last executing test programs: 13m21.29179374s ago: executing program 3 (id=75): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 13m21.060187526s ago: executing program 3 (id=78): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) 13m20.350194241s ago: executing program 3 (id=82): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r2, 0x26}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) 13m20.210137037s ago: executing program 3 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 13m20.040814272s ago: executing program 3 (id=87): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000740)={0x0, 0x0, 0x1, 0x81, 0xfffffff9, 0x3b1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) fcntl$setpipe(r1, 0x407, 0x10ae) 13m19.678136436s ago: executing program 3 (id=92): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0xe) 13m19.409596715s ago: executing program 32 (id=92): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0xe) 11m24.831633224s ago: executing program 2 (id=1317): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x60, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) 11m24.599676706s ago: executing program 2 (id=1320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000280)=0x6c7, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 11m23.380955853s ago: executing program 2 (id=1329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11m21.258728584s ago: executing program 2 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 11m21.136984176s ago: executing program 2 (id=1356): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201c79f80350010"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 11m20.754093731s ago: executing program 2 (id=1360): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0xb, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x40000}], 0x1}}], 0x3, 0x102, &(0x7f0000005ec0)={0x0, 0x3938700}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000180)='bD', 0x2}], 0x1) 11m20.49963732s ago: executing program 33 (id=1360): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0xb, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x40000}], 0x1}}], 0x3, 0x102, &(0x7f0000005ec0)={0x0, 0x3938700}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000180)='bD', 0x2}], 0x1) 11m9.606617034s ago: executing program 1 (id=1470): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0xd9928000) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000400)={r1}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 11m8.932507243s ago: executing program 1 (id=1479): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 11m6.37025784s ago: executing program 1 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) shutdown(r0, 0x0) poll(&(0x7f0000000200)=[{r0, 0x2000}], 0x1, 0x80000001) 11m6.222069311s ago: executing program 1 (id=1498): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x224300d, 0x0) 11m6.044491176s ago: executing program 1 (id=1499): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 11m4.45591169s ago: executing program 1 (id=1508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 11m4.203178115s ago: executing program 34 (id=1508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x14, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 7m7.825125402s ago: executing program 0 (id=4124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {0x0, 0xd1}, {}, @raw32}], 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m7.026505257s ago: executing program 0 (id=4131): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373c", 0x43}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m6.871688374s ago: executing program 0 (id=4132): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 7m6.586703288s ago: executing program 0 (id=4134): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x38e101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) 7m6.508727618s ago: executing program 0 (id=4137): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a", 0x81}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m5.185578401s ago: executing program 0 (id=4153): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x70, 0xd, 0x4, "abc6fece"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m4.913831963s ago: executing program 35 (id=4153): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x70, 0xd, 0x4, "abc6fece"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000005c0)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m7.706609639s ago: executing program 5 (id=6190): socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0x6, @private2, 0x4}}}, &(0x7f0000000040)=0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7) 4m7.554694272s ago: executing program 5 (id=6193): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e", 0x9}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4m7.493077449s ago: executing program 5 (id=6195): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000900)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x5, "2b10fa23e3"}, 0x8) 4m6.482880643s ago: executing program 5 (id=6204): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$P9_RSTATFS(r1, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x7, 0x9, 0x1, 0x0, 0x9, 0x6600000000, 0x4, 0x10, 0x1ff}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000002c0)=""/228, 0xe4) 4m6.459731008s ago: executing program 5 (id=6205): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lchown(&(0x7f0000000880)='./file0\x00', 0x0, 0x0) 4m5.544108796s ago: executing program 5 (id=6223): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19", 0x85}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m50.500484327s ago: executing program 36 (id=6223): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19", 0x85}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m41.490516379s ago: executing program 6 (id=7246): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0x40046207, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020081000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="1f70db3e7c3e9a6b9033f55b5e49213563306e516f432d32648d574339c6531f3b4cb35dcd0b0c389637db278ecea0d75906b793c59c9a5bcb0ff3b7d11d073cecd28e301645ea2abe883bc4dd6154991c838d9617", 0x55}, {&(0x7f0000000840)="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", 0x257}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000180)="13", 0xffffffffffffff9f, 0x10008095, 0x0, 0x0) 2m40.442920756s ago: executing program 6 (id=7255): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x4) syz_clone3(&(0x7f0000000740)={0x120000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x2f}, &(0x7f0000000340)=""/234, 0xea, &(0x7f0000000440)=""/159, &(0x7f0000000500)}, 0x58) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) close_range(r1, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x40085) r6 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x64, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x235, @local, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvtap0\x00'}}]}]}, 0x64}}, 0x0) syz_pidfd_open(r6, 0x0) gettid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf253900000008000300ceb0c159e1bc94e3c201368b49caee3957eb971f383dea9dbece85e85ded36c7dd6b5c0724c2571fc888e2203d626af4dab2124cbddf918b081bd0511f73691cd17a3a4eb6f34d57bb33a1498a6b1374", @ANYRES32=r11, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r13, &(0x7f00000001c0)={0x1d, r14}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r13, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can={{}, 0x7, 0x1, 0x0, 0x0, "00000000000300"}, 0x10}}, 0x20000000) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 2m40.135440243s ago: executing program 6 (id=7259): socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) setsockopt$MRT6_DEL_MFC(r0, 0x3a, 0xcd, 0x0, 0x42) 2m39.968472298s ago: executing program 6 (id=7262): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=""/22, 0x16) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x80) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251000000005000f000400000008000100", @ANYRES32=0x0, @ANYBLOB="050010"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) setregid(0x0, 0x0) r2 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000002c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=r5, @ANYBLOB='\x00\x00']) fstat(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x800, 0x8, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000007900)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004e40)={&(0x7f0000004dc0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd7000ffdbdf250600000008000d0084000000080003000600000008000d0036000000080003001400000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\r\x00D\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4854) r11 = getgid() read$FUSE(0xffffffffffffffff, &(0x7f0000004e80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000006ec0)=0x0, &(0x7f0000006f00), &(0x7f0000006f40)) r15 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r16, r16) lstat(&(0x7f0000007640)='./file0\x00', &(0x7f0000007680)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r18, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r18, &(0x7f0000002f80)={0xa0, 0x0, r19, {{0x4, 0x2, 0x6, 0x4, 0x7, 0xfffffffa, {0x1, 0xe, 0x100, 0x7b, 0x10, 0x400, 0x3, 0xfffffff9, 0x8, 0x8000, 0x10001, r20, r21, 0x9, 0x8}}}}, 0xa0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c00)="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", 0x2000, &(0x7f0000007840)={&(0x7f0000000280)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x7, 0x840, 0xe, 0x7d68, 0x3, 0x4, 0x0, 0x0, 0x20, 0x5}}, &(0x7f0000000180)={0x18, 0x0, 0x9, {0x3ff}}, &(0x7f0000000300)={0x18, 0x0, 0xff, {0x7}}, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x0, {0x6}}, &(0x7f0000000380)={0x18, 0x0, 0x7, {0xf664}}, &(0x7f00000003c0)={0x28, 0x0, 0x7, {{0x6, 0xe61, 0x1}}}, &(0x7f0000000400)={0x60, 0x0, 0x8, {{0x5, 0x8, 0x4, 0xffff, 0x1c3253bc, 0x8, 0x3, 0xe01}}}, &(0x7f0000000480)={0x18, 0xfffffffffffffffe, 0x100000001, {0x549}}, &(0x7f0000007a00)=ANY=[@ANYBLOB="e36847edd923e36d25fdbbe5a08a3cceb8e783bf918087a2bfcf4ea34692a2c622559056b0870973ea17f1dd34947cc956911a5414df891db6d8e5d467ead2f6bf4ea2c8abc9d3d4c335de8159b23c3b370469a1cce71e6e1ae36055b6010096efaa85011c4664abdea06e2234e63dcce2afba6044d3eb5a8eb53018d98a07aefc8ec408b6eeee40a8eb6683f433098a63e1f461ee6f6034094d9daffb01b60caf59e5194a092cf2ec0b1b992313b74903b4593d4090b408cfcbe6ab8d927ad4dc08008bd67951825f0129a9413795edeb492110e984ab38f6ca1312290d6e663231ddd19121b592ee318cc4dc4ef89a7a2cf859c36d609fdc9729896dae0e17696345034fe9fe177017a2c2b4c9dfe80923f9d8ce3c36fc3efd3725f8a5d07fe459466a4578c1432a5d481bd30e99fa5397f42dbf5adebb30607d5cd49b64ddb7d3fb914063e4a2f4aaa25098b02fade811669e92cae5105c0da8b7010b947beb80b6340f61c6edd4cdb359b771d4a6b6ff80515f54634b609f20027e5069"], &(0x7f0000000500)={0x20, 0x0, 0x7fff, {0x0, 0x2}}, &(0x7f00000006c0)={0x78, 0x0, 0x6, {0x6, 0x7, 0x0, {0x2, 0x2, 0xfffffffffffffffe, 0x4000000000000000, 0x401, 0x7ff, 0x0, 0x1, 0x8001, 0xa000, 0x2, 0x0, 0x0, 0x2, 0xf}}}, &(0x7f0000000740)={0x90, 0xfffffffffffffff5, 0x0, {0x4, 0x0, 0x1, 0x8, 0x0, 0x8, {0x3, 0xf2, 0x4, 0x6, 0xa, 0xfffffffffffffffe, 0x7, 0x4, 0x8, 0xd000, 0x6, 0x0, 0x0, 0x0, 0x1}}}, &(0x7f0000000800)={0x28, 0x0, 0x1, [{0x3, 0x7, 0x0, 0x7}]}, &(0x7f0000006f80)=ANY=[@ANYBLOB="a0050000000000000200000000000080060000000000000001000000000000000000000000000000e20d000000000000a5010000070000000400000000000000000200000000000008000000000000000300000000000000810000000000000001000000000000000000000006000000010001000080000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00020000ff000000000000000500000000000000010000000000000002000000af0000003a2100000000000001000000000000000100000000000000f100000000000000050000000000000003000000910000000600000000000000ff01000000000000450e00000000000001000000010000000100000000000000040000000000000008000000ff7f0000040000000010000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="53060000000000000000000005000000000000004a0000000000000004000000810000006e666300000000000200000000000000010000000000000003000000000000000000000000000000000000000100010002000000000000000080000000000000590c00000000000009000000000000000300000000000000089700000000000020300000010000000600000000c0000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0800000057000000000000000000000000000000090000000000000004000000000100006e66630000000000050000000000000003000000000000000700000000000000ff0f000000000000070000000104000003000000000000000900000000000000800000000000000000080000000000000200000000000000ffffffffffffffff0100000005000000000100000010000005000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRESOCT=r13, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="ff7f000000004000000000000300000000000000050000000000000001000000940000005b00000000000000060000000000000000000000000000000900000000000000ff0700000000000001000080030000000100000000000000fb7900000000000005000000000000000800000000000000010000000000000005000000000000000600000000000000080000000050000002000000", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="040000007f000000000000000100000000000000070000000000000000000000010000000100000000000000010000000000000067000000000000009df0000000000000000000000200000001000000000000000700000000000000002000000000000003000000000000003600000000000000f50400000000000001000000090000000300000000e001000a000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0300000003000000000000000500000000000000020000000000000004000000050000006e66630000000000000000000000000001000000000000000800000000000000fdffffffffffffffff0300000300000002000000000000007f000000000000000000ffffffffffff0000000000000000001000000000000003000000000000000000000002000000b90000000020000008000000", @ANYRES32, @ANYRES32=r11, @ANYBLOB="05000000b5000000000000000200000000000000090000000000000004000000040000006e666300000000000400000000000000000000000000000007000000000000000400000000000000ffffff7f03000000050000000000000006000000000000000000000000000000060000000000000006000000000000000010000000000000040000000d000000010001000060000005000000", @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="08000000ff01000000000000010000000000000005000000000000000000000002000000"], &(0x7f0000007540)={0xa0, 0xfffffffffffffff5, 0x10, {{0x2, 0x3, 0xffffffffffff6aa0, 0x7, 0x2006, 0x0, {0x4, 0x2, 0xffff, 0x8, 0x8000000000000001, 0x0, 0x4, 0x7, 0x2, 0xc000, 0xfffffc00, 0xee01, r16, 0x31, 0x9}}, {0x0, 0x3}}}, &(0x7f0000007600)={0x20, 0xfffffffffffffffe, 0xfe3, {0xd9, 0x4, 0x3, 0x8}}, &(0x7f0000007700)={0x130, 0x0, 0x4, {0x6b1, 0x344100c4, 0x0, '\x00', {0x7ff, 0x1ff, 0x1, 0x3, r17, r21, 0xa000, '\x00', 0x7, 0x81, 0x1, 0x800, {0x7, 0x2}, {0x40, 0x4}, {0x7fffffffffffffff, 0x8}, {0x7, 0x6}, 0xf, 0xffffc6e7, 0x0, 0x1000}}}}) 2m39.792154886s ago: executing program 6 (id=7265): socket(0x2b, 0x800, 0x6) add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="001801020200", 0x6, 0xfffffffffffffffb) 2m39.721383715s ago: executing program 6 (id=7267): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\a\x00\x00\x00\xb6\x9b\xdb\xdc\xf3\xb9\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) io_submit(r6, 0x1, &(0x7f0000000480)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r3, &(0x7f0000000340)="8b0d37e31162", 0x6, 0x6}]) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="120c527f8f7e36a888000000", @ANYRES16=r7, @ANYBLOB="000126bd7000fcdbdf250d0000000500290001000000080039000e00000005002a000100000008003c007f0000000a000900bbbbbbbbbbbb000005002e000100000008003200000000000500350080000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x4810) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) sync() 2.506632338s ago: executing program 9 (id=8864): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x1c, 0x76, 0x31f, 0x0, 0xf00, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x0) 2.310179751s ago: executing program 9 (id=8869): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="00000000e902000100"], 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file3\x00') 2.202218845s ago: executing program 9 (id=8872): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4, 0x44825, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x9, 0x6, @remote}, 0x14) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = dup(r3) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000040)={&(0x7f0000725000/0x4000)=nil, 0x6, 0x2, 0x50}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000f00)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @multicast1}}}, 0x118) 2.134847548s ago: executing program 9 (id=8873): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x3c, @multicast2, 0x4e23, 0x2, 'lblc\x00', 0x22, 0x5, 0x22}, {@loopback, 0x4e24, 0x12000, 0x9, 0x4, 0x2}}, 0x44) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) bind$inet(r2, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)=[@wr_drn={0x68, 0x20, {0x4, 0x1}}, @code={0xa, 0x68, {"8f682895cd00c744240000800000c7442402c6710000c7442406000000000f011c240f0766ba2100ed0f21b70f20c035010000000f22c0c7442400b4000000c744240200000000ff1c2464420f78f1c42135dc3c2b0f07"}}, @out_dx={0x6a, 0x28, {0x8ad7, 0x2, 0x8000000000000001}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x91, 0x6, 0x0, 0x3}}, @in_dx={0x69, 0x20, {0x2840, 0x2}}, @wrmsr={0x65, 0x20, {0xb67, 0x5}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x7a, {0x2, "b9800000c00f3235000400000f30b9ec080000b860d00000ba000000000f3046dfefb8010000000f01c1c4020d0b0e652666400ff95abf66baf80cb8b0f2118aef66bafc0cec66baf80cb8bec80b8cef66bafc0cb020ee6526440f32c421fc5278bf"}}, @nested_load_syzos={0x136, 0x88, {0x3, 0x800, [@nested_vmresume={0x130, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x1, 0x1}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x9, 0x4, 0x1, 0x2}}, @nested_vmresume={0x130, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xad2, 0x3}}, @nested_load_code={0x12e, 