last executing test programs: 4m44.637635934s ago: executing program 0 (id=78): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0xc, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="001745000000cfcf7cacea32fa5b"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4m42.570136129s ago: executing program 0 (id=92): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x39, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308", @ANYRESDEC], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x27, 0x5, 0x1) syz_usb_control_io$uac1(r1, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x2, 0x5, 0x40, 0x2, r3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = inotify_init() ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x0, "690600e4ba5686b4f80000000000000000024305f11fd3450700", 0x41414770}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYRES16], 0x15) 4m39.400579458s ago: executing program 0 (id=103): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r0, @ANYRES16=r1], 0xfdef) (fail_nth: 10) 4m39.002731121s ago: executing program 0 (id=105): r0 = open$dir(&(0x7f0000000040)='./sec/tomoyo/profile\x00', 0x40, 0x90) mkdirat(r0, &(0x7f0000000180)='./file0/file0/../file0\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r3, &(0x7f0000000300)=""/253, 0xfd) symlinkat(&(0x7f0000000000)='./file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0/../file0\x00', &(0x7f0000000080)={0x82002, 0x0, 0x34}, 0xffffffffffffffe9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @empty, 0x7}}, 0x24) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100f58a50ec0c448b91120db6e8ec480200010000000200000000000000100000000000000010010000030000008000000000000000880000008f15c8b5aedf6645fe0b9059f61769840dddaa8f17daf7ed860eefc03847b9aa12ef930b598a0e9778fefd40cc5e848139b1976933005d6c741b8abb0eba5fceab7c6ed34f2307e0a9d463ee3acc1f2f91ad24fc9a070b396db4e2625807"], 0xa8}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x102) read$char_usb(r5, &(0x7f0000000240)=""/187, 0xbb) r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 4m38.914544326s ago: executing program 0 (id=106): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x2, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a, 0x4}, 0x9c) sendto$inet6(r0, &(0x7f0000000300)='\t', 0xff24, 0x65055, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) 4m38.806060703s ago: executing program 0 (id=107): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000480)) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000080c20181040000102030109027c00030180000e080b0101f7092079090400000046ff89a9327e1cc300031c0085072408060500000c2403fd01013c0306f9ff0209040100000109040101010102200009050109400005040008250181090908ab09040200000102200009040201010102200009058209ff03050300000001833c0a0200000000"], 0x0) 4m23.592886319s ago: executing program 32 (id=107): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x8000, &(0x7f0000000480)) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000080c20181040000102030109027c00030180000e080b0101f7092079090400000046ff89a9327e1cc300031c0085072408060500000c2403fd01013c0306f9ff0209040100000109040101010102200009050109400005040008250181090908ab09040200000102200009040201010102200009058209ff03050300000001833c0a0200000000"], 0x0) 4m15.715380838s ago: executing program 3 (id=214): syz_usb_connect(0x2, 0x46, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x3, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95b, 0x9, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0xd1, 0x6, 0x4, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0x1, 0xe, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x2000, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10080007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x2d, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x2, 0x1c, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x410, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x8, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa5, 0x7, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfff7fff9, 0x10000000, 0x1, 0x5, 0x8, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x7, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xfffffffe, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0xfffffff1, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x800, 0x6, 0x101, 0x10000, 0x2, 0x8, 0x2b91, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c) (async) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)='c', 0xfffffff6) (async) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) getsockopt$inet6_buf(r3, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4m12.69410219s ago: executing program 3 (id=235): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x15, @loopback}, 0x10) 4m12.59541889s ago: executing program 3 (id=237): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x4f3, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x58, 0xfc, 0xf, 0xf3}}}}}]}}]}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)={0x4bc, 0x0, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x7}, 0xd, 0x6, 0x5, 0x0, 0x8, 'syz0\x00', "3ebf358198e0df0a8d09c4bb8e4c28cf7420144e22ffefcc947bc2df0b4615f4", "9a59a50e1b6325f5219842bbc9bb911f3ea1fb85632901842f745f77bc4bce88", [{0x4, 0x9, {0x2, 0x800}}, {0x0, 0xb, {0x3, 0x1}}, {0x4, 0x9, {0x1, 0x4}}, {0x40, 0x0, {0x1, 0x9}}, {0xa, 0x5, {0x0, 0x7}}, {0x9, 0x0, {0x2, 0x3ff}}, {0x4, 0x9, {0x1, 0xd}}, {0x117e, 0x9, {0x1, 0x401}}, {0x9, 0x4, {0x0, 0x1}}, {0x6, 0x6, {0x3, 0x2}}, {0xfff, 0x2, {0x1, 0x6}}, {0x0, 0x0, {0x3, 0x6a35f05e}}, {0x0, 0x30e3, {0x2, 0x80ed}}, {0xfb, 0xff, {0x0, 0xb}}, {0x6, 0x1e2, {0x0, 0x7fff}}, {0x7, 0x3, {0x2, 0x63}}, {0xffff, 0xffff, {0x1, 0xfffffeff}}, {0x4, 0x3, {0x2, 0xaa26}}, {0x8, 0xa111, {0x3, 0x9e000000}}, {0x2, 0x9b, {0x2, 0x9}}, {0xf, 0x0, {0x3, 0x3}}, {0x2, 0x5, {0x1, 0x6}}, {0x6, 0x3, {0x2}}, {0x9, 0x9, {0x2, 0x6}}, {0xfffc, 0xfff, {0x3, 0x8}}, {0x354, 0xf7b, {0x2, 0x7ff}}, {0x6, 0x9, {0x1, 0xb9}}, {0x1, 0x7, {0x1, 0x6}}, {0x0, 0x3, {0x2, 0xa}}, {0x2b9e, 0xc, {0x2, 0x7}}, {0x44dd, 0x1, {0x1, 0x643}}, {0x5, 0x6, {0x1, 0x1411}}, {0x3}, {0xa, 0x7fff, {0x2, 0x1}}, {0x9, 0x2, {0x0, 0x2}}, {0x4, 0x5708, {0x1, 0x9}}, {0x6ec, 0x7, {0x2, 0x2}}, {0x1, 0x7, {0x1, 0x2}}, {0x8, 0x0, {0x2, 0x1ff}}, {0x5, 0x9, {0x1, 0x10000}}]}}}, {{0x254, 0x1, {{0x1, 0xe2c}, 0x9, 0xd, 0x1000, 0x7d8, 0x18, 'syz1\x00', "d69551937ef7864529b681f172c473891a82a181647560c3d0bb6f075a6e3e6d", "767047f640758f6c8c45189cf235ae724d027f1d5145148da6d39244bf42c564", [{0x8, 0xfff4, {0x0, 0x2}}, {0x7, 0xba12, {0x2, 0x4}}, {0x6, 0x1, {0x3, 0xf3a}}, {0xa12b, 0xe0, {0x1e7489d27bef4676, 0x1}}, {0x400, 0x8000, {0x1, 0x400}}, {0x3ff, 0xff, {0x1, 0x8}}, {0xca8d, 0x1, {0x2, 0x8}}, {0xff, 0x1, {0x0, 0x8}}, {0x1c00, 0x7, {0x2, 0x7}}, {0x3ff, 0x1, {0x0, 0x400}}, {0x40, 0x7, {0x1, 0x7}}, {0xb6, 0x8001, {0x1, 0x18}}, {0x2, 0x800, {0x0, 0x6}}, {0x7, 0x3, {0x2, 0x3}}, {0x8000, 0x331, {0x3, 0x1}}, {0x4, 0x45, {0x3, 0x2}}, {0xc, 0x5982, {0x2, 0x5ff}}, {0x2, 0x4, {0x2, 0x7}}, {0x5, 0x2, {0x1, 0x5cf}}, {0x4, 0x100, {0x1, 0x80000000}}, {0x5, 0x8, {0x2, 0x3}}, {0x9, 0x9}, {0xe46, 0x13a, {0x0, 0xc}}, {0x0, 0x5dc0, {0x0, 0x1}}, {0x8, 0x2, {0x2, 0x4}}, {0x339, 0x10, {0x3}}, {0x8, 0xff, {0x0, 0x1}}, {0xc3b5, 0x7, {0x0, 0x5fe3}}, {0x4, 0x6, {0x3}}, {0x0, 0xfffd, {0x1, 0xefd6}}, {0xfffc, 0x10, {0x1, 0x4}}, {0x4, 0x0, {0x1, 0x9}}, {0x6, 0x8001, {0x0, 0x1}}, {0x8, 0x1}, {0x5, 0x800, {0x2, 0x6}}, {0x9, 0xa78d, {0x1, 0xffffff84}}, {0x7f, 0xc, {0x2, 0x4}}, {0x5, 0x5, {0x2, 0xffffffff}}, {0x401, 0x7ff, {0x1, 0x6}}, {0x200, 0x7, {0x3, 0xffffffff}}]}}}]}, 0x4bc}}, 0x20000010) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10f800, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4m11.044714843s ago: executing program 3 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b40)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332", 0x85, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000280)=ANY=[], 0x8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0x5) r3 = socket$inet6(0xa, 0x6, 0x8) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e63, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x100000b}, 0x1c) listen(r3, 0xb) listen(r3, 0x0) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xffffffffb5404c40, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) mknod(&(0x7f00000002c0)='./proc_mnt/irq/12/smp_affinity\x00', 0x100, 0x0) dup2(r6, r4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 4m10.015706284s ago: executing program 3 (id=250): fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xfffffe30) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0xb2) 4m9.540985142s ago: executing program 3 (id=251): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) faccessat(r0, 0x0, 0xd0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) socket(0x21, 0x800, 0x2) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x1000, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, r2, {0x6}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2463763f353adc04d22b0000160880769bc8592b5c04", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x40008010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) 4m8.746417936s ago: executing program 33 (id=251): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) faccessat(r0, 0x0, 0xd0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) socket(0x21, 0x800, 0x2) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x1000, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, r2, {0x6}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2463763f353adc04d22b0000160880769bc8592b5c04", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x40008010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1', 0x1) 1m48.99323257s ago: executing program 1 (id=1001): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20210201012300000000"], &(0x7f0000000100)=ANY=[@ANYBLOB="000304000000f0025504"], &(0x7f0000000280)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x1, [@generic={0x5c, 0x10, 0xb, "e480d4ab1bd517adc95228f12911912653469ca5f89690dd32b9c9be847c02c0d9640d8c33b0f548e6048c5a865e0436511b749540d19ff1412972e72d088c3e890b88654031087ec4d42e92ee0a0c37ce7ef4a59c1a49e25a"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0xb, 0x7, 0x6, "91a2c55a", "42c1feb4"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x3, 0x81, 0x4, 0xdf, 0xcb, 0x30}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000400)={0x0, 0x4, 0x26, "7d3ead4db4e8c761997bae1bc1df9d51af50413c94df8945ec1a529f40363d9ded2da7bd97c9"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x800, 0x20, [0xfff0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xd2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000680)={0x40, 0xb, 0x2, "0d95"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xb2}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "209b"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x7}}) 1m45.80745241s ago: executing program 1 (id=1011): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 1m45.198451252s ago: executing program 1 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10020, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0xea, 0x42000004, &(0x7f0000000280)="01000025", 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) unshare(0x6a040000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) write(r1, &(0x7f0000000000)='3', 0x1) 1m44.51449046s ago: executing program 1 (id=1017): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a401000010"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m44.252943562s ago: executing program 1 (id=1018): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, 0x0, 0x2400c000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) write(r2, &(0x7f0000000000)='3', 0x4e) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./sys\x00', 0x1ff) unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0x81) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) syz_io_uring_setup(0x83, &(0x7f00000000c0)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) 1m43.195867862s ago: executing program 1 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10020, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0xea, 0x42000004, &(0x7f0000000280)="01000025", 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c01000000020103000000000000000007000010d0000a80380002800c000280050001003a0000000c000280050001008800000006000340000200001400018008000100e0000002080002006401010108000140000000015400028006000340000100000c00028005000100060000000c0002800500010011000000060003400000000006000340000200000c000280050001008400000006000340004600000c0002800500010010000000380002800c000280050001003a000000060003400003000014000180080001007f00000108000200e00000020c000280050001003a00000048000a8008000140000000003c0002800c000280050001002f0000002c00018014000300fc02000000000000000000000000000014000400ff02000000000000000000000000000167d5d233776caf4c8c90560f5f5b7d5946ce2a2a207ae0c5bd67b79a9c0c719334fbda8b5ab7e22eae8f25bdfb78c3cdb16ac8dc924a63e10b789a9ecf32dc0af2646284646b2748cae2466a56717f"], 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b00000000", 0xe, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) unshare(0x6a040000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) write(r1, &(0x7f0000000000)='3', 0x1) 1m28.060576483s ago: executing program 34 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10020, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0xea, 0x42000004, &(0x7f0000000280)="01000025", 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b00000000", 0xe, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) unshare(0x6a040000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) write(r1, &(0x7f0000000000)='3', 0x1) 41.737467827s ago: executing program 6 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 40.766368442s ago: executing program 6 (id=1273): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="02030003220000002cbd7000fcdbdf250200090008ff"], 0x110}, 0x1, 0x7}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x7, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x42, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000040)={0xab, 0x0, 'client1\x00', 0x20d25e4759190408, "8c1bce9349203487", "90185dd2150abde6d789d1cbb131c4f0ece21e1da5db75642c26e226a3e3b0f5", 0x6, 0x7}) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_ublk_setup_io_uring(0x57b2, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1, 0x0, 0xf}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x10000) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000040)=0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000040a010200000000af0000e5000a000001fcff0440000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000804) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002980)={'ip6_vti0\x00', &(0x7f0000002900)={'ip6tnl0\x00', 0x0, 0x29, 0x6f, 0x5, 0x7, 0x2c, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x7, 0x20, 0x2, 0x8}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000000a010400000000000000000100000030000000030a01040000000000000000010000000900010073797a30000000000900a464505d030073797a31000000000400048014000000060a010400000000000000000100000014000000110001000000000000000000"], 0x80}}, 0x0) r7 = syz_open_dev$mtd(&(0x7f0000000200), 0x2, 0x84080) ioctl$OTPSELECT(r7, 0x80044d0d, &(0x7f0000000400)=0x2) 37.645877557s ago: executing program 6 (id=1287): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x3, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x1ff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x19, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x818}, 0x8040) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x7, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 37.188466528s ago: executing program 6 (id=1288): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='base=0', 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x20, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) 33.914403772s ago: executing program 6 (id=1301): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x20010, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000004) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x12c}}, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/sda1/file0\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000001600)='ntfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75707d7e642d07232e469980a81bc6ea38c4ed9020ae0452860bfc4f84f88884f083a50f244e20f473f7214302638c12bc7974d0ab5a5f655910856e0002a24a9423cdb5f7a930f9ceab271579705d33c4381283132b16dc0dd4458c9d797b4fac10fb1638aa9536458ba40d0f593b245395daa0212e96a1b1ad1d14bb9f2eca1e80c6a737279c51c6aadda5320034ac0af5c7cb9ef790d6051de935121f235f0128779712b5f2ab123469630afae0e5194876b38da8edccd702ef71c0b91713c1dfc9469d904a2b5fdcb8b802a066f870ac035499e1", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mprotect(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000300)={0x4, 0x5, 0x1}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x2f}, 0x60) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r5, 0x400, 0x0) getsockopt$inet_buf(r5, 0x118, 0x9, 0x0, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000680)='./dev/sda1/file0\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) openat(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x68) socket$inet6_mptcp(0xa, 0x1, 0x106) 33.304614762s ago: executing program 6 (id=1305): setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) 32.063518843s ago: executing program 2 (id=1311): syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x1a, 0xcf, 0x3, 0x40, 0x423, 0xa, 0x5fd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xac, 0x10, 0xf9, "", [{{0x9, 0x4, 0x8a, 0x1, 0x0, 0x40, 0x6c, 0x59, 