_run+0x10/0x10 [ 258.706405][ T8746] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 258.706428][ T8746] ? rcu_is_watching+0x15/0xb0 [ 258.706450][ T8746] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 258.706476][ T8746] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 258.706493][ T8746] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 258.706509][ T8746] ? register_lock_class+0x31/0x2e0 [ 258.706531][ T8746] ? __lock_acquire+0x6b5/0x2cf0 [ 258.706554][ T8746] ? kasan_quarantine_put+0xbb/0x1f0 [ 258.706579][ T8746] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 258.706598][ T8746] ? do_raw_write_lock+0x11d/0x260 [ 258.706624][ T8746] kvm_vcpu_ioctl+0xa62/0xfd0 [ 258.706642][ T8746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 258.706654][ T8746] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 258.706690][ T8746] ? __fget_files+0x2a/0x420 [ 258.706711][ T8746] ? __fget_files+0x2a/0x420 [ 258.706730][ T8746] ? __fget_files+0x3a0/0x420 [ 258.706748][ T8746] ? __fget_files+0x2a/0x420 [ 258.706770][ T8746] ? bpf_lsm_file_ioctl+0x9/0x20 [ 258.706787][ T8746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 258.706801][ T8746] __se_sys_ioctl+0xfc/0x170 [ 258.706818][ T8746] do_syscall_64+0x14d/0xf80 [ 258.706837][ T8746] ? trace_irq_disable+0x3b/0x150 [ 258.706857][ T8746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.706872][ T8746] ? clear_bhb_loop+0x40/0x90 [ 258.706889][ T8746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.706903][ T8746] RIP: 0033:0x7f4f9319aeb9 [ 258.706918][ T8746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.706931][ T8746] RSP: 002b:00007f4f913f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.706946][ T8746] RAX: ffffffffffffffda RBX: 00007f4f93415fa0 RCX: 00007f4f9319aeb9 [ 258.706957][ T8746] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 258.706965][ T8746] RBP: 00007f4f913f6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.706974][ T8746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.706982][ T8746] R13: 00007f4f93416038 R14: 00007f4f93415fa0 R15: 00007ffc6e9fcb08 [ 258.707005][ T8746] [ 259.443504][ T5918] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 259.594047][ T5918] usb 9-1: Using ep0 maxpacket: 32 [ 259.605346][ T5918] usb 9-1: config index 0 descriptor too short (expected 274, got 18) [ 259.613620][ T5918] usb 9-1: config 0 has an invalid interface number: 1 but max is -1 [ 259.621764][ T5918] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 259.630721][ T5918] usb 9-1: config 0 has no interface number 0 [ 259.642946][ T5918] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 259.652089][ T5918] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.660115][ T5918] usb 9-1: Product: syz [ 259.664352][ T5918] usb 9-1: Manufacturer: syz [ 259.668965][ T5918] usb 9-1: SerialNumber: syz [ 259.675921][ T5918] usb 9-1: config 0 descriptor?? [ 259.684656][ T5918] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 259.695737][ T5918] usb 9-1: selecting invalid altsetting 1 [ 259.701490][ T5918] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 259.713526][ T5918] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 259.723987][ T5918] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 259.732274][ T5918] usb 9-1: media controller created [ 259.748630][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.897272][ T5918] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 259.928088][ T5918] zl10353_read_register: readreg error (reg=127, ret==-32) [ 259.945051][ T5918] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 260.033906][ T5918] usb 9-1: USB disconnect, device number 7 [ 260.801623][ T5894] usb 5-1: USB disconnect, device number 59 [ 260.986643][ T8799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 261.216453][ T5894] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 261.224685][ T8812] fuse: Bad value for 'user_id' [ 261.233841][ T8812] fuse: Bad value for 'user_id' [ 261.368675][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.390708][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.402182][ T5894] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 261.416782][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.459074][ T5894] usb 5-1: config 0 descriptor?? [ 261.897577][ T5912] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 261.909343][ T5894] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 261.937203][ T5894] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 261.957543][ T5894] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0029/input/input54 [ 262.013486][ T5894] cm6533_jd 0003:0D8C:0022.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 262.069639][ T5912] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.085049][ T5912] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.120697][ T10] usb 5-1: USB disconnect, device number 60 [ 262.125107][ T5912] usb 9-1: config 0 interface 0 has no altsetting 0 [ 262.137601][ T5912] usb 9-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 262.150006][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.171648][ T8841] fido_id[8841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 262.179684][ T5912] usb 9-1: config 0 descriptor?? [ 262.599378][ T5831] Bluetooth: hci2: command tx timeout [ 262.822150][ T5912] usbhid 9-1:0.0: can't add hid device: -71 [ 262.833503][ T5912] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 262.845578][ T5912] usb 9-1: USB disconnect, device number 8 [ 263.219763][ T5912] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 263.370028][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 263.377889][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.388459][ T5912] usb 5-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 263.399454][ T5912] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.412993][ T5912] usb 5-1: config 1 interface 0 has no altsetting 0 [ 263.425252][ T5912] usb 5-1: string descriptor 0 read