last executing test programs: 14m1.998699111s ago: executing program 1 (id=1192): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14m1.78217654s ago: executing program 1 (id=1194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r4, 0xfffb}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={r4, 0x8, 0x2}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./config/nvmet/subsystems/subsys1/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0', 0x1) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000a00)=""/104, 0x68}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/9, 0x9}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f0000003840)=""/167, 0xa7}, {&(0x7f0000000940)=""/161, 0xce}, {&(0x7f00000039c0)=""/97, 0x61}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x0, 0x0) 14m1.512514523s ago: executing program 1 (id=1197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_open_dev$evdev(0x0, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x0) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x1}, 0x14}}, 0x0) 14m1.368883225s ago: executing program 1 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10005, {0x6, 0x9, 0x4, 0xa, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x400000000000001, 0x1, 0x1, 0x32540194, '\t'}}, {{0x4, 0x1, 0x7fd, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x8, 0x2, 0x6, 0x7, 0x6000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 14m1.128795362s ago: executing program 1 (id=1200): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000024c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640f"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000002500)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done={0x40086310, 0xfcff}], 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) ioprio_set$pid(0x2, 0x0, 0x1000) sendfile(r4, r5, 0x0, 0x201f00) socket$unix(0x1, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc0085668, &(0x7f0000000040)={0xf0f080, 0x1}) pselect6(0x40, &(0x7f0000000240)={0xfffffffffffffffc, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r7, &(0x7f00000010c0)=""/4096, 0x1000) 13m57.372146932s ago: executing program 1 (id=1205): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x2}) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d0240"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$kcm(0x10, 0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5e4d974c84ec8e18, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0xcac, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc74, 0x3, 0x0, 0x1, [{0x814, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x2dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "d03dc29a215889e84ec95167a9853da626789ace7718db2296c684f5594edf4badc2e32c2a93e344344711e50708f4805d45d8c1c798ed707dcff5fc211fc9c033a0aee70a9a98da9776d070ff6fdb046194721181a85f0f2ba54383b30a2037ebfd5fe8031af6bbea672774e588afad00e2ca78815f721784e2c5e3cfab0d940c54b391b64155f8088b8b9f5be813f4be6734a5daea351a84bea30c5f0e681978a16073d610f2f982ca0e99ca2638fc9aa6cb8b69a2270781a5cbdd9ed522"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "85a7af6ef1bc196323085599b0707936f54369d0dc59d44fc9a4de077949fc7c38ae7a29de3b52a0321c071118f3db7ab9f5374b035344957a7b82fe620ff3a0e9c4265146a7b51ed824071c688a5b7f9de3b7440d4f4ff30994eb99d0e41d4982d891f0ed47c4a2f7f8ebf127f3cb9624f50c9370581950b6b7216cbbf26e4f5a3fbda0c0e442952ef27c422ec08680c32a22dc542afdad8e865bce33715c9c08a279c6"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x86, 0x1, "d51a3c411717f30e8e174f188a5013874559f8baae2134820658f099e7e03917876523a8daea449c1accf5b9f99a3acd15154b8972e1fdfb266da22d31f73c43fa66418b12d6bd73f74abbe35547176eccdcc2d88922447d3f8b14584b47c2d737c66c34cb9858eedcc31813f24b2feb7d516b149f095216538a0f9f4d8b46c13d58"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x35c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x82, 0x1, "32d608e78ec1c3981184ce95ebdaabfa6c24e126fdf6b3843387c856339c10e1d2271e50665e31d1b36ffca4777c549c5c88a73fa2290f0228ca359768dc96293764c74ee84c4e847cf48fddafd2699258da31344b32fd749670faa67deb70f64be0b455b52a13c15948478209504be17fa21783b4665eb7657c4aee0fcd"}, @NFTA_DATA_VALUE={0xec, 0x1, "9e13ffee2c306e73df7e15b10a5599658f82758499dad41cc5fdadacc7dc8458a2d8fe4eb9c7afe198426713db763163cb9e2815003a1c438e7cc36daa0ac5a561a1f9b22610e8cddcd6e96c880d5f4f3b067c5194b91c1d82e5918696ce997fd478b49c46956881c90decce3b44e82e6a41f5d1883add5ebdebb67dc7d5d0aea84d531570f3393e2a653e14899e4f9b3b731f0d793e4faeb2974a2dd08661223d14e9c1134ad7e1e183b097272b1fd8fe8892b3d80c60958b58b56b23c2ac501a8d6eab1cf5c0ef900316643f4cb051c1c94a49abe996bc0ea60ead8cbf1bbc4621ef716ce02cdd"}, @NFTA_DATA_VALUE={0x2c, 0x1, "a28ddfd76e9101e45ca0ce51132219450f4b4e4dbe4c9428955ee05bfc6a86f6914888a8661541b7"}, @NFTA_DATA_VALUE={0xdb, 0x1, "ee6326126dcccde32afbc2451138492b5129f1c5a73ddf00ef87b3280773a5a2a002abf9ddcbc098119f56df2ead8819bd755f56ccbedd3cd9d54d6feaa1ef17122207bdcfb30be6cd982e63140d40b2198121173e6591bc67e5987bf560a5343f188fc32d5d65dbc2ce1bcb9bd0c88ed2109a6904e0ad3111b9e48d70c0c352853365b1428416e68b004505c4e9c77953b101accc6ea57e30163736ed64568e2d07503dcba9446e016bcef4577aba954e88c6a51be74627d17d81d0a6c081483b47343e1285625bce797f8296baa17bd26de518b2faa6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "c9c0fe3a778433cf4e457a95d62de20ad094eee02afd"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "1e366ef36ffdb71a0abcab36e4d40ae78ae370b23292db991d283119e1e871013390232d9cbcba6cd01618e22aa4cd0025ba76927ec4802e6193142bd28d113257119f3fe30a6cdcd7b9510151dbc3807f9f0744e020d8cca08da395efd78adccddcde9434dcad438001"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf, 0x1, "3180638100d03da3d3373f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "cb8ce70a0ce3489ba494a5b58a34f88667d2fad167ef9c843d26e6a609dd44e68d81a1ee2570e31f81d50c797d3c0545a96cdd88e6132c94f5c4a5f993c1a74e78098d8dac4bfd35a7b0ad90baa4c6880d2d774290455c3d6ae3769a61aa45c00a5e672b7090b1dead7f8b4cfa30270b1fad573ed399373d53b4fc88e1c74aa94bfda8a410a4b288fe272ab1b501439569f198d0de64ea1ec197ae9a009415054b218b292e9d272e55b3520cfa540a49"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x110, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8e}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf6}]}}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "01565c3eaa235c04aa2249c2c315a577072e0df7dac0c6ed075766d45b68c67ea148383773cff2005d798e640c9b098efffc4bfb3d59bb6078033896c01cb8c2d97847ea759d11fd92a15552f941ca53b92fc29dabdbeb5c9eabdeab21b671e3828b87466b38096c2ddd72e3a54fcdd3333d0802d4a5e4515402fc67acc91f59a560041e6b3909882b967412e48c5a143afc2e738db19653835026e393ff2bf79b1e69ecc51be7adc884d72803344f3f5a8ce2875c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x1c, 0x8, "41c390bc652dd2990cfb39b68fbfabce0bb204918505d0d1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x130, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x79}, @NFTA_MASQ_FLAGS={0x8}]}}}, {0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9087}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x16a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x95}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14}}, 0xf1c}, 0x1, 0x0, 0x0, 0x24008085}, 0x20000050) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff", 0xe, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f00000013c0)={0x14c, 0x12, 0x8, 0x70bd2a, 0x25dfdbfc, {0x2a, 0x2, 0x6, 0x17, {0x4e24, 0x4e20, [0x4, 0x4, 0x10001, 0x9], [0x1, 0x10, 0x7, 0x4fa1], r4, [0xffffffff, 0x3]}, 0x7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x151}], 0x1}, 0x4001) 13m42.074669332s ago: executing program 32 (id=1205): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x2}) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d0240"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$kcm(0x10, 0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5e4d974c84ec8e18, 0x0, 0x6}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0xcac, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc74, 0x3, 0x0, 0x1, [{0x814, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x2dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "d03dc29a215889e84ec95167a9853da626789ace7718db2296c684f5594edf4badc2e32c2a93e344344711e50708f4805d45d8c1c798ed707dcff5fc211fc9c033a0aee70a9a98da9776d070ff6fdb046194721181a85f0f2ba54383b30a2037ebfd5fe8031af6bbea672774e588afad00e2ca78815f721784e2c5e3cfab0d940c54b391b64155f8088b8b9f5be813f4be6734a5daea351a84bea30c5f0e681978a16073d610f2f982ca0e99ca2638fc9aa6cb8b69a2270781a5cbdd9ed522"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "85a7af6ef1bc196323085599b0707936f54369d0dc59d44fc9a4de077949fc7c38ae7a29de3b52a0321c071118f3db7ab9f5374b035344957a7b82fe620ff3a0e9c4265146a7b51ed824071c688a5b7f9de3b7440d4f4ff30994eb99d0e41d4982d891f0ed47c4a2f7f8ebf127f3cb9624f50c9370581950b6b7216cbbf26e4f5a3fbda0c0e442952ef27c422ec08680c32a22dc542afdad8e865bce33715c9c08a279c6"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x86, 0x1, "d51a3c411717f30e8e174f188a5013874559f8baae2134820658f099e7e03917876523a8daea449c1accf5b9f99a3acd15154b8972e1fdfb266da22d31f73c43fa66418b12d6bd73f74abbe35547176eccdcc2d88922447d3f8b14584b47c2d737c66c34cb9858eedcc31813f24b2feb7d516b149f095216538a0f9f4d8b46c13d58"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x35c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x82, 0x1, "32d608e78ec1c3981184ce95ebdaabfa6c24e126fdf6b3843387c856339c10e1d2271e50665e31d1b36ffca4777c549c5c88a73fa2290f0228ca359768dc96293764c74ee84c4e847cf48fddafd2699258da31344b32fd749670faa67deb70f64be0b455b52a13c15948478209504be17fa21783b4665eb7657c4aee0fcd"}, @NFTA_DATA_VALUE={0xec, 0x1, "9e13ffee2c306e73df7e15b10a5599658f82758499dad41cc5fdadacc7dc8458a2d8fe4eb9c7afe198426713db763163cb9e2815003a1c438e7cc36daa0ac5a561a1f9b22610e8cddcd6e96c880d5f4f3b067c5194b91c1d82e5918696ce997fd478b49c46956881c90decce3b44e82e6a41f5d1883add5ebdebb67dc7d5d0aea84d531570f3393e2a653e14899e4f9b3b731f0d793e4faeb2974a2dd08661223d14e9c1134ad7e1e183b097272b1fd8fe8892b3d80c60958b58b56b23c2ac501a8d6eab1cf5c0ef900316643f4cb051c1c94a49abe996bc0ea60ead8cbf1bbc4621ef716ce02cdd"}, @NFTA_DATA_VALUE={0x2c, 0x1, "a28ddfd76e9101e45ca0ce51132219450f4b4e4dbe4c9428955ee05bfc6a86f6914888a8661541b7"}, @NFTA_DATA_VALUE={0xdb, 0x1, "ee6326126dcccde32afbc2451138492b5129f1c5a73ddf00ef87b3280773a5a2a002abf9ddcbc098119f56df2ead8819bd755f56ccbedd3cd9d54d6feaa1ef17122207bdcfb30be6cd982e63140d40b2198121173e6591bc67e5987bf560a5343f188fc32d5d65dbc2ce1bcb9bd0c88ed2109a6904e0ad3111b9e48d70c0c352853365b1428416e68b004505c4e9c77953b101accc6ea57e30163736ed64568e2d07503dcba9446e016bcef4577aba954e88c6a51be74627d17d81d0a6c081483b47343e1285625bce797f8296baa17bd26de518b2faa6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "c9c0fe3a778433cf4e457a95d62de20ad094eee02afd"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1c0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "1e366ef36ffdb71a0abcab36e4d40ae78ae370b23292db991d283119e1e871013390232d9cbcba6cd01618e22aa4cd0025ba76927ec4802e6193142bd28d113257119f3fe30a6cdcd7b9510151dbc3807f9f0744e020d8cca08da395efd78adccddcde9434dcad438001"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf, 0x1, "3180638100d03da3d3373f"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xe0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "cb8ce70a0ce3489ba494a5b58a34f88667d2fad167ef9c843d26e6a609dd44e68d81a1ee2570e31f81d50c797d3c0545a96cdd88e6132c94f5c4a5f993c1a74e78098d8dac4bfd35a7b0ad90baa4c6880d2d774290455c3d6ae3769a61aa45c00a5e672b7090b1dead7f8b4cfa30270b1fad573ed399373d53b4fc88e1c74aa94bfda8a410a4b288fe272ab1b501439569f198d0de64ea1ec197ae9a009415054b218b292e9d272e55b3520cfa540a49"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x110, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8e}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf6}]}}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x34, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_ELEM_KEY={0x138, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "01565c3eaa235c04aa2249c2c315a577072e0df7dac0c6ed075766d45b68c67ea148383773cff2005d798e640c9b098efffc4bfb3d59bb6078033896c01cb8c2d97847ea759d11fd92a15552f941ca53b92fc29dabdbeb5c9eabdeab21b671e3828b87466b38096c2ddd72e3a54fcdd3333d0802d4a5e4515402fc67acc91f59a560041e6b3909882b967412e48c5a143afc2e738db19653835026e393ff2bf79b1e69ecc51be7adc884d72803344f3f5a8ce2875c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0x1c, 0x8, "41c390bc652dd2990cfb39b68fbfabce0bb204918505d0d1"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x154, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x130, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x79}, @NFTA_MASQ_FLAGS={0x8}]}}}, {0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9087}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x16a}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x95}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14}}, 0xf1c}, 0x1, 0x0, 0x0, 0x24008085}, 0x20000050) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff", 0xe, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f00000013c0)={0x14c, 0x12, 0x8, 0x70bd2a, 0x25dfdbfc, {0x2a, 0x2, 0x6, 0x17, {0x4e24, 0x4e20, [0x4, 0x4, 0x10001, 0x9], [0x1, 0x10, 0x7, 0x4fa1], r4, [0xffffffff, 0x3]}, 0x7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "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"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="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", 0x151}], 0x1}, 0x4001) 11m11.868280454s ago: executing program 3 (id=1639): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './trace/trace\x00'}) statx(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1000, 0x80, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000240)='!\x00', &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00', &(0x7f00000002c0), 0x24002, &(0x7f0000001880)={[{'(,:!@'}, {'devtmpfs\x00'}, {'\x00'}], [{@euid_eq={'euid', 0x3d, r1}}, {@seclabel}, {@hash}, {@fowner_lt={'fowner<', r2}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r4, &(0x7f0000000a00)='h', 0x1) 11m10.398328303s ago: executing program 3 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, r2, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x45, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x10200, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/dynamic_events\x00', 0x40000, 0x0) read(r3, &(0x7f0000000200)=""/256, 0x100) 11m9.453834145s ago: executing program 3 (id=1643): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) write$dsp(r0, &(0x7f0000000000)="ada56000979f", 0x6) write$dsp(r0, &(0x7f0000002200)="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", 0xffa) 11m7.862182656s ago: executing program 3 (id=1644): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) setns(r0, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r4}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r5, &(0x7f0000000e00)='1', 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x464, 0x1, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x3591edda05840739}, 0x20008000) accept4$unix(r7, 0x0, 0x0, 0x80000) r8 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r8, &(0x7f0000001400)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) fallocate(r8, 0x8, 0x5bed, 0xfffffffffffffff3) r9 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc) write$P9_RLERRORu(r9, &(0x7f0000000280)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r9, 0x0) userfaultfd(0x80001) 11m6.760878643s ago: executing program 3 (id=1650): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64], 0x0) (async, rerun: 32) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x40, 0x0) (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) (async) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1529fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c40703a100000102000109022700010100805009040000030806500007058102000200070502020007058303000201"], 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 11m6.578688622s ago: executing program 4 (id=1651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x200000000000) read$FUSE(r2, &(0x7f0000001040)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={0x1}) 11m6.140735368s ago: executing program 4 (id=1652): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x0, 0x3, 0xc002004c4, 0x4000001004, 0x6, 0x8, 0x4000000000000000, 0x1, 0x366817b8, 0x2800000000000000, 0x5, 0x2000d30], 0xffffffff, 0x3013d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 6) 11m4.884099013s ago: executing program 4 (id=1655): r0 = fsopen(&(0x7f0000000040)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40091}, 0x0) set_robust_list(0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r4, 0x4fb, 0x1, '`'}, 0x9) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 11m4.560115352s ago: executing program 4 (id=1657): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) setns(r0, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x1000) mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r4}}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r5, &(0x7f0000000e00)='1', 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x464, 0x1, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x3591edda05840739}, 0x20008000) accept4$unix(r7, 0x0, 0x0, 0x80000) r8 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r8, &(0x7f0000001400)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) fallocate(r8, 0x8, 0x5bed, 0xfffffffffffffff3) r9 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc) write$P9_RLERRORu(r9, &(0x7f0000000280)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r9, 0x0) userfaultfd(0x80001) 11m3.828296217s ago: executing program 4 (id=1660): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r0, 0x3, 0x0, @random="16486a4393e2"}, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003980)={0x14, &(0x7f0000000880)={0x40, 0xb, 0xad, {0xad, 0x3, "d9c7be9816f5450f12b9b2c48c60316a3043351a4ec82ee64ef025aa2a505cc7b2299c3169b7f2c4d665f87d86ea1eb3b6d36e6d571981d9e24d9a527026d59d3b9678883f9d59d6fdb49e8c264ca594c9ac42f5e19bb097cb61b62bb07633e805b0c1a1c02059de065b9e323b5de8db736909eb5e3d84c2894e79476ea44717ad1faa10795c710a64cf70876cb059d6fe12e38597841df06872e9cab2b8f4fed57ec768ee2f9fcb8ce50d"}}, &(0x7f0000003900)={0x0, 0x3, 0x42, @string={0x42, 0x3, "ab0dc6137da7319636bab8f90c6a55f7d4e2756e678e5e2c39b9fda3f70aebdb6834b0d77d67f8449fd8e7537fd78bc95d295281c6658003d71a00fa86e1be85"}}}, &(0x7f0000003c40)={0x44, &(0x7f00000039c0)={0x0, 0xb, 0x9c, "efbe984c7aca19289de41db395ddde1e1de20a2dcd27d4a79c5142727e2237c5cd69feb00ae52e366b4e04085c9c8608d116678aa3ba7b7e722a8ce811bbc6fa1cfc2727cf02abb1543e1a7adc496fc5b6c44176cb7fcd78c8d229c1f771e959676301dadaf66618ef1673bcf9b73cfb26cef9b7595bf4a318de8c157cc61a06d7834afd8e2b4b68a3031ae623ea083efb4276dbc1a497faa8bc3c01"}, &(0x7f0000003a80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000003ac0)={0x0, 0x8, 0x1, 0xf8}, &(0x7f0000003b00)={0x20, 0x81, 0x1, "f9"}, &(0x7f0000003b40)={0x20, 0x82, 0x3, "956d98"}, &(0x7f0000003b80)={0x20, 0x83, 0x2, "1ed7"}, &(0x7f0000003bc0)={0x20, 0x84, 0x2, "834b"}, &(0x7f0000003c00)={0x20, 0x85, 0x3, "3814b8"}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11m1.809018498s ago: executing program 3 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @empty, 0x1}}]}]}]}, 0x10c}}, 0x40094) 11m0.979790799s ago: executing program 33 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0x10c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0x4}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @empty, 0x1}}]}]}]}, 0x10c}}, 0x40094) 11m0.904879346s ago: executing program 4 (id=1665): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x85, &(0x7f0000000000)=@req3={0x6, 0xff, 0x80, 0x57, 0x1, 0x3, 0x6}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = epoll_create(0xd) epoll_pwait(r4, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x8, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000380)={[0x20006]}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000001) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @ioapic={0xeeee0000, 0x7, 0xc7, 0x988a, 0x0, [{0x4, 0x5, 0xf8, '\x00', 0x4e}, {0x8, 0x8, 0x3, '\x00', 0x5}, {0x9, 0x9, 0xdb, '\x00', 0x4}, {0x2, 0x40, 0x0, '\x00', 0xd}, {0x0, 0x3, 0x9, '\x00', 0x34}, {0x1, 0x94, 0x2, '\x00', 0x5}, {0x9, 0x5, 0x1, '\x00', 0x7}, {0x9, 0x0, 0x7, '\x00', 0x90}, {0x10, 0x54, 0x41, '\x00', 0x9}, {0x1, 0x48, 0xad, '\x00', 0xfc}, {0x0, 0x65, 0x8, '\x00', 0x2}, {0x30, 0xdb, 0xa, '\x00', 0x6f}, {0xf, 0xee, 0x40, '\x00', 0x31}, {0x0, 0xf3, 0x5, '\x00', 0x4}, {0x0, 0x5, 0x9, '\x00', 0x2}, {0x7, 0x9, 0x2, '\x00', 0x7}, {0xf9, 0x10, 0x2, '\x00', 0xff}, {0x96, 0x8, 0x7, '\x00', 0x93}, {0xf, 0x4, 0x7, '\x00', 0xa}, {0x81, 0x8, 0x4, '\x00', 0x9}, {0x0, 0x6, 0xd, '\x00', 0x4}, {0xe, 0xf7, 0x2, '\x00', 0x97}, {0x2, 0x30, 0x8, '\x00', 0x7}, {0xbb, 0xb, 0x2, '\x00', 0x1}]}}) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/166, 0xa6}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) 11m0.448627696s ago: executing program 34 (id=1665): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$HIDIOCAPPLICATION(r0, 0x4802, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x85, &(0x7f0000000000)=@req3={0x6, 0xff, 0x80, 0x57, 0x1, 0x3, 0x6}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = epoll_create(0xd) epoll_pwait(r4, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x8, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000380)={[0x20006]}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000001) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @ioapic={0xeeee0000, 0x7, 0xc7, 0x988a, 0x0, [{0x4, 0x5, 0xf8, '\x00', 0x4e}, {0x8, 0x8, 0x3, '\x00', 0x5}, {0x9, 0x9, 0xdb, '\x00', 0x4}, {0x2, 0x40, 0x0, '\x00', 0xd}, {0x0, 0x3, 0x9, '\x00', 0x34}, {0x1, 0x94, 0x2, '\x00', 0x5}, {0x9, 0x5, 0x1, '\x00', 0x7}, {0x9, 0x0, 0x7, '\x00', 0x90}, {0x10, 0x54, 0x41, '\x00', 0x9}, {0x1, 0x48, 0xad, '\x00', 0xfc}, {0x0, 0x65, 0x8, '\x00', 0x2}, {0x30, 0xdb, 0xa, '\x00', 0x6f}, {0xf, 0xee, 0x40, '\x00', 0x31}, {0x0, 0xf3, 0x5, '\x00', 0x4}, {0x0, 0x5, 0x9, '\x00', 0x2}, {0x7, 0x9, 0x2, '\x00', 0x7}, {0xf9, 0x10, 0x2, '\x00', 0xff}, {0x96, 0x8, 0x7, '\x00', 0x93}, {0xf, 0x4, 0x7, '\x00', 0xa}, {0x81, 0x8, 0x4, '\x00', 0x9}, {0x0, 0x6, 0xd, '\x00', 0x4}, {0xe, 0xf7, 0x2, '\x00', 0x97}, {0x2, 0x30, 0x8, '\x00', 0x7}, {0xbb, 0xb, 0x2, '\x00', 0x1}]}}) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)=""/166, 0xa6}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) 