0x9}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555899}) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002a"], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x40082, 0x2, 0x3}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) write$tun(r1, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}}}}}}}}, 0x4e) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='*\x00', 0xc0100, &(0x7f0000000100)={@align=0x2, {0xd73b, 0x200, 0x26, 0x3}}, 0x68, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2ae}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x404103) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0, 0x10}, {0xffffffffffffffff, 0x110}, {r5, 0x43}, {r6, 0x4004}, {0xffffffffffffffff, 0x4000}], 0x5, &(0x7f0000000300)={r7, r8+60000000}, &(0x7f0000000340)={[0x4]}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0xdd, 0xdf, 0x4f, 0x40, 0x5ac, 0x237, 0xf2d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x6, 0x90, 0x4, "", [{{0x9, 0x4, 0x23, 0x8, 0x0, 0x3, 0x3c, 0x2, 0x6}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 31.06159439s ago: executing program 5 (id=1316): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000003140100000000000000000009007278650014"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x100, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4027f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x45, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x218e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x4, 0x3, 0x9, 0x3, 0xc7, 0x10000, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0xc, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x0, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000a00)='A', 0x1}], 0x1) 28.904539617s ago: executing program 5 (id=1319): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 28.716533627s ago: executing program 2 (id=1320): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1001, 0x104) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x84, 0x7a, 0xba, 0x40, 0x10b8, 0x1f90, 0xa5ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x6, 0x0, 0x30, 0x8b, "", [{{0x9, 0x4, 0xe2, 0x81, 0x2, 0x6a, 0x67, 0x63, 0x5, [], [{{0x9, 0x5, 0x9, 0x10, 0x440, 0x8f, 0x3b, 0x8}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0xff, 0x9, 0x7, [@generic={0x7, 0x5, "d1d6aca2f9"}]}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000005380)={0x84, &(0x7f0000004f80)={0x40, 0x6, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000006240)={0x1c, &(0x7f0000005cc0)={0x20, 0x0, 0x9, "187a062c5fccd874e8"}, 0x0, 0x0}) landlock_restrict_self(r0, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod']) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 25.770998823s ago: executing program 4 (id=1327): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25.521148125s ago: executing program 2 (id=1328): syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x1a, 0xcf, 0x3, 0x40, 0x423, 0xa, 0x5fd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xac, 0x10, 0xf9, "", [{{0x9, 0x4, 0x8a, 0x1, 0x0, 0x40, 0x6c, 0x59, 0x9}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555899}) r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002a"], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x40082, 0x2, 0x3}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) write$tun(r1, &(0x7f0000000000)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "6f449e", 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x8ed, 0x0, 0x6}}}}}}}}, 0x4e) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='*\x00', 0xc0100, &(0x7f0000000100)={@align=0x2, {0xd73b, 0x200, 0x26, 0x3}}, 0x68, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2ae}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x404103) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0, 0x10}, {0xffffffffffffffff, 0x110}, {r5, 0x43}, {r6, 0x4004}, {0xffffffffffffffff, 0x4000}], 0x5, &(0x7f0000000300)={r7, r8+60000000}, &(0x7f0000000340)={[0x4]}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0xdd, 0xdf, 0x4f, 0x40, 0x5ac, 0x237, 0xf2d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x6, 0x90, 0x4, "", [{{0x9, 0x4, 0x23, 0x8, 0x0, 0x3, 0x3c, 0x2, 0x6}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 25.268096699s ago: executing program 4 (id=1329): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a401000010"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 24.820116105s ago: executing program 5 (id=1330): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a40100001000"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 24.757861271s ago: executing program 4 (id=1331): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80, 0x0, r4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 24.170778882s ago: executing program 5 (id=1332): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 23.773788432s ago: executing program 4 (id=1333): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000003140100000000000000000009007278650014"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x100, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4027f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x45, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x218e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x4, 0x3, 0x9, 0x3, 0xc7, 0x10000, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0xc, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x0, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000400)=0x6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000a00)='A', 0x1}], 0x1) 23.514399474s ago: executing program 2 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001880)={&(0x7f0000000740)={0x1130, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "31bcdaa0211e1928939fff3a1dc689763e3291dc1572"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "fee204c914998190087273ea1e45d59aa3d75c15f6b0ee06bd81d62031de5910e27c22"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "e264f88fe3eb1aa214647f2782e5c9617b920ca34f505a409007500763"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x96}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0x1130}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42095}, 0x20040004) 23.333831791s ago: executing program 2 (id=1335): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='base=0', 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x20, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x12, @b={0x0, 0x3, 0x3, 0x1, 0xb, 0x6, 0x2, {}, 0x4, 0xd, 0x5, 0x9, 0x8, "139f94cf0f7a42fd"}}, 0x18) 22.733791021s ago: executing program 2 (id=1336): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1001, 0x104) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x84, 0x7a, 0xba, 0x40, 0x10b8, 0x1f90, 0xa5ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x6, 0x0, 0x30, 0x8b, "", [{{0x9, 0x4, 0xe2, 0x81, 0x2, 0x6a, 0x67, 0x63, 0x5, [], [{{0x9, 0x5, 0x9, 0x10, 0x440, 0x8f, 0x3b, 0x8}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0xff, 0x9, 0x7, [@generic={0x7, 0x5, "d1d6aca2f9"}]}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000005380)={0x84, &(0x7f0000004f80)={0x40, 0x6, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000006240)={0x1c, &(0x7f0000005cc0)={0x20, 0x0, 0x9, "187a062c5fccd874e8"}, 0x0, 0x0}) landlock_restrict_self(r0, 0x8) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod']) socket$packet(0x11, 0x3, 0x300) 22.724217064s ago: executing program 5 (id=1337): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22.163790797s ago: executing program 5 (id=1338): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00221d000000"], 0x0}, 0x0) r1 = syz_clone(0x22008500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x15) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="0200", 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000800028004000b"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setns(r2, 0x24020000) ioctl$FITHAW(r2, 0xc0045878) mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='./dbg\x00', 0x2442, 0xdc) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0) munlock(&(0x7f00006f1000/0x2000)=nil, 0x2000) mbind(&(0x7f00004a0000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000004c0)=0xffffffffffffffff, 0x7, 0x0) readv(r5, &(0x7f0000001d00)=[{&(0x7f0000000800)=""/198, 0xc6}], 0x1) 21.802359264s ago: executing program 4 (id=1339): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a401000010"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.992020441s ago: executing program 4 (id=1340): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x3, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x1ff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x19, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x818}, 0x8040) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002a"], 0x78}], 0x1, 0x0, 0x0, 0x24400}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x7, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x3c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 35 (id=1305): setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='1', 0x1) kernel console output (not intermixed with test programs): 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.531800][ T9735] RSP: 002b:00007ffa770d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.531868][ T9735] RAX: ffffffffffffffda RBX: 00007ffa76425fa0 RCX: 00007ffa7619e159 [ 317.531917][ T9735] RDX: 0000200000000180 RSI: 0000000000008933 RDI: 0000000000000007 [ 317.531958][ T9735] RBP: 00007ffa7623506b R08: 0000000000000000 R09: 0000000000000000 [ 317.532005][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.532046][ T9735] R13: 00007ffa76426038 R14: 00007ffa76425fa0 R15: 00007ffe951e16a8 [ 317.532147][ T9735] [ 318.167198][ T32] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 318.333514][ T32] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 318.343425][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.343506][ T32] usb 3-1: Product: syz [ 318.343549][ T32] usb 3-1: Manufacturer: syz [ 318.343591][ T32] usb 3-1: SerialNumber: syz [ 318.791653][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 318.791761][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 319.106079][ T5689] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 319.146013][ T5703] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 319.226130][ T989] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 319.258192][ T5689] usb 7-1: unable to get BOS descriptor or descriptor too short [ 319.258245][ T5689] usb 7-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 319.259337][ T5689] usb 7-1: config 4 has an invalid interface number: 138 but max is 0 [ 319.259362][ T5689] usb 7-1: config 4 has no interface number 0 [ 319.259392][ T5689] usb 7-1: config 4 interface 138 has no altsetting 0 [ 319.262321][ T5689] usb 7-1: string descriptor 0 read error: -22 [ 319.262464][ T5689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.300276][ T5703] usb 6-1: device descriptor read/64, error -71 [ 319.407566][ T989] usb 5-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 319.409209][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.409242][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.409283][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.412195][ T989] usb 5-1: config 0 descriptor?? [ 319.520758][ T9770] syzkaller1: entered promiscuous mode [ 319.520788][ T9770] syzkaller1: entered allmulticast mode [ 319.556136][ T5703] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 319.593490][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.594058][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.686028][ T5703] usb 6-1: device descriptor read/64, error -71 [ 319.797550][ T5703] usb usb6-port1: attempt power cycle [ 319.813063][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 319.813118][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 319.814012][ T32] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 319.819555][ T32] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 319.861469][ T989] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 319.861508][ T989] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 319.861536][ T989] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 319.861565][ T989] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 319.861592][ T989] hid-led 0003:27B8:01ED.000D: unknown main item tag 0x0 [ 320.176005][ T5703] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 320.207106][ T5703] usb 6-1: device descriptor read/8, error -71 [ 320.373756][ T989] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 320.389060][ T989] usb 5-1: USB disconnect, device number 44 [ 320.445994][ T5703] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 320.476673][ T5703] usb 6-1: device descriptor read/8, error -71 [ 320.597295][ T5703] usb usb6-port1: unable to enumerate USB device [ 320.854605][ T5703] usb 3-1: USB disconnect, device number 70 [ 320.973501][ T9784] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 320.986298][ T9783] FAULT_INJECTION: forcing a failure. [ 320.986298][ T9783] name failslab, interval 1, probability 0, space 0, times 0 [ 320.986334][ T9783] CPU: 0 UID: 0 PID: 9783 Comm: syz.2.1124 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.986367][ T9783] Tainted: [L]=SOFTLOCKUP [ 320.986376][ T9783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.986391][ T9783] Call Trace: [ 320.986400][ T9783] [ 320.986410][ T9783] dump_stack_lvl+0xe8/0x150 [ 320.986465][ T9783] should_fail_ex+0x3eb/0x540 [ 320.986508][ T9783] should_failslab+0xa8/0x100 [ 320.986542][ T9783] __kvmalloc_node_noprof+0x171/0x820 [ 320.986572][ T9783] ? __mutex_lock+0x305/0x15a0 [ 320.986596][ T9783] ? alloc_netdev_mqs+0xa9/0x12a0 [ 320.986624][ T9783] ? alloc_netdev_mqs+0xa9/0x12a0 [ 320.986651][ T9783] ? copy_net_ns+0x536/0x770 [ 320.986686][ T9783] alloc_netdev_mqs+0xa9/0x12a0 [ 320.986713][ T9783] ? __pfx_vti_tunnel_setup+0x10/0x10 [ 320.986755][ T9783] __ip_tunnel_create+0x348/0x550 [ 320.986790][ T9783] ? __pfx___ip_tunnel_create+0x10/0x10 [ 320.986832][ T9783] ip_tunnel_init_net+0x2fe/0x870 [ 320.986869][ T9783] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 320.986920][ T9783] ? __kmalloc_noprof+0x387/0x710 [ 320.986944][ T9783] ? __kmalloc_noprof+0x1a6/0x710 [ 320.986965][ T9783] ? ops_init+0x7b/0x5d0 [ 320.987000][ T9783] vti_init_net+0x2f/0x100 [ 320.987042][ T9783] ops_init+0x35d/0x5d0 [ 320.987084][ T9783] setup_net+0x118/0x350 [ 320.987116][ T9783] ? __pfx_setup_net+0x10/0x10 [ 320.987148][ T9783] ? down_read_killable+0x1b6/0x3b0 [ 320.987175][ T9783] ? __ns_common_init+0x38a/0x590 [ 320.987211][ T9783] copy_net_ns+0x536/0x770 [ 320.987244][ T9783] create_new_namespaces+0x3f0/0x6b0 [ 320.987279][ T9783] ? security_capable+0x7e/0x2c0 [ 320.987319][ T9783] unshare_nsproxy_namespaces+0x144/0x190 [ 320.987355][ T9783] ksys_unshare+0x53c/0x890 [ 320.987389][ T9783] ? __pfx_ksys_unshare+0x10/0x10 [ 320.987423][ T9783] ? rcu_is_watching+0x16/0xb0 [ 320.987465][ T9783] __x64_sys_unshare+0x38/0x50 [ 320.987497][ T9783] do_syscall_64+0x166/0x520 [ 320.987517][ T9783] ? trace_irq_disable+0x3b/0x140 [ 320.987544][ T9783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.987591][ T9783] ? clear_bhb_loop+0x70/0xc0 [ 320.987620][ T9783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.987662][ T9783] RIP: 0033:0x7fc22759e159 [ 320.987692][ T9783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.987712][ T9783] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 320.987738][ T9783] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 320.987756][ T9783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 320.987772][ T9783] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 320.987788][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.987802][ T9783] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 320.987838][ T9783] [ 321.999440][ T5689] catc 7-1:4.138: Can't set altsetting 1. [ 321.999500][ T5689] catc 7-1:4.138: probe with driver catc failed with error -5 [ 322.009568][ T5689] usb 7-1: USB disconnect, device number 3 [ 322.150853][ T9809] jffs2: notice: (9809) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 322.520580][ T9824] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 322.521004][ T9820] FAULT_INJECTION: forcing a failure. [ 322.521004][ T9820] name failslab, interval 1, probability 0, space 0, times 0 [ 322.521039][ T9820] CPU: 1 UID: 0 PID: 9820 Comm: syz.2.1135 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.521076][ T9820] Tainted: [L]=SOFTLOCKUP [ 322.521083][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 322.521093][ T9820] Call Trace: [ 322.521099][ T9820] [ 322.521106][ T9820] dump_stack_lvl+0xe8/0x150 [ 322.521131][ T9820] should_fail_ex+0x3eb/0x540 [ 322.521160][ T9820] should_failslab+0xa8/0x100 [ 322.521181][ T9820] ? __kernfs_new_node+0xe6/0x980 [ 322.521202][ T9820] kmem_cache_alloc_noprof+0x9c/0x600 [ 322.521231][ T9820] ? __kernfs_new_node+0xe6/0x980 [ 322.521255][ T9820] __kernfs_new_node+0xe6/0x980 [ 322.521281][ T9820] ? __pfx___kernfs_new_node+0x10/0x10 [ 322.521301][ T9820] ? lock_acquire+0x115/0x350 [ 322.521319][ T9820] ? kernfs_root+0x1c/0x230 [ 322.521342][ T9820] ? kernfs_root+0x1c/0x230 [ 322.521360][ T9820] ? kernfs_root+0x1c/0x230 [ 322.521377][ T9820] ? kernfs_root+0x1c/0x230 [ 322.521401][ T9820] kernfs_new_node+0xeb/0x140 [ 322.521424][ T9820] __kernfs_create_file+0x4b/0x2e0 [ 322.521451][ T9820] sysfs_add_file_mode_ns+0x237/0x300 [ 322.521472][ T9820] internal_create_group+0x679/0x1180 [ 322.521501][ T9820] ? kernfs_add_one+0xfc/0x710 [ 322.521520][ T9820] ? __pfx_internal_create_group+0x10/0x10 [ 322.521548][ T9820] sysfs_create_groups+0x59/0x120 [ 322.521569][ T9820] device_add_attrs+0xde/0x600 [ 322.521590][ T9820] ? __pfx_device_add_attrs+0x10/0x10 [ 322.521612][ T9820] ? device_add_class_symlinks+0x21f/0x240 [ 322.521634][ T9820] device_add+0x488/0xb80 [ 322.521655][ T9820] netdev_register_kobject+0x197/0x350 [ 322.521679][ T9820] register_netdevice+0x142e/0x1eb0 [ 322.521706][ T9820] ? __pfx_register_netdevice+0x10/0x10 [ 322.521721][ T9820] ? alloc_netdev_mqs+0xd44/0x12a0 [ 322.521743][ T9820] ? alloc_netdev_mqs+0xef9/0x12a0 [ 322.521760][ T9820] ? __ip_tunnel_create+0x3bb/0x550 [ 322.521784][ T9820] __ip_tunnel_create+0x3e8/0x550 [ 322.521806][ T9820] ? __pfx___ip_tunnel_create+0x10/0x10 [ 322.521833][ T9820] ip_tunnel_init_net+0x2fe/0x870 [ 322.521857][ T9820] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 322.521911][ T9820] ? __kmalloc_noprof+0x387/0x710 [ 322.521940][ T9820] ? __kmalloc_noprof+0x1a6/0x710 [ 322.521954][ T9820] ? ops_init+0x7b/0x5d0 [ 322.521981][ T9820] ops_init+0x35d/0x5d0 [ 322.522009][ T9820] setup_net+0x118/0x350 [ 322.522032][ T9820] ? __pfx_setup_net+0x10/0x10 [ 322.522053][ T9820] ? down_read_killable+0x1b6/0x3b0 [ 322.522072][ T9820] ? __ns_common_init+0x38a/0x590 [ 322.522118][ T9820] copy_net_ns+0x536/0x770 [ 322.522152][ T9820] create_new_namespaces+0x3f0/0x6b0 [ 322.522191][ T9820] ? security_capable+0x7e/0x2c0 [ 322.522220][ T9820] unshare_nsproxy_namespaces+0x144/0x190 [ 322.522245][ T9820] ksys_unshare+0x53c/0x890 [ 322.522269][ T9820] ? __pfx_ksys_unshare+0x10/0x10 [ 322.522292][ T9820] ? rcu_is_watching+0x16/0xb0 [ 322.522322][ T9820] __x64_sys_unshare+0x38/0x50 [ 322.522343][ T9820] do_syscall_64+0x166/0x520 [ 322.522357][ T9820] ? trace_irq_disable+0x3b/0x140 [ 322.522377][ T9820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.522395][ T9820] ? clear_bhb_loop+0x70/0xc0 [ 322.522414][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.522431][ T9820] RIP: 0033:0x7fc22759e159 [ 322.522446][ T9820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.522459][ T9820] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 322.522476][ T9820] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 322.522488][ T9820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 322.522498][ T9820] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 322.522508][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.522518][ T9820] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 322.522542][ T9820] [ 322.557026][ T1222] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 322.730811][ T1222] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 322.750180][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.750252][ T1222] usb 6-1: Product: syz [ 322.750295][ T1222] usb 6-1: Manufacturer: syz [ 322.750347][ T1222] usb 6-1: SerialNumber: syz [ 323.218283][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 323.218359][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 323.456048][ T5758] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 323.543453][ T9839] jffs2: notice: (9839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 323.609433][ T5758] usb 7-1: unable to get BOS descriptor or descriptor too short [ 323.609487][ T5758] usb 7-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 323.614550][ T5758] usb 7-1: config 4 has an invalid interface number: 138 but max is 0 [ 323.614579][ T5758] usb 7-1: config 4 has no interface number 0 [ 323.614611][ T5758] usb 7-1: config 4 interface 138 has no altsetting 0 [ 323.636631][ T5688] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 323.671434][ T5758] usb 7-1: string descriptor 0 read error: -22 [ 323.671573][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.786601][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 323.790405][ T5688] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 323.802152][ T5688] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.802171][ T5688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.827568][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.827624][ T5688] usb 5-1: Product: syz [ 323.827642][ T5688] usb 5-1: Manufacturer: syz [ 323.827658][ T5688] usb 5-1: SerialNumber: syz [ 323.867828][ T5688] usb 5-1: 0:2 : does not exist [ 323.905469][ T9831] syzkaller1: entered promiscuous mode [ 323.905628][ T9831] syzkaller1: entered allmulticast mode [ 324.001313][ T9846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.004643][ T9846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.073244][ T5688] usb 5-1: USB disconnect, device number 45 [ 324.262302][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 324.262406][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 324.263190][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 324.265634][ T1222] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 324.982965][ T9866] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 324.983550][ T9864] FAULT_INJECTION: forcing a failure. [ 324.983550][ T9864] name failslab, interval 1, probability 0, space 0, times 0 [ 324.983580][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.2.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.983608][ T9864] Tainted: [L]=SOFTLOCKUP [ 324.983616][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.983637][ T9864] Call Trace: [ 324.983644][ T9864] [ 324.983651][ T9864] dump_stack_lvl+0xe8/0x150 [ 324.983698][ T9864] should_fail_ex+0x3eb/0x540 [ 324.983737][ T9864] should_failslab+0xa8/0x100 [ 324.983769][ T9864] ? __kernfs_new_node+0xe6/0x980 [ 324.983788][ T9864] kmem_cache_alloc_noprof+0x9c/0x600 [ 324.983815][ T9864] ? __kernfs_new_node+0xe6/0x980 [ 324.983859][ T9864] __kernfs_new_node+0xe6/0x980 [ 324.983893][ T9864] ? __pfx___kernfs_new_node+0x10/0x10 [ 324.983922][ T9864] ? lock_acquire+0x115/0x350 [ 324.983940][ T9864] ? kernfs_root+0x1c/0x230 [ 324.983961][ T9864] ? kernfs_root+0x1c/0x230 [ 324.983991][ T9864] ? kernfs_root+0x1c/0x230 [ 324.984015][ T9864] ? kernfs_root+0x1c/0x230 [ 324.984043][ T9864] kernfs_new_node+0xeb/0x140 [ 324.984077][ T9864] __kernfs_create_file+0x4b/0x2e0 [ 324.984102][ T9864] sysfs_add_file_mode_ns+0x237/0x300 [ 324.984123][ T9864] sysfs_merge_group+0x183/0x320 [ 324.984168][ T9864] ? __pfx_sysfs_merge_group+0x10/0x10 [ 324.984193][ T9864] ? device_add_attrs+0x5c3/0x600 [ 324.984222][ T9864] ? __pfx_device_add_attrs+0x10/0x10 [ 324.984270][ T9864] dpm_sysfs_add+0xd2/0x270 [ 324.984315][ T9864] device_add+0x4ca/0xb80 [ 324.984347][ T9864] netdev_register_kobject+0x197/0x350 [ 324.984393][ T9864] register_netdevice+0x142e/0x1eb0 [ 324.984445][ T9864] ? __pfx_register_netdevice+0x10/0x10 [ 324.984491][ T9864] ? net_generic+0x1e/0x240 [ 324.984520][ T9864] ? net_generic+0x1e/0x240 [ 324.984543][ T9864] ? net_generic+0x1e/0x240 [ 324.984574][ T9864] register_netdev+0x40/0x60 [ 324.984591][ T9864] vti6_init_net+0x259/0x3b0 [ 324.984636][ T9864] ops_init+0x35d/0x5d0 [ 324.984677][ T9864] setup_net+0x118/0x350 [ 324.984708][ T9864] ? __pfx_setup_net+0x10/0x10 [ 324.984736][ T9864] ? down_read_killable+0x1b6/0x3b0 [ 324.984764][ T9864] ? __ns_common_init+0x38a/0x590 [ 324.984815][ T9864] copy_net_ns+0x536/0x770 [ 324.984848][ T9864] create_new_namespaces+0x3f0/0x6b0 [ 324.984882][ T9864] ? security_capable+0x7e/0x2c0 [ 324.984910][ T9864] unshare_nsproxy_namespaces+0x144/0x190 [ 324.984954][ T9864] ksys_unshare+0x53c/0x890 [ 324.984987][ T9864] ? __pfx_ksys_unshare+0x10/0x10 [ 324.985025][ T9864] ? rcu_is_watching+0x16/0xb0 [ 324.985055][ T9864] __x64_sys_unshare+0x38/0x50 [ 324.985076][ T9864] do_syscall_64+0x166/0x520 [ 324.985110][ T9864] ? trace_irq_disable+0x3b/0x140 [ 324.985136][ T9864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.985165][ T9864] ? clear_bhb_loop+0x70/0xc0 [ 324.985193][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.985209][ T9864] RIP: 0033:0x7fc22759e159 [ 324.985224][ T9864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.985253][ T9864] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 324.985279][ T9864] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 324.985296][ T9864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 324.985312][ T9864] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 324.985326][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.985340][ T9864] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 324.985373][ T9864] [ 325.414477][ T1222] usb 6-1: USB disconnect, device number 42 [ 326.278616][ T9888] jffs2: notice: (9888) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 326.411983][ T5758] catc 7-1:4.138: Can't set altsetting 1. [ 326.412052][ T5758] catc 7-1:4.138: probe with driver catc failed with error -5 [ 326.434352][ T5758] usb 7-1: USB disconnect, device number 4 [ 326.796686][ T1222] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 326.945977][ T1222] usb 5-1: Using ep0 maxpacket: 16 [ 326.946856][ T1222] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 326.948162][ T1222] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.948186][ T1222] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.951029][ T1222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.951053][ T1222] usb 5-1: Product: syz [ 326.951069][ T1222] usb 5-1: Manufacturer: syz [ 326.951085][ T1222] usb 5-1: SerialNumber: syz [ 326.986327][ T5758] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 327.018566][ T9907] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 327.022777][ T9906] FAULT_INJECTION: forcing a failure. [ 327.022777][ T9906] name failslab, interval 1, probability 0, space 0, times 0 [ 327.022867][ T9906] CPU: 0 UID: 0 PID: 9906 Comm: syz.2.1160 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.022945][ T9906] Tainted: [L]=SOFTLOCKUP [ 327.022967][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.022999][ T9906] Call Trace: [ 327.023030][ T9906] [ 327.023057][ T9906] dump_stack_lvl+0xe8/0x150 [ 327.023159][ T9906] should_fail_ex+0x3eb/0x540 [ 327.023246][ T9906] should_failslab+0xa8/0x100 [ 327.023327][ T9906] __kmalloc_cache_noprof+0x9e/0x600 [ 327.023388][ T9906] ? device_add+0xb6/0xb80 [ 327.023456][ T9906] ? device_add+0xb6/0xb80 [ 327.023535][ T9906] device_add+0xb6/0xb80 [ 327.023602][ T9906] netdev_register_kobject+0x197/0x350 [ 327.023689][ T9906] register_netdevice+0x142e/0x1eb0 [ 327.023791][ T9906] ? __pfx_register_netdevice+0x10/0x10 [ 327.023857][ T9906] ? alloc_netdev_mqs+0xd44/0x12a0 [ 327.023939][ T9906] ? alloc_netdev_mqs+0xef9/0x12a0 [ 327.024006][ T9906] ? __ip_tunnel_create+0x3bb/0x550 [ 327.024098][ T9906] __ip_tunnel_create+0x3e8/0x550 [ 327.024176][ T9906] ? __pfx___ip_tunnel_create+0x10/0x10 [ 327.024277][ T9906] ip_tunnel_init_net+0x2fe/0x870 [ 327.024360][ T9906] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 327.024441][ T9906] ? __kmalloc_noprof+0x387/0x710 [ 327.024500][ T9906] ? __kmalloc_noprof+0x1a6/0x710 [ 327.024557][ T9906] ? ops_init+0x7b/0x5d0 [ 327.024642][ T9906] ops_init+0x35d/0x5d0 [ 327.024736][ T9906] setup_net+0x118/0x350 [ 327.024817][ T9906] ? __pfx_setup_net+0x10/0x10 [ 327.024876][ T9906] ? down_read_killable+0x1b6/0x3b0 [ 327.024944][ T9906] ? __ns_common_init+0x38a/0x590 [ 327.025038][ T9906] copy_net_ns+0x536/0x770 [ 327.025141][ T9906] create_new_namespaces+0x3f0/0x6b0 [ 327.025255][ T9906] ? security_capable+0x7e/0x2c0 [ 327.025364][ T9906] unshare_nsproxy_namespaces+0x144/0x190 [ 327.025449][ T9906] ksys_unshare+0x53c/0x890 [ 327.025539][ T9906] ? __pfx_ksys_unshare+0x10/0x10 [ 327.025605][ T9906] ? __x64_sys_recvmmsg+0x1e8/0x250 [ 327.025665][ T9906] ? __pfx___se_sys_futex+0x10/0x10 [ 327.025766][ T9906] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 327.025852][ T9906] __x64_sys_unshare+0x38/0x50 [ 327.025929][ T9906] do_syscall_64+0x166/0x520 [ 327.025981][ T9906] ? trace_irq_disable+0x3b/0x140 [ 327.026045][ T9906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.026108][ T9906] ? clear_bhb_loop+0x70/0xc0 [ 327.026194][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.026243][ T9906] RIP: 0033:0x7fc22759e159 [ 327.026284][ T9906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.026337][ T9906] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 327.026407][ T9906] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 327.026452][ T9906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 327.026498][ T9906] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 327.026539][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.026579][ T9906] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 327.026672][ T9906] [ 327.169960][ T5758] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 327.203902][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.203979][ T5758] usb 6-1: Product: syz [ 327.204021][ T5758] usb 6-1: Manufacturer: syz [ 327.204071][ T5758] usb 6-1: SerialNumber: syz [ 327.403018][ T1222] usb 5-1: 0:2 : does not exist [ 327.454715][ T1222] usb 5-1: USB disconnect, device number 46 [ 327.527294][ T7306] udevd[7306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.819426][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 327.819494][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 328.236537][ T1222] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 328.388804][ T1222] usb 3-1: unable to get BOS descriptor or descriptor too short [ 328.388857][ T1222] usb 3-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 328.390824][ T1222] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 328.390851][ T1222] usb 3-1: config 4 has no interface number 0 [ 328.390891][ T1222] usb 3-1: config 4 interface 138 has no altsetting 0 [ 328.395073][ T1222] usb 3-1: string descriptor 0 read error: -22 [ 328.395201][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.692916][ T9922] syzkaller1: entered promiscuous mode [ 328.692948][ T9922] syzkaller1: entered allmulticast mode [ 328.775841][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.778216][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.059603][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 329.061639][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 329.464631][ T9943] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 329.465432][ T9940] FAULT_INJECTION: forcing a failure. [ 329.465432][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 329.465464][ T9940] CPU: 1 UID: 0 PID: 9940 Comm: syz.6.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.465500][ T9940] Tainted: [L]=SOFTLOCKUP [ 329.465506][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.465516][ T9940] Call Trace: [ 329.465522][ T9940] [ 329.465529][ T9940] dump_stack_lvl+0xe8/0x150 [ 329.465575][ T9940] should_fail_ex+0x3eb/0x540 [ 329.465615][ T9940] should_failslab+0xa8/0x100 [ 329.465650][ T9940] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 329.465670][ T9940] ? __devinet_sysctl_register+0xa4/0x470 [ 329.465686][ T9940] ? __devinet_sysctl_register+0xa4/0x470 [ 329.465716][ T9940] ? __register_sysctl_table+0x1278/0x1370 [ 329.465753][ T9940] kmemdup_noprof+0x2b/0x70 [ 329.465776][ T9940] __devinet_sysctl_register+0xa4/0x470 [ 329.465805][ T9940] ? neigh_sysctl_register+0x9d7/0xa90 [ 329.465829][ T9940] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 329.465855][ T9940] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 329.465901][ T9940] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 329.465926][ T9940] ? ops_init+0x35d/0x5d0 [ 329.465971][ T9940] ? setup_net+0x118/0x350 [ 329.465995][ T9940] ? copy_net_ns+0x536/0x770 [ 329.466014][ T9940] ? create_new_namespaces+0x3f0/0x6b0 [ 329.466069][ T9940] ? unshare_nsproxy_namespaces+0x144/0x190 [ 329.466100][ T9940] ? ksys_unshare+0x53c/0x890 [ 329.466129][ T9940] ? do_syscall_64+0x166/0x520 [ 329.466155][ T9940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.466176][ T9940] devinet_sysctl_register+0x187/0x200 [ 329.466195][ T9940] inetdev_init+0x2c8/0x4f0 [ 329.466232][ T9940] inetdev_event+0x11c4/0x1610 [ 329.466256][ T9940] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 329.466292][ T9940] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 329.466334][ T9940] ? __pfx_inetdev_event+0x10/0x10 [ 329.466373][ T9940] notifier_call_chain+0x1a5/0x3d0 [ 329.466420][ T9940] register_netdevice+0x189f/0x1eb0 [ 329.466464][ T9940] ? __pfx_register_netdevice+0x10/0x10 [ 329.466487][ T9940] ? alloc_netdev_mqs+0xd44/0x12a0 [ 329.466519][ T9940] ? alloc_netdev_mqs+0xef9/0x12a0 [ 329.466561][ T9940] ? __ip_tunnel_create+0x3bb/0x550 [ 329.466597][ T9940] __ip_tunnel_create+0x3e8/0x550 [ 329.466627][ T9940] ? __pfx___ip_tunnel_create+0x10/0x10 [ 329.466683][ T9940] ip_tunnel_init_net+0x2fe/0x870 [ 329.466718][ T9940] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 329.466753][ T9940] ? __kmalloc_noprof+0x387/0x710 [ 329.466776][ T9940] ? __kmalloc_noprof+0x1a6/0x710 [ 329.466798][ T9940] ? ops_init+0x7b/0x5d0 [ 329.466836][ T9940] ops_init+0x35d/0x5d0 [ 329.466878][ T9940] setup_net+0x118/0x350 [ 329.466911][ T9940] ? __pfx_setup_net+0x10/0x10 [ 329.466942][ T9940] ? down_read_killable+0x1b6/0x3b0 [ 329.466978][ T9940] ? __ns_common_init+0x38a/0x590 [ 329.467016][ T9940] copy_net_ns+0x536/0x770 [ 329.467062][ T9940] create_new_namespaces+0x3f0/0x6b0 [ 329.467095][ T9940] ? security_capable+0x7e/0x2c0 [ 329.467136][ T9940] unshare_nsproxy_namespaces+0x144/0x190 [ 329.467171][ T9940] ksys_unshare+0x53c/0x890 [ 329.467204][ T9940] ? __pfx_ksys_unshare+0x10/0x10 [ 329.467237][ T9940] ? rcu_is_watching+0x16/0xb0 [ 329.467279][ T9940] __x64_sys_unshare+0x38/0x50 [ 329.467309][ T9940] do_syscall_64+0x166/0x520 [ 329.467330][ T9940] ? trace_irq_disable+0x3b/0x140 [ 329.467356][ T9940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.467380][ T9940] ? clear_bhb_loop+0x70/0xc0 [ 329.467408][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.467431][ T9940] RIP: 0033:0x7ffa7619e159 [ 329.467452][ T9940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.467471][ T9940] RSP: 002b:00007ffa770d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 329.467496][ T9940] RAX: ffffffffffffffda RBX: 00007ffa76425fa0 RCX: 00007ffa7619e159 [ 329.467513][ T9940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 329.467528][ T9940] RBP: 00007ffa7623506b R08: 0000000000000000 R09: 0000000000000000 [ 329.467543][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.467557][ T9940] R13: 00007ffa76426038 R14: 00007ffa76425fa0 R15: 00007ffe951e16a8 [ 329.467592][ T9940] [ 329.874603][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 329.874720][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 329.948266][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 329.966720][ T5758] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 329.996504][ T5758] usb 6-1: USB disconnect, device number 43 [ 330.736160][ T5688] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 330.885992][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 330.886512][ T5688] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 330.887466][ T5688] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.887483][ T5688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.889818][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.889836][ T5688] usb 5-1: Product: syz [ 330.889846][ T5688] usb 5-1: Manufacturer: syz [ 330.889857][ T5688] usb 5-1: SerialNumber: syz [ 330.959225][ T5688] usb 5-1: 0:2 : does not exist [ 331.112399][ T5688] usb 5-1: USB disconnect, device number 47 [ 331.249098][ T1222] catc 3-1:4.138: Can't set altsetting 1. [ 331.249184][ T1222] catc 3-1:4.138: probe with driver catc failed with error -5 [ 331.274849][ T1222] usb 3-1: USB disconnect, device number 71 [ 331.663340][ T9977] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 331.664372][ T9976] FAULT_INJECTION: forcing a failure. [ 331.664372][ T9976] name failslab, interval 1, probability 0, space 0, times 0 [ 331.664409][ T9976] CPU: 0 UID: 0 PID: 9976 Comm: syz.5.