last executing test programs: 4m1.251628385s ago: executing program 2 (id=278): syz_open_dev$loop(&(0x7f0000000100), 0x1800000000, 0x8080) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x100) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f00000002c0)={'bridge0\x00', @ifru_ivalue=0xd}) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000400)={0x3, 0x0, 0xffffffffffffffff}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000600)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(r2, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x52) write(r4, &(0x7f0000000580)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x284, 0xb5, 0xa, 0x3, 0x0, 0x5, 0xfc}, &(0x7f00000003c0)=0x9c) open(&(0x7f0000000080)='./proc\x00', 0x280, 0x80) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000}, 0x7e) 3m58.528698194s ago: executing program 2 (id=290): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0300fffff400", 0x6) 3m58.463102434s ago: executing program 2 (id=291): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') write$cgroup_int(r1, &(0x7f0000000180)=0x80040801, 0x12) (async) connect$inet(r0, 0x0, 0x0) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) (async) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) (async) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000540)=""/102393, &(0x7f0000019540)=0x18ff9) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x801) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}}) 3m58.18964328s ago: executing program 2 (id=293): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0xfce) pselect6(0x40, &(0x7f0000000540)={0x2, 0x8, 0x40, 0x9, 0x3, 0x8, 0x7fffffffffffffff, 0x9}, &(0x7f0000000580)={0x4, 0x0, 0x6cfd, 0x40, 0xbaae, 0x1251146, 0x7, 0x6}, &(0x7f00000005c0)={0x8, 0x1, 0xb, 0x6f, 0x0, 0x8, 0x9, 0x10000}, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000090601020000000000000000030000080900020073797a31000000000500010007000000280007800c00018008000140ac1414bb0c00148008000140ac1414bb0c0002800800014064010101e9bde6b292b4e1801c48ef62b4ba1434ee3baff5c9e7aa690cfb8054c162022d40556095d45c1e124a0f3314"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) socket$key(0xf, 0x3, 0x2) 3m58.121154107s ago: executing program 2 (id=294): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000740)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000780)=0x1, &(0x7f00000007c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc_mnt\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc_mnt/sys/crypto/af_alg_restrict\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)="0600528f306ace00694d468ab874ad539b21be73ecbb261dba67da570bd5f2dd4b0766c590242a3257385e36e7656cfb", 0x30) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x109e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000009c0)=0x17) r3 = syz_clone(0x9100000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101180, 0x0) ioctl$TUNGETVNETLE(r5, 0x8010743f, 0x0) preadv(r4, 0x0, 0x0, 0xe, 0x1000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00), 0xc0001, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000a40)=0x1) ioctl$PPPIOCSMAXCID(r6, 0x40047454, 0x0) close(r1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r7, 0xff, 0x6, &(0x7f0000000940)='\x00\x00\x00\x00', 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20) accept4$alg(r8, 0x0, 0x0, 0x0) 3m57.912344907s ago: executing program 2 (id=297): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000100)={0xffffffff, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0x7, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0x101, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffdfffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0xe, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000380)=0xf73f) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="080005020000", 0x0, 0x0, 0x10, 0x1, 0x0}) 3m42.785116079s ago: executing program 32 (id=297): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000100)={0xffffffff, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0x7, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0x101, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffdfffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0xe, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000380)=0xf73f) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="080005020000", 0x0, 0x0, 0x10, 0x1, 0x0}) 3m31.774750427s ago: executing program 4 (id=360): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x10000000, 0x10}, 0x24004804) 3m31.717543895s ago: executing program 4 (id=408): r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001100000000", 0x39}], 0x1) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x1) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @aes256, 0x0, @desc3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00', 0x0, 0xfe8ee28a1d8eb870, 0x8, 0x6, 0x2, 0x40, 0x65f, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port0\x00', 0x3c, 0x141000, 0xd, 0x0, 0x10b, 0x9, 0x5, 0x0, 0x2, 0x1}) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) 3m31.578273884s ago: executing program 4 (id=409): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0xffffbf00) 3m31.532687997s ago: executing program 4 (id=410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000040)="0400") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$kcm(0x2d, 0x2, 0x0) getsockopt$bt_hci(r1, 0x11d, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x3, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3m31.436164042s ago: executing program 4 (id=411): r0 = open(&(0x7f0000000000)='./file0\x00', 0x2a442, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0xff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)=']-A', 0x3) mount$nfs4(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x9000, &(0x7f0000000140)=ANY=[@ANYBLOB="00000100"]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2, 0x2010, r0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8200, 0x0) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f00000003c0)={0xc000003, 0xffffffffffffff8f, 0x0, 0x1, 0x4000003}) ioctl$KDSETMODE(r3, 0x4b3a, 0x4) r5 = fsopen(&(0x7f0000000180)='sysfs\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x4b4b, &(0x7f0000000240)={0x4800, 0x0, 0x4, 0x0, 0xb9a9, 0x9ce}) r7 = fsmount(r5, 0x0, 0x83) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/usb/usbmon/0s\x00', 0x4100, 0x0) fchdir(r7) rmdir(&(0x7f00000001c0)='./bus\x00') ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000680)={0x5, 0x1, 0x40000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000006c0)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) 3m31.263081092s ago: executing program 4 (id=412): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x3, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf25020009004000001fff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) 3m15.931967995s ago: executing program 33 (id=412): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000005c0)={0x3, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf25020009004000001fff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) 2m21.562723922s ago: executing program 1 (id=767): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea839444bdcc9899f2c8ac222d010203010902120001000052090000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xb7, 0x20bc, 0x5500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x9, {0x9, 0x21, 0xfffc, 0x5, 0x1, {0x22, 0xa4d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x4, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x3, 0x6}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x311, 0x81, 0xf8, 0xaa, 0x40, 0x8}, 0xf, &(0x7f0000000340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1d, 0x6c, 0xc, 0x9}]}, 0x5, [{0xfb, &(0x7f0000000440)=@string={0xfb, 0x3, "7f8462e4ef313cfce4874fb95b2ada76408200ee05d6f34fefa05c76a1d4bf627391fd52ce43ec8652b57f41f906c2c94f87606bbea3bb38cc30dc4dc070cb6fc9e6410e7fe13a96c18a519c97d1487fda50503dc28b3cc4414bebe7a8c9a0501daf5e08aa721f06d19bbe48ed9e55a995355d727748a250c42125ce623b3470a6edb8a365802a034edb852f14408c3433b932c1d7b3826db48702b50ff60ee3ea602beaf7bd8fc9ac6ba3df4a47a76502bb173c7b0bcd5fafbe3885ec4f88d3b5b942ff3124cd85b392cc70587e7ed7ee6471e7369bd53b52b78a6f79e4ed42a2800d919924ef853c04a8fbd84e796f095b8dab9537423ce6"}}, {0x35, &(0x7f0000000540)=@string={0x35, 0x3, "edd27183ca01ddb7d6d8bdfe9916fbd4aa8e2b81e30ed6be93cf211e6c5bde21caebd759640bc205e0761cc39a2307585c9725"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x426}}, {0x77, &(0x7f00000005c0)=@string={0x77, 0x3, "cfdefad7250f8a0cafc5b766015858b73ab9d0c25f28e928133880f53360011a7b6710de8c22a87727d914b14273e462e1a2ecfdc9d45cc29260399c21bfe6319654838de427b0f149897e3b3cb70614c4b271d128647fa098b0701cb922abf83e799f027f7b83ed0e1b8dd08e9531bcb4baecc843"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="40b100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m18.406894887s ago: executing program 1 (id=797): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000180)="00000000000000000000000000000000001e000001") 2m18.185761089s ago: executing program 1 (id=799): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="20c81e0000004d61501d01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt(r1, 0x84, 0x81, &(0x7f0000000380)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000003c0)={0xb}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000440)="cd", 0x1, 0x24000885, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8938, &(0x7f00000004c0)={'\x00', @ifru_flags=0x8000}) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x3}}}, 0xb8}}, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000000)="01000000", 0x4) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000080)=@generic={0x6, "000000000000080000001900"}, 0x80, 0x0}, 0x0) 2m16.466304397s ago: executing program 1 (id=816): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac3(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="020008"], 0x0}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @local, 0xfff}, 0x1c) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000150041000000ebe803bee7ea2d"], 0x225c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000094) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00008f6000/0x3000)=nil) mlock(&(0x7f0000c49000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) write(r3, &(0x7f0000000440)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ff) (async) socket$inet6(0xa, 0x80002, 0x0) (async) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_usb_control_io$uac3(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="020008"], 0x0}, 0x0) (async) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @local, 0xfff}, 0x1c) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000150041000000ebe803bee7ea2d"], 0x225c}, 0x1, 0x0, 0x0, 0x20040845}, 0x4000094) (async) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00008f6000/0x3000)=nil) (async) mlock(&(0x7f0000c49000/0x3000)=nil, 0x3000) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) (async) write(r3, &(0x7f0000000440)='3', 0x1) (async) 2m13.086338992s ago: executing program 1 (id=831): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x623c6a8a2701657f) (async, rerun: 64) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) (rerun: 64) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='gfs2\x00', 0x0, &(0x7f0000000980)='norecovery') 2m9.41662322s ago: executing program 1 (id=842): socketpair$unix(0x1, 0x3, 0x3300, 0x0) 2m8.468972612s ago: executing program 34 (id=842): socketpair$unix(0x1, 0x3, 0x3300, 0x0) 4.614568706s ago: executing program 0 (id=1610): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r1, 0x1, 0x70bd2a, 0xe7030000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) 4.443197087s ago: executing program 0 (id=1612): r0 = semget$private(0x0, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @local}]}, &(0x7f00000002c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f000001b480)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f000001b4c0)='./proc_mnt\x00', &(0x7f000001b500)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000001b540)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f000001b580)={0x2020}, 0x2020) semtimedop(r0, &(0x7f0000000180)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000001c0)=[{0x4}, {0x2}], 0x2) semctl$SETVAL(r0, 0x3, 0x10, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x175a02, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000002480)=""/102400, 0x19000}, {0x0, 0x300}], 0x2, 0x0, 0x0) dup(r4) read$FUSE(r3, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r3, &(0x7f0000002340)={0x130, 0x0, r5, {0x4000000000007, 0x2, 0x0, '\x00', {0x6, 0xaf22, 0x4, 0x0, r6, r7, 0x6000, '\x00', 0x1003, 0xb, 0xd60b, 0x7, {0x5, 0x200}, {0x2f, 0xfe, 0xc000000}, {0x4000040c, 0x1ff}, {0x400000000000002, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x80}}}, 0x130) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="baf80c66b85dba1d8666efbafc0cb0c5eeba6100ed3ef30fa6d0f087a97f00f20f08640f300f1c000f0d02b800008ec83626660ff7c6", 0x36}], 0x1, 0x32, &(0x7f0000000140)=[@cr0={0x0, 0x80000000}], 0x1) 3.880786438s ago: executing program 3 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2', 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r2, 0x1, 0x4d, 0x0, &(0x7f0000000180)=0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 3.524396775s ago: executing program 0 (id=1618): close(0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000001ac00)={0x0, 0x0, &(0x7f00000193c0)={&(0x7f0000019400)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8845) recvmmsg(r2, &(0x7f0000019440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000019540)=[{&(0x7f00000195c0)=""/164, 0xa4}, {&(0x7f0000019680)=""/70, 0x46}, {&(0x7f0000019700)=""/4084, 0xff4}, {&(0x7f000001a700)=""/147, 0x93}, {&(0x7f000001a7c0)=""/167, 0xa7}, {&(0x7f000001a880)=""/262, 0x106}, {&(0x7f000001a9c0)=""/191, 0xbf}, {&(0x7f000001aa80)=""/192, 0xc0}], 0x8}, 0x1}], 0x4, 0x0, 0x0) r3 = accept4$tipc(r0, &(0x7f000001ab40)=@name, &(0x7f000001ab80)=0x10, 0x800) setsockopt$sock_int(r3, 0x1, 0xbf6419c32f71b415, &(0x7f000001abc0)=0x25cb, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xd2000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='pagemap\x00') pread64(r8, &(0x7f0000000380)=""/102400, 0x19000, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) ioprio_set$pid(0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000019380)={'vcan0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f000001ac40)={0x2, 0x8200, 0x1, 0x8}, &(0x7f000001ac80)=0x10) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000002c0)="4c00000011000f14001100020000080002000000200000", 0x17) ioctl(r6, 0x4048aecb, &(0x7f0000000140)) 3.231674922s ago: executing program 3 (id=1619): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000280)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4112, 0x1010}, {&(0x7f0000001440)=""/105, 0x69}, {&(0x7f00000014c0)=""/42, 0x2a}, {&(0x7f0000001500)=""/101, 0x65}, {&(0x7f0000001580)=""/4103, 0x1007}, {&(0x7f00000025c0)=""/24, 0x18}, {&(0x7f0000002600)=""/12, 0xc}, {&(0x7f0000002640)=""/109, 0x6d}, {&(0x7f00000026c0)=""/225, 0xe1}], 0x9}, 0x7}, {{0x0, 0x0, 0x0}, 0x7ffffff}], 0x2, 0x12140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f0000000140)='7', 0x1) r2 = syz_create_resource$futex(&(0x7f0000000180)=0x2) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./proc\x00', &(0x7f0000000200), &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x1c, 0x1) futex(r2, 0x86, 0x4, 0x0, 0x0, 0x1000000) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) mlock(&(0x7f0000000000/0x900000)=nil, 0x900000) 3.217859416s ago: executing program 6 (id=1620): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f2303920422c02124285010203010902a400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000180)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000001c0)={0x40, 0x0, 0x3, "00d04c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, &(0x7f0000000040)={0x40, 0x31, 0x93, {0x93, 0x1, "5bd10a62084b7e0a103fe75cedf9f2e4b94af8e488a2a1e2e5708ce294cf4bc7d0be6e5e7de03900df7dd5a3378b9c58f07c7a000bdb630b2646bf61f9b9aacd1f3ead0a9b25926473ba5241a901865eabda12eb259bf5c79d4cbd968170af8605390627b7ac02d2f5a5331633a7dc5344ba9c98b62197a87fb8e17db1e4bbf1b9377aac7a795208ba9fef675eaa7cdfa5"}}, &(0x7f0000000200)={0x0, 0x3, 0x68, @string={0x68, 0x3, "9b2cd5443ed4db6a479e8df0e305072b151316ea7d4668dad8b90f99aa26cff0da99772213b8b27400fa1f1483ff4de39ef2dd420f601e79858b2f29beecb212475e5d68c81be5428d8b3c55565255705587e52808aa81293c1b1217f6b3b8d468bebc6d2ef2"}}}, &(0x7f0000000880)={0x34, &(0x7f00000002c0)={0x20, 0x6, 0xfc, "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"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x0, 0xba, {0xb8, "353e86e2a7917178d8a8c50eb960d926eda185e7a6d8015620c277e4b27fda9462043215ffa821faba3849e6fb56e485ec790d7bc0c879b409d3dcfdb103ccd6eda8175e37dc7a0d6331a570223521287457678231f55410376ab207738d44ee7d2516b172537ea877a58a4a0e4d026456f374bbb7d6ab1f060e5238e8e146f5f6b52eed0cc152d90373b62a5361200c32a53f8ca41fc6dcf60f26f29413689686d9a28c2b065e8ff0091780938f6c7c82ed497f9f896c18"}}, &(0x7f0000000800)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000005c0)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x13, 0x1, "e3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000700)={0x20, 0x17, 0x1, ','}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x3, 0x6, "5e11b8afbdfa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.000822829s ago: executing program 5 (id=1622): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000001c0)=0x100000001, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) connect$inet(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000640)={0x15}) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000680), 0x4) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000000)={0x2d, 0x0, 0x0, 0x10}, 0x10) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x48}, 0x10) connect$phonet_pipe(r0, &(0x7f00000006c0)={0x23, 0x0, 0x58}, 0x10) accept4$phonet_pipe(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) 2.867346643s ago: executing program 5 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000024c0), 0xa400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002500)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x1) recvmmsg(r2, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003ac0)=""/215, 0xd7}, {&(0x7f0000003bc0)=""/70, 0x46}, {&(0x7f0000003c40)=""/203, 0xcb}, {&(0x7f0000003d40)=""/25, 0x19}, {&(0x7f0000003d80)=""/154, 0x9a}, {&(0x7f0000003e40)=""/4085, 0xff5}, {&(0x7f0000004e40)=""/220, 0xdc}, {&(0x7f0000004f40)=""/106, 0x6a}], 0x8}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x5c}, 0x7}], 0x5, 0x20, 0x0) recvmmsg(r2, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x800008}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002540)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000, 0x40000003, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r5 = syz_open_dev$radio(&(0x7f00000002c0), 0x1, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x17ea7000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='net_prio.prioidx\x00', 0x275a, 0x0) preadv2(r7, &(0x7f0000001480)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x101, 0x1, 0xe) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000025c0)=ANY=[@ANYBLOB="68000000000101047ee346b755f700000000141a0000f2ffffff230001801400018008000100e000000108000200e00000010c0002800500010000000000240002800000000012000200ac1e00010c000280050001000000000008000740fffffffc04001640feff00000000000000000000000000004b2c8fc8e9fbb3f2ef64eb9e14c05830208be0d2cba20000000000000000315fe4c623aed1a0810bf60b943eb6a43cfccf856661516d9ab1ad824a1c87623b906984e625645b1e9ad37bb3e048f7496f1927ee8a55"], 0x68}}, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) openat$cgroup_ro(r7, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000026c0), 0x20b00, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 2.72626277s ago: executing program 3 (id=1625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x1) write$sysctl(r0, &(0x7f0000000180)='7\x00', 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1, 0x0, &(0x7f00000002c0)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x189882, 0x61) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x2000, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f00000004c0)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = add_key(&(0x7f0000000540)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r6) keyctl$describe(0x6, r7, &(0x7f0000000ec0)=""/4096, 0x1000) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000500), 0x10) r8 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x80808}, {{0x0, 0xfffffffffffffe5e, &(0x7f0000000680), 0x2c, 