last executing test programs: 14m15.76777622s ago: executing program 32 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) unshare(0x42000060) 13m53.918268511s ago: executing program 33 (id=297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6a5, 0x0, 0xff}]}) 13m50.104498133s ago: executing program 34 (id=310): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/157, 0x9d}, {&(0x7f0000001a80)=""/4147, 0x1033}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f0000000700)=""/60, 0x3c}], 0x5, 0x0, 0x0, 0x7c0e}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x40000009}], 0x3, 0x40000102, 0x0) 13m26.112454497s ago: executing program 5 (id=467): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}]}, 0x48}}, 0xc011) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="0002b37b", @ANYRES16=r2, @ANYBLOB="200028bd7000fbdbdf258100000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000002e00000004006700"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x249c, 0x932c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xff, 0x0, 0x9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x6, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xa, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3cf, 0xf9, 0x7, 0x6, {0x8, 0x25, 0x1, 0x0, 0x3, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xad, 0x3, 0x5, {0x8, 0x25, 0x1, 0x82, 0x33, 0x7, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "986b6f284f4786962f515e1f42466c8c113165936fd69c767acf750416e1616759427e9310bcb774b3048aaf7564d5b208708fb2b0b3dd71"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdf68}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x88, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x48, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0xa5}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x1, 0x2, 0x0, {0x1, 0x4, 0x0, 0xa, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) ftruncate(r0, 0x0) 13m25.467589276s ago: executing program 35 (id=471): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) pipe2$watch_queue(&(0x7f00000005c0), 0x80) r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$link(0x8, r2, r4) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x31, 0x39, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r5, 0x1) 13m24.369570441s ago: executing program 5 (id=480): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x6000}) 13m23.91525285s ago: executing program 36 (id=481): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000"], 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x2}}, 0x12) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, 0x0, 0x62) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) syz_80211_inject_frame(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="040504", @ANYRES16=r6], 0x7) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, 0x0) 13m23.874018072s ago: executing program 5 (id=483): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000010001"], 0x7) (fail_nth: 7) 13m23.81525642s ago: executing program 5 (id=485): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x44042, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, 0x0}, &(0x7f0000000cc0)=0xc) fchownat(r1, &(0x7f0000000240)='./dev\x00', r2, r3, 0x800) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = userfaultfd(0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x4, 0x81800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x80000, 0x0) write$binfmt_elf64(r8, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x7, 0x5, 0x3, 0x6, 0x2, 0x3e, 0xfffffc01, 0x14, 0x40, 0x82, 0xf70, 0x1b2b, 0x38, 0x4, 0xde71, 0x0, 0x4000}, [{0x485da62359d661af, 0x9f92, 0x8, 0xfffffffffffffffa, 0x5, 0x4, 0xf9, 0x4}, {0x60000000, 0x1, 0x1, 0x1, 0x1, 0x8001, 0x0, 0x4}, {0x60000000, 0x3, 0x9, 0x5, 0x1, 0x9, 0x634f79d8, 0x1ff}, {0x5, 0x8, 0x6, 0x3, 0x9, 0x100, 0x7fffffffffffffff, 0xb}], "437d8a4c8f9e98d9017e0f2d09b8f606ffe1e61be670ca5f91d2e1cbfc535c7381eb0c6a4ab093ce8e91baea8461d913a58714ee320a8f9e48f5bae14acab1ea60e49c1eebcae6b42f2b1b471a72fb7dc89f79fe20bf35b9b1d3a077afa8ac6bafa37844943760ad3c39df5adecf722adf8a76fef2dd924a9ccbfb1221e6ce00b42677e431f48e654c4a0b6097a3179209ab43505b975255f0f6c9e8e628d61cba2cc63be562776af2c693d4fbb2dea90d6d427b678585", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7d7) ioctl(r8, 0xc138fd08, &(0x7f0000000000)) 13m23.205686144s ago: executing program 5 (id=488): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x0, 0x22, 0x7b, {0x7b, 0x4, "dd45a9aa18d5623719649c258704a43e3d98fdfffb83ba4ecde90489156474ab97827285869f73720543e52ef870d0756a08a35a6f5e5a2bd5ae9899c4b313dfa075eb4e094ff6e2f118efe302e1978bcf81f437a9cf55736d88889888acc282cb5429ddadba749f1d2797d0a6c06bac21bd1f3900d8e55a48"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x20, 0x12, 0x6, "e2c32950dfe0"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "1bd3"}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "2ab1"}, &(0x7f0000000b40)={0x20, 0x84, 0x4, "82d6d5b1"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "d8c750"}}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x5, {0x5, 0x7b, "38cc79"}}, &(0x7f0000000040)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6390b2a9dc14ed62b8d8a8"}}, &(0x7f0000000080)={0x0, 0xf, 0x161, {0x5, 0xf, 0x161, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x90, "9fd828d461235a1eb025cbb6a8f3db04"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0xd, 0xff00, 0x4f7, [0xff3f00, 0xf, 0x30, 0x0]}, @generic={0x99, 0x10, 0x4, "2de31368b6e3df5b5abdfc7eae6b2ad5dde04609e0ede9fcde14fbb8d9b5575af73089bf3473d1504c01ee70908c31a259ea9a8a0cb1ef6260b09bce3dd80f39a8f2f438b86e21c676dcb4ec35de6e72453c865c7d9f3ad92796f6a44ea2988983795cb4f38fe9eae46f847b6a4707a1ab7206b0fdd440615868b2a807bb30ec6cb68b9faf7cd97308077dee081ecceea96a334cbda3"}, @generic={0x93, 0x10, 0x2, "d0da55a5d08b3a9d83acf39604256e0a8d9fc7c3323872d4778d56686630a52674dbb8cb528784322a49da6c8c1e8af2e2d2916de9a25f59d78a3aeb47fa4040a1f6019980750390571b828cff9fe728f9c3f1d9bec6b61929d94b4a99c3b91aaf5089a69003bc9180655afdfb78000a6e6963228f64eef5a6311d99204c449f62fd9e4fa98666d74a42ddf553e20930"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x4, 0x4, 0x7, "908fa2e3", "6a3d55e2"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x65, 0x10, 0x8, 0x3, 0x32, 0xa, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x4ab66179e92a58b0, 0x30, 0xa0, "c3deb875c926aa9d35fd5664fedcad29620c4f5c3cf110cb3ca68f26b1bde7fceaaddc0e47994a5a6772ff40f219f6749f2a7f05261b172a7de5f4016c544610ee961867c2c100e82a83f2a4a036fe1cbf50ab0b62b26dcd811ba58caea55a4b5b37018e2ada385a66cf79afa3e14dea14dbb82b7da5e61e500df3b06ce5b5c359186a0246f018f8c524201908c181120f082c3b2919fc5679d93a395cd2d82d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, ' i'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f561"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x94}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xf4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xf1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 13m22.822813731s ago: executing program 6 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd120000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 6) 13m22.293898394s ago: executing program 5 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7970") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000032000000000000006e01000038010000010000000000") 13m21.973120753s ago: executing program 37 (id=490): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7970") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0x35) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000032000000000000006e01000038010000010000000000") 13m21.951510529s ago: executing program 6 (id=492): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="1003", 0x538, 0x0, &(0x7f0000000140)={0x11, 0x8, r1}, 