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.664447][ T9976] Tainted: [L]=SOFTLOCKUP [ 331.664457][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.664475][ T9976] Call Trace: [ 331.664486][ T9976] [ 331.664496][ T9976] dump_stack_lvl+0xe8/0x150 [ 331.664536][ T9976] should_fail_ex+0x3eb/0x540 [ 331.664576][ T9976] should_failslab+0xa8/0x100 [ 331.664606][ T9976] ? __kernfs_new_node+0xe6/0x980 [ 331.664636][ T9976] kmem_cache_alloc_noprof+0x9c/0x600 [ 331.664670][ T9976] ? kstrdup+0x81/0x100 [ 331.664696][ T9976] ? __kernfs_new_node+0xe6/0x980 [ 331.664738][ T9976] __kernfs_new_node+0xe6/0x980 [ 331.664798][ T9976] ? __pfx___kernfs_new_node+0x10/0x10 [ 331.664849][ T9976] ? kernfs_root+0x1c/0x230 [ 331.664892][ T9976] ? kernfs_root+0x1c/0x230 [ 331.664927][ T9976] ? kernfs_root+0x1c/0x230 [ 331.664962][ T9976] ? kernfs_root+0x1c/0x230 [ 331.665001][ T9976] kernfs_create_dir_ns+0xf7/0x220 [ 331.665045][ T9976] sysfs_create_dir_ns+0x12f/0x2a0 [ 331.665083][ T9976] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 331.665123][ T9976] ? do_raw_spin_unlock+0xf5/0x200 [ 331.665177][ T9976] kobject_add_internal+0x622/0xcd0 [ 331.665221][ T9976] kobject_init_and_add+0x12b/0x1a0 [ 331.665250][ T9976] ? register_netdevice+0x142e/0x1eb0 [ 331.665276][ T9976] ? __ip_tunnel_create+0x3e8/0x550 [ 331.665306][ T9976] ? ip_tunnel_init_net+0x2fe/0x870 [ 331.665340][ T9976] ? ops_init+0x35d/0x5d0 [ 331.665379][ T9976] ? __pfx_kobject_init_and_add+0x10/0x10 [ 331.665408][ T9976] ? __x64_sys_unshare+0x38/0x50 [ 331.665462][ T9976] netdev_queue_update_kobjects+0x249/0x6b0 [ 331.665511][ T9976] netdev_register_kobject+0x277/0x350 [ 331.665553][ T9976] register_netdevice+0x142e/0x1eb0 [ 331.665602][ T9976] ? __pfx_register_netdevice+0x10/0x10 [ 331.665632][ T9976] ? alloc_netdev_mqs+0xd44/0x12a0 [ 331.665669][ T9976] ? alloc_netdev_mqs+0xef9/0x12a0 [ 331.665699][ T9976] ? __ip_tunnel_create+0x3bb/0x550 [ 331.665740][ T9976] __ip_tunnel_create+0x3e8/0x550 [ 331.665778][ T9976] ? __pfx___ip_tunnel_create+0x10/0x10 [ 331.665825][ T9976] ip_tunnel_init_net+0x2fe/0x870 [ 331.665867][ T9976] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 331.665905][ T9976] ? __kmalloc_noprof+0x387/0x710 [ 331.665930][ T9976] ? __kmalloc_noprof+0x1a6/0x710 [ 331.665953][ T9976] ? ops_init+0x7b/0x5d0 [ 331.666025][ T9976] ops_init+0x35d/0x5d0 [ 331.666138][ T9976] setup_net+0x118/0x350 [ 331.666262][ T9976] ? __pfx_setup_net+0x10/0x10 [ 331.666335][ T9976] ? down_read_killable+0x1b6/0x3b0 [ 331.666423][ T9976] ? __ns_common_init+0x38a/0x590 [ 331.666532][ T9976] copy_net_ns+0x536/0x770 [ 331.666623][ T9976] create_new_namespaces+0x3f0/0x6b0 [ 331.666708][ T9976] ? security_capable+0x7e/0x2c0 [ 331.666818][ T9976] unshare_nsproxy_namespaces+0x144/0x190 [ 331.666902][ T9976] ksys_unshare+0x53c/0x890 [ 331.666983][ T9976] ? __pfx_ksys_unshare+0x10/0x10 [ 331.667067][ T9976] ? rcu_is_watching+0x16/0xb0 [ 331.667178][ T9976] __x64_sys_unshare+0x38/0x50 [ 331.667250][ T9976] do_syscall_64+0x166/0x520 [ 331.667307][ T9976] ? trace_irq_disable+0x3b/0x140 [ 331.667371][ T9976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.667434][ T9976] ? clear_bhb_loop+0x70/0xc0 [ 331.667517][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.667593][ T9976] RIP: 0033:0x7f632fd9e159 [ 331.667657][ T9976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.667685][ T9976] RSP: 002b:00007f6330c49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 331.667739][ T9976] RAX: ffffffffffffffda RBX: 00007f6330025fa0 RCX: 00007f632fd9e159 [ 331.667779][ T9976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 331.667807][ T9976] RBP: 00007f632fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 331.667844][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.667890][ T9976] R13: 00007f6330026038 R14: 00007f6330025fa0 R15: 00007ffd19118f08 [ 331.667973][ T9976] [ 331.682155][ T9976] kobject: kobject_add_internal failed for tx-0 (error: -12 parent: queues) [ 332.706724][ T5696] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 332.857366][ T5696] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 332.860367][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.860393][ T5696] usb 7-1: Product: syz [ 332.860409][ T5696] usb 7-1: Manufacturer: syz [ 332.860425][ T5696] usb 7-1: SerialNumber: syz [ 333.246075][ T5758] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 333.283338][ T5696] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 333.283400][ T5696] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 333.398061][ T5758] usb 5-1: unable to get BOS descriptor or descriptor too short [ 333.398116][ T5758] usb 5-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 333.399178][ T5758] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 333.399206][ T5758] usb 5-1: config 4 has no interface number 0 [ 333.399239][ T5758] usb 5-1: config 4 interface 138 has no altsetting 0 [ 333.402439][ T5758] usb 5-1: string descriptor 0 read error: -22 [ 333.402616][ T5758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.416137][ T32] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 333.558597][ T32] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 333.558645][ T32] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 333.559908][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.559959][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.560002][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.561006][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.561053][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.561082][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.562059][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.562106][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.562135][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.567903][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.568039][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.568097][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.575096][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.575144][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.575173][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.581981][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.582113][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.582186][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.592983][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.593033][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.593063][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.599255][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 333.599371][ T32] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 333.599451][ T32] usb 6-1: config 0 interface 0 has no altsetting 0 [ 333.605557][ T32] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 333.605628][ T32] usb 6-1: Product: syz [ 333.605669][ T32] usb 6-1: Manufacturer: syz [ 333.605711][ T32] usb 6-1: SerialNumber: syz [ 333.620780][ T989] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 333.621510][ T32] usb 6-1: config 0 descriptor?? [ 333.749881][ T32] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 333.877495][ T989] usb 3-1: Using ep0 maxpacket: 16 [ 333.880785][ T989] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 333.885222][ T989] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.885249][ T989] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.925310][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.925342][ T989] usb 3-1: Product: syz [ 333.925391][ T989] usb 3-1: Manufacturer: syz [ 333.925409][ T989] usb 3-1: SerialNumber: syz [ 333.953183][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.953779][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.992261][ T989] usb 3-1: 0:2 : does not exist [ 334.188819][ T989] usb 3-1: USB disconnect, device number 72 [ 334.546345][ T5696] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 334.547103][ T5696] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 335.353730][ T5696] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 335.353799][ T5696] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 335.378996][ T5696] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 335.384167][ T5696] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 335.417915][ T5696] usb 7-1: USB disconnect, device number 5 [ 335.979263][ T5703] usb 6-1: USB disconnect, device number 44 [ 335.999028][ T5703] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 336.067423][T10029] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 336.087382][T10026] FAULT_INJECTION: forcing a failure. [ 336.087382][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 336.087419][T10026] CPU: 1 UID: 0 PID: 10026 Comm: syz.2.1197 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.087458][T10026] Tainted: [L]=SOFTLOCKUP [ 336.087467][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.087481][T10026] Call Trace: [ 336.087491][T10026] [ 336.087501][T10026] dump_stack_lvl+0xe8/0x150 [ 336.087538][T10026] should_fail_ex+0x3eb/0x540 [ 336.087676][T10026] should_failslab+0xa8/0x100 [ 336.087715][T10026] ? __proc_create+0x55d/0xad0 [ 336.087775][T10026] kmem_cache_alloc_noprof+0x9c/0x600 [ 336.087810][T10026] ? __proc_create+0x55d/0xad0 [ 336.087846][T10026] __proc_create+0x55d/0xad0 [ 336.087882][T10026] ? __pfx___proc_create+0x10/0x10 [ 336.087924][T10026] proc_create_reg+0x8b/0x110 [ 336.087956][T10026] proc_create_net_data+0x98/0x1d0 [ 336.088020][T10026] ? __pfx_proc_create_net_data+0x10/0x10 [ 336.088061][T10026] xt_proto_init+0x192/0x3f0 [ 336.088113][T10026] ? rcu_is_watching+0x16/0xb0 [ 336.088147][T10026] ? __pfx_xt_proto_init+0x10/0x10 [ 336.088172][T10026] ? __kmalloc_noprof+0x1a6/0x710 [ 336.088192][T10026] ? ops_init+0x7b/0x5d0 [ 336.088254][T10026] ops_init+0x35d/0x5d0 [ 336.088290][T10026] setup_net+0x118/0x350 [ 336.088339][T10026] ? __pfx_setup_net+0x10/0x10 [ 336.088371][T10026] ? down_read_killable+0x1b6/0x3b0 [ 336.088429][T10026] ? __ns_common_init+0x38a/0x590 [ 336.088454][T10026] copy_net_ns+0x536/0x770 [ 336.088490][T10026] create_new_namespaces+0x3f0/0x6b0 [ 336.088522][T10026] ? security_capable+0x7e/0x2c0 [ 336.088596][T10026] unshare_nsproxy_namespaces+0x144/0x190 [ 336.088619][T10026] ksys_unshare+0x53c/0x890 [ 336.088661][T10026] ? __pfx_ksys_unshare+0x10/0x10 [ 336.088693][T10026] ? rcu_is_watching+0x16/0xb0 [ 336.088734][T10026] __x64_sys_unshare+0x38/0x50 [ 336.088754][T10026] do_syscall_64+0x166/0x520 [ 336.088816][T10026] ? trace_irq_disable+0x3b/0x140 [ 336.088844][T10026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.088867][T10026] ? clear_bhb_loop+0x70/0xc0 [ 336.088893][T10026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.088917][T10026] RIP: 0033:0x7fc22759e159 [ 336.088932][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.088945][T10026] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 336.088977][T10026] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 336.088996][T10026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 336.089010][T10026] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 336.089024][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.089037][T10026] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 336.089072][T10026] [ 336.168487][ T5758] catc 5-1:4.138: Can't set altsetting 1. [ 336.168547][ T5758] catc 5-1:4.138: probe with driver catc failed with error -5 [ 336.413608][ T5758] usb 5-1: USB disconnect, device number 48 [ 337.216058][ T5758] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 337.355967][ T5688] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 337.366653][ T5758] usb 7-1: Using ep0 maxpacket: 16 [ 337.370384][ T5758] usb 7-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 337.380603][ T5758] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.380736][ T5758] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.391634][ T5758] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.391701][ T5758] usb 7-1: Product: syz [ 337.391751][ T5758] usb 7-1: Manufacturer: syz [ 337.391801][ T5758] usb 7-1: SerialNumber: syz [ 337.433977][ T5758] usb 7-1: 0:2 : does not exist [ 337.508158][ T5688] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 337.511127][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.511152][ T5688] usb 6-1: Product: syz [ 337.511167][ T5688] usb 6-1: Manufacturer: syz [ 337.511183][ T5688] usb 6-1: SerialNumber: syz [ 337.556030][ T32] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 337.618757][ T1222] usb 7-1: USB disconnect, device number 6 [ 337.707979][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.708033][ T32] usb 5-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 337.708886][ T32] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 337.708903][ T32] usb 5-1: config 4 has no interface number 0 [ 337.708922][ T32] usb 5-1: config 4 interface 138 has no altsetting 0 [ 337.711340][ T32] usb 5-1: string descriptor 0 read error: -22 [ 337.711425][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.961267][ T5688] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 337.961385][ T5688] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 338.042959][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.043673][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.178668][T10065] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 338.179660][T10064] FAULT_INJECTION: forcing a failure. [ 338.179660][T10064] name failslab, interval 1, probability 0, space 0, times 0 [ 338.179695][T10064] CPU: 0 UID: 0 PID: 10064 Comm: syz.2.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.179725][T10064] Tainted: [L]=SOFTLOCKUP [ 338.179734][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.179747][T10064] Call Trace: [ 338.179763][T10064] [ 338.179770][T10064] dump_stack_lvl+0xe8/0x150 [ 338.179795][T10064] should_fail_ex+0x3eb/0x540 [ 338.179852][T10064] should_failslab+0xa8/0x100 [ 338.179884][T10064] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 338.179910][T10064] ? kobject_set_name_vargs+0x61/0x110 [ 338.180015][T10064] ? kobject_set_name_vargs+0x61/0x110 [ 338.180047][T10064] kstrdup+0x42/0x100 [ 338.180070][T10064] kobject_set_name_vargs+0x61/0x110 [ 338.180100][T10064] dev_set_name+0xe2/0x140 [ 338.180163][T10064] ? __pfx_dev_set_name+0x10/0x10 [ 338.180188][T10064] ? __init_waitqueue_head+0xa8/0x150 [ 338.180223][T10064] ? device_initialize+0x394/0x470 [ 338.180271][T10064] netdev_register_kobject+0xb7/0x350 [ 338.180343][T10064] register_netdevice+0x142e/0x1eb0 [ 338.180411][T10064] ? __pfx_register_netdevice+0x10/0x10 [ 338.180440][T10064] ? alloc_netdev_mqs+0xd44/0x12a0 [ 338.180470][T10064] ? alloc_netdev_mqs+0xef9/0x12a0 [ 338.180497][T10064] ? __ip_tunnel_create+0x3bb/0x550 [ 338.180555][T10064] __ip_tunnel_create+0x3e8/0x550 [ 338.180590][T10064] ? __pfx___ip_tunnel_create+0x10/0x10 [ 338.180619][T10064] ip_tunnel_init_net+0x2fe/0x870 [ 338.180667][T10064] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 338.180705][T10064] ? __kmalloc_noprof+0x387/0x710 [ 338.180729][T10064] ? __kmalloc_noprof+0x1a6/0x710 [ 338.180748][T10064] ? ops_init+0x7b/0x5d0 [ 338.180785][T10064] vti_init_net+0x2f/0x100 [ 338.180865][T10064] ops_init+0x35d/0x5d0 [ 338.180904][T10064] setup_net+0x118/0x350 [ 338.180938][T10064] ? __pfx_setup_net+0x10/0x10 [ 338.180960][T10064] ? down_read_killable+0x1b6/0x3b0 [ 338.180999][T10064] ? __ns_common_init+0x38a/0x590 [ 338.181036][T10064] copy_net_ns+0x536/0x770 [ 338.181067][T10064] create_new_namespaces+0x3f0/0x6b0 [ 338.181099][T10064] ? security_capable+0x7e/0x2c0 [ 338.181141][T10064] unshare_nsproxy_namespaces+0x144/0x190 [ 338.181178][T10064] ksys_unshare+0x53c/0x890 [ 338.181210][T10064] ? __pfx_ksys_unshare+0x10/0x10 [ 338.181245][T10064] ? rcu_is_watching+0x16/0xb0 [ 338.181274][T10064] __x64_sys_unshare+0x38/0x50 [ 338.181317][T10064] do_syscall_64+0x166/0x520 [ 338.181338][T10064] ? trace_irq_disable+0x3b/0x140 [ 338.181364][T10064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.181392][T10064] ? clear_bhb_loop+0x70/0xc0 [ 338.181411][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.181435][T10064] RIP: 0033:0x7fc22759e159 [ 338.181469][T10064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.181490][T10064] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 338.181533][T10064] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 338.181552][T10064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 338.181567][T10064] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 338.181581][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.181596][T10064] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 338.181644][T10064] [ 339.218139][ T5688] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 339.220131][ T5688] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 340.023894][ T5688] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 340.023982][ T5688] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 340.024900][ T5688] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 340.037345][ T5688] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 340.069259][ T5688] usb 6-1: USB disconnect, device number 45 [ 340.350559][ T32] catc 5-1:4.138: Can't set altsetting 1. [ 340.350616][ T32] catc 5-1:4.138: probe with driver catc failed with error -5 [ 340.358314][ T32] usb 5-1: USB disconnect, device number 49 [ 340.458822][T10102] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 340.459384][T10098] FAULT_INJECTION: forcing a failure. [ 340.459384][T10098] name failslab, interval 1, probability 0, space 0, times 0 [ 340.459416][T10098] CPU: 1 UID: 0 PID: 10098 Comm: syz.6.