0x0, 0x64}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r8, &(0x7f00000006c0)=""/224, 0xe0, 0x40000000, 0x0, 0x0) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/asound/devices\x00', 0x0, 0x0) read(r9, &(0x7f00000004c0), 0x1000) write$cgroup_devices(r3, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r3, @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRES8=r2, @ANYRESHEX=r1, @ANYRESOCT=r4, @ANYRES8, @ANYRES16=r5, @ANYRES16], 0x11) 2.590411714s ago: executing program 6 (id=1626): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1ff, 0x40, 0x100, 0x9, 0x0, 0x8001, 0x351d, {0x0, @in={{0x2, 0x4e23, @local}}, 0x9, 0x8, 0x8, 0x106, 0x5}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000640)={0x0, 0x3c462ccb}, 0x8) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="60010000100001000000000000000000fef841f9f7c21fd1ee000000000000bb000000000000000000000000000000000000ecdf000000000a11df6deb000000396bc9fc264a2e4b0fd26d9177351e95ab48c758c44b4a18411547548816cc00ad79eb293c3dc4bb0499684efb5e48af607a40fc312b41206eaff267b0a1be9117086e6e05", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x24004000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="002218000000050c150825ff0904a10109"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000500)=0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0xd6ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x8, 0x0, 0xffffe]}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000ac0)={0x24, &(0x7f0000000740)={0x40, 0x7, 0x9a, {0x9a, 0x9, "5e2de47a87346efb594eaee5268c28a4ace0f469c80f0d6482d7888ba1963a4a0babb5b5df8f0e9c6ec936036670632047fd2ea78b087258dbec59877003300f0f350a38f557a0cff4bac664b4397fe71e68bb27bba0d2226d276c641d987f64d87091d80f2462daf87ede1daa9b385f3ca3204f4e94aacd5488f4584efc8b25f6c4d1ddb56d17ebcbfb6260b7c7c3d495b050f0e7e946f9"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}, &(0x7f0000000a40)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "1f3a83bf"}]}}, &(0x7f0000000a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1b9b, 0x0, 0x1, {0x22, 0xe3b}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b00)={0x40, 0x0, 0x88, "2f5fa31e40330bdb1e01640afe111c8cf82b52c0238b60bf9a8db7dd35ea91d2eef2cfa47f3488c92e94feab4545851ad5050c311f9c6e5a945026df6192da54d940eff38b01782dfc89ac22b7d6b67049138cf0f4b052dcef6392b8b54a2b35d3f0f4f69c69f1834763cc9c2594108d6bdfeb2a5b788798b47bc0b4fae9468aae3b56b2f767b533"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1}, &(0x7f0000000c40)={0x20, 0x1, 0xfc, "fae794d60f9f73fdf7b3b3be4ee8e84bd58b499ae821f87062d488528007b36c234cae57daf3664413d0f3c42f70ca52aea1f757fabb4407d0e300ac6a6037fa8036898e13b6968d464f556b49c9e9f0551072aebf5eeb2e0b29b40913f73a711201a55bbe495ece27fe4a11d90c9e84e85af25bcfe2abc4649e438a6f064c93542f1aefff278c4c4f62c641b41a730fd9d3f881d95c35bf1efdc43d36f76aa75fd9ddc6040a91d033161b5385a8b23b5b42ca11099ecf9f0fddd958428660c1dd5c04ec1ee801f790b8c37f57a552106e066b0027bbba2ee84024763b45ec99efc3767488915295341d906823ca5184f9536a75ced148736e29c28a"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0xe3}}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.81546987s ago: executing program 3 (id=1627): r0 = semget$private(0x0, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @local}]}, &(0x7f00000002c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f000001b480)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f000001b4c0)='./proc_mnt\x00', &(0x7f000001b500)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000001b540)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f000001b580)={0x2020}, 0x2020) semtimedop(r0, &(0x7f0000000180)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000001c0)=[{0x4}, {0x2}], 0x2) semctl$SETVAL(r0, 0x3, 0x10, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x175a02, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000002480)=""/102400, 0x19000}, {0x0, 0x300}], 0x2, 0x0, 0x0) dup(r4) read$FUSE(r3, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r3, &(0x7f0000002340)={0x130, 0x0, r5, {0x4000000000007, 0x2, 0x0, '\x00', {0x6, 0xaf22, 0x4, 0x0, r6, r7, 0x6000, '\x00', 0x1003, 0xb, 0xd60b, 0x7, {0x5, 0x200}, {0x2f, 0xfe, 0xc000000}, {0x4000040c, 0x1ff}, {0x400000000000002, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x80}}}, 0x130) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="baf80c66b85dba1d8666efbafc0cb0c5eeba6100ed3ef30fa6d0f087a97f00f20f08640f300f1c000f0d02b800008ec83626660ff7c6", 0x36}], 0x1, 0x32, &(0x7f0000000140)=[@cr0={0x0, 0x80000000}], 0x1) 1.814420689s ago: executing program 0 (id=1635): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x20040) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x4, 0x2317862e, 0x409, 0x2, 0x401, 0x8, 0x30, 0x5}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x200000, 0x200000, 0x7}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x12, &(0x7f0000000300)={0x1, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0xfffe, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000440)) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000240)=0x10) sendfile(r1, r1, &(0x7f0000000040)=0x2eb4, 0x2000007ff) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r4, 0x40045436, 0x14) 1.813442011s ago: executing program 5 (id=1628): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x2010, r0, 0x10005000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x2010, r0, 0x10005000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000007c0)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a020032090581"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000007c0)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a020032090581"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xffffffdb) memfd_create(&(0x7f00000000c0)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) (async) r3 = memfd_create(&(0x7f00000000c0)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000887000/0x1000)=nil, 0x1000, 0x1000009, 0x11, 0xffffffffffffffff, 0xd531c000) (async) mmap(&(0x7f0000887000/0x1000)=nil, 0x1000, 0x1000009, 0x11, 0xffffffffffffffff, 0xd531c000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x700}) mmap$IORING_OFF_SQ_RING(0x0, 0xee3, 0x2000002, 0x10010, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x370, 0x7fffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) (async) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r10, &(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r10, &(0x7f00000005c0)=[{{&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000680)="49d3", 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/112, 0x70}], 0x1}, 0x121) shutdown(r10, 0x1) poll(&(0x7f0000000540)=[{r9, 0x6086}], 0x1, 0x4) (async) poll(&(0x7f0000000540)=[{r9, 0x6086}], 0x1, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) fallocate(r3, 0x3, 0x5, 0xffffffff) (async) fallocate(r3, 0x3, 0x5, 0xffffffff) fsmount(r1, 0x0, 0x1) 1.695194232s ago: executing program 6 (id=1629): add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000340)="666f6f23646e736572726f723d3120a11909b98b6beb329196f9ebdda50c906a5588df6996f431972ae2e0562c4bbf91f648e52712e630a2a4e61cee9abcc8dc8fd958ba81afcc3c2ec38670a5a73af75f8d1f4cc923e4c715a93f6fc8eb839f57bdce1c83de28f664ee0ff01c12cc9bd4cf7002f85ec3af38c609dd1ff5584b0ed274d40f2e2e2b6a1758167073ed7ad1d4fb180db81bd4ff6788487b93e926b77d9628da7f299365d2d3482f0c06cf6b3b524518c18aa8e3c218c91710063c00", 0xc1, 0xfffffffffffffffe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0xf2, 0xf2}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000044402, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='v', 0x34022}], 0x1000000000000364) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "260000000000000754439400", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) shmget$private(0x0, 0x2000, 0x1000, &(0x7f000000b000/0x2000)=nil) 1.62047154s ago: executing program 0 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'team_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'team_slave_1\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x60, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000a}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000041000701feffffff07000000017c000004004a801c0009000007000000000000006051c7d9f38c8a0d5e57d08b80250000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) syz_usb_connect(0x0, 0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) write(r11, &(0x7f0000000180)='3', 0x1) sendto(r10, &(0x7f0000000240)="e86013d0d4ba9c127043733fa5eb4a3ad62e353f30166f11206ffac1e1273c489df51418174c23a1dfb1b7", 0x2b, 0x4080, &(0x7f0000000280)=@llc={0x1a, 0x321, 0x1, 0xd, 0x5, 0x3, @broadcast}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 1.414186829s ago: executing program 6 (id=1631): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "26000000000000075443940000000002", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 1.249611105s ago: executing program 6 (id=1632): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000029c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002a40)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004b40)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c00)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x5, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x9, 0x0, 0x0, r3, r4, 0x1, 0x8004}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000400), 0xa, 0x62080) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000440)=0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000006c80)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006cc0), 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="240000001100010000000000ffdbdf2514000000270000002c"], 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) mount$fuse(0x0, &(0x7f0000006d00)='./file0\x00', &(0x7f0000006d40), 0x90, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r7, @ANYRESHEX=r9, @ANYRESDEC=0x0, @ANYRESOCT=r9, @ANYRES8]) read$FUSE(r8, &(0x7f0000006e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000008e40)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008ec0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bacff6b94ff5e41400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e567c4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006208000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000aec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000af80)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f000000afc0)="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", 0x2000, &(0x7f000000cfc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d080)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f90000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245890300000000000000002b133b0800000000000000"], 0x0, 0x0, 0x0}) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f000000d180)={0x0, 0x0}, &(0x7f000000d1c0)=0xc) mount$bpf(0x0, &(0x7f000000d200)='./file0\x00', 0x0, 0x38728a2, &(0x7f00000005c0)=ANY=[@ANYBLOB="7569643d974120fbd6e9c7464e9ede8e37d4f3adaeded16c9fc32b5a1c11eedc", @ANYRESHEX=r14, @ANYBLOB=',\x00']) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), 0x2000401, &(0x7f0000000540)={[{@uid={'uid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x9}}, {@uid={'uid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0xaf}}]}) umount2(&(0x7f0000000100)='./file0\x00', 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) mount$afs(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, 0x0) 682.431333ms ago: executing program 3 (id=1633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="54000000100001040000000000000000000000020000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) 534.251505ms ago: executing program 5 (id=1634): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/set_event\x00', 0x0, 0x2) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f00000001c0)={0xd4, 0x0, 0x5}) r1 = socket(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x54) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22003, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000340)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xa, 0x3, 0x10000d, 0x8000000000000001, 0x403, 0x8000040000000001, 0xb3, 0x8, 0x2, 0x2, 0xffffffffe, 0x2081, 0x7, 0x1fd, 0xe6, 0x4], 0x1000, 0x383fc2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/set_event\x00', 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000580)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./proc\x00', 0x280, 0x80) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) 465.317972ms ago: executing program 3 (id=1636): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x18, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xd, 0xf3}}}}}]}}]}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x14f882) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x100000000, 0xd18135cf551e5e3d) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000580)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, "0500000000860600d1f8a0e91dd2aca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x802]}}) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0) fsopen(&(0x7f0000000980)='vxfs\x00', 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r3 = add_key$user(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="166ec4b16a", 0x5, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000009c0)={r3, r4, r3}, &(0x7f0000000a00)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x20042, 0x0) add_key$user(&(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000b00)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b40)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000b80)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000400)={0x0, 0x4, 0x7, {0x7, 0x31, "2cb139e12c"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) socket$inet(0x2, 0xa, 0x262) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @local}, {0x308, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4a, {0x2, 0x4e21, @broadcast}, 'sit0\x00'}) lsetxattr$security_capability(&(0x7f0000000080)='./config\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x5, 0xfffffffb}]}, 0xc, 0x1) write(r9, &(0x7f00000002c0)='rd_pages=', 0x9) 450.355082ms ago: executing program 5 (id=1637): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @initdev}, &(0x7f0000000400)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001f40)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000003b40)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000003b80)={0x0, @local, @local}, &(0x7f0000003bc0)=0xc) r7 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000003c00)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003c40)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000004040), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000004080)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001fc0)={0x14, 0x1e, 0x301, 0x70bd25, 0xfffffffe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040091}, 0x4004000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004140)={0x1c, r10, 0x303, 0x8004000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) sendmmsg$inet(r0, &(0x7f0000004280)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="16c4c28db22dcd1943a7ee92b9c8a605190518ea6e50e66aee7029a3e450a2bab2c21a62758cd9f3b271db88625b61e517", 0x31}, {&(0x7f0000000140)="b97be673d151142a465e86f506ca5f44fb3712", 0x13}, {&(0x7f0000000180)="8597f888c23bc99382e76df8c4d06ec31eac762563f655db4bb9e4775df5d764c4bac1936898a36ab9ea644391dac95169aac929b9ccdcda04ebb20f25033eecd904d53279ca27f773716769919400de8cd728d84b60df4e8d7666bb67c9ab174414c1acd937ea6185350b61c7afae9808b7a2b70f985ea3a1f1220c50445dca3c9841851e04db37bc2b1004c0a08c9ba525609ab2fd7ce51b559c739ab1ee5491ec662bc886d129f8440e0bc619d37946e9a04a7c", 0xb5}, {&(0x7f0000000240)="0cdfb97fc8c05187e7d01cd5c1283a60042d6bc9a648973d19685bf78e000edf277af93659498b6596b371765ccb558ad9659813f9478be7360775bd95881b5a7bf5b0104f065cc1c8e7badce5ee966c9a37a12e436e4bcefe324c103df9380ea79f203394bb66c3665b34b2a0b7be935692e2afca58300800748cf5d397bb32ea29ca9016cb0086bc63b63364823de256", 0x91}, {&(0x7f0000000300)="ceb77421e656208fb411338f674617a33879e22e9570b4b40828", 0x1a}], 0x5, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x44}}, @ip_ttl={{0x14, 0x0, 0x2, 0x104}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x90, 0x0, 0x1, [0xa4, 0x80000001, 0x1, 0xde86]}, @timestamp_prespec={0x44, 0x14, 0xeb, 0x3, 0xb, [{@private=0xa010102, 0x5}, {@loopback, 0x1000}]}, @cipso={0x86, 0x4b, 0x3, [{0x0, 0x10, "2b6cfab8dfdee3cb7da4b676d43f"}, {0x1, 0x7, "9518ab5e03"}, {0x0, 0x10, "41b87b30c1d3a033c708078fc392"}, {0x6, 0x11, "79ded825a4c216c7f1fa58c9c838c9"}, {0x1, 0xd, "4f1cbc481dceb6621fb206"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x150}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="e1f96ac1a6097f839114148deadc88b8c0bee70253babf3d00308df8a69a62562e413c0adfa329e5a113b27226d87ca50f32f30ce825d10143845587cd79e3ec9f7bff77cf51c736be5e4e10", 0x4c}, {&(0x7f0000001680)="8d456c6fd5490b1500d5384b798f33d410c4ef4f21f3ef8bd7b94a29d4947689c0c6501f82a2b5468c56c54c9f40d505d109293c8a0b4fc306198aa00cc0a58c86d3c34db7b0371e3c8a72f39e5f2cfeed", 0x51}, {&(0x7f0000001700)="ffe3c07a728563e7eb7433d3b92e65468f6738637fe4234b229a94eef7bc3ba0141d69976cbb1d0b23899b8ebf7e721a7f7667c3ffef2ded0c0d8e5abb30ffaa978931388f2ce876a162c8646a9521d75297680e778a8673ea7f6b3c0427f5f915465bdc4a9b4a7c0c141f447f890901bec080790561db89d9b05f1bf81de086e7d881a446c1a63510ef8b731d10cd4476f24e3de354afbdd67341e63c2c411be059a5cfc9059eeb65eca7794aec1dc9a8a146279e180039e65e52ad4d1a50aef3e82cc82c499117442880727dae1a", 0xcf}, {&(0x7f0000001800)="726fc4a159e6184aa1d29c62d3f23b1b4c620f81e1097418089563fea98745e7a3091cad63f663f0e2b8d7fb7d6dade601db51e272a030e05447f7d52da35e03c6ad337e6bd62a66c5c11168fe9f32f2af3230163f9eb0313bd2ccfab83a7a2f7ddfdbbb56dd7b40dc1702273bc02ed3bd7b8fd494b95017e4ec6cc109aedeafa0824d8a30d7d2babde7cc6fd58e162cb21433e3c8fd6c8ab699aa82d9a56705e120e4a9b9f90ef0c4973ab01d18967157cb65210f64a5198684736b24bdbb0508c57ebd", 0xc4}, {&(0x7f0000001900)="041c3258c04f52a63e96df58f05c3e5c869fc8c2977999784b70da56", 0x1c}, {&(0x7f0000001940)="1a475cf35b4357df70b121cab9b22c8e24c3e70a6e0c025301aea769c85cd68abedf8ad6a1bfeb249ce0ee5811d754cc0cf0c747e1cf55dfdb60ec4ea693d769d7eefbf534dffd215797aedac87afb7418554270fd436b52b7b8fc01b0892eec2f64b4650be6244e964e8f9e667ea73f6ba1f0868861888141e7383b89f663dfdf85370ddcf5374346c9f284f9665c639e21cd63ebc574f37166f1f90502c732187c15d1f3759008919e2a1207b1711c4b068d771532b564f54f8f31f8562fea980179ad55e623eec2d19d4ddc02b4dc82a97e84", 0xd4}], 0x7, &(0x7f0000001ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x10}}], 0x28}}, {{&(0x7f0000001b00)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001b40)="f16734d082e56986c87997a1e90e4c0e69de6346bdc7c2a3efb8918fdfd427ba75a1a534e9398bdb7c6445159ff02b262c943c063e84dedf274f93ea2b8352ed2b6f92e7794952a7e76e036116ea1dd2adc1952a404ed7037322eb36388030b654447e3d567e6845e152a9a6c39ebe4cf2c8b4e2d36a038f8b4ef25e3be381284b41a17314afd6321326a4621309bd533fc064c08a0c738d", 0x98}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="4a48bd6bffd8f7e81a9b0b867d7d2bead20f315d5dc05480d9a45f683322da734143dc77a2f8136cc40da72018ef0c584b5e9172879c8211c79edf14d2e857a581c04838f4e01cd4d345a70e219d1d3fb0780933df301d5fc181ab526df9704c7ac42b4e4c5f335620e003be21f46be76e8b23213e078a3fcc35f59d07aecd9c2380f231dccfd173606d26c95df9", 0x8e}, {&(0x7f0000001d00)="0c642e9bb325aed1c68c9a7ddc87f7bc90483bf9e11fc509524a4c0c4ef03448d1aa5a8eaeeb967caa6736c0a9a0adc976c20afff1b0df169a9aedbc6481a95b87de7b199985b271c38838321957e46877ff1f57d9a5ba75719b8ea2f40ce24d4a8521cc60529e8677f1ff4a40420261ce2b938d71b05153545c3f3a2f2488dcf0db94d4d7c7f2dd4f7a09a8d514dac59a892dd1751597f1d7e8cabbeadbd675f1cd0b63d25cc7d2d0f4cc6fae3d9bf6b2dd38b2f23d72984f00689514d08fe00bb6ab17d36553e1b03bde51686710c3aadf65977d51eac2ac462045df5f61467fc7f38164dc4927145594c7b39296f9763d953d", 0xf4}, {&(0x7f0000001e00)="b6e167ab02fdfd5dce1bd6211c75d14b21b6534ab720ca32", 0x18}, {&(0x7f0000001e40)="190b1d5da432e87257360bdabc4e76", 0xf}], 0x6, &(0x7f0000004580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x6, [{@multicast2, 0x100}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0xd, "06522c7c9b38a963d12983"}, @rr={0x7, 0x1b, 0xf1, [@multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local]}, @cipso={0x86, 0x4a, 0x3, [{0x2, 0x2}, {0x5, 0x7, "8fc0becdbf"}, {0x5, 0xc, "af543e30355ad22a552f"}, {0x1, 0xc, "d227b8633e0fa4e01826"}, {0x0, 0x2}, {0x0, 0x11, "33fae5f6982e82b7faef367241f93d"}, {0x1, 0x10, "31a21ad89d76b6830fbb80eeed37"}]}, @rr={0x7, 0x23, 