7m35.33938488s ago: executing program 2 (id=1955): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_usb_connect$midi(0x2, 0xc7, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x1, 0x81, 0xa0, 0xa6, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x20, 0x26, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xdb, 0x81}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x7, 0x1, [{0xa, 0x5}], 0x40}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xc, 0xa}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x3, 0xfb, 0x6, {0xe, 0x25, 0x1, 0xa, "c6fbd0dd11dbad4ad82b"}}}, {{0x9, 0x5, 0x2, 0x4, 0x420, 0xd, 0x6, 0x8f, {0xb, 0x25, 0x1, 0x7, "2d13ece25dfd3f"}}}, {{0x9, 0x5, 0x3, 0x1, 0x400, 0x7, 0x7, 0x7, {0xe, 0x25, 0x1, 0xa, "fe92bfb822ace4494d9a"}}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xec, 0x19, 0xb, {0x14, 0x25, 0x1, 0x10, "2404a84684f47456903ee8912fe2b287"}}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x9, 0xa, 0xf7, {0x4}}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x8, 0x6, {0x6, 0x25, 0x1, 0x2, "e88f"}}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x8, 0x7, 0x51, {0xa, 0x25, 0x1, 0x6, "13d2d0647d55"}}}]}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x4989b38616627a97, 0x80, 0x4, 0x69, 0xff, 0x5}, 0x79, &(0x7f00000001c0)={0x5, 0xf, 0x79, 0x4, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x8000, 0xf00, 0x92b}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x9, 0x6000}, @generic={0x5e, 0x10, 0xa, "9ad0bcbadd9c283ae1d1a1058eea99486a74cd4b9b06ec11dfde1d066df39895d3dcd259c38efe1da2a312c432b106c24ea50b6bb3e5fd7e8ae95b4c6063f88b3c6f4c74d7551540fe0cbb995d063a4052e07cb312c900983d1a67"}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1) 7m34.395561268s ago: executing program 2 (id=1957): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e005f00330000a40800080211000001080211000001505050505050b00000018e80090024b500129dfed6d7d2caafcf34ed931775f30093716401016c2d1a20000f0400010000000000010005001c00000001000500000003dd063951e53e606600080057"], 0x88}, 0x1, 0x0, 0x0, 0x4044084}, 0x48000) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x498642, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) (async) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) ioctl$RTC_AIE_ON(r6, 0x7001) (async) ioctl$RTC_AIE_OFF(r6, 0x7002) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x7d) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000000c0)={'wg1\x00'}) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xa) (async) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 7m33.863709627s ago: executing program 2 (id=1959): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bede00212ba0d8105040a60e000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40d0ad601edef3d93452a92307f00000e97031e9f05e9f16e9cb50000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) (async) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/44, 0x2c}, 0xc0000}], 0x1, 0x40010152, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='measure func=FILE_CHECK #bj_', 0x1c) (async) write(r6, &(0x7f0000000100)='measure func=FILE_CHECK #bj_', 0x1c) r7 = inotify_init1(0x400) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x1) recvmmsg(r1, &(0x7f0000005380)=[{{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/103, 0x67}, {&(0x7f00000003c0)=""/78, 0x4e}], 0x2, &(0x7f0000000480)=""/21, 0x15}, 0x2b}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000740)=""/2, 0x2}], 0x3}, 0x392}, {{&(0x7f00000007c0)=@tipc=@id, 0x80, &(0x7f0000001600)=[{&(0x7f0000000840)=""/148, 0x94}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000a00)=""/235, 0xeb}, {&(0x7f0000000b00)=""/140, 0x8c}, {&(0x7f0000001300)=""/133, 0x85}, {&(0x7f00000013c0)=""/140, 0x8c}, {&(0x7f0000001480)=""/220, 0xdc}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f00000015c0)=""/38, 0x26}], 0x9, &(0x7f00000016c0)=""/131, 0x83}, 0x2}, {{&(0x7f0000001780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004340)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/38, 0x26}, {&(0x7f0000004300)=""/43, 0x2b}], 0x4, &(0x7f0000004380)=""/4096, 0x1000}, 0x8}], 0x4, 0x100, &(0x7f0000005480)) add_key(&(0x7f00000001c0)='keyring\x00', 0x0, &(0x7f0000000c80)="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", 0xfffffffffffffcc9, r2) (async) r8 = add_key(&(0x7f00000001c0)='keyring\x00', 0x0, &(0x7f0000000c80)="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", 0xfffffffffffffcc9, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8, 0x300}, &(0x7f0000000840)=ANY=[], 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 6m58.165683981s ago: executing program 2 (id=1961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') chroot(0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) 6m56.024023538s ago: executing program 2 (id=2025): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x101001) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) write(r0, &(0x7f0000000080)="2f275330443ce31163f452d3d16ccb85", 0x10) preadv(r0, &(0x7f0000002400)=[{&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/244, 0xf4}, {&(0x7f0000001240)=""/5, 0x5}, {&(0x7f0000001280)=""/107, 0x6b}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/38, 0x26}, {&(0x7f0000002340)=""/129, 0x81}], 0x8, 0x4, 0x6) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000002480)={{0x9000, 0x1, 0xe, 0x8, 0x0, 0x7, 0x7, 0x58, 0x2, 0x4, 0x3, 0xb6}, {0x60000, 0x26000, 0x9, 0xa, 0x4, 0x2, 0x2, 0x40, 0x6, 0x45, 0xf0, 0xf8}, {0x26000, 0x2, 0x0, 0xa1, 0x7, 0x4, 0x7, 0x7, 0x4, 0x0, 0x8, 0xcc}, {0x25000, 0xfec00000, 0x4, 0xf7, 0x0, 0x3, 0x93, 0x7, 0x9, 0x1, 0x4, 0x5}, {0x2, 0x60000, 0x0, 0x9, 0xf2, 0x0, 0x3, 0x5d, 0x6, 0x2, 0x0, 0x3}, {0x200000, 0x10000, 0x9, 0x0, 0x8, 0x0, 0x5, 0x75, 0x5, 0x3, 0x81, 0x9}, {0x80a0000, 0x1, 0x9, 0xb, 0x7, 0x7, 0x18, 0xc7, 0x8, 0xfa, 0x2, 0xd}, {0x40000, 0x9000, 0x3, 0x80, 0x3, 0x60, 0x2, 0x2, 0x7f, 0x5, 0x1, 0x5}, {0x6000, 0x2}, {0x54000, 0x2}, 0x0, 0x0, 0x100000, 0x100004, 0x1, 0x800, 0xeeee8000, [0x8, 0x0, 0x2, 0x1]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000025c0)={0x4, 0x1, 0x8000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000002600)=0x7) syz_usb_connect(0x4, 0xb77, &(0x7f0000002640)={{0x12, 0x1, 0x110, 0x71, 0x50, 0x38, 0x10, 0x19d2, 0x27, 0x289b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb65, 0x4, 0x9, 0x5, 0x20, 0x1, "", [{{0x9, 0x4, 0x49, 0x7, 0x10, 0xff, 0xff, 0xff, 0xf9, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xffff2481, 0x0, 0x9, 0x60}, {0x6, 0x24, 0x1a, 0xbeb, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x7, 0x4, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x4, 0x5, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xb, 0x1, 0x9, 0x40}]}, @uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x7321, 0x5f}]}], [{{0x9, 0x5, 0x5, 0x0, 0x400, 0x6, 0xf, 0xe9, [@generic={0x92, 0x9, "ed7c20081c9793babad38606b42d67c6de1b324d1bb01e964b1feaa99fcc09ed4e9fdc4e38481dbe5eb2ab1424d214f5b062be716d16f63420b34a360412dc851aafeb733fc6237b3069f5cd5ce6505e59c8f63a5e96148264daa9d8d106d089b0b1bad36fb1ace4c191a48c39cc18bb028ae1d2c268a2496b28fe6d30c81d10ee3de9427208049adbb341357a2d4545"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x440, 0x3, 0x4, 0xe0}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0xe, 0xce, 0xb3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0x51633dc7d1d6211e, 0x10, 0x8, 0x2, 0x81, 0xff, [@generic={0x4e, 0x30, "5f21cce3ce137d7304b9f65fcd76f9787f43d1a4f6b293b92e21c5c3bb1240ca72b84fc6383ccdb07467eaa1f45c7fcc51116dab4a12f9c1eaed1fbcbbc168065500f44a11a01a7fb3447435"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x10, 0x1, 0x0, [@generic={0xb1, 0xe, "25dfb7a4f3d3d3da32142a4e6932e1bcf43458bb2dada40bbcb13faab01e7443879fc51714210b36242d7b17a7f99ce3ab493b19ff93304b82aa734a93cf73ab4a0a0bf9d0ddcc38817089a8c030b4aff989f35eedd19a2421a2ac9c48052476df747c0db9626308c3f574072e7913c277582df814783c92689281b605f5c47bddb907ed3c131d0af0eb5989e7a4044daebfba77f38224c2a0e868362bc480fe5575bcd1d351355db2888a0d6422f7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x7, 0xf8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe7, 0x6}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x1, 0x1, 0x3, [@generic={0x4b, 0x9, "078c24a91c2e29b45f773ab878e45025bbea07f38d7c4b2f6146b7fb6ce0a797815028d575b17f9c91017ccd0b7dda23ad29a36f10cd064c1e77824c95651caacaab78f2dd2637ad16"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x6}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x0, 0xf3, 0x4}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x36, 0x9, 0x1, [@generic={0x61, 0xc, "118394e2402a803833f61777e710c0ff149d9062e107fe541eaca02ec2ef525b29315fbb75549ee75ef568c6d4c1cbdf78ecd89aba43484ad72d436645da4474ffea09a75dd42c7321f37e2fa97eea597a0b30f1e9bc861ca8a909d5c6116f"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x8, 0xb9, 0x9, [@generic={0xd, 0x21, "407a73e7d27a1f251bcda8"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x1, 0x5, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xd}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xa1, 0xf, 0x1, [@generic={0x9b, 0xe, "cf79b30a1b7086133577f63bcfab1962886f916beee6b08c19cb58a24379335eadcc9906b609f4b440b079dbefd4b6731bcb0a76a37e578117c1186a5557e5dcdf36557ff13158ee4b317ce3dfb2b63802d37d9e08f108054f21c58b077b2ddd3616cd275c2aa130f2c7cf64073173e4877052e9d8ec58fe725731f8d444f5f00f62941aea8307cfae46c7ad7839f655f86fb69d7bbfc6d82d"}]}}, {{0x9, 0x5, 0x45076aaa48aada14, 0x0, 0x3b7, 0x7, 0x1, 0xc, [@generic={0x5f, 0x4, "489e5a2c1735be3129302112122cd73a94a5138cbaa929dbd698ba2f8fa44d07157edd1e493ce172d9a6b39f8ac20bdc4f1c14d4e66e9bb338c72ac4a4b0dcf64065f47d9302c2b89319eee6253e7f519c62e197ea1e73302bf81df94d"}, @generic={0x82, 0x3, "c4181bdc0b86775ae4a9e1199d5e611cbf6f51623ca80f483975b2173f78b65104a222ddccc176a67afaf86dff06bac8a68cb7926598b9126bc5a0ace68c57401d1bb98cb0711956f8a7945d97476aaee02506451075ea515ae72c0b059ea019214b2f6d264fcad8e9b9d1e2fd37741b897958b2e22e9229fae5c597f41c94e9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x9, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xd9ef}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x40, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x4, 0x3, 0x1}}]}}, {{0x9, 0x4, 0xd7, 0x1, 0xd, 0xc7, 0xbb, 0xfe, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0xa}}, @generic={0xd5, 0x21, "b6ead33f5a298cbf2a302e0869d69eaa14bdfdca2702862c718463ad467480c2ea810ca277fcf59852a6191ad429240151752dc5b1e4fa84974e17397d0b1f0c029c499d48c0459eb4dc7a61db8060f5d83fad22c6b70b6f79310c4d5da44ac91b11bf2d2eb358fa3b2f90b4b6ab3131ecedcae615e21ff1ffd222833a0e76c5fff61718c75083b3d31cc873ac0e362bd49993f35a43e07e0f500216a2c277d156dbbba7c720a8a139d08997d77e1e375d2729ca0ac056d3b3515a665fd95e167a84ca163cbe695132d79bdcbbf3362dc2eed7"}], [{{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x0, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x2}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x3, 0x9e, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x5, 0xd}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xfe, 0x61, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x8001}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x8, 0xe, 0xe, [@generic={0x29, 0x22, "5dfe681e58e09f329474652cae7d7752e17aab30a239d8f31be2aa21f9ecb3b82a017804fcf51c"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0x6, 0x0, 0xd0}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x0, 0xf, 0x2, [@generic={0x7e, 0xd, "32abcd4626621657fea84c80ea7eac17ad623f08238fe62eddb942b5b0e6a4819b6fd96ead25f3ba12f7d9630312094c52329952a2d452f3176f079a922a8377df415f0a0317fc816827d2279651d35eee696603a6b3c15b94d18c24abe61d1f81f80fcece93a5baa6285f432d32f504434245c60ac6ce2a88c2dd8f"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x380}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x6, 0x89, 0x8e}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x7, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0xfb, 0x81, [@generic={0x4a, 0x30, "88f5509ed008967439020c09e3c0aa2d2d94bc119db3c11988d2a1986dcb1167d7386e77c13a5f275e6af7ffa8701d6ea04c1a332a3d2a0c50a6193f7772264ea5ec069afdaee184"}]}}, {{0x9, 0x5, 0x7, 0x35, 0x400, 0x2, 0x5, 0xe3, [@generic={0x7, 0x4, "2902fc8c4f"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x0, 0x80, 0x4, [@generic={0x6f, 0x0, "06fdc61e1a8728ba90d052ce1e40b148e90938723bc3ce62544c5a3cefc0cd7f9291af88ccc092e5e0e9e2e6850ddcbe44bf186abd9b6d72542d9ac73a69b8eb4bb6b19ee7e9959ae9080b0fedcbbabde0602f79637c1d23d2d2d66fb2e17e0f2f0f0351b0ecca9052c74f9575"}]}}]}}, {{0x9, 0x4, 0x7f, 0x6, 0xb, 0x9a, 0xfd, 0x43, 0x9, [@hid_hid={0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0xb90}}, @uac_control={{0xa, 0x24, 0x1, 0x4, 0x37}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x1, 0x7, "db9863b18b1a"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x8000, 0x10, "1a2c85c22b6c"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x5, 0x6, [0x1, 0xa, 0x5, 0x8, 0x6, 0x2], 0x9}]}], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0x2, 0x1, 0x81, [@generic={0xe3, 0x6, "bf455296536ddadeba038d030e9204d8b4e788c763faaeb40edd989315716ba470429bb5b6ddb052a300a6251f11317854c4ddce042c969c1dde1292e3c666cfda6a248bbbb918596867f4197c161d175052d06498d4121b2f208547507e6a1f36fbe76ae2c603ddaca2db0bc6d49960632fbfc7210e000b3f43feb9062f8cb964758bba86c2b052b6c1883e0c36b3ef5c17d8884687b494df2c1eca1406da72c57ac29bfb72e46d6e4a1f0429e2c306015bc781253eb8a974bf68d271c8c6693352f5d545b933559073569d0aeeb2b76fd8d40853dfc004e9e3f2f7f05f8739f8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x7, 0x3, 0xa6}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8f, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x1, 0x5, 0xd, [@generic={0x4b, 0x11, "9f665440e47f6b9cac0c5358a292aec0d00e1310114fff20ddcdefefa3c2216cba45c962420cb491c986028ac7ec56f5f59da1f0c426a26c819ba8517d6d3217f002a28853d7c12eee"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x2, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xfff9}, @generic={0x3b, 0xc, "d6ab7bb4b04ab1a1ebd03f5c9708776f4cb9247bf3dbbbdcbf8a5aa1eba2d435ecbd7dccacfa37cf46a56acaa9b39f1b83752b044e5a35a536"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0xf8, 0x4, 0xe7, [@generic={0x60, 0x7, "fecea42dae8cb969932d3e18ab55e83985df3bf01a2e1458306c2fb99fabc16c63a6fb967c358ca5a976ef8affceae66b241106084da2564d075aef858189967f4631007020db1704654e67f7fb581929bd594aba04247c2c891da56fadb"}]}}, {{0x9, 0x5, 0x0, 0x14, 0x8, 0x6, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4f, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x68c0}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x83, 0xa, 0x1}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x3, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x7, 0xfc, 0x3}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x25, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xa0}]}}]}}, {{0x9, 0x4, 0xd4, 0x2, 0x3, 0xc4, 0xd7, 0x5a, 0x9, [], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0xfc, 0x5, 0x4}}, {{0x9, 0x5, 0x8, 0xc, 0x3c7, 0xd, 0x3, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7ff}, @generic={0xd2, 0x7, "ec00c73c72b7f49ca817adec99387efc3c827f5acb0d220d9933bb459ed5c2384921d463a0d93de6eee21ec8a90af49d88209f8d39886324fc388c6f4afd67ebe536038f2a3535618312788120fda6056524d46a28a238dec75b05ce17abced5150af2cc2190d8c5e613a1fff66cc769ebd8e6cc4e2e5a6fff63b5d70d6a4bfcdc819642baf4511b9162364b921f2262a63ce88783d8dcb18cdf3b45907bfc65de9ff5a3a9c1f4199101c42d34adf21e6a236fce7d7155076baf3551b31bcca7464fa4a42bf0464676b8b93be8267377"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x3, 0x3, 0x1}}]}}]}}]}}, &(0x7f0000003500)={0xa, &(0x7f00000031c0)={0xa, 0x6, 0x300, 0x0, 0xff, 0x9, 0xff, 0x5}, 0xc, &(0x7f0000003200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x9}]}, 0x9, [{0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000003300)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000003340)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x1401}}, {0x99, &(0x7f00000033c0)=@string={0x99, 0x3, "a2208575a9a63f067d3d28a9ad1575db1a3bc39ad97405b8785d95f719b347639a2708c2a548064ac245cbe8df62388350acb407d9785c144f14e7123b671b2c37a606acb5bf1eb14682e98aefe4fdf92656f3603a8dbdfe0d6afb8db8f5616af8795490f23cd1b635c76b07874ea39916dde842eb8aeed2c07d1f36dc9a780a57eae367401bb2b9bce193d2bb88212c4b627b430d146e"}}, {0x4, &(0x7f0000003480)=@lang_id={0x4, 0x3, 0x807}}, {0x36, &(0x7f00000034c0)=@string={0x36, 0x3, "b1944978b22c3f7e3ff997da0b9ab252bf48adbaa532a62551388d12befb4629e2ed351751802a3fcc3e9a737761f16e3879434a"}}]}) bind$bt_sco(r0, &(0x7f00000035c0), 0x8) stat(&(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r0, 0x3, r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000036c0), &(0x7f0000003700)=0x4) lseek(r0, 0x7, 0x3) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003780), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000003880)={&(0x7f0000003740), 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x44, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x43f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x20000004) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000038c0)={0x0, 0x1ff}, &(0x7f0000003900)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000003940)={r3, 0x7}, &(0x7f0000003980)=0x8) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000039c0)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003a00), 0x22b01, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000003a40)={{0x1, 0x1, 0x18, r0, {0xfffffc00, 0x1}}, './file0\x00'}) r6 = signalfd(r0, &(0x7f0000003a80)={[0x2]}, 0x8) getdents(r6, &(0x7f0000003ac0)=""/178, 0xb2) syz_genetlink_get_family_id$mptcp(&(0x7f0000003b80), 0xffffffffffffffff) getdents(r5, &(0x7f0000003bc0)=""/119, 0x77) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000003c40)=@x86={0x9, 0xa, 0x1, 0x0, 0x3, 0x7f, 0xff, 0x3, 0x9, 0x0, 0x8e, 0x7a, 0x0, 0x9, 0x1, 0x1, 0x1, 0x3, 0x7, '\x00', 0xf, 0x80000001}) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003c80), 0x2, 0x0) ppoll(&(0x7f0000003cc0)=[{r6, 0x3002}, {r7, 0x1201}], 0x2, &(0x7f0000003d00)={0x0, 0x989680}, &(0x7f0000003d40)={[0x3]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000003d80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$VIDIOC_S_PRIORITY(r5, 0x40045644, 0x2) syz_clone(0x1008100, &(0x7f0000003dc0)="0bcf5cba451c358e85a15b3dda88092f680ce3f25167acec4673d2b0bd1ae8303925f7415cdfeb16e68f5ee56f90f95aae58d120108d33ac2d872d4e27fcc021361c900477433dac2b12a4ccd68fc5a18053c1c433520e09754411557c1aaeec558f98d2ca3369a8cb00c3504a543879c56a1a43fbc1e196876dc7e961a0e979401eab4a651c1c2ba7b8ae0d6528242635d97bedc5dfca6cadd7dece31a9583069e9d725", 0xa4, &(0x7f0000003e80), &(0x7f0000003ec0), &(0x7f0000003f00)="e766b3404ed88784f70a9f8ca3651037e88ab9cd5f2b548dc4a629d443d0de27756ce181484bc5dfd020f15b89eacc12d341cbac8113115e75f96a6555ca0513de3b4d817b5ff9b4f7343fa9dbdd7b86236591d7c32f4cf8db36f24a1211d02e78608803f2efea57f052bca2f746ed61d7adecf5dd589b518fb1edc9bbcdb0a538a56c657c653480e4a6fba0064cc01e715f6e5a67dfef1697ee96d056a44b3df7d2c915ffc9f40a7a01bccccd4f9bbe31b11841bcf6b556a4d5c0b1e6eef99e5006b84d31596ec88892b8614ee0327d177b843ec117d3de07a3f00f807a5f460fb195292e4aa2ddf7c20323") 6m49.583720671s ago: executing program 2 (id=2042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x20, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 6m48.622436819s ago: executing program 35 (id=2042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x3, 0x20, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 10.95911369s ago: executing program 5 (id=2655): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) socket$tipc(0x1e, 0x5, 0x0) accept(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000)) 10.241822191s ago: executing program 0 (id=2658): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) unshare(0x100000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) flistxattr(r3, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="18729b689b3b6af547710ddea621", @ANYRES16=r0, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="280050800500020002000000090001007ee5d52ffd0000000800030002ac0f000500090001000000"], 0x44}}, 0x0) 9.68482878s ago: executing program 0 (id=2659): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fb, 0xfff, 0x34324241, 0x3, 0xa, [{0x8, 0x3}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="202336000000360583efb930f0187ff0478fa22a61a54607b71ea9e43d359c479ca3000000001fef7c7b08fc"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 8.90517397s ago: executing program 7 (id=2660): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff000002", 0x11, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 7.564673298s ago: executing program 6 (id=2661): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') (fail_nth: 6) 6.872655648s ago: executing program 5 (id=2662): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x21, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x7ffffffe], 0x0, 0x1}) 6.528270328s ago: executing program 7 (id=2663): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x4000) r1 = socket$kcm(0x28, 0x1, 0x0) mount$afs(&(0x7f0000000180)=ANY=[@ANYBLOB='#'], &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x14800, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001900010000000000fbdbdf251d01090013000b"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) recvmmsg(r2, &(0x7f0000002200)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/218, 0xda}], 0x4, &(0x7f00000007c0)=""/59, 0x3b}, 0x6}, {{&(0x7f0000000800)=@sco={0x1f, @none}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000980)=""/15, 0xf}], 0x3, &(0x7f0000001200)=""/4096, 0x1000}, 0x4000003}], 0x2, 0x12000, &(0x7f0000002280)={0x0, 0x3938700}) 6.227731028s ago: executing program 7 (id=2664): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f0000000400)={0x0, 0x0}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) syz_open_dev$char_usb(0xc, 0xb4, 0x2) 6.031991435s ago: executing program 6 (id=2665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2c003300d0600000ffffffffffff080211000000505050505050"], 0x48}}, 0x0) 5.997531931s ago: executing program 0 (id=2666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003980)={0x14, &(0x7f0000000880)={0x40, 0xb, 0x2, {0x2, 0x3}}, 0x0}, &(0x7f0000003c40)={0x44, &(0x7f00000039c0)={0x0, 0xb, 0x98, "efbe984c7aca19289de41db395ddde1e1de20a2dcd27d4a79c5142727e2237c5cd69feb00ae52e366b4e04085c9c8608d116678aa3ba7b7e722a8ce811bbc6fa1cfc2727cf02abb1543e1a7adc496fc5b6c44176cb7fcd78c8d229c1f771e959676301dadaf66618ef1673bcf9b73cfb26cef9b7595bf4a318de8c157cc61a06d7834afd8e2b4b68a3031ae623ea083efb4276dbc1a497fa"}, 