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.459449][T10098] Tainted: [L]=SOFTLOCKUP [ 340.459458][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.459473][T10098] Call Trace: [ 340.459483][T10098] [ 340.459493][T10098] dump_stack_lvl+0xe8/0x150 [ 340.459529][T10098] should_fail_ex+0x3eb/0x540 [ 340.459572][T10098] should_failslab+0xa8/0x100 [ 340.459602][T10098] ? __proc_create+0x55d/0xad0 [ 340.459636][T10098] kmem_cache_alloc_noprof+0x9c/0x600 [ 340.459676][T10098] ? __proc_create+0x55d/0xad0 [ 340.459716][T10098] __proc_create+0x55d/0xad0 [ 340.459766][T10098] ? __pfx___proc_create+0x10/0x10 [ 340.459804][T10098] ? _raw_write_unlock+0x28/0x50 [ 340.459905][T10098] ? proc_register+0x5d5/0x7f0 [ 340.459945][T10098] proc_create_reg+0x8b/0x110 [ 340.459981][T10098] proc_create_net_data+0x98/0x1d0 [ 340.460019][T10098] ? __pfx_proc_create_net_data+0x10/0x10 [ 340.460051][T10098] ? proc_register+0x5d5/0x7f0 [ 340.460094][T10098] sctp_proc_init+0xe4/0x1f0 [ 340.460161][T10098] sctp_defaults_init+0x50b/0xc30 [ 340.460240][T10098] ? vlan_proc_init+0xf4/0x240 [ 340.460290][T10098] ops_init+0x35d/0x5d0 [ 340.460333][T10098] setup_net+0x118/0x350 [ 340.460369][T10098] ? __pfx_setup_net+0x10/0x10 [ 340.460399][T10098] ? down_read_killable+0x1b6/0x3b0 [ 340.460425][T10098] ? __ns_common_init+0x38a/0x590 [ 340.460463][T10098] copy_net_ns+0x536/0x770 [ 340.460496][T10098] create_new_namespaces+0x3f0/0x6b0 [ 340.460531][T10098] ? security_capable+0x7e/0x2c0 [ 340.460570][T10098] unshare_nsproxy_namespaces+0x144/0x190 [ 340.460605][T10098] ksys_unshare+0x53c/0x890 [ 340.460641][T10098] ? __pfx_ksys_unshare+0x10/0x10 [ 340.460674][T10098] ? rcu_is_watching+0x16/0xb0 [ 340.460717][T10098] __x64_sys_unshare+0x38/0x50 [ 340.460755][T10098] do_syscall_64+0x166/0x520 [ 340.460777][T10098] ? trace_irq_disable+0x3b/0x140 [ 340.460805][T10098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.460829][T10098] ? clear_bhb_loop+0x70/0xc0 [ 340.460857][T10098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.460880][T10098] RIP: 0033:0x7ffa7619e159 [ 340.460901][T10098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.460922][T10098] RSP: 002b:00007ffa770d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 340.460947][T10098] RAX: ffffffffffffffda RBX: 00007ffa76425fa0 RCX: 00007ffa7619e159 [ 340.460965][T10098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 340.460980][T10098] RBP: 00007ffa7623506b R08: 0000000000000000 R09: 0000000000000000 [ 340.460994][T10098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.461009][T10098] R13: 00007ffa76426038 R14: 00007ffa76425fa0 R15: 00007ffe951e16a8 [ 340.461044][T10098] [ 340.502829][ T5688] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 340.679095][ T5688] usb 3-1: Using ep0 maxpacket: 16 [ 340.693018][ T5688] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 340.718767][ T5688] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.718847][ T5688] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.763436][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.763510][ T5688] usb 3-1: Product: syz [ 340.763557][ T5688] usb 3-1: Manufacturer: syz [ 340.763590][ T5688] usb 3-1: SerialNumber: syz [ 340.862814][ T5688] usb 3-1: 0:2 : does not exist [ 341.064014][ T5758] usb 3-1: USB disconnect, device number 73 [ 341.136449][ T7306] udevd[7306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.628771][T10130] jffs2: notice: (10130) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.873101][T10138] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 341.874788][T10137] FAULT_INJECTION: forcing a failure. [ 341.874788][T10137] name failslab, interval 1, probability 0, space 0, times 0 [ 341.874824][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.4.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.874857][T10137] Tainted: [L]=SOFTLOCKUP [ 341.874867][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.874882][T10137] Call Trace: [ 341.874892][T10137] [ 341.874902][T10137] dump_stack_lvl+0xe8/0x150 [ 341.874938][T10137] should_fail_ex+0x3eb/0x540 [ 341.874981][T10137] should_failslab+0xa8/0x100 [ 341.875012][T10137] ? __kernfs_new_node+0xe6/0x980 [ 341.875128][T10137] kmem_cache_alloc_noprof+0x9c/0x600 [ 341.875169][T10137] ? __kernfs_new_node+0xe6/0x980 [ 341.875207][T10137] __kernfs_new_node+0xe6/0x980 [ 341.875236][T10137] ? kasan_save_track+0x4f/0x80 [ 341.875263][T10137] ? __kasan_kmalloc+0x93/0xb0 [ 341.875289][T10137] ? __kmalloc_cache_noprof+0x31c/0x600 [ 341.875312][T10137] ? kset_create_and_add+0x5a/0x170 [ 341.875346][T10137] ? __pfx___kernfs_new_node+0x10/0x10 [ 341.875378][T10137] ? kernfs_root+0x1c/0x230 [ 341.875412][T10137] ? kernfs_root+0x1c/0x230 [ 341.875440][T10137] ? kernfs_root+0x1c/0x230 [ 341.875465][T10137] ? kernfs_root+0x1c/0x230 [ 341.875499][T10137] kernfs_create_dir_ns+0xf7/0x220 [ 341.875538][T10137] sysfs_create_dir_ns+0x12f/0x2a0 [ 341.875566][T10137] ? kobject_set_name_vargs+0xca/0x110 [ 341.875595][T10137] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 341.875620][T10137] ? kobject_set_name+0xe2/0x140 [ 341.875654][T10137] kobject_add_internal+0x622/0xcd0 [ 341.875690][T10137] kset_register+0x161/0x230 [ 341.875720][T10137] kset_create_and_add+0x12d/0x170 [ 341.875752][T10137] netdev_register_kobject+0x1c1/0x350 [ 341.875789][T10137] register_netdevice+0x142e/0x1eb0 [ 341.875833][T10137] ? __pfx_register_netdevice+0x10/0x10 [ 341.875859][T10137] ? alloc_netdev_mqs+0xd44/0x12a0 [ 341.875891][T10137] ? alloc_netdev_mqs+0xef9/0x12a0 [ 341.875917][T10137] ? __ip_tunnel_create+0x3bb/0x550 [ 341.875951][T10137] __ip_tunnel_create+0x3e8/0x550 [ 341.875983][T10137] ? __pfx___ip_tunnel_create+0x10/0x10 [ 341.876023][T10137] ip_tunnel_init_net+0x2fe/0x870 [ 341.876059][T10137] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 341.876107][T10137] ? __kmalloc_noprof+0x387/0x710 [ 341.876133][T10137] ? __kmalloc_noprof+0x1a6/0x710 [ 341.876155][T10137] ? ops_init+0x7b/0x5d0 [ 341.876191][T10137] vti_init_net+0x2f/0x100 [ 341.876226][T10137] ops_init+0x35d/0x5d0 [ 341.876269][T10137] setup_net+0x118/0x350 [ 341.876302][T10137] ? __pfx_setup_net+0x10/0x10 [ 341.876333][T10137] ? down_read_killable+0x1b6/0x3b0 [ 341.876361][T10137] ? __ns_common_init+0x38a/0x590 [ 341.876399][T10137] copy_net_ns+0x536/0x770 [ 341.876433][T10137] create_new_namespaces+0x3f0/0x6b0 [ 341.876468][T10137] ? security_capable+0x7e/0x2c0 [ 341.876510][T10137] unshare_nsproxy_namespaces+0x144/0x190 [ 341.876547][T10137] ksys_unshare+0x53c/0x890 [ 341.876582][T10137] ? __pfx_ksys_unshare+0x10/0x10 [ 341.876617][T10137] ? rcu_is_watching+0x16/0xb0 [ 341.876659][T10137] __x64_sys_unshare+0x38/0x50 [ 341.876691][T10137] do_syscall_64+0x166/0x520 [ 341.876712][T10137] ? trace_irq_disable+0x3b/0x140 [ 341.876740][T10137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.876765][T10137] ? clear_bhb_loop+0x70/0xc0 [ 341.876793][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.876817][T10137] RIP: 0033:0x7fb44d39e159 [ 341.876839][T10137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.876859][T10137] RSP: 002b:00007fb44e260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 341.876885][T10137] RAX: ffffffffffffffda RBX: 00007fb44d625fa0 RCX: 00007fb44d39e159 [ 341.876903][T10137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 341.876918][T10137] RBP: 00007fb44d43506b R08: 0000000000000000 R09: 0000000000000000 [ 341.876933][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.876947][T10137] R13: 00007fb44d626038 R14: 00007fb44d625fa0 R15: 00007fffde426028 [ 341.876982][T10137] [ 341.966771][ T5688] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 342.049447][T10137] kobject: kobject_add_internal failed for queues (error: -12 parent: ip_vti0) [ 342.162133][ T5688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 342.162300][ T5688] usb 3-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 342.176570][ T5688] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 342.176644][ T5688] usb 3-1: config 4 has no interface number 0 [ 342.176728][ T5688] usb 3-1: config 4 interface 138 has no altsetting 0 [ 342.232064][ T5688] usb 3-1: string descriptor 0 read error: -22 [ 342.232495][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.649167][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.649701][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.659634][ T5758] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 342.839340][ T5758] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 342.843938][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.843958][ T5758] usb 6-1: Product: syz [ 342.843986][ T5758] usb 6-1: Manufacturer: syz [ 342.844003][ T5758] usb 6-1: SerialNumber: syz [ 343.302718][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 343.302813][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 343.947783][ T5696] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 344.106045][ T5696] usb 5-1: Using ep0 maxpacket: 16 [ 344.106833][ T5696] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 344.108121][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.108148][ T5696] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.113273][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.113298][ T5696] usb 5-1: Product: syz [ 344.113311][ T5696] usb 5-1: Manufacturer: syz [ 344.113326][ T5696] usb 5-1: SerialNumber: syz [ 344.192515][ T5696] usb 5-1: 0:2 : does not exist [ 344.392963][ T1222] usb 5-1: USB disconnect, device number 50 [ 344.523653][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 344.524646][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 344.739625][ T5688] catc 3-1:4.138: Can't set altsetting 1. [ 344.739686][ T5688] catc 3-1:4.138: probe with driver catc failed with error -5 [ 344.753032][ T5688] usb 3-1: USB disconnect, device number 74 [ 344.803966][T10173] jffs2: notice: (10173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 344.944674][T10177] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 344.945205][T10176] FAULT_INJECTION: forcing a failure. [ 344.945205][T10176] name failslab, interval 1, probability 0, space 0, times 0 [ 344.945240][T10176] CPU: 1 UID: 0 PID: 10176 Comm: syz.2.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.945273][T10176] Tainted: [L]=SOFTLOCKUP [ 344.945281][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.945295][T10176] Call Trace: [ 344.945303][T10176] [ 344.945313][T10176] dump_stack_lvl+0xe8/0x150 [ 344.945349][T10176] should_fail_ex+0x3eb/0x540 [ 344.945390][T10176] should_failslab+0xa8/0x100 [ 344.945418][T10176] ? __kernfs_new_node+0xe6/0x980 [ 344.945452][T10176] kmem_cache_alloc_noprof+0x9c/0x600 [ 344.945480][T10176] ? __kernfs_new_node+0xe6/0x980 [ 344.945525][T10176] __kernfs_new_node+0xe6/0x980 [ 344.945563][T10176] ? __pfx___kernfs_new_node+0x10/0x10 [ 344.945588][T10176] ? lock_acquire+0x115/0x350 [ 344.945627][T10176] ? kernfs_root+0x1c/0x230 [ 344.945648][T10176] ? kernfs_root+0x1c/0x230 [ 344.945683][T10176] ? kernfs_root+0x1c/0x230 [ 344.945706][T10176] ? kernfs_root+0x1c/0x230 [ 344.945734][T10176] kernfs_new_node+0xeb/0x140 [ 344.945766][T10176] __kernfs_create_file+0x4b/0x2e0 [ 344.945790][T10176] sysfs_add_file_mode_ns+0x237/0x300 [ 344.945831][T10176] internal_create_group+0x679/0x1180 [ 344.945882][T10176] ? kernfs_add_one+0xfc/0x710 [ 344.945909][T10176] ? __pfx_internal_create_group+0x10/0x10 [ 344.945946][T10176] sysfs_create_groups+0x59/0x120 [ 344.946005][T10176] device_add_attrs+0xde/0x600 [ 344.946037][T10176] ? __pfx_device_add_attrs+0x10/0x10 [ 344.946070][T10176] ? device_add_class_symlinks+0x21f/0x240 [ 344.946102][T10176] device_add+0x488/0xb80 [ 344.946132][T10176] netdev_register_kobject+0x197/0x350 [ 344.946166][T10176] register_netdevice+0x142e/0x1eb0 [ 344.946257][T10176] ? __pfx_register_netdevice+0x10/0x10 [ 344.946375][T10176] register_netdev+0x40/0x60 [ 344.946451][T10176] sit_init_net+0x3d5/0x680 [ 344.946669][T10176] ops_init+0x35d/0x5d0 [ 344.946773][T10176] setup_net+0x118/0x350 [ 344.946856][T10176] ? __pfx_setup_net+0x10/0x10 [ 344.946935][T10176] ? down_read_killable+0x1b6/0x3b0 [ 344.946997][T10176] ? __ns_common_init+0x38a/0x590 [ 344.947095][T10176] copy_net_ns+0x536/0x770 [ 344.947177][T10176] create_new_namespaces+0x3f0/0x6b0 [ 344.947277][T10176] ? security_capable+0x7e/0x2c0 [ 344.947364][T10176] unshare_nsproxy_namespaces+0x144/0x190 [ 344.947464][T10176] ksys_unshare+0x53c/0x890 [ 344.947547][T10176] ? __pfx_ksys_unshare+0x10/0x10 [ 344.947622][T10176] ? __x64_sys_recvmmsg+0x1e8/0x250 [ 344.947734][T10176] ? __pfx___se_sys_futex+0x10/0x10 [ 344.947842][T10176] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 344.947935][T10176] __x64_sys_unshare+0x38/0x50 [ 344.948010][T10176] do_syscall_64+0x166/0x520 [ 344.948070][T10176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.948126][T10176] ? clear_bhb_loop+0x70/0xc0 [ 344.948207][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.948261][T10176] RIP: 0033:0x7fc22759e159 [ 344.948315][T10176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.948367][T10176] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 344.948437][T10176] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 344.948482][T10176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 344.948534][T10176] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 344.948572][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.948611][T10176] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 344.948695][T10176] [ 345.432754][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 345.432816][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 345.481747][ T5758] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 345.497086][ T5758] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 345.520842][ T5758] usb 6-1: USB disconnect, device number 46 [ 346.094116][T10200] jffs2: notice: (10200) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 346.277116][ T32] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 346.290047][ T5758] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 346.415979][ T5696] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 346.435636][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 346.435674][ T32] usb 5-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 346.436388][ T5758] usb 6-1: Using ep0 maxpacket: 32 [ 346.445124][ T32] usb 5-1: config 4 has an invalid interface number: 138 but max is 0 [ 346.445195][ T32] usb 5-1: config 4 has no interface number 0 [ 346.445274][ T32] usb 5-1: config 4 interface 138 has no altsetting 0 [ 346.455735][ T32] usb 5-1: string descriptor 0 read error: -22 [ 346.456247][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.459557][ T5758] usb 6-1: unable to get BOS descriptor or descriptor too short [ 346.459604][ T5758] usb 6-1: New USB device found: idVendor=0d8c, idProduct=000c, bcdDevice=0.40 [ 346.518211][ T5758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.518240][ T5758] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 346.542926][ T5758] usb 6-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 346.542954][ T5758] usb 6-1: Product: syz [ 346.542972][ T5758] usb 6-1: Manufacturer: syz [ 346.542987][ T5758] usb 6-1: SerialNumber: syz [ 346.616056][ T5696] usb 7-1: Using ep0 maxpacket: 16 [ 346.616832][ T5696] usb 7-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 346.617934][ T5696] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.617958][ T5696] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.620306][ T5696] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.620348][ T5696] usb 7-1: Product: syz [ 346.620364][ T5696] usb 7-1: Manufacturer: syz [ 346.620408][ T5696] usb 7-1: SerialNumber: syz [ 346.804029][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.805770][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.911681][ T33] audit: type=1804 audit(1790369602.729:24): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1247" name="/newroot/230/file0" dev="fuse" ino=1 res=1 errno=0 [ 346.942976][ T5758] usb 6-1: 3:0: cannot get min/max values for control 2 (id 3) [ 346.943117][ T5758] usb 6-1: applying playback min mute quirk [ 346.943136][ T5758] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 346.943156][ T5758] usb 6-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 346.944122][ T5758] usb 6-1: 3:0: cannot get min/max values for control 8 (id 3) [ 346.945039][ T5758] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 346.959594][ T5758] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 347.053900][ T5696] usb 7-1: 0:2 : does not exist [ 347.073027][ T5758] usb 6-1: USB disconnect, device number 47 [ 347.155566][ T5696] usb 7-1: USB disconnect, device number 7 [ 347.269461][ T7306] udevd[7306]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 347.407074][T10216] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 347.408937][T10215] FAULT_INJECTION: forcing a failure. [ 347.408937][T10215] name failslab, interval 1, probability 0, space 0, times 0 [ 347.408985][T10215] CPU: 0 UID: 0 PID: 10215 Comm: syz.2.