0x4f, {0x1, "660f06f3430f09660feac5c7442400b1000000c744240200000100ff1c24410f01dff30fa6d03e470f01300f3266ba4200b004ee0f2173"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0x8, 0x1}}, @enable_nested={0x12c, 0x18}], 0x389}) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0xf}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000180)={0x4280000000000000, 0x1, 0x4, 0xc, 0x7}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x0, 0x5, 0x3, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x2, 0x90000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 2.015667753s ago: executing program 9 (id=8875): r0 = socket$pppoe(0x18, 0x1, 0x0) signalfd(r0, &(0x7f0000000180)={[0x20000004]}, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f00000016c0)) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000d80)='\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack_expect\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x6}, 0x7177}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000900)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x7, 0x9, 0x6}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000080)='*(\x00\xdaNQ\x19>\xb6\xe5\xe0\xb4\xaek\x1e\xdc\x9dm\x95y\xd1\xef\xa1\xd8\xc6\x9b\x98\'\x0e\x97ye\xd0\xad\xc1\xd8\x8d\xc9v\xb9#\xefx\x83\xa4y\x13\v\xb6\xcf\xf0aH\x1a:\xa0\xb3\xe7\xe1\xbdL\x12\xc5J\x86\xce\x04\xbf\x1d\xca\xc0]\x87\x9f\xd0(\xa5\x04\x95\xf6T\xe5\xc2\x01@\xd3\xbb \xad\x06\x10{\xe6') 1.181972086s ago: executing program 7 (id=8881): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4020aeb2, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffd}) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4020aeb2, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffd}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x2, r4}) (async) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x2, r4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf252500000008000300", @ANYRES32=r6, @ANYBLOB="08003500000000000a00060008021100000100000f00340028109b894f1f55da3a0e1d00080037000000000008003700020000000400280007000a004cf58e00090007008a7ecca439000000080037000100000004001280080037000100000008003500010000000b003400048f0fb551d69900e000e2bcfb8d8d76fa34004d265b5e61e329656c0000000a000600080211000000000008"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) listen(r4, 0x7ff) 975.66867ms ago: executing program 4 (id=8883): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19", 0x85}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 914.074122ms ago: executing program 7 (id=8884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {0x19, 0x0, 0x4000}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x4000}, 0x0) 894.070932ms ago: executing program 4 (id=8885): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000100)={{0xffffffffffffffff, &(0x7f0000000000)='\\\x00', 0x400000, &(0x7f0000000040)={@align=0x7, {0x9, 0x3, 0x5, 0xcca}}, 0xffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xbc9}, {[0x5, 0x3, 0xcf7f, 0x3]}, 0xa0a4, 0x0, 0x0}) clock_adjtime(0x0, &(0x7f0000000380)={0x10000000000003ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x2, 0xfffffffffffffffc, 0x6, 0x6, 0x9, 0x8004, 0x3, 0x0, 0x3, 0x72a3, 0xe}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001300)={'ip6tnl0\x00', 0x0, 0x29, 0x92, 0x7, 0x6, 0x44, @dev={0xfe, 0x80, '\x00', 0x40}, @private2, 0x700, 0x7, 0x7, 0x4}}) sendmsg$xdp(r0, &(0x7f0000001700)={&(0x7f00000013c0)={0x2c, 0x1, r1, 0x30}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001400)="9ec6d718cf1acd48706b04b17476b8", 0xf}, {&(0x7f0000001440)="20803eaa9738fe35ad9442b10975ed2a405f86c3905552ecb269c8a27ba5bd1656fb91772588debf0405fd15c3659559d45186fbab8e99de668f840779851b6c2ab1d01e6aa05bd5edde9fd73b40a3abcd5e0b6486e1bd3502bc72e92154ae5a692f7c19e64820c3a7d3dcccc4d9a7b2b847f63381d18ba6a9f107dd0efed1a0df289b9480a3cd817730fdb7", 0x8c}, {&(0x7f0000001500)="54a930a1b537eec2ede1b77c9e7a1bb6b060cc5dfabc79d3a3494599bb3857c18bb08f7500ec63cfa7f9b9f788de079ea81223f4cc6ace80313455d05f", 0x3d}, {&(0x7f0000001540)="c83a6991b4a4d9bbdb80efc05c6fb3302c57709f938f005b6d6c0ba711329d8365cd4fb737a0278dded26fdbab47a1c4386de3425f942f25abcb0686375ba78b70396c6a7ee3eaf2911b3a4ac4faa811f0df737c7b99722a4ab54165eb7172d118014b24609dc4b48f24bcebd1e730d01c5cf604fdb6371897a5d44a1a9eafae78ce992e", 0x84}, {&(0x7f0000001600)="7891891254cb3fc1c9e5bdd622cb6b840fa37685eabbde880372b3775bd187b1416e70e789819d7f4aea5ceb434016f2dbf7454886e7eb30f7d8c31ebe534916093eaeaa872c67db91fa5b8043dd29325f13b0e16b15dcb1251a6b93a9f0fea8a7cb", 0x62}], 0x5, 0x0, 0x0, 0x905}, 0x1) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0, 0xfffffeef}], 0x2, 0x1, 0x9) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x50}, 0x1, 0x0, 0x0, 0x5f728db019fd106c}, 0xc044) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r3, 0x0) 873.351415ms ago: executing program 7 (id=8886): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000340)={0x20, 0x9, 0x4, "fce890dc"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000500)={0x40, 0x16, 0x4, "4e59aaf9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 828.724349ms ago: executing program 4 (id=8887): syz_usb_connect(0x0, 0x56, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="3f031c00eee8148eb3c5c10089e98563ce44bd1b4e326f6d", 0x18, 0x0, &(0x7f0000000540)={0xc9, 0x1b, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 418.316958ms ago: executing program 8 (id=8891): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000100)={{0xffffffffffffffff, &(0x7f0000000000)='\\\x00', 0x400000, &(0x7f0000000040)={@align=0x7, {0x9, 0x3, 0x5, 0xcca}}, 0xffff, 0x0, &(0x7f00000000c0)=0xbc9}, {[0x5, 0x3, 0xcf7f, 0x3]}, 0xa0a4, 0x1000, &(0x7f0000000200)=""/4096}) clock_adjtime(0x0, &(0x7f0000000380)={0x10000000000003ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x2, 0xfffffffffffffffc, 0x6, 0x6, 0x9, 0x8004, 0x3, 0x0, 0x3, 0x72a3, 0xe}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001300)={'ip6tnl0\x00', 0x0, 0x29, 0x92, 0x7, 0x6, 0x44, @dev={0xfe, 0x80, '\x00', 0x40}, @private2, 0x700, 0x7, 0x7, 0x4}}) sendmsg$xdp(r0, &(0x7f0000001700)={&(0x7f00000013c0)={0x2c, 0x1, r1, 0x30}, 0x10, &(0x7f0000001680)=[{&(0x7f0000001400)="9ec6d718cf1acd48706b04b17476b8", 0xf}, {&(0x7f0000001440)="20803eaa9738fe35ad9442b10975ed2a405f86c3905552ecb269c8a27ba5bd1656fb91772588debf0405fd15c3659559d45186fbab8e99de668f840779851b6c2ab1d01e6aa05bd5edde9fd73b40a3abcd5e0b6486e1bd3502bc72e92154ae5a692f7c19e64820c3a7d3dcccc4d9a7b2b847f63381d18ba6a9f107dd0efed1a0df289b9480a3cd817730fdb7", 0x8c}, {&(0x7f0000001500)="54a930a1b537eec2ede1b77c9e7a1bb6b060cc5dfabc79d3a3494599bb3857c18bb08f7500ec63cfa7f9b9f788de079ea81223f4cc6ace80313455d05f", 0x3d}, {&(0x7f0000001540)="c83a6991b4a4d9bbdb80efc05c6fb3302c57709f938f005b6d6c0ba711329d8365cd4fb737a0278dded26fdbab47a1c4386de3425f942f25abcb0686375ba78b70396c6a7ee3eaf2911b3a4ac4faa811f0df737c7b99722a4ab54165eb7172d118014b24609dc4b48f24bcebd1e730d01c5cf604fdb6371897a5d44a1a9eafae78ce992e", 0x84}, {&(0x7f0000001600)="7891891254cb3fc1c9e5bdd622cb6b840fa37685eabbde880372b3775bd187b1416e70e789819d7f4aea5ceb434016f2dbf7454886e7eb30f7d8c31ebe534916093eaeaa872c67db91fa5b8043dd29325f13b0e16b15dcb1251a6b93a9f0fea8a7cb", 0x62}], 0x5, 0x0, 0x0, 0x905}, 0x1) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0, 0xfffffeef}], 0x2, 0x1, 0x9) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x50}, 0x1, 0x0, 0x0, 0x5f728db019fd106c}, 0xc044) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r3, 0x0) 408.709115ms ago: executing program 8 (id=8892): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000640)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000005c0)={{@host, 0x55}, @any, 0xf, 0xffffffffffffffff, 0x6, 0x3, 0x0, 0x7, 0x2}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)="eb43"}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x0, 0x5, 0x3, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x2, 0x90000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 370.925482ms ago: executing program 8 (id=8893): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}], 0x2}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19", 0x85}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 273.675267ms ago: executing program 7 (id=8894): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=""/275, 0x113}, {&(0x7f0000000d00)=""/4056, 0xfd8}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f00000000c0)=""/192, 0xc0}], 0x8}, 0x1e2) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=""/275, 0x113}, {&(0x7f0000000d00)=""/4056, 0xfd8}, {&(0x7f0000000740)=""/181, 0xb5}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f00000000c0)=""/192, 0xc0}], 0x8}, 0x1e2) 272.73077ms ago: executing program 4 (id=8895): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19", 0x85}, {0x0}, {0x0}], 0x4}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 190.68014ms ago: executing program 7 (id=8896): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc6}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x94}}, 0x24008000) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000000)={'gre0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2710, @local}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x8, 0x30, 0x80000000}, &(0x7f00000004c0)=0x18) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) dup3(r2, r4, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 174.669401ms ago: executing program 4 (id=8897): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x30000000, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 157.676038ms ago: executing program 8 (id=8898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x7, 0x6, 0x101, 0x40000000, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x80) 74.786395ms ago: executing program 7 (id=8899): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, &(0x7f0000000080)) (async) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) 74.709346ms ago: executing program 8 (id=8900): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x99, 0x0, 0x0, 0x4008}, 0x0) 13.810038ms ago: executing program 8 (id=8901): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2002}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2002}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) setuid(0xee01) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) (async) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'netdevsim0\x00', 0x4}) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'netdevsim0\x00', 0x4}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000002540)=0xe2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00', @ANYRES64=r0], 0x6c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 0s ago: executing program 4 (id=8902): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000340)={0x20, 0x9, 0x4, "fce890dc"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000500)={0x40, 0x16, 0x4, "4e59aaf9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ngth. [ 636.903058][T20707] syzkaller1: entered promiscuous mode [ 636.916439][T20707] syzkaller1: entered allmulticast mode [ 637.382884][T20727] syzkaller1: entered promiscuous mode [ 637.388421][T20727] syzkaller1: entered allmulticast mode [ 637.675324][T20733] overlayfs: failed to clone upperpath [ 638.976214][T20784] overlayfs: failed to clone upperpath [ 639.403830][T20804] overlayfs: failed to clone upperpath [ 639.446631][T20806] overlayfs: failed to clone lowerpath [ 639.947859][T20834] overlayfs: failed to clone upperpath [ 641.451950][T20884] overlayfs: failed to clone upperpath [ 642.743169][T20929] fuse: fd is not a fuse device [ 642.803529][T20931] overlayfs: failed to clone upperpath [ 642.890188][ T948] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 643.040382][ T948] usb 6-1: Using ep0 maxpacket: 8 [ 643.053253][ T948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.073183][ T948] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 643.091262][ T948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.113609][ T948] usb 6-1: config 0 descriptor?? [ 643.133511][ T948] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 644.539085][ T948] gspca_vc032x: reg_w err -71 [ 644.553644][ T948] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 644.578433][ T948] usb 6-1: USB disconnect, device number 74 [ 644.776455][T21027] fuse: fd is not a fuse device [ 645.219207][T21051] overlayfs: failed to clone upperpath [ 645.416738][T21058] fuse: fd is not a fuse device [ 646.671198][ T29] audit: type=1326 audit(1773832816.657:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21097 comm="syz.6.6118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d64b9c799 code=0x0 [ 647.257203][T21109] fuse: fd is not a fuse device [ 647.420433][ T5892] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 647.602530][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.621694][ T5892] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 647.641619][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.665031][ T5892] usb 6-1: config 0 descriptor?? [ 647.746866][T21135] fuse: fd is not a fuse device [ 647.900885][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 647.908426][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 647.935113][ T5892] usb 6-1: USB disconnect, device number 75 [ 648.293697][T21158] overlayfs: failed to clone upperpath [ 648.400209][ T5892] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 648.595316][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.625287][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.653970][ T5892] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.673592][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.695681][ T5892] usb 6-1: config 0 descriptor?? [ 649.140980][ T5892] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 649.338682][T21208] overlayfs: failed to clone upperpath [ 649.601847][ T5893] usb 6-1: USB disconnect, device number 76 [ 649.955816][T21236] fuse: fd is not a fuse device [ 650.203360][T21250] overlayfs: failed to clone upperpath [ 650.277390][T21253] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 650.526896][T21267] overlayfs: failed to clone upperpath [ 650.608766][T21271] binder: 21270:21271 ioctl c0306201 200000000640 returned -22 [ 650.852370][ T1153] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 651.165425][T21295] overlayfs: failed to clone upperpath [ 651.549756][T21277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 651.783364][T21307] overlayfs: failed to clone upperpath [ 651.791581][T21307] overlayfs: failed to clone upperpath [ 652.302996][T21326] fuse: fd is not a fuse device [ 652.433308][T21337] overlayfs: failed to clone upperpath [ 652.714295][T21351] fuse: fd is not a fuse device [ 652.752401][T21353] fuse: fd is not a fuse device [ 653.339496][T21364] fuse: fd is not a fuse device [ 654.056956][T21375] fuse: fd is not a fuse device [ 655.155184][T21410] fuse: fd is not a fuse device [ 655.262410][T21414] overlayfs: failed to clone upperpath [ 655.384540][T21420] overlayfs: failed to clone upperpath [ 655.545765][T21428] fuse: fd is not a fuse device [ 655.731782][T21436] fuse: fd is not a fuse device [ 655.853910][T21442] fuse: fd is not a fuse device [ 655.917368][T21446] fuse: fd is not a fuse device [ 655.985142][T21450] fuse: fd is not a fuse device [ 656.521821][T21480] fuse: fd is not a fuse device [ 657.863775][T21538] tipc: Enabling of bearer rejected, already enabled [ 657.989137][T21542] fuse: fd is not a fuse device [ 658.251033][T21550] lo speed is unknown, defaulting to 1000 [ 658.749644][T21562] batadv_slave_0: entered promiscuous mode [ 658.763364][T21562] netlink: 'syz.4.6325': attribute type 10 has an invalid length. [ 658.771520][T21562] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6325'. [ 659.142890][T21575] fuse: fd is not a fuse device [ 659.339811][T21583] fuse: fd is not a fuse device [ 659.492375][T21561] batadv_slave_0: left promiscuous mode [ 659.555770][T21587] fuse: fd is not a fuse device [ 659.922359][T21597] fuse: fd is not a fuse device [ 660.269831][T21615] fuse: fd is not a fuse device [ 660.306112][T21619] fuse: fd is not a fuse device [ 660.456614][T21625] fuse: fd is not a fuse device [ 660.678168][T21637] fuse: fd is not a fuse device [ 661.107595][T21649] overlayfs: failed to clone upperpath [ 661.926802][T21683] fuse: fd is not a fuse device [ 662.077692][T21693] overlayfs: failed to clone upperpath [ 662.620202][ T51] Bluetooth: hci0: command 0x206a tx timeout [ 663.556426][T21749] fuse: fd is not a fuse device [ 663.746478][T21752] fuse: fd is not a fuse device [ 664.038980][T21766] overlayfs: failed to clone upperpath [ 664.122638][T21770] fuse: fd is not a fuse device [ 664.512506][T21785] overlayfs: failed to clone upperpath [ 664.965342][T21810] overlayfs: failed to clone upperpath [ 667.916194][T21890] fuse: fd is not a fuse device [ 667.979070][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 668.003379][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 668.014410][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 668.025982][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 668.039076][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 668.132922][T21893] lo speed is unknown, defaulting to 1000 [ 669.053345][T21893] chnl_net:caif_netlink_parms(): no params data found [ 669.204457][T21914] fuse: fd is not a fuse device [ 669.210668][T21893] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.218258][T21893] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.226009][T21893] bridge_slave_0: entered allmulticast mode [ 669.234929][T21893] bridge_slave_0: entered promiscuous mode [ 669.248429][T21893] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.256500][T21893] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.266672][T21893] bridge_slave_1: entered allmulticast mode [ 669.275929][T21893] bridge_slave_1: entered promiscuous mode [ 