0x0, &(0x7f0000003ac0)={0x0, 0x8, 0x1, 0xf8}, 0x0, 0x0, &(0x7f0000003b80)={0x20, 0x83, 0x2, "1ed7"}, &(0x7f0000003bc0)={0x20, 0x84, 0x1, "83"}, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.676788137s ago: executing program 5 (id=2667): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x32) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @loopback}, 0x2, 0x2, 0x4}}, 0x26) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd64b, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x40, 0x10000000, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf194, 0x4, 0x2, 0x1001e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {0x0, 0xc0107520, 0x500}, 0x1f, 0x0, '\x00', {0xfffc, 0x8006, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 5.578189744s ago: executing program 6 (id=2668): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06093a864886f70d01030105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0304160414f58703bb33ce1b73ee08eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r9) r10 = dup(r8) syz_ublk_setup_queues(r10, r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000340)={0x1d, {{0x2, 0x4e25, @multicast1}}, {{0x2, 0x4e32, @loopback}}}, 0x108) ioctl$UI_BEGIN_FF_ERASE(r10, 0xc00c55ca, &(0x7f0000000040)={0x3, 0xa, 0x6ea8ac58}) open$dir(0x0, 0xa0000, 0x30) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r11 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r13 = getpgid(0xffffffffffffffff) r14 = syz_clone(0x3000000, &(0x7f0000000640)="14c02e3961bf893d021a69f088fb8fa93026c9e80d7780be2524c660b1b55397127943d18c24fd23bb9290f83d9b1e648471d92f5dcc48a60a534f00dcec1dbb0814d6d4a9dfbc720fb8139f84f42c7516d4b3ee266685e8092bc1b6955f3d095281d03e8c", 0x65, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="77803267893557e3dc4068d3f39a38757c19d93d6db43c2e3636ca1f15b7ac6c1706f250850d28e0f48c6af95b6f033daf26727e49e2cec5fd7aea7f348344015c21a72d0e8f9b9ce9b841140f18dad706cc630b4fc9dc6c45f1e98f28a915755b96b873516947a925869d69a7a21d79f92e9b1887f44c29d9b8579aaac2e81b9382897a687fcbb768ab28a081269f92b510d3fde6a5d0feb09f24bb13dbe3c195de4feab3da499c63d02d0f03ace4f0a9") ioctl$UBLK_U_CMD_START_DEV(r5, 0xc0207506, &(0x7f0000000a80)={r4, 0xffff, 0x0, 0x0, 0x0}) r16 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r16) ptrace$ARCH_SHSTK_ENABLE(0x1e, r16, 0x1, 0x5001) ptrace$peek(0x2, r16, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000b00)={r4, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000bc0)={0x8080, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000480), {0x1c}, &(0x7f00000004c0)=""/35, 0x23, &(0x7f0000000500)=""/174, &(0x7f0000000b80)=[r13, 0x0, r14, r15, r16, r17, 0xffffffffffffffff], 0x7, {r10}}, 0x58) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x0) 5.066816898s ago: executing program 5 (id=2669): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x2, 0xc8}}}, 0x6) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="3f000000010003", 0x7) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x101}, 0x8) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x23, &(0x7f0000000080)=@string={0x23, 0x3, "b6a8dba2ea866e823471760eb0a95f591455b03f6fc057f9a06257fc4c9499637d"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}]}) 4.644754912s ago: executing program 7 (id=2670): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) socket$tipc(0x1e, 0x5, 0x0) accept(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x541c, &(0x7f0000000000)) 4.237817954s ago: executing program 0 (id=2671): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) syz_emit_vhci(&(0x7f0000001cc0)=@HCI_VENDOR_PKT, 0x2) 3.769742152s ago: executing program 0 (id=2672): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r2) r3 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r3, &(0x7f0000000180)="69672505bde5d1853a384e3deec6fcb4391f745d0f1a05d500feffffff7090ba2b6d59c8958d6f1500000000c4677b000900fd280000000000000000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x7, &(0x7f00000002c0)=[{0x0, 0x9, 0x2, 0x5}, {0x5, 0x4, 0x2}, {0x2, 0x6, 0x8, 0xffffffff}, {0x6, 0xb, 0xc, 0x7f6}, {0xff80, 0x7, 0xe5, 0x4}, {0x7, 0x7, 0x85, 0x5}, {0x6, 0x5, 0x0, 0x2}]}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) timerfd_create(0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/79, 0x4f) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r5, 0x0, 0x400000000000009, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 3.36828859s ago: executing program 5 (id=2673): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (fail_nth: 6) 2.572808504s ago: executing program 5 (id=2674): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fb, 0xfff, 0x34324241, 0x3, 0xa, [{0x8, 0x3}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x7, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="202336000000360583efb930f0187ff0478fa22a61a54607b71ea9e43d359c479ca3000000001fef7c7b08fc"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 2.492074896s ago: executing program 6 (id=2675): preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x7, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x400000, 0x0}) 2.043023418s ago: executing program 6 (id=2676): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$kcm(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x21, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) (fail_nth: 6) 1.144684637s ago: executing program 6 (id=2677): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000108c0d020140000102050109021200010160"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000f40)={0x24, &(0x7f0000000d80)={0x0, 0x2, 0x2, {0x2, 0x7}}, &(0x7f0000000180)=ANY=[], 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000940)="6094dab32cc198ebd03729333f01ce69bf1fd413d8593debcfde71dbdf720522328f73660fe4f3d2864d78d036baf570fc0162783eb7acd67beb4400ff3fdd3329c5e7871b63d5dfcd2dbdab4130c6ccf14d13f3792fc40fb325ba28f366bd061934091d33a73c233ec5acbf1b5ddb1f3e4785eea96d9239c4231cb7836ddf044e004feb49f992c76a6ab6989ded2c7aeeb088a3826521a960deafef5b7e623cf4f31bed90aaf90f6a0ce4a334343603cd071419325d9b39305d1059ece509e563383db6de4a7773ff433fab1fa8362a664bf9653d", 0xd5, r6) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="000fc2000000c22382487eb06d204f06103719f9d349dc32f9b80c1eb7251c2768597aaaa54c91548640b41dce6e9390d18a5dd6c1065e95614373f3562610edea64792236ee98f604f761e268458b6aafbcdce2584ffcd4319b72eea5bc8a3e1d18600875627cbc38377223ef3c98890ef7b1feb567e942ebb9a0695198f20f874a96edda3eb3757b3a81aeba3777f2c988f98b8a9a2b1297f2be8415236a96f730c37d50de8844319f60a062c1ecf530de16327ea20cc7e97ae6e318db5f5f8f4146c37957bf3d"], &(0x7f0000000ac0)=ANY=[@ANYBLOB="0003b6000000b6031deff1d61d8d7a083acd6fe5151ee9332cf747a0214677139089c8455adf54d4c499cf95b775f742f337edbc0ac3d567ee7cd5f3c87191cd89fd2771134686f6eef5d0dfba67b30bff8878312d0fc63fb042eed09909d7d8b3796a4e918f3f89d534e0de6b872fe3ffcf8cbfe901ded40c051c466b92de036b1a08e2f30170cddb3251d9c04593f1f3417f01db776e39278f71c77b93544f551e0a65bb34a07cc730229fa317c7872650cc2042c66c209bef0e8eb21982"], &(0x7f0000000640)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x5}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x8, 0x1, {0x22, 0x1af}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x20, 0x11, 0xa4, "5ba5eeff9a93767276e1834307a6c006d5aaee9255de2ece7855499a75c937f99b6e016aa77a79c54b7c757eea82846b79d1a540deb429b23b129308c5e960b93261831275617646d23d2f3f3c3fa3ad9d8efe53c9b3b038ec138cd503b2940a97ad4323d5df639c65582f1dc60771ed42fe6ac39dfcf9e5f290d5c54f21e5e4d3e822eabc7af3b94a7fcf239fae060f63781d0fb4c0fe07014c7332ec2c6790e40ae867"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x1, 0x1b, "1936343897fc888fc1ff6fc4c7808be58f892ea0a8e175679d2c88"}, &(0x7f00000008c0)={0x20, 0x3, 0x1}}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r5, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x2b, 'pids'}, {0x2d, 'rdma'}]}, 0xc) lseek(r2, 0x851, 0x0) 1.132735918s ago: executing program 7 (id=2678): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}]}, 0x38}}, 0x0) (fail_nth: 6) 948.609019ms ago: executing program 0 (id=2679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000003980)={0x14, &(0x7f0000000880)={0x40, 0xb, 0x2, {0x2, 0x3}}, 0x0}, &(0x7f0000003c40)={0x44, &(0x7f00000039c0)={0x0, 0xb, 0x98, "efbe984c7aca19289de41db395ddde1e1de20a2dcd27d4a79c5142727e2237c5cd69feb00ae52e366b4e04085c9c8608d116678aa3ba7b7e722a8ce811bbc6fa1cfc2727cf02abb1543e1a7adc496fc5b6c44176cb7fcd78c8d229c1f771e959676301dadaf66618ef1673bcf9b73cfb26cef9b7595bf4a318de8c157cc61a06d7834afd8e2b4b68a3031ae623ea083efb4276dbc1a497fa"}, 0x0, &(0x7f0000003ac0)={0x0, 0x8, 0x1, 0xf8}, 0x0, 0x0, &(0x7f0000003b80)={0x20, 0x83, 0x2, "1ed7"}, &(0x7f0000003bc0)={0x20, 0x84, 0x1, "83"}, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=2680): setfsuid(0xee01) r0 = userfaultfd(0x80001) r1 = socket(0x10, 0x803, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'ip6gre0\x00'}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) setresuid(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) kernel console output (not intermixed with test programs): 47][T15042] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.858198][T15042] ? __fget_files+0x2a/0x420 [ 1081.858214][T15042] ? __fget_files+0x3a8/0x420 [ 1081.858238][T15042] __x64_sys_sendmsg+0x1b7/0x290 [ 1081.858265][T15042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1081.858305][T15042] do_syscall_64+0x17b/0x530 [ 1081.858321][T15042] ? irqentry_exit+0x10f/0x8f0 [ 1081.858336][T15042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.858353][T15042] ? clear_bhb_loop+0x40/0x90 [ 1081.858381][T15042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.858398][T15042] RIP: 0033:0x7f820af3e0d9 [ 1081.858415][T15042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.858429][T15042] RSP: 002b:00007f8209196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.858446][T15042] RAX: ffffffffffffffda RBX: 00007f820b1c5fa0 RCX: 00007f820af3e0d9 [ 1081.858459][T15042] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1081.858470][T15042] RBP: 00007f8209196090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.858480][T15042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.858490][T15042] R13: 00007f820b1c6038 R14: 00007f820b1c5fa0 R15: 00007ffc8e9ad2b8 [ 1081.858515][T15042] [ 1082.078361][T15042] socket: no more sockets [ 1082.078448][T15042] rdma_rxe: Failed to create IPv4 UDP tunnel [ 1082.840369][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.943025][T15052] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.023279][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.225209][T15052] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.362261][T15052] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.495353][T15052] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.719052][ T8183] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.735886][ T8188] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.736110][ T8188] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.736140][ T8188] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.927589][ T10] usb 7-1: USB disconnect, device number 64 [ 1084.226302][T15061] FAULT_INJECTION: forcing a failure. [ 1084.226302][T15061] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.226331][T15061] CPU: 0 UID: 0 PID: 15061 Comm: syz.5.2410 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1084.226354][T15061] Tainted: [L]=SOFTLOCKUP [ 1084.226360][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1084.226370][T15061] Call Trace: [ 1084.226377][T15061] [ 1084.226385][T15061] dump_stack_lvl+0xe8/0x150 [ 1084.226413][T15061] should_fail_ex+0x467/0x600 [ 1084.226439][T15061] should_failslab+0xa8/0x100 [ 1084.226455][T15061] ? prepare_creds+0x30/0x820 [ 1084.226497][T15061] kmem_cache_alloc_noprof+0x9e/0x680 [ 1084.226521][T15061] ? prepare_creds+0x30/0x820 [ 1084.226549][T15061] prepare_creds+0x30/0x820 [ 1084.226576][T15061] join_session_keyring+0x1b/0x440 [ 1084.226600][T15061] lookup_user_key+0x4e6/0x1150 [ 1084.226625][T15061] ? __pfx_lookup_user_key+0x10/0x10 [ 1084.226649][T15061] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1084.226682][T15061] __se_sys_add_key+0x315/0x420 [ 1084.226701][T15061] ? __pfx___se_sys_add_key+0x10/0x10 [ 1084.226723][T15061] ? __x64_sys_add_key+0x20/0xc0 [ 1084.226741][T15061] do_syscall_64+0x17b/0x530 [ 1084.226759][T15061] ? irqentry_exit+0x10f/0x8f0 [ 1084.226774][T15061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.226791][T15061] ? clear_bhb_loop+0x40/0x90 [ 1084.226811][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.226828][T15061] RIP: 0033:0x7f820af3e0d9 [ 1084.226843][T15061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.226858][T15061] RSP: 002b:00007f8209196028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1084.226883][T15061] RAX: ffffffffffffffda RBX: 00007f820b1c5fa0 RCX: 00007f820af3e0d9 [ 1084.226895][T15061] RDX: 0000200000000600 RSI: 0000200000000500 RDI: 0000200000000400 [ 1084.226907][T15061] RBP: 00007f8209196090 R08: fffffffffffffffd R09: 0000000000000000 [ 1084.226925][T15061] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1084.226934][T15061] R13: 00007f820b1c6038 R14: 00007f820b1c5fa0 R15: 00007ffc8e9ad2b8 [ 1084.226959][T15061] [ 1085.253797][ T10] usb 8-1: USB disconnect, device number 9 [ 1085.696064][T15075] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2414'. [ 1086.631096][ T9515] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1086.878178][ T9515] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1086.878204][ T9515] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.032067][ T199] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1087.150044][ T9515] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1087.186780][ T199] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1087.186804][ T199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.555691][ T199] cdc_acm 6-1:1.0: ttyACM1: USB ACM device [ 1087.648514][T15082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.663025][T15082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.778494][T15086] fuse: Unknown parameter '0x00000000000000050xffffffffffffffff' [ 1088.200749][T15085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.201394][T15085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.691413][T15091] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2420'. [ 1088.691437][T15091] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1088.720337][ T8171] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.780899][ T199] usb 8-1: USB disconnect, device number 10 [ 1089.524793][ T199] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1089.548873][T15104] netlink: 'syz.0.2424': attribute type 4 has an invalid length. [ 1089.548891][T15104] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1089.690729][ T199] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1089.690754][ T199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.785001][T15104] .`: renamed from bond0 (while UP) [ 1089.876619][ T9515] usb 6-1: USB disconnect, device number 56 [ 1089.991487][ T199] cdc_acm 7-1:1.0: ttyACM2: USB ACM device [ 1090.526541][T15099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.526964][T15099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.980901][ T199] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1091.138188][ T199] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1091.138213][ T199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.384146][ T199] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1091.916871][T15121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.935587][T15121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.223148][ T199] usb 7-1: USB disconnect, device number 65 [ 1092.811153][ T199] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1092.925669][T15137] tap0: tun_chr_ioctl cmd 1074025675 [ 1092.925688][T15137] tap0: persist enabled [ 1092.974714][ T199] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1092.974739][ T199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.457202][ T199] cdc_acm 7-1:1.0: ttyACM1: USB ACM device [ 1093.856067][ T10] usb 6-1: USB disconnect, device number 57 [ 1094.024844][T15143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.050961][T15143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.920771][ T5810] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1095.074140][ T5810] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1095.074164][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.101350][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1095.250727][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1095.264007][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1095.278612][ T10] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.303603][ T10] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 1095.303630][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.303647][ T10] usb 6-1: Product: syz [ 1095.303659][ T10] usb 6-1: Manufacturer: syz [ 1095.303672][ T10] usb 6-1: SerialNumber: syz [ 1095.311057][ T5810] cdc_acm 8-1:1.0: ttyACM2: USB ACM device [ 1095.476072][ T9515] usb 7-1: USB disconnect, device number 66 [ 1095.925703][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.943758][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.347018][ T10] usb 6-1: USB disconnect, device number 58 [ 1097.626935][ T5810] usb 8-1: USB disconnect, device number 11 [ 1097.664270][ T10] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1097.816649][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1097.816673][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.099550][ T10] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1098.484262][ T5810] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1098.647986][ T5810] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1098.648017][ T5810] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1098.648044][ T5810] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1098.648125][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.723680][ T5810] usb 8-1: config 0 descriptor?? [ 1098.739250][T15193] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1098.792174][T15184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.799612][T15184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.825278][ T5810] usbhid 8-1:0.0: fixing wrong optional hid class descriptors count [ 1099.343657][ T5810] usbhid 8-1:0.0: can't add hid device: -71 [ 1099.343798][ T5810] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1099.404642][ T5810] usb 8-1: USB disconnect, device number 12 [ 1100.492459][ T5810] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1100.640973][ T5810] usb 8-1: Using ep0 maxpacket: 16 [ 1100.650399][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.650431][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.650448][ T5810] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1100.650532][ T5810] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1100.650551][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.827734][ T5810] usb 8-1: config 0 descriptor?? [ 1101.432001][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1101.524961][T15217] FAULT_INJECTION: forcing a failure. [ 1101.524961][T15217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1101.524992][T15217] CPU: 0 UID: 0 PID: 15217 Comm: syz.0.2462 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1101.525017][T15217] Tainted: [L]=SOFTLOCKUP [ 1101.525024][T15217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.525034][T15217] Call Trace: [ 1101.525047][T15217] [ 1101.525054][T15217] dump_stack_lvl+0xe8/0x150 [ 1101.525081][T15217] should_fail_ex+0x467/0x600 [ 1101.525106][T15217] _copy_from_user+0x2d/0xb0 [ 1101.525122][T15217] blk_trace_ioctl+0x1ce/0x910 [ 1101.525144][T15217] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1101.525165][T15217] ? kasan_quarantine_put+0xbb/0x1f0 [ 1101.525195][T15217] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1101.525231][T15217] ? do_vfs_ioctl+0x1184/0x1550 [ 1101.525255][T15217] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1101.525289][T15217] ? lockdep_hardirqs_on+0x7a/0x110 [ 1101.525319][T15217] blkdev_ioctl+0x4c4/0x750 [ 1101.525368][T15217] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1101.525384][T15217] ? __fget_files+0x3a8/0x420 [ 1101.525400][T15217] ? __fget_files+0x2a/0x420 [ 1101.525418][T15217] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1101.525445][T15217] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1101.525462][T15217] __se_sys_ioctl+0xff/0x170 [ 1101.525485][T15217] do_syscall_64+0x17b/0x530 [ 1101.525501][T15217] ? irqentry_exit+0x10f/0x8f0 [ 1101.525517][T15217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.525533][T15217] ? clear_bhb_loop+0x40/0x90 [ 1101.525553][T15217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.525570][T15217] RIP: 0033:0x7f49c90fe0d9 [ 1101.525585][T15217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.525599][T15217] RSP: 002b:00007f49c7356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.525616][T15217] RAX: ffffffffffffffda RBX: 00007f49c9385fa0 RCX: 00007f49c90fe0d9 [ 1101.525629][T15217] RDX: 0000200000000140 RSI: 00000000c0c0128e RDI: 0000000000000003 [ 1101.525640][T15217] RBP: 00007f49c7356090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.525650][T15217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.525659][T15217] R13: 00007f49c9386038 R14: 00007f49c9385fa0 R15: 00007ffd36598c48 [ 1101.525683][T15217] [ 1101.601049][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1101.603536][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.603556][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1101.603602][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1101.863252][ T10] usb 6-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1101.863277][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.863340][ T10] usb 6-1: Product: syz [ 1101.863352][ T10] usb 6-1: Manufacturer: syz [ 1101.863363][ T10] usb 6-1: SerialNumber: syz [ 1102.222310][ T10] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1102.222757][ T10] usb 6-1: 0:2 : does not exist [ 1102.654767][ T10] usb 6-1: USB disconnect, device number 59 [ 