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.409017][T10215] Tainted: [L]=SOFTLOCKUP [ 347.409025][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.409039][T10215] Call Trace: [ 347.409048][T10215] [ 347.409058][T10215] dump_stack_lvl+0xe8/0x150 [ 347.409090][T10215] should_fail_ex+0x3eb/0x540 [ 347.409127][T10215] should_failslab+0xa8/0x100 [ 347.409156][T10215] ? __kernfs_new_node+0xe6/0x980 [ 347.409197][T10215] kmem_cache_alloc_noprof+0x9c/0x600 [ 347.409233][T10215] ? __kernfs_new_node+0xe6/0x980 [ 347.409265][T10215] __kernfs_new_node+0xe6/0x980 [ 347.409297][T10215] ? __pfx___kernfs_new_node+0x10/0x10 [ 347.409315][T10215] ? lock_acquire+0x115/0x350 [ 347.409347][T10215] ? kernfs_root+0x1c/0x230 [ 347.409379][T10215] ? kernfs_root+0x1c/0x230 [ 347.409402][T10215] ? kernfs_root+0x1c/0x230 [ 347.409429][T10215] ? kernfs_root+0x1c/0x230 [ 347.409450][T10215] kernfs_new_node+0xeb/0x140 [ 347.409504][T10215] __kernfs_create_file+0x4b/0x2e0 [ 347.409542][T10215] sysfs_add_file_mode_ns+0x237/0x300 [ 347.409572][T10215] sysfs_merge_group+0x183/0x320 [ 347.409607][T10215] ? __pfx_sysfs_merge_group+0x10/0x10 [ 347.409626][T10215] ? device_add_attrs+0x5c3/0x600 [ 347.409665][T10215] ? __pfx_device_add_attrs+0x10/0x10 [ 347.409697][T10215] dpm_sysfs_add+0xd2/0x270 [ 347.409832][T10215] device_add+0x4ca/0xb80 [ 347.409863][T10215] netdev_register_kobject+0x197/0x350 [ 347.409896][T10215] register_netdevice+0x142e/0x1eb0 [ 347.409932][T10215] ? __pfx_register_netdevice+0x10/0x10 [ 347.409955][T10215] ? net_generic+0x1e/0x240 [ 347.409997][T10215] ? net_generic+0x1e/0x240 [ 347.410022][T10215] ? net_generic+0x1e/0x240 [ 347.410052][T10215] register_netdev+0x40/0x60 [ 347.410075][T10215] vti6_init_net+0x259/0x3b0 [ 347.410112][T10215] ops_init+0x35d/0x5d0 [ 347.410167][T10215] setup_net+0x118/0x350 [ 347.410200][T10215] ? __pfx_setup_net+0x10/0x10 [ 347.410229][T10215] ? down_read_killable+0x1b6/0x3b0 [ 347.410257][T10215] ? __ns_common_init+0x38a/0x590 [ 347.410320][T10215] copy_net_ns+0x536/0x770 [ 347.410352][T10215] create_new_namespaces+0x3f0/0x6b0 [ 347.410382][T10215] ? security_capable+0x7e/0x2c0 [ 347.410418][T10215] unshare_nsproxy_namespaces+0x144/0x190 [ 347.410441][T10215] ksys_unshare+0x53c/0x890 [ 347.410482][T10215] ? __pfx_ksys_unshare+0x10/0x10 [ 347.410513][T10215] ? rcu_is_watching+0x16/0xb0 [ 347.410555][T10215] __x64_sys_unshare+0x38/0x50 [ 347.410576][T10215] do_syscall_64+0x166/0x520 [ 347.410594][T10215] ? trace_irq_disable+0x3b/0x140 [ 347.410627][T10215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.410650][T10215] ? clear_bhb_loop+0x70/0xc0 [ 347.410675][T10215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.410696][T10215] RIP: 0033:0x7fc22759e159 [ 347.410718][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.410731][T10215] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 347.410748][T10215] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 347.410759][T10215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 347.410784][T10215] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 347.410799][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.410812][T10215] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 347.410844][T10215] [ 348.146202][ T1222] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 348.190217][T10226] netlink: 'syz.2.1256': attribute type 21 has an invalid length. [ 348.190243][T10226] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1256'. [ 348.190327][T10226] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1256'. [ 348.297529][ T1222] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 348.301453][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.301475][ T1222] usb 6-1: Product: syz [ 348.301486][ T1222] usb 6-1: Manufacturer: syz [ 348.301497][ T1222] usb 6-1: SerialNumber: syz [ 348.731887][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 348.731954][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 349.062994][ T32] catc 5-1:4.138: Can't set altsetting 1. [ 349.063081][ T32] catc 5-1:4.138: probe with driver catc failed with error -5 [ 349.080798][ T32] usb 5-1: USB disconnect, device number 51 [ 349.569737][T10246] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 349.570245][T10245] FAULT_INJECTION: forcing a failure. [ 349.570245][T10245] name failslab, interval 1, probability 0, space 0, times 0 [ 349.570281][T10245] CPU: 0 UID: 0 PID: 10245 Comm: syz.4.1264 Tainted: G L syzkaller #0 PREEMPT(full) [ 349.570315][T10245] Tainted: [L]=SOFTLOCKUP [ 349.570324][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.570339][T10245] Call Trace: [ 349.570349][T10245] [ 349.570359][T10245] dump_stack_lvl+0xe8/0x150 [ 349.570393][T10245] should_fail_ex+0x3eb/0x540 [ 349.570435][T10245] should_failslab+0xa8/0x100 [ 349.570465][T10245] ? __proc_create+0x55d/0xad0 [ 349.570502][T10245] kmem_cache_alloc_noprof+0x9c/0x600 [ 349.570532][T10245] ? __proc_create+0x55d/0xad0 [ 349.570589][T10245] __proc_create+0x55d/0xad0 [ 349.570627][T10245] ? __pfx___proc_create+0x10/0x10 [ 349.570662][T10245] ? rcu_is_watching+0x16/0xb0 [ 349.570687][T10245] ? __kasan_kmalloc+0x93/0xb0 [ 349.570706][T10245] ? __pfx_snmp6_dev_seq_show+0x10/0x10 [ 349.570822][T10245] proc_create_single_data+0xa5/0x1b0 [ 349.570851][T10245] snmp6_register_dev+0xc3/0x140 [ 349.570893][T10245] ipv6_add_dev+0x74a/0x1400 [ 349.570965][T10245] addrconf_notify+0x771/0x1050 [ 349.571016][T10245] notifier_call_chain+0x1a5/0x3d0 [ 349.571073][T10245] register_netdevice+0x189f/0x1eb0 [ 349.571113][T10245] ? __pfx_register_netdevice+0x10/0x10 [ 349.571147][T10245] ? net_generic+0x1e/0x240 [ 349.571167][T10245] ? net_generic+0x1e/0x240 [ 349.571184][T10245] ? net_generic+0x1e/0x240 [ 349.571228][T10245] register_netdev+0x40/0x60 [ 349.571251][T10245] vti6_init_net+0x259/0x3b0 [ 349.571282][T10245] ops_init+0x35d/0x5d0 [ 349.571319][T10245] setup_net+0x118/0x350 [ 349.571341][T10245] ? __pfx_setup_net+0x10/0x10 [ 349.571380][T10245] ? down_read_killable+0x1b6/0x3b0 [ 349.571407][T10245] ? __ns_common_init+0x38a/0x590 [ 349.571443][T10245] copy_net_ns+0x536/0x770 [ 349.571476][T10245] create_new_namespaces+0x3f0/0x6b0 [ 349.571513][T10245] ? security_capable+0x7e/0x2c0 [ 349.571567][T10245] unshare_nsproxy_namespaces+0x144/0x190 [ 349.571600][T10245] ksys_unshare+0x53c/0x890 [ 349.571636][T10245] ? __pfx_ksys_unshare+0x10/0x10 [ 349.571657][T10245] ? __x64_sys_recvmmsg+0x1e8/0x250 [ 349.571672][T10245] ? __pfx___se_sys_futex+0x10/0x10 [ 349.571718][T10245] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 349.571751][T10245] __x64_sys_unshare+0x38/0x50 [ 349.571785][T10245] do_syscall_64+0x166/0x520 [ 349.571800][T10245] ? trace_irq_disable+0x3b/0x140 [ 349.571819][T10245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.571836][T10245] ? clear_bhb_loop+0x70/0xc0 [ 349.571878][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.571899][T10245] RIP: 0033:0x7fb44d39e159 [ 349.571919][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.571962][T10245] RSP: 002b:00007fb44e260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 349.571988][T10245] RAX: ffffffffffffffda RBX: 00007fb44d625fa0 RCX: 00007fb44d39e159 [ 349.572007][T10245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 349.572022][T10245] RBP: 00007fb44d43506b R08: 0000000000000000 R09: 0000000000000000 [ 349.572037][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.572050][T10245] R13: 00007fb44d626038 R14: 00007fb44d625fa0 R15: 00007fffde426028 [ 349.572084][T10245] [ 349.616348][ T32] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 349.776589][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 349.780170][ T32] usb 7-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 349.785835][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.786578][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.802559][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.802684][ T32] usb 7-1: Product: syz [ 349.802735][ T32] usb 7-1: Manufacturer: syz [ 349.802776][ T32] usb 7-1: SerialNumber: syz [ 349.938871][ T32] usb 7-1: 0:2 : does not exist [ 349.978193][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 350.013059][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 350.163535][ T32] usb 7-1: USB disconnect, device number 8 [ 350.212768][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.700815][T10261] FAULT_INJECTION: forcing a failure. [ 350.700815][T10261] name failslab, interval 1, probability 0, space 0, times 0 [ 350.700850][T10261] CPU: 1 UID: 0 PID: 10261 Comm: syz.4.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.700878][T10261] Tainted: [L]=SOFTLOCKUP [ 350.700887][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.700900][T10261] Call Trace: [ 350.700908][T10261] [ 350.700916][T10261] dump_stack_lvl+0xe8/0x150 [ 350.700956][T10261] should_fail_ex+0x3eb/0x540 [ 350.700994][T10261] should_failslab+0xa8/0x100 [ 350.701022][T10261] __kmalloc_cache_noprof+0x9e/0x600 [ 350.701045][T10261] ? mpi_alloc+0x52/0x140 [ 350.701101][T10261] ? mpi_alloc+0x52/0x140 [ 350.701128][T10261] mpi_alloc+0x52/0x140 [ 350.701150][T10261] rsa_enc+0x94/0x480 [ 350.701233][T10261] ? __pfx_rsa_enc+0x10/0x10 [ 350.701262][T10261] ? __pfx_rsa_enc+0x10/0x10 [ 350.701293][T10261] ? __virt_addr_valid+0x137/0x390 [ 350.701326][T10261] rsassa_pkcs1_verify+0x52f/0xbb0 [ 350.701382][T10261] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 350.701425][T10261] ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0 [ 350.701451][T10261] public_key_verify_signature+0x79b/0x9e0 [ 350.701512][T10261] ? __pfx_public_key_verify_signature+0x10/0x10 [ 350.701552][T10261] ? asymmetric_key_generate_id+0x60/0x170 [ 350.701574][T10261] ? asymmetric_key_id_same+0x67/0xe0 [ 350.701603][T10261] x509_check_for_self_signed+0x326/0x430 [ 350.701657][T10261] x509_cert_parse+0x622/0x7a0 [ 350.701686][T10261] x509_key_preparse+0x64/0x6d0 [ 350.701713][T10261] ? down_read+0x2b9/0x320 [ 350.701739][T10261] asymmetric_key_preparse+0xb9/0x1b0 [ 350.701765][T10261] __key_create_or_update+0x3a4/0xa70 [ 350.701847][T10261] ? __pfx___key_create_or_update+0x10/0x10 [ 350.701896][T10261] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 350.701941][T10261] key_create_or_update+0x42/0x60 [ 350.701974][T10261] __se_sys_add_key+0x349/0x420 [ 350.702000][T10261] ? __pfx___se_sys_add_key+0x10/0x10 [ 350.702030][T10261] ? __x64_sys_add_key+0x20/0xc0 [ 350.702053][T10261] do_syscall_64+0x166/0x520 [ 350.702072][T10261] ? trace_irq_disable+0x3b/0x140 [ 350.702095][T10261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.702116][T10261] ? clear_bhb_loop+0x70/0xc0 [ 350.702139][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.702159][T10261] RIP: 0033:0x7fb44d39e159 [ 350.702179][T10261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.702196][T10261] RSP: 002b:00007fb44e23f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 350.702217][T10261] RAX: ffffffffffffffda RBX: 00007fb44d626090 RCX: 00007fb44d39e159 [ 350.702232][T10261] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 350.702246][T10261] RBP: 00007fb44d43506b R08: fffffffffffffffc R09: 0000000000000000 [ 350.702261][T10261] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 350.702273][T10261] R13: 00007fb44d626128 R14: 00007fb44d626090 R15: 00007fffde426028 [ 350.702304][T10261] [ 350.799406][T10261] sg_write: data in/out 16348/136 bytes for SCSI command 0x0-- guessing data in; [ 350.799406][T10261] program syz.4.1268 not setting count and/or reply_len properly [ 350.845532][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 350.845680][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 350.878608][ T5689] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 350.897368][ T1222] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 350.915985][ T1222] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 351.019166][ T1222] usb 6-1: USB disconnect, device number 48 [ 351.101989][ T5689] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.102040][ T5689] usb 3-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 351.105083][ T5689] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 351.105110][ T5689] usb 3-1: config 4 has no interface number 0 [ 351.105142][ T5689] usb 3-1: config 4 interface 138 has no altsetting 0 [ 351.120467][ T5689] usb 3-1: string descriptor 0 read error: -22 [ 351.120873][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.452664][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.465218][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.963122][T10281] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 351.964391][T10280] FAULT_INJECTION: forcing a failure. [ 351.964391][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 351.964426][T10280] CPU: 0 UID: 0 PID: 10280 Comm: syz.4.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.964458][T10280] Tainted: [L]=SOFTLOCKUP [ 351.964468][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.964482][T10280] Call Trace: [ 351.964492][T10280] [ 351.964502][T10280] dump_stack_lvl+0xe8/0x150 [ 351.964538][T10280] should_fail_ex+0x3eb/0x540 [ 351.964578][T10280] should_failslab+0xa8/0x100 [ 351.964612][T10280] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 351.964641][T10280] ? neigh_sysctl_register+0xae/0xa90 [ 351.964750][T10280] ? neigh_sysctl_register+0xae/0xa90 [ 351.964813][T10280] kmemdup_noprof+0x2b/0x70 [ 351.964840][T10280] neigh_sysctl_register+0xae/0xa90 [ 351.964879][T10280] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 351.964914][T10280] ? inetdev_init+0x22d/0x4f0 [ 351.964968][T10280] ? inetdev_event+0x11c4/0x1610 [ 351.965016][T10280] ? notifier_call_chain+0x1a5/0x3d0 [ 351.965039][T10280] ? register_netdevice+0x189f/0x1eb0 [ 351.965062][T10280] ? __ip_tunnel_create+0x3e8/0x550 [ 351.965090][T10280] ? ip_tunnel_init_net+0x2fe/0x870 [ 351.965117][T10280] ? vti_init_net+0x2f/0x100 [ 351.965147][T10280] ? ops_init+0x35d/0x5d0 [ 351.965188][T10280] ? setup_net+0x118/0x350 [ 351.965213][T10280] ? copy_net_ns+0x536/0x770 [ 351.965240][T10280] ? create_new_namespaces+0x3f0/0x6b0 [ 351.965269][T10280] ? unshare_nsproxy_namespaces+0x144/0x190 [ 351.965301][T10280] ? __x64_sys_unshare+0x38/0x50 [ 351.965330][T10280] ? do_syscall_64+0x166/0x520 [ 351.965352][T10280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.965375][T10280] ? neigh_parms_alloc+0x404/0x500 [ 351.965410][T10280] devinet_sysctl_register+0xad/0x200 [ 351.965439][T10280] inetdev_init+0x2c8/0x4f0 [ 351.965466][T10280] inetdev_event+0x11c4/0x1610 [ 351.965497][T10280] ? __pfx_inetdev_event+0x10/0x10 [ 351.965534][T10280] notifier_call_chain+0x1a5/0x3d0 [ 351.965566][T10280] register_netdevice+0x189f/0x1eb0 [ 351.965607][T10280] ? __pfx_register_netdevice+0x10/0x10 [ 351.965630][T10280] ? alloc_netdev_mqs+0xd44/0x12a0 [ 351.965669][T10280] ? alloc_netdev_mqs+0xef9/0x12a0 [ 351.965694][T10280] ? __ip_tunnel_create+0x3bb/0x550 [ 351.965729][T10280] __ip_tunnel_create+0x3e8/0x550 [ 351.965761][T10280] ? __pfx___ip_tunnel_create+0x10/0x10 [ 351.965820][T10280] ip_tunnel_init_net+0x2fe/0x870 [ 351.965856][T10280] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 351.965896][T10280] ? __kmalloc_noprof+0x387/0x710 [ 351.965921][T10280] ? __kmalloc_noprof+0x1a6/0x710 [ 351.965944][T10280] ? ops_init+0x7b/0x5d0 [ 351.965979][T10280] vti_init_net+0x2f/0x100 [ 351.966015][T10280] ops_init+0x35d/0x5d0 [ 351.966059][T10280] setup_net+0x118/0x350 [ 351.966093][T10280] ? __pfx_setup_net+0x10/0x10 [ 351.966124][T10280] ? down_read_killable+0x1b6/0x3b0 [ 351.966152][T10280] ? __ns_common_init+0x38a/0x590 [ 351.966190][T10280] copy_net_ns+0x536/0x770 [ 351.966225][T10280] create_new_namespaces+0x3f0/0x6b0 [ 351.966260][T10280] ? security_capable+0x7e/0x2c0 [ 351.966302][T10280] unshare_nsproxy_namespaces+0x144/0x190 [ 351.966339][T10280] ksys_unshare+0x53c/0x890 [ 351.966375][T10280] ? __pfx_ksys_unshare+0x10/0x10 [ 351.966411][T10280] ? rcu_is_watching+0x16/0xb0 [ 351.966455][T10280] __x64_sys_unshare+0x38/0x50 [ 351.966488][T10280] do_syscall_64+0x166/0x520 [ 351.966509][T10280] ? trace_irq_disable+0x3b/0x140 [ 351.966548][T10280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.966572][T10280] ? clear_bhb_loop+0x70/0xc0 [ 351.966600][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.966624][T10280] RIP: 0033:0x7fb44d39e159 [ 351.966645][T10280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.966675][T10280] RSP: 