0x6e, [@empty, @loopback, @remote, @rand_addr=0x7, @rand_addr=0x64010101, @broadcast, @private=0xa010101, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x140}}, {{&(0x7f0000002100)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002140)="aad0af25125d2db6c7ffc437d5b0a4d71a88a5aad6c9c61454d0061c465b67d5e5e9cc7c6902bf2f7ad348c6f4dc254faea4a69e010df5d697198fb26eadd622efb433acf71c0adb1dac4ff357ddc7f3c0f7d43c0750dd4a26d8ba17b45f558ac20bc8cf35d91ba785e1ffced01608abebe540d9708419c91acaffb3a98e52045dc1e58350ba7f0bb4324a8d4a0198cf69f6df8e705718d4a922d8b13b83f00376ecd1641ef6c792722e5b3d485ca3704b9ba41cc16f0291d2c39cb76e323424b6ff8b4e64e9838ad4c26b9f678b2b55cca716dd4fe623258a7e9b6c9a1340ca", 0xe0}, {&(0x7f0000002240)="bfb0089ed4486d47d492d5e94acaa0439ae70a3420f7869800f3ce0742f2bee529aa0315f744ce81a6c66e52d034f588cfef456cfec6e10be29479e38c4a71bfb18492183d37ab297132da62259b45f220b798d0f96859fe595949f96a73ad7c5157efc8292bbc6a4c6be131dd741b31cfe4a180dc05a05c52c6686bb51b8e46", 0x80}, {&(0x7f00000022c0)="5c725762fe507538faf24af184974694a893609cea4578755c7691e046a005d0592859da88cd7332e21a7ca5365932a5f8af410e0475e37a3957718ca54b02437ed037e7327d9154aa6d295114c8327af688c5e0acd2bf7b578966e3c927d4bc5e380313bcd9b61f33b6cf0a2bbdf07ec120008b467b5be77a188c850393308906192cc6a4876bc6a261", 0x8a}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="adc0cbb359dca6332cb87f382317a6c6ffbf0abcb7589cc7859d382c523ecc29222b4c10d0b9f06bff1a95a9de5e2f6af08402b42a345fb29fc1c72ac2660ad9139202a762b532684e6ea2829a665a61", 0x50}, {&(0x7f0000002440)="de3fb4a9bad40b4ca05b2298335c768e5cb28d7e85c2dcae2440442c115748dcc9d732026b40863dc1381c700d9eb1425d7f44abdc0edfdc176eed9a06c42367a962df229dc40a1a387f47aefaa7f042e98cf7", 0x53}, {&(0x7f00000024c0)="d2cfaf512e763d81155c90025c53aa6dfa4f46c9ad9cdf8ea5a8f2ffe7dde7de6c78f2204aa14d227b6ac5af7de9c826426ea6bd39abee86780203c7666809239077b48d7c776f8a76534b19917cf4b6e30f6c14", 0x54}], 0x7, &(0x7f00000025c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x48}}, {{&(0x7f0000002640)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000002680)="73268bd0ec3b9dc47ab6284fb3f6eeb8af37451bc1cbc2ab872d44538f7a029d21c5479f7d0bc147ea726fa8ae5b004a7bf58a1cb2180ee61d81708e814a47ecdf3283b0fcc6ca31c90526ad2aa1440f0379fcd056f6d136f43089980f1d29e7ab6cace6f88af8fd73bdae884bd65d6cceb11f0e02a925ce3725866aff2c7d6502bc291b0838b89689d6367723d2adad36f8d9ac27c9ed017e35cff61986b6b8e2c9c5be6089", 0xa6}, {&(0x7f0000002740)="1037f951e507a743741fd7da295efd8967de4ae18318550b27f2463eb723b447c20a0517df538bd03a984a23a035ae0ec021701fcb8458c1fd0bb64b286fb5b816b76a1995976e820a34b4c9f36a62797dda8d62a8009bf9af1d90d30a5b1d4a29a1e4e15be540802a45be87bb46c8816b35ea70b48234330a1fbf334e50c53fb7b74a6cbb41a6248d8be9015df202e8fcc31d697a0f5a262128b7d5315032fdc3486f4d8b07ff447bfa084e34f31d70962f48d977b115c8f3e5fbebec9fb095249a791c11d2531b0b1e4ba8bfb5ba637d97c21b4d7dbf2101196d7ca42cbf349286d82b530abc1aac77fd27", 0xec}, {&(0x7f0000002840)="b9210993edb12f603bb47e9b88d5ed2e45ab46", 0x13}, {&(0x7f0000002880)="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", 0x1000}, {&(0x7f0000003880)="2f4e8c768d618f83d1c7214c92ee216ef415a5be1e1107c3f50df4c74b31b3bbd0d4a06fd956a7d7189442f0f9314036ae7d28ed5e11e71c5f0a7726dba8c2d44bfe35886e939114d6acfaec5453f97bcc022d90b0faeef9c6309e9634a52e4adb46bfa2f526ef298bcfc950403eabbc1d98c3f33132eb002442a4a352452611cd6b81d13f9cbf8146d982b218d16e216fd16dad2dcd14a180423ff19d1814cbdf639ab3d4a36919e3b9675d9369864bb1e70d913c1e7526fb72f563c7cb66363e2bccc7665468fd", 0xc8}, {&(0x7f0000003980)="038b45dc482791746ee110c439bf41b2b9eebcd8b688a6dbc11628359b4fcd6c79e32f2cc417c41dd55f0d9fd37331fbf6e10c592a5320a6f33241e29dd3470999779231267a64060d282cceabbccfc35a6b", 0x52}, {&(0x7f0000003a00)="db192d14b5ef28ebebec78fd46acb63d4a4cbab67b36aa44ee4a452b1feb84d950edde8dab22f3885d198471e730a680e3308553dd52d43028cc0015622e21413e63b269a8d6526394195792062eecf0ab56a4b461e507b49194fc06dda353c693a19cbb41b6104423781cf9c34197557d5b0c23e5d34b357533237c2e6cad3b47a4ee7e13f43134ae5c7d998d7d7548f22d414717ba", 0x96}], 0x7, &(0x7f0000003c80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2307}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010101, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010101, @broadcast}}}], 0x90}}, {{&(0x7f0000003d40)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000004000)=[{&(0x7f0000003d80)="bbdbf4f01eb20609bdc841006e6fde72d37d1b4efae1d228f114bec0777509862c6b3921c11761fd29febb446d80b99ad65ad94ed75c08e414f62220ae4eb9f131d42a6bebf0878221da90e62cffe68c05a7706484556385a45aaa785e5f2fd13af369d3367e785a83c56c6dd9c829414ca5", 0x72}, {&(0x7f0000003e00)="64c5504f1fd69d4d6b7f4c1eab313573276202f438b28b20e5ca35b7d35141eece159ed2f4ba693ada7dc35bf9bf0cf49898fe56ae74dcee698c4a38dc097fba3e2dda519dc5b6", 0x47}, {&(0x7f0000003e80)="ded4b1656fb20073484360c32bfd2d345cf8087d33ddf44c01df48069ec441263164aa4f5ebafa4f531145ae66f3c0b592a8d5232c82a88de1755f4555b6fc975d595464a7f72e18c0eea0ecca8d83967e3d537c947c3f7f4207a6bb1ef4528a2374f7e7a11c6c7d83f4a2a587d718a1965c0da88940cc6cb45d0221ac65c1fd7d8e7e9fd302332efdf2dae3ef99c29e8150f78f8eeaee", 0x97}, {&(0x7f0000003f40)="c0b2acc1360cb4dc50718f7938fb1819b09e102b9da7df0e97ef7e916fd14de5f34bd6c3def4400f14b4eb3a147b27173cba3c5b251aea3070259fa1c0e446cd702e08df9ee9d0ba039e124e95323a782058eb8c4a8699022f20f2ccb0c056495a5600a508dd20672edccecc7b1f87157341979e389ddf8fa75e36aec1df5b1a05632f7d7af4c4fefe70576d9880d89ec3a8a6b0ee177a3fc9be37f73194fa2e3bf2", 0xa2}], 0x4, &(0x7f0000004400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0x13, 0xda, [@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @loopback]}, @lsrr={0x83, 0x23, 0x20, [@dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010102, @loopback, @loopback, @loopback, @local]}]}}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@generic={0x82, 0xc, "1b790be0a86fd0a4a761"}, @timestamp_addr={0x44, 0x3c, 0x18, 0x1, 0x6, [{@private=0xa010101, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback}, {@broadcast, 0x80}, {@loopback, 0xaf}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff4}]}, @lsrr={0x83, 0x27, 0x63, [@multicast1, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @empty, @remote, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x82, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x8}, {@loopback, 0x3}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x8, "9f04b607e82f"}, @end, @ssrr={0x89, 0x17, 0xb7, [@empty, @rand_addr=0x64010100, @broadcast, @multicast1, @empty]}, @end, @timestamp_addr={0x44, 0x14, 0xb1, 0x1, 0x0, [{@rand_addr=0x64010102, 0x4}, {@private=0xa010101, 0xfffffffe}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbec}}], 0x180}}], 0x6, 0x8000) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x7434, 0x0) 342.254085ms ago: executing program 6 (id=1638): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000080)) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000200)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b03, 0x0) r4 = fanotify_init(0x200, 0x2) fanotify_mark(r4, 0x0, 0x1010, r1, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='4', 0x1}], 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x0, 0x54c1}}, 0x28) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x2) 126.865927ms ago: executing program 0 (id=1639): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1000) io_setup(0x200, &(0x7f0000000080)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000540)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000580)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fbc000/0x4000)=nil, 0x4000000004, &(0x7f0000000600)=[{0x10, 0x6, 0xfffffffffffffffc}], 0x1, 0xbff, 0x1a, 0x0, 0x8, 0x5f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000440)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x400, 0x9) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) io_submit(r1, 0x1, &(0x7f0000002140)=[&(0x7f0000000100)={0x0, 0x0, 0xa1, 0x1, 0x174, r0, &(0x7f0000000140)="1d", 0x1, 0x801}]) 0s ago: executing program 5 (id=1640): setns(0xc9, 0x40000000) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f00000001c0)="0100000000000000000000000000000000000000ffff0000000000000000000000000000000000000100000000000000000000000000000000000000ffff00000000000000000000000000000000000005000000", 0x54) connect(r0, &(0x7f0000000240)=@generic={0x8, "0000000064000000000000000000fe00"}, 0xc) kernel console output (not intermixed with test programs): :50:50:50:50 [ 275.918968][ T8893] tmpfs: Bad value for 'mpol' [ 275.942252][ T8893] netlink: 'syz.6.843': attribute type 1 has an invalid length. [ 276.317961][ T8906] input: syz0 as /devices/virtual/input/input31 [ 276.568131][ T8875] syz.3.896 (8875) used greatest stack depth: 11816 bytes left [ 276.611627][ T5597] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 276.768305][ T5597] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 276.769212][ T5597] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.769229][ T5597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.769243][ T5597] usb 1-1: config 0 has no interface number 0 [ 276.769263][ T5597] usb 1-1: too many endpoints for config 0 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 276.769292][ T5597] usb 1-1: config 0 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 276.769311][ T5597] usb 1-1: config 0 interface 1 has no altsetting 0 [ 276.860018][ T5597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.860059][ T5597] usb 1-1: Product: syz [ 276.860070][ T5597] usb 1-1: Manufacturer: syz [ 276.860081][ T5597] usb 1-1: SerialNumber: syz [ 276.894971][ T5597] usb 1-1: config 0 descriptor?? [ 276.930093][ T5597] cx231xx 1-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 276.930121][ T5597] cx231xx 1-1:0.1: Not found matching IAD interface [ 277.382681][ T8923] FAULT_INJECTION: forcing a failure. [ 277.382681][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 277.382708][ T8923] CPU: 0 UID: 0 PID: 8923 Comm: syz.6.907 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.382731][ T8923] Tainted: [L]=SOFTLOCKUP [ 277.382737][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.382746][ T8923] Call Trace: [ 277.382753][ T8923] [ 277.382759][ T8923] dump_stack_lvl+0xe8/0x150 [ 277.382784][ T8923] should_fail_ex+0x3eb/0x540 [ 277.382808][ T8923] ? __alloc_skb+0x1db/0x7a0 [ 277.382825][ T8923] should_failslab+0xa8/0x100 [ 277.382843][ T8923] ? __alloc_skb+0x1db/0x7a0 [ 277.382859][ T8923] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 277.382881][ T8923] ? __alloc_skb+0x18d/0x7a0 [ 277.382898][ T8923] ? __alloc_skb+0x1db/0x7a0 [ 277.382920][ T8923] __alloc_skb+0x1db/0x7a0 [ 277.382941][ T8923] netlink_sendmsg+0x5cd/0xb20 [ 277.382962][ T8923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.382980][ T8923] ? aa_sock_msg_perm+0x144/0x210 [ 277.383006][ T8923] ? apparmor_socket_sendmsg+0x98/0x360 [ 277.383027][ T8923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.383042][ T8923] sock_sendmsg_nosec+0x14e/0x190 [ 277.383069][ T8923] ____sys_sendmsg+0x54e/0x850 [ 277.383094][ T8923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.383120][ T8923] ? import_iovec+0x73/0xa0 [ 277.383144][ T8923] ___sys_sendmsg+0x2a5/0x360 [ 277.383162][ T8923] ? __lock_acquire+0x747/0x2de0 [ 277.383181][ T8923] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.383227][ T8923] ? __fget_files+0x3a2/0x420 [ 277.383249][ T8923] ? __fget_files+0x2a/0x420 [ 277.383277][ T8923] __x64_sys_sendmsg+0x1b1/0x290 [ 277.383299][ T8923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.383335][ T8923] do_syscall_64+0x166/0x520 [ 277.383354][ T8923] ? trace_irq_disable+0x3b/0x140 [ 277.383371][ T8923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.383387][ T8923] ? clear_bhb_loop+0x70/0xc0 [ 277.383406][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.383421][ T8923] RIP: 0033:0x7fc22599e559 [ 277.383436][ T8923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.383449][ T8923] RSP: 002b:00007fc223bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.383465][ T8923] RAX: ffffffffffffffda RBX: 00007fc225c25fa0 RCX: 00007fc22599e559 [ 277.383476][ T8923] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 277.383486][ T8923] RBP: 00007fc223bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.383495][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.383504][ T8923] R13: 00007fc225c26038 R14: 00007fc225c25fa0 R15: 00007ffee4475498 [ 277.383528][ T8923] [ 278.757308][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 278.907323][ T9] usb 7-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 278.911818][ T9] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 278.911840][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.911853][ T9] usb 7-1: config 0 has no interface number 0 [ 278.911884][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 278.911922][ T9] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 278.911939][ T9] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.915119][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.915140][ T9] usb 7-1: Product: syz [ 278.915151][ T9] usb 7-1: Manufacturer: syz [ 278.915161][ T9] usb 7-1: SerialNumber: syz [ 279.034485][ T9] usb 7-1: config 0 descriptor?? [ 279.212380][ T5761] usb 1-1: USB disconnect, device number 68 [ 279.533389][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.533786][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.732248][ T8947] NILFS (nullb0): couldn't find nilfs on the device [ 279.756255][ T9] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 279.797287][ T9] usb 7-1: USB disconnect, device number 2 [ 280.237761][ T8977] FAULT_INJECTION: forcing a failure. [ 280.237761][ T8977] name fail_futex, interval 1, probability 0, space 0, times 0 [ 280.237789][ T8977] CPU: 0 UID: 0 PID: 8977 Comm: syz.3.919 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.237811][ T8977] Tainted: [L]=SOFTLOCKUP [ 280.237817][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.237826][ T8977] Call Trace: [ 280.237833][ T8977] [ 280.237839][ T8977] dump_stack_lvl+0xe8/0x150 [ 280.237864][ T8977] should_fail_ex+0x3eb/0x540 [ 280.237892][ T8977] get_futex_key+0x1ab/0x1410 [ 280.237922][ T8977] ? __pfx_get_futex_key+0x10/0x10 [ 280.237948][ T8977] futex_wake+0x119/0x5f0 [ 280.237976][ T8977] ? __pfx_futex_wake+0x10/0x10 [ 280.238003][ T8977] ? __raw_spin_lock_init+0x45/0x100 [ 280.238032][ T8977] do_futex+0x458/0x4e0 [ 280.238051][ T8977] ? __asan_memcpy+0x40/0x70 [ 280.238077][ T8977] ? __pfx_do_futex+0x10/0x10 [ 280.238104][ T8977] __se_sys_futex+0x3a8/0x450 [ 280.238130][ T8977] ? __pfx___se_sys_futex+0x10/0x10 [ 280.238150][ T8977] ? rcu_is_watching+0x16/0xb0 [ 280.238174][ T8977] ? __x64_sys_futex+0x21/0xf0 [ 280.238198][ T8977] do_syscall_64+0x166/0x520 [ 280.238217][ T8977] ? trace_irq_disable+0x3b/0x140 [ 280.238234][ T8977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.238250][ T8977] ? clear_bhb_loop+0x70/0xc0 [ 280.238279][ T8977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.238295][ T8977] RIP: 0033:0x7f61a639e559 [ 280.238310][ T8977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.238324][ T8977] RSP: 002b:00007f61a727d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 280.238340][ T8977] RAX: ffffffffffffffda RBX: 00007f61a6625fa8 RCX: 00007f61a639e559 [ 280.238352][ T8977] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f61a6625fac [ 280.238362][ T8977] RBP: 00007f61a6625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 280.238373][ T8977] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 280.238382][ T8977] R13: 00007f61a6626038 R14: 00007fffb3ca4800 R15: 00007fffb3ca48e8 [ 280.238407][ T8977] [ 280.456452][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 280.650019][ T9] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2cf6, bcdDevice=0.00 [ 280.652633][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.652664][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.652692][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.700971][ T9] usb 1-1: config 0 descriptor?? [ 281.149651][ T9] hid_parser_main: 5 callbacks suppressed [ 281.149673][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 281.149717][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 281.149736][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 281.149758][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 281.149777][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 281.149795][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 281.149813][ T9] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0x0 [ 281.231984][ T9] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 281.956151][ T9] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 281.956214][ T9] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 281.986292][ T9] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 282.018556][ T9] usb 1-1: USB disconnect, device number 69 [ 282.430769][ T9018] fuse: Bad value for 'group_id' [ 282.430785][ T9018] fuse: Bad value for 'group_id' [ 282.460278][ T9018] netlink: 76 bytes leftover after parsing attributes in process `syz.6.928'. [ 282.874394][ T9026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.239810][ T9033] rxe_eth0 speed is unknown, defaulting to 1000 [ 285.169195][ T9069] FAULT_INJECTION: forcing a failure. [ 285.169195][ T9069] name failslab, interval 1, probability 0, space 0, times 0 [ 285.169223][ T9069] CPU: 0 UID: 0 PID: 9069 Comm: syz.0.945 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.169246][ T9069] Tainted: [L]=SOFTLOCKUP [ 285.169255][ T9069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.169265][ T9069] Call Trace: [ 285.169271][ T9069] [ 285.169278][ T9069] dump_stack_lvl+0xe8/0x150 [ 285.169304][ T9069] should_fail_ex+0x3eb/0x540 [ 285.169330][ T9069] should_failslab+0xa8/0x100 [ 285.169349][ T9069] __kmalloc_cache_noprof+0x9e/0x600 [ 285.169373][ T9069] ? netdev_alloc_config+0x4f/0xc0 [ 285.169388][ T9069] ? netdev_alloc_config+0x4f/0xc0 [ 285.169403][ T9069] ? alloc_netdev_mqs+0xc4a/0x1240 [ 285.169431][ T9069] netdev_alloc_config+0x4f/0xc0 [ 285.169447][ T9069] alloc_netdev_mqs+0xc84/0x1240 [ 285.169476][ T9069] rtnl_create_link+0x321/0xd70 [ 285.169496][ T9069] rtnl_newlink_create+0x258/0x7b0 [ 285.169523][ T9069] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 285.169547][ T9069] ? __pfx___mutex_lock+0x10/0x10 [ 285.169587][ T9069] ? ns_capable+0x84/0xe0 [ 285.169608][ T9069] rtnl_newlink+0x167a/0x1c30 [ 285.169639][ T9069] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.169657][ T9069] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 285.169672][ T9069] ? netlink_deliver_tap+0x19c/0x1b0 [ 285.169686][ T9069] ? netlink_unicast+0x8c1/0xa80 [ 285.169707][ T9069] ? netlink_sendmsg+0x7f0/0xb20 [ 285.169721][ T9069] ? sock_sendmsg_nosec+0x14e/0x190 [ 285.169745][ T9069] ? ____sys_sendmsg+0x54e/0x850 [ 285.169767][ T9069] ? ___sys_sendmsg+0x2a5/0x360 [ 285.169791][ T9069] ? __x64_sys_sendmsg+0x1b1/0x290 [ 285.169810][ T9069] ? do_syscall_64+0x166/0x520 [ 285.169828][ T9069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.169872][ T9069] ? kasan_quarantine_put+0xbb/0x1f0 [ 285.169895][ T9069] ? lockdep_hardirqs_on+0x7b/0x110 [ 285.169917][ T9069] ? nlmon_xmit+0xb0/0x100 [ 285.169945][ T9069] ? kmem_cache_free+0x182/0x650 [ 285.169975][ T9069] ? __lock_acquire+0x747/0x2de0 [ 285.169997][ T9069] ? __pfx_hook_capable+0x10/0x10 [ 285.170019][ T9069] ? __dev_queue_xmit+0x29b/0x3920 [ 285.170045][ T9069] ? __pfx_hook_capable+0x10/0x10 [ 285.170068][ T9069] ? lockdep_hardirqs_on+0x7b/0x110 [ 285.170106][ T9069] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.170124][ T9069] rtnetlink_rcv_msg+0x802/0xc00 [ 285.170146][ T9069] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 285.170165][ T9069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.170186][ T9069] ? __copy_skb_header+0xa3/0x4a0 [ 285.170208][ T9069] ? __asan_memcpy+0x40/0x70 [ 285.170235][ T9069] netlink_rcv_skb+0x226/0x4a0 [ 285.170251][ T9069] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.170272][ T9069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.170307][ T9069] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.170321][ T9069] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.170341][ T9069] netlink_unicast+0x8ef/0xa80 [ 285.170377][ T9069] netlink_sendmsg+0x7f0/0xb20 [ 285.170398][ T9069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.170417][ T9069] ? aa_sock_msg_perm+0x144/0x210 [ 285.170443][ T9069] ? apparmor_socket_sendmsg+0x98/0x360 [ 285.170465][ T9069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.170480][ T9069] sock_sendmsg_nosec+0x14e/0x190 [ 285.170507][ T9069] ____sys_sendmsg+0x54e/0x850 [ 285.170531][ T9069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.170560][ T9069] ? import_iovec+0x73/0xa0 [ 285.170585][ T9069] ___sys_sendmsg+0x2a5/0x360 [ 285.170604][ T9069] ? __lock_acquire+0x747/0x2de0 [ 285.170623][ T9069] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.170647][ T9069] ? futex_wait+0x2a2/0x390 [ 285.170685][ T9069] ? __fget_files+0x3a2/0x420 [ 285.170707][ T9069] ? __fget_files+0x2a/0x420 [ 285.170737][ T9069] __x64_sys_sendmsg+0x1b1/0x290 [ 285.170760][ T9069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.170798][ T9069] do_syscall_64+0x166/0x520 [ 285.170816][ T9069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.170832][ T9069] ? clear_bhb_loop+0x70/0xc0 [ 285.170852][ T9069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.170867][ T9069] RIP: 0033:0x7fb17959e559 [ 285.170883][ T9069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.170896][ T9069] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.170914][ T9069] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 285.170925][ T9069] RDX: 0000000000040004 RSI: 0000200000000040 RDI: 0000000000000007 [ 285.170941][ T9069] RBP: 00007fb1796358b0 R08: 0000000000000000 R09: 0000000000000000 [ 285.170951][ T9069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.170961][ T9069] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 285.170986][ T9069] [ 286.815761][ T9102] FAULT_INJECTION: forcing a failure. [ 286.815761][ T9102] name failslab, interval 1, probability 0, space 0, times 0 [ 286.815807][ T9102] CPU: 0 UID: 0 PID: 9102 Comm: syz.0.949 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.815829][ T9102] Tainted: [L]=SOFTLOCKUP [ 286.815835][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.815845][ T9102] Call Trace: [ 286.815851][ T9102] [ 286.815858][ T9102] dump_stack_lvl+0xe8/0x150 [ 286.815884][ T9102] should_fail_ex+0x3eb/0x540 [ 286.815910][ T9102] should_failslab+0xa8/0x100 [ 286.815931][ T9102] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 286.815954][ T9102] ? ktime_get+0x45/0x220 [ 286.815969][ T9102] ? __d_alloc+0x37/0x7f0 [ 286.815994][ T9102] ? __d_alloc+0x37/0x7f0 [ 286.816018][ T9102] ? ktime_get+0x1f5/0x220 [ 286.816035][ T9102] __d_alloc+0x37/0x7f0 [ 286.816063][ T9102] d_alloc_pseudo+0x21/0xc0 [ 286.816078][ T9102] alloc_path_pseudo+0x107/0x220 [ 286.816102][ T9102] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 286.816123][ T9102] ? hugetlb_reserve_pages+0x3b2/0x1160 [ 286.816148][ T9102] alloc_file_pseudo+0xa8/0x1e0 [ 286.816171][ T9102] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 286.816200][ T9102] hugetlb_file_setup+0x3ee/0x630 [ 286.816224][ T9102] ksys_mmap_pgoff+0x1ec/0x760 [ 286.816247][ T9102] do_syscall_64+0x166/0x520 [ 286.816266][ T9102] ? trace_irq_disable+0x3b/0x140 [ 286.816283][ T9102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.816300][ T9102] ? clear_bhb_loop+0x70/0xc0 [ 286.816320][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.816336][ T9102] RIP: 0033:0x7fb17959e559 [ 286.816351][ T9102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.816363][ T9102] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 286.816380][ T9102] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 286.816391][ T9102] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 286.816401][ T9102] RBP: 00007fb1796358b0 R08: ffffffffffffffff R09: 0000000000000000 [ 286.816412][ T9102] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 286.816421][ T9102] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 286.816451][ T9102] [ 287.526542][ T33] audit: type=1800 audit(287.505:63): pid=9112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.951" name="nullb0" dev="tmpfs" ino=743 res=0 errno=-22 [ 287.775060][ T9115] syzkaller0: entered promiscuous mode [ 287.775097][ T9115] syzkaller0: entered allmulticast mode [ 287.797656][ T270] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.798458][ T270] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.798487][ T270] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.798513][ T270] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.932153][ T9115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.386421][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 288.538793][ T9] usb 7-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 288.565181][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.565222][ T9] usb 7-1: Product: syz [ 288.565233][ T9] usb 7-1: Manufacturer: syz [ 288.565243][ T9] usb 7-1: SerialNumber: syz [ 288.943425][ T5699] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.170916][ T9145] FAULT_INJECTION: forcing a failure. [ 289.170916][ T9145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.170946][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.3.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.170969][ T9145] Tainted: [L]=SOFTLOCKUP [ 289.170974][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 289.170984][ T9145] Call Trace: [ 289.170990][ T9145] [ 289.170997][ T9145] dump_stack_lvl+0xe8/0x150 [ 289.171024][ T9145] should_fail_ex+0x3eb/0x540 [ 289.171050][ T9145] prepare_alloc_pages+0x21e/0x5f0 [ 289.171080][ T9145] __alloc_frozen_pages_noprof+0x17c/0x410 [ 289.171107][ T9145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 289.171139][ T9145] ? policy_nodemask+0x2cc/0x8e0 [ 289.171161][ T9145] alloc_pages_mpol+0x21e/0x390 [ 289.171184][ T9145] alloc_pages_noprof+0xb1/0x2b0 [ 289.171204][ T9145] folio_alloc_noprof+0x1e/0x30 [ 289.171221][ T9145] cuse_channel_open+0x1ab/0x7a0 [ 289.171246][ T9145] ? __pfx_cuse_channel_open+0x10/0x10 [ 289.171266][ T9145] misc_open+0x2d5/0x350 [ 289.171288][ T9145] chrdev_open+0x4d9/0x600 [ 289.171309][ T9145] ? __pfx_chrdev_open+0x10/0x10 [ 289.171326][ T9145] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 289.171345][ T9145] ? devcgroup_check_permission+0x31/0x8f0 [ 289.171365][ T9145] ? __pfx_chrdev_open+0x10/0x10 [ 289.171383][ T9145] do_dentry_open+0x80e/0x1360 [ 289.171410][ T9145] vfs_open_consume+0x4a/0x350 [ 289.171428][ T9145] ? path_openat+0x16e1/0x20f0 [ 289.171446][ T9145] path_openat+0x16fc/0x20f0 [ 289.171476][ T9145] do_file_open+0x23e/0x4a0 [ 289.171496][ T9145] ? __pfx_do_file_open+0x10/0x10 [ 289.171529][ T9145] ? _raw_spin_unlock+0x28/0x50 [ 289.171545][ T9145] ? alloc_fd+0x6af/0x760 [ 289.171575][ T9145] do_sys_openat2+0x115/0x200 [ 289.171595][ T9145] ? __se_sys_futex+0x3a8/0x450 [ 289.171617][ T9145] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.171641][ T9145] ? rcu_is_watching+0x16/0xb0 [ 289.171664][ T9145] __x64_sys_openat+0x138/0x170 [ 289.171697][ T9145] do_syscall_64+0x166/0x520 [ 289.171715][ T9145] ? trace_irq_disable+0x3b/0x140 [ 289.171732][ T9145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.171749][ T9145] ? clear_bhb_loop+0x70/0xc0 [ 289.171768][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.171784][ T9145] RIP: 0033:0x7f61a639e559 [ 289.171799][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.171812][ T9145] RSP: 002b:00007f61a725c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.171829][ T9145] RAX: ffffffffffffffda RBX: 00007f61a6626090 RCX: 00007f61a639e559 [ 289.171840][ T9145] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 289.171851][ T9145] RBP: 00007f61a64358b0 R08: 0000000000000000 R09: 0000000000000000 [ 289.171861][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.171870][ T9145] R13: 00007f61a6626128 R14: 00007f61a6626090 R15: 00007fffb3ca48e8 [ 289.171894][ T9145] [ 289.565082][ T5761] usb 7-1: USB disconnect, device number 3 [ 290.029393][ T5699] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 290.029606][ T5699] ath9k_htc: Failed to initialize the device [ 290.060535][ T5761] usb 7-1: ath9k_htc: USB layer deinitialized [ 290.597283][ T5761] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 290.758420][ T5761] usb 7-1: Using ep0 maxpacket: 32 [ 290.759814][ T5761] usb 7-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 290.764145][ T5761] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.764164][ T5761] usb 7-1: config 0 has no interface number 0 [ 290.764192][ T5761] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 290.764207][ T5761] usb 7-1: config 0 interface 1 has no altsetting 0 [ 290.824501][ T5761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.824531][ T5761] usb 7-1: Product: syz [ 290.824541][ T5761] usb 7-1: Manufacturer: syz [ 290.824552][ T5761] usb 7-1: SerialNumber: syz [ 290.858167][ T5761] usb 7-1: config 0 descriptor?? [ 291.078652][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.111980][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.163415][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.163825][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.261440][ T5761] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 291.261466][ T5761] cx231xx 7-1:0.1: Not found matching IAD interface [ 291.293988][ T5761] usb 7-1: USB disconnect, device number 4 [ 292.118812][ T9198] rnbd_client L127: Can't parse path i: -93 [ 292.167887][ T9198] rnbd_client L127: Can't parse path i: -93 [ 292.661725][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.662088][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.797467][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 292.952371][ T9] usb 7-1: New USB device found: idVendor=0458, idProduct=0153, bcdDevice=0.00 [ 292.952404][ T9] usb 7-1: no configurations [ 292.952414][ T9] usb 7-1: can't read configurations, error -22 [ 293.055304][ T9221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.077205][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 293.084543][ T9221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.226781][ T9] usb 7-1: New USB device found: idVendor=0458, idProduct=0153, bcdDevice=0.00 [ 293.226813][ T9] usb 7-1: no configurations [ 293.226825][ T9] usb 7-1: can't read configurations, error -22 [ 293.227229][ T9] usb usb7-port1: attempt power cycle [ 293.317348][ T9221] 9p: Could not find request transport: f [ 293.565927][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 293.587593][ T9] usb 7-1: New USB device found: idVendor=0458, idProduct=0153, bcdDevice=0.00 [ 293.587628][ T9] usb 7-1: no configurations [ 293.587638][ T9] usb 7-1: can't read configurations, error -22 [ 293.717379][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 293.737955][ T9] usb 7-1: New USB device found: idVendor=0458, idProduct=0153, bcdDevice=0.00 [ 293.737986][ T9] usb 7-1: no configurations [ 293.737995][ T9] usb 7-1: can't read configurations, error -22 [ 293.738239][ T9] usb usb7-port1: unable to enumerate USB device [ 293.758361][ T5761] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 293.942017][ T5761] usb 1-1: New USB device found: idVendor=15a4, idProduct=9035, bcdDevice=2.00 [ 293.944543][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.944580][ T5761] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.944610][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.217471][ T9232] dummy0: entered allmulticast mode [ 294.727879][ T9231] dummy0: left allmulticast mode [ 294.758009][ T5761] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-71 [ 294.758077][ T5761] dvb_usb_af9035 1-1:1.0: probe with driver dvb_usb_af9035 failed with error -71 [ 294.797857][ T5761] usb 1-1: USB disconnect, device number 70 [ 295.033917][ T9255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.034368][ T9255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.060976][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.065217][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.503588][ T9264] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000003) at rIP: 0xffffffff81718512 (__mcheck_cpu_init_prepare_banks+0x1f2/0x3d0) [ 295.503636][ T9264] Call Trace: [ 295.503643][ T9264] [ 295.503653][ T9264] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 295.503682][ T9264] ? do_raw_spin_lock+0x12b/0x2f0 [ 295.503707][ T9264] mce_cpu_restart+0x11a/0x2c0 [ 295.503732][ T9264] ? __pfx_mce_cpu_restart+0x10/0x10 [ 295.503756][ T9264] smp_call_function_many_cond+0xfb8/0x1500 [ 295.503781][ T9264] ? __pfx_mce_cpu_restart+0x10/0x10 [ 295.503810][ T9264] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 295.503830][ T9264] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 295.503848][ T9264] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 295.503865][ T9264] ? __timer_delete_sync+0x4a7/0x520 [ 295.503886][ T9264] set_bank+0x3a8/0x4e0 [ 295.503912][ T9264] ? __pfx_set_bank+0x10/0x10 [ 295.503936][ T9264] ? sysfs_file_kobj+0x1e4/0x230 [ 295.503961][ T9264] ? sysfs_kf_write+0x166/0x260 [ 295.503978][ T9264] ? __pfx_sysfs_kf_write+0x10/0x10 [ 295.504000][ T9264] kernfs_fop_write_iter+0x3a4/0x540 [ 295.504026][ T9264] vfs_write+0x612/0xba0 [ 295.504057][ T9264] ? __pfx_vfs_write+0x10/0x10 [ 295.504084][ T9264] ? __fget_files+0x3a2/0x420 [ 295.504106][ T9264] ? __fget_files+0x2a/0x420 [ 295.504131][ T9264] ? fdget+0x1ac/0x250 [ 295.504165][ T9264] ksys_write+0x150/0x270 [ 295.504191][ T9264] ? __pfx_ksys_write+0x10/0x10 [ 295.504224][ T9264] do_syscall_64+0x166/0x520 [ 295.504243][ T9264] ? trace_irq_disable+0x3b/0x140 [ 295.504260][ T9264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.504276][ T9264] ? clear_bhb_loop+0x70/0xc0 [ 295.504295][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.504311][ T9264] RIP: 0033:0x7fb17959e559 [ 295.504325][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.504339][ T9264] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.504355][ T9264] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 295.504366][ T9264] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 295.504376][ T9264] RBP: 00007fb1796358b0 R08: 0000000000000000 R09: 0000000000000000 [ 295.504386][ T9264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.504395][ T9264] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 295.504420][ T9264] [ 296.121333][ T9279] netlink: zone id is out of range [ 296.121346][ T9279] netlink: zone id is out of range [ 296.121352][ T9279] netlink: zone id is out of range [ 296.121357][ T9279] netlink: zone id is out of range [ 296.121363][ T9279] netlink: zone id is out of range [ 296.121368][ T9279] netlink: zone id is out of range [ 296.121374][ T9279] netlink: zone id is out of range [ 296.121380][ T9279] netlink: zone id is out of range [ 298.182190][ T9336] 9pnet_fd: p9_fd_create_tcp (9336): problem connecting socket to 127.0.0.1 [ 298.513497][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 300.465836][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 300.557435][ T5761] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 300.617425][ T9] usb 7-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 300.618538][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.727042][ T5761] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 300.728015][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.880499][ T9] usb 7-1: Firmware version (0.0) predates our first public release. [ 300.880521][ T9] usb 7-1: Please update to version 0.2 or newer [ 300.986303][ T5761] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 301.036306][ T9] usb 7-1: USB disconnect, device number 9 [ 301.082083][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.082479][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.138433][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.138834][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.280605][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1023'. [ 301.352516][ T9402] bond0: (slave bond_slave_0): Releasing backup interface [ 301.476133][ T9402] bond_slave_0: entered promiscuous mode [ 301.476152][ T9402] bond_slave_0: entered allmulticast mode [ 301.503764][ T5597] usb 1-1: USB disconnect, device number 71 [ 301.886069][ T9431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1029'. [ 301.894906][ T9432] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1030'. [ 302.075909][ T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 302.110270][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1031'. [ 302.150309][ T9436] netlink: 'syz.5.1031': attribute type 10 has an invalid length. [ 302.150326][ T9436] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1031'. [ 302.152479][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.184880][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.217275][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.221324][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.222878][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.223247][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.267355][ T9] usb 7-1: New USB device found: idVendor=015f, idProduct=a800, bcdDevice=ed.00 [ 302.268278][ T9] usb 7-1: config index 0 descriptor too short (expected 11054, got 46) [ 302.268297][ T9] usb 7-1: config 1 has an invalid interface number: 171 but max is 0 [ 302.268311][ T9] usb 7-1: config 1 has an invalid descriptor of length 229, skipping remainder of the config [ 302.268325][ T9] usb 7-1: config 1 has no interface number 0 [ 302.268363][ T9] usb 7-1: too many endpoints for config 1 interface 171 altsetting 221: 165, using maximum allowed: 30 [ 302.268407][ T9] usb 7-1: config 1 interface 171 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 165 [ 302.268427][ T9] usb 7-1: config 1 interface 171 has no altsetting 0 [ 302.268450][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.377586][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.377970][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.419647][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.420109][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.458341][ T9439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.458712][ T9439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.512002][ T9437] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (67109412 ns). Using initial count to start timer. [ 302.902526][ T208] Bluetooth: hci3: Frame reassembly failed (-84) [ 303.696253][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.697066][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.754410][ T9467] FAULT_INJECTION: forcing a failure. [ 303.754410][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 303.754439][ T9467] CPU: 0 UID: 0 PID: 9467 Comm: syz.3.1039 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.754469][ T9467] Tainted: [L]=SOFTLOCKUP [ 303.754474][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.754485][ T9467] Call Trace: [ 303.754491][ T9467] [ 303.754498][ T9467] dump_stack_lvl+0xe8/0x150 [ 303.754525][ T9467] should_fail_ex+0x3eb/0x540 [ 303.754550][ T9467] should_failslab+0xa8/0x100 [ 303.754567][ T9467] ? security_inode_alloc+0x39/0x310 [ 303.754591][ T9467] kmem_cache_alloc_noprof+0x9c/0x600 [ 303.754622][ T9467] ? security_inode_alloc+0x39/0x310 [ 303.754650][ T9467] security_inode_alloc+0x39/0x310 [ 303.754675][ T9467] inode_init_always_gfp+0x97e/0xd30 [ 303.754701][ T9467] ? __pfx_sock_alloc_inode+0x10/0x10 [ 303.754726][ T9467] alloc_inode+0x82/0x1b0 [ 303.754748][ T9467] __sock_create+0x127/0xac0 [ 303.754769][ T9467] __sys_socketpair+0x127/0x5e0 [ 303.754791][ T9467] __x64_sys_socketpair+0x9b/0xb0 [ 303.754809][ T9467] do_syscall_64+0x166/0x520 [ 303.754828][ T9467] ? trace_irq_disable+0x3b/0x140 [ 303.754844][ T9467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.754861][ T9467] ? clear_bhb_loop+0x70/0xc0 [ 303.754880][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.754896][ T9467] RIP: 0033:0x7f61a639e559 [ 303.754910][ T9467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.754924][ T9467] RSP: 002b:00007f61a727d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 303.754941][ T9467] RAX: ffffffffffffffda RBX: 00007f61a6625fa0 RCX: 00007f61a639e559 [ 303.754953][ T9467] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 303.754962][ T9467] RBP: 00007f61a64358b0 R08: 0000000000000000 R09: 0000000000000000 [ 303.754972][ T9467] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 303.754981][ T9467] R13: 00007f61a6626038 R14: 00007f61a6625fa0 R15: 00007fffb3ca48e8 [ 303.755006][ T9467] [ 303.755049][ T9467] socket: no more sockets [ 303.837632][ T9470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.838022][ T9470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.894460][ T9471] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 304.078415][ T5597] sony 0005:054C:03D5.000C: UNIQ does not contain a MAC address; duplicate check skipped [ 304.653594][ T5597] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.000C/input/input33 [ 304.866295][ T9482] FAULT_INJECTION: forcing a failure. [ 304.866295][ T9482] name failslab, interval 1, probability 0, space 0, times 0 [ 304.866323][ T9482] CPU: 0 UID: 0 PID: 9482 Comm: syz.0.