1102.835067][T15222] FAULT_INJECTION: forcing a failure. [ 1102.835067][T15222] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.835097][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.0.2464 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1102.835121][T15222] Tainted: [L]=SOFTLOCKUP [ 1102.835127][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.835141][T15222] Call Trace: [ 1102.835147][T15222] [ 1102.835155][T15222] dump_stack_lvl+0xe8/0x150 [ 1102.835183][T15222] should_fail_ex+0x467/0x600 [ 1102.835210][T15222] should_failslab+0xa8/0x100 [ 1102.835225][T15222] ? alloc_pid+0x1ae/0x1310 [ 1102.835247][T15222] kmem_cache_alloc_noprof+0x9e/0x680 [ 1102.835271][T15222] ? alloc_pid+0x1ae/0x1310 [ 1102.835296][T15222] alloc_pid+0x1ae/0x1310 [ 1102.835319][T15222] ? __lock_acquire+0x6df/0x2e40 [ 1102.835336][T15222] ? __pfx_alloc_pid+0x10/0x10 [ 1102.835379][T15222] ? __asan_memcpy+0x40/0x70 [ 1102.835401][T15222] ? copy_thread+0x72a/0x970 [ 1102.835439][T15222] copy_process+0x2129/0x43f0 [ 1102.835463][T15222] ? copy_process+0xd3c/0x43f0 [ 1102.835494][T15222] ? __pfx_copy_process+0x10/0x10 [ 1102.835520][T15222] vhost_task_create+0x1f9/0x380 [ 1102.835543][T15222] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1102.835561][T15222] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1102.835580][T15222] ? __pfx_vhost_task_create+0x10/0x10 [ 1102.835609][T15222] ? __pfx_vhost_task_fn+0x10/0x10 [ 1102.835635][T15222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1102.835652][T15222] ? lockdep_hardirqs_on+0x7a/0x110 [ 1102.835667][T15222] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1102.835684][T15222] ? mutex_lock_nested+0x152/0x1d0 [ 1102.835704][T15222] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 1102.835727][T15222] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1102.835748][T15222] kvm_arch_vcpu_ioctl_run+0x7c/0x1920 [ 1102.835785][T15222] kvm_vcpu_ioctl+0xa64/0xfe0 [ 1102.835816][T15222] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1102.835842][T15222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1102.835858][T15222] ? lockdep_hardirqs_on+0x7a/0x110 [ 1102.835886][T15222] ? __fget_files+0x2a/0x420 [ 1102.835906][T15222] ? __fget_files+0x3a8/0x420 [ 1102.835922][T15222] ? __fget_files+0x2a/0x420 [ 1102.835941][T15222] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1102.835967][T15222] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1102.835993][T15222] __se_sys_ioctl+0xff/0x170 [ 1102.836017][T15222] do_syscall_64+0x17b/0x530 [ 1102.836033][T15222] ? irqentry_exit+0x10f/0x8f0 [ 1102.836048][T15222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.836065][T15222] ? clear_bhb_loop+0x40/0x90 [ 1102.836085][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.836101][T15222] RIP: 0033:0x7f49c90fe0d9 [ 1102.836116][T15222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.836131][T15222] RSP: 002b:00007f49c7356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.836148][T15222] RAX: ffffffffffffffda RBX: 00007f49c9385fa0 RCX: 00007f49c90fe0d9 [ 1102.836161][T15222] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1102.836171][T15222] RBP: 00007f49c7356090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.836181][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.836191][T15222] R13: 00007f49c9386038 R14: 00007f49c9385fa0 R15: 00007ffd36598c48 [ 1102.836216][T15222] [ 1103.490945][ T5810] usbhid 8-1:0.0: can't add hid device: -71 [ 1103.491408][ T5810] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1103.739243][ T5810] usb 8-1: USB disconnect, device number 13 [ 1104.037037][T13698] udevd[13698]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.290763][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1105.455748][T15250] 9p: Bad value for 'wfdno' [ 1105.472447][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1105.472471][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.515811][ T5810] usb 7-1: USB disconnect, device number 67 [ 1105.868779][ T10] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1106.406235][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.406996][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.522665][ T9515] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1106.677058][ T9515] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.677121][ T9515] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1106.702797][ T9515] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1106.702822][ T9515] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1106.702837][ T9515] usb 8-1: SerialNumber: syz [ 1106.860742][T11583] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1107.006665][T11583] usb 7-1: device descriptor read/64, error -71 [ 1107.268129][ T9515] usb 8-1: 0:2 : does not exist [ 1107.310873][T11583] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1107.480933][T11583] usb 7-1: device descriptor read/64, error -71 [ 1107.591724][T11583] usb usb7-port1: attempt power cycle [ 1107.746358][ T9515] usb 8-1: USB disconnect, device number 14 [ 1107.983196][T11583] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1108.015150][T11583] usb 7-1: device descriptor read/8, error -71 [ 1108.126816][T13698] udevd[13698]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.251146][T11583] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1108.272630][T11583] usb 7-1: device descriptor read/8, error -71 [ 1108.381159][T11583] usb usb7-port1: unable to enumerate USB device [ 1109.069880][T15270] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1110.442747][T11583] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1110.464159][T15286] FAULT_INJECTION: forcing a failure. [ 1110.464159][T15286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.464189][T15286] CPU: 0 UID: 0 PID: 15286 Comm: syz.6.2484 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1110.464213][T15286] Tainted: [L]=SOFTLOCKUP [ 1110.464219][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.464233][T15286] Call Trace: [ 1110.464239][T15286] [ 1110.464247][T15286] dump_stack_lvl+0xe8/0x150 [ 1110.464274][T15286] should_fail_ex+0x467/0x600 [ 1110.464300][T15286] strncpy_from_user+0x36/0x2c0 [ 1110.464323][T15286] do_getname+0x77/0x250 [ 1110.464351][T15286] user_path_at+0x2a/0x160 [ 1110.464372][T15286] __se_sys_mount+0x2dc/0x420 [ 1110.464392][T15286] ? __pfx___se_sys_mount+0x10/0x10 [ 1110.464412][T15286] ? __x64_sys_mount+0x20/0xc0 [ 1110.464431][T15286] do_syscall_64+0x17b/0x530 [ 1110.464448][T15286] ? irqentry_exit+0x10f/0x8f0 [ 1110.464463][T15286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.464480][T15286] ? clear_bhb_loop+0x40/0x90 [ 1110.464501][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.464517][T15286] RIP: 0033:0x7f58a93fe0d9 [ 1110.464532][T15286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.464547][T15286] RSP: 002b:00007f58a7656028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1110.464579][T15286] RAX: ffffffffffffffda RBX: 00007f58a9685fa0 RCX: 00007f58a93fe0d9 [ 1110.464592][T15286] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 1110.464603][T15286] RBP: 00007f58a7656090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.464614][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.464624][T15286] R13: 00007f58a9686038 R14: 00007f58a9685fa0 R15: 00007fff89207808 [ 1110.464649][T15286] [ 1111.247925][T15295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.376710][T15298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.857597][T15287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1112.375819][T15300] FAULT_INJECTION: forcing a failure. [ 1112.375819][T15300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.375849][T15300] CPU: 0 UID: 0 PID: 15300 Comm: syz.0.2488 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1112.375872][T15300] Tainted: [L]=SOFTLOCKUP [ 1112.375878][T15300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1112.375888][T15300] Call Trace: [ 1112.375895][T15300] [ 1112.375902][T15300] dump_stack_lvl+0xe8/0x150 [ 1112.375939][T15300] should_fail_ex+0x467/0x600 [ 1112.375965][T15300] _copy_from_iter+0x1d3/0x1660 [ 1112.375994][T15300] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1112.376019][T15300] ? __pfx__copy_from_iter+0x10/0x10 [ 1112.376042][T15300] ? __alloc_skb+0x276/0x7a0 [ 1112.376063][T15300] ? __alloc_skb+0x276/0x7a0 [ 1112.376088][T15300] ? netlink_sendmsg+0x650/0xb40 [ 1112.376114][T15300] ? skb_put+0x112/0x210 [ 1112.376138][T15300] netlink_sendmsg+0x6c0/0xb40 [ 1112.376170][T15300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.376198][T15300] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1112.376226][T15300] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1112.376252][T15300] ? arch_stack_walk+0xfb/0x150 [ 1112.376280][T15300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.376304][T15300] sock_sendmsg_nosec+0x13a/0x180 [ 1112.376326][T15300] ____sys_sendmsg+0x565/0x870 [ 1112.376356][T15300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1112.376388][T15300] ? import_iovec+0x73/0xa0 [ 1112.376420][T15300] ___sys_sendmsg+0x2a5/0x360 [ 1112.376444][T15300] ? __lock_acquire+0x6df/0x2e40 [ 1112.376462][T15300] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.376511][T15300] ? __fget_files+0x2a/0x420 [ 1112.376527][T15300] ? __fget_files+0x3a8/0x420 [ 1112.376551][T15300] __x64_sys_sendmsg+0x1b7/0x290 [ 1112.376578][T15300] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1112.376616][T15300] do_syscall_64+0x17b/0x530 [ 1112.376633][T15300] ? irqentry_exit+0x10f/0x8f0 [ 1112.376649][T15300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.376665][T15300] ? clear_bhb_loop+0x40/0x90 [ 1112.376685][T15300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.376701][T15300] RIP: 0033:0x7f49c90fe0d9 [ 1112.376717][T15300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.376731][T15300] RSP: 002b:00007f49c7356028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1112.376748][T15300] RAX: ffffffffffffffda RBX: 00007f49c9385fa0 RCX: 00007f49c90fe0d9 [ 1112.376760][T15300] RDX: 0000000024004052 RSI: 0000200000000000 RDI: 0000000000000004 [ 1112.376771][T15300] RBP: 00007f49c7356090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.376781][T15300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.376790][T15300] R13: 00007f49c9386038 R14: 00007f49c9385fa0 R15: 00007ffd36598c48 [ 1112.376815][T15300] [ 1113.053430][ T5810] usb 6-1: USB disconnect, device number 60 [ 1113.110021][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2490'. [ 1113.144760][T15306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.309299][T15309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.338973][T15306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1113.486839][T15306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1113.655784][T15263] Bluetooth: hci3: unexpected subevent 0x10 length: 30 > 2 [ 1114.220358][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1114.220404][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1114.314626][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1114.314665][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1114.370981][ T5810] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1114.454015][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1114.454066][T15323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2497'. [ 1114.524032][ T5810] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1114.524056][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.775414][ T5810] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1115.260526][T15321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.263795][T15321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.318489][T15321] fuse: Unknown parameter '0x00000000000000050xffffffffffffffff' [ 1115.720742][ T5810] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1115.935607][ T5810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1115.935708][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.101331][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.125603][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.201064][ T5810] cdc_acm 6-1:1.0: ttyACM1: USB ACM device [ 1116.626149][ T9515] usb 7-1: USB disconnect, device number 72 [ 1116.780435][T15338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.816297][T15338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.261058][ T9515] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1117.412167][ T9515] usb 8-1: Using ep0 maxpacket: 32 [ 1117.414875][ T9515] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.414914][ T9515] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1117.414933][ T9515] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1117.414951][ T9515] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1117.418992][ T9515] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1117.419015][ T9515] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.419030][ T9515] usb 8-1: Product: syz [ 1117.419041][ T9515] usb 8-1: Manufacturer: syz [ 1117.419052][ T9515] usb 8-1: SerialNumber: syz [ 1117.560122][ T9515] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1117.570321][ T9515] imon 8-1:155.0: unable to initialize intf0, err -19 [ 1117.570339][ T9515] imon:imon_probe: failed to initialize context! [ 1117.570349][ T9515] imon 8-1:155.0: unable to register, err -19 [ 1118.378484][ T9515] usb 6-1: USB disconnect, device number 61 [ 1118.504142][T15373] FAULT_INJECTION: forcing a failure. [ 1118.504142][T15373] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.504173][T15373] CPU: 0 UID: 0 PID: 15373 Comm: syz.5.2511 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1118.504197][T15373] Tainted: [L]=SOFTLOCKUP [ 1118.504202][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1118.504213][T15373] Call Trace: [ 1118.504219][T15373] [ 1118.504227][T15373] dump_stack_lvl+0xe8/0x150 [ 1118.504251][T15373] should_fail_ex+0x467/0x600 [ 1118.504276][T15373] should_failslab+0xa8/0x100 [ 1118.504293][T15373] ? skb_clone+0x212/0x3a0 [ 1118.504318][T15373] kmem_cache_alloc_noprof+0x9e/0x680 [ 1118.504341][T15373] ? cap_capable+0x123/0x460 [ 1118.504358][T15373] ? skb_clone+0x212/0x3a0 [ 1118.504388][T15373] skb_clone+0x212/0x3a0 [ 1118.504411][T15373] ? nfnetlink_rcv+0x4b0/0x28d0 [ 1118.504444][T15373] nfnetlink_rcv+0x4e2/0x28d0 [ 1118.504479][T15373] ? rcu_is_watching+0x15/0xb0 [ 1118.504499][T15373] ? trace_sched_exit_tp+0x3a/0x130 [ 1118.504557][T15373] ? __schedule+0x171f/0x5530 [ 1118.504588][T15373] ? __resched_curr+0x23e/0x530 [ 1118.504606][T15373] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1118.504642][T15373] ? __pfx___schedule+0x10/0x10 [ 1118.504669][T15373] ? do_raw_spin_unlock+0xf5/0x210 [ 1118.504694][T15373] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1118.504728][T15373] ? preempt_schedule_thunk+0x16/0x40 [ 1118.504746][T15373] ? preempt_schedule_common+0x82/0xd0 [ 1118.504772][T15373] ? preempt_schedule_thunk+0x16/0x40 [ 1118.504791][T15373] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1118.504807][T15373] ? rcu_preempt_deferred_qs_irqrestore+0x98f/0xc10 [ 1118.504845][T15373] netlink_unicast+0x7f5/0x990 [ 1118.504876][T15373] netlink_sendmsg+0x813/0xb40 [ 1118.504908][T15373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1118.504938][T15373] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1118.504966][T15373] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1118.504990][T15373] ? arch_stack_walk+0xfb/0x150 [ 1118.505017][T15373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1118.505041][T15373] sock_sendmsg_nosec+0x13a/0x180 [ 1118.505061][T15373] ____sys_sendmsg+0x565/0x870 [ 1118.505091][T15373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1118.505121][T15373] ? import_iovec+0x73/0xa0 [ 1118.505148][T15373] ___sys_sendmsg+0x2a5/0x360 [ 1118.505171][T15373] ? __lock_acquire+0x6df/0x2e40 [ 1118.505189][T15373] ? __pfx____sys_sendmsg+0x10/0x10 [ 1118.505236][T15373] ? __fget_files+0x2a/0x420 [ 1118.505252][T15373] ? __fget_files+0x3a8/0x420 [ 1118.505275][T15373] __x64_sys_sendmsg+0x1b7/0x290 [ 1118.505301][T15373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1118.505338][T15373] do_syscall_64+0x17b/0x530 [ 1118.505354][T15373] ? irqentry_exit+0x10f/0x8f0 [ 1118.505368][T15373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.505384][T15373] ? clear_bhb_loop+0x40/0x90 [ 1118.505403][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.505419][T15373] RIP: 0033:0x7f820af3e0d9 [ 1118.505440][T15373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.505462][T15373] RSP: 002b:00007f8209196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1118.505479][T15373] RAX: ffffffffffffffda RBX: 00007f820b1c5fa0 RCX: 00007f820af3e0d9 [ 1118.505491][T15373] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1118.505502][T15373] RBP: 00007f8209196090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.505512][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.505522][T15373] R13: 00007f820b1c6038 R14: 00007f820b1c5fa0 R15: 00007ffc8e9ad2b8 [ 1118.505546][T15373] [ 1118.512068][ T199] usb 8-1: USB disconnect, device number 16 [ 1118.589868][ T5810] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1119.040473][T15375] syz.5.2512: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1119.040533][T15375] CPU: 0 UID: 0 PID: 15375 Comm: syz.5.2512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1119.040556][T15375] Tainted: [L]=SOFTLOCKUP [ 1119.040562][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1119.040577][T15375] Call Trace: [ 1119.040583][T15375] [ 1119.040590][T15375] dump_stack_lvl+0xe8/0x150 [ 1119.040617][T15375] warn_alloc+0x24c/0x270 [ 1119.040643][T15375] ? stack_depot_save_flags+0x33/0x800 [ 1119.040669][T15375] ? __pfx_warn_alloc+0x10/0x10 [ 1119.040693][T15375] ? kasan_save_track+0x4f/0x80 [ 1119.040717][T15375] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 1119.040742][T15375] ? xskq_create+0x56/0x170 [ 1119.040769][T15375] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1119.040793][T15375] ? do_syscall_64+0x17b/0x530 [ 1119.040809][T15375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.040834][T15375] __vmalloc_node_range_noprof+0x130/0x1560 [ 1119.040879][T15375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1119.040907][T15375] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 1119.040935][T15375] vmalloc_user_noprof+0xad/0xe0 [ 1119.040958][T15375] ? xskq_create+0xbf/0x170 [ 1119.040984][T15375] xskq_create+0xbf/0x170 [ 1119.041012][T15375] xsk_init_queue+0x8a/0xe0 [ 1119.041039][T15375] xsk_setsockopt+0x52a/0x960 [ 1119.041065][T15375] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1119.041094][T15375] ? __fget_files+0x2a/0x420 [ 1119.041113][T15375] ? __fget_files+0x2a/0x420 [ 1119.041130][T15375] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1119.041153][T15375] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1119.041178][T15375] do_sock_setsockopt+0x17c/0x1b0 [ 1119.041206][T15375] __x64_sys_setsockopt+0x143/0x1b0 [ 1119.041234][T15375] do_syscall_64+0x17b/0x530 [ 1119.041250][T15375] ? irqentry_exit+0x10f/0x8f0 [ 1119.041266][T15375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.041283][T15375] ? clear_bhb_loop+0x40/0x90 [ 1119.041303][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.041319][T15375] RIP: 0033:0x7f820af3e0d9 [ 1119.041335][T15375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.041356][T15375] RSP: 002b:00007f8209196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1119.041372][T15375] RAX: ffffffffffffffda RBX: 00007f820b1c5fa0 RCX: 00007f820af3e0d9 [ 1119.041385][T15375] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1119.041395][T15375] RBP: 00007f820afd5024 R08: 0000000000000004 R09: 0000000000000000 [ 1119.041406][T15375] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.041416][T15375] R13: 00007f820b1c6038 R14: 00007f820b1c5fa0 R15: 00007ffc8e9ad2b8 [ 1119.041442][T15375] [ 1119.198111][T15375] Mem-Info: [ 1119.198125][T15375] active_anon:7538 inactive_anon:7258 isolated_anon:0 [ 1119.198125][T15375] active_file:38 inactive_file:45164 isolated_file:0 [ 1119.198125][T15375] unevictable:768 dirty:96 writeback:0 [ 1119.198125][T15375] slab_reclaimable:12404 slab_unreclaimable:105335 [ 1119.198125][T15375] mapped:25335 shmem:8555 pagetables:1705 [ 1119.198125][T15375] sec_pagetables:0 bounce:0 [ 1119.198125][T15375] kernel_misc_reclaimable:0 [ 1119.198125][T15375] free:1303558 free_pcp:2656 free_cma:0 [ 1119.198172][T15375] Node 0 active_anon:30152kB inactive_anon:29032kB active_file:152kB inactive_file:180436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101312kB dirty:384kB writeback:0kB shmem:32684kB kernel_stack:13952kB pagetables:6664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1119.248973][T15375] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1119.249019][T15375] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1119.303954][T15375] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 1119.303990][T15375] Node 0 DMA32 free:1268296kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30152kB inactive_anon:29032kB active_file:152kB inactive_file:180436kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:10776kB local_pcp:10776kB free_cma:0kB [ 1119.304042][T15375] lowmem_reserve[]: 0 [ 1119.455276][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.455305][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.455335][ T5810] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1119.455353][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.618195][T15375] 0 0 0 0 [ 1119.618231][T15375] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1119.618284][T15375] lowmem_reserve[]: 0 0 0 0 0 [ 1119.618314][T15375] Node 1 Normal free:3930384kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:220kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1119.618368][T15375] lowmem_reserve[]: 0 0 0 0 0 [ 1119.618397][T15375] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1119.618521][T15375] Node 0 DMA32: 1492*4kB (UME) 329*8kB (UM) 120*16kB (UME) 331*32kB (UME) 541*64kB (UME) 313*128kB (UME) 180*256kB (UME) 44*512kB (UME) 10*1024kB (M) 6*2048kB (UM) 264*4096kB (UM) = 1268280kB [ 1119.618658][T15375] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1119.618745][T15375] Node 1 Normal: 2*4kB (UM) 7*8kB (UM) 7*16kB (UM) 