0x14) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x8100, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r5, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 13m21.752380975s ago: executing program 6 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000002c0)={0x20, 0x16, 0x2, "e167"}, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140)=0xffffffffffffffff, 0x12) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000180)={0x4, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) 13m19.938063142s ago: executing program 6 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x44042, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, 0x0}, &(0x7f0000000cc0)=0xc) fchownat(r1, &(0x7f0000000240)='./dev\x00', r2, r3, 0x800) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = userfaultfd(0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x4, 0x81800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x80000, 0x0) ioctl(r8, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r8, 0xc138fd08, &(0x7f0000000000)) 13m19.009553163s ago: executing program 6 (id=495): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002311, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0xe5, "2afe21bb35d963038cef0f6b9ff2e041073d07f39646f72ee995ab97be4b122805a42bf0f182ba97aa942c4f604cf57088d96334a9f1f1e609e1c111bfa33ea5ea122250621ceb53f124c9791687a33544239a26de373fd4234e4f98bcd0661e6494731d94a8682ef8dc9c4c2510749f24a73bec72b5d4c1c5fd4929231a015c06663477f9b022d6cbdba756d425e876954ecc38ecb1a88da20af17a00c19d4599c730c4bbc36bf5083e3fa0bccb187ad1b1a0d20a46289372a21d8c02e76cd310b850aa1292896c0bba98a56c4152db486101e82dc5814aef423c1451a96b96d1d461c3fa"}, &(0x7f0000000980)=0xed) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000b80)={r4, 0x5c, &(0x7f0000000b00)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @remote, 0x600d}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000bc0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000c00)={r4, @in6={{0xa, 0x4e20, 0x5, @mcast1, 0x401}}, [0x6, 0x6e, 0x6, 0x1, 0x6b, 0x81, 0x9, 0x7fffffff, 0x9, 0x89, 0x1c98, 0x8, 0x4, 0x0, 0x9]}, &(0x7f0000000d80)=0x100) sendmmsg$inet_sctp(r3, &(0x7f0000000fc0)=[{&(0x7f0000000100)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)='2', 0x1}, {&(0x7f0000000180)}], 0x2, &(0x7f0000000340)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40004}, {&(0x7f0000000140)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000380)="87b1cf450c62bac75aba24258811265925fc2fc2169d39c9591f0c1fcd7d1a3ea3df727e854bceb5370b7b0d9af573d52440f18eaeea1ef8cd0045648dba8a0ba80d7ab96cc40d34e003fd9409c07baa2bbb93ec369706b50bfedb2f9168d4c256a1411985603f094643790735aaed33baa3eeb281f5259d011e0b941b687a9472f11bd1a33de29787e27322babaa78fbb81d8b87f612bd64abfec921abf4e96a476057c749ec7ba018dea3ac6521ed84f17823e1d6f8da034268cd045c10508e59052", 0xc3}, {&(0x7f0000000480)="7e72d72a10ffbc75239f7bf6460e5265d2c045666116923b9d225c01161a3e5603853dc9a90bea94181f631a33ac34b9dfe57f10c91f67ed50b0f2ef", 0x3c}, {&(0x7f00000004c0)="a5b38a41649cf5d12ddf1547611dda579bc775e64d8b141f022f2aee2fd2e9deb7b89c79247833e73d9f9c67ec3a529b6babfa3bc85c26b23e67f6aa6a9c438bb26f5744e444c9b79cbf1ee84b828d61da0c0b03ddd9111f6c03d7421db7a7b6461a38e9585c37bd40289c9c3a5c9753cce6d1ca16331a2be5e516bc2e06054bc7b0f351371485201aaba5c48c81bd2ade7e618ad2db8dab5276928ab39c6cdb0d40073b201b76244b06cb5701b6061ca0165fc76f7c40ed", 0xb8}, {&(0x7f0000000580)="495e7828e2bc673f80490d2eff3c1d639fbefa5c0f265c0a4e675c56f2d08144f73396c8f46425c32b114e87f6d0c0e9786c14689ccf54cd8f54322f3e0851911114ff8b366b71dbb0cf7001d85f997c4555ac5ea528552530ccbe1bc06ef59ee0eecb2f02bf3e776653e8fae8ed104db5f2e34616f54fc43974b059faba9908917f7bc0995cd448", 0x88}, {&(0x7f0000000640)="1c694edbffffe85744fb68402de0068f42a06d5f46cfb8908fef1ba266c527036107000000d372e0cd44f00f7458f5772ab4d87ecc7b0eb8e1e222811edd4523ce109fbb0a57adbdb5ef6abf7df3969ba140aa2654b23f45ed8138135e648866e54e26fca14e1e9fd304e1c34c051750addef80e5d6c991b3b665caa5da34176b1ebdaf8152c3710f91d085a685e8bde299779d08f54ba909d99f1bee3ecc18a16109a5f3cc6cfec1629203b6f8217a46847456764607ee988066389555a798e", 0xc0}, {&(0x7f0000000700)="e1a0a993521dfbc30ca5013ca0b5c2dd687f0d97861f9b249a2d4f41cb7a91e30e719527fc1e95d47f83dec86a7b3586106d4fcb0d229d197a8c8ee2809bed13d9fd23c42cb07978415458773e280ab9ffcdeec7390feaaff381917dfb", 0x5d}, {&(0x7f0000000780)="83a6a7ed92e82ab79189b3513c2264526fb458a55cbf85fd8c8898d0285f675375e6b9b660544d8d1dbde7396bd60d77966575f4f049685fc104613860533dffc90f9f35cca7c88e43163b3e99865151fd3fbf05c556191f1aaca5624e0eed0794aa97c8306f084d2e7474d65ba297d1f1b444333d5bc1cdfbaba07211fe44", 0x7f}], 0x7, &(0x7f00000009c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x202, 0x6, 0x9, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @init={0x18, 0x84, 0x0, {0x3, 0xb, 0x9, 0x101}}], 0x50, 0x4000040}, {&(0x7f0000000a40)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000a80)="34cc6118cd390219c36f95c2cda58c8704da1baa1fc2a859ab4eeed590421911be2a19c2399596a6b359d007c3eb3a0d7b4741836fba931c84df4e7e64", 0x3d}], 0x1, &(0x7f0000000ec0)=[@authinfo={0x18, 0x84, 0x6, {0x6b5f}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x80}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x2, 0xd, 0x7, 0x70, 0xc, 0xffffffff, 0x1, r5}}, @authinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x10004, 0x7, 0x7ff, r6}}], 0xd0}], 0x3, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)="07590bac08853e412e", 0x9) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40480, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000340)={0x10002, 0x4, 0x8080000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x14) 13m18.347202177s ago: executing program 6 (id=496): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x0, 0x22, 0x7b, {0x7b, 0x4, "dd45a9aa18d5623719649c258704a43e3d98fdfffb83ba4ecde90489156474ab97827285869f73720543e52ef870d0756a08a35a6f5e5a2bd5ae9899c4b313dfa075eb4e094ff6e2f118efe302e1978bcf81f437a9cf55736d88889888acc282cb5429ddadba749f1d2797d0a6c06bac21bd1f3900d8e55a48"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x20, 0x12, 0x6, "e2c32950dfe0"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "1bd3"}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "2ab1"}, &(0x7f0000000b40)={0x20, 0x84, 0x4, "82d6d5b1"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "d8c750"}}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x5, {0x5, 0x7b, "38cc79"}}, &(0x7f0000000040)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6390b2a9dc14ed62b8d8a8"}}, &(0x7f0000000080)={0x0, 0xf, 0x161, {0x5, 0xf, 0x161, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x90, "9fd828d461235a1eb025cbb6a8f3db04"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0xd, 0xff00, 0x4f7, [0xff3f00, 0xf, 0x30, 0x0]}, @generic={0x99, 0x10, 0x4, "2de31368b6e3df5b5abdfc7eae6b2ad5dde04609e0ede9fcde14fbb8d9b5575af73089bf3473d1504c01ee70908c31a259ea9a8a0cb1ef6260b09bce3dd80f39a8f2f438b86e21c676dcb4ec35de6e72453c865c7d9f3ad92796f6a44ea2988983795cb4f38fe9eae46f847b6a4707a1ab7206b0fdd440615868b2a807bb30ec6cb68b9faf7cd97308077dee081ecceea96a334cbda3"}, @generic={0x93, 0x10, 0x2, "d0da55a5d08b3a9d83acf39604256e0a8d9fc7c3323872d4778d56686630a52674dbb8cb528784322a49da6c8c1e8af2e2d2916de9a25f59d78a3aeb47fa4040a1f6019980750390571b828cff9fe728f9c3f1d9bec6b61929d94b4a99c3b91aaf5089a69003bc9180655afdfb78000a6e6963228f64eef5a6311d99204c449f62fd9e4fa98666d74a42ddf553e20930"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x4, 0x4, 0x7, "908fa2e3", "6a3d55e2"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x65, 0x10, 0x8, 0x3, 0x32, 0xa, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x4ab66179e92a58b0, 0x30, 