669.339518][T21893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.355923][T21893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.525868][T21893] team0: Port device team_slave_0 added [ 669.552537][T21893] team0: Port device team_slave_1 added [ 669.628512][T21893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.636047][T21893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.665915][T21893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.681262][T21893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.688548][T21893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.724630][T21929] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 669.742224][T21893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.914551][T21893] hsr_slave_0: entered promiscuous mode [ 669.937778][T21893] hsr_slave_1: entered promiscuous mode [ 669.953592][T21893] debugfs: 'hsr0' already exists in 'hsr' [ 669.969817][T21893] Cannot create hsr debugfs directory [ 670.140399][ T51] Bluetooth: hci4: command tx timeout [ 670.618606][T21893] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 670.633507][T21893] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 670.649207][T21893] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 670.676076][T21893] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 670.885568][T21893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.944360][T21893] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.964284][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.971772][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.995272][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.998221][T21952] fuse: fd is not a fuse device [ 671.002779][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.254089][T21958] netlink: 'syz.4.6499': attribute type 10 has an invalid length. [ 671.388227][T21967] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 671.529155][T21893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.966016][T21893] veth0_vlan: entered promiscuous mode [ 671.999563][T21893] veth1_vlan: entered promiscuous mode [ 672.105091][T21893] veth0_macvtap: entered promiscuous mode [ 672.120755][T21893] veth1_macvtap: entered promiscuous mode [ 672.181407][T21893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.215136][T21893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.220861][ T51] Bluetooth: hci4: command tx timeout [ 672.245339][ T138] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.269204][ T138] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.299290][ T138] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.318207][ T138] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.361799][T21990] fuse: fd is not a fuse device [ 672.403276][ T29] audit: type=1326 audit(1773832842.377:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21989 comm="syz.4.6511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f5f70996517 code=0x0 [ 672.612436][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.626056][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.728241][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.738657][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.828971][T21997] fuse: fd is not a fuse device [ 673.033689][ T5885] IPVS: starting estimator thread 0... [ 673.140046][T22004] IPVS: using max 27 ests per chain, 64800 per kthread [ 674.300231][ T51] Bluetooth: hci4: command tx timeout [ 676.374737][ T1153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.388669][ T51] Bluetooth: hci4: command tx timeout [ 676.627732][ T1153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.922104][ T1153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.137366][ T1153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.386806][T17225] Bluetooth: hci2: hardware error 0x07 [ 678.219193][ T1153] bond0: left allmulticast mode [ 678.225321][T22121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6563'. [ 678.248907][ T1153] bond_slave_0: left allmulticast mode [ 678.269872][ T1153] bond_slave_1: left allmulticast mode [ 678.288370][ T1153] mac80211_hwsim hwsim14 wlan1: left allmulticast mode [ 678.310045][ T1153] bridge0: port 3(bond0) entered disabled state [ 678.332434][ T1153] bridge_slave_1: left allmulticast mode [ 678.340562][ T1153] bridge_slave_1: left promiscuous mode [ 678.359113][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.404504][ T1153] bridge_slave_0: left allmulticast mode [ 678.410476][ T1153] bridge_slave_0: left promiscuous mode [ 678.422483][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.967335][T22140] netlink: 'syz.6.6568': attribute type 10 has an invalid length. [ 679.015898][T22143] netlink: 'syz.4.6569': attribute type 10 has an invalid length. [ 679.067349][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.085482][ T1153] bond_slave_0: left promiscuous mode [ 679.108162][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.168556][ T1153] bond_slave_1: left promiscuous mode [ 679.210389][ T1153] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 679.234092][ T1153] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 679.248923][ T1153] bond0 (unregistering): Released all slaves [ 679.426973][ T1153] : left promiscuous mode [ 679.442134][T17225] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 679.897885][ T1153] tipc: Left network mode [ 680.131059][ T1153] IPVS: stopping master sync thread 14460 ... [ 681.425263][ T29] audit: type=1326 audit(1773832851.407:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 681.497562][ T29] audit: type=1326 audit(1773832851.407:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 681.569265][ T1153] hsr_slave_0: left promiscuous mode [ 681.584692][ T29] audit: type=1326 audit(1773832851.407:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 681.608039][ T1153] hsr_slave_1: left promiscuous mode [ 681.628509][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.652271][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.659467][ T29] audit: type=1326 audit(1773832851.407:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 681.688137][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.712247][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.738961][ T29] audit: type=1326 audit(1773832851.407:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 681.825668][ T29] audit: type=1326 audit(1773832851.407:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 681.864496][ T1153] veth1_macvtap: left promiscuous mode [ 681.886121][ T1153] veth0_macvtap: left allmulticast mode [ 681.903643][ T1153] veth0_macvtap: left promiscuous mode [ 681.921344][ T29] audit: type=1326 audit(1773832851.407:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 681.947008][ T1153] veth1_vlan: left promiscuous mode [ 682.025680][ T29] audit: type=1326 audit(1773832851.407:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 682.091131][ T29] audit: type=1326 audit(1773832851.407:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 682.146873][ T29] audit: type=1326 audit(1773832851.407:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22181 comm="syz.6.6581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d64b9c799 code=0x7fc00000 [ 682.274440][T22235] netlink: 'syz.7.6596': attribute type 10 has an invalid length. [ 683.343967][T22250] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6602'. [ 683.379691][T22250] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6602'. [ 684.011375][ T1153] IPVS: stop unused estimator thread 0... [ 685.112941][ T1153] team0: Port device netdevsim0 removed [ 685.744913][T22343] overlayfs: failed to clone upperpath [ 685.770360][ T1153] bridge_slave_1: left allmulticast mode [ 685.794389][ T1153] bridge_slave_1: left promiscuous mode [ 685.811175][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.842011][ T1153] bridge_slave_0: left allmulticast mode [ 685.868219][ T1153] bridge_slave_0: left promiscuous mode [ 685.880986][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.907745][ T1153] pimreg: left allmulticast mode [ 686.156747][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.163314][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.346732][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.358776][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.447864][ T1153] bond0 (unregistering): (slave 4): Releasing backup interface [ 686.480892][ T1153] bond0 (unregistering): Released all slaves [ 686.899570][T22381] fuse: fd is not a fuse device [ 686.923242][T16473] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 687.141887][T16473] usb 9-1: Using ep0 maxpacket: 8 [ 687.168406][T16473] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 687.193051][T16473] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.228891][T16473] usb 9-1: Product: syz [ 687.234209][T16473] usb 9-1: Manufacturer: syz [ 687.239015][T16473] usb 9-1: SerialNumber: syz [ 687.289017][T16473] usb 9-1: config 0 descriptor?? [ 687.563720][T16473] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 688.232888][ T1153] hsr_slave_0: left promiscuous mode [ 688.249382][ T1153] hsr_slave_1: left promiscuous mode [ 688.265595][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.279842][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.576554][T22429] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 688.743328][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 688.772667][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 689.015794][ T6892] smc: removing ib device syz0 [ 689.239594][T16473] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 689.337408][T16473] usb 9-1: USB disconnect, device number 2 [ 689.339574][ T6892] smbdirect: ib_dev[syz0] removed [ 690.120134][ T5935] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 690.305428][ T5935] usb 9-1: Using ep0 maxpacket: 8 [ 690.329380][ T5935] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 690.365364][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.397069][ T5935] usb 9-1: Product: syz [ 690.409995][ T5935] usb 9-1: Manufacturer: syz [ 690.426643][ T5935] usb 9-1: SerialNumber: syz [ 690.459588][ T5935] usb 9-1: config 0 descriptor?? [ 690.496380][T22469] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 690.704623][ T5935] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 692.233704][ T5935] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 692.288101][ T5935] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 692.330026][ T5935] usb 9-1: media controller created [ 692.417506][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.895910][ T5935] i2c i2c-1: Added multiplexed i2c bus 2 [ 692.922181][ T5935] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 692.967945][ T5935] usb 9-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 693.008301][ T5935] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 693.579442][ T5935] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 693.613818][ T5935] usb 9-1: USB disconnect, device number 3 [ 693.628415][ T1153] IPVS: stop unused estimator thread 0... [ 694.735673][T22570] fuse: fd is not a fuse device [ 694.998834][T22582] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 695.140521][ T948] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 695.280056][ T948] usb 9-1: device descriptor read/64, error -71 [ 695.531736][ T948] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 695.670253][ T948] usb 9-1: device descriptor read/64, error -71 [ 695.805687][ T948] usb usb9-port1: attempt power cycle [ 696.160122][ T948] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 696.201030][ T948] usb 9-1: device descriptor read/8, error -71 [ 696.384488][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 696.384510][ T29] audit: type=1326 audit(1773832866.367:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.414678][ T29] audit: type=1326 audit(1773832866.367:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.439004][ T29] audit: type=1326 audit(1773832866.367:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.469540][ T29] audit: type=1326 audit(1773832866.367:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.492867][ T948] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 696.500839][ T29] audit: type=1326 audit(1773832866.367:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.524134][ T29] audit: type=1326 audit(1773832866.367:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.548119][ T29] audit: type=1326 audit(1773832866.367:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.573695][ T948] usb 9-1: device descriptor read/8, error -71 [ 696.577687][ T29] audit: type=1326 audit(1773832866.367:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.602865][ T29] audit: type=1326 audit(1773832866.367:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.627042][ T29] audit: type=1326 audit(1773832866.367:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22605 comm="syz.4.6722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7099c799 code=0x7fc00000 [ 696.703131][ T948] usb usb9-port1: unable to enumerate USB device [ 697.399736][T22645] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 698.138835][T22667] FAULT_INJECTION: forcing a failure. [ 698.138835][T22667] name failslab, interval 1, probability 0, space 0, times 1 [ 698.157811][T22667] CPU: 1 UID: 0 PID: 22667 Comm: syz.8.6740 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.157845][T22667] Tainted: [L]=SOFTLOCKUP [ 698.157852][T22667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.157863][T22667] Call Trace: [ 698.157870][T22667] [ 698.157888][T22667] dump_stack_lvl+0xe8/0x150 [ 698.157923][T22667] should_fail_ex+0x412/0x560 [ 698.157949][T22667] should_failslab+0xa8/0x100 [ 698.157968][T22667] ? do_getname+0x2e/0x250 [ 698.157989][T22667] kmem_cache_alloc_noprof+0x87/0x650 [ 698.158021][T22667] do_getname+0x2e/0x250 [ 698.158041][T22667] ? getname_flags+0x11/0x20 [ 698.158064][T22667] do_sys_openat2+0xca/0x200 [ 698.158089][T22667] ? __pfx_do_sys_openat2+0x10/0x10 [ 698.158114][T22667] ? ksys_write+0x242/0x270 [ 698.158133][T22667] ? __pfx_ksys_write+0x10/0x10 [ 698.158155][T22667] __x64_sys_openat+0x138/0x170 [ 698.158184][T22667] do_syscall_64+0x14d/0xf80 [ 698.158202][T22667] ? trace_irq_disable+0x3b/0x150 [ 698.158224][T22667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.158243][T22667] ? clear_bhb_loop+0x40/0x90 [ 698.158267][T22667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.158285][T22667] RIP: 0033:0x7f34ae55cfce [ 698.158304][T22667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.158320][T22667] RSP: 002b:00007f34af3c3f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 698.158340][T22667] RAX: ffffffffffffffda RBX: 00007f34af3c46c0 RCX: 00007f34ae55cfce [ 698.158353][T22667] RDX: 0000000000000000 RSI: 00007f34ae632330 RDI: ffffffffffffff9c [ 698.158365][T22667] RBP: 00007f34af3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 698.158377][T22667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.158387][T22667] R13: 00007f34ae816038 R14: 00007f34ae815fa0 R15: 00007ffe17e61f48 [ 698.158416][T22667] [ 698.767327][T22687] netlink: 'syz.6.6748': attribute type 7 has an invalid length. [ 698.915493][T22687] : entered promiscuous mode [ 698.920161][ T5935] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 698.937612][T22691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6748'. [ 699.029053][T22701] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6752'. [ 699.140056][ T5935] usb 9-1: Using ep0 maxpacket: 32 [ 699.157374][ T5935] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 699.175011][ T5935] usb 9-1: config 0 has no interface number 0 [ 699.195908][ T5935] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 699.215367][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.232911][ T5935] usb 9-1: Product: syz [ 699.242454][ T5935] usb 9-1: Manufacturer: syz [ 699.253858][ T5935] usb 9-1: SerialNumber: syz [ 699.279296][ T5935] usb 9-1: config 0 descriptor?? [ 699.719765][ T5935] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 699.748367][ T5935] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 700.390246][T22745] overlayfs: failed to clone upperpath [ 701.373181][ T5935] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 701.405088][ T5935] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 701.566193][T22785] batadv_slave_0: entered promiscuous mode [ 701.595198][T22785] netlink: 'syz.6.6768': attribute type 10 has an invalid length. [ 701.616641][T22785] netlink: 55 bytes leftover after parsing attributes in process `syz.6.6768'. [ 701.952968][T22784] batadv_slave_0: left promiscuous mode [ 702.229291][T22816] overlayfs: failed to clone upperpath [ 702.359782][T22822] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 702.368744][T22822] dvmrp0: left allmulticast mode [ 702.406123][ T5935] usb 9-1: USB disconnect, device number 8 [ 702.462405][T22827] FAULT_INJECTION: forcing a failure. [ 702.462405][T22827] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 702.476508][T22827] CPU: 1 UID: 0 PID: 22827 Comm: syz.8.6785 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.476539][T22827] Tainted: [L]=SOFTLOCKUP [ 702.476560][T22827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 702.476571][T22827] Call Trace: [ 702.476580][T22827] [ 702.476588][T22827] dump_stack_lvl+0xe8/0x150 [ 702.476621][T22827] should_fail_ex+0x412/0x560 [ 702.476648][T22827] _copy_to_user+0x31/0xb0 [ 702.476673][T22827] simple_read_from_buffer+0xe1/0x170 [ 702.476705][T22827] proc_fail_nth_read+0x1bb/0x230 [ 702.476732][T22827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.476761][T22827] ? rw_verify_area+0x2a6/0x4d0 [ 702.476786][T22827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 702.476810][T22827] vfs_read+0x20c/0xa70 [ 702.476835][T22827] ? fdget_pos+0x246/0x320 [ 702.476862][T22827] ? __pfx___mutex_lock+0x10/0x10 [ 702.476883][T22827] ? __pfx_vfs_read+0x10/0x10 [ 702.476912][T22827] ? __fget_files+0x2a/0x420 [ 702.476941][T22827] ? __fget_files+0x3a0/0x420 [ 702.476961][T22827] ? __fget_files+0x2a/0x420 [ 702.476991][T22827] ksys_read+0x150/0x270 [ 702.477012][T22827] ? __pfx_ksys_read+0x10/0x10 [ 702.477042][T22827] do_syscall_64+0x14d/0xf80 [ 702.477059][T22827] ? trace_irq_disable+0x3b/0x150 [ 702.477079][T22827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.477099][T22827] ? clear_bhb_loop+0x40/0x90 [ 702.477123][T22827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.477140][T22827] RIP: 0033:0x7f34ae55cfce [ 702.477158][T22827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.477173][T22827] RSP: 002b:00007f34af3c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.477194][T22827] RAX: ffffffffffffffda RBX: 00007f34af3c46c0 RCX: 00007f34ae55cfce [ 702.477207][T22827] RDX: 000000000000000f RSI: 00007f34af3c40a0 RDI: 0000000000000006 [ 702.477217][T22827] RBP: 00007f34af3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 702.477228][T22827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.477238][T22827] R13: 00007f34ae816038 R14: 00007f34ae815fa0 R15: 00007ffe17e61f48 [ 702.477269][T22827] [ 705.713801][T22904] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6822'. [ 706.187874][T22912] delete_channel: no stack [ 706.192854][T22912] delete_channel: no stack [ 706.809749][T22944] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 708.170073][ T5885] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 708.320843][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 708.333313][ T5885] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 708.343346][ T5885] usb 9-1: config 0 has no interface number 0 [ 708.363722][ T5885] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 708.382764][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.391425][ T5885] usb 9-1: Product: syz [ 708.396605][ T5885] usb 9-1: Manufacturer: syz [ 708.401662][ T5885] usb 9-1: SerialNumber: syz [ 708.410463][ T5885] usb 9-1: config 0 descriptor?? [ 708.828732][ T5885] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 708.848430][ T5885] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 708.935865][T23026] fuse: fd is not a fuse device [ 708.947440][T23026] fuse: fd is not a fuse device [ 709.138792][T23035] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 709.802277][T23051] tmpfs: Bad value for 'mpol' [ 710.478308][ T5885] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 710.490490][ T5885] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 710.549385][T23067] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6860'. [ 710.576787][T23069] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 710.621390][T23072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6860'. [ 710.640132][T23072] netlink: 120 bytes leftover after parsing attributes in process `syz.6.6860'. [ 711.513961][ T5935] usb 9-1: USB disconnect, device number 9 [ 711.625104][T23101] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6871'. [ 711.797281][T23106] netlink: 'syz.6.6872': attribute type 10 has an invalid length. [ 711.855045][T23108] dvmrp12: entered allmulticast mode [ 712.333895][T23134] fuse: fd is not a fuse device [ 712.482950][T23101] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 713.172208][ T5935] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 713.350290][ T5935] usb 9-1: Using ep0 maxpacket: 8 [ 713.359772][ T5935] usb 9-1: unable to get BOS descriptor or descriptor too short [ 713.369288][ T5935] usb 9-1: config 14 has an invalid interface number: 2 but max is 0 [ 713.379744][ T5935] usb 9-1: config 14 has no interface number 0 [ 713.386340][ T5935] usb 9-1: config 14 interface 2 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 713.397442][ T5935] usb 9-1: config 14 interface 2 has no altsetting 0 [ 713.407120][ T5935] usb 9-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 713.418777][ T5935] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.433006][ T5935] usb 9-1: Product: syz [ 713.437332][ T5935] usb 9-1: Manufacturer: syz [ 713.442187][ T5935] usb 9-1: SerialNumber: syz [ 713.653656][T23159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.673038][T23159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.687852][T23159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.700448][T23159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.724571][T23159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.745832][T23159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.750742][T23178] overlayfs: failed to clone lowerpath [ 713.774544][T23159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.787715][T23159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.802144][T23159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.815618][T23159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.895569][ T5935] radioshark2 9-1:14.2: Invalid radioSHARK2 device [ 713.910542][ T5935] radioshark2 9-1:14.2: probe with driver radioshark2 failed with error -22 [ 713.924330][ T5935] usbhid 9-1:14.2: couldn't find an input interrupt endpoint [ 713.945401][ T5935] usb 9-1: USB disconnect, device number 10 [ 714.417386][T23196] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6910'. [ 714.501469][T23198] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6910'. [ 715.170326][T23224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.882276][T23239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6927'. [ 717.093918][T23280] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 717.269349][T23286] FAULT_INJECTION: forcing a failure. [ 717.269349][T23286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.302177][T23286] CPU: 0 UID: 0 PID: 23286 Comm: syz.8.6947 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.302211][T23286] Tainted: [L]=SOFTLOCKUP [ 717.302218][T23286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.302230][T23286] Call Trace: [ 717.302237][T23286] [ 717.302246][T23286] dump_stack_lvl+0xe8/0x150 [ 717.302280][T23286] should_fail_ex+0x412/0x560 [ 717.302308][T23286] _copy_from_user+0x2d/0xb0 [ 717.302333][T23286] ___sys_sendmsg+0x1c6/0x360 [ 717.302362][T23286] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.302419][T23286] ? __fget_files+0x2a/0x420 [ 717.302443][T23286] ? __fget_files+0x3a0/0x420 [ 717.302477][T23286] __x64_sys_sendmsg+0x1bd/0x2a0 [ 717.302500][T23286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.302529][T23286] ? __pfx_ksys_write+0x10/0x10 [ 717.302558][T23286] do_syscall_64+0x14d/0xf80 [ 717.302584][T23286] ? trace_irq_disable+0x3b/0x150 [ 717.302606][T23286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.302625][T23286] ? clear_bhb_loop+0x40/0x90 [ 717.302649][T23286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.302669][T23286] RIP: 0033:0x7f34ae59c799 [ 717.302688][T23286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.302704][T23286] RSP: 002b:00007f34af3c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.302726][T23286] RAX: ffffffffffffffda RBX: 00007f34ae815fa0 RCX: 00007f34ae59c799 [ 717.302738][T23286] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 717.302750][T23286] RBP: 00007f34af3c4090 R08: 0000000000000000 R09: 0000000000000000 [ 717.302760][T23286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.302772][T23286] R13: 00007f34ae816038 R14: 00007f34ae815fa0 R15: 00007ffe17e61f48 [ 717.302800][T23286] [ 718.462656][T23330] fuse: fd is not a fuse device [ 718.485266][T23332] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6967'. [ 719.058812][T23358] fuse: fd is not a fuse device [ 720.744830][T23431] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 721.304397][T23451] tmpfs: Bad value for 'uid' [ 721.309310][T23451] tmpfs: Bad value for 'uid' [ 722.625577][T23497] overlayfs: failed to resolve './file1': -2 [ 726.101022][ T5885] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 726.212730][T23609] netlink: 236 bytes leftover after parsing attributes in process `syz.6.7086'. [ 726.224649][T23609] netlink: 236 bytes leftover after parsing attributes in process `syz.6.7086'. [ 726.260232][ T5885] usb 9-1: Using ep0 maxpacket: 16 [ 726.267374][ T5885] usb 9-1: unable to get BOS descriptor or descriptor too short [ 726.277316][ T5885] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.287762][ T5885] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 726.299342][ T5885] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 147, changing to 11 [ 726.310759][ T5885] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 726.330615][ T5885] usb 9-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 726.340618][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.348675][ T5885] usb 9-1: Product: syz [ 726.353426][ T5885] usb 9-1: Manufacturer: syz [ 726.358262][ T5885] usb 9-1: SerialNumber: syz [ 726.592836][ T5885] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 726.646961][T23626] fuse: fd is not a fuse device [ 726.669604][T23628] fuse: fd is not a fuse device [ 726.846279][ T5885] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 726.866643][ T5885] usb 9-1: USB disconnect, device number 11 [ 726.917424][T23636] udevd[23636]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 728.491142][T23705] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 729.135768][T23719] netlink: 204 bytes leftover after parsing attributes in process `syz.8.7131'. [ 729.145534][T23719] netlink: 204 bytes leftover after parsing attributes in process `syz.8.7131'. [ 729.666642][T23740] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7140'. [ 729.679768][T23740] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7140'. [ 730.304769][T23763] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001 [ 730.558325][T23775] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7157'. [ 730.570258][ T5892] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 730.579553][T23775] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7157'. [ 730.701571][ T5892] usb 9-1: device descriptor read/64, error -71 [ 730.970089][ T5892] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 731.101779][ T5892] usb 9-1: device descriptor read/64, error -71 [ 731.221507][ T5892] usb usb9-port1: attempt power cycle [ 731.404879][T23796] netlink: 204 bytes leftover after parsing attributes in process `syz.7.7168'. [ 731.414597][T23796] netlink: 204 bytes leftover after parsing attributes in process `syz.7.7168'. [ 731.572446][ T5892] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 731.610896][ T5892] usb 9-1: device descriptor read/8, error -71 [ 731.702387][T23809] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 731.870045][ T5892] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 731.910707][ T5892] usb 9-1: device descriptor read/8, error -71 [ 732.030507][ T5892] usb usb9-port1: unable to enumerate USB device [ 732.038598][T23817] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7177'. [ 732.054402][T23817] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7177'. [ 732.655532][T23839] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7186'. [ 732.666763][T23839] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7186'. [ 733.198263][T23860] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7195'. [ 733.210422][T23860] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7195'. [ 733.254089][T23862] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 733.643861][T23870] program syz.8.7199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 733.945672][T23883] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7205'. [ 733.955565][T23883] netlink: 204 bytes leftover after parsing attributes in process `syz.6.7205'. [ 735.146709][T23924] netlink: 'syz.8.7223': attribute type 142 has an invalid length. [ 736.544498][T23975] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 737.226600][T23992] autofs: Bad value for 'fd' [ 737.305440][T23994] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7251'. [ 737.324474][T23994] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7251'. [ 737.868328][T24002] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 737.902568][T24002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7255'. [ 738.045361][T24011] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7258'. [ 738.331240][ T948] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 738.348030][T24025] dns_resolver: Unsupported content type (24) [ 738.502416][ T948] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.523082][ T948] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.547606][ T948] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 738.565855][ T948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 738.584618][ T948] usb 9-1: SerialNumber: syz [ 738.784343][T24038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7269'. [ 738.822903][ T948] usb 9-1: 0:2 : does not exist [ 738.936640][ T948] usb 9-1: USB disconnect, device number 16 [ 739.016394][T23636] udevd[23636]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.069872][T24048] 9p: Bad value for 'port' [ 739.916350][T24073] netlink: 'syz.4.7284': attribute type 1 has an invalid length. [ 742.605048][T24185] netlink: 'syz.8.7330': attribute type 25 has an invalid length. [ 742.886283][T24197] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7334'. [ 742.927805][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7335'. [ 743.760259][ T5885] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 743.937636][ T5885] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 743.947072][ T5885] usb 9-1: can't read configurations, error -71 [ 745.835079][T24272] overlayfs: failed to clone upperpath [ 746.270026][ T5850] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 746.397854][T24286] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7372'. [ 746.423557][ T5850] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 27426, setting to 64 [ 746.434876][ T5850] usb 9-1: config 1 interface 0 has no altsetting 0 [ 746.445024][ T5850] usb 9-1: string descriptor 0 read error: -22 [ 746.451707][ T5850] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 746.462420][ T5850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.485090][ T5850] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 747.591522][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.598667][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.788691][T24330] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7391'. [ 749.048184][ T5940] usb 9-1: USB disconnect, device number 19 [ 749.193219][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 749.193240][ T29] audit: type=1800 audit(1773832919.167:300): pid=24344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7397" name="bus" dev="tmpfs" ino=11823 res=0 errno=0 [ 750.660003][ T5940] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 750.661910][T24393] fuse: Bad value for 'fd' [ 750.701051][T24393] overlayfs: failed to clone lowerpath [ 751.072649][ T5940] usb 9-1: Using ep0 maxpacket: 16 [ 751.079855][ T5940] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 751.090410][ T5940] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 751.099032][ T5940] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 751.103609][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7420'. [ 751.107879][ T5940] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 751.125263][ T5940] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 751.136441][ T5940] usb 9-1: config 0 has no interface number 0 [ 751.142983][ T5940] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 751.154420][ T5940] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 751.165265][ T5940] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 751.176154][ T5940] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.189758][ T5940] usb 9-1: config 0 interface 125 has no altsetting 2 [ 751.200883][ T5940] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 751.213454][ T5940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.222064][ T5940] usb 9-1: Product: syz [ 751.226304][ T5940] usb 9-1: Manufacturer: syz [ 751.231507][ T5940] usb 9-1: SerialNumber: syz [ 751.247677][ T5940] usb 9-1: config 0 descriptor?? [ 751.257920][ T5940] usb 9-1: selecting invalid altsetting 2 [ 751.266460][ T5940] uss720 9-1:0.125: probe with driver uss720 failed with error -22 [ 751.466929][ T5940] usb 9-1: USB disconnect, device number 20 [ 751.647151][T24421] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7431'. [ 752.322154][T24437] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 752.364068][ T29] audit: type=1400 audit(1773832922.347:301): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=24438 comm="syz.8.7439" [ 752.406033][T24441] fuse: Unknown parameter '' [ 753.048613][T24462] dns_resolver: Unsupported content type (24) [ 754.594619][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 754.617347][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 754.628719][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 754.643243][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 754.656326][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 755.332096][T24505] pim6reg1: entered allmulticast mode [ 755.424580][T24486] chnl_net:caif_netlink_parms(): no params data found [ 755.583383][T24521] sctp: [Deprecated]: syz.8.7467 (pid 24521) Use of int in max_burst socket option. [ 755.583383][T24521] Use struct sctp_assoc_value instead [ 755.611513][T24486] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.622684][T24486] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.630329][T24486] bridge_slave_0: entered allmulticast mode [ 755.639226][T24486] bridge_slave_0: entered promiscuous mode [ 755.650765][T24486] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.658799][T24486] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.667879][T24486] bridge_slave_1: entered allmulticast mode [ 755.676888][T24486] bridge_slave_1: entered promiscuous mode [ 755.732057][T24486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.758165][T24486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.815644][T24486] team0: Port device team_slave_0 added [ 755.833293][T24486] team0: Port device team_slave_1 added [ 755.892329][T24486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.899338][T24486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.932296][T24486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.952706][T24486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.959813][T24486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.987516][T24486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.992623][ T5893] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 756.128083][T24486] hsr_slave_0: entered promiscuous mode [ 756.137126][T24486] hsr_slave_1: entered promiscuous mode [ 756.150504][ T5893] usb 9-1: device descriptor read/64, error -71 [ 756.400640][ T5893] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 756.531553][T24486] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 756.540789][ T5893] usb 9-1: device descriptor read/64, error -71 [ 756.555536][T24486] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 756.568711][T24486] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 756.582758][T24486] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 756.672089][ T5893] usb usb9-port1: attempt power cycle [ 756.701936][T17225] Bluetooth: hci1: command tx timeout [ 756.766343][T24486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.822681][T24486] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.842665][T23356] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.850054][T23356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.898680][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.906196][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.011613][ T5893] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 757.043132][ T5893] usb 9-1: device descriptor read/8, error -71 [ 757.300121][ T5893] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 757.321648][ T5893] usb 9-1: device descriptor read/8, error -71 [ 757.440840][ T5893] usb usb9-port1: unable to enumerate USB device [ 757.514423][T24564] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7479'. [ 757.518870][T24486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.525524][T24564] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 757.925363][T24587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7484'. [ 758.034318][T24486] veth0_vlan: entered promiscuous mode [ 758.053207][T24486] veth1_vlan: entered promiscuous mode [ 758.119028][T24486] veth0_macvtap: entered promiscuous mode [ 758.135762][T24486] veth1_macvtap: entered promiscuous mode [ 758.178844][T24486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.199175][T24486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.225381][T23356] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.234830][T23356] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.246805][T23356] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.256530][T23356] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.534491][T24599] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7488'. [ 758.548039][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.577884][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.592080][T24599] netlink: 204 bytes leftover after parsing attributes in process `syz.4.7488'. [ 758.668990][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.698671][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.781680][T17225] Bluetooth: hci1: command tx timeout [ 758.785470][T24605] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 759.369988][T16473] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 759.530296][T16473] usb 9-1: Using ep0 maxpacket: 32 [ 759.538129][T16473] usb 9-1: no configurations [ 759.546160][T16473] usb 9-1: can't read configurations, error -22 [ 759.599785][T24643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7502'. [ 759.641309][T24643] openvswitch: netlink: Key type 139 is out of range max 32 [ 759.680500][T16473] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 759.861717][T16473] usb 9-1: Using ep0 maxpacket: 32 [ 759.872782][T16473] usb 9-1: no configurations [ 759.880570][T16473] usb 9-1: can't read configurations, error -22 [ 759.894816][T16473] usb usb9-port1: attempt power cycle [ 760.056854][T24667] sctp: [Deprecated]: syz.7.7511 (pid 24667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.056854][T24667] Use struct sctp_sack_info instead [ 760.079169][T24667] sctp: [Deprecated]: syz.7.7511 (pid 24667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.079169][T24667] Use struct sctp_sack_info instead [ 760.247224][T24676] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7515'. [ 760.259839][T24676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.260144][T16473] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 760.301960][T16473] usb 9-1: Using ep0 maxpacket: 32 [ 760.323139][T16473] usb 9-1: no configurations [ 760.327838][T16473] usb 9-1: can't read configurations, error -22 [ 760.491330][T16473] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 760.522256][T16473] usb 9-1: Using ep0 maxpacket: 32 [ 760.531913][T16473] usb 9-1: no configurations [ 760.546826][T16473] usb 9-1: can't read configurations, error -22 [ 760.874379][T17225] Bluetooth: hci1: command tx timeout [ 761.095240][T24705] vcan0: entered allmulticast mode [ 761.514100][T16473] usb usb9-port1: unable to enumerate USB device [ 762.247130][T24732] netlink: 'syz.8.7540': attribute type 10 has an invalid length. [ 762.264089][T24732] netlink: 156 bytes leftover after parsing attributes in process `syz.8.7540'. [ 762.327787][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7540'. [ 762.543864][T24732] : entered promiscuous mode [ 762.864625][T24739] binder: BINDER_SET_CONTEXT_MGR already set [ 762.891186][T24739] binder: 24738:24739 ioctl 40046207 0 returned -16 [ 762.942346][T17225] Bluetooth: hci1: command tx timeout [ 763.927493][T24761] netlink: 'syz.9.7550': attribute type 7 has an invalid length. [ 764.031201][T24761] : entered promiscuous mode [ 764.136896][T24768] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 765.322739][T24792] netlink: 'syz.4.7563': attribute type 27 has an invalid length. [ 766.216872][T24818] sctp: [Deprecated]: syz.7.7571 (pid 24818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.216872][T24818] Use struct sctp_sack_info instead [ 766.694833][T24828] dns_resolver: Unsupported server list version (6) [ 767.104662][T24844] sctp: [Deprecated]: syz.8.7582 (pid 24844) Use of int in max_burst socket option. [ 767.104662][T24844] Use struct sctp_assoc_value instead [ 767.327553][T24847] tmpfs: Too few inodes for current use [ 769.646158][T24891] sctp: [Deprecated]: syz.7.7599 (pid 24891) Use of int in max_burst socket option. [ 769.646158][T24891] Use struct sctp_assoc_value instead [ 770.670021][T24593] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 770.810194][T24593] usb 10-1: device descriptor read/64, error -71 [ 771.070281][T24593] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 771.233925][T24593] usb 10-1: device descriptor read/64, error -71 [ 771.357894][T24593] usb usb10-port1: attempt power cycle [ 772.430114][T24593] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 772.462398][T24593] usb 10-1: device descriptor read/8, error -71 [ 772.720063][T24593] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 772.752697][T24593] usb 10-1: device descriptor read/8, error -71 [ 772.778961][T24954] sctp: [Deprecated]: syz.8.7615 (pid 24954) Use of int in max_burst socket option. [ 772.778961][T24954] Use struct sctp_assoc_value instead [ 772.880454][T24593] usb usb10-port1: unable to enumerate USB device [ 775.879284][T25011] pim6reg1: entered allmulticast mode [ 776.131656][T25018] netlink: 5624 bytes leftover after parsing attributes in process `syz.8.7645'. [ 776.753206][T25032] overlay: Bad value for 'xino' [ 777.598265][T25043] fuse: fd is not a fuse device [ 777.609088][T25043] fuse: fd is not a fuse device [ 777.730021][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 777.899982][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 777.923679][ T10] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 777.947257][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.977825][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 778.020018][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 778.072862][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.122632][ T10] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 778.157905][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.305544][ T10] usb 10-1: config 0 descriptor?? [ 778.375680][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input39 [ 778.448458][ T5197] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 778.646218][ T10] usb 10-1: USB disconnect, device number 6 [ 778.679513][ T5197] pxrc 10-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 779.441927][ T10] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 779.609959][ T10] usb 9-1: device descriptor read/64, error -71 [ 779.870413][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 780.022511][ T10] usb 9-1: device descriptor read/64, error -71 [ 780.131734][T25107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7680'. [ 780.152842][ T10] usb usb9-port1: attempt power cycle [ 780.510028][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 780.541278][ T10] usb 9-1: device descriptor read/8, error -71 [ 780.812773][ T10] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 780.841138][T25136] overlayfs: failed to clone upperpath [ 780.860795][ T10] usb 9-1: device descriptor read/8, error -71 [ 780.869830][T25138] overlayfs: failed to clone upperpath [ 780.990480][ T10] usb usb9-port1: unable to enumerate USB device [ 781.108515][T25148] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7694'. [ 781.122067][T25148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7694'. [ 781.131381][T25148] netlink: 31 bytes leftover after parsing attributes in process `syz.7.7694'. [ 781.141857][T25148] netlink: 'syz.7.7694': attribute type 2 has an invalid length. [ 781.159513][T25148] netlink: 31 bytes leftover after parsing attributes in process `syz.7.7694'. [ 781.245275][T25153] autofs: Bad value for 'fd' [ 781.253839][T25154] autofs: Bad value for 'fd' [ 781.620193][ T948] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 781.770161][ T948] usb 10-1: Using ep0 maxpacket: 32 [ 781.784429][ T948] usb 10-1: config 4 has an invalid interface number: 44 but max is 0 [ 781.794466][ T948] usb 10-1: config 4 has no interface number 0 [ 781.806690][ T948] usb 10-1: config 4 interface 44 has no altsetting 0 [ 781.819479][ T948] usb 10-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= a.ee [ 781.829718][ T948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.838114][ T948] usb 10-1: Product: syz [ 781.842739][ T948] usb 10-1: Manufacturer: syz [ 781.847462][ T948] usb 10-1: SerialNumber: syz [ 782.058403][T25162] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7698'. [ 782.067720][T25162] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7698'. [ 782.076951][T25162] netlink: 31 bytes leftover after parsing attributes in process `syz.9.7698'. [ 782.087112][T25162] netlink: 'syz.9.7698': attribute type 2 has an invalid length. [ 782.095050][T25162] netlink: 31 bytes leftover after parsing attributes in process `syz.9.7698'. [ 782.126403][ T948] kl5kusb105 10-1:4.44: KL5KUSB105D / PalmConnect converter detected [ 782.147291][ T948] usb 10-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 782.160977][ T948] usb 10-1: USB disconnect, device number 7 [ 782.187845][ T948] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 782.219632][ T948] kl5kusb105 10-1:4.44: device disconnected [ 782.401610][T25178] Option 'TXƮ' to dns_resolver key: bad/missing value [ 782.412597][T25177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.487026][T25180] netlink: 'syz.8.7706': attribute type 1 has an invalid length. [ 782.497463][T25180] netlink: 'syz.8.7706': attribute type 4 has an invalid length. [ 782.506557][T25180] netlink: 17 bytes leftover after parsing attributes in process `syz.8.7706'. [ 782.518302][T25180] netlink: 14601 bytes leftover after parsing attributes in process `syz.8.7706'. [ 782.896389][T25196] netdevsim netdevsim7: Firmware load for '..' refused, path contains '..' component [ 783.180500][T21993] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 783.319991][T21993] usb 10-1: device descriptor read/64, error -71 [ 783.570138][T21993] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 783.701664][T21993] usb 10-1: device descriptor read/64, error -71 [ 783.822354][T21993] usb usb10-port1: attempt power cycle [ 784.160190][T21993] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 784.180780][T21993] usb 10-1: device descriptor read/8, error -71 [ 784.260102][ T5885] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 784.410824][ T5885] usb 9-1: too many configurations: 176, using maximum allowed: 8 [ 784.420078][ T5885] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 784.428936][ T5885] usb 9-1: can't read configurations, error -22 [ 784.439997][T21993] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 784.460828][T21993] usb 10-1: device descriptor read/8, error -71 [ 784.561161][ T5885] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 784.580360][T21993] usb usb10-port1: unable to enumerate USB device [ 784.720807][ T5885] usb 9-1: too many configurations: 176, using maximum allowed: 8 [ 784.742097][ T5885] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 784.751572][ T5885] usb 9-1: can't read configurations, error -22 [ 784.770336][ T5885] usb usb9-port1: attempt power cycle [ 785.111929][ T5885] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 785.141583][ T5885] usb 9-1: too many configurations: 176, using maximum allowed: 8 [ 785.164688][ T5885] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 785.180352][ T5885] usb 9-1: can't read configurations, error -22 [ 785.320256][ T5885] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 785.352684][ T5885] usb 9-1: too many configurations: 176, using maximum allowed: 8 [ 785.363410][T25264] pimreg: entered allmulticast mode [ 785.371844][ T5885] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 136 [ 785.382704][T25264] netlink: 104 bytes leftover after parsing attributes in process `syz.7.7740'. [ 785.392004][ T5885] usb 9-1: can't read configurations, error -22 [ 785.399979][ T5885] usb usb9-port1: unable to enumerate USB device [ 786.865802][T25312] netlink: 204 bytes leftover after parsing attributes in process `syz.9.7758'. [ 786.877716][T25312] netlink: 204 bytes leftover after parsing attributes in process `syz.9.7758'. [ 787.200055][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 787.371007][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 787.384293][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.417248][ T10] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 787.428443][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.438397][ T10] usb 10-1: Product: syz [ 787.443842][ T10] usb 10-1: Manufacturer: syz [ 787.449352][ T10] usb 10-1: SerialNumber: syz [ 787.471535][ T10] usb 10-1: config 0 descriptor?? [ 787.700430][T25318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.725146][T25318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.782457][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 787.805020][ T10] imon 10-1:0.0: unable to initialize intf0, err -19 [ 787.821446][ T10] imon:imon_probe: failed to initialize context! [ 787.833935][ T10] imon 10-1:0.0: unable to register, err -19 [ 787.856568][ T10] usb 10-1: USB disconnect, device number 12 [ 788.015444][T25344] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7772'. [ 788.622339][ T29] audit: type=1326 audit(1773832958.597:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25356 comm="syz.9.7778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e9259c799 code=0x0 [ 790.612996][T25404] netlink: 204 bytes leftover after parsing attributes in process `syz.8.7794'. [ 790.641413][T25404] netlink: 204 bytes leftover after parsing attributes in process `syz.8.7794'. [ 790.670680][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 791.859398][T25430] fuse: Invalid rootmode [ 793.177875][ T29] audit: type=1400 audit(1773832963.157:303): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 793.870075][T24593] usb 9-1: device descriptor read/64, error -71 [ 794.126378][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7818'. [ 794.147226][T24593] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 794.158977][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7818'. [ 794.175702][T25498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7828'. [ 794.185917][T25498] openvswitch: netlink: Flow key attr not present in new flow. [ 794.290146][T24593] usb 9-1: device descriptor read/64, error -71 [ 794.297602][ T5893] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 794.401103][T24593] usb usb9-port1: attempt power cycle [ 794.452488][ T5893] usb 10-1: unable to get BOS descriptor or descriptor too short [ 794.475226][ T5893] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 794.490397][ T5893] usb 10-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 794.515216][ T5893] usb 10-1: config 1 interface 0 has no altsetting 1 [ 794.532700][ T5893] usb 10-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 794.541981][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.555918][ T5893] usb 10-1: Product: syz [ 