9*32kB (UM) 9*64kB (UM) 4*128kB (UM) 1*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 958*4096kB (M) = 3930384kB [ 1119.618879][T15375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.618894][T15375] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.618909][T15375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1119.618924][T15375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1119.618938][T15375] 53753 total pagecache pages [ 1119.618945][T15375] 0 pages in swap cache [ 1119.618952][T15375] Free swap = 124996kB [ 1119.618959][T15375] Total swap = 124996kB [ 1119.618966][T15375] 2097051 pages RAM [ 1119.618973][T15375] 0 pages HighMem/MovableOnly [ 1119.618979][T15375] 427780 pages reserved [ 1119.618986][T15375] 0 pages cma reserved [ 1119.631245][ T5810] usb 7-1: config 0 descriptor?? [ 1120.513636][ T5810] usbhid 7-1:0.0: can't add hid device: -71 [ 1120.513737][ T5810] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1120.544163][ T5810] usb 7-1: USB disconnect, device number 73 [ 1120.800911][ T199] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1120.954437][ T199] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1120.954472][ T199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.224071][ T199] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1121.698284][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.699956][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.730987][T15384] fuse: Unknown parameter '0x00000000000000050xffffffffffffffff' [ 1121.770729][ T199] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1121.907660][ T9515] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1122.030981][ T199] usb 7-1: Using ep0 maxpacket: 16 [ 1122.033895][ T199] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1122.035629][ T199] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.035690][ T199] usb 7-1: config 255 has 1 interface, different from the descriptor's value: 4 [ 1122.038684][ T199] usb 7-1: New USB device found, idVendor=2899, idProduct=012c, bcdDevice=d3.b7 [ 1122.038706][ T199] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.038722][ T199] usb 7-1: Product: syz [ 1122.038733][ T199] usb 7-1: Manufacturer: syz [ 1122.038744][ T199] usb 7-1: SerialNumber: syz [ 1122.081541][ T9515] usb 6-1: Using ep0 maxpacket: 8 [ 1122.109659][ T9515] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1122.109683][ T9515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.226750][ T9515] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1122.226852][ T9515] pvrusb2: ********** [ 1122.226858][ T9515] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1122.226868][ T9515] pvrusb2: Important functionality might not be entirely working. [ 1122.226875][ T9515] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1122.226884][ T9515] pvrusb2: ********** [ 1122.545040][ T2388] pvrusb2: Invalid write control endpoint [ 1122.617638][ T9515] usb 6-1: USB disconnect, device number 62 [ 1122.692327][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2517'. [ 1122.732068][T15391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.737498][T15391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.818086][ T199] gspca_main: spca500-2.14.0 probing 2899:012c [ 1123.039077][ T199] usb 7-1: USB disconnect, device number 74 [ 1123.784751][T15398] random: crng reseeded on system resumption [ 1125.935403][ T9] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1126.103532][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1126.117518][ T9] usb 7-1: config 1 has an invalid interface number: 17 but max is 2 [ 1126.117540][ T9] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1126.117554][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1126.117571][ T9] usb 7-1: config 1 has no interface number 1 [ 1126.117604][ T9] usb 7-1: too many endpoints for config 1 interface 17 altsetting 131: 250, using maximum allowed: 30 [ 1126.117682][ T9] usb 7-1: config 1 interface 17 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 250 [ 1126.117704][ T9] usb 7-1: config 1 interface 17 has no altsetting 0 [ 1126.120205][ T9] usb 7-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 1126.120233][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.120249][ T9] usb 7-1: Product: syz [ 1126.120260][ T9] usb 7-1: Manufacturer: syz [ 1126.120312][ T9] usb 7-1: SerialNumber: syz [ 1127.112743][T15407] random: crng reseeded on system resumption [ 1127.189829][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2525'. [ 1128.403118][T12954] Bluetooth: hci1: command 0x0406 tx timeout [ 1128.840369][ T10] usb 8-1: USB disconnect, device number 17 [ 1129.049338][ T2388] pvrusb2: Invalid write control endpoint [ 1129.049354][ T2388] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1129.049387][ T2388] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1129.049394][ T2388] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1129.049423][ T2388] pvrusb2: Device being rendered inoperable [ 1129.148769][ T2388] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1129.148871][ T2388] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1129.625585][T15424] FAULT_INJECTION: forcing a failure. [ 1129.625585][T15424] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.625625][T15424] CPU: 0 UID: 0 PID: 15424 Comm: syz.0.2530 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1129.625648][T15424] Tainted: [L]=SOFTLOCKUP [ 1129.625654][T15424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1129.625665][T15424] Call Trace: [ 1129.625672][T15424] [ 1129.625679][T15424] dump_stack_lvl+0xe8/0x150 [ 1129.625708][T15424] should_fail_ex+0x467/0x600 [ 1129.625735][T15424] should_failslab+0xa8/0x100 [ 1129.625752][T15424] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1129.625777][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1129.625798][T15424] ? __alloc_skb+0x1d7/0x7a0 [ 1129.625824][T15424] __alloc_skb+0x1d7/0x7a0 [ 1129.625848][T15424] mgmt_cmd_complete+0x48/0x5e0 [ 1129.625875][T15424] ? hci_remote_oob_data_clear+0x175/0x190 [ 1129.625929][T15424] remove_remote_oob_data+0x1e3/0x330 [ 1129.625973][T15424] ? __pfx_remove_remote_oob_data+0x10/0x10 [ 1129.625992][T15424] ? rt_read_unlock+0x17f/0x340 [ 1129.626023][T15424] hci_mgmt_cmd+0xa2c/0xfc0 [ 1129.626048][T15424] ? mutex_lock_nested+0x152/0x1d0 [ 1129.626074][T15424] hci_sock_sendmsg+0x6e1/0xf50 [ 1129.626100][T15424] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1129.626130][T15424] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1129.626150][T15424] sock_sendmsg_nosec+0x13a/0x180 [ 1129.626172][T15424] sock_write_iter+0x2e4/0x3f0 [ 1129.626191][T15424] ? __pfx_sock_write_iter+0x10/0x10 [ 1129.626215][T15424] ? bpf_lsm_file_permission+0x9/0x20 [ 1129.626239][T15424] ? security_file_permission+0x68/0x220 [ 1129.626265][T15424] vfs_write+0x61e/0xbb0 [ 1129.626290][T15424] ? __pfx_vfs_write+0x10/0x10 [ 1129.626317][T15424] ? __fget_files+0x2a/0x420 [ 1129.626340][T15424] ksys_write+0x156/0x270 [ 1129.626361][T15424] ? __pfx_ksys_write+0x10/0x10 [ 1129.626388][T15424] do_syscall_64+0x17b/0x530 [ 1129.626404][T15424] ? irqentry_exit+0x10f/0x8f0 [ 1129.626419][T15424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.626436][T15424] ? clear_bhb_loop+0x40/0x90 [ 1129.626456][T15424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.626472][T15424] RIP: 0033:0x7f49c90fe0d9 [ 1129.626488][T15424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.626501][T15424] RSP: 002b:00007f49c7356028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.626519][T15424] RAX: ffffffffffffffda RBX: 00007f49c9385fa0 RCX: 00007f49c90fe0d9 [ 1129.626531][T15424] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 1129.626542][T15424] RBP: 00007f49c7356090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.626551][T15424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.626561][T15424] R13: 00007f49c9386038 R14: 00007f49c9385fa0 R15: 00007ffd36598c48 [ 1129.626586][T15424] [ 1130.129838][ T2388] pvrusb2: Attached sub-driver cx25840 [ 1130.136630][ T2388] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1130.136698][ T2388] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1130.229769][ T9] usb 7-1: USB disconnect, device number 75 [ 1130.819657][T13698] udevd[13698]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.628713][T15452] FAULT_INJECTION: forcing a failure. [ 1132.628713][T15452] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.628744][T15452] CPU: 0 UID: 0 PID: 15452 Comm: syz.6.2536 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1132.628767][T15452] Tainted: [L]=SOFTLOCKUP [ 1132.628773][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1132.628783][T15452] Call Trace: [ 1132.628790][T15452] [ 1132.628797][T15452] dump_stack_lvl+0xe8/0x150 [ 1132.628823][T15452] should_fail_ex+0x467/0x600 [ 1132.628848][T15452] should_failslab+0xa8/0x100 [ 1132.628866][T15452] __kmalloc_noprof+0xfb/0x790 [ 1132.628891][T15452] ? hash_ip4_add+0xb44/0x1e30 [ 1132.628912][T15452] ? hash_ip4_add+0xb44/0x1e30 [ 1132.628942][T15452] hash_ip4_add+0xb44/0x1e30 [ 1132.628969][T15452] ? ip_set_get_ipaddr4+0x177/0x2c0 [ 1132.628995][T15452] ? hash_ip4_add+0x7c/0x1e30 [ 1132.629026][T15452] hash_ip4_uadt+0x664/0x860 [ 1132.629050][T15452] ? __pfx_hash_ip4_add+0x10/0x10 [ 1132.629069][T15452] ? __pfx_hash_ip4_uadt+0x10/0x10 [ 1132.629104][T15452] call_ad+0x2ee/0xa30 [ 1132.629135][T15452] ? __pfx_call_ad+0x10/0x10 [ 1132.629170][T15452] ? __nla_parse+0x40/0x60 [ 1132.629197][T15452] ip_set_ad+0x82a/0x9d0 [ 1132.629229][T15452] ? __pfx_ip_set_ad+0x10/0x10 [ 1132.629251][T15452] ? lock_acquire+0x115/0x350 [ 1132.629303][T15452] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1132.629320][T15452] ? lockdep_hardirqs_on+0x7a/0x110 [ 1132.629342][T15452] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1132.629364][T15452] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 1132.629394][T15452] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 1132.629439][T15452] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1132.629484][T15452] ? __lock_acquire+0x6df/0x2e40 [ 1132.629505][T15452] ? __lock_acquire+0x6df/0x2e40 [ 1132.629520][T15452] ? sock_sendmsg_nosec+0x13a/0x180 [ 1132.629544][T15452] netlink_rcv_skb+0x226/0x4a0 [ 1132.629570][T15452] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1132.629613][T15452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1132.629647][T15452] ? bpf_lsm_capable+0x9/0x20 [ 1132.629662][T15452] ? security_capable+0x74/0x280 [ 1132.629690][T15452] nfnetlink_rcv+0x2b9/0x28d0 [ 1132.629721][T15452] ? sock_sendmsg_nosec+0x13a/0x180 [ 1132.629740][T15452] ? __pfx_snprintf+0x10/0x10 [ 1132.629764][T15452] ? unwind_get_return_address+0x4d/0x90 [ 1132.629792][T15452] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1132.629825][T15452] ? trim_netdev_trace+0x791/0x820 [ 1132.629845][T15452] ? __pfx_trim_netdev_trace+0x10/0x10 [ 1132.629861][T15452] ? stack_trace_save+0xa9/0x100 [ 1132.629887][T15452] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1132.629913][T15452] ? save_netdev_trace_buffer+0x18f/0x5e0 [ 1132.629939][T15452] ? save_netdev_trace_buffer+0x4c3/0x5e0 [ 1132.629967][T15452] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1132.629984][T15452] ? ref_tracker_free+0x668/0x820 [ 1132.630005][T15452] ? __netlink_deliver_tap+0x600/0x880 [ 1132.630030][T15452] ? netlink_deliver_tap+0x19c/0x1b0 [ 1132.630054][T15452] ? netlink_unicast+0x7b8/0x990 [ 1132.630075][T15452] ? netlink_sendmsg+0x813/0xb40 [ 1132.630099][T15452] ? sock_sendmsg_nosec+0x13a/0x180 [ 1132.630116][T15452] ? ____sys_sendmsg+0x565/0x870 [ 1132.630139][T15452] ? ___sys_sendmsg+0x2a5/0x360 [ 1132.630162][T15452] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1132.630186][T15452] ? do_syscall_64+0x17b/0x530 [ 1132.630201][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.630224][T15452] ? __skb_clone+0x449/0x6c0 [ 1132.630254][T15452] ? skb_clone+0x246/0x3a0 [ 1132.630282][T15452] ? __netlink_deliver_tap+0x838/0x880 [ 1132.630306][T15452] ? netlink_deliver_tap+0x2e/0x1b0 [ 1132.630337][T15452] ? netlink_deliver_tap+0x2e/0x1b0 [ 1132.630362][T15452] ? netlink_deliver_tap+0x2e/0x1b0 [ 1132.630392][T15452] netlink_unicast+0x7f5/0x990 [ 1132.630429][T15452] netlink_sendmsg+0x813/0xb40 [ 1132.630463][T15452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1132.630490][T15452] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1132.630519][T15452] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1132.630543][T15452] ? arch_stack_walk+0xfb/0x150 [ 1132.630572][T15452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1132.630597][T15452] sock_sendmsg_nosec+0x13a/0x180 [ 1132.630618][T15452] ____sys_sendmsg+0x565/0x870 [ 1132.630650][T15452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1132.630682][T15452] ? import_iovec+0x73/0xa0 [ 1132.630712][T15452] ___sys_sendmsg+0x2a5/0x360 [ 1132.630736][T15452] ? __lock_acquire+0x6df/0x2e40 [ 1132.630754][T15452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1132.630808][T15452] ? __fget_files+0x2a/0x420 [ 1132.630824][T15452] ? __fget_files+0x3a8/0x420 [ 1132.630849][T15452] __x64_sys_sendmsg+0x1b7/0x290 [ 1132.630876][T15452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1132.630919][T15452] do_syscall_64+0x17b/0x530 [ 1132.630936][T15452] ? irqentry_exit+0x10f/0x8f0 [ 1132.630951][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.630968][T15452] ? clear_bhb_loop+0x40/0x90 [ 1132.630989][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.631005][T15452] RIP: 0033:0x7f58a93fe0d9 [ 1132.631021][T15452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1132.631036][T15452] RSP: 002b:00007f58a7656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1132.631054][T15452] RAX: ffffffffffffffda RBX: 00007f58a9685fa0 RCX: 00007f58a93fe0d9 [ 1132.631066][T15452] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006 [ 1132.631077][T15452] RBP: 00007f58a7656090 R08: 0000000000000000 R09: 0000000000000000 [ 1132.631088][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.631098][T15452] R13: 00007f58a9686038 R14: 00007f58a9685fa0 R15: 00007fff89207808 [ 1132.631124][T15452] [ 1134.233595][T15466] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2541'. [ 1134.814154][T15474] FAULT_INJECTION: forcing a failure. [ 1134.814154][T15474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.814183][T15474] CPU: 0 UID: 0 PID: 15474 Comm: syz.6.2544 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1134.814206][T15474] Tainted: [L]=SOFTLOCKUP [ 1134.814212][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1134.814222][T15474] Call Trace: [ 1134.814228][T15474] [ 1134.814236][T15474] dump_stack_lvl+0xe8/0x150 [ 1134.814262][T15474] should_fail_ex+0x467/0x600 [ 1134.814289][T15474] _copy_to_user+0x31/0xb0 [ 1134.814306][T15474] simple_read_from_buffer+0xe1/0x170 [ 1134.814327][T15474] proc_fail_nth_read+0x1be/0x230 [ 1134.814348][T15474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.814369][T15474] ? rw_verify_area+0x250/0x4d0 [ 1134.814389][T15474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1134.814411][T15474] vfs_read+0x219/0xa90 [ 1134.814436][T15474] ? __pfx_vfs_read+0x10/0x10 [ 1134.814457][T15474] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1134.814474][T15474] ? lockdep_hardirqs_on+0x7a/0x110 [ 1134.814490][T15474] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1134.814505][T15474] ? mutex_lock_nested+0x152/0x1d0 [ 1134.814525][T15474] ? fdget_pos+0x252/0x320 [ 1134.814548][T15474] ksys_read+0x156/0x270 [ 1134.814568][T15474] ? __pfx_ksys_read+0x10/0x10 [ 1134.814584][T15474] ? __pfx_fb_ioctl+0x10/0x10 [ 1134.814689][T15474] do_syscall_64+0x17b/0x530 [ 1134.814705][T15474] ? irqentry_exit+0x10f/0x8f0 [ 1134.814720][T15474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.814738][T15474] ? clear_bhb_loop+0x40/0x90 [ 1134.814758][T15474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.814774][T15474] RIP: 0033:0x7f58a93be90e [ 1134.814789][T15474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1134.814803][T15474] RSP: 002b:00007f58a7655fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1134.814821][T15474] RAX: ffffffffffffffda RBX: 00007f58a76566c0 RCX: 00007f58a93be90e [ 1134.814833][T15474] RDX: 000000000000000f RSI: 00007f58a76560a0 RDI: 0000000000000004 [ 1134.814844][T15474] RBP: 00007f58a7656090 R08: 0000000000000000 R09: 0000000000000000 [ 1134.814854][T15474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1134.814864][T15474] R13: 00007f58a9686038 R14: 00007f58a9685fa0 R15: 00007fff89207808 [ 1134.814888][T15474] [ 1135.903899][ T9515] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1136.073013][ T9515] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1136.074008][ T9515] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.074056][ T9515] usb 8-1: too many endpoints for config 1 interface 1 altsetting 192: 247, using maximum allowed: 30 [ 1136.074102][ T9515] usb 8-1: config 1 interface 1 altsetting 192 has an invalid descriptor for endpoint zero, skipping [ 1136.074119][ T9515] usb 8-1: config 1 interface 1 altsetting 192 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 1136.074139][ T9515] usb 8-1: too many endpoints for config 1 interface 2 altsetting 1: 235, using maximum allowed: 30 [ 1136.074167][ T9515] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 1136.074187][ T9515] usb 8-1: config 1 interface 1 has no altsetting 1 [ 1136.076326][ T9515] usb 8-1: New USB device found, idVendor=1a82, idProduct=004c, bcdDevice= 0.40 [ 1136.076349][ T9515] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.076364][ T9515] usb 8-1: Product: syz [ 1136.076375][ T9515] usb 8-1: Manufacturer: syz [ 1136.076386][ T9515] usb 8-1: SerialNumber: syz [ 1136.523758][ T9515] usb 8-1: unit 4 not found! [ 1137.127787][ T9515] usb 8-1: USB disconnect, device number 18 [ 1137.735697][T13698] udevd[13698]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1138.326192][T15500] Set syz1 is full, maxelem 6117 reached [ 1138.751061][T11583] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1138.786042][T15521] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1138.916938][T11583] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1138.917925][T11583] usb 8-1: config 6 has an invalid interface number: 238 but max is 0 [ 1138.917945][T11583] usb 8-1: config 6 has no interface number 0 [ 1138.917990][T11583] usb 8-1: config 6 interface 238 has no altsetting 0 [ 1138.938847][T11583] usb 8-1: New USB device found, idVendor=0502, idProduct=37b0, bcdDevice=1c.67 [ 1138.938870][T11583] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.938886][T11583] usb 8-1: Product: syz [ 1138.938897][T11583] usb 8-1: Manufacturer: syz [ 1138.938908][T11583] usb 8-1: SerialNumber: syz [ 1139.258368][T15513] overlay: ./file1 is not a directory [ 1139.360939][T11583] usb 8-1: USB disconnect, device number 19 [ 1139.444775][T15529] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1139.444791][T15529] overlayfs: missing 'lowerdir' [ 1139.947798][T15521] VFS: Can't find a romfs filesystem on dev nullb0. [ 1139.947798][T15521] [ 1140.274262][T15537] netlink: 'syz.7.2563': attribute type 10 has an invalid length. [ 1140.274280][T15537] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2563'. [ 1140.276340][T15537] hsr_slave_0: left promiscuous mode [ 1140.279312][T15537] hsr_slave_1: left promiscuous mode [ 1141.880785][T11583] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1142.051079][T11583] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1142.051104][T11583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.118967][T11583] usb 6-1: config 0 descriptor?? [ 1142.275927][T15564] tmpfs: Unknown parameter 'usrquota[ˆÌ £²ë”ÈÿyOdÄÍuoîë`ʶEO¾ÁIYô÷íz¶Z‘­[-«ï‹Âê`Ø^ÛV©Ò—Æzm4Ò' [ 1142.560228][T11583] ath6kl: Failed to submit usb control message: -71 [ 1142.560266][T11583] ath6kl: unable to send the bmi data to the device: -71 [ 1142.560277][T11583] ath6kl: Unable to send get target info: -71 [ 1142.643965][T11583] ath6kl: Failed to init ath6kl core: -71 [ 1142.645011][T11583] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1142.749844][T11583] usb 6-1: USB disconnect, device number 63 [ 1143.114915][ T9515] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1143.263053][ T9515] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1143.263076][ T9515] usb 8-1: config 0 has no interface number 0 [ 1143.263108][ T9515] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1143.263129][ T9515] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.263145][ T9515] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1143.263169][ T9515] usb 8-1: config 0 interface 1 has no altsetting 0 [ 1143.264156][ T9515] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1143.264179][ T9515] usb 8-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 1143.264195][ T9515] usb 8-1: Manufacturer: syz [ 1143.268050][ T9515] usb 8-1: config 0 descriptor?? [ 1143.918853][ T9515] uclogic 0003:145F:0212.0007: pen parameters not found [ 1143.918949][ T9515] uclogic 0003:145F:0212.0007: interface is invalid, ignoring [ 1143.961339][ T9515] usb 8-1: USB disconnect, device number 20 [ 1143.991579][ T5810] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1144.148438][ T5810] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1144.148463][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1144.148479][ T5810] usb 6-1: Product: syz [ 1144.148491][ T5810] usb 6-1: Manufacturer: syz [ 1144.148501][ T5810] usb 6-1: SerialNumber: syz [ 1144.197118][ T5810] usb 6-1: config 0 descriptor?? [ 1144.223392][ T5810] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1144.223460][ T5810] dvb-usb: bulk message failed: -22 (2/0) [ 1144.263017][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1144.286820][ T5810] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1144.286884][ T5810] usb 6-1: media controller created [ 1144.318169][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.408460][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1144.457447][ T5810] DVB: Unable to find symbol mt352_attach() [ 1144.457641][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 1144.457662][ T5810] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1144.457698][ T5810] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1144.624647][ T5810] rc_core: IR keymap rc-dvico-mce