0xa0, "c3deb875c926aa9d35fd5664fedcad29620c4f5c3cf110cb3ca68f26b1bde7fceaaddc0e47994a5a6772ff40f219f6749f2a7f05261b172a7de5f4016c544610ee961867c2c100e82a83f2a4a036fe1cbf50ab0b62b26dcd811ba58caea55a4b5b37018e2ada385a66cf79afa3e14dea14dbb82b7da5e61e500df3b06ce5b5c359186a0246f018f8c524201908c181120f082c3b2919fc5679d93a395cd2d82d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, ' i'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f561"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x94}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xf4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xf1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 13m18.066259729s ago: executing program 38 (id=496): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x0, 0x22, 0x7b, {0x7b, 0x4, "dd45a9aa18d5623719649c258704a43e3d98fdfffb83ba4ecde90489156474ab97827285869f73720543e52ef870d0756a08a35a6f5e5a2bd5ae9899c4b313dfa075eb4e094ff6e2f118efe302e1978bcf81f437a9cf55736d88889888acc282cb5429ddadba749f1d2797d0a6c06bac21bd1f3900d8e55a48"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)={0x20, 0x12, 0x6, "e2c32950dfe0"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000a80)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "1bd3"}, &(0x7f0000000b00)={0x20, 0x83, 0x2, "2ab1"}, &(0x7f0000000b40)={0x20, 0x84, 0x4, "82d6d5b1"}, &(0x7f0000000b80)={0x20, 0x85, 0x3, "d8c750"}}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x23, 0x5, {0x5, 0x7b, "38cc79"}}, &(0x7f0000000040)={0x0, 0x3, 0xd, @string={0xd, 0x3, "6390b2a9dc14ed62b8d8a8"}}, &(0x7f0000000080)={0x0, 0xf, 0x161, {0x5, 0xf, 0x161, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x90, "9fd828d461235a1eb025cbb6a8f3db04"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0xd, 0xff00, 0x4f7, [0xff3f00, 0xf, 0x30, 0x0]}, @generic={0x99, 0x10, 0x4, "2de31368b6e3df5b5abdfc7eae6b2ad5dde04609e0ede9fcde14fbb8d9b5575af73089bf3473d1504c01ee70908c31a259ea9a8a0cb1ef6260b09bce3dd80f39a8f2f438b86e21c676dcb4ec35de6e72453c865c7d9f3ad92796f6a44ea2988983795cb4f38fe9eae46f847b6a4707a1ab7206b0fdd440615868b2a807bb30ec6cb68b9faf7cd97308077dee081ecceea96a334cbda3"}, @generic={0x93, 0x10, 0x2, "d0da55a5d08b3a9d83acf39604256e0a8d9fc7c3323872d4778d56686630a52674dbb8cb528784322a49da6c8c1e8af2e2d2916de9a25f59d78a3aeb47fa4040a1f6019980750390571b828cff9fe728f9c3f1d9bec6b61929d94b4a99c3b91aaf5089a69003bc9180655afdfb78000a6e6963228f64eef5a6311d99204c449f62fd9e4fa98666d74a42ddf553e20930"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc8, 0x4, 0x4, 0x7, "908fa2e3", "6a3d55e2"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x65, 0x10, 0x8, 0x3, 0x32, 0xa, 0x7}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x4ab66179e92a58b0, 0x30, 0xa0, "c3deb875c926aa9d35fd5664fedcad29620c4f5c3cf110cb3ca68f26b1bde7fceaaddc0e47994a5a6772ff40f219f6749f2a7f05261b172a7de5f4016c544610ee961867c2c100e82a83f2a4a036fe1cbf50ab0b62b26dcd811ba58caea55a4b5b37018e2ada385a66cf79afa3e14dea14dbb82b7da5e61e500df3b06ce5b5c359186a0246f018f8c524201908c181120f082c3b2919fc5679d93a395cd2d82d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x4, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, ' i'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f561"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x94}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xf4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0xf1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 13m13.368802205s ago: executing program 7 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x30, 0x16, 0x4}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x0, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0xc, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x4a, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x6, 0x1, 0x18, 0x5, 0x3, 0x7, 0x5}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x3000, 0x42024, 0xb, 0xd01, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000080ff]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 13m13.180426538s ago: executing program 7 (id=498): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x8001af85, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'geneve1\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@nested_amd_clgi={0x17f, 0x10}], 0x10}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="c74424000a000000c744240200800000c7442406000000000f011c242e0f01c226f30f1ed20f20e035400000000f22e0650f209c9a02000000d10066ba410066ed3e660f388025000000008fc8a0a21d0900000000c4e2a9b633", 0x5a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 13m12.260554238s ago: executing program 7 (id=499): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) socket(0xa, 0x3, 0x3a) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x60, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x110) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13m10.805754722s ago: executing program 7 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x44042, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, 0x0}, &(0x7f0000000cc0)=0xc) fchownat(r1, &(0x7f0000000240)='./dev\x00', r2, r3, 0x800) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = userfaultfd(0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x4, 0x81800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(0xffffffffffffffff, 0xc138fd08, &(0x7f0000000000)) 13m10.502521971s ago: executing program 7 (id=502): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x1413, 0xe21, 0x70bd29}, 0x10}, 0x1, 0x0, 0x0, 0x14002}, 0x448d0) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 13m8.925709054s ago: executing program 7 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x44042, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, 0x0}, &(0x7f0000000cc0)=0xc) fchownat(r1, &(0x7f0000000240)='./dev\x00', r2, r3, 0x800) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = userfaultfd(0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x4, 0x81800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(0xffffffffffffffff, 0xc138fd08, &(0x7f0000000000)) 13m8.565716775s ago: executing program 39 (id=508): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x44042, 0x0) statx(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, 0x0}, &(0x7f0000000cc0)=0xc) fchownat(r1, &(0x7f0000000240)='./dev\x00', r2, r3, 0x800) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, 0x0) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = userfaultfd(0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x4, 0x81800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(0xffffffffffffffff, 0xc138fd08, &(0x7f0000000000)) 11m48.321711412s ago: executing program 8 (id=995): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x50) r3 = userfaultfd(0x801) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000c1401002abd7000fbdbdf2508003d0002000000080006"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400), 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/96, 0x7ffff000}], 0x1000000000000049, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xfc, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x850}, 0x8000) lseek(r6, 0x4007, 0x0) getdents(r6, 0xffffffffffffffff, 0x5a) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440011000706010400000000000000000a0000090900020073797a310000000008000640200000070800064000000001080006400000000a0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0x4005000}, 0xc091) 11m48.308548987s ago: executing program 8 (id=996): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b1600000000000b0000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="d8974a6a4962d7c7a41d6b3c082cec8e532ec159d13f5f14c8c8f5c8c3df968131b8f7b6f4f1edeb076c7d780332f95ec37841196c44788a000078e3af6ce1c4d5ddfb17d8661a22c099510e059d79b1dda9101ceb8b4ae82bbd59cd5942e8d252f5e5794d55be5031babbaae401d11f", 0x70}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78000000000101010000000000000000070000090800034000001000100005800c000280050001002f0000000c00028005000100880000000c0002800500010088000000240019800800010000020000080001001201000008000200000000000800010000010000"], 0x78}, 0x1, 0x0, 0x0, 0x95}, 0x5) timer_create(0x3, &(0x7f0000000500)={0x0, 