error: -22 [ 263.431748][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.441203][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.462144][ T5912] usb 5-1: bad CDC descriptors [ 263.515286][ T8870] netlink: 160 bytes leftover after parsing attributes in process `syz.8.846'. [ 263.526146][ T8870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 263.670539][ T5894] usb 5-1: USB disconnect, device number 61 [ 264.339522][ T8886] FAULT_INJECTION: forcing a failure. [ 264.339522][ T8886] name failslab, interval 1, probability 0, space 0, times 0 [ 264.391736][ T8886] CPU: 1 UID: 0 PID: 8886 Comm: syz.4.854 Not tainted syzkaller #0 PREEMPT(full) [ 264.391762][ T8886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 264.391773][ T8886] Call Trace: [ 264.391780][ T8886] [ 264.391788][ T8886] dump_stack_lvl+0xe8/0x150 [ 264.391817][ T8886] should_fail_ex+0x412/0x560 [ 264.391846][ T8886] should_failslab+0xa8/0x100 [ 264.391866][ T8886] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 264.391892][ T8886] kmem_cache_alloc_noprof+0x87/0x650 [ 264.391918][ T8886] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 264.391943][ T8886] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 264.391975][ T8886] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 264.392017][ T8886] mmu_topup_memory_caches+0x21/0x170 [ 264.392046][ T8886] kvm_mmu_load+0x9d/0x22d0 [ 264.392076][ T8886] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 264.392100][ T8886] ? vmx_get_rflags+0x20c/0x3f0 [ 264.392121][ T8886] ? kvm_apic_has_interrupt+0x702/0x770 [ 264.392138][ T8886] ? kvm_apic_accept_pic_intr+0x119/0x130 [ 264.392167][ T8886] vcpu_run+0x5faf/0x7b90 [ 264.392281][ T8886] ? __pfx_vcpu_run+0x10/0x10 [ 264.392305][ T8886] ? vmx_set_nmi_mask+0x139/0x2a0 [ 264.392331][ T8886] ? kvm_vcpu_ioctl_x86_set_vcpu_events+0x97d/0x1050 [ 264.392365][ T8886] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 264.392401][ T8886] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 264.392423][ T8886] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 264.392476][ T8886] ? do_raw_write_lock+0x11d/0x260 [ 264.392511][ T8886] kvm_vcpu_ioctl+0xa62/0xfd0 [ 264.392537][ T8886] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.392552][ T8886] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 264.392600][ T8886] ? __fget_files+0x2a/0x420 [ 264.392629][ T8886] ? __fget_files+0x2a/0x420 [ 264.392654][ T8886] ? __fget_files+0x3a0/0x420 [ 264.392678][ T8886] ? __fget_files+0x2a/0x420 [ 264.392706][ T8886] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.392729][ T8886] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 264.392747][ T8886] __se_sys_ioctl+0xfc/0x170 [ 264.392775][ T8886] do_syscall_64+0x14d/0xf80 [ 264.392799][ T8886] ? trace_irq_disable+0x3b/0x150 [ 264.392824][ T8886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.392844][ T8886] ? clear_bhb_loop+0x40/0x90 [ 264.392868][ T8886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.392888][ T8886] RIP: 0033:0x7f5b2b39aeb9 [ 264.392906][ T8886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.392922][ T8886] RSP: 002b:00007f5b2c20a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.392942][ T8886] RAX: ffffffffffffffda RBX: 00007f5b2b615fa0 RCX: 00007f5b2b39aeb9 [ 264.392956][ T8886] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 264.392967][ T8886] RBP: 00007f5b2c20a090 R08: 0000000000000000 R09: 0000000000000000 [ 264.392979][ T8886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.392989][ T8886] R13: 00007f5b2b616038 R14: 00007f5b2b615fa0 R15: 00007fff2ea87f58 [ 264.393026][ T8886] [ 264.394681][ T8886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.027674][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.859'. [ 265.142927][ T42] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 265.305728][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 265.317411][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 265.330245][ T42] usb 5-1: config 7 has an invalid interface number: 48 but max is 0 [ 265.343290][ T42] usb 5-1: config 7 has an invalid descriptor of length 48, skipping remainder of the config [ 265.355173][ T42] usb 5-1: config 7 has no interface number 0 [ 265.361294][ T42] usb 5-1: too many endpoints for config 7 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 265.382614][ T42] usb 5-1: config 7 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 265.416597][ T42] usb 5-1: config 7 interface 48 has no altsetting 0 [ 265.439307][ T42] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 265.458762][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.467091][ T42] usb 5-1: Product: syz [ 265.471433][ T42] usb 5-1: Manufacturer: syz [ 265.477468][ T42] usb 5-1: SerialNumber: syz [ 266.425680][ T8910] loop9: detected capacity change from 0 to 7 [ 266.432403][ T8910] buffer_io_error: 138 callbacks suppressed [ 266.432414][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.446287][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.454155][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.464038][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.472002][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.479924][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.487861][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.495730][ T8910] ldm_validate_partition_table(): Disk read failed. [ 266.502344][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.510245][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.518284][ T8910] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.526303][ T8910] Dev loop9: unable to read RDB block 0 [ 266.531952][ T8910] loop9: unable to read partition table [ 266.537826][ T8910] loop9: partition table beyond EOD, truncated [ 266.544010][ T8910] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 266.544010][ T8910] ) failed (rc=-5) [ 266.800299][ T42] usb 5-1: Cannot retrieve CPort count: -71 [ 266.806331][ T42] usb 5-1: Cannot