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.866347][ T9482] Tainted: [L]=SOFTLOCKUP [ 304.866352][ T9482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 304.866363][ T9482] Call Trace: [ 304.866369][ T9482] [ 304.866375][ T9482] dump_stack_lvl+0xe8/0x150 [ 304.866402][ T9482] should_fail_ex+0x3eb/0x540 [ 304.866428][ T9482] should_failslab+0xa8/0x100 [ 304.866446][ T9482] __kvmalloc_node_noprof+0x171/0x820 [ 304.866474][ T9482] ? __se_sys_add_key+0x289/0x420 [ 304.866489][ T9482] ? __se_sys_add_key+0x289/0x420 [ 304.866505][ T9482] ? memdup_user+0x99/0xd0 [ 304.866528][ T9482] __se_sys_add_key+0x289/0x420 [ 304.866546][ T9482] ? __pfx___se_sys_add_key+0x10/0x10 [ 304.866569][ T9482] ? __x64_sys_add_key+0x20/0xc0 [ 304.866587][ T9482] do_syscall_64+0x166/0x520 [ 304.866606][ T9482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.866622][ T9482] ? clear_bhb_loop+0x70/0xc0 [ 304.866642][ T9482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.866658][ T9482] RIP: 0033:0x7fb17959e559 [ 304.866672][ T9482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.866686][ T9482] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 304.866703][ T9482] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 304.866715][ T9482] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000200000000500 [ 304.866726][ T9482] RBP: 00007fb1796358b0 R08: 0000000000000000 R09: 0000000000000000 [ 304.866736][ T9482] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 304.866745][ T9482] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 304.866769][ T9482] [ 304.907189][ T5612] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 305.229683][ T5597] sony 0005:054C:03D5.000C: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 305.299091][ T9] usb 7-1: string descriptor 0 read error: -71 [ 305.447423][ T9] usb 7-1: USB disconnect, device number 10 [ 305.699374][ T9486] fido_id[9486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 306.653111][ T9506] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1047'. [ 307.397020][ T9523] FAULT_INJECTION: forcing a failure. [ 307.397020][ T9523] name failslab, interval 1, probability 0, space 0, times 0 [ 307.397066][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.3.1051 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.397088][ T9523] Tainted: [L]=SOFTLOCKUP [ 307.397094][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 307.397104][ T9523] Call Trace: [ 307.397110][ T9523] [ 307.397117][ T9523] dump_stack_lvl+0xe8/0x150 [ 307.397144][ T9523] should_fail_ex+0x3eb/0x540 [ 307.397169][ T9523] should_failslab+0xa8/0x100 [ 307.397189][ T9523] __kmalloc_cache_noprof+0x9e/0x600 [ 307.397214][ T9523] ? raw_open+0x88/0x4d0 [ 307.397230][ T9523] ? raw_open+0x88/0x4d0 [ 307.397250][ T9523] ? __pfx_raw_open+0x10/0x10 [ 307.397266][ T9523] raw_open+0x88/0x4d0 [ 307.397283][ T9523] ? __pfx_raw_open+0x10/0x10 [ 307.397299][ T9523] misc_open+0x2d5/0x350 [ 307.397321][ T9523] chrdev_open+0x4d9/0x600 [ 307.397342][ T9523] ? __pfx_chrdev_open+0x10/0x10 [ 307.397360][ T9523] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 307.397386][ T9523] ? devcgroup_check_permission+0x31/0x8f0 [ 307.397407][ T9523] ? __pfx_chrdev_open+0x10/0x10 [ 307.397424][ T9523] do_dentry_open+0x80e/0x1360 [ 307.397452][ T9523] vfs_open_consume+0x4a/0x350 [ 307.397469][ T9523] ? path_openat+0x16e1/0x20f0 [ 307.397487][ T9523] path_openat+0x16fc/0x20f0 [ 307.397517][ T9523] do_file_open+0x23e/0x4a0 [ 307.397538][ T9523] ? __pfx_do_file_open+0x10/0x10 [ 307.397570][ T9523] ? _raw_spin_unlock+0x28/0x50 [ 307.397586][ T9523] ? alloc_fd+0x6af/0x760 [ 307.397616][ T9523] do_sys_openat2+0x115/0x200 [ 307.397638][ T9523] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.397663][ T9523] ? do_user_addr_fault+0xd3f/0x1480 [ 307.397692][ T9523] __x64_sys_openat+0x138/0x170 [ 307.397716][ T9523] do_syscall_64+0x166/0x520 [ 307.397734][ T9523] ? trace_irq_disable+0x3b/0x140 [ 307.397758][ T9523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.397774][ T9523] ? clear_bhb_loop+0x70/0xc0 [ 307.397794][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.397810][ T9523] RIP: 0033:0x7f61a635ed8e [ 307.397825][ T9523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.397839][ T9523] RSP: 002b:00007f61a727aea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.397855][ T9523] RAX: ffffffffffffffda RBX: 00007f61a727d6c0 RCX: 00007f61a635ed8e [ 307.397868][ T9523] RDX: 0000000000000002 RSI: 00007f61a6434c42 RDI: ffffffffffffff9c [ 307.397880][ T9523] RBP: 00007f61a64358b0 R08: 0000000000000000 R09: 0000000000000000 [ 307.397890][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 307.397900][ T9523] R13: 00002000000000c0 R14: 0000000000000000 R15: 00007fffb3ca48e8 [ 307.397924][ T9523] [ 308.024349][ T33] audit: type=1400 audit(308.005:64): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/" pid=9533 comm="syz.6.1053" name="/" offset=33 [ 308.479668][ T9548] FAULT_INJECTION: forcing a failure. [ 308.479668][ T9548] name failslab, interval 1, probability 0, space 0, times 0 [ 308.479698][ T9548] CPU: 0 UID: 0 PID: 9548 Comm: syz.3.1058 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.479720][ T9548] Tainted: [L]=SOFTLOCKUP [ 308.479726][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.479735][ T9548] Call Trace: [ 308.479742][ T9548] [ 308.479749][ T9548] dump_stack_lvl+0xe8/0x150 [ 308.479781][ T9548] should_fail_ex+0x3eb/0x540 [ 308.479807][ T9548] should_failslab+0xa8/0x100 [ 308.479824][ T9548] ? sctp_get_port_local+0x6b8/0x1700 [ 308.479849][ T9548] kmem_cache_alloc_noprof+0x9c/0x600 [ 308.479870][ T9548] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 308.479920][ T9548] ? __inet_dev_addr_type+0x128/0x4f0 [ 308.479938][ T9548] ? sctp_get_port_local+0x6b8/0x1700 [ 308.479974][ T9548] sctp_get_port_local+0x6b8/0x1700 [ 308.479998][ T9548] ? lock_acquire+0x115/0x350 [ 308.480021][ T9548] ? __pfx_sctp_get_port_local+0x10/0x10 [ 308.480047][ T9548] ? sctp_bind_addr_match+0x30/0x2b0 [ 308.480066][ T9548] ? sctp_bind_addr_match+0x28b/0x2b0 [ 308.480090][ T9548] sctp_do_bind+0x4d9/0x9a0 [ 308.480121][ T9548] sctp_connect_new_asoc+0x270/0x6b0 [ 308.480148][ T9548] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 308.480186][ T9548] ? __local_bh_enable_ip+0xd6/0x140 [ 308.480203][ T9548] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 308.480218][ T9548] ? security_sctp_bind_connect+0x7e/0x2c0 [ 308.480240][ T9548] sctp_sendmsg+0x159b/0x2d00 [ 308.480274][ T9548] ? __pfx_sctp_sendmsg+0x10/0x10 [ 308.480296][ T9548] ? trace_hrtimer_start+0x82/0x200 [ 308.480324][ T9548] ? __lock_acquire+0x747/0x2de0 [ 308.480349][ T9548] ? aa_sock_msg_perm+0xfc/0x210 [ 308.480371][ T9548] ? sock_rps_record_flow+0x19/0x350 [ 308.480392][ T9548] ? inet_sendmsg+0x298/0x320 [ 308.480413][ T9548] ? __pfx_inet_sendmsg+0x10/0x10 [ 308.480430][ T9548] sock_sendmsg_nosec+0x10f/0x190 [ 308.480458][ T9548] ____sys_sendmsg+0x54e/0x850 [ 308.480483][ T9548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.480510][ T9548] ? import_iovec+0x73/0xa0 [ 308.480535][ T9548] ___sys_sendmsg+0x2a5/0x360 [ 308.480554][ T9548] ? __lock_acquire+0x747/0x2de0 [ 308.480573][ T9548] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.480596][ T9548] ? preempt_schedule_common+0x7f/0xd0 [ 308.480615][ T9548] ? preempt_schedule_thunk+0x16/0x40 [ 308.480651][ T9548] ? __fget_files+0x3a2/0x420 [ 308.480673][ T9548] ? __fget_files+0x2a/0x420 [ 308.480703][ T9548] __sys_sendmmsg+0x273/0x4d0 [ 308.480728][ T9548] ? __pfx___sys_sendmmsg+0x10/0x10 [ 308.480748][ T9548] ? do_futex+0x458/0x4e0 [ 308.480791][ T9548] ? rcu_is_watching+0x16/0xb0 [ 308.480816][ T9548] __x64_sys_sendmmsg+0xa0/0xc0 [ 308.480838][ T9548] do_syscall_64+0x166/0x520 [ 308.480858][ T9548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.480873][ T9548] ? clear_bhb_loop+0x70/0xc0 [ 308.480893][ T9548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.480909][ T9548] RIP: 0033:0x7f61a639e559 [ 308.480924][ T9548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.480937][ T9548] RSP: 002b:00007f61a727d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.480954][ T9548] RAX: ffffffffffffffda RBX: 00007f61a6625fa0 RCX: 00007f61a639e559 [ 308.480966][ T9548] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 308.480976][ T9548] RBP: 00007f61a64358b0 R08: 0000000000000000 R09: 0000000000000000 [ 308.480986][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.480995][ T9548] R13: 00007f61a6626038 R14: 00007f61a6625fa0 R15: 00007fffb3ca48e8 [ 308.481020][ T9548] [ 309.198080][ T5597] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 309.336006][ T5597] usb 1-1: device descriptor read/64, error -71 [ 309.577920][ T5597] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 309.708510][ T5597] usb 1-1: device descriptor read/64, error -71 [ 309.737153][ T5699] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 309.816387][ T5597] usb usb1-port1: attempt power cycle [ 309.887896][ T5699] usb 7-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 309.887951][ T5699] usb 7-1: too many configurations: 165, using maximum allowed: 8 [ 309.891905][ T5699] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 309.891934][ T5699] usb 7-1: can't read configurations, error -61 [ 310.018086][ T5699] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 310.137219][ T9582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.141463][ T9582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.167837][ T5597] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 310.186840][ T5699] usb 7-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 310.186893][ T5699] usb 7-1: too many configurations: 165, using maximum allowed: 8 [ 310.188421][ T5699] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 310.188464][ T5699] usb 7-1: can't read configurations, error -61 [ 310.188707][ T5699] usb usb7-port1: attempt power cycle [ 310.221337][ T5597] usb 1-1: device descriptor read/8, error -71 [ 310.458159][ T5597] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 310.488578][ T5597] usb 1-1: device descriptor read/8, error -71 [ 310.527852][ T5699] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 310.547797][ T5699] usb 7-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 310.547828][ T5699] usb 7-1: too many configurations: 165, using maximum allowed: 8 [ 310.551288][ T5699] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 310.551332][ T5699] usb 7-1: can't read configurations, error -61 [ 310.597884][ T5597] usb usb1-port1: unable to enumerate USB device [ 310.675946][ T5699] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 310.700492][ T5699] usb 7-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 310.700524][ T5699] usb 7-1: too many configurations: 165, using maximum allowed: 8 [ 310.717369][ T5699] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 310.717401][ T5699] usb 7-1: can't read configurations, error -61 [ 310.717701][ T5699] usb usb7-port1: unable to enumerate USB device [ 310.903238][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.903623][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.938681][ T9600] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 310.975343][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.990488][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.595396][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.610717][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.876311][ T5597] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 312.029362][ T5597] usb 1-1: New USB device found: idVendor=0525, idProduct=127a, bcdDevice=1.00 [ 312.030591][ T5597] usb 1-1: config index 0 descriptor too short (expected 50, got 32) [ 312.030612][ T5597] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.030641][ T5597] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.030657][ T5597] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 312.030673][ T5597] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.033637][ T5597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.033655][ T5597] usb 1-1: Product: syz [ 312.033665][ T5597] usb 1-1: Manufacturer: syz [ 312.033676][ T5597] usb 1-1: SerialNumber: syz [ 312.143043][ T5597] usb_debug 1-1:1.0: debug converter detected [ 312.160912][ T5597] usb 1-1: debug converter now attached to ttyUSB0 [ 312.348095][ T9616] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 312.471818][ T9630] netlink: 'syz.3.1081': attribute type 4 has an invalid length. [ 312.471838][ T9630] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1081'. [ 312.631232][ T9635] Cannot find add_set index 0 as target [ 312.757532][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.758739][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.805463][ T9637] netlink: 'syz.6.1083': attribute type 27 has an invalid length. [ 312.822022][ T9637] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 312.855963][ T52] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.856021][ T52] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.856047][ T52] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.856072][ T52] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.917263][ T9640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.917675][ T9640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.268427][ T9643] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1085'. [ 313.268445][ T9643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1085'. [ 313.268458][ T9643] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1085'. [ 314.122995][ T9666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.123403][ T9666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.340055][ T9675] Unknown vers= option specified: 3.0 [ 314.340055][ T9675] [ 314.340073][ T9675] CIFS: VFS: Unknown vers= option specified: 3.0 [ 314.598596][ T5597] usb 1-1: USB disconnect, device number 76 [ 314.618218][ T5597] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 314.622342][ T5597] usb_debug 1-1:1.0: device disconnected [ 314.864859][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'. [ 314.921576][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.935963][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.200355][ T9690] dvmrp0: left allmulticast mode [ 315.200473][ T9690] batadv0: left allmulticast mode [ 315.710254][ T9704] tipc: Enabling of bearer rejected, already enabled [ 315.956984][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.957371][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.053322][ T9716] tipc: Enabled bearer , priority 10 [ 316.121310][ T9718] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1110'. [ 316.177440][ T5597] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 316.325851][ T5597] usb 1-1: Using ep0 maxpacket: 16 [ 316.326655][ T5597] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0014, bcdDevice=0.00 [ 316.329867][ T5597] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 316.329890][ T5597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 316.329915][ T5597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.352526][ T5597] usb 1-1: config 0 descriptor?? [ 316.504107][ T9732] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 316.504123][ T9732] One or more global auth toks could not properly register; rc = [-22] [ 316.504151][ T9732] Error validating options; rc = [-22] [ 316.625116][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1115'. [ 316.652593][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.652984][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.694666][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.694701][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.694721][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.694740][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.694758][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.742991][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.743016][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.743038][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.743074][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.743093][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unknown main item tag 0x0 [ 316.744526][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: unexpected long global item [ 316.799701][ T5597] cmedia_hs100b 0003:0D8C:0014.000D: probe with driver cmedia_hs100b failed with error -22 [ 316.864358][ T5597] usb 1-1: USB disconnect, device number 77 [ 317.281364][ T9753] random: crng reseeded on system resumption [ 317.330541][ T55] Bluetooth: hci2: Malformed LE Event: 0x02 [ 317.556989][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.659730][ T9763] tipc: Bearer : already 2 bearers with priority 10 [ 317.659748][ T9763] tipc: Bearer : trying with adjusted priority [ 317.659888][ T9763] tipc: Enabled bearer , priority 9 [ 317.968974][ T9771] tipc: Bearer : already 2 bearers with priority 10 [ 317.968993][ T9771] tipc: Bearer : trying with adjusted priority [ 317.969002][ T9771] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 318.733800][ T9789] syzkaller0: entered allmulticast mode [ 318.846253][ T270] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.846290][ T270] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.846316][ T270] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.846341][ T270] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.258741][ T5597] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 319.406736][ T5597] usb 1-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 319.407870][ T5597] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 319.407890][ T5597] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.407973][ T5597] usb 1-1: config 0 has no interface number 0 [ 319.408011][ T5597] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 319.408032][ T5597] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 319.408049][ T5597] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.410785][ T5597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.410804][ T5597] usb 1-1: Product: syz [ 319.410814][ T5597] usb 1-1: Manufacturer: syz [ 319.410825][ T5597] usb 1-1: SerialNumber: syz [ 319.445951][ T5597] usb 1-1: config 0 descriptor?? [ 319.641809][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 319.941716][ T5597] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 319.967218][ T5597] usb 1-1: USB disconnect, device number 78 [ 320.261334][ T9822] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1140'. [ 320.360302][ T9824] 9p: Bad value for 'wfdno' [ 320.494059][ T9829] fuse: Bad value for 'fd' [ 320.606610][ T5597] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 320.611525][ T9834] xt_nfacct: accounting object `' does not exist [ 320.756536][ T5597] usb 7-1: Using ep0 maxpacket: 32 [ 320.760227][ T5597] usb 7-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 320.762175][ T5597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.798204][ T5597] usb 7-1: config 0 descriptor?? [ 320.814717][ T5597] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 321.343560][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1151'. [ 321.712158][ T9856] /dev/nullb0: Can't open blockdev [ 321.866532][ T5612] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 322.229108][ T9875] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 322.230159][ T9875] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 322.282471][ T5597] gspca_vc032x: reg_w err -71 [ 322.282524][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282533][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282540][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282547][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282555][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282562][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282569][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282577][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282584][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282591][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282598][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282606][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282613][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282620][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282628][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282635][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282662][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282669][ T5597] gspca_vc032x: I2c Bus Busy Wait 00 [ 322.282680][ T5597] gspca_vc032x: Unknown sensor... [ 322.282738][ T5597] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 322.422992][ T5597] usb 7-1: USB disconnect, device number 15 [ 323.183047][ T9891] FAULT_INJECTION: forcing a failure. [ 323.183047][ T9891] name failslab, interval 1, probability 0, space 0, times 0 [ 323.183076][ T9891] CPU: 0 UID: 0 PID: 9891 Comm: syz.6.1166 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.183162][ T9891] Tainted: [L]=SOFTLOCKUP [ 323.183168][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 323.183179][ T9891] Call Trace: [ 323.183185][ T9891] [ 323.183192][ T9891] dump_stack_lvl+0xe8/0x150 [ 323.183219][ T9891] should_fail_ex+0x3eb/0x540 [ 323.183244][ T9891] should_failslab+0xa8/0x100 [ 323.183261][ T9891] ? prepare_creds+0x30/0x820 [ 323.183277][ T9891] kmem_cache_alloc_noprof+0x9c/0x600 [ 323.183299][ T9891] ? make_kuid+0x1e5/0x670 [ 323.183313][ T9891] ? prepare_creds+0x30/0x820 [ 323.183328][ T9891] ? __pfx_make_kuid+0x10/0x10 [ 323.183346][ T9891] prepare_creds+0x30/0x820 [ 323.183365][ T9891] __sys_setreuid+0x100/0x960 [ 323.183386][ T9891] do_syscall_64+0x166/0x520 [ 323.183406][ T9891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.183422][ T9891] ? clear_bhb_loop+0x70/0xc0 [ 323.183441][ T9891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.183457][ T9891] RIP: 0033:0x7fc22599e559 [ 323.183472][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.183486][ T9891] RSP: 002b:00007fc223bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 323.183502][ T9891] RAX: ffffffffffffffda RBX: 00007fc225c25fa0 RCX: 00007fc22599e559 [ 323.183514][ T9891] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000000 [ 323.183523][ T9891] RBP: 00007fc225a358b0 R08: 0000000000000000 R09: 0000000000000000 [ 323.183533][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.183542][ T9891] R13: 00007fc225c26038 R14: 00007fc225c25fa0 R15: 00007ffee4475498 [ 323.183567][ T9891] [ 323.184355][ T9892] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1165'. [ 323.419349][ T9893] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1165'. [ 323.449828][ T9892] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1165'. [ 323.449847][ T9892] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1165'. [ 323.692128][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1168'. [ 325.150796][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 325.206936][ T5699] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 325.368996][ T5699] usb 7-1: Using ep0 maxpacket: 8 [ 325.370485][ T5699] usb 7-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 325.394117][ T5699] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.394137][ T5699] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 325.394168][ T5699] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 325.395951][ T5699] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 325.395971][ T5699] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 325.396029][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.488164][ T5699] hub 7-1:1.0: bad descriptor, ignoring hub [ 325.488187][ T5699] hub 7-1:1.0: probe with driver hub failed with error -5 [ 325.489682][ T5699] cdc_wdm 7-1:1.0: skipping garbage [ 325.489695][ T5699] cdc_wdm 7-1:1.0: skipping garbage [ 325.512577][ T9937] ovs_dp0: entered promiscuous mode [ 325.557566][ T5699] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 325.557605][ T5699] cdc_wdm 7-1:1.0: Unknown control protocol [ 325.845474][ T9943] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 325.853303][ T5761] usb 7-1: USB disconnect, device number 16 [ 325.935132][ T9945] CIFS: Attempting to mount //127.0.0.1/share [ 325.949763][ T9945] CIFS: VFS: Error connecting to socket. Aborting operation. [ 325.949808][ T9945] CIFS: VFS: cifs_mount failed w/return code = -101 [ 326.757310][ T5699] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 326.907708][ T5699] usb 7-1: Using ep0 maxpacket: 16 [ 326.909099][ T5699] usb 7-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 326.911916][ T5699] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.911958][ T5699] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.911977][ T5699] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.912011][ T5699] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 326.912030][ T5699] usb 7-1: config 0 interface 0 has no altsetting 0 [ 326.912056][ T5699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.003794][ T5699] usb 7-1: config 0 descriptor?? [ 327.243402][ T9959] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 327.512504][ T5699] logitech-djreceiver 0003:046D:C53A.000E: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 327.631672][ T254] Bluetooth: hci3: Frame reassembly failed (-84) [ 327.796011][ T5597] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 327.946335][ T5597] usb 1-1: Using ep0 maxpacket: 32 [ 327.947460][ T5597] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 327.949101][ T5597] usb 1-1: config 32 has an invalid interface number: 85 but max is 0 [ 327.949121][ T5597] usb 1-1: config 32 has no interface number 0 [ 327.949152][ T5597] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.949181][ T5597] usb 1-1: config 32 interface 85 has no altsetting 0 [ 327.954577][ T5597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.954598][ T5597] usb 1-1: Product: syz [ 327.954609][ T5597] usb 1-1: Manufacturer: syz [ 327.954621][ T5597] usb 1-1: SerialNumber: syz [ 328.678236][ T9993] binder: Write failure EINVAL in pid:793 [ 329.279746][T10007] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1200'. [ 329.378848][ T5761] usb 7-1: USB disconnect, device number 17 [ 329.454771][T10007] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1200'. [ 329.626337][ T55] Bluetooth: hci3: command 0x1003 tx timeout [ 329.626441][ T5612] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 329.899376][T10017] openvswitch: netlink: IP tunnel dst address not specified [ 329.954682][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.969934][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.108946][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 330.150041][T10020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.150429][T10020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.202551][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1205'. [ 330.229642][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1205'. [ 330.387100][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 330.387278][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 330.390290][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 330.390446][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 330.456896][ T5597] appletouch 1-1:32.85: Failed to read mode from device. [ 330.457083][ T5597] appletouch 1-1:32.85: probe with driver appletouch failed with error -5 [ 330.492922][ T5597] usb 1-1: USB disconnect, device number 79 [ 330.646164][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 330.646362][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 331.156939][ T5761] libceph: connect (1)[c::]:6789 error -101 [ 331.157095][ T5761] libceph: mon0 (1)[c::]:6789 connect error [ 331.208789][T10026] ceph: No mds server is up or the cluster is laggy [ 331.639447][T10051] netlink: 'syz.0.1215': attribute type 10 has an invalid length. [ 331.720743][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.721132][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.749933][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.755558][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.775985][ T5761] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 331.779300][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.779949][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.819097][T10056] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 332.018415][ T5761] usb 7-1: unable to get BOS descriptor or descriptor too short [ 332.018459][ T5761] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 332.019258][ T5761] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 332.019283][ T5761] usb 7-1: can't read configurations, error -71 [ 332.487906][T10070] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 332.842117][T10081] netlink: 'syz.5.1225': attribute type 10 has an invalid length. [ 332.862311][T10085] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1227'. [ 333.268984][T10093] FAULT_INJECTION: forcing a failure. [ 333.268984][T10093] name failslab, interval 1, probability 0, space 0, times 0 [ 333.269012][T10093] CPU: 0 UID: 0 PID: 10093 Comm: syz.0.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.269034][T10093] Tainted: [L]=SOFTLOCKUP [ 333.269040][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.269049][T10093] Call Trace: [ 333.269055][T10093] [ 333.269062][T10093] dump_stack_lvl+0xe8/0x150 [ 333.269088][T10093] should_fail_ex+0x3eb/0x540 [ 333.269116][T10093] should_failslab+0xa8/0x100 [ 333.269134][T10093] __kmalloc_cache_noprof+0x9e/0x600 [ 333.269158][T10093] ? kobject_uevent_env+0x289/0x9e0 [ 333.269173][T10093] ? kobject_uevent_env+0x289/0x9e0 [ 333.269193][T10093] kobject_uevent_env+0x289/0x9e0 [ 333.269215][T10093] swnode_register+0x4ea/0x590 [ 333.269237][T10093] fwnode_create_software_node+0x194/0x1f0 [ 333.269257][T10093] device_create_managed_software_node+0xce/0x1f0 [ 333.269278][T10093] iommufd_test+0x38a0/0x6360 [ 333.269304][T10093] ? __lock_acquire+0x747/0x2de0 [ 333.269319][T10093] ? __pfx_iommufd_test+0x10/0x10 [ 333.269347][T10093] ? tomoyo_path_number_perm+0x219/0x5f0 [ 333.269368][T10093] ? tomoyo_path_number_perm+0x219/0x5f0 [ 333.269391][T10093] ? lock_acquire+0x115/0x350 [ 333.269416][T10093] ? __might_fault+0xaf/0x130 [ 333.269448][T10093] iommufd_fops_ioctl+0x465/0x600 [ 333.269475][T10093] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 333.269501][T10093] ? __fget_files+0x2a/0x420 [ 333.269534][T10093] ? bpf_lsm_file_ioctl+0x9/0x20 [ 333.269549][T10093] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 333.269572][T10093] __se_sys_ioctl+0xfc/0x170 [ 333.269591][T10093] do_syscall_64+0x166/0x520 [ 333.269610][T10093] ? trace_irq_disable+0x3b/0x140 [ 333.269626][T10093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.269642][T10093] ? clear_bhb_loop+0x70/0xc0 [ 333.269662][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.269677][T10093] RIP: 0033:0x7fb17959e559 [ 333.269692][T10093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.269705][T10093] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.269722][T10093] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 333.269733][T10093] RDX: 0000200000000100 RSI: 0000000000003ba0 RDI: 0000000000000007 [ 333.269743][T10093] RBP: 00007fb1796358b0 R08: 0000000000000000 R09: 0000000000000000 [ 333.269753][T10093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.269762][T10093] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 333.269791][T10093] [ 333.734484][T10093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.781338][T10097] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 333.781394][T10097] netlink: 'syz.3.1233': attribute type 3 has an invalid length. [ 334.712452][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 334.712636][T10121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.798813][T10124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1242'. [ 334.801407][T10121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.067492][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.067872][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.313643][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 335.377879][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'. [ 335.377968][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1249'. [ 335.408335][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.408354][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.430655][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.430675][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.470907][T10139] batadv0 (unregistering): left allmulticast mode [ 336.181864][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.197620][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.291713][T10153] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 336.534527][T10162] fuse: Bad value for 'fd' [ 336.557424][ T5597] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 336.664147][T10168] xt_nfacct: accounting object `' does not exist [ 336.706832][ T5597] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 336.708217][ T5597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 336.708242][ T5597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.708258][ T5597] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.708289][ T5597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.713876][ T5597] usb 1-1: config 0 descriptor?? [ 336.824443][T10170] netlink: 'syz.5.1262': attribute type 39 has an invalid length. [ 337.223666][ T5597] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 338.430272][T10222] netlink: 'syz.5.1283': attribute type 10 has an invalid length. [ 339.253991][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.254426][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.296937][ T994] usb 1-1: USB disconnect, device number 80 [ 339.604414][T10268] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 339.725818][ T994] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 339.888516][ T994] usb 1-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 339.889793][ T994] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.889829][ T994] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 339.889857][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.941930][ T994] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 340.108099][T10256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.111030][T10256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.554081][ T994] usb 1-1: USB disconnect, device number 81 [ 341.568892][ T994] idmouse 1-1:1.0: disconnected [ 341.735483][ T5612] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 342.215037][T10250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.579967][T10280] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1303'. [ 342.833154][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 342.906783][ T5761] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 342.950949][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1308'. [ 343.056450][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 343.057130][ T5761] usb 1-1: New USB device found: idVendor=16ca, idProduct=1502, bcdDevice=1d.90 [ 343.058434][ T5761] usb 1-1: config 5 has an invalid interface number: 142 but max is 0 [ 343.058471][ T5761] usb 1-1: config 5 has no interface number 0 [ 343.058501][ T5761] usb 1-1: config 5 interface 142 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64 [ 343.058518][ T5761] usb 1-1: config 5 interface 142 has no altsetting 0 [ 343.060645][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.060672][ T5761] usb 1-1: Product: syz [ 343.060682][ T5761] usb 1-1: Manufacturer: syz [ 343.060693][ T5761] usb 1-1: SerialNumber: syz [ 343.157958][T10285] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 343.530978][ T5761] aircable 1-1:5.142: aircable converter detected [ 343.551122][ T5761] usb 1-1: aircable converter now attached to ttyUSB0 [ 343.571002][ T5761] usb 1-1: USB disconnect, device number 82 [ 343.604432][ T5761] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 343.604956][ T5761] aircable 1-1:5.142: device disconnected [ 344.208881][T10330] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1318'. [ 344.469532][T10339] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1322'. [ 344.829874][T10352] tmpfs: Unknown parameter 'quot2";Ra' [ 344.915265][T10357] tmpfs: Unknown parameter 'quot2";Ra' [ 345.953603][T10366] Process accounting resumed [ 346.080344][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.083608][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.254462][T10380] FAULT_INJECTION: forcing a failure. [ 346.254462][T10380] name failslab, interval 1, probability 0, space 0, times 0 [ 346.254492][T10380] CPU: 0 UID: 0 PID: 10380 Comm: syz.0.1336 Tainted: G L syzkaller #0 PREEMPT(full) [ 346.254513][T10380] Tainted: [L]=SOFTLOCKUP [ 346.254519][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 346.254530][T10380] Call Trace: [ 346.254536][T10380] [ 346.254542][T10380] dump_stack_lvl+0xe8/0x150 [ 346.254572][T10380] should_fail_ex+0x3eb/0x540 [ 346.254598][T10380] should_failslab+0xa8/0x100 [ 346.254617][T10380] __kmalloc_cache_noprof+0x9e/0x600 [ 346.254641][T10380] ? create_filter_start+0xad/0x1e0 [ 346.254664][T10380] ? create_filter_start+0xad/0x1e0 [ 346.254694][T10380] create_filter_start+0xad/0x1e0 [ 346.254721][T10380] create_filter+0x7c/0x180 [ 346.254749][T10380] apply_event_filter+0x154/0x510 [ 346.254778][T10380] event_filter_write+0x16f/0x220 [ 346.254797][T10380] ? __pfx_event_filter_write+0x10/0x10 [ 346.254816][T10380] vfs_write+0x296/0xba0 [ 346.254847][T10380] ? __pfx_vfs_write+0x10/0x10 [ 346.254873][T10380] ? __fget_files+0x2a/0x420 [ 346.254894][T10380] ? __fget_files+0x3a2/0x420 [ 346.254916][T10380] ? __fget_files+0x2a/0x420 [ 346.254942][T10380] ? fdget+0x1ac/0x250 [ 346.254970][T10380] ksys_write+0x150/0x270 [ 346.254996][T10380] ? __pfx_ksys_write+0x10/0x10 [ 346.255030][T10380] do_syscall_64+0x166/0x520 [ 346.255050][T10380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.255066][T10380] ? clear_bhb_loop+0x70/0xc0 [ 346.255085][T10380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.255101][T10380] RIP: 0033:0x7fb17959e559 [ 346.255116][T10380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.255130][T10380] RSP: 002b:00007fb17a405028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.255147][T10380] RAX: ffffffffffffffda RBX: 00007fb179826090 RCX: 00007fb17959e559 [ 346.255159][T10380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 346.255168][T10380] RBP: 00007fb1796358b0 R08: 0000000000000000 R09: 0000000000000000 [ 346.255177][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.255187][T10380] R13: 00007fb179826128 R14: 00007fb179826090 R15: 00007ffd92bac628 [ 346.255212][T10380] [ 346.811036][T10385] netlink: 'syz.0.1338': attribute type 16 has an invalid length. [ 346.811075][T10385] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1338'. [ 346.939429][T10392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1341'. [ 347.191635][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1344'. [ 347.366534][ T5597] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 347.477255][ T5761] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 347.523073][ T5597] usb 7-1: not running at top speed; connect to a high speed hub [ 347.523168][ T5597] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 347.524178][ T5597] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 347.524283][ T5597] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 347.573852][ T5597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.573897][ T5597] usb 7-1: Product: syz [ 347.573910][ T5597] usb 7-1: Manufacturer: syz [ 347.573922][ T5597] usb 7-1: SerialNumber: syz [ 347.609458][T10398] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 347.609578][T10398] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 347.635902][ T5761] usb 1-1: device descriptor read/64, error -71 [ 347.821098][ T5597] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 347.822574][ T5597] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 347.822595][ T5597] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 347.864220][ T5597] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 347.875825][ T5761] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 347.901130][ T5597] usb 7-1: USB disconnect, device number 20 [ 348.007690][ T5761] usb 1-1: device descriptor read/64, error -71 [ 348.116591][ T5761] usb usb1-port1: attempt power cycle [ 348.164771][T10412] netlink: 'syz.5.1349': attribute type 16 has an invalid length. [ 348.164792][T10412] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1349'. [ 348.237550][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 348.455880][ T5761] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 348.475955][T10404] NFSD: Unable to initialize client recovery tracking! (-110) [ 348.475973][T10404] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 348.475981][T10404] NFSD: starting 90-second grace period (net f00005e1) [ 348.477336][ T5761] usb 1-1: device descriptor read/8, error -71 [ 348.717049][ T5761] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 348.736970][ T5761] usb 1-1: device descriptor read/8, error -71 [ 348.847940][ T5761] usb usb1-port1: unable to enumerate USB device [ 349.126480][ T5761] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 349.277059][ T5761] usb 7-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 349.278266][ T5761] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 349.278302][ T5761] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 349.278343][ T5761] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 349.278362][ T5761] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.278395][ T5761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.285251][T10438] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 349.374841][ T5761] ims_pcu 7-1:1.0: Incorrect