0x39, 0x4, @thr={&(0x7f00000003c0)="22fabad8d67a9b7b3d498df2c6d3bd2693c129444ca67b04ccf7dfd34a7ee79aed1b5a52a3526a40153e3fd441417d867967d4c212d62f2e023ca4e5ed52983c6661129923119882b7a5b84523bb857f688d4738735bbfa8b8d6c5edcb2b2d35ef9d94ce6c0800f64085cd5236db3a56af7942a481b6c6bdabdc0ccc", &(0x7f0000000440)="827783b9cdaaa11362af4ffd159dc1db8e8e3ac661635e7971de23a61380332dd6e2d3076f6b5c5848cec8a0f1688f1e87adb6dde5aaaa8a7ead345054b29a5d00d2fa823b14198d35312dd4ce7577e3f61b5008abd2d4e08f863d726085907b41169f12725246b7745769fe4b0d0b0a28c530e69aa288b4bb5e1a9bea1031a75a69737d6fe91276672f6aefbd5452d5c820c43a0547e10c2c06f1d51f048a31e38aa247aa90fc18eb4137031eb9e6668530826694bcf911ab9fd8"}}, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000300)='openpromfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r6, 0x127b, &(0x7f0000000000)={0x0, 0x1000}) write$9p(r6, &(0x7f0000000280)="64730de634af", 0x6) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x20, 0x70bd2e, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0xc085) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) read(r8, &(0x7f0000000080)=""/60, 0x3c) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000040)) 11m48.155495621s ago: executing program 8 (id=997): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x202c1) write(r1, 0x0, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000040)={0x0, r1, r1, 0x9, 0xd3, '\x00', {0x5, 0x2, 0x1000, 0x7, 0x8, 0x1, 0x1000, 0xffffffffffffff01, {0x1, 0x3}, {0x7, 0x6a13}, {0x43, 0x9}, 0xfab0, 0x4, 0x7, 0xd, 0x2bf, 0xd7a, 0x6, 0x5, 0x4, 0x8, '\x00', 0x9, 0x1000, 0x7872, 0x3ff}}) 11m46.578871793s ago: executing program 8 (id=1006): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x62, 0x33, 0x33, 0x32, 0x61, 0x61, 0x32, 0x30, 0x39, 0x39, 0x37, 0x35, 0x622adb5809077277, 0x38, 0x37]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccdd2b4f1e562233445566778899aabbccddeeff00001168b07846d524b29db701e5ddeeff8000", 0x44}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x61, 0x30, 0xa, 0x30, 0x30, 0xce6933fa42f3a37a, 0x30, 0x36, 0x30, 0x30, 0x38, 0x32, 0x30, 0x35, 0x64, 0x36]}, &(0x7f0000000100)={0x0, "00113e33440100000000000000ddeeff0011203344556677888caabbccbbaabf51192f043e55ea37445566770399aafbccddeeff0000000000000000000800", 0x3e}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x34, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x63, 0x39, 0x66, 0x34, 0x34, 0x53, 0x31, 0x37, 0x66, 0x32, 0x66, 0x66, 0x32, 0x34]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ccd5406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x12}, 0x48, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./debug\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000"], 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x0, 0x0, 0x0, 0x30e0eb84d0a45fa6, 0x3}, 0x85, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) mount(&(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0, 0x20d80d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x400000}], 0x1, 0x20000, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) mq_unlink(0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 11m45.988411001s ago: executing program 8 (id=1012): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x8001af85, &(0x7f0000000000)) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'geneve1\x00'}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@nested_amd_clgi={0x17f, 0x10}], 0x10}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="c74424000a000000c744240200800000c7442406000000000f011c242e0f01c226f30f1ed20f20e035400000000f22e0650f209c9a02000000d10066ba410066ed3e660f388025000000008fc8a0a21d0900000000c4e2a9b633", 0x5a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 11m45.752735823s ago: executing program 8 (id=1013): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x30, 0x16, 0x4}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x0, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0xc, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x4a, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x6, 0x1, 0x18, 0x5, 0x3, 0x7, 0x5}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x3000, 0x42024, 0xb, 0xd01, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000080ff]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 11m45.416938146s ago: executing program 40 (id=1013): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x30, 0x16, 0x4}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x0, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0xc, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x4a, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x6, 0x1, 0x18, 0x5, 0x3, 0x7, 0x5}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x3000, 0x42024, 0xb, 0xd01, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000080ff]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6m40.6221244s ago: executing program 2 (id=2759): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028", 0x42}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) r4 = socket$kcm(0x2, 0x4, 0x2) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35fbd262a9f5542ff355d08d965ce4a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x5a}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) 6m40.445666237s ago: executing program 2 (id=2762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x60, r1, 0x1, 0x71bd28, 0x25dfdc02, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x7, 0x300}}}]}}]}, 0x60}}, 0x110) (fail_nth: 7) 6m40.16137069s ago: executing program 2 (id=2764): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6004, 0x1) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x800, 0x0, 0x1, 0x8201, 0x0, 0x2}, 0x30, 0x3) landlock_restrict_self(r0, 0x8) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000680)=@conn_svc_rsp={0x0, 0x0, 0xa, "2009fdd4", {0x3, 0x2, 0x0, 0x0, 0xf001, 0x6, 0x6}}) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x9) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x210, 0x4, 0x3}, 0x30, 0x3) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x2) acct(&(0x7f0000000040)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0xb5) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000040)={@empty, @broadcast, 0x0, "b1019aeb6da97080006089b8e74515b33736612528b42f1d945e52041b2b830e", 0x8, 0x800, 0x5, 0x7}, 0x3c) socket$nl_xfrm(0x10, 0x3, 0x6) 6m38.178051784s ago: executing program 2 (id=2780): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x2108cff, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 6m36.953676468s ago: executing program 2 (id=2783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd']) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[], 0xd) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x11}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}}, 0x20040040) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="1800000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r6 = creat(&(0x7f0000000140)='./proc_mnt/irq/1/smp_affinity\x00', 0x1b2) close(r6) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) pidfd_send_signal(r7, 0x5, &(0x7f0000000180)={0x5, 0x77, 0xfffffff8}, 0x0) writev(r7, &(0x7f0000000c80)=[{&(0x7f0000000600)="2ecb68f0d527f4ebb62c71af95042d6c47b3da8d4e2992d9cf7583e13e73cd2ae33be12ff4e0784f6f53bf422273ab2e052a4110217b63f85c31bc5bd4822147a81e2f6baa21b415e273503fcc61fbe5734fa7d81ffba0e045b57b1639d72d49ccff3137614b0a9634193c11c33781862d155f27fdf9bdbe4b9c4d9ccc09cb2e734320faae7328a2f6efbcbef7155325306743cf29164088f96db0a2e5011caf77e14975e3b6b916b20f9f83b4ec54467357c874d6b4b33891889e61ea4f1c9ca451783ed9d6762d15d4cca2ce4706d76ddb1c697f3fbfd54fa03b5bb80ab79e07ebda920148e6e715e4cc25", 0xec}, {&(0x7f0000000700)="cccd715a44ad0c97edb2d41f9e3e123679f209e339df78a80c23f7836c57", 