794.560933][ T5893] usb 10-1: Manufacturer: syz [ 794.565681][ T5893] usb 10-1: SerialNumber: syz [ 794.593845][ T5893] smsusb:smsusb_probe: board id=8, interface number 0 [ 794.743244][T24593] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 794.771548][T24593] usb 9-1: device descriptor read/8, error -71 [ 794.787631][ T5893] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 794.802628][ T5893] smsusb 10-1:1.0: probe with driver smsusb failed with error -71 [ 794.825234][ T5893] usb 10-1: USB disconnect, device number 13 [ 794.998323][T25515] sctp: [Deprecated]: syz.7.7836 (pid 25515) Use of int in max_burst socket option. [ 794.998323][T25515] Use struct sctp_assoc_value instead [ 795.020425][T24593] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 795.050850][T24593] usb 9-1: device descriptor read/8, error -71 [ 795.170701][T24593] usb usb9-port1: unable to enumerate USB device [ 795.187840][T25520] netlink: 'syz.4.7838': attribute type 61 has an invalid length. [ 795.226148][T25520] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7838'. [ 795.910131][ T5885] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 796.072156][ T5885] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 796.089846][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.116872][ T5885] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.135614][ T5885] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 796.172734][ T5885] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 796.192168][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.227506][ T5885] usb 10-1: config 0 descriptor?? [ 796.351513][T25548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.370717][T25548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.618547][ T5892] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 796.785931][ T5892] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 796.796690][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.806694][ T5892] usb 9-1: Product: ဌ [ 796.812930][ T5892] usb 9-1: Manufacturer: ዕ棾쿆玘浰ꏡ谿⁌촑ꧻ᭡鳒 [ 796.824101][ T5892] usb 9-1: SerialNumber: 碬챼ᢷꨰ姗ᴶ•zܑ欧᧯虈䤳ܟ萐쵹ݿƗ⤙ﻶ剕༃輖᥇寪Ԟꭿ郏㩇㘥䓺﮴跏㔩谸몺軚▚亩骓鈹⪁㤓맢ﻮ㺲ꃔ鳧鮼權㔕䃈鲵㒿嗣樾᧯⃐斾ﱆ똫柄넏῞ﳔᓈꫭ橆㶩釕玨캢滔拑䔉ﰶ○㡔強춤猺哝啨 [ 797.094937][ T5892] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 797.189268][ T5892] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 797.223695][ T5892] usb 9-1: USB disconnect, device number 42 [ 797.299379][T23636] udevd[23636]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.939832][ T29] audit: type=1326 audit(1773832967.917:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.8.7860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34ae59c799 code=0x0 [ 798.063243][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7858'. [ 798.260888][ T5892] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 798.432216][ T5892] usb 9-1: Using ep0 maxpacket: 16 [ 798.456604][ T5892] usb 9-1: unable to get BOS descriptor or descriptor too short [ 798.493447][ T5892] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.524231][ T5892] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 798.562651][ T5892] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 798.590374][ T5892] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 798.618689][ T5892] usb 9-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 798.637322][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.659382][ T5892] usb 9-1: Product: syz [ 798.673156][ T5892] usb 9-1: Manufacturer: syz [ 798.683754][ T5892] usb 9-1: SerialNumber: syz [ 798.772573][ T5885] usbhid 10-1:0.0: can't add hid device: -71 [ 798.796067][ T5885] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 798.839039][ T5885] usb 10-1: USB disconnect, device number 14 [ 800.982746][ T5892] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 801.339751][ T5892] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 801.368605][ T5892] usb 9-1: USB disconnect, device number 43 [ 801.440944][T22825] udevd[22825]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.152268][T25657] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7885'. [ 803.183272][T25693] sctp: [Deprecated]: syz.4.7898 (pid 25693) Use of int in max_burst socket option. [ 803.183272][T25693] Use struct sctp_assoc_value instead [ 805.791655][T25753] netlink: 204 bytes leftover after parsing attributes in process `syz.9.7924'. [ 805.839394][T25753] netlink: 204 bytes leftover after parsing attributes in process `syz.9.7924'. [ 806.066959][T25762] 9pnet_fd: Insufficient options for proto=fd [ 809.042452][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.050322][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.299413][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7961'. [ 810.312118][T25863] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7961'. [ 810.897810][T25879] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.7967'. [ 812.975137][T25938] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7989'. [ 813.100957][ T5892] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 813.260699][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 813.272885][ T5892] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.298902][ T5892] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.323750][ T5892] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 813.349963][ T5892] usb 10-1: config 0 interface 0 has no altsetting 0 [ 813.360177][ T5892] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 813.372216][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.394009][ T5892] usb 10-1: config 0 descriptor?? [ 813.816361][ T5892] usbhid 10-1:0.0: can't add hid device: -71 [ 813.835860][ T5892] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 813.859407][ T5892] usb 10-1: USB disconnect, device number 15 [ 814.278679][T25967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8002'. [ 816.211693][T26007] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8016'. [ 816.360652][ T5892] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 816.543785][ T5892] usb 9-1: unable to get BOS descriptor or descriptor too short [ 816.580795][ T5892] usb 9-1: not running at top speed; connect to a high speed hub [ 816.631957][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 816.653606][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 816.695406][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 816.731612][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 816.761887][ T5892] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 816.801084][T26020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8019'. [ 816.803866][ T5892] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 816.854516][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.900315][ T5892] usb 9-1: Product: syz [ 816.906969][ T5892] usb 9-1: Manufacturer: syz [ 816.917860][ T5892] usb 9-1: SerialNumber: syz [ 816.935796][ T5892] usb 9-1: config 0 descriptor?? [ 816.955503][T26010] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 816.994457][ T5892] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.500895][T22825] udevd[22825]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.096820][T16473] usb 9-1: USB disconnect, device number 44 [ 820.738515][T26075] loop8: detected capacity change from 0 to 1 [ 821.493737][T26075] Dev loop8: unable to read RDB block 1 [ 821.557525][T26075] loop8: unable to read partition table [ 821.595399][T26075] loop8: partition table beyond EOD, truncated [ 821.637686][T26075] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 822.206314][T26086] netlink: 'syz.8.8044': attribute type 1 has an invalid length. [ 822.221192][T26086] netlink: 224 bytes leftover after parsing attributes in process `syz.8.8044'. [ 822.747541][T26104] netlink: 'syz.7.8049': attribute type 10 has an invalid length. [ 822.910272][ T5892] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 823.070123][ T5892] usb 9-1: device descriptor read/64, error -71 [ 823.350960][ T5892] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 823.510050][ T5892] usb 9-1: device descriptor read/64, error -71 [ 823.640570][ T5892] usb usb9-port1: attempt power cycle [ 823.990173][ T5892] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 824.022089][ T5892] usb 9-1: device descriptor read/8, error -71 [ 824.280359][ T5892] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 824.320654][ T5892] usb 9-1: device descriptor read/8, error -71 [ 824.323670][T26130] netlink: 'syz.7.8060': attribute type 10 has an invalid length. [ 824.351801][T26130] macvlan0: entered promiscuous mode [ 824.363630][T26130] macvlan0: entered allmulticast mode [ 824.440681][ T5892] usb usb9-port1: unable to enumerate USB device [ 825.940313][T16473] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 825.978499][T26169] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8075'. [ 826.131576][T16473] usb 10-1: Using ep0 maxpacket: 32 [ 826.161210][T16473] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 826.172352][T16473] usb 10-1: config 0 has no interface number 0 [ 826.195002][T16473] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 826.220128][T16473] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.228475][T16473] usb 10-1: Product: syz [ 826.236138][T16473] usb 10-1: Manufacturer: syz [ 826.250166][T16473] usb 10-1: SerialNumber: syz [ 826.270052][T16473] usb 10-1: config 0 descriptor?? [ 826.687151][T16473] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 826.700377][T16473] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 826.912308][T16473] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 826.936307][T26189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8084'. [ 826.948118][T16473] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 827.021856][T26190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8084'. [ 827.503412][T26202] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 828.720440][T26228] fuse: fd is not a fuse device [ 828.753333][ T5885] usb 10-1: USB disconnect, device number 16 [ 830.688639][T26275] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8114'. [ 830.965910][T26283] tipc: Started in network mode [ 830.974221][T26283] tipc: Node identity ac14140f, cluster identity 4711 [ 830.981654][T26283] tipc: New replicast peer: 10.1.1.0 [ 830.987452][T26283] tipc: Enabled bearer , priority 10 [ 831.017767][T26283] netlink: 'syz.9.8116': attribute type 21 has an invalid length. [ 831.379985][T16473] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 831.527628][T26295] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8121'. [ 831.548150][T16473] usb 10-1: device descriptor read/64, error -71 [ 831.566701][T26295] Unknown options in mask b7f2 [ 831.591420][T26298] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 831.801044][T16473] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 831.940175][T16473] usb 10-1: device descriptor read/64, error -71 [ 832.060866][T16473] usb usb10-port1: attempt power cycle [ 832.100065][ T5892] tipc: Node number set to 2886997007 [ 832.430011][T16473] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 832.450809][T16473] usb 10-1: device descriptor read/8, error -71 [ 832.646431][T26316] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 832.720398][T16473] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 832.753815][T16473] usb 10-1: device descriptor read/8, error -71 [ 832.873327][T16473] usb usb10-port1: unable to enumerate USB device [ 833.488300][T26349] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 836.872581][ T5885] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 837.050255][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 837.069425][ T5885] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 837.080495][ T5885] usb 9-1: config 0 has no interface number 0 [ 837.086766][ T5885] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 837.098375][ T5885] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 837.121491][ T5885] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 837.135928][ T5885] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 837.152771][ T5885] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 837.165580][ T5885] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 837.176651][ T5885] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 837.187931][ T5885] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 837.202540][ T5885] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.221141][ T5885] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 837.230986][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.232626][T26425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8164'. [ 837.239131][ T5885] usb 9-1: Product: syz [ 837.239152][ T5885] usb 9-1: Manufacturer: syz [ 837.239173][ T5885] usb 9-1: SerialNumber: syz [ 837.269362][ T5885] usb 9-1: config 0 descriptor?? [ 837.275662][T26425] netlink: 'syz.7.8164': attribute type 3 has an invalid length. [ 837.287050][T26417] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 837.296966][ T5885] usb 9-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 837.307612][ T5885] usb 9-1: couldn't find an output bulk endpoint. Bailing out. [ 837.549103][T24593] usb 9-1: USB disconnect, device number 49 [ 837.784381][T26442] 9p: Bad value for 'rfdno' [ 838.009539][T26451] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8177'. [ 838.952018][T26479] FAULT_INJECTION: forcing a failure. [ 838.952018][T26479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.965887][T26479] CPU: 0 UID: 0 PID: 26479 Comm: syz.9.8187 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.965918][T26479] Tainted: [L]=SOFTLOCKUP [ 838.965925][T26479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.965936][T26479] Call Trace: [ 838.965944][T26479] [ 838.965952][T26479] dump_stack_lvl+0xe8/0x150 [ 838.965983][T26479] should_fail_ex+0x412/0x560 [ 838.966009][T26479] _copy_from_user+0x2d/0xb0 [ 838.966036][T26479] ___sys_sendmsg+0x1c6/0x360 [ 838.966064][T26479] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.966123][T26479] ? __fget_files+0x2a/0x420 [ 838.966148][T26479] ? __fget_files+0x3a0/0x420 [ 838.966184][T26479] __x64_sys_sendmsg+0x1bd/0x2a0 [ 838.966207][T26479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.966250][T26479] ? __pfx_ksys_write+0x10/0x10 [ 838.966280][T26479] do_syscall_64+0x14d/0xf80 [ 838.966299][T26479] ? trace_irq_disable+0x3b/0x150 [ 838.966321][T26479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.966340][T26479] ? clear_bhb_loop+0x40/0x90 [ 838.966362][T26479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.966380][T26479] RIP: 0033:0x7f2e9259c799 [ 838.966398][T26479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.966414][T26479] RSP: 002b:00007f2e934ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.966435][T26479] RAX: ffffffffffffffda RBX: 00007f2e92815fa0 RCX: 00007f2e9259c799 [ 838.966449][T26479] RDX: 000000002404001c RSI: 00002000000005c0 RDI: 0000000000000004 [ 838.966461][T26479] RBP: 00007f2e934ee090 R08: 0000000000000000 R09: 0000000000000000 [ 838.966471][T26479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.966482][T26479] R13: 00007f2e92816038 R14: 00007f2e92815fa0 R15: 00007fffee868378 [ 838.966513][T26479] [ 839.529993][ T5893] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 839.682355][ T5893] usb 10-1: unable to get BOS descriptor or descriptor too short [ 839.691461][ T5893] usb 10-1: not running at top speed; connect to a high speed hub [ 839.705624][ T5893] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 839.715467][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.724040][ T5893] usb 10-1: Product: syz [ 839.728744][ T5893] usb 10-1: Manufacturer: syz [ 839.734029][ T5893] usb 10-1: SerialNumber: syz [ 839.804628][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8195'. [ 840.152671][T17225] block nbd0: Receive control failed (result -32) [ 840.170429][ T5893] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 840.190097][ T5893] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 840.212178][ T5893] usb 10-1: 6:0: failed to get current value for ch 0 (-22) [ 840.237770][ T5893] usb 10-1: 6:0: failed to get current value for ch 1 (-22) [ 840.320742][ T5893] usb 10-1: USB disconnect, device number 21 [ 840.412113][T23636] udevd[23636]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.438112][T26518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8200'. [ 841.495982][T26565] nfs: Unknown parameter '' [ 841.547014][T26561] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8217'. [ 842.076478][T26581] netlink: 'syz.4.8225': attribute type 10 has an invalid length. [ 842.084894][T26581] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8225'. [ 842.273214][T26591] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.8228'. [ 842.299151][T26591] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 842.860097][ T5893] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 843.032007][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 843.046261][ T5893] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 843.058287][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 843.068211][ T5893] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 843.081518][ T5893] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 843.100497][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.112382][ T5893] usb 9-1: Product: syz [ 843.116869][ T5893] usb 9-1: Manufacturer: syz [ 843.121859][ T5893] usb 9-1: SerialNumber: syz [ 843.140020][ T5893] usb 9-1: config 0 descriptor?? [ 843.151585][ T5893] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 843.362297][ T5893] scsi host1: usb-storage 9-1:0.0 [ 843.604109][T26602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.617823][T26630] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8241'. [ 