number of endpoints on data interface (1) [ 349.374886][ T5761] ims_pcu 7-1:1.0: probe with driver ims_pcu failed with error -22 [ 349.513490][T10442] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5614] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[10442] [ 349.545090][T10442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1357'. [ 349.645264][ T5761] usb 7-1: USB disconnect, device number 21 [ 350.076745][T10461] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1363'. [ 350.079217][T10461] hsr_slave_0: left promiscuous mode [ 350.080573][T10461] hsr_slave_1: left promiscuous mode [ 350.381532][T10466] overlayfs: failed to clone upperpath [ 350.514249][ T5612] Bluetooth: hci2: link tx timeout [ 350.514266][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 350.536112][ T5612] Bluetooth: hci2: link tx timeout [ 350.536147][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 350.554830][ T5612] Bluetooth: hci2: link tx timeout [ 350.554847][ T5612] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 350.636724][ T5761] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 350.786474][ T5761] usb 7-1: Using ep0 maxpacket: 8 [ 350.788779][ T5761] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.791436][ T5761] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 350.791492][ T5761] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 350.791512][ T5761] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 350.791530][ T5761] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 350.791548][ T5761] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 350.791565][ T5761] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.791595][ T5761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.120701][ T5761] usb 7-1: usb_control_msg returned -32 [ 351.120758][ T5761] usbtmc 7-1:16.0: can't read capabilities [ 351.509156][T10485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.509544][T10485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.917902][T10492] overlayfs: failed to resolve './bus': -2 [ 352.161061][ T5761] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 352.326615][ T5761] usb 1-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 352.329748][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.329797][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.329826][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.367981][ T5761] usb 1-1: config 0 descriptor?? [ 352.589898][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 352.853149][ T33] audit: type=1326 audit(352.835:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17959e559 code=0x7ffc0000 [ 352.853192][ T33] audit: type=1326 audit(352.835:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17959e559 code=0x7ffc0000 [ 352.854667][ T33] audit: type=1326 audit(352.835:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb17955ed8e code=0x7ffc0000 [ 352.854704][ T33] audit: type=1326 audit(352.835:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb17959e1eb code=0x7ffc0000 [ 352.881710][ T33] audit: type=1326 audit(352.835:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb17959e1eb code=0x7ffc0000 [ 352.906973][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.005383][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.013858][ T33] audit: type=1326 audit(352.985:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17959e559 code=0x7ffc0000 [ 353.013977][ T33] audit: type=1326 audit(352.985:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17959e559 code=0x7ffc0000 [ 353.078569][ T33] audit: type=1326 audit(353.065:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb17959e559 code=0x7ffc0000 [ 353.122265][ T33] audit: type=1326 audit(353.105:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17959e559 code=0x7ffc0000 [ 353.123113][ T33] audit: type=1326 audit(353.105:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.0.1372" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb17959e559 code=0x7ffc0000 [ 353.212958][ T5761] cp2112 0003:10C4:EA90.0010: item fetching failed at offset 5/7 [ 353.229860][ T5761] cp2112 0003:10C4:EA90.0010: parse failed [ 353.230023][ T5761] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -22 [ 353.421486][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.421855][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.512046][ T5761] usb 7-1: USB disconnect, device number 22 [ 353.870935][T10508] phram: illegal erasesize or len [ 353.895288][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.909061][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.909238][T10508] netlink: 'syz.6.1378': attribute type 4 has an invalid length. [ 353.909252][T10508] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1378'. [ 353.979304][T10508] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 354.742919][T10531] trusted_key: encrypted_key: insufficient parameters specified [ 354.790286][T10531] overlayfs: failed to clone upperpath [ 355.256088][ T5761] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 355.397169][ T5597] usb 1-1: USB disconnect, device number 87 [ 355.412955][ T5761] usb 7-1: New USB device found: idVendor=04b3, idProduct=3109, bcdDevice=0.00 [ 355.412987][ T5761] usb 7-1: too many configurations: 18, using maximum allowed: 8 [ 355.435844][ T5761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 355.435872][ T5761] usb 7-1: can't read configurations, error -61 [ 355.544618][T10544] batadv_slave_1: entered promiscuous mode [ 355.560083][T10544] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 355.566215][ T5761] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 355.625285][T10544] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 355.648368][T10543] batadv_slave_1: left promiscuous mode [ 355.737421][ T5761] usb 7-1: New USB device found: idVendor=04b3, idProduct=3109, bcdDevice=0.00 [ 355.737473][ T5761] usb 7-1: too many configurations: 18, using maximum allowed: 8 [ 355.738731][ T5761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 355.738756][ T5761] usb 7-1: can't read configurations, error -61 [ 355.738948][ T5761] usb usb7-port1: attempt power cycle [ 356.057747][ T5597] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 356.075851][ T5761] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 356.097970][ T5761] usb 7-1: New USB device found: idVendor=04b3, idProduct=3109, bcdDevice=0.00 [ 356.098002][ T5761] usb 7-1: too many configurations: 18, using maximum allowed: 8 [ 356.102868][ T5761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 356.102896][ T5761] usb 7-1: can't read configurations, error -61 [ 356.216415][ T5597] usb 1-1: New USB device found: idVendor=046d, idProduct=c71e, bcdDevice=0.00 [ 356.220683][ T5597] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.220710][ T5597] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.220729][ T5597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.220773][ T5597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.235612][ T5597] usb 1-1: config 0 descriptor?? [ 356.262831][ T5761] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 356.304466][ T5761] usb 7-1: New USB device found: idVendor=04b3, idProduct=3109, bcdDevice=0.00 [ 356.304513][ T5761] usb 7-1: too many configurations: 18, using maximum allowed: 8 [ 356.330138][ T5761] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 356.330191][ T5761] usb 7-1: can't read configurations, error -61 [ 356.330398][ T5761] usb usb7-port1: unable to enumerate USB device [ 356.373013][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 356.494085][T10566] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1399'. [ 356.560068][T10572] tmpfs: Bad value for 'mpol' [ 356.734541][ T5597] logitech-djreceiver 0003:046D:C71E.0011: hidraw0: USB HID v36.2b Device [HID 046d:c71e] on usb-dummy_hcd.0-1/input0 [ 357.028024][ T5597] usb 1-1: USB disconnect, device number 88 [ 357.210832][T10589] vxcan0: tx address claim with dlc 0 [ 357.462031][T10600] fuse: fd is not a fuse device [ 358.489125][ T5597] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 358.549726][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 358.594788][T10634] netlink: 'syz.5.1424': attribute type 12 has an invalid length. [ 358.620711][T10634] netlink: 'syz.5.1424': attribute type 4 has an invalid length. [ 358.656311][ T5597] usb 7-1: Using ep0 maxpacket: 16 [ 358.660498][ T5597] usb 7-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 358.661526][ T5597] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.661548][ T5597] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.661564][ T5597] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.661587][ T5597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.663674][ T5597] usb 7-1: config 0 descriptor?? [ 359.046803][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1428'. [ 359.105465][ T5597] hid_parser_main: 126 callbacks suppressed [ 359.105502][ T5597] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 359.105525][ T5597] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 359.105544][ T5597] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 359.105562][ T5597] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 359.105581][ T5597] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 359.143149][ T5597] mcp2221 0003:04D8:00DD.0012: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 359.480287][ T5597] usb 7-1: USB disconnect, device number 27 [ 359.496309][ T5761] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 359.645952][ T5761] usb 1-1: Using ep0 maxpacket: 8 [ 359.647483][ T5761] usb 1-1: New USB device found: idVendor=0525, idProduct=d292, bcdDevice=0.07 [ 359.649059][ T5761] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 359.649079][ T5761] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 359.649094][ T5761] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 359.649110][ T5761] usb 1-1: config 250 has no interface number 0 [ 359.649139][ T5761] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 359.649159][ T5761] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 359.649176][ T5761] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.649192][ T5761] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 359.649211][ T5761] usb 1-1: config 250 interface 228 has no altsetting 0 [ 359.652647][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 359.652668][ T5761] usb 1-1: Product: syz [ 359.652678][ T5761] usb 1-1: SerialNumber: syz [ 359.801668][ T5761] hub 1-1:250.228: bad descriptor, ignoring hub [ 359.801688][ T5761] hub 1-1:250.228: probe with driver hub failed with error -5 [ 359.903828][ T55] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 360.021854][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.022229][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.063045][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.063423][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.206435][ T5761] usb 1-1: USB disconnect, device number 89 [ 360.415859][ T5597] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 360.566510][ T5597] usb 7-1: Using ep0 maxpacket: 16 [ 360.568225][ T5597] usb 7-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 360.569423][ T5597] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 360.569446][ T5597] usb 7-1: config 0 has no interface number 0 [ 360.569474][ T5597] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 360.569492][ T5597] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 360.571348][ T5597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.571372][ T5597] usb 7-1: Product: syz [ 360.571384][ T5597] usb 7-1: Manufacturer: syz [ 360.571394][ T5597] usb 7-1: SerialNumber: syz [ 360.600102][ T5597] usb 7-1: config 0 descriptor?? [ 360.622345][T10655] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 360.622460][T10655] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 360.895148][T10655] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 360.895255][T10655] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 361.126670][ T5597] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 361.774393][ T254] tipc: Subscription rejected, illegal request [ 362.006959][ T5597] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 362.006985][ T5597] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 362.040094][ T5597] asix 7-1:0.34: probe with driver asix failed with error -71 [ 362.060143][ T5597] usb 7-1: USB disconnect, device number 28 [ 363.146184][ T5761] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 363.295846][ T5761] usb 7-1: Using ep0 maxpacket: 16 [ 363.296535][ T5761] usb 7-1: New USB device found: idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 363.297461][ T5761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.302710][ T5761] usb 7-1: config 0 descriptor?? [ 363.349497][ T5761] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 363.972720][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1452'. [ 364.026930][ T5699] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 364.153843][ T5761] gspca_sonixj: reg_w1 err -71 [ 364.153910][ T5761] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 364.181153][ T5761] usb 7-1: USB disconnect, device number 29 [ 364.201254][ T5699] usb 1-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.230575][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.230617][ T5699] usb 1-1: Product: syz [ 364.230628][ T5699] usb 1-1: Manufacturer: syz [ 364.230639][ T5699] usb 1-1: SerialNumber: syz [ 364.269033][ T5699] usb 1-1: config 0 descriptor?? [ 364.502530][ T5699] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.793522][T10730] team0: entered promiscuous mode [ 364.793542][T10730] team_slave_0: entered promiscuous mode [ 364.793744][T10730] team_slave_1: entered promiscuous mode [ 364.793919][T10730] team0: entered allmulticast mode [ 364.793931][T10730] team_slave_0: entered allmulticast mode [ 364.793941][T10730] team_slave_1: entered allmulticast mode [ 364.882091][T10732] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1463'. [ 364.897769][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1463'. [ 364.913665][T10732] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1463'. [ 365.010530][T10734] team0: left promiscuous mode [ 365.010550][T10734] team_slave_0: left promiscuous mode [ 365.010733][T10734] team_slave_1: left promiscuous mode [ 365.133137][T10739] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1466'. [ 365.133483][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1466'. [ 365.354326][T10745] nilfs2: Unknown parameter 'bc4 [ 365.354326][T10745]  zwarr[er' [ 365.415622][T10743] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 365.437949][T10746] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 365.534232][T10752] openvswitch: netlink: Flow key attr not present in new flow. [ 365.975965][T10767] gfs2: gfs2 mount does not exist [ 366.403250][T10771] nfs: Unknown parameter 'add' [ 366.405464][T10771] nfs: Unknown parameter 'sOIa&oft' [ 366.561718][ T5699] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 366.582092][ T5699] usb 1-1: USB disconnect, device number 90 [ 366.617227][T10782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1483'. [ 367.390792][T10792] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1488'. [ 367.640636][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1491'. [ 367.640666][T10803] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 368.559250][T10818] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.560251][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1500'. [ 368.560266][T10826] openvswitch: netlink: Flow key attr not present in new flow. [ 368.697877][T10835] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1503'. [ 368.785867][ T5699] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 368.937092][ T5699] usb 1-1: New USB device found: idVendor=0421, idProduct=1234, bcdDevice=1.00 [ 368.941072][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.941119][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.984541][ T5699] cdc_phonet 1-1:1.0: probe with driver cdc_phonet failed with error -22 [ 369.108541][T10819] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.202373][T10832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xde17 instead [ 369.202395][T10832] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x724a instead [ 369.202464][T10832] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 369.202472][T10832] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 369.293401][T10841] netlink: 'syz.5.1515': attribute type 5 has an invalid length. [ 370.229900][ T33] kauditd_printk_skb: 23 callbacks suppressed [ 370.229916][ T33] audit: type=1326 audit(370.215:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10850 comm="syz.5.1509" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd20d9e559 code=0x0 [ 370.301154][ T5699] usb 1-1: USB disconnect, device number 91 [ 370.455286][T10856] overlayfs: failed to clone upperpath [ 371.283844][T10861] __nla_validate_parse: 2 callbacks suppressed [ 371.283862][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'. [ 371.683163][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1516'. [ 371.683181][T10869] openvswitch: netlink: Flow key attr not present in new flow. [ 371.755823][ T5761] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 371.905890][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 371.908343][ T5761] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.908382][ T5761] usb 1-1: New USB device found: idVendor=046d, idProduct=c343, bcdDevice=0.40 [ 371.909521][ T5761] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 371.909544][ T5761] usb 1-1: config 1 interface 0 has no altsetting 0 [ 371.911768][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.911786][ T5761] usb 1-1: Product: syz [ 371.911796][ T5761] usb 1-1: Manufacturer: syz [ 371.911825][ T5761] usb 1-1: SerialNumber: syz [ 371.916328][ T5699] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 372.077090][ T5699] usb 7-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00 [ 372.078443][ T5699] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 372.078465][ T5699] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 372.080425][ T5699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 372.080445][ T5699] usb 7-1: Product: syz [ 372.080457][ T5699] usb 7-1: Manufacturer: syz [ 372.145568][ T5699] iuu_phoenix 7-1:1.0: iuu_phoenix converter detected [ 372.159113][ T5699] usb 7-1: iuu_phoenix converter now attached to ttyUSB0 [ 372.373676][ T5699] usb 7-1: USB disconnect, device number 30 [ 372.386351][ T5699] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 372.386964][ T5699] iuu_phoenix 7-1:1.0: device disconnected [ 372.448006][ T5761] usbhid 1-1:1.0: can't add hid device: -71 [ 372.448131][ T5761] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 372.486796][ T5761] usb 1-1: USB disconnect, device number 92 [ 373.035627][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1523'. [ 373.286050][ T5761] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 373.417117][ T5761] usb 7-1: device descriptor read/64, error -71 [ 373.456441][ T5699] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 373.605788][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 373.608087][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 373.608141][ T5699] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a4, bcdDevice=95.17 [ 373.608167][ T5699] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 373.609817][ T5699] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 373.609861][ T5699] usb 1-1: can't read configurations, error -61 [ 373.663550][ T5761] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 373.735755][ T5699] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 373.795829][ T5761] usb 7-1: device descriptor read/64, error -71 [ 373.895756][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 373.898096][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 373.898133][ T5699] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a4, bcdDevice=95.17 [ 373.898179][ T5699] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 373.899818][ T5699] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 373.899843][ T5699] usb 1-1: can't read configurations, error -61 [ 373.900077][ T5699] usb usb1-port1: attempt power cycle [ 373.929021][ T5761] usb usb7-port1: attempt power cycle [ 374.236564][ T5699] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 374.256548][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 374.259677][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 374.259733][ T5699] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a4, bcdDevice=95.17 [ 374.259759][ T5699] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 374.261012][ T5699] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 374.261036][ T5699] usb 1-1: can't read configurations, error -61 [ 374.315941][ T5761] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 374.337248][ T5761] usb 7-1: device descriptor read/8, error -71 [ 374.395735][ T5699] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 374.416417][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 374.418451][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 374.418506][ T5699] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a4, bcdDevice=95.17 [ 374.418533][ T5699] usb 1-1: too many configurations: 236, using maximum allowed: 8 [ 374.420078][ T5699] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 374.420119][ T5699] usb 1-1: can't read configurations, error -61 [ 374.420503][ T5699] usb usb1-port1: unable to enumerate USB device [ 374.605810][ T5761] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 374.626681][ T5761] usb 7-1: device descriptor read/8, error -71 [ 374.737084][ T5761] usb usb7-port1: unable to enumerate USB device [ 375.226697][T10911] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 375.226721][T10911] overlayfs: failed to set xattr on upper [ 375.226727][T10911] overlayfs: ...falling back to redirect_dir=nofollow. [ 375.226733][T10911] overlayfs: ...falling back to index=off. [ 375.226739][T10911] overlayfs: ...falling back to uuid=null. [ 375.226751][T10911] overlayfs: maximum fs stacking depth exceeded [ 376.885929][ T5699] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 377.037927][ T5699] usb 1-1: New USB device found: idVendor=0cf2, idProduct=6250, bcdDevice=1.00 [ 377.043541][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.043580][ T5699] usb 1-1: Product: syz [ 377.043592][ T5699] usb 1-1: Manufacturer: syz [ 377.043602][ T5699] usb 1-1: SerialNumber: syz [ 377.105344][ T5699] ums_eneub6250 1-1:1.0: USB Mass Storage device detected [ 377.158234][ T5699] scsi host1: usb-storage 1-1:1.0 [ 377.327837][T10941] FAULT_INJECTION: forcing a failure. [ 377.327837][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 377.327894][T10941] CPU: 0 UID: 0 PID: 10941 Comm: syz.0.1546 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.327916][T10941] Tainted: [L]=SOFTLOCKUP [ 377.327922][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 377.327935][T10941] Call Trace: [ 377.327944][T10941] [ 377.327951][T10941] dump_stack_lvl+0xe8/0x150 [ 377.327977][T10941] should_fail_ex+0x3eb/0x540 [ 377.328004][T10941] should_failslab+0xa8/0x100 [ 377.328023][T10941] __kmalloc_noprof+0xf9/0x710 [ 377.328047][T10941] ? security_sk_alloc+0x52/0x360 [ 377.328063][T10941] ? security_sk_alloc+0x52/0x360 [ 377.328085][T10941] security_sk_alloc+0x52/0x360 [ 377.328115][T10941] sk_prot_alloc+0x101/0x210 [ 377.328135][T10941] ? sk_alloc+0x27/0x390 [ 377.328156][T10941] sk_alloc+0x3a/0x390 [ 377.328178][T10941] bt_sock_alloc+0x3b/0x330 [ 377.328204][T10941] sco_sock_create+0xbc/0x3e0 [ 377.328224][T10941] bt_sock_create+0x163/0x240 [ 377.328250][T10941] __sock_create+0x4b5/0xac0 [ 377.328272][T10941] __sys_socket+0xd6/0x1b0 [ 377.328291][T10941] __x64_sys_socket+0x7a/0x90 [ 377.328307][T10941] do_syscall_64+0x166/0x520 [ 377.328327][T10941] ? trace_irq_disable+0x3b/0x140 [ 377.328344][T10941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.328360][T10941] ? clear_bhb_loop+0x70/0xc0 [ 377.328379][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.328395][T10941] RIP: 0033:0x7fb17959e559 [ 377.328409][T10941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.328423][T10941] RSP: 002b:00007fb17a425fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 377.328440][T10941] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fb17959e559 [ 377.328450][T10941] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 377.328459][T10941] RBP: 00007fb1796358b0 R08: 0000000000000000 R09: 0000000000000000 [ 377.328469][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.328478][T10941] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 377.328503][T10941] [ 377.653845][ T5699] ums_eneub6250 1-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 377.682188][ T5699] usb 1-1: USB disconnect, device number 97 [ 378.187064][T10980] netlink: NAT attribute has 1 unknown bytes [ 378.187112][T10980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.796783][ T5761] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 378.994494][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.028419][T11002] overlayfs: failed to clone upperpath [ 379.065866][ T5699] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 379.196124][ T5699] usb 7-1: device descriptor read/64, error -71 [ 379.435867][ T5699] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 379.565910][ T5699] usb 7-1: device descriptor read/64, error -71 [ 379.676706][ T5699] usb usb7-port1: attempt power cycle [ 380.015821][ T5699] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 380.036707][ T5699] usb 7-1: device descriptor read/8, error -71 [ 380.304873][ T5699] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 380.337186][ T5699] usb 7-1: device descriptor read/8, error -71 [ 380.446157][ T5699] usb usb7-port1: unable to enumerate USB device [ 380.830989][T11030] netlink: 'syz.3.1575': attribute type 4 has an invalid length. [ 381.574727][T11034] FAULT_INJECTION: forcing a failure. [ 381.574727][T11034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.574754][T11034] CPU: 0 UID: 0 PID: 11034 Comm: syz.0.1577 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.574776][T11034] Tainted: [L]=SOFTLOCKUP [ 381.574782][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 381.574792][T11034] Call Trace: [ 381.574797][T11034] [ 381.574804][T11034] dump_stack_lvl+0xe8/0x150 [ 381.574830][T11034] should_fail_ex+0x3eb/0x540 [ 381.574858][T11034] _copy_from_iter+0x1d3/0x18b0 [ 381.574879][T11034] ? __alloc_skb+0x27a/0x7a0 [ 381.574898][T11034] ? __alloc_skb+0x27a/0x7a0 [ 381.574917][T11034] ? __alloc_skb+0x27a/0x7a0 [ 381.574934][T11034] ? __pfx__copy_from_iter+0x10/0x10 [ 381.574958][T11034] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 381.574979][T11034] ? __alloc_skb+0x27a/0x7a0 [ 381.574994][T11034] ? __alloc_skb+0x27a/0x7a0 [ 381.575016][T11034] ? netlink_sendmsg+0x64f/0xb20 [ 381.575031][T11034] ? skb_put+0x112/0x210 [ 381.575051][T11034] netlink_sendmsg+0x6bb/0xb20 [ 381.575071][T11034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.575089][T11034] ? aa_sock_msg_perm+0x144/0x210 [ 381.575122][T11034] ? apparmor_socket_sendmsg+0x98/0x360 [ 381.575144][T11034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.575159][T11034] sock_sendmsg_nosec+0x14e/0x190 [ 381.575185][T11034] ____sys_sendmsg+0x54e/0x850 [ 381.575210][T11034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.575236][T11034] ? import_iovec+0x73/0xa0 [ 381.575260][T11034] ___sys_sendmsg+0x2a5/0x360 [ 381.575278][T11034] ? __lock_acquire+0x747/0x2de0 [ 381.575297][T11034] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.575343][T11034] ? __fget_files+0x3a2/0x420 [ 381.575365][T11034] ? __fget_files+0x2a/0x420 [ 381.575394][T11034] __x64_sys_sendmsg+0x1b1/0x290 [ 381.575416][T11034] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.575452][T11034] do_syscall_64+0x166/0x520 [ 381.575470][T11034] ? trace_irq_disable+0x3b/0x140 [ 381.575487][T11034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.575504][T11034] ? clear_bhb_loop+0x70/0xc0 [ 381.575523][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.575538][T11034] RIP: 0033:0x7fb17959e559 [ 381.575553][T11034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.575566][T11034] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.575582][T11034] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 381.575594][T11034] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 381.575603][T11034] RBP: 00007fb17a426090 R08: 0000000000000000 R09: 0000000000000000 [ 381.575613][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.575622][T11034] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 381.575646][T11034] [ 382.278045][T11042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.900860][T11064] netlink: 'syz.0.1589': attribute type 11 has an invalid length. [ 382.904830][T11064] FAULT_INJECTION: forcing a failure. [ 382.904830][T11064] name failslab, interval 1, probability 0, space 0, times 0 [ 382.904857][T11064] CPU: 0 UID: 0 PID: 11064 Comm: syz.0.1589 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.904879][T11064] Tainted: [L]=SOFTLOCKUP [ 382.904884][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 382.904894][T11064] Call Trace: [ 382.904900][T11064] [ 382.904909][T11064] dump_stack_lvl+0xe8/0x150 [ 382.904935][T11064] should_fail_ex+0x3eb/0x540 [ 382.904960][T11064] should_failslab+0xa8/0x100 [ 382.904979][T11064] __kmalloc_cache_noprof+0x9e/0x600 [ 382.905003][T11064] ? pkcs8_key_preparse+0x12d/0x3e0 [ 382.905026][T11064] ? pkcs8_key_preparse+0x12d/0x3e0 [ 382.905055][T11064] pkcs8_key_preparse+0x12d/0x3e0 [ 382.905078][T11064] ? kfree+0x1c5/0x650 [ 382.905098][T11064] ? __pfx_pkcs8_key_preparse+0x10/0x10 [ 382.905124][T11064] ? x509_cert_parse+0x66f/0x7a0 [ 382.905148][T11064] ? x509_key_preparse+0x74/0x6d0 [ 382.905171][T11064] ? down_read+0x2b9/0x320 [ 382.905195][T11064] asymmetric_key_preparse+0xb9/0x1b0 [ 382.905217][T11064] __key_create_or_update+0x34f/0xa70 [ 382.905247][T11064] ? __pfx___key_create_or_update+0x10/0x10 [ 382.905285][T11064] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 382.905312][T11064] key_create_or_update+0x42/0x60 [ 382.905338][T11064] __se_sys_add_key+0x349/0x420 [ 382.905357][T11064] ? __pfx___se_sys_add_key+0x10/0x10 [ 382.905381][T11064] ? __x64_sys_add_key+0x20/0xc0 [ 382.905398][T11064] do_syscall_64+0x166/0x520 [ 382.905418][T11064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.905434][T11064] ? clear_bhb_loop+0x70/0xc0 [ 382.905454][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.905469][T11064] RIP: 0033:0x7fb17959e559 [ 382.905483][T11064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.905497][T11064] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 382.905514][T11064] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 382.905526][T11064] RDX: 0000200000000480 RSI: 0000000000000000 RDI: 0000200000000280 [ 382.905536][T11064] RBP: 00007fb1796358b0 R08: fffffffffffffffd R09: 0000000000000000 [ 382.905546][T11064] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 382.905556][T11064] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 382.905580][T11064] [ 383.381204][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 383.381224][T11068] openvswitch: netlink: Flow key attr not present in new flow. [ 383.618725][ T5761] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 383.789188][ T5761] usb 1-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00 [ 383.790222][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.790241][ T5761] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 383.793320][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 383.793338][ T5761] usb 1-1: Product: syz [ 383.793349][ T5761] usb 1-1: Manufacturer: syz [ 383.859284][ T5761] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 383.895476][ T5761] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 384.084251][ T5761] usb 1-1: USB disconnect, device number 99 [ 384.115266][ T5761] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 384.127018][ T5761] iuu_phoenix 1-1:1.0: device disconnected [ 385.017313][T11080] NFSD: Unable to initialize client recovery tracking! (-110) [ 385.017330][T11080] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 385.017339][T11080] NFSD: starting 90-second grace period (net f00004da) [ 385.024490][T11105] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1602'. [ 385.180031][T11111] netlink: 'syz.3.1604': attribute type 1 has an invalid length. [ 385.944952][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1607'. [ 385.944974][T11119] openvswitch: netlink: Flow key attr not present in new flow. [ 386.422936][T11139] CUSE: zero length info key specified [ 386.441863][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1615'. [ 386.855602][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1624'. [ 386.855624][T11142] openvswitch: netlink: Flow key attr not present in new flow. [ 387.601557][T11155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1621'. [ 387.986337][T11163] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1623'. [ 388.331286][T11165] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1626'. [ 388.351769][T11165] bridge0: port 3(netdevsim0) entered blocking state [ 388.351832][T11165] bridge0: port 3(netdevsim0) entered disabled state [ 388.351979][T11165] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 388.353664][T11165] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 388.354124][T11165] bridge0: port 3(netdevsim0) entered blocking state [ 388.354201][T11165] bridge0: port 3(netdevsim0) entered forwarding state [ 389.077817][T11176] Option 'dnserror' to dns_resolver key: bad/missing value [ 389.258618][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1630'. [ 389.258658][T11179] openvswitch: netlink: Flow key attr not present in new flow. [ 389.495835][ T994] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 389.523724][T11188] fuse: fd is not a fuse device [ 389.539461][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1632'. [ 389.539622][T11188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.582864][T11188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.602426][T11189] fuse: fd is not a fuse device [ 389.620204][T11189] kAFS: Can only specify source 'none' with -o dyn [ 389.647754][ T994] usb 1-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00 [ 389.661408][ T994] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 389.661430][ T994] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 389.664411][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 389.664430][ T994] usb 1-1: Product: syz [ 389.664457][ T994] usb 1-1: Manufacturer: syz [ 389.720932][ T994] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 389.743912][ T994] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 389.924685][ T994] usb 1-1: USB disconnect, device number 100 [ 389.961529][ T994] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 389.962111][ T994] iuu_phoenix 1-1:1.0: device disconnected [ 390.736900][T11208] [ 390.739271][T11208] ====================================================== [ 390.746350][T11208] WARNING: possible circular locking dependency detected [ 390.753385][T11208] syzkaller #0 Tainted: G L [ 390.759463][T11208] ------------------------------------------------------ [ 390.766506][T11208] syz.0.1639/11208 is trying to acquire lock: [ 390.772568][T11208] ffff88802be98460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 390.781300][T11208] [ 390.781300][T11208] but task is already holding lock: [ 390.788674][T11208] ffff8880251f9620 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 390.798420][T11208] [ 390.798420][T11208] which lock already depends on the new lock. [ 390.798420][T11208] [ 390.808825][T11208] [ 390.808825][T11208] the existing dependency chain (in reverse order) is: [ 390.817857][T11208] [ 390.817857][T11208] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 390.825707][T11208] __d_alloc_parallel+0xc32/0x1700 [ 390.831348][T11208] __lookup_slow+0x82/0x2f0 [ 390.836392][T11208] lookup_slow+0x59/0x80 [ 390.841161][T11208] link_path_walk+0xd22/0x1910 [ 390.846455][T11208] path_openat+0x1b7/0x20f0 [ 390.851494][T11208] do_file_open+0x23e/0x4a0 [ 390.856635][T11208] do_sys_openat2+0x115/0x200 [ 390.862035][T11208] __x64_sys_openat+0x138/0x170 [ 390.867438][T11208] do_syscall_64+0x166/0x520 [ 390.872565][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.878991][T11208] [ 390.878991][T11208] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 390.887455][T11208] down_write+0x91/0x200 [ 390.892239][T11208] lookup_open+0x246/0x1970 [ 390.897282][T11208] path_openat+0x70c/0x20f0 [ 390.902315][T11208] do_file_open+0x23e/0x4a0 [ 390.907343][T11208] do_sys_openat2+0x115/0x200 [ 390.912644][T11208] __x64_sys_openat+0x138/0x170 [ 390.918038][T11208] do_syscall_64+0x166/0x520 [ 390.923182][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.929607][T11208] [ 390.929607][T11208] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 390.937027][T11208] __lock_acquire+0x164c/0x2de0 [ 390.942408][T11208] lock_acquire+0x115/0x350 [ 390.947440][T11208] sb_start_write+0x48/0x1c0 [ 390.952560][T11208] mnt_want_write+0x41/0x90 [ 390.957593][T11208] ovl_lookup+0xb93/0x1c80 [ 390.962540][T11208] lookup_open+0x94b/0x1970 [ 390.967580][T11208] path_openat+0x70c/0x20f0 [ 390.972609][T11208] do_file_open+0x23e/0x4a0 [ 390.977664][T11208] do_sys_openat2+0x115/0x200 [ 390.982906][T11208] __x64_sys_openat+0x138/0x170 [ 390.988313][T11208] do_syscall_64+0x166/0x520 [ 390.993484][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.999923][T11208] [ 390.999923][T11208] other info that might help us debug this: [ 390.999923][T11208] [ 391.010174][T11208] Chain exists of: [ 391.010174][T11208] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 391.010174][T11208] [ 391.024113][T11208] Possible unsafe locking scenario: [ 391.024113][T11208] [ 391.031580][T11208] CPU0 CPU1 [ 391.036966][T11208] ---- ---- [ 391.042352][T11208] lock(DCACHE_PAR_LOOKUP); [ 391.046974][T11208] lock(&type->i_mutex_dir_key#5); [ 391.054843][T11208] lock(DCACHE_PAR_LOOKUP); [ 391.062068][T11208] rlock(sb_writers#5); [ 391.066338][T11208] [ 391.066338][T11208] *** DEADLOCK *** [ 391.066338][T11208] [ 391.074480][T11208] locks held by syz.0.1639/11208: 2, last CPU#0: [ 391.080810][T11208] #0: ffff88805336de58 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: lookup_open+0x221/0x1970 [ 391.091457][T11208] #1: ffff8880251f9620 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 391.101659][T11208] [ 391.101659][T11208] stack backtrace: [ 391.107571][T11208] CPU: 0 UID: 0 PID: 11208 Comm: syz.0.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.118601][T11208] Tainted: [L]=SOFTLOCKUP [ 391.122926][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 391.133072][T11208] Call Trace: [ 391.136466][T11208] [ 391.139402][T11208] dump_stack_lvl+0xe8/0x150 [ 391.144032][T11208] print_circular_bug+0x2e2/0x300 [ 391.149063][T11208] check_noncircular+0x12f/0x150 [ 391.154018][T11208] __lock_acquire+0x164c/0x2de0 [ 391.158893][T11208] ? do_raw_spin_unlock+0xf5/0x200 [ 391.164015][T11208] lock_acquire+0x115/0x350 [ 391.168522][T11208] ? mnt_want_write+0x41/0x90 [ 391.173214][T11208] sb_start_write+0x48/0x1c0 [ 391.177821][T11208] ? mnt_want_write+0x41/0x90 [ 391.182505][T11208] mnt_want_write+0x41/0x90 [ 391.187028][T11208] ovl_lookup+0xb93/0x1c80 [ 391.191448][T11208] ? lock_acquire+0x115/0x350 [ 391.196141][T11208] ? __pfx_ovl_lookup+0x10/0x10 [ 391.201014][T11208] ? __pfx___d_alloc_parallel+0x10/0x10 [ 391.206568][T11208] ? d_lookup+0x1f/0xa0 [ 391.210733][T11208] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 391.216935][T11208] ? lockdep_hardirqs_on+0x7b/0x110 [ 391.222152][T11208] lookup_open+0x94b/0x1970 [ 391.226672][T11208] path_openat+0x70c/0x20f0 [ 391.231195][T11208] do_file_open+0x23e/0x4a0 [ 391.235706][T11208] ? __pfx_do_file_open+0x10/0x10 [ 391.240744][T11208] ? _raw_spin_unlock+0x28/0x50 [ 391.245596][T11208] ? alloc_fd+0x6af/0x760 [ 391.249936][T11208] do_sys_openat2+0x115/0x200 [ 391.254624][T11208] ? __se_sys_futex+0x3a8/0x450 [ 391.259479][T11208] ? __pfx_do_sys_openat2+0x10/0x10 [ 391.264702][T11208] ? rcu_is_watching+0x16/0xb0 [ 391.269488][T11208] __x64_sys_openat+0x138/0x170 [ 391.274355][T11208] do_syscall_64+0x166/0x520 [ 391.278973][T11208] ? trace_irq_disable+0x3b/0x140 [ 391.284004][T11208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.290195][T11208] ? clear_bhb_loop+0x70/0xc0 [ 391.294896][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.300797][T11208] RIP: 0033:0x7fb17959e559 [ 391.305231][T11208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.324852][T11208] RSP: 002b:00007fb17a426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 391.333275][T11208] RAX: ffffffffffffffda RBX: 00007fb179825fa0 RCX: 00007fb17959e559 [ 391.341248][T11208] RDX: 0000000000000000 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 391.349224][T11208] RBP: 00007fb1796358b0 R08: 0000000000000000 R09: 0000000000000000 [ 391.357196][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.365197][T11208] R13: 00007fb179826038 R14: 00007fb179825fa0 R15: 00007ffd92bac628 [ 391.373332][T11208] [ 391.508268][T11208] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 391.508360][T11208] dvmrp1: linktype set to 823