retrieve CPort count: -71 [ 266.812628][ T42] es2_ap_driver 5-1:7.48: probe with driver es2_ap_driver failed with error -71 [ 266.826978][ T42] usb 5-1: USB disconnect, device number 62 [ 267.403390][ T8353] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 267.430733][ T8353] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 267.847139][ T42] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 268.020501][ T42] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.031934][ T42] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.041180][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.051107][ T42] usb 5-1: config 0 descriptor?? [ 268.062530][ T42] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 268.335500][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.348212][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.356186][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.364944][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.372656][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 268.587033][ T8926] chnl_net:caif_netlink_parms(): no params data found [ 268.693062][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.700812][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.708017][ T8926] bridge_slave_0: entered allmulticast mode [ 268.718322][ T8926] bridge_slave_0: entered promiscuous mode [ 268.727701][ T8926] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.735142][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.742567][ T8926] bridge_slave_1: entered allmulticast mode [ 268.750140][ T8926] bridge_slave_1: entered promiscuous mode [ 268.793446][ T8926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.807145][ T8926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.845425][ T8926] team0: Port device team_slave_0 added [ 268.854543][ T8926] team0: Port device team_slave_1 added [ 268.887978][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.895358][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.922983][ T8926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.943788][ T8926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.950816][ T8926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.976880][ T8926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.033795][ T8926] hsr_slave_0: entered promiscuous mode [ 269.040687][ T8926] hsr_slave_1: entered promiscuous mode [ 269.047329][ T8926] debugfs: 'hsr0' already exists in 'hsr' [ 269.053164][ T8926] Cannot create hsr debugfs directory [ 269.236704][ T8926] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 269.248017][ T8926] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 269.259464][ T8926] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 269.270714][ T8926] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 269.372778][ T8926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.397535][ T8926] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.416257][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.423459][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.439226][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.446443][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.655563][ T8926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.897029][ T8926] veth0_vlan: entered promiscuous mode [ 269.910785][ T8926] veth1_vlan: entered promiscuous mode [ 269.953749][ T8926] veth0_macvtap: entered promiscuous mode [ 269.967620][ T8926] veth1_macvtap: entered promiscuous mode [ 269.998390][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.013108][ T8926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.029499][ T153] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.039942][ T153] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.054981][ T153] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.065577][ T153] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.142897][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.154087][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.188394][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.197666][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.270378][ T8957] FAULT_INJECTION: forcing a failure. [ 270.270378][ T8957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.285235][ T8957] CPU: 0 UID: 0 PID: 8957 Comm: syz.9.869 Not tainted syzkaller #0 PREEMPT(full) [ 270.285259][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 270.285272][ T8957] Call Trace: [ 270.285279][ T8957] [ 270.285287][ T8957] dump_stack_lvl+0xe8/0x150 [ 270.285317][ T8957] should_fail_ex+0x412/0x560 [ 270.285348][ T8957] _copy_from_user+0x2d/0xb0 [ 270.285368][ T8957] binder_ioctl_write_read+0xb05/0xa660 [ 270.285409][ T8957] ? unwind_get_return_address+0x4d/0x90 [ 270.285439][ T8957] ? arch_stack_walk+0xfb/0x150 [ 270.285479][ T8957] ? stack_trace_save+0xa9/0x100 [ 270.285498][ T8957] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 270.285517][ T8957] ? kasan_save_free_info+0x46/0x50 [ 270.285547][ T8957] ? stack_depot_save_flags+0x33/0x810 [ 270.285573][ T8957] ? format_decode+0xd0/0xe10 [ 270.285596][ T8957] ? kasan_save_track+0x4f/0x80 [ 270.285619][ T8957] ? kasan_save_track+0x3e/0x80 [ 270.285635][ T8957] ? kasan_save_free_info+0x46/0x50 [ 270.285660][ T8957] ? __kasan_slab_free+0x5c/0x80 [ 270.285683][ T8957] ? __lock_acquire+0x6b5/0x2cf0 [ 270.285726][ T8957] ? __pfx_binder_debug+0x10/0x10 [ 270.285744][ T8957] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.285777][ T8957] ? _raw_spin_unlock+0x28/0x50 [ 270.285799][ T8957] ? binder_get_thread+0x177/0x6d0 [ 270.285824][ T8957] binder_ioctl+0x41d/0x1b50 [ 270.285849][ T8957] ? tomoyo_path_number_perm+0x219/0x630 [ 270.285877][ T8957] ? do_vfs_ioctl+0x1166/0x1530 [ 270.285898][ T8957] ? __pfx_binder_ioctl+0x10/0x10 [ 270.285919][ T8957] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 270.285951][ T8957] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 270.286022][ T8957] ? __fget_files+0x2a/0x420 [ 270.286052][ T8957] ? __fget_files+0x2a/0x420 [ 270.286078][ T8957] ? __fget_files+0x3a0/0x420 [ 270.286105][ T8957] ? __fget_files+0x2a/0x420 [ 270.286146][ T8957] ? bpf_lsm_file_ioctl+0x9/0x20 [ 270.286169][ T8957] ? __pfx_binder_ioctl+0x10/0x10 [ 270.286190][ T8957] __se_sys_ioctl+0xfc/0x170 [ 270.286212][ T8957] do_syscall_64+0x14d/0xf80 [ 270.286240][ T8957] ? trace_irq_disable+0x3b/0x150 [ 270.286267][ T8957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.286287][ T8957] ? clear_bhb_loop+0x40/0x90 [ 270.286311][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.286330][ T8957] RIP: 0033:0x7f5c0a59aeb9 [ 270.286348][ T8957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.286364][ T8957] RSP: 002b:00007f5c0b3d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.286384][ T8957] RAX: ffffffffffffffda RBX: 00007f5c0a815fa0 RCX: 00007f5c0a59aeb9 [ 270.286399][ T8957] RDX: 0000200000001040 RSI: 00000000c0306201 RDI: 0000000000000003 [ 270.286411][ T8957] RBP: 00007f5c0b3d9090 R08: 0000000000000000 R09: 0000000000000000 [ 270.286424][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.286435][ T8957] R13: 00007f5c0a816038 R14: 00007f5c0a815fa0 R15: 00007ffdb3e498e8 [ 270.286465][ T8957] [ 270.286527][ T8957] binder: 8956:8957 ioctl c0306201 200000001040 returned -14 [ 270.483496][ T5826] Bluetooth: hci1: command tx timeout [ 270.647435][ T5894] usb 5-1: USB disconnect, device number 63 [ 270.738595][ T8959] syzkaller1: entered promiscuous mode [ 270.754210][ T8959] syzkaller1: entered allmulticast mode [ 270.831283][ T8965] tmpfs: Group quota block hardlimit too large. [ 271.145257][ T8976] syzkaller1: entered promiscuous mode [ 271.150829][ T8976] syzkaller1: entered allmulticast mode [ 271.673106][ T42] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 271.763739][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 271.837539][ T42] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 271.846766][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.854833][ T42] usb 5-1: Product: syz [ 271.859038][ T42] usb 5-1: Manufacturer: syz [ 271.863808][ T42] usb 5-1: SerialNumber: syz [ 271.870640][ T42] usb 5-1: config 0 descriptor?? [ 271.915448][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.927148][ T24] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 271.936334][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.947316][ T24] usb 10-1: config 0 descriptor?? [ 272.415429][ T24] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 272.428550][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.002A/input/input55 [ 272.527148][ T24] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 272.894371][ T42] usb 5-1: Firmware version (0.0) predates our first public release. [ 272.903717][ T42] usb 5-1: Please update to version 0.2 or newer [ 272.958788][ T42] usb 5-1: USB disconnect, device number 64 [ 273.256698][ T5826] Bluetooth: hci1: command tx timeout [ 273.472445][ T8999] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.877384][ T10] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 274.016621][ T10] usb 5-1: device descriptor read/64, error -71 [ 274.257384][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 274.387301][ T10] usb 5-1: device descriptor read/64, error -71 [ 274.470933][ T9010] netlink: 212356 bytes leftover after parsing attributes in process `syz.7.893'. [ 274.481583][ T9010] tmpfs: Unknown parameter 'g' [ 274.507540][ T10] usb usb5-port1: attempt power cycle [ 274.540166][ T9012] FAULT_INJECTION: forcing a failure. [ 274.540166][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 274.559850][ T9012] CPU: 1 UID: 0 PID: 9012 Comm: syz.7.894 Not tainted syzkaller #0 PREEMPT(full) [ 274.559874][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 274.559885][ T9012] Call Trace: [ 274.559893][ T9012] [ 274.559901][ T9012] dump_stack_lvl+0xe8/0x150 [ 274.559930][ T9012] should_fail_ex+0x412/0x560 [ 274.559960][ T9012] should_failslab+0xa8/0x100 [ 274.559985][ T9012] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 274.560015][ T9012] ? __alloc_skb+0x186/0x7d0 [ 274.560034][ T9012] ? __alloc_skb+0x1d0/0x7d0 [ 274.560051][ T9012] ? __local_bh_enable_ip+0xd0/0x130 [ 274.560079][ T9012] __alloc_skb+0x1d0/0x7d0 [ 274.560104][ T9012] netlink_sendmsg+0x5d4/0xb40 [ 274.560132][ T9012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.560154][ T9012] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 274.560192][ T9012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.560217][ T9012] sock_sendmsg_nosec+0x18f/0x1d0 [ 274.560248][ T9012] ____sys_sendmsg+0x589/0x8c0 [ 274.560279][ T9012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.560309][ T9012] ? import_iovec+0x73/0xa0 [ 274.560331][ T9012] ___sys_sendmsg+0x2a5/0x360 [ 274.560359][ T9012] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.560413][ T9012] ? __fget_files+0x2a/0x420 [ 274.560437][ T9012] ? __fget_files+0x3a0/0x420 [ 274.560472][ T9012] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.560508][ T9012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.560538][ T9012] ? __pfx_ksys_write+0x10/0x10 [ 274.560565][ T9012] do_syscall_64+0x14d/0xf80 [ 274.560605][ T9012] ? trace_irq_disable+0x3b/0x150 [ 274.560630][ T9012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.560649][ T9012] ? clear_bhb_loop+0x40/0x90 [ 274.560672][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.560690][ T9012] RIP: 0033:0x7fc63a39aeb9 [ 274.560717][ T9012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.560731][ T9012] RSP: 002b:00007fc63b254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.560750][ T9012] RAX: ffffffffffffffda RBX: 00007fc63a615fa0 RCX: 00007fc63a39aeb9 [ 274.560763][ T9012] RDX: 0000000040008000 RSI: 0000200000001380 RDI: 0000000000000004 [ 274.560774][ T9012] RBP: 00007fc63b254090 R08: 0000000000000000 R09: 0000000000000000 [ 274.560785][ T9012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.560795][ T9012] R13: 00007fc63a616038 R14: 00007fc63a615fa0 