843.631325][T26602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.694248][T26630] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8241'. [ 843.778084][T16473] usb 9-1: USB disconnect, device number 50 [ 845.444516][T26665] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8253'. [ 845.454870][T26665] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8253'. [ 845.799943][T24593] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 845.965048][T24593] usb 9-1: Using ep0 maxpacket: 8 [ 846.005446][T24593] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 846.022359][T24593] usb 9-1: config 0 has no interface number 0 [ 846.032681][T24593] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.048830][T24593] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 846.073838][T24593] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.103964][T24593] usb 9-1: config 0 descriptor?? [ 846.124827][T24593] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 846.435141][T16473] usb 9-1: USB disconnect, device number 51 [ 846.441503][ C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 846.572359][T26696] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8267'. [ 846.597554][T26696] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8267'. [ 847.699688][T26718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8276'. [ 847.748246][T26718] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8276'. [ 849.387842][T26740] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8281'. [ 849.418959][T26740] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8281'. [ 851.018748][T26787] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8299'. [ 851.028611][T26787] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8299'. [ 851.360024][ T5893] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 851.535526][ T5893] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 851.570208][ T5893] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.586857][ T5893] usb 10-1: config 0 descriptor?? [ 851.767837][T26813] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8307'. [ 851.842932][T26813] netlink: 148 bytes leftover after parsing attributes in process `syz.7.8307'. [ 852.073848][ T5893] hackrf 10-1:0.0: usb_control_msg() failed -71 request 0f [ 852.095643][ T5893] hackrf 10-1:0.0: Could not detect board [ 852.107095][ T5893] hackrf 10-1:0.0: probe with driver hackrf failed with error -71 [ 852.123747][ T5893] usb 10-1: USB disconnect, device number 22 [ 852.506866][T26836] Invalid ELF header len 16 [ 854.113267][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8339'. [ 854.128886][T26893] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8338'. [ 854.142970][T26893] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8338'. [ 854.835670][T26930] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8352'. [ 854.845529][T26930] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8352'. [ 855.059277][T26939] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8356'. [ 855.287014][T26955] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8364'. [ 855.322733][T26955] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8364'. [ 855.399993][ T5893] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 855.440692][T26960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8367'. [ 855.552203][ T5893] usb 9-1: config 0 has an invalid interface number: 16 but max is 0 [ 855.570105][ T5893] usb 9-1: config 0 has no interface number 0 [ 855.576475][ T5893] usb 9-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 855.607006][ T5893] usb 9-1: config 0 interface 16 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 855.618834][ T5893] usb 9-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 244, setting to 64 [ 855.635920][ T5893] usb 9-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 855.656750][T26968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8370'. [ 855.659732][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.689381][ T5893] usb 9-1: Product: syz [ 855.694745][ T5893] usb 9-1: Manufacturer: syz [ 856.651893][ T5893] usb 9-1: SerialNumber: syz [ 856.682772][ T5893] usb 9-1: config 0 descriptor?? [ 856.690126][T26948] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 856.697715][T26948] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 856.715349][ T5893] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.027816][T26948] program syz.8.8360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.364515][ T5893] usb 9-1: USB disconnect, device number 52 [ 858.034015][T24593] libceph: connect (1)[c::]:6789 error -101 [ 858.052024][T24593] libceph: mon0 (1)[c::]:6789 connect error [ 858.336457][T16473] libceph: connect (1)[c::]:6789 error -101 [ 858.344650][T16473] libceph: mon0 (1)[c::]:6789 connect error [ 858.355677][T27049] comedi comedi3: pcmmio: a I/O base address must be specified [ 858.800454][T27028] ceph: No mds server is up or the cluster is laggy [ 859.240029][T16473] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 859.352626][ T5892] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 859.410266][T16473] usb 9-1: Using ep0 maxpacket: 32 [ 859.427238][T16473] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 859.453069][T16473] usb 9-1: config 0 has no interface number 0 [ 859.463465][T16473] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 859.474087][T16473] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.483367][T16473] usb 9-1: Product: syz [ 859.490384][T16473] usb 9-1: Manufacturer: syz [ 859.496796][T16473] usb 9-1: SerialNumber: syz [ 859.507855][T16473] usb 9-1: config 0 descriptor?? [ 859.520760][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 859.528524][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.547324][ T5892] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.558899][ T5892] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 859.572563][ T5892] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 859.586424][ T5892] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.603427][ T5892] usb 10-1: config 0 descriptor?? [ 859.930059][T16473] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 859.941616][T16473] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 860.248072][T27078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.287898][T27078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.436074][T27109] __nla_validate_parse: 6 callbacks suppressed [ 860.436096][T27109] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8424'. [ 860.456117][T27109] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8424'. [ 860.706262][T27114] netlink: 120 bytes leftover after parsing attributes in process `syz.7.8426'. [ 860.973126][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.002B/input/input40 [ 861.186596][T16473] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 861.674697][T16473] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 861.691917][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.002B/input/input41 [ 861.835597][ T5892] kye 0003:0458:5011.002B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0 [ 861.891936][ T5892] usb 10-1: USB disconnect, device number 23 [ 862.069609][T27131] fido_id[27131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 862.093906][T27134] fuse: fd is not a fuse device [ 862.105160][T27134] netlink: 'syz.4.8433': attribute type 2 has an invalid length. [ 862.115209][T27134] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.8433'. [ 862.425635][ T5893] usb 9-1: USB disconnect, device number 53 [ 863.054826][T27165] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.304574][T27178] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8452'. [ 863.324761][T27178] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8452'. [ 863.516634][ T29] audit: type=1800 audit(1773833289.499:305): pid=27188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8456" name="nullb0" dev="tmpfs" ino=5294 res=0 errno=0 [ 863.728457][T27198] netlink: 'syz.7.8458': attribute type 10 has an invalid length. [ 863.763825][T27198] team0: Port device bridge_slave_1 added [ 863.912649][T27206] netlink: 19 bytes leftover after parsing attributes in process `syz.7.8463'. [ 864.374848][T27230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8474'. [ 864.452934][ T5885] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 864.605926][T27242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8479'. [ 864.609999][ T5885] usb 9-1: Using ep0 maxpacket: 8 [ 865.583681][ T5885] usb 9-1: config 0 has an invalid interface number: 151 but max is 1 [ 865.599965][ T5885] usb 9-1: config 0 has no interface number 1 [ 865.615750][ T5885] usb 9-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 865.778363][T27242] netlink: 112 bytes leftover after parsing attributes in process `syz.7.8479'. [ 865.911791][T27252] netlink: 'syz.9.8483': attribute type 40 has an invalid length. [ 866.072723][ T5885] usb 9-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 866.084735][ T5885] usb 9-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 866.097319][ T5885] usb 9-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 866.107911][ T5885] usb 9-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.121447][ T5885] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.133065][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 866.144314][ T5885] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 866.164938][ T5885] usb 9-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 866.191239][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.220015][ T5885] usb 9-1: Product: syz [ 866.224488][ T5885] usb 9-1: Manufacturer: syz [ 866.234631][ T5885] usb 9-1: SerialNumber: syz [ 866.252711][ T5885] usb 9-1: config 0 descriptor?? [ 866.266111][T27220] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 866.321705][ T5885] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 866.349104][ T5885] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 866.652056][ T5893] usb 9-1: USB disconnect, device number 54 [ 866.883062][T27266] udevd[27266]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 866.952024][T27262] syzkaller1: entered promiscuous mode [ 866.994019][T27262] syzkaller1: entered allmulticast mode [ 867.343163][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8491'. [ 867.353441][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8491'. [ 867.464347][T27289] trusted_key: encrypted_key: insufficient parameters specified [ 867.487974][T27291] netlink: 58 bytes leftover after parsing attributes in process `syz.7.8496'. [ 867.600026][ T5893] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 867.763480][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.774874][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.784757][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 867.798161][ T5893] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 867.807552][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.818033][ T5893] usb 9-1: config 0 descriptor?? [ 867.990042][ T5892] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 868.120038][ T5892] usb 10-1: device descriptor read/64, error -71 [ 868.261474][ T5893] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 868.380446][ T5892] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 868.540230][ T5892] usb 10-1: device descriptor read/64, error -71 [ 868.574139][T27320] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8507'. [ 868.583873][T27320] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8507'. [ 868.650683][ T5892] usb usb10-port1: attempt power cycle [ 868.872978][T21993] usb 9-1: USB disconnect, device number 55 [ 868.991247][ T5892] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 869.010778][ T5892] usb 10-1: device descriptor read/8, error -71 [ 869.260086][ T5892] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 869.295217][ T5892] usb 10-1: device descriptor read/8, error -71 [ 869.415687][ T5892] usb usb10-port1: unable to enumerate USB device [ 869.456167][T27330] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.8510'. [ 869.655868][T27342] netlink: 'syz.4.8514': attribute type 2 has an invalid length. [ 869.668881][T27342] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8514'. [ 869.786358][T27346] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8516'. [ 869.874178][T27352] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8519'. [ 869.933176][T27353] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 869.940137][T27353] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 869.978831][T27353] vhci_hcd vhci_hcd.0: Device attached [ 870.171141][ T5892] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 870.231895][T16473] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 870.250251][ T5892] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 870.470507][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.479187][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.856389][T27388] __nla_validate_parse: 5 callbacks suppressed [ 870.856411][T27388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8533'. [ 871.305688][T16473] usb 9-1: config 0 has no interfaces? [ 871.856480][T16473] usb 9-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.00 [ 871.884837][T16473] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.907258][T16473] usb 9-1: Product: syz [ 871.917940][T16473] usb 9-1: Manufacturer: syz [ 871.927584][T16473] usb 9-1: SerialNumber: syz [ 871.948819][T16473] usb 9-1: config 0 descriptor?? [ 872.507291][T27409] MTD: Couldn't look up '/dev/nullb0': -15 [ 872.844932][T27419] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.8543'. [ 873.000677][T27424] netlink: 'syz.9.8545': attribute type 10 has an invalid length. [ 873.041593][T27424] team0: Port device geneve1 added [ 873.246530][T27430] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8549'. [ 873.263273][T27356] vhci_hcd: connection reset by peer [ 873.267942][ T10] usb 9-1: USB disconnect, device number 56 [ 873.287000][T27430] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8549'. [ 873.320241][ T35] vhci_hcd vhci_hcd.8: stop threads [ 873.338859][ T35] vhci_hcd vhci_hcd.8: release socket [ 873.342848][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8538'. [ 873.374412][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8538'. [ 873.375890][ T35] vhci_hcd vhci_hcd.8: disconnect device [ 873.954546][T27452] netlink: 'syz.7.8557': attribute type 10 has an invalid length. [ 874.083228][T27452] team0: Port device geneve1 added [ 874.515267][T27458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8560'. [ 874.603273][T27458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8560'. [ 874.938524][T27474] netdevsim netdevsim7 : renamed from netdevsim0 (while UP) [ 875.420540][ T5892] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 875.692362][T27498] pim6reg1: entered promiscuous mode [ 875.698020][T27498] pim6reg1: entered allmulticast mode [ 875.798358][T27500] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8574'. [ 875.830470][T27500] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8574'. [ 875.939980][T21993] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 876.115954][T21993] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 876.155862][T21993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.184506][T21993] usb 10-1: config 0 descriptor?? [ 876.471503][T27527] netlink: 204 bytes leftover after parsing attributes in process `syz.8.8585'. [ 876.484889][T27527] netlink: 204 bytes leftover after parsing attributes in process `syz.8.8585'. [ 876.668545][T21993] hackrf 10-1:0.0: usb_control_msg() failed -71 request 0f [ 876.704919][T21993] hackrf 10-1:0.0: Could not detect board [ 876.720095][T21993] hackrf 10-1:0.0: probe with driver hackrf failed with error -71 [ 876.745745][T21993] usb 10-1: USB disconnect, device number 28 [ 877.361506][ T5935] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 877.377472][T27560] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8596'. [ 877.410268][T27560] netlink: 204 bytes leftover after parsing attributes in process `syz.9.8596'. [ 877.525454][ T5935] usb 9-1: device descriptor read/64, error -71 [ 877.654488][T27570] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8601'. [ 877.664671][T17225] Bluetooth: hci1: command 0x0406 tx timeout [ 877.790221][ T5935] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 877.930185][ T5935] usb 9-1: device descriptor read/64, error -71 [ 878.053067][ T5935] usb usb9-port1: attempt power cycle [ 878.419954][ T5935] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 878.440688][ T5935] usb 9-1: device descriptor read/8, error -71 [ 878.505225][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8619'. [ 878.710179][ T5935] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 878.751414][ T5935] usb 9-1: device descriptor read/8, error -71 [ 878.860630][ T5935] usb usb9-port1: unable to enumerate USB device [ 878.991795][T27615] netlink: 'syz.7.8621': attribute type 28 has an invalid length. [ 878.991807][T27614] netlink: 'syz.7.8621': attribute type 28 has an invalid length. [ 879.120799][T21993] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 879.180507][T27624] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8625'. [ 879.191205][T27624] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8625'. [ 879.272500][T21993] usb 10-1: Using ep0 maxpacket: 32 [ 879.287097][T21993] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 879.295827][T21993] usb 10-1: config 0 has no interface number 0 [ 879.306133][T21993] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 879.315865][T21993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.324284][T21993] usb 10-1: Product: syz [ 879.328862][T21993] usb 10-1: Manufacturer: syz [ 879.333831][T21993] usb 10-1: SerialNumber: syz [ 879.342999][T21993] usb 10-1: config 0 descriptor?? [ 