0x1e}, {&(0x7f0000000740)="43a06d29c523a21043f97799ceb36397caf380fa180508653d286463bbbf29e2742bc5866de314bc295992a12df1dbf429bc62784ede691a8e9e75f77ad02f288c948f8e56a574b7511eb5409932ad93d4af997d6abb2049dd453b08ba150bec3b230e1ec9ab5802537a93df260b1615da4b44cc8ce9d7431663e049a51ce42000a3b099a1fd7e4382fac3cda7a8c02020", 0x91}, {&(0x7f0000000800)="7828fcf7c59292dd059d56a998fe14409a7efb0fa9f2990cb448c7ce5059cdb11de385c6b71acec4aaa011b2ceceec98a4818cda6b64ea124915ffe61ff5829b01701354ce5f96fcc84c24951935855367372f8c00863555eaf58dd7fe3d718ea58ada527e24a2d2a1326da4ba3eeed4319f881bd6cf79525d1f49fc982afa0a16d328efa370ad9b42769abe49e45bdbf7d32743e9ac0e799d7fd1570c0ecdd89339343894e7058b258dc1d7fbc7b2edb278c2a219a2bab1d4b1bd5ef4f48464b54a912be4c2cd4b44c69ef446af3de8a7fd94f0be61267a7c8740ef281c5203fe42fac85612bdb653d1391c401b", 0xee}, {&(0x7f0000000900)="f0e23375d3bfb5ccc7638c3f300e5bba551361b6d3398f2fa28d3470c7ca2cea180941ac41a9cbb432e722a9ca36758ca4153029e6045d4436cef4e4af81caaadaa1d16305b69b", 0x47}, {&(0x7f0000000980)="85f5eec89b0bcc2483c92722e1289c3b2f4d62c5acb142f90dc27e017cfde4fb9c7663ab6809204de19ca009ea413e3b012fc7b2474359c36bdb1c868c22bdcf11f5327cc8aba7cd9defa272489963f6b6d8b4937a4ad5a9788fdfcb66a6fa15a1a924775d24ddbb3c27b6d27ee0bb4b9ec967527ae52b26e60db486439d5c06b3e1de0191655b84e59a9c0e123ec84301fe611d4a88585bd5255b5c9cffa85d68e7c6aa56edaf62d11823c4e23aa569b41aeda2bfe613fe2321e8b4eaa72ec663d9a294aa43b10a70d2eaca3a85", 0xce}, {&(0x7f0000000a80)="20cebf64012f0d64806c14d2c1dc3562e40a4535e70b61e787e84963e1c01f2246b7e8ff21e5a768aabdc62a685a4ba840287b0eb4811eb835434f5cb8b196cf28a6886a998a10a77d8df5ca8ae8bc5b225a513dd5ad39bea0545c071a548e949b8aa445e70530f7d336acbe32090d8b5bfd78d02bc9207b86a9e1302d33709de0e2cb214a37823801dab5bb5e984a16ab5a4f95ea5e2a77d726db94b2ca8f2ed62e78de94536abcc35d0bbd746e934adc3af6f805bf7da40baf8627760b00c1f1cfb33231ed765bb514ee6b3187c5db2bf96c341db047ff46d2f79e129967a74d43a2a12914f24c7e279c62610bfc76", 0xf0}, {&(0x7f0000000b80)="36f81a4b930b2674d9776906c12b8b904622055424138c9c9eeb425ae3e5a53275af925af1274db8599860d07c1121f2ec327cfb2049ae62c5eb21af483f98bbe7421badfd7b687319fca2778cc49b8ec3fe96b5938bf4f81b231b3ed600370243c0acecc77ab61c256c171d2d23ed863b55dfefe5ff491f103a0177375ed10030eafc355addd893f1f400fef13bdcc823aacc9b83813c45aea6fcb9668ca97dd6ee6eba4c6024bcdd5799c79778710700d7e46cecf6d9a2d978ad660692829782ffe235075c", 0xc6}], 0x8) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x5) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x84e, 0x0, 0x7}]}) 6m36.842246379s ago: executing program 2 (id=2784): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000", 0x4d}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) r4 = socket$kcm(0x2, 0x4, 0x2) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35fbd262a9f5542ff355d08d965ce4a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x5a}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) 6m21.423506128s ago: executing program 41 (id=2784): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000", 0x4d}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r3) r4 = socket$kcm(0x2, 0x4, 0x2) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35fbd262a9f5542ff355d08d965ce4a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x5a}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0x2020) 1m29.133799974s ago: executing program 0 (id=4303): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000140)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x80) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000002000)="53464f5a05abbf5900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099e98558e1b79cd70010b52b9b98000000000000", 0xfaf, 0x4) close(r2) 1m27.457907413s ago: executing program 0 (id=4310): fanotify_init(0x20, 0x800) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 1m27.321479439s ago: executing program 0 (id=4311): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x14700, 0x20, 0xfffffe, 0x10019a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10e5, 0x4, 0x0, 0x1b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa84, 0x80, 0x2, 0x126, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca14, 0x40, 0x2, 0x11f, 0x0, r1}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) socket$netlink(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m27.199959913s ago: executing program 0 (id=4312): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) 1m25.88120733s ago: executing program 0 (id=4324): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) futex(&(0x7f0000001cc0), 0x7, 0x0, 0x0, 0x0, 0x8ffffff8) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) syz_ublk_setup_io_uring(0x642a, &(0x7f0000000000)={0x0, 0x1edb, 0x2, 0x2, 0x6c, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="380000000100", 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file1\x00'}) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') 1m25.641130323s ago: executing program 0 (id=4325): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 1m9.960662519s ago: executing program 42 (id=4325): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 21.04447919s ago: executing program 9 (id=4612): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="71030602060609027f7bd1f64ddd6c3e98019ed0a48c1cf9e5cc5acc7f5ecdb78788832e1cf1c688c47b820e2df1677fc092b36a29546e9f0dd742891dbeba8c119afeeec6079eedbe2f8f54f371d4c7f69c5ed16f4092145fcdc9fd7c8774d495bc550bb3e57f73ffb04149f048c61318"], 0x12) 20.963680397s ago: executing program 9 (id=4613): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x103) symlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000040)={0x400, "0439b78cf772ef49261c40ecdf7647d9b395b939065d263d59e61f40f700", 0x5, 0x8, 0x0, 0x7, 0x8, 0x7, 0x10, 0x100}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc, 0x80, 0x80}, 0x1c) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x1c, r5, 0x64fce33ba3dcdc5d, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x14) 20.668096093s ago: executing program 9 (id=4616): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x4854}, 0x24000052) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20.450002313s ago: executing program 9 (id=4618): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, 0x0) write(r0, &(0x7f0000000800), 0x0) 20.36192716s ago: executing program 9 (id=4620): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, &(0x7f00000005c0)=0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x4d, 0x0, &(0x7f0000000580)) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000003c0)=@get={0x1, &(0x7f0000000280)=""/246, 0x5}) 20.125985474s ago: executing program 9 (id=4621): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="71030602060609027f7bd1f64ddd6c3e98019ed0a48c1cf9e5cc5acc7f5ecdb78788832e1cf1c688c47b820e2df1677fc092b36a29546e9f0dd742891dbeba8c119afeeec6079eedbe2f8f54f371d4c7f69c5ed16f4092145fcdc9fd7c8774d495bc550bb3e57f73ffb04149f048c61318"], 0x12) 5.600369758s ago: executing program 3 (id=4693): io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110037f1ce808000000a3f30a010203010902240001020010110904630702584200080905fe0f100008000909050203"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f31181324d32eaa7"]}, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x60202) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) fstat(r4, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000340)={0x67ea595a49168acb, 0x7d4c, 0x3, 0x1, 0x80}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r6, 0x5, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdb}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="a85ab953863f1bd0b3b3d9f606b47d7c7727f42fc8002de64405040e585ffb802aa3e21ea7baba56ceebf29e1f9b0c777ddcf1b9aa512bc037c0d8edb6d7e13117dbb66992906e1c9b553b9495", @ANYRES16=r10, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)) 5.038810748s ago: executing program 43 (id=4621): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="71030602060609027f7bd1f64ddd6c3e98019ed0a48c1cf9e5cc5acc7f5ecdb78788832e1cf1c688c47b820e2df1677fc092b36a29546e9f0dd742891dbeba8c119afeeec6079eedbe2f8f54f371d4c7f69c5ed16f4092145fcdc9fd7c8774d495bc550bb3e57f73ffb04149f048c61318"], 0x12) 4.340997271s ago: executing program 4 (id=4700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$MSR(&(0x7f0000000080), 0x200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x41, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0xffe7, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.410259622s ago: executing program 3 (id=4703): fanotify_init(0x20, 0x800) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) 3.283868279s ago: executing program 3 (id=4704): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x20, 0x1405, 0x200, 0x70bd26, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x4}}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x140, 0x0) 3.122572322s ago: executing program 3 (id=4705): r0 = syz_open_pts(0xffffffffffffffff, 0x402000) ioctl$TIOCSBRK(r0, 0x5427) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x3c, 0x2, 0x6, 0xa05, 0x0, 0x0, {0x3, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000891) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc51b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0x28, {0x28, 0x9, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) 2.041750395s ago: executing program 1 (id=4706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x32000}) r2 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) 2.040887928s ago: executing program 4 (id=4707): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='*on_existent_event:mod:', 0x17) syz_fuse_handle_req(r2, &(0x7f0000009b40)="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", 0x2000, &(0x7f00000004c0)={&(0x7f0000000000)={0x50, 0x0, 0x9da, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x0, 0x23) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r6, &(0x7f0000000080), 0x3ffffd0, 0x1826b, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r7, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.39028497s ago: executing program 1 (id=4708): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3000) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000500)={0x0, 0xfff}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) 1.302938251s ago: executing program 1 (id=4709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000180), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x11, '\x00', @data=0x5, 0xd}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80, 0x24, &(0x7f00000004c0)={0x0, 0x3, 0x1, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0}) 1.20788285s ago: executing program 1 (id=4710): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x37bec0, 0x40) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000500)={0x0, 0xfff}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) 1.115207579s ago: executing program 1 (id=4711): fanotify_init(0x20, 0x800) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x0, &(0x7f0000000540)) 1.113825279s ago: executing program 4 (id=4712): keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3, 0xc}, &(0x7f0000000080)='\b\x87\xd8*\xd9N\x81\xcf\xf7=\xefR\x1d\x00\x00\x00\xc4\xfe>\xc5\x19\x17\xc02;\x00'/43, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x3, 0xb, 0x9}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace/set_event\x00', &(0x7f00000000c0)='aio\x00', 0x2800a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='sub:evt:mod:', 0xc) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x85, &(0x7f0000000000)=@req3={0x6, 0xff, 0x80, 0x57, 0x1, 0x3, 0x6}, 0x1c) read(r1, &(0x7f0000000040)=""/62, 0x3e) 997.758833ms ago: executing program 4 (id=4713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xd0}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="dd71", 0x2}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x89, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000440)={0x0, 0x4, 0x7a04}, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES32=r2, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x20048070}, 0x28000) 964.331411ms ago: executing program 4 (id=4714): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) r0 = inotify_init() r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x0, 0x2}, 0x18, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) landlock_restrict_self(r1, 0xe) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0x16, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @empty, 0x7}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)="17fe8d00", 0x4) 946.647776ms ago: executing program 1 (id=4715): syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac620940601001378010203010902"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x40, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) fanotify_init(0x20, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 200.94238ms ago: executing program 3 (id=4716): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='erspan0\x00', 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "44ad691529336042", "23411fd7628d96b188efc8bf7757f697", "3f48fa47", "3cef01f4b667a46e"}, 0x28) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea11c21d", 0x24}], 0x1) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020101"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendto$inet(r0, &(0x7f0000000400)="cde0095f3d90dc2f", 0x32, 0x800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10) 168.689879ms ago: executing program 3 (id=4717): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) rmdir(&(0x7f0000000040)='./my_configfs/dlm/cluster1\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x76, 0x1, 0x0, 0x0, 0x8, 0x10, 0xc, 0xff, 0x0, '\x00', 0x0, 0x7f}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000000)={0x100001, 0x0, {[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x80, 0xd, 0x9]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0x18, 0x40, '\x00', 0xb}, {0xff, 0x83, 0x9, '\x00', 0x64}, {0x0, 0x5a, 0xd4, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x4, 0x82, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x1, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x11, 0xee, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x10, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0xd, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc6}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7b}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x3, 0x4}]}}) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f00000007c0)="006394bf10165bedc3a0030abbf75d281f770000000000a007c8dde5559bdcf98bad3f21f668d278252e4eafad30e1ae2104958b61bf0bac89d26dff86717c2927ff603b81d0edb7f65228cb53695078e0f335ceb4d337e494f98613b7f8815819ac7720e2f54159b755ce9169045edfd4fc6cf46690aa4b4827c7f6d3ba40089f81f1efbef4b515b7393465a5685c99d49d6d9761a06bf8e3297008df36e9f8276e1bd11dec8397b3f09085d2cf609ad53431b9a46dc46cd06bfad763f14271fb5def113efc99ef20af70daedba481a2d9229ee64dd", 0xd6, 0xd23) pwrite64(r0, &(0x7f0000000300)="00000014ef", 0x5, 0xd2b) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r4 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffd, 0x6) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0xa, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x31, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x426c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0xffffff7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x7f, 0x0, 0x0, 0x400, 0x0, 0x7], [0x0, 0x0, 0x4, 0x0, 0x1000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x877, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x805, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x4d]}, 0x45c) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 0s ago: executing program 4 (id=4718): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) (fail_nth: 9) kernel console output (not intermixed