002b:00007fb44e260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 351.966701][T10280] RAX: ffffffffffffffda RBX: 00007fb44d625fa0 RCX: 00007fb44d39e159 [ 351.966719][T10280] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 351.966734][T10280] RBP: 00007fb44d43506b R08: 0000000000000000 R09: 0000000000000000 [ 351.966750][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.966764][T10280] R13: 00007fb44d626038 R14: 00007fb44d625fa0 R15: 00007fffde426028 [ 351.966802][T10280] [ 353.256142][ T5696] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 353.366066][ T5703] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 353.406015][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 353.413890][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 353.413973][ T5696] usb 5-1: New USB device found: idVendor=0d8c, idProduct=000c, bcdDevice=0.40 [ 353.415096][ T5696] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.415120][ T5696] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 353.456553][ T5696] usb 5-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 353.456583][ T5696] usb 5-1: Product: syz [ 353.456599][ T5696] usb 5-1: Manufacturer: syz [ 353.456615][ T5696] usb 5-1: SerialNumber: syz [ 353.526785][ T5703] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 353.533167][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.533195][ T5703] usb 6-1: Product: syz [ 353.533212][ T5703] usb 6-1: Manufacturer: syz [ 353.533256][ T5703] usb 6-1: SerialNumber: syz [ 353.631259][ T5689] catc 3-1:4.138: Can't set altsetting 1. [ 353.631319][ T5689] catc 3-1:4.138: probe with driver catc failed with error -5 [ 353.661090][ T5689] usb 3-1: USB disconnect, device number 75 [ 353.812036][ T33] audit: type=1804 audit(1790369609.629:25): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1279" name="/newroot/293/file0" dev="fuse" ino=1 res=1 errno=0 [ 353.856018][ T5696] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 353.856052][ T5696] usb 5-1: applying playback min mute quirk [ 353.856069][ T5696] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 353.856115][ T5696] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 353.858319][ T5696] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 353.861449][ T5696] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 353.915831][ T5696] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 353.979933][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 353.980024][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 353.983572][ T5696] usb 5-1: USB disconnect, device number 52 [ 354.054178][ T7306] udevd[7306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.877580][T10312] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 354.879399][T10308] FAULT_INJECTION: forcing a failure. [ 354.879399][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 354.879431][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.2.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.879463][T10308] Tainted: [L]=SOFTLOCKUP [ 354.879489][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.879504][T10308] Call Trace: [ 354.879514][T10308] [ 354.879525][T10308] dump_stack_lvl+0xe8/0x150 [ 354.879561][T10308] should_fail_ex+0x3eb/0x540 [ 354.879602][T10308] should_failslab+0xa8/0x100 [ 354.879634][T10308] __kmalloc_cache_noprof+0x9e/0x600 [ 354.879660][T10308] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 354.879776][T10308] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 354.879812][T10308] __ipv6_dev_mc_inc+0x447/0xaf0 [ 354.879847][T10308] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 354.879885][T10308] ipv6_add_dev+0xe6d/0x1400 [ 354.879934][T10308] addrconf_notify+0x771/0x1050 [ 354.879974][T10308] notifier_call_chain+0x1a5/0x3d0 [ 354.880007][T10308] register_netdevice+0x189f/0x1eb0 [ 354.880049][T10308] ? __pfx_register_netdevice+0x10/0x10 [ 354.880072][T10308] ? alloc_netdev_mqs+0xd44/0x12a0 [ 354.880114][T10308] ? alloc_netdev_mqs+0xef9/0x12a0 [ 354.880143][T10308] ? __ip_tunnel_create+0x3bb/0x550 [ 354.880175][T10308] __ip_tunnel_create+0x3e8/0x550 [ 354.880209][T10308] ? __pfx___ip_tunnel_create+0x10/0x10 [ 354.880246][T10308] ip_tunnel_init_net+0x2fe/0x870 [ 354.880278][T10308] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 354.880310][T10308] ? __kmalloc_noprof+0x387/0x710 [ 354.880331][T10308] ? __kmalloc_noprof+0x1a6/0x710 [ 354.880350][T10308] ? ops_init+0x7b/0x5d0 [ 354.880385][T10308] ops_init+0x35d/0x5d0 [ 354.880422][T10308] setup_net+0x118/0x350 [ 354.880451][T10308] ? __pfx_setup_net+0x10/0x10 [ 354.880483][T10308] ? down_read_killable+0x1b6/0x3b0 [ 354.880511][T10308] ? __ns_common_init+0x38a/0x590 [ 354.880547][T10308] copy_net_ns+0x536/0x770 [ 354.880579][T10308] create_new_namespaces+0x3f0/0x6b0 [ 354.880612][T10308] ? security_capable+0x7e/0x2c0 [ 354.880650][T10308] unshare_nsproxy_namespaces+0x144/0x190 [ 354.880682][T10308] ksys_unshare+0x53c/0x890 [ 354.880715][T10308] ? __pfx_ksys_unshare+0x10/0x10 [ 354.880748][T10308] ? rcu_is_watching+0x16/0xb0 [ 354.880789][T10308] __x64_sys_unshare+0x38/0x50 [ 354.880819][T10308] do_syscall_64+0x166/0x520 [ 354.880841][T10308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.880864][T10308] ? clear_bhb_loop+0x70/0xc0 [ 354.880891][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.880922][T10308] RIP: 0033:0x7fc22759e159 [ 354.880943][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.880963][T10308] RSP: 002b:00007fc228404028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 354.880988][T10308] RAX: ffffffffffffffda RBX: 00007fc227825fa0 RCX: 00007fc22759e159 [ 354.881005][T10308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 354.881019][T10308] RBP: 00007fc22763506b R08: 0000000000000000 R09: 0000000000000000 [ 354.881034][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.881049][T10308] R13: 00007fc227826038 R14: 00007fc227825fa0 R15: 00007ffc130c3908 [ 354.881084][T10308] [ 355.238569][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 355.239329][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 355.636051][ T1222] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 355.789559][ T1222] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.789614][ T1222] usb 3-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 355.790639][ T1222] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 355.790666][ T1222] usb 3-1: config 4 has no interface number 0 [ 355.790698][ T1222] usb 3-1: config 4 interface 138 has no altsetting 0 [ 355.793615][ T1222] usb 3-1: string descriptor 0 read error: -22 [ 355.793755][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.054721][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 356.054784][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 356.090011][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 356.109359][ T5703] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 356.137699][ T5703] usb 6-1: USB disconnect, device number 49 [ 356.165723][T10331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.177532][T10331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.561953][T10349] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 357.596007][ T5703] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 357.760485][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 357.760539][ T5703] usb 5-1: New USB device found: idVendor=10b8, idProduct=1f90, bcdDevice=a5.ec [ 357.761712][ T5703] usb 5-1: config 6 has an invalid interface number: 226 but max is 0 [ 357.761741][ T5703] usb 5-1: config 6 has no interface number 0 [ 357.761812][ T5703] usb 5-1: config 6 interface 226 altsetting 129 endpoint 0x9 has invalid maxpacket 1088, setting to 64 [ 357.761844][ T5703] usb 5-1: config 6 interface 226 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 357.761870][ T5703] usb 5-1: config 6 interface 226 altsetting 129 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 357.761898][ T5703] usb 5-1: config 6 interface 226 altsetting 129 endpoint 0x81 has invalid maxpacket 41644, setting to 1024 [ 357.761929][ T5703] usb 5-1: config 6 interface 226 altsetting 129 bulk endpoint 0x81 has invalid maxpacket 1024 [ 357.761957][ T5703] usb 5-1: config 6 interface 226 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.761988][ T5703] usb 5-1: config 6 interface 226 has no altsetting 0 [ 357.764810][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.764837][ T5703] usb 5-1: Product: syz [ 357.764854][ T5703] usb 5-1: Manufacturer: syz [ 357.764872][ T5703] usb 5-1: SerialNumber: syz [ 357.795583][T10353] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 357.903669][T10344] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 358.130873][ T5703] dvb-usb: found a 'DiBcom STK807xP reference design' in warm state. [ 358.161924][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.163488][ T5703] dvbdev: DVB: registering new adapter (DiBcom STK807xP reference design) [ 358.163621][ T5703] usb 5-1: media controller created [ 358.215676][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.305589][T10321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.365695][ T5703] DVB: Unable to find symbol dib8000_attach() [ 358.365781][ T5703] dvb-usb: no frontend was attached by 'DiBcom STK807xP reference design' [ 358.466611][ T5703] rc_core: IR keymap rc-dib0700-nec not found [ 358.466631][ T5703] Registered IR keymap rc-empty [ 358.467115][ T5703] dvb-usb: could not initialize remote control. [ 358.467128][ T5703] dvb-usb: DiBcom STK807xP reference design successfully initialized and connected. [ 358.540651][ T1222] catc 3-1:4.138: Can't set altsetting 1. [ 358.540715][ T1222] catc 3-1:4.138: probe with driver catc failed with error -5 [ 358.561955][ T1222] usb 3-1: USB disconnect, device number 76 [ 358.670086][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1301'. [ 358.763538][T10367] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 358.784364][T10366] FAULT_INJECTION: forcing a failure. [ 358.784364][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 358.784399][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.5.1303 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.784422][T10366] Tainted: [L]=SOFTLOCKUP [ 358.784429][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.784443][T10366] Call Trace: [ 358.784452][T10366] [ 358.784459][T10366] dump_stack_lvl+0xe8/0x150 [ 358.784485][T10366] should_fail_ex+0x3eb/0x540 [ 358.784515][T10366] should_failslab+0xa8/0x100 [ 358.784537][T10366] ? __kernfs_new_node+0xe6/0x980 [ 358.784569][T10366] kmem_cache_alloc_noprof+0x9c/0x600 [ 358.784598][T10366] ? __kernfs_new_node+0xe6/0x980 [ 358.784623][T10366] __kernfs_new_node+0xe6/0x980 [ 358.784650][T10366] ? __pfx___kernfs_new_node+0x10/0x10 [ 358.784670][T10366] ? lock_acquire+0x115/0x350 [ 358.784689][T10366] ? kernfs_root+0x1c/0x230 [ 358.784713][T10366] ? kernfs_root+0x1c/0x230 [ 358.784731][T10366] ? kernfs_root+0x1c/0x230 [ 358.784749][T10366] ? kernfs_root+0x1c/0x230 [ 358.784772][T10366] kernfs_new_node+0xeb/0x140 [ 358.784795][T10366] __kernfs_create_file+0x4b/0x2e0 [ 358.784823][T10366] sysfs_add_file_mode_ns+0x237/0x300 [ 358.784845][T10366] internal_create_group+0x679/0x1180 [ 358.784875][T10366] ? kernfs_add_one+0xfc/0x710 [ 358.784896][T10366] ? __pfx_internal_create_group+0x10/0x10 [ 358.784924][T10366] sysfs_create_groups+0x59/0x120 [ 358.784945][T10366] device_add_attrs+0xde/0x600 [ 358.784968][T10366] ? __pfx_device_add_attrs+0x10/0x10 [ 358.784992][T10366] ? device_add_class_symlinks+0x21f/0x240 [ 358.785015][T10366] device_add+0x488/0xb80 [ 358.785036][T10366] netdev_register_kobject+0x197/0x350 [ 358.785064][T10366] register_netdevice+0x142e/0x1eb0 [ 358.785093][T10366] ? __pfx_register_netdevice+0x10/0x10 [ 358.785108][T10366] ? alloc_netdev_mqs+0xd44/0x12a0 [ 358.785132][T10366] ? alloc_netdev_mqs+0xef9/0x12a0 [ 358.785149][T10366] ? __ip_tunnel_create+0x3bb/0x550 [ 358.785174][T10366] __ip_tunnel_create+0x3e8/0x550 [ 358.785196][T10366] ? __pfx___ip_tunnel_create+0x10/0x10 [ 358.785251][T10366] ip_tunnel_init_net+0x2fe/0x870 [ 358.785289][T10366] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 358.785328][T10366] ? __kmalloc_noprof+0x387/0x710 [ 358.785345][T10366] ? __kmalloc_noprof+0x1a6/0x710 [ 358.785360][T10366] ? ops_init+0x7b/0x5d0 [ 358.785388][T10366] ops_init+0x35d/0x5d0 [ 358.785417][T10366] setup_net+0x118/0x350 [ 358.785440][T10366] ? __pfx_setup_net+0x10/0x10 [ 358.785462][T10366] ? down_read_killable+0x1b6/0x3b0 [ 358.785482][T10366] ? __ns_common_init+0x38a/0x590 [ 358.785509][T10366] copy_net_ns+0x536/0x770 [ 358.785552][T10366] create_new_namespaces+0x3f0/0x6b0 [ 358.785576][T10366] ? security_capable+0x7e/0x2c0 [ 358.785604][T10366] unshare_nsproxy_namespaces+0x144/0x190 [ 358.785629][T10366] ksys_unshare+0x53c/0x890 [ 358.785653][T10366] ? __pfx_ksys_unshare+0x10/0x10 [ 358.785677][T10366] ? rcu_is_watching+0x16/0xb0 [ 358.785706][T10366] __x64_sys_unshare+0x38/0x50 [ 358.785727][T10366] do_syscall_64+0x166/0x520 [ 358.785742][T10366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.785759][T10366] ? clear_bhb_loop+0x70/0xc0 [ 358.785780][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.785795][T10366] RIP: 0033:0x7f632fd9e159 [ 358.785811][T10366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.785824][T10366] RSP: 002b:00007f6330c49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 358.785842][T10366] RAX: ffffffffffffffda RBX: 00007f6330025fa0 RCX: 00007f632fd9e159 [ 358.785873][T10366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 358.785888][T10366] RBP: 00007f632fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 358.785903][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.785917][T10366] R13: 00007f6330026038 R14: 00007f6330025fa0 R15: 00007ffd19118f08 [ 358.785951][T10366] [ 360.370114][ T5696] usb 5-1: USB disconnect, device number 53 [ 360.643188][ T5696] dvb-usb: DiBcom STK807xP reference design successfully deinitialized and disconnected. [ 360.686027][ T5758] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 360.838894][ T5758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 360.838961][ T5758] usb 3-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 360.841125][ T5758] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 360.841152][ T5758] usb 3-1: config 4 has no interface number 0 [ 360.841182][ T5758] usb 3-1: config 4 interface 138 has no altsetting 0 [ 360.890324][ T5758] usb 3-1: string descriptor 0 read error: -22 [ 360.890471][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.284644][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 361.456745][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.465677][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.786017][ T5696] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 361.938534][ T5696] usb 6-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 361.938605][ T5696] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 361.940306][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 361.940373][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 361.940403][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 361.942045][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 361.942096][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 361.942165][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 361.943725][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 361.943777][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 361.943804][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.057048][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.057225][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.057256][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.099171][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.099225][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.099292][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.100604][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.100653][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.100708][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.102045][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.102093][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.102149][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.103767][ T5696] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.103842][ T5696] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.103871][ T5696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.238978][ T5696] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 362.239038][ T5696] usb 6-1: Product: syz [ 362.239056][ T5696] usb 6-1: Manufacturer: syz [ 362.239072][ T5696] usb 6-1: SerialNumber: syz [ 362.256718][ T5696] usb 6-1: config 0 descriptor?? [ 362.293069][ T5696] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 362.485975][ T5696] usb 6-1: USB disconnect, device number 50 [ 362.508066][ T5696] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 362.886104][ T989] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 363.036114][ T989] usb 5-1: Using ep0 maxpacket: 16 [ 363.037659][ T989] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 363.039435][ T989] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.039461][ T989] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.042993][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.043045][ T989] usb 5-1: Product: syz [ 363.043062][ T989] usb 5-1: Manufacturer: syz [ 363.043078][ T989] usb 5-1: SerialNumber: syz [ 363.122165][ T989] usb 5-1: 0:2 : does not exist [ 363.318809][ T5703] usb 5-1: USB disconnect, device number 54 [ 363.679373][ T5758] catc 3-1:4.138: Can't set altsetting 1. [ 363.679434][ T5758] catc 3-1:4.138: probe with driver catc failed with error -5 [ 363.708265][ T5758] usb 3-1: USB disconnect, device number 77 [ 363.841700][ T5703] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 363.986687][ T5703] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 363.992695][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.992722][ T5703] usb 6-1: Product: syz [ 363.992739][ T5703] usb 6-1: Manufacturer: syz [ 363.992755][ T5703] usb 6-1: SerialNumber: syz [ 364.156021][ T5758] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 364.249155][T10411] FAULT_INJECTION: forcing a failure. [ 364.249155][T10411] name failslab, interval 1, probability 0, space 0, times 0 [ 364.249189][T10411] CPU: 0 UID: 0 PID: 10411 Comm: syz.4.