not found [ 1144.624665][ T5810] Registered IR keymap rc-empty [ 1144.668549][ T5810] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1144.692277][ T5810] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input20 [ 1144.732388][T15577] loop2: detected capacity change from 0 to 7 [ 1144.789924][ T5810] dvb-usb: schedule remote query interval to 100 msecs. [ 1144.789944][ T5810] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1144.896289][ T9515] dvb-usb: bulk message failed: -22 (1/0) [ 1144.924964][T15577] Dev loop2: unable to read RDB block 7 [ 1144.924996][T15577] loop2: AHDI p1 p2 p3 [ 1144.925012][T15577] loop2: partition table partially beyond EOD, truncated [ 1144.925204][T15577] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1144.925219][T15577] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1144.980408][T14924] usb 6-1: USB disconnect, device number 64 [ 1145.034695][ T9515] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1145.197931][ T9515] usb 8-1: Using ep0 maxpacket: 16 [ 1145.208778][ T9515] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.208804][ T9515] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.208821][ T9515] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1145.208854][ T9515] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1145.208871][ T9515] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.294794][ T9515] usb 8-1: config 0 descriptor?? [ 1145.754046][T13738] Flush: task=udevd[13738] dev=loop2 state=2 [ 1146.253049][T14924] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1146.526378][T13738] Teardown: task=udevd[13738] dev=loop2 state=2 [ 1148.020456][ T9515] usbhid 8-1:0.0: can't add hid device: -71 [ 1148.028710][ T9515] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1148.048004][ T9515] usb 8-1: USB disconnect, device number 21 [ 1148.513759][T15619] dlm: Unknown command passed to DLM device : 3 [ 1148.513759][T15619] [ 1148.701615][ T9515] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1148.760781][ T10] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1148.889941][ T9515] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1148.889966][ T9515] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.936280][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 1148.939694][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1148.939784][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.939801][ T10] usb 8-1: Product: syz [ 1148.939812][ T10] usb 8-1: Manufacturer: ⊠[ 1148.939882][ T10] usb 8-1: SerialNumber: syz [ 1149.251070][T15619] netlink: 'syz.7.2590': attribute type 28 has an invalid length. [ 1149.256589][ T9515] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1149.794883][T15617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.795717][T15617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.242303][T11583] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1150.244048][T15635] netlink: 'syz.7.2595': attribute type 28 has an invalid length. [ 1150.244064][T15635] netlink: 'syz.7.2595': attribute type 3 has an invalid length. [ 1150.244116][T15635] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2595'. [ 1150.399082][T11583] usb 6-1: Using ep0 maxpacket: 16 [ 1150.436019][T11583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.436113][T11583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.436131][T11583] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1150.436163][T11583] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.436181][T11583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.562177][T11583] usb 6-1: config 0 descriptor?? [ 1151.153209][ T10] snd-ua101 8-1:1.1: sample format descriptor not found [ 1151.153240][ T10] snd-ua101 8-1:1.0: invalid num_altsetting [ 1151.209607][T15637] FAULT_INJECTION: forcing a failure. [ 1151.209607][T15637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.209738][T15637] CPU: 0 UID: 0 PID: 15637 Comm: syz.7.2596 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1151.209768][T15637] Tainted: [L]=SOFTLOCKUP [ 1151.209774][T15637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1151.209784][T15637] Call Trace: [ 1151.209792][T15637] [ 1151.209801][T15637] dump_stack_lvl+0xe8/0x150 [ 1151.209828][T15637] should_fail_ex+0x467/0x600 [ 1151.209856][T15637] __kvm_read_guest_page+0x18d/0x240 [ 1151.209896][T15637] kvm_fetch_guest_virt+0x10c/0x160 [ 1151.209925][T15637] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 1151.209952][T15637] __do_insn_fetch_bytes+0x53a/0x6c0 [ 1151.209979][T15637] ? __lock_acquire+0x6df/0x2e40 [ 1151.210000][T15637] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 1151.210025][T15637] ? x86_decode_insn+0x16fa/0x5af0 [ 1151.210049][T15637] x86_decode_insn+0x374/0x5af0 [ 1151.210092][T15637] ? __pfx_x86_decode_insn+0x10/0x10 [ 1151.210111][T15637] ? vmx_vcpu_load_vmcs+0x3fa/0x620 [ 1151.210135][T15637] ? do_raw_spin_lock+0x12b/0x2f0 [ 1151.210163][T15637] ? vmx_read_guest_seg_ar+0x3e9/0x640 [ 1151.210184][T15637] ? __asan_memset+0x22/0x50 [ 1151.210206][T15637] ? init_decode_cache+0xf3/0x160 [ 1151.210228][T15637] ? init_emulate_ctxt+0x4eb/0x690 [ 1151.210250][T15637] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 1151.210277][T15637] x86_emulate_instruction+0x323/0x1f10 [ 1151.210304][T15637] ? __schedule+0x171f/0x5530 [ 1151.210330][T15637] ? __lock_acquire+0x6df/0x2e40 [ 1151.210349][T15637] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 1151.210371][T15637] ? vmx_handle_exit_irqoff+0xff/0xac0 [ 1151.210397][T15637] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 1151.210428][T15637] handle_ud+0x19e/0x650 [ 1151.210447][T15637] ? clear_bhb_loop+0x40/0x90 [ 1151.210465][T15637] ? __pfx_handle_ud+0x10/0x10 [ 1151.210481][T15637] ? vmx_vcpu_run+0x1035/0x2ee0 [ 1151.210504][T15637] ? rcu_is_watching+0x15/0xb0 [ 1151.210535][T15637] ? __pfx_handle_exception_nmi+0x10/0x10 [ 1151.210551][T15637] vmx_handle_exit+0xfa4/0x16e0 [ 1151.210582][T15637] vcpu_run+0x4cc0/0x7780 [ 1151.210627][T15637] ? vcpu_run+0x293e/0x7780 [ 1151.210676][T15637] ? __pfx_vcpu_run+0x10/0x10 [ 1151.210700][T15637] ? lock_acquire+0x115/0x350 [ 1151.210738][T15637] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 1151.210765][T15637] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 1151.210796][T15637] kvm_vcpu_ioctl+0xa64/0xfe0 [ 1151.210827][T15637] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1151.210853][T15637] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1151.210870][T15637] ? lockdep_hardirqs_on+0x7a/0x110 [ 1151.210898][T15637] ? __fget_files+0x2a/0x420 [ 1151.210919][T15637] ? __fget_files+0x3a8/0x420 [ 1151.210935][T15637] ? __fget_files+0x2a/0x420 [ 1151.210954][T15637] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1151.210987][T15637] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1151.211013][T15637] __se_sys_ioctl+0xff/0x170 [ 1151.211037][T15637] do_syscall_64+0x17b/0x530 [ 1151.211054][T15637] ? irqentry_exit+0x10f/0x8f0 [ 1151.211069][T15637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.211086][T15637] ? clear_bhb_loop+0x40/0x90 [ 1151.211106][T15637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.211123][T15637] RIP: 0033:0x7fb9e8aae0d9 [ 1151.211138][T15637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.211153][T15637] RSP: 002b:00007fb9e6d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1151.211170][T15637] RAX: ffffffffffffffda RBX: 00007fb9e8d35fa0 RCX: 00007fb9e8aae0d9 [ 1151.211183][T15637] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1151.211193][T15637] RBP: 00007fb9e6d06090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.211203][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.211213][T15637] R13: 00007fb9e8d36038 R14: 00007fb9e8d35fa0 R15: 00007ffca0e7d368 [ 1151.211238][T15637] [ 1152.263671][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2597'. [ 1152.782586][ T10] usb 8-1: USB disconnect, device number 22 [ 1153.412862][T11583] usbhid 6-1:0.0: can't add hid device: -71 [ 1153.413006][T11583] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1153.528497][T11583] usb 6-1: USB disconnect, device number 65 [ 1154.200997][T15652] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1155.130705][T11583] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1155.304290][T11583] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.322802][T11583] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 1155.322958][T11583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1155.322977][T11583] usb 6-1: Product: syz [ 1155.323032][T11583] usb 6-1: Manufacturer: syz [ 1155.742616][T11583] usb 6-1: USB disconnect, device number 66 [ 1156.887074][ T9] usb 7-1: USB disconnect, device number 76 [ 1156.981391][T11583] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1157.130839][T11583] usb 6-1: Using ep0 maxpacket: 16 [ 1157.132634][T11583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.132667][T11583] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.132684][T11583] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1157.132714][T11583] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1157.132732][T11583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.199702][T11583] usb 6-1: config 0 descriptor?? [ 1157.467143][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.505501][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.620909][ T10] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1158.516130][T15695] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2614'. [ 1158.619630][T15698] FAULT_INJECTION: forcing a failure. [ 1158.619630][T15698] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.619705][T15698] CPU: 0 UID: 0 PID: 15698 Comm: syz.6.2615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1158.619729][T15698] Tainted: [L]=SOFTLOCKUP [ 1158.619735][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1158.619746][T15698] Call Trace: [ 1158.619752][T15698] [ 1158.619760][T15698] dump_stack_lvl+0xe8/0x150 [ 1158.619784][T15698] should_fail_ex+0x467/0x600 [ 1158.619812][T15698] should_failslab+0xa8/0x100 [ 1158.619829][T15698] ? skb_clone+0x212/0x3a0 [ 1158.619854][T15698] kmem_cache_alloc_noprof+0x9e/0x680 [ 1158.619877][T15698] ? cap_capable+0x123/0x460 [ 1158.619896][T15698] ? skb_clone+0x212/0x3a0 [ 1158.619925][T15698] skb_clone+0x212/0x3a0 [ 1158.619949][T15698] ? nfnetlink_rcv+0x4b0/0x28d0 [ 1158.619974][T15698] nfnetlink_rcv+0x4e2/0x28d0 [ 1158.619999][T15698] ? sock_sendmsg_nosec+0x13a/0x180 [ 1158.620021][T15698] ? unwind_get_return_address+0x4d/0x90 [ 1158.620056][T15698] ? trim_netdev_trace+0x791/0x820 [ 1158.620075][T15698] ? __pfx_trim_netdev_trace+0x10/0x10 [ 1158.620091][T15698] ? stack_trace_save+0xa9/0x100 [ 1158.620118][T15698] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1158.620151][T15698] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1158.620168][T15698] ? ref_tracker_free+0x668/0x820 [ 1158.620190][T15698] ? __netlink_deliver_tap+0x600/0x880 [ 1158.620214][T15698] ? netlink_deliver_tap+0x19c/0x1b0 [ 1158.620238][T15698] ? netlink_unicast+0x7b8/0x990 [ 1158.620259][T15698] ? netlink_sendmsg+0x813/0xb40 [ 1158.620283][T15698] ? sock_sendmsg_nosec+0x13a/0x180 [ 1158.620299][T15698] ? ____sys_sendmsg+0x565/0x870 [ 1158.620323][T15698] ? ___sys_sendmsg+0x2a5/0x360 [ 1158.620346][T15698] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1158.620369][T15698] ? do_syscall_64+0x17b/0x530 [ 1158.620393][T15698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.620414][T15698] ? do_raw_spin_lock+0x12b/0x2f0 [ 1158.620445][T15698] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1158.620462][T15698] ? lockdep_hardirqs_on+0x7a/0x110 [ 1158.620478][T15698] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1158.620494][T15698] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 1158.620532][T15698] netlink_unicast+0x7f5/0x990 [ 1158.620568][T15698] netlink_sendmsg+0x813/0xb40 [ 1158.620603][T15698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.620634][T15698] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1158.620661][T15698] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1158.620684][T15698] ? arch_stack_walk+0xfb/0x150 [ 1158.620711][T15698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1158.620754][T15698] sock_sendmsg_nosec+0x13a/0x180 [ 1158.620774][T15698] ____sys_sendmsg+0x565/0x870 [ 1158.620811][T15698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1158.620842][T15698] ? import_iovec+0x73/0xa0 [ 1158.620871][T15698] ___sys_sendmsg+0x2a5/0x360 [ 1158.620895][T15698] ? __lock_acquire+0x6df/0x2e40 [ 1158.620913][T15698] ? __pfx____sys_sendmsg+0x10/0x10 [ 1158.620962][T15698] ? __fget_files+0x2a/0x420 [ 1158.620989][T15698] ? __fget_files+0x3a8/0x420 [ 1158.621013][T15698] __x64_sys_sendmsg+0x1b7/0x290 [ 1158.621040][T15698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1158.621093][T15698] do_syscall_64+0x17b/0x530 [ 1158.621109][T15698] ? irqentry_exit+0x10f/0x8f0 [ 1158.621124][T15698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.621167][T15698] ? clear_bhb_loop+0x40/0x90 [ 1158.621187][T15698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.621204][T15698] RIP: 0033:0x7f58a93fe0d9 [ 1158.621220][T15698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1158.621234][T15698] RSP: 002b:00007f58a7656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1158.621252][T15698] RAX: ffffffffffffffda RBX: 00007f58a9685fa0 RCX: 00007f58a93fe0d9 [ 1158.621264][T15698] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1158.621275][T15698] RBP: 00007f58a7656090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.621285][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1158.621295][T15698] R13: 00007f58a9686038 R14: 00007f58a9685fa0 R15: 00007fff89207808 [ 1158.621319][T15698] [ 1159.388865][T15701] FAULT_INJECTION: forcing a failure. [ 1159.388865][T15701] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.388998][T15701] CPU: 0 UID: 0 PID: 15701 Comm: syz.6.2617 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1159.389022][T15701] Tainted: [L]=SOFTLOCKUP [ 1159.389028][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1159.389038][T15701] Call Trace: [ 1159.389045][T15701] [ 1159.389052][T15701] dump_stack_lvl+0xe8/0x150 [ 1159.389077][T15701] should_fail_ex+0x467/0x600 [ 1159.389105][T15701] should_failslab+0xa8/0x100 [ 1159.389122][T15701] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1159.389147][T15701] ? __alloc_skb+0x1d7/0x7a0 [ 1159.389167][T15701] ? __alloc_skb+0x1d7/0x7a0 [ 1159.389193][T15701] __alloc_skb+0x1d7/0x7a0 [ 1159.389217][T15701] netlink_ack+0x136/0xb30 [ 1159.389246][T15701] ? __lock_acquire+0x6df/0x2e40 [ 1159.389261][T15701] ? sock_sendmsg_nosec+0x13a/0x180 [ 1159.389283][T15701] netlink_rcv_skb+0x2a4/0x4a0 [ 1159.389318][T15701] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1159.389344][T15701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1159.389379][T15701] ? bpf_lsm_capable+0x9/0x20 [ 1159.389397][T15701] ? security_capable+0x74/0x280 [ 1159.389424][T15701] nfnetlink_rcv+0x2b9/0x28d0 [ 1159.389449][T15701] ? sock_sendmsg_nosec+0x13a/0x180 [ 1159.389468][T15701] ? __pfx_snprintf+0x10/0x10 [ 1159.389493][T15701] ? unwind_get_return_address+0x4d/0x90 [ 1159.389520][T15701] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1159.389552][T15701] ? trim_netdev_trace+0x791/0x820 [ 1159.389578][T15701] ? __pfx_trim_netdev_trace+0x10/0x10 [ 1159.389594][T15701] ? stack_trace_save+0xa9/0x100 [ 1159.389620][T15701] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1159.389645][T15701] ? __lock_acquire+0x6df/0x2e40 [ 1159.389661][T15701] ? save_netdev_trace_buffer+0x4c3/0x5e0 [ 1159.389683][T15701] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1159.389700][T15701] ? ref_tracker_free+0x668/0x820 [ 1159.389722][T15701] ? __netlink_deliver_tap+0x600/0x880 [ 1159.389746][T15701] ? netlink_deliver_tap+0x19c/0x1b0 [ 1159.389770][T15701] ? netlink_unicast+0x7b8/0x990 [ 1159.389791][T15701] ? netlink_sendmsg+0x813/0xb40 [ 1159.389815][T15701] ? sock_sendmsg_nosec+0x13a/0x180 [ 1159.389831][T15701] ? ____sys_sendmsg+0x565/0x870 [ 1159.389854][T15701] ? ___sys_sendmsg+0x2a5/0x360 [ 1159.389877][T15701] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1159.389900][T15701] ? do_syscall_64+0x17b/0x530 [ 1159.389916][T15701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.389937][T15701] ? do_raw_spin_lock+0x12b/0x2f0 [ 1159.389967][T15701] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1159.389983][T15701] ? lockdep_hardirqs_on+0x7a/0x110 [ 1159.389999][T15701] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1159.390015][T15701] ? rcu_preempt_deferred_qs_irqrestore+0x81f/0xc10 [ 1159.390053][T15701] netlink_unicast+0x7f5/0x990 [ 1159.390083][T15701] netlink_sendmsg+0x813/0xb40 [ 1159.390116][T15701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.390143][T15701] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1159.390174][T15701] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1159.390199][T15701] ? arch_stack_walk+0xfb/0x150 [ 1159.390226][T15701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1159.390251][T15701] sock_sendmsg_nosec+0x13a/0x180 [ 1159.390271][T15701] ____sys_sendmsg+0x565/0x870 [ 1159.390304][T15701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1159.390340][T15701] ? import_iovec+0x73/0xa0 [ 1159.390371][T15701] ___sys_sendmsg+0x2a5/0x360 [ 1159.390395][T15701] ? __lock_acquire+0x6df/0x2e40 [ 1159.390413][T15701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1159.390464][T15701] ? __fget_files+0x2a/0x420 [ 1159.390481][T15701] ? __fget_files+0x3a8/0x420 [ 1159.390505][T15701] __x64_sys_sendmsg+0x1b7/0x290 [ 1159.390531][T15701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1159.390573][T15701] do_syscall_64+0x17b/0x530 [ 1159.390589][T15701] ? irqentry_exit+0x10f/0x8f0 [ 1159.390603][T15701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.390620][T15701] ? clear_bhb_loop+0x40/0x90 [ 1159.390641][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.390657][T15701] RIP: 0033:0x7f58a93fe0d9 [ 1159.390672][T15701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.390686][T15701] RSP: 002b:00007f58a7656028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1159.390706][T15701] RAX: ffffffffffffffda RBX: 00007f58a9685fa0 RCX: 00007f58a93fe0d9 [ 1159.390718][T15701] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1159.390729][T15701] RBP: 00007f58a7656090 R08: 0000000000000000 R09: 0000000000000000 [ 1159.390739][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.390749][T15701] R13: 00007f58a9686038 R14: 00007f58a9685fa0 R15: 00007fff89207808 [ 1159.390774][T15701] [ 1160.073527][T11583] usbhid 6-1:0.0: can't add hid device: -71 [ 1160.073624][T11583] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1160.107339][T11583] usb 6-1: USB disconnect, device number 67 [ 1160.681005][ T5810] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1160.786736][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1160.844035][ T5810] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.844077][ T5810] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1160.846253][ T5810] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1160.846277][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.846292][ T5810] usb 7-1: Product: syz [ 1160.846303][ T5810] usb 7-1: Manufacturer: syz [ 1160.846314][ T5810] usb 7-1: SerialNumber: syz [ 1160.978100][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.978218][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1161.010226][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1161.010251][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.010272][ T9] usb 6-1: Product: syz [ 1161.010284][ T9] usb 6-1: Manufacturer: syz [ 1161.010297][ T9] usb 6-1: SerialNumber: syz [ 1161.097276][ T9] chaoskey 6-1:1.0: Unable to register with hwrng [ 1161.458958][T15720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.459609][T15720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.467363][T15719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.500019][T15719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.774094][T15732] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1162.774163][T15732] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2625'. [ 1163.002035][ T5810] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1163.173214][ T5810] usb 8-1: Using ep0 maxpacket: 16 [ 1163.191681][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.191707][ T5810] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.191724][ T5810] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1163.191807][ T5810] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1163.191831][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.203820][ T5810] usb 8-1: config 0 descriptor?? [ 1163.431956][T11583] usb 6-1: USB disconnect, device number 68 [ 1163.644826][ T10] usb 7-1: USB disconnect, device number 78 [ 1164.260900][ T10] usb 7-1: new full-speed USB device number 79 using dummy_hcd [ 1164.390753][ T10] usb 7-1: device descriptor read/64, error -71 [ 1164.630732][ T10] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1164.793004][ T10] usb 7-1: device descriptor read/64, error -71 [ 1164.803441][ T5687] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1164.901440][ T10] usb usb7-port1: attempt power cycle [ 1164.960165][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'. [ 1164.999519][ T5687] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.999558][ T5687] usb 6-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.00 [ 1164.999633][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.067127][ T5687] usb 6-1: config 0 descriptor?? [ 1165.157672][ T5687] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 1165.465258][ T10] usb 7-1: new full-speed USB device number 81 using dummy_hcd [ 1165.481634][ T10] usb 7-1: device descriptor read/8, error -71 [ 1165.754935][ T10] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1165.771453][ T10] usb 7-1: device descriptor read/8, error -71 [ 1165.883361][ T10] usb usb7-port1: unable to enumerate USB device [ 1166.001804][ C0] raw-gadget.2 gadget.5: ignoring, device is not running [ 1166.113644][ T5810] usbhid 8-1:0.0: can't add hid device: -71 [ 1166.113835][ T5810] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1166.119505][ T4940] bcm5974 6-1:0.0: could not read from device [ 1166.191627][T11583] usb 6-1: USB disconnect, device number 69 [ 1166.217185][ T5810] usb 8-1: USB disconnect, device number 23 [ 1166.615012][T15749] FAULT_INJECTION: forcing a failure. [ 1166.615012][T15749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.615044][T15749] CPU: 0 UID: 0 PID: 15749 Comm: syz.5.2633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1166.615067][T15749] Tainted: [L]=SOFTLOCKUP [ 1166.615073][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1166.615083][T15749] Call Trace: [ 1166.615090][T15749] [ 1166.615097][T15749] dump_stack_lvl+0xe8/0x150 [ 1166.615130][T15749] should_fail_ex+0x467/0x600 [ 1166.615156][T15749] _copy_to_user+0x31/0xb0 [ 1166.615201][T15749] simple_read_from_buffer+0xe1/0x170 [ 1166.615224][T15749] proc_fail_nth_read+0x1be/0x230 [ 1166.615245][T15749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1166.615265][T15749] ? rw_verify_area+0x250/0x4d0 [ 1166.615287][T15749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1166.615304][T15749] vfs_read+0x219/0xa90 [ 1166.615328][T15749] ? __pfx_vfs_read+0x10/0x10 [ 1166.615350][T15749] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1166.615368][T15749] ? lockdep_hardirqs_on+0x7a/0x110 [ 1166.615383][T15749] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1166.615398][T15749] ? mutex_lock_nested+0x152/0x1d0 [ 1166.615417][T15749] ? fdget_pos+0x252/0x320 [ 1166.615440][T15749] ksys_read+0x156/0x270 [ 1166.615468][T15749] ? __pfx_ksys_read+0x10/0x10 [ 1166.615495][T15749] do_syscall_64+0x17b/0x530 [ 1166.615511][T15749] ? irqentry_exit+0x10f/0x8f0 [ 1166.615526][T15749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.615543][T15749] ? clear_bhb_loop+0x40/0x90 [ 1166.615563][T15749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.615580][T15749] RIP: 0033:0x7f820aefe90e [ 1166.615595][T15749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1166.615609][T15749] RSP: 002b:00007f8209195fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1166.615626][T15749] RAX: ffffffffffffffda RBX: 00007f82091966c0 RCX: 00007f820aefe90e [ 1166.615639][T15749] RDX: 000000000000000f RSI: 00007f82091960a0 RDI: 0000000000000004 [ 1166.615649][T15749] RBP: 00007f8209196090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.615660][T15749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.615669][T15749] R13: 00007f820b1c6038 R14: 00007f820b1c5fa0 R15: 00007ffc8e9ad2b8 [ 1166.615693][T15749] [ 1166.709136][ T5810] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1167.053994][ T5810] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1167.054018][ T5810] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.315633][ T5810] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 1167.485836][T15757] FAULT_INJECTION: forcing a failure. [ 1167.485836][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.485866][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.5.2636 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1167.485889][T15757] Tainted: [L]=SOFTLOCKUP [ 1167.485895][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1167.485906][T15757] Call Trace: [ 1167.485913][T15757] [ 1167.485919][T15757] dump_stack_lvl+0xe8/0x150 [ 1167.485947][T15757] should_fail_ex+0x467/0x600 [ 1167.485973][T15757] should_failslab+0xa8/0x100 [ 1167.485990][T15757] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1167.486015][T15757] ? __alloc_skb+0x1d7/0x7a0 [ 1167.486037][T15757] ? __alloc_skb+0x1d7/0x7a0 [ 1167.486063][T15757] __alloc_skb+0x1d7/0x7a0 [ 1167.486087][T15757] netlink_ack+0x136/0xb30 [ 1167.486111][T15757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.486142][T15757] netlink_rcv_skb+0x2a4/0x4a0 [ 1167.486168][T15757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1167.486188][T15757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1167.486222][T15757] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.486247][T15757] ? netlink_deliver_tap+0x2e/0x1b0 [ 1167.486275][T15757] genl_rcv+0x28/0x40 [ 1167.486292][T15757] netlink_unicast+0x7f5/0x990 [ 1167.486323][T15757] netlink_sendmsg+0x813/0xb40 [ 1167.486360][T15757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.486387][T15757] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1167.486416][T15757] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1167.486442][T15757] ? arch_stack_walk+0xfb/0x150 [ 1167.486500][T15757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1167.486525][T15757] sock_sendmsg_nosec+0x13a/0x180 [ 1167.486545][T15757] ____sys_sendmsg+0x565/0x870 [ 1167.486576][T15757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1167.486606][T15757] ? import_iovec+0x73/0xa0 [ 1167.486633][T15757] ___sys_sendmsg+0x2a5/0x360 [ 1167.486662][T15757] ? __lock_acquire+0x6df/0x2e40 [ 1167.486680][T15757] ? __pfx____sys_sendmsg+0x10/0x10 [ 1167.486731][T15757] ? __fget_files+0x2a/0x420 [ 1167.486747][T15757] ? __fget_files+0x3a8/0x420 [ 1167.486771][T15757] __x64_sys_sendmsg+0x1b7/0x290 [ 1167.486798][T15757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1167.486837][T15757] do_syscall_64+0x17b/0x530 [ 1167.486854][T15757] ? irqentry_exit+0x10f/0x8f0 [ 1167.486870][T15757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.486887][T15757] ? clear_bhb_loop+0x40/0x90 [ 1167.486907][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.486923][T15757] RIP: 0033:0x7f820af3e0d9 [ 1167.486938][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.486953][T15757] RSP: 002b:00007f8209196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1167.486970][T15757] RAX: ffffffffffffffda RBX: 00007f820b1c5fa0 RCX: 00007f820af3e0d9 [ 1167.486983][T15757] RDX: 0000000020004080 RSI: 0000200000000200 RDI: 0000000000000004 [ 1167.486994][T15757] RBP: 00007f8209196090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.487004][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.487014][T15757] R13: 00007f820b1c6038 R14: 00007f820b1c5fa0 R15: 00007ffc8e9ad2b8 [ 1167.487039][T15757] [ 1168.056860][T15747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.083974][T15747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1168.615722][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2639'. [ 1168.877156][T15775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2641'. [ 1168.951002][T11583] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1169.113696][T11583] usb 7-1: Using ep0 maxpacket: 16 [ 1169.131694][T11583] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.131721][T11583] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.131738][T11583] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1169.131892][T11583] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1169.131952][T11583] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.209070][T11583] usb 7-1: config 0 descriptor?? [ 1169.745086][T15785] FAULT_INJECTION: forcing a failure. [ 1169.745086][T15785] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.745117][T15785] CPU: 0 UID: 0 PID: 15785 Comm: syz.5.2644 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1169.745144][T15785] Tainted: [L]=SOFTLOCKUP [ 1169.745150][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1169.745161][T15785] Call Trace: [ 1169.745167][T15785] [ 1169.745175][T15785] dump_stack_lvl+0xe8/0x150 [ 1169.745203][T15785] should_fail_ex+0x467/0x600 [ 1169.745227][T15785] ? shmem_alloc_inode+0x28/0x40 [ 1169.745284][T15785] should_failslab+0xa8/0x100 [ 1169.745302][T15785] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 1169.745328][T15785] ? shmem_alloc_inode+0x28/0x40 [ 1169.745352][T15785] ? do_raw_spin_lock+0x12b/0x2f0 [ 1169.745378][T15785] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1169.745401][T15785] shmem_alloc_inode+0x28/0x40 [ 1169.745425][T15785] alloc_inode+0x6a/0x1b0 [ 1169.745453][T15785] new_inode+0x1f/0x170 [ 1169.745472][T15785] shmem_get_inode+0x3b1/0xf80 [ 1169.745510][T15785] ? __pfx_shmem_get_inode+0x10/0x10 [ 1169.745538][T15785] ? devcgroup_check_permission+0x31/0x8f0 [ 1169.745565][T15785] shmem_mknod+0x17d/0x340 [ 1169.745585][T15785] vfs_mknod+0x443/0x610 [ 1169.745611][T15785] filename_mknodat+0x3cf/0x670 [ 1169.745637][T15785] ? __pfx_filename_mknodat+0x10/0x10 [ 1169.745658][T15785] ? strncpy_from_user+0x150/0x2c0 [ 1169.745681][T15785] ? do_getname+0x151/0x250 [ 1169.745708][T15785] __se_sys_mknodat+0x3b/0x150 [ 1169.745731][T15785] do_syscall_64+0x17b/0x530 [ 1169.745749][T15785] ? irqentry_exit+0x10f/0x8f0 [ 1169.745764][T15785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.745782][T15785] ? clear_bhb_loop+0x40/0x90 [ 1169.745802][T15785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.745823][T15785] RIP: 0033:0x7f820af3e0d9 [ 1169.745838][T15785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.745852][T15785] RSP: 002b:00007f8209175028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1169.745869][T15785] RAX: ffffffffffffffda RBX: 00007f820b1c6090 RCX: 00007f820af3e0d9 [ 1169.745882][T15785] RDX: 00000000000021c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1169.745893][T15785] RBP: 00007f8209175090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.745903][T15785] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 1169.745913][T15785] R13: 00007f820b1c6128 R14: 00007f820b1c6090 R15: 00007ffc8e9ad2b8 [ 1169.745938][T15785] [ 1170.661022][ T10] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1170.826795][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1170.826834][ T10] usb 6-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 1170.826852][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.870814][ T10] usb 6-1: config 0 descriptor?? [ 1171.491844][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1171.492603][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1171.534269][ T10] usb 6-1: USB disconnect, device number 70 [ 1171.749066][T11583] usbhid 7-1:0.0: can't add hid device: -71 [ 1171.749298][T11583] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1171.808108][T11583] usb 7-1: USB disconnect, device number 83 [ 1172.384570][T11583] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1172.553564][T11583] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1172.553630][T11583] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.837653][T11583] cdc_acm 7-1:1.0: ttyACM1: USB ACM device [ 1173.525408][T15804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.528007][T15804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.559911][T15804] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 1173.643314][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1174.410127][ T10] usb 8-1: USB disconnect, device number 24 [ 1174.808474][T15818] device-mapper: ioctl: Unable to rename non-existent device, to uuid § [ 1175.383039][ T5810] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1175.526033][ T10] usb 7-1: USB disconnect, device number 84 [ 1175.538680][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 1175.553851][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.553876][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.553893][ T5810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1175.553925][ T5810] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1175.553943][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.680147][ T5810] usb 6-1: config 0 descriptor?? [ 1176.040937][T11583] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1176.214207][T11583] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.214251][T11583] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1176.214270][T11583] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.277399][T11583] usb 8-1: config 0 descriptor?? [ 1176.385674][T11583] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 1176.396854][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 1176.397988][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 1176.529964][T15827] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2656'. [ 1176.594497][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 1176.595084][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 82 [ 1176.595149][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 1176.596616][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 1176.596680][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 1176.597238][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 1176.774377][T11583] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1177.048485][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 1177.048551][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 84 [ 1177.048649][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3 [ 1177.053991][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 1177.054116][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 1177.054175][T11583] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 1177.265009][T11583] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1177.381351][T11583] usb 8-1: USB disconnect, device number 25 [ 1177.547922][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.557707][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.666335][T15845] FAULT_INJECTION: forcing a failure. [ 1177.666335][T15845] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.666367][T15845] CPU: 0 UID: 0 PID: 15845 Comm: syz.7.2660 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1177.666391][T15845] Tainted: [L]=SOFTLOCKUP [ 1177.666397][T15845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.666408][T15845] Call Trace: [ 1177.666414][T15845] [ 1177.666422][T15845] dump_stack_lvl+0xe8/0x150 [ 1177.666452][T15845] should_fail_ex+0x467/0x600 [ 1177.666478][T15845] should_failslab+0xa8/0x100 [ 1177.666495][T15845] __kmalloc_noprof+0xfb/0x790 [ 1177.666519][T15845] ? tomoyo_realpath_from_path+0xef/0x640 [ 1177.666545][T15845] ? tomoyo_realpath_from_path+0xef/0x640 [ 1177.666592][T15845] tomoyo_realpath_from_path+0xef/0x640 [ 1177.666624][T15845] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1177.666652][T15845] tomoyo_path_number_perm+0x246/0x5f0 [ 1177.666675][T15845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1177.666696][T15845] ? do_raw_spin_lock+0x12b/0x2f0 [ 1177.666728][T15845] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1177.666746][T15845] ? lockdep_hardirqs_on+0x7a/0x110 [ 1177.666774][T15845] ? __fget_files+0x2a/0x420 [ 1177.666794][T15845] ? __fget_files+0x3a8/0x420 [ 1177.666810][T15845] ? __fget_files+0x2a/0x420 [ 1177.666835][T15845] security_file_ioctl+0xb9/0x260 [ 1177.666856][T15845] __se_sys_ioctl+0x47/0x170 [ 1177.666880][T15845] do_syscall_64+0x17b/0x530 [ 1177.666896][T15845] ? irqentry_exit+0x10f/0x8f0 [ 1177.666912][T15845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.666929][T15845] ? clear_bhb_loop+0x40/0x90 [ 1177.666949][T15845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.666965][T15845] RIP: 0033:0x7fb9e8aae0d9 [ 1177.666980][T15845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.666994][T15845] RSP: 002b:00007fb9e6cc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.667012][T15845] RAX: ffffffffffffffda RBX: 00007fb9e8d36180 RCX: 00007fb9e8aae0d9 [ 1177.667025][T15845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1177.667035][T15845] RBP: 00007fb9e6cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.667045][T15845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.667055][T15845] R13: 00007fb9e8d36218 R14: 00007fb9e8d36180 R15: 00007ffca0e7d368 [ 1177.667085][T15845] [ 1177.667178][T15845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1178.564825][ T5810] usbhid 6-1:0.0: can't add hid device: -71 [ 1178.564918][ T5810] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1178.569422][T15849] FAULT_INJECTION: forcing a failure. [ 1178.569422][T15849] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.569453][T15849] CPU: 0 UID: 0 PID: 15849 Comm: syz.6.2661 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1178.569475][T15849] Tainted: [L]=SOFTLOCKUP [ 1178.569481][T15849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1178.569491][T15849] Call Trace: [ 1178.569498][T15849] [ 1178.569505][T15849] dump_stack_lvl+0xe8/0x150 [ 1178.569532][T15849] should_fail_ex+0x467/0x600 [ 1178.569556][T15849] ? __d_alloc+0x37/0x6f0 [ 1178.569575][T15849] should_failslab+0xa8/0x100 [ 1178.569592][T15849] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 1178.569618][T15849] ? __d_alloc+0x37/0x6f0 [ 1178.569640][T15849] __d_alloc+0x37/0x6f0 [ 1178.569658][T15849] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1178.569685][T15849] d_alloc_parallel+0xde/0x16c0 [ 1178.569716][T15849] ? lock_acquire+0x115/0x350 [ 1178.569745][T15849] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1178.569773][T15849] ? down_read+0x156/0x200 [ 1178.569790][T15849] ? __pfx_down_read+0x10/0x10 [ 1178.569808][T15849] __lookup_slow+0x82/0x2f0 [ 1178.569829][T15849] lookup_slow+0x53/0x70 [ 1178.569847][T15849] link_path_walk+0xd2a/0x1910 [ 1178.569878][T15849] path_openat+0x23c/0x3850 [ 1178.569905][T15849] ? __kasan_slab_alloc+0x6c/0x80 [ 1178.569930][T15849] ? do_sys_openat2+0xcc/0x200 [ 1178.569954][T15849] ? __x64_sys_openat+0x138/0x170 [ 1178.569979][T15849] ? do_syscall_64+0x17b/0x530 [ 1178.570036][T15849] do_file_open+0x23e/0x4a0 [ 1178.570055][T15849] ? lockdep_hardirqs_on+0x7a/0x110 [ 1178.570075][T15849] ? __pfx_do_file_open+0x10/0x10 [ 1178.570102][T15849] ? __pfx_kfree_link+0x10/0x10 [ 1178.570128][T15849] ? alloc_fd+0x654/0x6d0 [ 1178.570152][T15849] do_sys_openat2+0x115/0x200 [ 1178.570180][T15849] ? __pfx_do_sys_openat2+0x10/0x10 [ 1178.570209][T15849] ? ksys_write+0x248/0x270 [ 1178.570230][T15849] ? __pfx_ksys_write+0x10/0x10 [ 1178.570250][T15849] __x64_sys_openat+0x138/0x170 [ 1178.570280][T15849] do_syscall_64+0x17b/0x530 [ 1178.570296][T15849] ? irqentry_exit+0x10f/0x8f0 [ 1178.570311][T15849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.570328][T15849] ? clear_bhb_loop+0x40/0x90 [ 1178.570349][T15849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.570365][T15849] RIP: 0033:0x7f58a93be90e [ 1178.570381][T15849] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1178.570396][T15849] RSP: 002b:00007f58a7634ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1178.570413][T15849] RAX: ffffffffffffffda RBX: 00007f58a76356c0 RCX: 00007f58a93be90e [ 1178.570426][T15849] RDX: 0000000000000002 RSI: 00007f58a7634f90 RDI: ffffffffffffff9c [ 1178.570438][T15849] RBP: 00007f58a7635090 R08: 0000000000000000 R09: 0000000000000000 [ 1178.570448][T15849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.570458][T15849] R13: 00007f58a9686128 R14: 00007f58a9686090 R15: 00007fff89207808 [ 1178.570483][T15849] [ 1178.570884][T11583] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1179.017158][ T5810] usb 6-1: USB disconnect, device number 71 [ 1179.095079][T11583] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1179.120415][T11583] keyspan 8-1:0.0: device disconnected [ 1179.565912][T15856] kAFS: unparsable volume name [ 1179.578794][T15856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2663'. [ 1179.605188][ T38] audit: type=1804 audit(1786062405.219:48): pid=15849 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.6.2661" name="/newroot/221/config/usb_gadget/g1/functions/midi.usb0/id" dev="configfs" ino=62219 res=1 errno=0 [ 1179.800684][ T38] audit: type=1800 audit(1786062405.609:49): pid=15849 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.6.2661" name="id" dev="configfs" ino=62219 res=0 errno=0 [ 1181.350769][T11583] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1181.502864][T11583] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1181.503860][T11583] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 1181.503881][T11583] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.503895][T11583] usb 6-1: config 63 has no interface number 0 [ 1181.503918][T11583] usb 6-1: config 63 interface 66 has no altsetting 0 [ 1181.506732][T11583] usb 6-1: string descriptor 0 read error: -22 [ 1181.506854][T11583] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1181.506872][T11583] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.618454][T11583] uvcvideo 6-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1181.618570][T11583] uvcvideo 6-1:63.66: No valid video chain found. [ 1181.696684][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1181.835420][T11583] usb 6-1: USB disconnect, device number 72 [ 1181.870729][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1181.874737][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.874764][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.874781][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1181.874812][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1181.874830][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.949531][ T10] usb 8-1: config 0 descriptor?? [ 1182.735465][T15895] FAULT_INJECTION: forcing a failure. [ 1182.735465][T15895] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.735543][T15895] CPU: 0 UID: 0 PID: 15895 Comm: syz.5.2673 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1182.735577][T15895] Tainted: [L]=SOFTLOCKUP [ 1182.735583][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1182.735594][T15895] Call Trace: [ 1182.735600][T15895] [ 1182.735608][T15895] dump_stack_lvl+0xe8/0x150 [ 1182.735632][T15895] should_fail_ex+0x467/0x600 [ 1182.735656][T15895] should_failslab+0xa8/0x100 [ 1182.735673][T15895] __kmalloc_noprof+0xfb/0x790 [ 1182.735697][T15895] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1182.735716][T15895] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1182.735742][T15895] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1182.735768][T15895] genl_family_rcv_msg_doit+0xda/0x340 [ 1182.735792][T15895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1182.735811][T15895] ? rcu_is_watching+0x15/0xb0 [ 1182.735831][T15895] ? rcu_is_watching+0x15/0xb0 [ 1182.735849][T15895] ? cap_capable+0x123/0x460 [ 1182.735867][T15895] ? safesetid_security_capable+0xa9/0x1a0 [ 1182.735889][T15895] ? bpf_lsm_capable+0x9/0x20 [ 1182.735905][T15895] ? security_capable+0x74/0x280 [ 1182.735930][T15895] genl_rcv_msg+0x614/0x7a0 [ 1182.735953][T15895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1182.735970][T15895] ? ref_tracker_free+0x668/0x820 [ 