with test programs): MTU to 1532 would solve the problem. [ 904.003166][T21701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.113073][T21762] lo speed is unknown, defaulting to 1000 [ 904.553336][T21701] hsr_slave_0: entered promiscuous mode [ 904.557936][T21701] hsr_slave_1: entered promiscuous mode [ 904.562322][T21701] debugfs: 'hsr0' already exists in 'hsr' [ 904.562342][T21701] Cannot create hsr debugfs directory [ 904.610232][ T52] Bluetooth: hci2: command tx timeout [ 904.975123][ T5285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 905.190508][T21806] FAULT_INJECTION: forcing a failure. [ 905.190508][T21806] name failslab, interval 1, probability 0, space 0, times 0 [ 905.190552][T21806] CPU: 0 UID: 0 PID: 21806 Comm: syz.9.4405 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.190577][T21806] Tainted: [L]=SOFTLOCKUP [ 905.190584][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.190593][T21806] Call Trace: [ 905.190601][T21806] [ 905.190609][T21806] dump_stack_lvl+0xe8/0x150 [ 905.190640][T21806] should_fail_ex+0x3eb/0x540 [ 905.190675][T21806] should_failslab+0xa8/0x100 [ 905.190696][T21806] ? vm_area_alloc+0x24/0x140 [ 905.190722][T21806] kmem_cache_alloc_noprof+0xa1/0x600 [ 905.190750][T21806] ? vm_area_alloc+0x24/0x140 [ 905.190779][T21806] vm_area_alloc+0x24/0x140 [ 905.190805][T21806] mmap_region+0x12cb/0x2240 [ 905.190840][T21806] ? __pfx_mmap_region+0x10/0x10 [ 905.190863][T21806] ? __lock_acquire+0x6df/0x2e50 [ 905.190915][T21806] ? lock_acquire+0x115/0x350 [ 905.191019][T21806] ? __lock_acquire+0x6df/0x2e50 [ 905.191047][T21806] ? cap_mmap_addr+0xaf/0x100 [ 905.191074][T21806] ? bpf_lsm_mmap_addr+0x9/0x50 [ 905.191095][T21806] ? security_mmap_addr+0x71/0x240 [ 905.191132][T21806] do_mmap+0xe0a/0x1300 [ 905.191161][T21806] ? __pfx_do_mmap+0x10/0x10 [ 905.191192][T21806] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 905.191219][T21806] ? down_write_killable+0x17e/0x240 [ 905.191247][T21806] ? __pfx_down_write_killable+0x10/0x10 [ 905.191271][T21806] ? __fget_files+0x2a/0x420 [ 905.191291][T21806] ? apparmor_mmap_file+0xbe/0xe0 [ 905.191320][T21806] vm_mmap_pgoff+0x272/0x4e0 [ 905.191356][T21806] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 905.191382][T21806] ? ksys_write+0x242/0x270 [ 905.191409][T21806] ? __pfx_ksys_write+0x10/0x10 [ 905.191435][T21806] ? ksys_mmap_pgoff+0xf3/0x760 [ 905.191457][T21806] ? __x64_sys_mmap+0x7f/0x140 [ 905.191488][T21806] do_syscall_64+0x166/0x520 [ 905.191508][T21806] ? trace_irq_disable+0x3b/0x140 [ 905.191534][T21806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.191555][T21806] ? clear_bhb_loop+0x70/0xc0 [ 905.191578][T21806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.191596][T21806] RIP: 0033:0x7fbf3979e159 [ 905.191614][T21806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.191629][T21806] RSP: 002b:00007fbf3a657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 905.191650][T21806] RAX: ffffffffffffffda RBX: 00007fbf39a25fa0 RCX: 00007fbf3979e159 [ 905.191665][T21806] RDX: 000000000300000e RSI: 0000000000b36000 RDI: 0000200000000000 [ 905.191678][T21806] RBP: 00007fbf3a657090 R08: ffffffffffffffff R09: 0000000000003000 [ 905.191691][T21806] R10: 20c44fb6edc09a38 R11: 0000000000000246 R12: 0000000000000001 [ 905.191704][T21806] R13: 00007fbf39a26038 R14: 00007fbf39a25fa0 R15: 00007fff1ac94d58 [ 905.191734][T21806] [ 905.614900][T21812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4408'. [ 905.710114][T16502] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 905.862800][T16502] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 905.865092][T16502] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.865115][T16502] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.867320][T16502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.867342][T16502] usb 10-1: Product: syz [ 905.867356][T16502] usb 10-1: Manufacturer: syz [ 905.867371][T16502] usb 10-1: SerialNumber: syz [ 905.882556][T16502] usb 10-1: 0:2 : does not exist [ 905.959821][T16842] hsr_slave_0: left promiscuous mode [ 906.012242][T16842] hsr_slave_1: left promiscuous mode [ 906.013553][T16842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.033406][T16842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 906.033454][T16842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.088300][T16502] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 906.105190][T16842] veth1_macvtap: left promiscuous mode [ 906.105250][T16842] veth0_macvtap: left promiscuous mode [ 906.107552][T16842] veth1_vlan: left promiscuous mode [ 906.107618][T16842] veth0_vlan: left promiscuous mode [ 906.184863][T16502] usb 10-1: USB disconnect, device number 4 [ 906.311553][T18234] udevd[18234]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.700071][ T52] Bluetooth: hci2: command tx timeout [ 906.705978][T16842] team0 (unregistering): Port device team_slave_1 removed [ 906.760051][T16842] team0 (unregistering): Port device team_slave_0 removed [ 906.983895][ T5285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 907.693933][T21862] netlink: 620 bytes leftover after parsing attributes in process `syz.1.4416'. [ 907.940998][ T5285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 907.942522][T16842] IPVS: stop unused estimator thread 0... [ 908.271847][T21880] usb usb8: usbfs: process 21880 (syz.1.4422) did not claim interface 0 before use [ 908.399932][T16502] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 908.539804][T16502] usb 5-1: Using ep0 maxpacket: 16 [ 908.542139][T16502] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 908.543339][T16502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.543367][T16502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.543388][T16502] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 908.543427][T16502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.548342][T16502] usb 5-1: config 0 descriptor?? [ 908.592652][ T44] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 908.704524][ T5285] 8021q: adding VLAN 0 to HW filter on device eth4 [ 908.771961][ T52] Bluetooth: hci2: command tx timeout [ 908.773560][ T44] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 908.776495][ T44] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.776518][ T44] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.783213][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.783244][ T44] usb 10-1: Product: syz [ 908.783258][ T44] usb 10-1: Manufacturer: syz [ 908.783273][ T44] usb 10-1: SerialNumber: syz [ 908.808474][ T44] usb 10-1: 0:2 : does not exist [ 908.971215][T21877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.975154][T21877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.999868][T21701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 909.013351][ T44] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 909.059312][T21701] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.070209][T21701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 909.088279][T21701] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.100627][T21701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 909.134983][ T44] usb 10-1: USB disconnect, device number 5 [ 909.153132][T21701] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.164036][T21701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 909.219365][T21701] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 909.245689][T18234] udevd[18234]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 909.400441][T21701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.426552][T21701] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.443451][T16830] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.443581][T16830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.475863][T16830] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.475990][T16830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.831165][T21926] netlink: 