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.249220][T10411] Tainted: [L]=SOFTLOCKUP [ 364.249228][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.249241][T10411] Call Trace: [ 364.249250][T10411] [ 364.249259][T10411] dump_stack_lvl+0xe8/0x150 [ 364.249291][T10411] should_fail_ex+0x3eb/0x540 [ 364.249328][T10411] should_failslab+0xa8/0x100 [ 364.249356][T10411] __kmalloc_cache_noprof+0x9e/0x600 [ 364.249379][T10411] ? rxrpc_alloc_peer+0x7d/0x330 [ 364.249468][T10411] ? rxrpc_alloc_peer+0x7d/0x330 [ 364.249489][T10411] ? rxrpc_net+0x45/0x270 [ 364.249565][T10411] rxrpc_alloc_peer+0x7d/0x330 [ 364.249589][T10411] rxrpc_service_prealloc_one+0x1cf/0xe10 [ 364.249622][T10411] ? __pfx_afs_wake_up_async_call+0x10/0x10 [ 364.249698][T10411] ? __pfx_afs_wake_up_async_call+0x10/0x10 [ 364.249731][T10411] rxrpc_kernel_charge_accept+0xc7/0x120 [ 364.249766][T10411] afs_charge_preallocation+0x22f/0x570 [ 364.249804][T10411] afs_open_socket+0x33c/0x3f0 [ 364.249833][T10411] ? __pfx_afs_open_socket+0x10/0x10 [ 364.249861][T10411] ? proc_create_net_single_write+0x147/0x1b0 [ 364.249914][T10411] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 364.249956][T10411] ? afs_cell_init+0x46/0x340 [ 364.250046][T10411] afs_net_init+0x67d/0x880 [ 364.250081][T10411] ops_init+0x35d/0x5d0 [ 364.250123][T10411] setup_net+0x118/0x350 [ 364.250156][T10411] ? __pfx_setup_net+0x10/0x10 [ 364.250187][T10411] ? down_read_killable+0x1b6/0x3b0 [ 364.250215][T10411] ? __ns_common_init+0x38a/0x590 [ 364.250252][T10411] copy_net_ns+0x536/0x770 [ 364.250287][T10411] create_new_namespaces+0x3f0/0x6b0 [ 364.250321][T10411] ? security_capable+0x7e/0x2c0 [ 364.250362][T10411] unshare_nsproxy_namespaces+0x144/0x190 [ 364.250398][T10411] ksys_unshare+0x53c/0x890 [ 364.250432][T10411] ? __pfx_ksys_unshare+0x10/0x10 [ 364.250466][T10411] ? rcu_is_watching+0x16/0xb0 [ 364.250509][T10411] __x64_sys_unshare+0x38/0x50 [ 364.250547][T10411] do_syscall_64+0x166/0x520 [ 364.250568][T10411] ? trace_irq_disable+0x3b/0x140 [ 364.250597][T10411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.250622][T10411] ? clear_bhb_loop+0x70/0xc0 [ 364.250650][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.250674][T10411] RIP: 0033:0x7fb44d39e159 [ 364.250696][T10411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.250717][T10411] RSP: 002b:00007fb44e260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 364.250743][T10411] RAX: ffffffffffffffda RBX: 00007fb44d625fa0 RCX: 00007fb44d39e159 [ 364.250761][T10411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 364.250776][T10411] RBP: 00007fb44d43506b R08: 0000000000000000 R09: 0000000000000000 [ 364.250792][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.250806][T10411] R13: 00007fb44d626038 R14: 00007fb44d625fa0 R15: 00007fffde426028 [ 364.250843][T10411] [ 364.633573][ T5758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 364.633627][ T5758] usb 3-1: New USB device found: idVendor=10b8, idProduct=1f90, bcdDevice=a5.ec [ 364.644191][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 364.644256][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 364.644636][ T5758] usb 3-1: config 6 has an invalid interface number: 226 but max is 0 [ 364.644661][ T5758] usb 3-1: config 6 has no interface number 0 [ 364.644704][ T5758] usb 3-1: config 6 interface 226 altsetting 129 endpoint 0x9 has invalid maxpacket 1088, setting to 64 [ 364.644763][ T5758] usb 3-1: config 6 interface 226 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 364.644787][ T5758] usb 3-1: config 6 interface 226 altsetting 129 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 364.644815][ T5758] usb 3-1: config 6 interface 226 altsetting 129 endpoint 0x81 has invalid maxpacket 41644, setting to 1024 [ 364.644843][ T5758] usb 3-1: config 6 interface 226 altsetting 129 bulk endpoint 0x81 has invalid maxpacket 1024 [ 364.644870][ T5758] usb 3-1: config 6 interface 226 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 364.644925][ T5758] usb 3-1: config 6 interface 226 has no altsetting 0 [ 364.791067][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.791095][ T5758] usb 3-1: Product: syz [ 364.791135][ T5758] usb 3-1: Manufacturer: syz [ 364.791150][ T5758] usb 3-1: SerialNumber: syz [ 364.835350][T10409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 365.071609][ T5758] dvb-usb: found a 'DiBcom STK807xP reference design' in warm state. [ 365.108756][ T5758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.111432][ T5758] dvbdev: DVB: registering new adapter (DiBcom STK807xP reference design) [ 365.111495][ T5758] usb 3-1: media controller created [ 365.176520][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.375203][ T5758] DVB: Unable to find symbol dib8000_attach() [ 365.375220][ T5758] dvb-usb: no frontend was attached by 'DiBcom STK807xP reference design' [ 365.524800][ T5758] rc_core: IR keymap rc-dib0700-nec not found [ 365.524821][ T5758] Registered IR keymap rc-empty [ 365.525102][ T5758] dvb-usb: could not initialize remote control. [ 365.525113][ T5758] dvb-usb: DiBcom STK807xP reference design successfully initialized and connected. [ 366.000478][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 366.880228][ T989] usb 3-1: USB disconnect, device number 78 [ 367.021028][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 367.022412][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 367.022470][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 367.023243][ T5703] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 367.084616][ T5703] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 367.113496][ T989] dvb-usb: DiBcom STK807xP reference design successfully deinitialized and disconnected. [ 367.166853][ T5703] usb 6-1: USB disconnect, device number 51 [ 367.488966][ T989] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 367.657196][ T989] usb 3-1: unable to get BOS descriptor or descriptor too short [ 367.657256][ T989] usb 3-1: New USB device found: idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 367.660704][ T989] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 367.660729][ T989] usb 3-1: config 4 has no interface number 0 [ 367.660757][ T989] usb 3-1: config 4 interface 138 has no altsetting 0 [ 367.784508][ T989] usb 3-1: string descriptor 0 read error: -22 [ 367.784644][ T989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.124809][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.125470][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.329841][ T989] catc 3-1:4.138: Can't set altsetting 1. [ 368.329900][ T989] catc 3-1:4.138: probe with driver catc failed with error -5 [ 368.363003][ T989] usb 3-1: USB disconnect, device number 79 [ 368.988520][ T5696] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 369.137661][ T5696] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 369.137708][ T5696] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 369.139019][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.139068][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.139098][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.142056][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.142106][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.142135][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.143272][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.143320][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.143348][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.145166][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.145213][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.145242][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.230321][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.230377][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.230406][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.350375][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.350430][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.350460][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.352333][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.352379][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.352406][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.418132][ T5696] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.418185][ T5696] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.418213][ T5696] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.423026][ T5696] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 369.423055][ T5696] usb 5-1: Product: syz [ 369.423072][ T5696] usb 5-1: Manufacturer: syz [ 369.423089][ T5696] usb 5-1: SerialNumber: syz [ 369.491554][ T5696] usb 5-1: config 0 descriptor?? [ 369.517722][ T5696] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 369.730104][ T989] usb 5-1: USB disconnect, device number 55 [ 369.749904][ T989] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 370.197908][ T5703] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 370.351096][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 370.351150][ T5703] usb 3-1: New USB device found: idVendor=10b8, idProduct=1f90, bcdDevice=a5.ec [ 370.352713][ T5703] usb 3-1: config 6 has an invalid interface number: 226 but max is 0 [ 370.352738][ T5703] usb 3-1: config 6 has no interface number 0 [ 370.352777][ T5703] usb 3-1: config 6 interface 226 altsetting 129 endpoint 0x9 has invalid maxpacket 1088, setting to 64 [ 370.352805][ T5703] usb 3-1: config 6 interface 226 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 370.352826][ T5703] usb 3-1: config 6 interface 226 altsetting 129 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 370.352852][ T5703] usb 3-1: config 6 interface 226 altsetting 129 endpoint 0x81 has invalid maxpacket 41644, setting to 1024 [ 370.352878][ T5703] usb 3-1: config 6 interface 226 altsetting 129 bulk endpoint 0x81 has invalid maxpacket 1024 [ 370.352902][ T5703] usb 3-1: config 6 interface 226 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 370.352963][ T5703] usb 3-1: config 6 interface 226 has no altsetting 0 [ 370.355422][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.355447][ T5703] usb 3-1: Product: syz [ 370.355463][ T5703] usb 3-1: Manufacturer: syz [ 370.355478][ T5703] usb 3-1: SerialNumber: syz [ 370.509885][T10467] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.676065][ T989] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 370.746551][ T5703] dvb-usb: found a 'DiBcom STK807xP reference design' in warm state. [ 370.754056][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 370.777504][ T5703] dvbdev: DVB: registering new adapter (DiBcom STK807xP reference design) [ 370.777560][ T5703] usb 3-1: media controller created [ 370.814543][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 370.828794][ T989] usb 6-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 370.830563][ T989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.830596][ T989] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.830636][ T989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.880255][ T989] usb 6-1: config 0 descriptor?? [ 371.052451][ T5703] DVB: Unable to find symbol dib8000_attach() [ 371.052471][ T5703] dvb-usb: no frontend was attached by 'DiBcom STK807xP reference design' [ 371.186694][ T5703] rc_core: IR keymap rc-dib0700-nec not found [ 371.186716][ T5703] Registered IR keymap rc-empty [ 371.187541][ T5703] dvb-usb: could not initialize remote control. [ 371.187554][ T5703] dvb-usb: DiBcom STK807xP reference design successfully initialized and connected. [ 371.371502][ T989] hid-led 0003:27B8:01ED.000E: unknown main item tag 0x0 [ 371.371541][ T989] hid-led 0003:27B8:01ED.000E: unknown main item tag 0x0 [ 371.371567][ T989] hid-led 0003:27B8:01ED.000E: unknown main item tag 0x0 [ 371.371592][ T989] hid-led 0003:27B8:01ED.000E: unknown main item tag 0x0 [ 371.371620][ T989] hid-led 0003:27B8:01ED.000E: unknown main item tag 0x0 [ 377.125881][ C0] sched: DL replenish lagged too much [ 377.420167][ T989] hid-led 0003:27B8:01ED.000E: probe with driver hid-led failed with error -110 [ 379.206499][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.236077][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.354301][ T5607] Bluetooth: hci0: command 0x0406 tx timeout [ 440.720634][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.728523][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.517304][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.533292][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.376338][ T34] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 539.376370][ T34] Tainted: G L syzkaller #0 [ 539.376384][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.376395][ T34] task:kworker/0:1 state:D stack:23208 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 539.376459][ T34] Workqueue: events_power_efficient crda_timeout_work [ 539.376608][ T34] Call Trace: [ 539.376617][ T34] [ 539.376632][ T34] __schedule+0x1b47/0x5c60 [ 539.376724][ T34] ? __pfx___schedule+0x10/0x10 [ 539.376767][ T34] ? schedule+0x90/0x2b0 [ 539.376802][ T34] schedule+0x164/0x2b0 [ 539.376837][ T34] schedule_preempt_disabled+0x13/0x30 [ 539.376868][ T34] __mutex_lock+0x7c4/0x15a0 [ 539.376895][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 539.376921][ T34] ? crda_timeout_work+0x16/0x80 [ 539.376955][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 539.376992][ T34] ? rcu_is_watching+0x16/0xb0 [ 539.377023][ T34] ? process_scheduled_works+0x97a/0x1630 [ 539.377062][ T34] crda_timeout_work+0x16/0x80 [ 539.377095][ T34] process_scheduled_works+0xc3d/0x1630 [ 539.377157][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.377195][ T34] ? assign_work+0x3cf/0x5d0 [ 539.377230][ T34] worker_thread+0xa47/0xfb0 [ 539.377289][ T34] kthread+0x38b/0x480 [ 539.377313][ T34] ? __pfx_worker_thread+0x10/0x10 [ 539.377342][ T34] ? __pfx_kthread+0x10/0x10 [ 539.377366][ T34] ret_from_fork+0x514/0xb70 [ 539.377401][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 539.377433][ T34] ? __switch_to+0xc78/0x1410 [ 539.377463][ T34] ? __pfx_kthread+0x10/0x10 [ 539.377488][ T34] ret_from_fork_asm+0x1a/0x30 [ 539.377535][ T34] [ 539.377692][ T34] INFO: task kworker/0:7:5758 blocked for more than 143 seconds. [ 539.377712][ T34] Tainted: G L syzkaller #0 [ 539.377724][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.377734][ T34] task:kworker/0:7 state:D stack:21240 pid:5758 tgid:5758 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 539.377789][ T34] Workqueue: events reg_todo [ 539.377818][ T34] Call Trace: [ 539.377826][ T34] [ 539.377839][ T34] __schedule+0x1b47/0x5c60 [ 539.377896][ T34] ? __pfx___schedule+0x10/0x10 [ 539.377935][ T34] ? schedule+0x90/0x2b0 [ 539.377968][ T34] schedule+0x164/0x2b0 [ 539.378000][ T34] schedule_preempt_disabled+0x13/0x30 [ 539.378039][ T34] __mutex_lock+0x7c4/0x15a0 [ 539.378065][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 539.378089][ T34] ? reg_process_self_managed_hints+0x8d/0x160 [ 539.378123][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 539.378142][ T34] ? reg_process_self_managed_hint+0x1ab/0x4d0 [ 539.378171][ T34] ? __pfx_reg_process_self_managed_hint+0x10/0x10 [ 539.378210][ T34] ? reg_todo+0x8da/0xa40 [ 539.378245][ T34] reg_process_self_managed_hints+0x8d/0x160 [ 539.378278][ T34] reg_todo+0x8df/0xa40 [ 539.378311][ T34] ? process_scheduled_works+0x97a/0x1630 [ 539.378340][ T34] process_scheduled_works+0xc3d/0x1630 [ 539.378397][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 539.378451][ T34] ? assign_work+0x3cf/0x5d0 [ 539.378485][ T34] worker_thread+0xa47/0xfb0 [ 539.378530][ T34] ? __kthread_parkme+0x71/0x1f0 [ 539.378574][ T34] kthread+0x38b/0x480 [ 539.378597][ T34] ? __pfx_worker_thread+0x10/0x10 [ 539.378627][ T34] ? __pfx_kthread+0x10/0x10 [ 539.378651][ T34] ret_from_fork+0x514/0xb70 [ 539.378686][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 539.378717][ T34] ? __switch_to+0xc78/0x1410 [ 539.378748][ T34] ? __pfx_kthread+0x10/0x10 [ 539.378772][ T34] ret_from_fork_asm+0x1a/0x30 [ 539.378819][ T34] [ 539.378855][ T34] INFO: task kworker/u8:24:7425 blocked for more than 143 seconds. [ 539.378876][ T34] Tainted: G L syzkaller #0 [ 539.378889][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 539.378900][ T34] task:kworker/u8:24 state:D stack:24336 pid:7425 tgid:7425 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 539.378962][ T34] Workqueue: ipv6_addrconf addrconf_verify_work [ 539.378995][ T34] Call Trace: [ 539.379003][ T34] [ 539.379017][ T34] __schedule+0x1b47/0x5c60 [ 539.379085][ T34] ? __pfx___schedule+0x10/0x10 [ 539.379127][ T34] ? schedule+0x90/0x2b0 [ 539.379162][ T34] schedule+0x164/0x2b0 [ 539.379197][ T34] schedule_preempt_disabled+0x13/0x30 [ 539.379228][ T34] __mutex_lock+0x7c4/0x15a0 [ 539.379255][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 539.379281][ T34] ? addrconf_verify_work+0x19/0x30 [ 539.379315][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 539.379353][ T34] ? rcu_is_watching+0x16/0xb0