879.765841][T21993] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 879.777268][T21993] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 880.624859][T27668] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8643'. [ 881.002510][T21993] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 881.030659][T21993] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32 [ 881.392618][T27695] comedi comedi3: pcmmio: a I/O base address must be specified [ 881.700041][ T5885] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 881.860073][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 881.871914][ T5885] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 881.891888][ T5885] usb 9-1: config 0 has no interface number 0 [ 881.899401][ T5885] usb 9-1: config 0 interface 12 has no altsetting 0 [ 881.910391][ T5885] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 881.922479][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.945499][ T5885] usb 9-1: Product: syz [ 881.954777][ T5885] usb 9-1: Manufacturer: syz [ 881.964542][ T5885] usb 9-1: SerialNumber: syz [ 881.975953][ T5885] usb 9-1: config 0 descriptor?? [ 882.080752][ T5893] usb 10-1: USB disconnect, device number 29 [ 882.121756][T27720] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8665'. [ 882.168228][T27720] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8665'. [ 882.807507][ T5885] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 882.828707][ T5885] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 882.832660][T27749] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8679'. [ 882.845969][ T5885] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 882.863240][T27749] netlink: 204 bytes leftover after parsing attributes in process `syz.7.8679'. [ 882.865753][ T5885] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 882.938776][ T5885] usb 9-1: USB disconnect, device number 61 [ 883.435738][T27766] IPv4: Oversized IP packet from 172.20.20.24 [ 883.445419][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 883.452216][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 883.474537][T27766] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8686'. [ 883.627011][T27778] mmap: syz.7.8689 (27778): VmData 37474304 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 883.909910][ T5935] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 883.979648][T27791] fuse: fd is not a fuse device [ 884.077396][ T5935] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.108933][ T5935] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 884.122561][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.135901][ T5935] usb 10-1: config 0 descriptor?? [ 884.226782][T27805] kvm: apic: phys broadcast and lowest prio [ 884.506357][T27815] sctp: [Deprecated]: syz.8.8701 (pid 27815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.506357][T27815] Use struct sctp_sack_info instead [ 884.566603][ T5935] ath6kl: Unsupported hardware version: 0x0 [ 884.577713][ T5935] ath6kl: Failed to init ath6kl core: -22 [ 884.595560][ T5935] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 884.685173][T27815] netlink: 'syz.8.8701': attribute type 10 has an invalid length. [ 884.784817][ T5850] usb 10-1: USB disconnect, device number 30 [ 885.064657][T27825] netlink: 'syz.7.8706': attribute type 10 has an invalid length. [ 885.074201][T27825] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8706'. [ 885.787716][T27861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8721'. [ 885.928313][T27875] netlink: 5 bytes leftover after parsing attributes in process `syz.9.8725'. [ 886.195792][T27893] comedi comedi3: pcmmio: a I/O base address must be specified [ 886.230006][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8731'. [ 886.249949][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8731'. [ 886.525808][T27916] netlink: 'syz.4.8742': attribute type 1 has an invalid length. [ 887.355532][T27947] __nla_validate_parse: 5 callbacks suppressed [ 887.355546][T27947] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8756'. [ 887.372617][T27947] netlink: 204 bytes leftover after parsing attributes in process `syz.4.8756'. [ 888.351111][ T5885] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 888.368864][T27997] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8775'. [ 888.453558][T28001] overlayfs: failed to clone lowerpath [ 888.511989][ T5885] usb 9-1: Using ep0 maxpacket: 32 [ 888.527705][ T5885] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 888.547363][ T5885] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.570569][ T5885] usb 9-1: config 0 has no interface number 0 [ 888.588761][ T5885] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.607243][ T5885] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 888.618784][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.629471][ T5885] usb 9-1: Product: syz [ 888.643150][ T5885] usb 9-1: Manufacturer: syz [ 888.653009][ T5885] usb 9-1: SerialNumber: syz [ 888.691330][ T5885] usb 9-1: config 0 descriptor?? [ 888.705522][ T5885] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 888.720532][ T5885] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 888.905970][ T5885] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 889.113352][ T5885] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 889.920123][ T5885] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 890.080102][ T5885] usb 10-1: Using ep0 maxpacket: 16 [ 890.087378][ T5885] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 890.101128][ T5885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.121214][ T5885] usb 10-1: config 0 descriptor?? [ 890.135855][ T5885] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 890.336213][T28038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.345615][T28038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.355143][ T5885] usb 10-1: Detected FT232B [ 890.564706][ T5885] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 890.764786][ T5885] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 890.774835][ T5885] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 890.797288][ T5885] usb 10-1: USB disconnect, device number 31 [ 890.809226][ T5885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 890.821199][ T5885] ftdi_sio 10-1:0.0: device disconnected [ 891.141244][ T5885] usb 9-1: USB disconnect, device number 62 [ 891.156973][ T5885] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 891.647124][T28081] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8812'. [ 891.771743][ T5885] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 891.920052][ T5885] usb 9-1: device descriptor read/64, error -71 [ 892.160129][ T5885] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 892.290031][ T5885] usb 9-1: device descriptor read/64, error -71 [ 892.330067][ T5892] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 892.410539][ T5885] usb usb9-port1: attempt power cycle [ 892.480087][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 892.487653][ T5892] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 892.496972][ T5892] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.507750][ T5892] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.520413][ T5892] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 892.530328][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.538446][ T5892] usb 10-1: Product: syz [ 892.542917][ T5892] usb 10-1: Manufacturer: syz [ 892.547905][ T5892] usb 10-1: SerialNumber: syz [ 892.565511][ T5892] usb 10-1: 0:2 : does not exist [ 892.760022][ T5885] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 892.790661][ T5885] usb 9-1: device descriptor read/8, error -71 [ 893.031117][ T5885] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 893.072478][ T5885] usb 9-1: device descriptor read/8, error -71 [ 893.107860][T28107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8821'. [ 893.192832][ T5885] usb usb9-port1: unable to enumerate USB device [ 893.796173][ T5892] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 893.865082][ T5892] usb 10-1: USB disconnect, device number 32 [ 893.900052][T27266] udevd[27266]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 894.217854][T28145] netlink: 830 bytes leftover after parsing attributes in process `syz.7.8837'. [ 894.801791][T28163] Invalid ELF header len 16 [ 894.915878][T28168] overlayfs: failed to clone upperpath [ 895.234587][T28189] openvswitch: netlink: Key type 243 is out of range max 32 [ 895.270985][T28192] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8857'. [ 895.475870][T28202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.488181][T28202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.683222][T28211] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8865'. [ 896.044457][T28234] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 896.390048][ T948] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 896.410066][ T10] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 896.540054][ T948] usb 9-1: Using ep0 maxpacket: 8 [ 896.547770][ T948] usb 9-1: config 0 has an invalid interface number: 122 but max is 0 [ 896.556859][ T948] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.564590][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.568638][ T948] usb 9-1: config 0 has no interface number 0 [ 896.585602][ T948] usb 9-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 896.591061][T28247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8877'. [ 896.608821][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 896.618550][ T948] usb 9-1: config 0 interface 122 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 896.618580][ T948] usb 9-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 896.618605][ T948] usb 9-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 896.623891][ T948] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 896.633789][T28247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8877'. [ 896.662821][ T948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.671832][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.688464][ T948] usb 9-1: Product: syz [ 896.694694][ T948] usb 9-1: Manufacturer: syz [ 896.699590][ T948] usb 9-1: SerialNumber: syz [ 896.701685][ T10] usb 10-1: config 0 descriptor?? [ 896.721284][T28247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 896.736488][ T948] usb 9-1: config 0 descriptor?? [ 896.740747][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 896.749754][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 896.991945][ T948] usb 9-1: NFC: intf ffff88802a68b000 id ffffffff8f5fc900 [ 897.028001][ T948] usb 9-1: USB disconnect, device number 67 [ 897.032151][T28262] sctp: [Deprecated]: syz.9.8875 (pid 28262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.032151][T28262] Use struct sctp_sack_info instead [ 897.131294][T28258] netlink: 'syz.7.8881': attribute type 18 has an invalid length. [ 898.620349][ T30] INFO: task syz.6.7267:24028 blocked for more than 143 seconds. [ 898.631985][ T30] Tainted: G L syzkaller #0 [ 898.638603][ T30] Blocked by coredump. [ 898.643725][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 898.652802][ T30] task:syz.6.7267 state:D stack:25760 pid:24028 tgid:24028 ppid:9792 task_flags:0x40004c flags:0x00080000 [ 898.666089][ T30] Call Trace: [ 898.669446][ T30] [ 898.672551][ T30] __schedule+0x1665/0x5590 [ 898.677506][ T30] ? __pfx___schedule+0x10/0x10 [ 898.682616][ T30] ? schedule+0x90/0x360 [ 898.687189][ T30] schedule+0x164/0x360 [ 898.691816][ T30] schedule_preempt_disabled+0x13/0x30 [ 898.697461][ T30] rwsem_down_read_slowpath+0x6d9/0x940 [ 898.703505][ T30] ? rwsem_down_read_slowpath+0x596/0x940 [ 898.710252][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 898.716582][ T30] ? do_futex+0x395/0x420 [ 898.721627][ T30] down_read+0x99/0x2e0 [ 898.725924][ T30] ? exit_mm+0x64/0x250 [ 898.730641][ T30] exit_mm+0x73/0x250 [ 898.734702][ T30] ? unwind_deferred_task_exit+0x67/0xa0 [ 898.743410][ T30] do_exit+0x8b9/0x2490 [ 898.747657][ T30] ? try_to_wake_up+0x7fc/0x1390 [ 898.753701][ T30] ? __pfx_do_exit+0x10/0x10 [ 898.759047][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 898.764488][ T30] do_group_exit+0x21b/0x2d0 [ 898.769328][ T30] __x64_sys_exit_group+0x3f/0x40 [ 898.774485][ T30] x64_sys_call+0x221a/0x2240 [ 898.779337][ T30] do_syscall_64+0x14d/0xf80 [ 898.784537][ T30] ? trace_irq_disable+0x3b/0x150 [ 898.789714][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.795881][ T30] ? clear_bhb_loop+0x40/0x90 [ 898.800896][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.806853][ T30] RIP: 0033:0x7f0d64b9c799 [ 898.811376][ T30] RSP: 002b:00007ffda743ea38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 898.820307][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f0d64b9c799 [ 898.828345][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 898.836489][ T30] RBP: 0000000000001da5 R08: 00007ffda743eec7 R09: 000000000000000b [ 898.844551][ T30] R10: 00007f0d64e15fa0 R11: 0000000000000246 R12: 0000000000000003 [ 898.855952][ T30] R13: 00007f0d64e1627c R14: 00007f0d64e16278 R15: 00007f0d64e16270 [ 898.866252][ T30] [ 898.869363][ T30] [ 898.869363][ T30] Showing all locks held in the system: [ 898.877186][ T30] 1 lock held by khungtaskd/30: [ 898.882551][ T30] #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 898.892521][ T30] 2 locks held by getty/5601: [ 898.897228][ T30] #0: ffff88803780f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 898.907339][ T30] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 898.917867][ T30] 1 lock held by syz.6.7267/24028: [ 898.923559][ T30] #0: ffff88803141ce38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 898.933097][ T30] [ 898.935488][ T30] ============================================= [ 898.935488][ T30] [ 898.945575][ T30] NMI backtrace for cpu 1 [ 898.945598][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 898.945624][ T30] Tainted: [L]=SOFTLOCKUP [ 898.945632][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.945642][ T30] Call Trace: [ 898.945651][ T30] [ 898.945659][ T30] dump_stack_lvl+0xe8/0x150 [ 898.945695][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 898.945720][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 898.945756][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 898.945781][ T30] sys_info+0x135/0x170 [ 898.945803][ T30] watchdog+0x1002/0x1060 [ 898.945845][ T30] ? watchdog+0x1da/0x1060 [ 898.945874][ T30] kthread+0x388/0x470 [ 898.945896][ T30] ? __pfx_watchdog+0x10/0x10 [ 898.945915][ T30] ? __pfx_kthread+0x10/0x10 [ 898.945939][ T30] ret_from_fork+0x51e/0xb90 [ 898.945969][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 898.945993][ T30] ? __switch_to+0xc7d/0x1450 [ 898.946022][ T30] ? __pfx_kthread+0x10/0x10 [ 898.946043][ T30] ret_from_fork_asm+0x1a/0x30 [ 898.946074][ T30] [ 898.946095][ T30] Sending NMI from CPU 1 to CPUs 0: [ 899.066270][ C0] NMI backtrace for cpu 0 [ 899.066296][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 899.066319][ C0] Tainted: [L]=SOFTLOCKUP [ 899.066325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 899.066335][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 899.066367][ C0] Code: bd 91 02 e9 d3 f1 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 d2 29 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 899.066381][ C0] RSP: 0018:ffffffff8e807dc0 EFLAGS: 00000246 [ 899.066397][ C0] RAX: 0000000000485bf3 RBX: ffffffff819bd46a RCX: 0000000080000001 [ 899.066410][ C0] RDX: 0000000000000001 RSI: ffffffff8e25766a RDI: ffffffff8c4a6280 [ 899.066421][ C0] RBP: ffffffff8e807eb0 R08: ffff8880b843399b R09: 1ffff11017086733 [ 899.066432][ C0] R10: dffffc0000000000 R11: ffffed1017086734 R12: 0000000000000000 [ 899.066443][ C0] R13: 1ffffffff1d125d8 R14: 0000000000000000 R15: 1ffffffff1d125d8 [ 899.066454][ C0] FS: 0000000000000000(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000 [ 899.066467][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.066478][ C0] CR2: 00007f34ae7e92f8 CR3: 0000000033c2a000 CR4: 00000000003526f0 [ 899.066494][ C0] Call Trace: [ 899.066501][ C0] [ 899.066507][ C0] default_idle+0x9/0x20 [ 899.066524][ C0] default_idle_call+0x72/0xb0 [ 899.066541][ C0] do_idle+0x36a/0x5f0 [ 899.066559][ C0] ? __pfx_do_idle+0x10/0x10 [ 899.066578][ C0] cpu_startup_entry+0x43/0x60 [ 899.066594][ C0] rest_init+0x2de/0x300 [ 899.066612][ C0] start_kernel+0x38f/0x3e0 [ 899.066632][ C0] x86_64_start_reservations+0x24/0x30 [ 899.066654][ C0] x86_64_start_kernel+0x143/0x1c0 [ 899.066675][ C0] common_startup_64+0x13e/0x147 [ 899.066700][ C0] [ 899.204321][ T10] usb 10-1: USB disconnect, device number 33 [ 899.205877][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 899.205901][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 899.205927][ T30] Tainted: [L]=SOFTLOCKUP [ 899.205935][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 899.205946][ T30] Call Trace: [ 899.205955][ T30] [ 899.205964][ T30] vpanic+0x56c/0xa60 [ 899.205989][ T30] ? __pfx___schedule+0x10/0x10 [ 899.206017][ T30] ? __pfx_vpanic+0x10/0x10 [ 899.206035][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 899.206065][ T30] panic+0xc5/0xd0 [ 899.206083][ T30] ? __pfx_panic+0x10/0x10 [ 899.206100][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 899.206128][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 899.206153][ T30] watchdog+0x105b/0x1060 [ 899.206181][ T30] ? watchdog+0x1da/0x1060 [ 899.206207][ T30] kthread+0x388/0x470 [ 899.206229][ T30] ? __pfx_watchdog+0x10/0x10 [ 899.206248][ T30] ? __pfx_kthread+0x10/0x10 [ 899.206269][ T30] ret_from_fork+0x51e/0xb90 [ 899.206296][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 899.206318][ T30] ? __switch_to+0xc7d/0x1450 [ 899.206344][ T30] ? __pfx_kthread+0x10/0x10 [ 899.206365][ T30] ret_from_fork_asm+0x1a/0x30 [ 899.206396][ T30] [ 899.211140][ T30] Kernel Offset: disabled