1182.735991][T15895] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1182.736010][T15895] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1182.736030][T15895] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1182.736048][T15895] ? ____sys_sendmsg+0x565/0x870 [ 1182.736070][T15895] ? ___sys_sendmsg+0x2a5/0x360 [ 1182.736092][T15895] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1182.736114][T15895] ? do_syscall_64+0x17b/0x530 [ 1182.736129][T15895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.736152][T15895] netlink_rcv_skb+0x226/0x4a0 [ 1182.736176][T15895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1182.736196][T15895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1182.736236][T15895] genl_rcv+0x28/0x40 [ 1182.736252][T15895] netlink_unicast+0x7f5/0x990 [ 1182.736281][T15895] netlink_sendmsg+0x813/0xb40 [ 1182.736305][T15895] ? lockdep_hardirqs_on+0x7a/0x110 [ 1182.736326][T15895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.736349][T15895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.736376][T15895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.736400][T15895] ? sock_sendmsg_nosec+0x128/0x180 [ 1182.736421][T15895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.736444][T15895] sock_sendmsg_nosec+0x13a/0x180 [ 1182.736464][T15895] ____sys_sendmsg+0x565/0x870 [ 1182.736494][T15895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1182.736524][T15895] ? import_iovec+0x73/0xa0 [ 1182.736563][T15895] ___sys_sendmsg+0x2a5/0x360 [ 1182.736587][T15895] ? __lock_acquire+0x6df/0x2e40 [ 1182.736606][T15895] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.736656][T15895] ? __fget_files+0x2a/0x420 [ 1182.736672][T15895] ? __fget_files+0x3a8/0x420 [ 1182.736696][T15895] __x64_sys_sendmsg+0x1b7/0x290 [ 1182.736723][T15895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1182.736762][T15895] do_syscall_64+0x17b/0x530 [ 1182.736778][T15895] ? irqentry_exit+0x10f/0x8f0 [ 1182.736793][T15895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.736810][T15895] ? clear_bhb_loop+0x40/0x90 [ 1182.736830][T15895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.736846][T15895] RIP: 0033:0x7f820af3e0d9 [ 1182.736862][T15895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1182.736876][T15895] RSP: 002b:00007f8209196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.736893][T15895] RAX: ffffffffffffffda RBX: 00007f820b1c5fa0 RCX: 00007f820af3e0d9 [ 1182.736905][T15895] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000004 [ 1182.736916][T15895] RBP: 00007f8209196090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.736926][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.736936][T15895] R13: 00007f820b1c6038 R14: 00007f820b1c5fa0 R15: 00007ffc8e9ad2b8 [ 1182.736961][T15895] [ 1183.973600][ T5687] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1184.047330][T15902] FAULT_INJECTION: forcing a failure. [ 1184.047330][T15902] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.047366][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.6.2676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.047397][T15902] Tainted: [L]=SOFTLOCKUP [ 1184.047403][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.047415][T15902] Call Trace: [ 1184.047421][T15902] [ 1184.047428][T15902] dump_stack_lvl+0xe8/0x150 [ 1184.047456][T15902] should_fail_ex+0x467/0x600 [ 1184.047481][T15902] should_failslab+0xa8/0x100 [ 1184.047498][T15902] __kmalloc_noprof+0xfb/0x790 [ 1184.047528][T15902] ? drm_atomic_commit_init+0x10f/0x370 [ 1184.047626][T15902] ? drm_atomic_commit_init+0x10f/0x370 [ 1184.047650][T15902] drm_atomic_commit_init+0x10f/0x370 [ 1184.047670][T15902] drm_atomic_commit_alloc+0xbc/0x100 [ 1184.047690][T15902] drm_mode_atomic_ioctl+0x4a3/0x24c0 [ 1184.047733][T15902] ? do_raw_spin_lock+0x12b/0x2f0 [ 1184.047766][T15902] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.047786][T15902] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1184.047807][T15902] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1184.047843][T15902] ? rt_spin_unlock+0x157/0x200 [ 1184.047871][T15902] ? rt_spin_unlock+0x163/0x200 [ 1184.047895][T15902] ? drm_is_current_master+0x1a2/0x210 [ 1184.047920][T15902] drm_ioctl_kernel+0x2e2/0x3b0 [ 1184.047982][T15902] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1184.048005][T15902] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1184.048031][T15902] drm_ioctl+0x713/0xba0 [ 1184.048055][T15902] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1184.048079][T15902] ? __pfx_drm_ioctl+0x10/0x10 [ 1184.048106][T15902] ? __fget_files+0x3a8/0x420 [ 1184.048122][T15902] ? __fget_files+0x2a/0x420 [ 1184.048141][T15902] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1184.048168][T15902] ? __pfx_drm_ioctl+0x10/0x10 [ 1184.048185][T15902] __se_sys_ioctl+0xff/0x170 [ 1184.048209][T15902] do_syscall_64+0x17b/0x530 [ 1184.048226][T15902] ? irqentry_exit+0x10f/0x8f0 [ 1184.048242][T15902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.048258][T15902] ? clear_bhb_loop+0x40/0x90 [ 1184.048278][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.048295][T15902] RIP: 0033:0x7f58a93fe0d9 [ 1184.048311][T15902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.048326][T15902] RSP: 002b:00007f58a7656028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1184.048343][T15902] RAX: ffffffffffffffda RBX: 00007f58a9685fa0 RCX: 00007f58a93fe0d9 [ 1184.048356][T15902] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000c [ 1184.048367][T15902] RBP: 00007f58a7656090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.048378][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.048387][T15902] R13: 00007f58a9686038 R14: 00007f58a9685fa0 R15: 00007fff89207808 [ 1184.048412][T15902] [ 1184.298180][ T5687] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.298229][ T5687] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1184.298247][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.512885][ T5687] as10x_usb: device has been detected [ 1184.514066][ T5687] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1184.775811][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 1184.775910][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1184.835455][ T10] usb 8-1: USB disconnect, device number 26 [ 1184.947752][ T5687] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1185.153349][T15906] FAULT_INJECTION: forcing a failure. [ 1185.153349][T15906] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.153379][T15906] CPU: 0 UID: 0 PID: 15906 Comm: syz.7.2678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1185.153402][T15906] Tainted: [L]=SOFTLOCKUP [ 1185.153408][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1185.153418][T15906] Call Trace: [ 1185.153424][T15906] [ 1185.153432][T15906] dump_stack_lvl+0xe8/0x150 [ 1185.153466][T15906] should_fail_ex+0x467/0x600 [ 1185.153491][T15906] should_failslab+0xa8/0x100 [ 1185.153509][T15906] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1185.153534][T15906] ? __alloc_skb+0x1d7/0x7a0 [ 1185.153558][T15906] ? __alloc_skb+0x1d7/0x7a0 [ 1185.153584][T15906] __alloc_skb+0x1d7/0x7a0 [ 1185.153608][T15906] netlink_ack+0x136/0xb30 [ 1185.153637][T15906] ? __lock_acquire+0x6df/0x2e40 [ 1185.153652][T15906] ? sock_sendmsg_nosec+0x13a/0x180 [ 1185.153675][T15906] netlink_rcv_skb+0x2a4/0x4a0 [ 1185.153699][T15906] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1185.153724][T15906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1185.153756][T15906] ? bpf_lsm_capable+0x9/0x20 [ 1185.153772][T15906] ? security_capable+0x74/0x280 [ 1185.153798][T15906] nfnetlink_rcv+0x2b9/0x28d0 [ 1185.153822][T15906] ? sock_sendmsg_nosec+0x13a/0x180 [ 1185.153840][T15906] ? __pfx_snprintf+0x10/0x10 [ 1185.153864][T15906] ? unwind_get_return_address+0x4d/0x90 [ 1185.153889][T15906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1185.153920][T15906] ? trim_netdev_trace+0x791/0x820 [ 1185.153939][T15906] ? __pfx_trim_netdev_trace+0x10/0x10 [ 1185.153954][T15906] ? stack_trace_save+0xa9/0x100 [ 1185.153979][T15906] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1185.154002][T15906] ? save_netdev_trace_buffer+0x18f/0x5e0 [ 1185.154022][T15906] ? save_netdev_trace_buffer+0x4c3/0x5e0 [ 1185.154043][T15906] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 1185.154059][T15906] ? ref_tracker_free+0x668/0x820 [ 1185.154080][T15906] ? __netlink_deliver_tap+0x600/0x880 [ 1185.154112][T15906] ? netlink_deliver_tap+0x19c/0x1b0 [ 1185.154136][T15906] ? netlink_unicast+0x7b8/0x990 [ 1185.154157][T15906] ? netlink_sendmsg+0x813/0xb40 [ 1185.154181][T15906] ? sock_sendmsg_nosec+0x13a/0x180 [ 1185.154198][T15906] ? ____sys_sendmsg+0x565/0x870 [ 1185.154245][T15906] ? ___sys_sendmsg+0x2a5/0x360 [ 1185.154270][T15906] ? __x64_sys_sendmsg+0x1b7/0x290 [ 1185.154293][T15906] ? do_syscall_64+0x17b/0x530 [ 1185.154309][T15906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.154332][T15906] ? __skb_clone+0x449/0x6c0 [ 1185.154361][T15906] ? skb_clone+0x246/0x3a0 [ 1185.154389][T15906] ? __netlink_deliver_tap+0x838/0x880 [ 1185.154413][T15906] ? netlink_deliver_tap+0x2e/0x1b0 [ 1185.154443][T15906] ? netlink_deliver_tap+0x2e/0x1b0 [ 1185.154474][T15906] ? netlink_deliver_tap+0x2e/0x1b0 [ 1185.154503][T15906] netlink_unicast+0x7f5/0x990 [ 1185.154534][T15906] netlink_sendmsg+0x813/0xb40 [ 1185.154567][T15906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.154595][T15906] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1185.154623][T15906] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1185.154648][T15906] ? arch_stack_walk+0xfb/0x150 [ 1185.154676][T15906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1185.154701][T15906] sock_sendmsg_nosec+0x13a/0x180 [ 1185.154722][T15906] ____sys_sendmsg+0x565/0x870 [ 1185.154754][T15906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1185.154786][T15906] ? import_iovec+0x73/0xa0 [ 1185.154814][T15906] ___sys_sendmsg+0x2a5/0x360 [ 1185.154838][T15906] ? __lock_acquire+0x6df/0x2e40 [ 1185.154856][T15906] ? __pfx____sys_sendmsg+0x10/0x10 [ 1185.154906][T15906] ? __fget_files+0x2a/0x420 [ 1185.154922][T15906] ? __fget_files+0x3a8/0x420 [ 1185.154945][T15906] __x64_sys_sendmsg+0x1b7/0x290 [ 1185.154972][T15906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1185.155011][T15906] do_syscall_64+0x17b/0x530 [ 1185.155027][T15906] ? irqentry_exit+0x10f/0x8f0 [ 1185.155042][T15906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.155059][T15906] ? clear_bhb_loop+0x40/0x90 [ 1185.155079][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.155095][T15906] RIP: 0033:0x7fb9e8aae0d9 [ 1185.155111][T15906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.155126][T15906] RSP: 002b:00007fb9e6d06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1185.155144][T15906] RAX: ffffffffffffffda RBX: 00007fb9e8d35fa0 RCX: 00007fb9e8aae0d9 [ 1185.155156][T15906] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1185.155166][T15906] RBP: 00007fb9e6d06090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.155176][T15906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.155185][T15906] R13: 00007fb9e8d36038 R14: 00007fb9e8d35fa0 R15: 00007ffca0e7d368 [ 1185.155209][T15906] [ 1185.283382][ T5810] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1185.570821][ T5810] usb 7-1: Using ep0 maxpacket: 16 [ 1185.730459][ T5810] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.730480][ T5810] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1185.768229][ T5810] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1185.768254][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 1185.768269][ T5810] usb 7-1: Product: syz [ 1185.768280][ T5810] usb 7-1: Manufacturer: syz [ 1185.768292][ T5810] usb 7-1: SerialNumber: syz [ 1186.044212][T15911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.044844][T15911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.511253][T15918] INFO: trying to register non-static key. [ 1186.511287][T15918] The code is fine but needs lockdep annotation, or maybe [ 1186.511294][T15918] you didn't initialize this object before use? [ 1186.511321][T15918] turning off the locking correctness validator. [ 1186.511358][T15918] CPU: 0 UID: 0 PID: 15918 Comm: syz.5.2674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1186.511381][T15918] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1186.511387][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1186.511398][T15918] Call Trace: [ 1186.511405][T15918] [ 1186.511412][T15918] dump_stack_lvl+0xe8/0x150 [ 1186.511439][T15918] assign_lock_key+0x133/0x150 [ 1186.511458][T15918] register_lock_class+0xcc/0x2e0 [ 1186.511493][T15918] ? __lock_acquire+0x6df/0x2e40 [ 1186.511509][T15918] __lock_acquire+0xaf/0x2e40 [ 1186.511526][T15918] ? __lock_acquire+0x6df/0x2e40 [ 1186.511541][T15918] ? __lock_acquire+0x6df/0x2e40 [ 1186.511558][T15918] lock_acquire+0x115/0x350 [ 1186.511584][T15918] ? as102_stream_ctrl+0x27/0xc0 [ 1186.511667][T15918] ? as102_stream_ctrl+0x27/0xc0 [ 1186.511691][T15918] ? as102_stream_ctrl+0x27/0xc0 [ 1186.511712][T15918] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1186.511735][T15918] ? as102_stream_ctrl+0x27/0xc0 [ 1186.511758][T15918] as102_stream_ctrl+0x27/0xc0 [ 1186.511781][T15918] __dvb_frontend_open+0x2ef/0xc40 [ 1186.511842][T15918] ? lockdep_hardirqs_on+0x7a/0x110 [ 1186.511859][T15918] ? mutex_lock_nested+0x152/0x1d0 [ 1186.511880][T15918] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1186.511902][T15918] dvb_device_open+0x258/0x350 [ 1186.511945][T15918] chrdev_open+0x4dc/0x600 [ 1186.511970][T15918] ? __pfx_chrdev_open+0x10/0x10 [ 1186.511996][T15918] ? __pfx_chrdev_open+0x10/0x10 [ 1186.512018][T15918] do_dentry_open+0x849/0x1420 [ 1186.512047][T15918] vfs_open+0x3b/0x350 [ 1186.512069][T15918] ? path_openat+0x2e4d/0x3850 [ 1186.512089][T15918] path_openat+0x2e64/0x3850 [ 1186.512112][T15918] ? __kasan_slab_alloc+0x6c/0x80 [ 1186.512136][T15918] ? do_sys_openat2+0xcc/0x200 [ 1186.512160][T15918] ? __x64_sys_openat+0x138/0x170 [ 1186.512185][T15918] ? do_syscall_64+0x17b/0x530 [ 1186.512207][T15918] do_file_open+0x23e/0x4a0 [ 1186.512226][T15918] ? lockdep_hardirqs_on+0x7a/0x110 [ 1186.512242][T15918] ? __pfx_do_file_open+0x10/0x10 [ 1186.512270][T15918] ? alloc_fd+0x654/0x6d0 [ 1186.512288][T15918] do_sys_openat2+0x115/0x200 [ 1186.512314][T15918] ? __pfx_do_sys_openat2+0x10/0x10 [ 1186.512339][T15918] ? rcu_is_watching+0x15/0xb0 [ 1186.512359][T15918] ? rcu_is_watching+0x15/0xb0 [ 1186.512378][T15918] __x64_sys_openat+0x138/0x170 [ 1186.512405][T15918] do_syscall_64+0x17b/0x530 [ 1186.512421][T15918] ? irqentry_exit+0x10f/0x8f0 [ 1186.512435][T15918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.512452][T15918] ? clear_bhb_loop+0x40/0x90 [ 1186.512470][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.512494][T15918] RIP: 0033:0x7f820aefe90e [ 1186.512509][T15918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1186.512524][T15918] RSP: 002b:00007f820890db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1186.512543][T15918] RAX: ffffffffffffffda RBX: 00007f820890e6c0 RCX: 00007f820aefe90e [ 1186.512556][T15918] RDX: 0000000000000802 RSI: 00007f820890dc00 RDI: ffffffffffffff9c [ 1186.512568][T15918] RBP: 00007f820890dc00 R08: 0000000000000000 R09: 0000000000000000 [ 1186.512578][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1186.512589][T15918] R13: 00007f820b1c63f8 R14: 00007f820b1c6360 R15: 00007ffc8e9ad2b8 [ 1186.512608][T15918] [ 1186.926683][ T5687] as10x_usb: error during firmware upload part1 [ 1186.929286][ T5687] Registered device Abilis Systems DVB-Titan [ 1187.875508][ T1436] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.950320][ T1436] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.123863][ T1436] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.182127][ T1436] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.535957][ T1436] bridge_slave_1: left allmulticast mode [ 1188.535980][ T1436] bridge_slave_1: left promiscuous mode [ 1188.536187][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.540170][ T1436] bridge_slave_0: left allmulticast mode [ 1188.540220][ T1436] bridge_slave_0: left promiscuous mode [ 1188.540393][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.926072][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.933390][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.938040][ T1436] bond0 (unregistering): Released all slaves [ 1188.947521][ T10] usb 7-1: USB disconnect, device number 85 [ 1189.294656][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.294676][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.302844][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.302863][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.368483][ T1436] veth1_macvtap: left promiscuous mode [ 1189.368530][ T1436] veth0_macvtap: left promiscuous mode [ 1189.368680][ T1436] veth1_vlan: left promiscuous mode [ 1189.369164][ T1436] veth0_vlan: left promiscuous mode [ 1189.947519][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1189.973266][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1190.347426][ T5250] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1190.528249][ T1436] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.578115][ T1436] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.690274][ T1436] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.730508][ T1436] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.923304][ T1436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.947361][ T1436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.979398][ T1436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.117710][ T1436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.288045][ T1436] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.377325][ T1436] bridge_slave_1: left allmulticast mode [ 1191.377347][ T1436] bridge_slave_1: left promiscuous mode [ 1191.377515][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.399533][ T1436] bridge_slave_0: left allmulticast mode [ 1191.399555][ T1436] bridge_slave_0: left promiscuous mode [ 1191.399772][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.495982][ T1436] bridge_slave_1: left allmulticast mode [ 1191.496004][ T1436] bridge_slave_1: left promiscuous mode [ 1191.497906][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.499492][ T1436] bridge_slave_0: left allmulticast mode [ 1191.504026][ T1436] bridge_slave_0: left promiscuous mode [ 1191.504435][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.953309][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.959747][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.961914][ T1436] bond0 (unregistering): Released all slaves [ 1192.093863][ T1436] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.096681][ T1436] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.097570][ T1436] .` (unregistering): Released all slaves [ 1192.131310][ T5250] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1192.584472][ T9515] usb 6-1: USB disconnect, device number 73 [ 1192.596474][ T9515] Unregistered device Abilis Systems DVB-Titan [ 1192.601786][ T9515] as10x_usb: device has been disconnected [ 1192.764882][ T1436] hsr_slave_0: left promiscuous mode [ 1192.767013][ T1436] hsr_slave_1: left promiscuous mode [ 1192.767708][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.767724][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.768293][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.768307][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.800059][ T1436] hsr_slave_0: left promiscuous mode [ 1192.812488][ T1436] hsr_slave_1: left promiscuous mode [ 1192.813287][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.813304][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.813833][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1192.813846][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.902430][ T1436] veth1_macvtap: left promiscuous mode [ 1192.902478][ T1436] veth0_macvtap: left promiscuous mode [ 1192.902598][ T1436] veth1_vlan: left promiscuous mode [ 1192.902680][ T1436] veth0_vlan: left promiscuous mode [ 1192.906662][ T1436] veth1_macvtap: left promiscuous mode [ 1192.906706][ T1436] veth0_macvtap: left promiscuous mode [ 1192.906820][ T1436] veth1_vlan: left promiscuous mode [ 1192.906910][ T1436] veth0_vlan: left promiscuous mode [ 1193.475204][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1193.492386][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1193.687421][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1193.703438][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1193.793577][ T5250] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1194.544735][ T1436] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.563710][ T1436] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.699942][ T1436] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.707452][ T5250] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1194.752803][ T1436] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.895588][ T1436] bridge_slave_1: left allmulticast mode [ 1194.895611][ T1436] bridge_slave_1: left promiscuous mode [ 1194.895756][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.897400][ T1436] bridge_slave_0: left allmulticast mode [ 1194.897421][ T1436] bridge_slave_0: left promiscuous mode [ 1194.897563][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.903165][ T1436] dvmrp0: left allmulticast mode [ 1195.164133][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.178051][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.190073][ T1436] bond0 (unregistering): Released all slaves [ 1195.483942][ T1436] hsr_slave_0: left promiscuous mode [ 1195.484383][ T1436] hsr_slave_1: left promiscuous mode [ 1195.485038][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1195.485054][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.485664][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1195.485678][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.529191][ T1436] veth1_macvtap: left promiscuous mode [ 1195.529241][ T1436] veth0_macvtap: left promiscuous mode [ 1195.529357][ T1436] veth1_vlan: left promiscuous mode [ 1195.529435][ T1436] veth0_vlan: left promiscuous mode [ 1196.017767][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1196.034484][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1196.246765][ T5250] 8021q: adding VLAN 0 to HW filter on device eth21