R15: 00007ffe8c8806d8 [ 274.560822][ T9012] [ 274.560932][ T796] usb 10-1: USB disconnect, device number 2 [ 274.964515][ T9022] loop5: detected capacity change from 0 to 4096 [ 274.974898][ T9018] FAULT_INJECTION: forcing a failure. [ 274.974898][ T9018] name failslab, interval 1, probability 0, space 0, times 0 [ 275.005825][ T9018] CPU: 1 UID: 0 PID: 9018 Comm: syz.7.896 Not tainted syzkaller #0 PREEMPT(full) [ 275.005851][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 275.005863][ T9018] Call Trace: [ 275.005871][ T9018] [ 275.005878][ T9018] dump_stack_lvl+0xe8/0x150 [ 275.005908][ T9018] should_fail_ex+0x412/0x560 [ 275.005951][ T9018] should_failslab+0xa8/0x100 [ 275.005975][ T9018] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 275.006007][ T9018] ? dup_task_struct+0x57/0x9a0 [ 275.006036][ T9018] dup_task_struct+0x57/0x9a0 [ 275.006063][ T9018] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.006089][ T9018] copy_process+0x508/0x3cf0 [ 275.006140][ T9018] ? __pfx_copy_process+0x10/0x10 [ 275.006172][ T9018] ? mutex_init_lockep+0xf9/0x130 [ 275.006202][ T9018] vhost_task_create+0x1f9/0x380 [ 275.006222][ T9018] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 275.006251][ T9018] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 275.006283][ T9018] ? __pfx_vhost_task_create+0x10/0x10 [ 275.006310][ T9018] ? __pfx_vhost_task_fn+0x10/0x10 [ 275.006337][ T9018] ? __lock_acquire+0x6b5/0x2cf0 [ 275.006369][ T9018] kvm_mmu_post_init_vm+0x14c/0x300 [ 275.006392][ T9018] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 275.006423][ T9018] ? __mutex_trylock_common+0x158/0x260 [ 275.006454][ T9018] ? __pfx___mutex_trylock_common+0x10/0x10 [ 275.006482][ T9018] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 275.006504][ T9018] ? register_lock_class+0x31/0x2e0 [ 275.006531][ T9018] ? __lock_acquire+0x6b5/0x2cf0 [ 275.006562][ T9018] ? kasan_quarantine_put+0xbb/0x1f0 [ 275.006593][ T9018] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 275.006619][ T9018] ? do_raw_write_lock+0x11d/0x260 [ 275.006654][ T9018] kvm_vcpu_ioctl+0xa62/0xfd0 [ 275.006678][ T9018] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 275.006695][ T9018] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 275.006741][ T9018] ? __fget_files+0x2a/0x420 [ 275.006770][ T9018] ? __fget_files+0x2a/0x420 [ 275.006795][ T9018] ? __fget_files+0x3a0/0x420 [ 275.006820][ T9018] ? __fget_files+0x2a/0x420 [ 275.006849][ T9018] ? bpf_lsm_file_ioctl+0x9/0x20 [ 275.006871][ T9018] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 275.006890][ T9018] __se_sys_ioctl+0xfc/0x170 [ 275.006920][ T9018] do_syscall_64+0x14d/0xf80 [ 275.006946][ T9018] ? trace_irq_disable+0x3b/0x150 [ 275.006972][ T9018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.006991][ T9018] ? clear_bhb_loop+0x40/0x90 [ 275.007015][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.007033][ T9018] RIP: 0033:0x7fc63a39aeb9 [ 275.007051][ T9018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.007067][ T9018] RSP: 002b:00007fc63b254028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.007087][ T9018] RAX: ffffffffffffffda RBX: 00007fc63a615fa0 RCX: 00007fc63a39aeb9 [ 275.007101][ T9018] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 275.007123][ T9018] RBP: 00007fc63b254090 R08: 0000000000000000 R09: 0000000000000000 [ 275.007133][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.007143][ T9018] R13: 00007fc63a616038 R14: 00007fc63a615fa0 R15: 00007ffe8c8806d8 [ 275.007172][ T9018] [ 275.320970][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 275.344363][ T5826] Bluetooth: hci1: command tx timeout [ 275.356771][ T10] usb 5-1: device descriptor read/8, error -71 [ 275.639001][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 275.660595][ T10] usb 5-1: device descriptor read/8, error -71 [ 275.770473][ T10] usb usb5-port1: unable to enumerate USB device [ 277.014962][ T9072] : renamed from veth0_vlan (while UP) [ 277.041083][ T796] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 277.181358][ T796] usb 5-1: device descriptor read/64, error -71 [ 277.431659][ T796] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 277.451137][ T9083] netlink: 228 bytes leftover after parsing attributes in process `syz.7.922'. [ 277.582023][ T796] usb 5-1: device descriptor read/64, error -71 [ 277.693228][ T796] usb usb5-port1: attempt power cycle [ 278.032507][ T796] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 278.054932][ T796] usb 5-1: device descriptor read/8, error -71 [ 278.292830][ T796] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 278.313542][ T796] usb 5-1: device descriptor read/8, error -71 [ 278.424065][ T796] usb usb5-port1: unable to enumerate USB device [ 280.346166][ T5873] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 280.526200][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 280.533214][ T5873] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 280.541851][ T5873] usb 5-1: config 0 has no interface number 0 [ 280.562253][ T5873] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=4d.19 [ 280.571830][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.580912][ T5873] usb 5-1: Product: syz [ 280.585172][ T5873] usb 5-1: Manufacturer: syz [ 280.591242][ T5873] usb 5-1: SerialNumber: syz [ 280.601981][ T5873] usb 5-1: config 0 descriptor?? [ 280.812763][ T9104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.831801][ T9104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.858304][ T5873] cypress_m8 5-1:0.102: HID->COM RS232 Adapter converter detected [ 280.869110][ T5873] cyphidcom ttyUSB0: required endpoint is missing [ 280.885063][ T5873] usb 5-1: USB disconnect, device number 73 [ 280.899506][ T5873] cypress_m8 5-1:0.102: device disconnected [ 280.922819][ T9109] netlink: 'syz.7.933': attribute type 31 has an invalid length. [ 280.940935][ T9109] netlink: 'syz.7.933': attribute type 1 has an invalid length. [ 280.958711][ T9109] bridge0: port 1(bridge_slave_0) entered learning state [ 281.072328][ T9111] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 281.657655][ T5873] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 281.812160][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 281.823338][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 281.840165][ T5873] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 281.857997][ T5873] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 281.867314][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.875706][ T5873] usb 5-1: Product: syz [ 281.880348][ T5873] usb 5-1: Manufacturer: syz [ 281.885056][ T5873] usb 5-1: SerialNumber: syz [ 281.893774][ T5873] usb 5-1: config 0 descriptor?? [ 281.899889][ T9115] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 281.907445][ T9115] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 281.920467][ T5873] usb 5-1: ucan: probing device on interface #0 [ 282.126442][ T9115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.139370][ T9115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.367540][ T5873] usb 5-1: ucan: device reported invalid tx-fifo size [ 282.380525][ T5873] usb 5-1: ucan: probe failed; try to update the device firmware [ 282.391437][ T9123] binder: 9122:9123 ioctl c0306201 2000000003c0 returned -14 [ 282.532415][ T9126] sg_write: data in/out 458742/80 bytes for SCSI command 0x0-- guessing data in; [ 282.532415][ T9126] program syz.7.941 not setting count and/or reply_len properly [ 282.583218][ T5911] usb 5-1: USB disconnect, device number 74 [ 283.300878][ T9140] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 283.440269][ T796] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 283.590534][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 283.597461][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.608771][ T796] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 283.617856][ T796] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 283.627607][ T796] usb 5-1: Product: syz [ 283.633999][ T796] usb 5-1: config 0 descriptor?? [ 283.642995][ T796] gspca_main: spca501-2.14.0 probing 0000:0000 [ 283.770608][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 283.865597][ T796] gspca_spca501: reg write: error -71 [ 283.871285][ T796] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 283.878432][ T796] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 283.892723][ T796] usb 5-1: USB disconnect, device number 75 [ 283.924067][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.935681][ T24] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 283.945627][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.966685][ T24] usb 10-1: config 0 descriptor?? [ 284.005968][ T9146] pic_ioport_write: 5 callbacks suppressed [ 284.005985][ T9146] kvm: pic: single mode not supported [ 284.013107][ T9146] kvm: pic: single mode not supported [ 284.018619][ T9146] kvm: pic: single mode not supported [ 284.024500][ T9146] kvm: pic: single mode not supported [ 284.029989][ T9146] kvm: pic: single mode not supported [ 284.036690][ T9146] kvm: pic: single mode not supported [ 284.042321][ T9146] kvm: pic: single mode not supported [ 284.049610][ T9146] kvm: pic: single mode not supported [ 284.055858][ T9146] kvm: pic: single mode not supported [ 284.063621][ T9146] kvm: pic: single mode not supported [ 284.069958][ T9146] FAULT_INJECTION: forcing a failure. [ 284.069958][ T9146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.090200][ T9146] CPU: 0 UID: 0 PID: 9146 Comm: syz.4.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.090244][ T9146] Tainted: [L]=SOFTLOCKUP [ 284.090252][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 284.090265][ T9146] Call Trace: [ 284.090274][ T9146] [ 284.090283][ T9146] dump_stack_lvl+0xe8/0x150 [ 284.090316][ T9146] should_fail_ex+0x412/0x560 [ 284.090350][ T9146] __kvm_read_guest_page+0x18d/0x240 [ 284.090375][ T9146] kvm_vcpu_read_guest+0x75/0x150 [ 284.090434][ T9146] read_emulate+0x2c/0x50 [ 284.090456][ T9146] emulator_read_write_onepage+0x6a6/0xa10 [ 284.090488][ T9146] emulator_read_write+0x1c9/0x560 [ 284.090513][ T9146] ? __pfx_emulator_read_emulated+0x10/0x10 [ 284.090544][ T9146] segmented_read+0x1ba/0x3f0 [ 284.090566][ T9146] x86_emulate_insn+0x36a/0x43d0 [ 284.090614][ T9146] ? __pfx_x86_emulate_insn+0x10/0x10 [ 284.090640][ T9146] ? rcu_is_watching+0x15/0xb0 [ 284.090671][ T9146] x86_emulate_instruction+0xef0/0x2100 [ 284.090727][ T9146] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 284.090746][ T9146] ? __lock_acquire+0x6b5/0x2cf0 [ 284.090782][ T9146] ? vmx_vcpu_run+0x1bb1/0x2de0 [ 284.090809][ T9146] ? handle_io+0x1e3/0x270 [ 284.090839][ T9146] ? __pfx_handle_io+0x10/0x10 [ 284.090866][ T9146] vmx_handle_exit+0xfd1/0x16c0 [ 284.090920][ T9146] vcpu_run+0x5fa2/0x7b90 [ 284.090972][ T9146] ? vcpu_run+0x4ca8/0x7b90 [ 284.091040][ T9146] ? __pfx_vcpu_run+0x10/0x10 [ 284.091061][ T9146] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 284.091092][ T9146] ? rcu_is_watching+0x15/0xb0 [ 284.091124][ T9146] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 284.091161][ T9146] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 284.091184][ T9146] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 284.091207][ T9146] ? rcu_is_watching+0x15/0xb0 [ 284.091241][ T9146] ? trace_contention_end+0x3d/0x150 [ 284.091274][ T9146] ? __mutex_lock+0x319/0x1300 [ 284.091310][ T9146] ? kasan_quarantine_put+0xbb/0x1f0 [ 284.091344][ T9146] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 284.091368][ T9146] ? __pfx___mutex_lock+0x10/0x10 [ 284.091398][ T9146] ? tomoyo_path_number_perm+0x219/0x630 [ 284.091428][ T9146] ? do_vfs_ioctl+0x1166/0x1530 [ 284.091452][ T9146] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 284.091479][ T9146] kvm_vcpu_ioctl+0xa62/0xfd0 [ 284.091505][ T9146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 284.091522][ T9146] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 284.091572][ T9146] ? __fget_files+0x2a/0x420 [ 284.091603][ T9146] ? __fget_files+0x2a/0x420 [ 284.091629][ T9146] ? __fget_files+0x3a0/0x420 [ 284.091655][ T9146] ? __fget_files+0x2a/0x420 [ 284.091687][ T9146] ? bpf_lsm_file_ioctl+0x9/0x20 [ 284.091711][ T9146] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 284.091730][ T9146] __se_sys_ioctl+0xfc/0x170 [ 284.091755][ T9146] do_syscall_64+0x14d/0xf80 [ 284.091781][ T9146] ? trace_irq_disable+0x3b/0x150 [ 284.091809][ T9146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.091830][ T9146] ? clear_bhb_loop+0x40/0x90 [ 284.091856][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.091876][ T9146] RIP: 0033:0x7f5b2b39aeb9 [ 284.091894][ T9146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.091912][ T9146] RSP: 002b:00007f5b2c20a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.091933][ T9146] RAX: ffffffffffffffda RBX: 00007f5b2b615fa0 RCX: 00007f5b2b39aeb9 [ 284.091948][ T9146] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 284.091960][ T9146] RBP: 00007f5b2c20a090 R08: 0000000000000000 R09: 0000000000000000 [ 284.091973][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.091985][ T9146] R13: 00007f5b2b616038 R14: 00007f5b2b615fa0 R15: 00007fff2ea87f58 [ 284.092017][ T9146] [ 284.468209][ T9144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.481069][ T9144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.498533][ T24] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 284.513600][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.002B/input/input56 [ 284.593373][ T9149] kvm: kvm [9148]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x9 [ 284.632438][ T24] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 284.793044][ T1722] block nbd1: Possible stuck request ffff888026dd8000: control (read@0,1024B). Runtime 150 seconds [ 284.804480][ T1722] block nbd1: Possible stuck request ffff888026dd8200: control (read@1024,1024B). Runtime 150 seconds [ 284.815685][ T1722] block nbd1: Possible stuck request ffff888026dd8400: control (read@2048,1024B). Runtime 150 seconds [ 284.831071][ T1722] block nbd1: Possible stuck request ffff888026dd8600: control (read@3072,1024B). Runtime 150 seconds [ 284.926808][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 285.036793][ T10] usb 10-1: USB disconnect, device number 3 [ 285.212588][ T796] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 285.342999][ T796] usb 5-1: device descriptor read/64, error -71 [ 285.433055][ T30] INFO: task poweroff:6675 blocked for more than 144 seconds. [ 285.440764][ T30] Tainted: G L syzkaller #0 [ 285.449084][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.458537][ T30] task:poweroff state:D stack:23904 pid:6675 tgid:6675 ppid:5176 task_flags:0x400000 flags:0x00080000 [ 285.471273][ T30] Call Trace: [ 285.474618][ T30] [ 285.477659][ T30] __schedule+0x1585/0x5310 [ 285.482236][ T30] ? __pfx___schedule+0x10/0x10 [ 285.487454][ T30] ? schedule+0x90/0x360 [ 285.491915][ T30] schedule+0x164/0x360 [ 285.496670][ T30] schedule_preempt_disabled+0x13/0x30 [ 285.502380][ T30] __mutex_lock+0x7fe/0x1300 [ 285.507469][ T30] ? __mutex_lock+0x5ac/0x1300 [ 285.512404][ T30] ? sync_bdevs+0x27e/0x470 [ 285.517564][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 285.522703][ T30] ? iput+0x47f/0xe80 [ 285.526844][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 285.532015][ T30] sync_bdevs+0x27e/0x470 [ 285.536795][ T30] __ia32_sys_sync+0xc5/0x120 [ 285.546921][ T30] ? __pfx___ia32_sys_sync+0x10/0x10 [ 285.552338][ T30] ? do_syscall_64+0xa3/0xf80 [ 285.558326][ T30] do_syscall_64+0x14d/0xf80 [ 285.563591][ T30] ? trace_irq_disable+0x3b/0x150 [ 285.568836][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.575887][ T30] ? clear_bhb_loop+0x40/0x90 [ 285.580780][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.589524][ T30] RIP: 0033:0x7fa532cc8f37 [ 285.597831][ T30] RSP: 002b:00007ffcecf9e738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 285.606421][ T30] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fa532cc8f37 [ 285.613464][ T796] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 285.622156][ T30] RDX: ffffffffffffff88 RSI: 00007fa532e61e51 RDI: 00000000ffffff9c [ 285.630344][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.639877][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.648138][ T30] R13: 00007ffcecf9e898 R14: 00007fa532eab000 R15: 00005629478cad98 [ 285.656247][ T30] [ 285.659421][ T30] [ 285.659421][ T30] Showing all locks held in the system: [ 285.668877][ T30] 1 lock held by khungtaskd/30: [ 285.674650][ T30] #0: ffffffff8e960320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 285.687927][ T30] 6 locks held by kworker/0:2/796: [ 285.693056][ T30] #0: ffff888021abb948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x855/0x1650 [ 285.704230][ T30] #1: ffffc90003367c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650 [ 285.716389][ T30] #2: ffff888029f45198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 285.725669][ T30] #3: ffff888029f42518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 285.735794][ T30] #4: ffff888029ec1c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 285.745819][ T30] #5: ffffffff8f68ef30 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840 [ 285.756666][ T30] 5 locks held by kworker/u8:7/3482: [ 285.761983][ T30] 2 locks held by getty/5581: [ 285.766793][ T796] usb 5-1: device descriptor read/64, error -71 [ 285.766800][ T30] #0: ffff88803214d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 285.782980][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 285.795509][ T30] 1 lock held by udevd/5833: [ 285.800134][ T30] #0: ffff888026cbd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 285.809576][ T30] 2 locks held by kworker/0:4/5873: [ 285.814943][ T30] 1 lock held by poweroff/6675: [ 285.819838][ T30] #0: ffff888026cbd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 285.829409][ T30] [ 285.831923][ T30] ============================================= [ 285.831923][ T30] [ 285.842177][ T30] NMI backtrace for cpu 1 [ 285.842197][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 285.842221][ T30] Tainted: [L]=SOFTLOCKUP [ 285.842227][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 285.842239][ T30] Call Trace: [ 285.842246][ T30] [ 285.842253][ T30] dump_stack_lvl+0xe8/0x150 [ 285.842282][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 285.842303][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 285.842330][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 285.842353][ T30] sys_info+0x135/0x170 [ 285.842380][ T30] watchdog+0x103d/0x1090 [ 285.842412][ T30] ? watchdog+0x21a/0x1090 [ 285.842446][ T30] kthread+0x388/0x470 [ 285.842464][ T30] ? __pfx_watchdog+0x10/0x10 [ 285.842488][ T30] ? __pfx_kthread+0x10/0x10 [ 285.842507][ T30] ret_from_fork+0x51e/0xb90 [ 285.842534][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 285.842555][ T30] ? __switch_to+0xc7d/0x1450 [ 285.842579][ T30] ? __pfx_kthread+0x10/0x10 [ 285.842596][ T30] ret_from_fork_asm+0x1a/0x30 [ 285.842636][ T30] [ 285.842643][ T30] Sending NMI from CPU 1 to CPUs 0: [ 285.884376][ T796] usb usb5-port1: attempt power cycle [ 285.888495][ C0] NMI backtrace for cpu 0 [ 285.888512][ C0] CPU: 0 UID: 0 PID: 796 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.888536][ C0] Tainted: [L]=SOFTLOCKUP [ 285.888543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 285.888555][ C0] Workqueue: usb_hub_wq hub_event [ 285.888583][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 285.888602][ C0] Code: e8 be f4 7c fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f de e6 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da 9f 72 06 cc 44 89 f9 80 e1 07 [ 285.888617][ C0] RSP: 0018:ffffc90003367070 EFLAGS: 00000002 [ 285.888630][ C0] RAX: 1ffffffff3503100 RBX: 00000000000003fd RCX: 0000000000000000 [ 285.888642][ C0] RDX: 00000000000003fd RSI: 000000000000f581 RDI: 000000000000f582 [ 285.888665][ C0] RBP: ffffffff9a818ed0 R08: ffff888025aa8237 R09: 1ffff11004b55046 [ 285.888678][ C0] R10: dffffc0000000000 R11: ffffffff8548f8c0 R12: dffffc0000000000 [ 285.888690][ C0] R13: 0000000000000000 R14: ffffffff9a818c40 R15: 0000000000000000 [ 285.888701][ C0] FS: 0000000000000000(0000) GS:ffff888125015000(0000) knlGS:0000000000000000 [ 285.888715][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.888726][ C0] CR2: 00005555753eba28 CR3: 0000000078912000 CR4: 00000000003526f0 [ 285.888741][ C0] Call Trace: [ 285.888748][ C0] [ 285.888756][ C0] wait_for_lsr+0x1a1/0x2f0 [ 285.888778][ C0] serial8250_console_write+0x1348/0x1ba0 [ 285.888812][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 285.888838][ C0] ? lock_acquire+0xf0/0x2e0 [ 285.888861][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 285.888878][ C0] ? console_flush_all+0x123/0xb20 [ 285.888894][ C0] console_flush_all+0x718/0xb20 [ 285.888911][ C0] ? console_flush_all+0x123/0xb20 [ 285.888929][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 285.888947][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 285.888967][ C0] console_unlock+0xd1/0x1c0 [ 285.888993][ C0] ? __pfx_console_unlock+0x10/0x10 [ 285.889017][ C0] ? vprintk_emit+0x455/0x560 [ 285.889041][ C0] ? vprintk_emit+0x2cf/0x560 [ 285.889063][ C0] ? vprintk_emit+0x2cf/0x560 [ 285.889087][ C0] vprintk_emit+0x485/0x560 [ 285.889111][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 285.889143][ C0] ? stack_trace_save+0xa9/0x100 [ 285.889158][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 285.889177][ C0] dev_vprintk_emit+0x355/0x420 [ 285.889202][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 285.889223][ C0] ? kfree+0x1c1/0x630 [ 285.889254][ C0] dev_printk_emit+0xee/0x140 [ 285.889297][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 285.889322][ C0] ? __dev_printk+0x131/0x190 [ 285.889340][ C0] _dev_info+0x11e/0x180 [ 285.889360][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.889382][ C0] ? __pfx__dev_info+0x10/0x10 [ 285.889402][ C0] ? kobject_put+0x26d/0x560 [ 285.889431][ C0] hub_event+0x2d3a/0x4f30 [ 285.889473][ C0] ? __pfx_hub_event+0x10/0x10 [ 285.889499][ C0] ? process_one_work+0x87c/0x1650 [ 285.889517][ C0] process_one_work+0x949/0x1650 [ 285.889545][ C0] ? __pfx_process_one_work+0x10/0x10 [ 285.889563][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.889586][ C0] worker_thread+0xb46/0x1140 [ 285.889617][ C0] kthread+0x388/0x470 [ 285.889631][ C0] ? __pfx_worker_thread+0x10/0x10 [ 285.889649][ C0] ? __pfx_kthread+0x10/0x10 [ 285.889664][ C0] ret_from_fork+0x51e/0xb90 [ 285.889685][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 285.889703][ C0] ? __switch_to+0xc7d/0x1450 [ 285.889722][ C0] ? __pfx_kthread+0x10/0x10 [ 285.889736][ C0] ret_from_fork_asm+0x1a/0x30 [ 285.889766][ C0] [ 285.891110][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 285.891158][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 285.891231][ T30] Tainted: [L]=SOFTLOCKUP [ 285.891262][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 285.891305][ T30] Call Trace: [ 285.891333][ T30] [ 285.891361][ T30] vpanic+0x56c/0xa60 [ 285.891493][ T30] ? __pfx___schedule+0x10/0x10 [ 285.891572][ T30] ? __pfx_vpanic+0x10/0x10 [ 285.891667][ T30] panic+0xc5/0xd0 [ 285.891740][ T30] ? __pfx_panic+0x10/0x10 [ 285.891822][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 285.891889][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 285.891968][ T30] watchdog+0x1087/0x1090 [ 285.892071][ T30] ? watchdog+0x21a/0x1090 [ 285.892177][ T30] kthread+0x388/0x470 [ 285.892230][ T30] ? __pfx_watchdog+0x10/0x10 [ 285.892297][ T30] ? __pfx_kthread+0x10/0x10 [ 285.892351][ T30] ret_from_fork+0x51e/0xb90 [ 285.892430][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 285.892494][ T30] ? __switch_to+0xc7d/0x1450 [ 285.892565][ T30] ? __pfx_kthread+0x10/0x10 [ 285.892632][ T30] ret_from_fork_asm+0x1a/0x30 [ 285.892805][ T30] [ 285.894928][ T30] Kernel Offset: disabled