620 bytes leftover after parsing attributes in process `syz.9.4427'. [ 910.806455][T21701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.888935][T21701] veth0_vlan: entered promiscuous mode [ 910.902554][T21701] veth1_vlan: entered promiscuous mode [ 910.935894][T21701] veth0_macvtap: entered promiscuous mode [ 910.960289][T21701] veth1_macvtap: entered promiscuous mode [ 910.991025][T21701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.022238][T21701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.106215][ T9545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.106775][ T9545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.130169][ T4217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.136011][ T4217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.320621][T16502] usbhid 5-1:0.0: can't add hid device: -71 [ 911.320766][T16502] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 911.331626][T16502] usb 5-1: USB disconnect, device number 21 [ 911.405164][T16818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.415960][T16818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.552512][ T9545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.552560][ T9545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.627731][T21985] netlink: 620 bytes leftover after parsing attributes in process `syz.1.4436'. [ 911.829414][T16502] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 911.860020][ T25] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 911.982994][T16502] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 911.984219][T16502] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 911.984242][T16502] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 911.986514][T16502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.986537][T16502] usb 5-1: Product: syz [ 911.986552][T16502] usb 5-1: Manufacturer: syz [ 911.986566][T16502] usb 5-1: SerialNumber: syz [ 912.011797][T16502] usb 5-1: 0:2 : does not exist [ 912.019625][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 912.020794][ T25] usb 10-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 912.022744][ T25] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.022788][ T25] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 912.022813][ T25] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 912.022894][ T25] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 912.022934][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.038601][T21979] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 912.047551][ T25] mdc800 10-1:1.0: probe fails -> wrong Interface [ 912.226706][T16502] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 912.397553][T16502] usb 5-1: USB disconnect, device number 22 [ 912.435437][ T44] usb 10-1: USB disconnect, device number 6 [ 912.593339][T18234] udevd[18234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 913.066029][T22029] FAULT_INJECTION: forcing a failure. [ 913.066029][T22029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.066062][T22029] CPU: 1 UID: 0 PID: 22029 Comm: syz.1.4443 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.066087][T22029] Tainted: [L]=SOFTLOCKUP [ 913.066094][T22029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 913.066105][T22029] Call Trace: [ 913.066112][T22029] [ 913.066120][T22029] dump_stack_lvl+0xe8/0x150 [ 913.066148][T22029] should_fail_ex+0x3eb/0x540 [ 913.066182][T22029] _copy_to_user+0x31/0xb0 [ 913.066204][T22029] simple_read_from_buffer+0xe1/0x170 [ 913.066232][T22029] proc_fail_nth_read+0x1bb/0x230 [ 913.066257][T22029] ? common_file_perm+0x20e/0x2b0 [ 913.066288][T22029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.066317][T22029] ? rw_verify_area+0x24a/0x4c0 [ 913.066340][T22029] ? tun_chr_write_iter+0x18a/0x200 [ 913.066362][T22029] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.066387][T22029] vfs_read+0x213/0xa80 [ 913.066414][T22029] ? __pfx___mutex_lock+0x10/0x10 [ 913.066437][T22029] ? __pfx_vfs_read+0x10/0x10 [ 913.066463][T22029] ? __fget_files+0x2a/0x420 [ 913.066489][T22029] ? __fget_files+0x3a2/0x420 [ 913.066510][T22029] ? __fget_files+0x2a/0x420 [ 913.066540][T22029] ksys_read+0x150/0x270 [ 913.066566][T22029] ? __pfx_ksys_read+0x10/0x10 [ 913.066599][T22029] do_syscall_64+0x166/0x520 [ 913.066619][T22029] ? trace_irq_disable+0x3b/0x140 [ 913.066646][T22029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.066665][T22029] ? clear_bhb_loop+0x70/0xc0 [ 913.066688][T22029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.066707][T22029] RIP: 0033:0x7f57e4f5e98e [ 913.066724][T22029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 913.066740][T22029] RSP: 002b:00007f57e5f40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 913.066761][T22029] RAX: ffffffffffffffda RBX: 00007f57e5f416c0 RCX: 00007f57e4f5e98e [ 913.066775][T22029] RDX: 000000000000000f RSI: 00007f57e5f410a0 RDI: 0000000000000005 [ 913.066788][T22029] RBP: 00007f57e5f41090 R08: 0000000000000000 R09: 0000000000000000 [ 913.066799][T22029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.066811][T22029] R13: 00007f57e5226038 R14: 00007f57e5225fa0 R15: 00007fff63e44418 [ 913.066841][T22029] [ 913.603990][T22053] overlayfs: missing 'lowerdir' [ 914.059522][T16502] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 914.210443][T16502] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.211598][T16502] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.211620][T16502] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.213849][T16502] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.213870][T16502] usb 5-1: Product: syz [ 914.213885][T16502] usb 5-1: Manufacturer: syz [ 914.213899][T16502] usb 5-1: SerialNumber: syz [ 914.230019][T16502] usb 5-1: 0:2 : does not exist [ 914.325543][T22088] FAULT_INJECTION: forcing a failure. [ 914.325543][T22088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.325582][T22088] CPU: 1 UID: 0 PID: 22088 Comm: syz.9.4455 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.325609][T22088] Tainted: [L]=SOFTLOCKUP [ 914.325616][T22088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.325626][T22088] Call Trace: [ 914.325631][T22088] [ 914.325636][T22088] dump_stack_lvl+0xe8/0x150 [ 914.325658][T22088] should_fail_ex+0x3eb/0x540 [ 914.325678][T22088] _copy_to_user+0x31/0xb0 [ 914.325691][T22088] simple_read_from_buffer+0xe1/0x170 [ 914.325708][T22088] proc_fail_nth_read+0x1bb/0x230 [ 914.325722][T22088] ? common_file_perm+0x20e/0x2b0 [ 914.325740][T22088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 914.325756][T22088] ? rw_verify_area+0x24a/0x4c0 [ 914.325771][T22088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 914.325784][T22088] vfs_read+0x213/0xa80 [ 914.325805][T22088] ? __pfx___mutex_lock+0x10/0x10 [ 914.325819][T22088] ? __pfx_vfs_read+0x10/0x10 [ 914.325832][T22088] ? __fget_files+0x2a/0x420 [ 914.325847][T22088] ? __fget_files+0x3a2/0x420 [ 914.325859][T22088] ? __fget_files+0x2a/0x420 [ 914.325875][T22088] ksys_read+0x150/0x270 [ 914.325890][T22088] ? __pfx_ksys_read+0x10/0x10 [ 914.325908][T22088] do_syscall_64+0x166/0x520 [ 914.325920][T22088] ? trace_irq_disable+0x3b/0x140 [ 914.325935][T22088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.325946][T22088] ? clear_bhb_loop+0x70/0xc0 [ 914.325959][T22088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.325970][T22088] RIP: 0033:0x7fbf3975e98e [ 914.325981][T22088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 914.325990][T22088] RSP: 002b:00007fbf3a656fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.326003][T22088] RAX: ffffffffffffffda RBX: 00007fbf3a6576c0 RCX: 00007fbf3975e98e [ 914.326011][T22088] RDX: 000000000000000f RSI: 00007fbf3a6570a0 RDI: 0000000000000003 [ 914.326018][T22088] RBP: 00007fbf3a657090 R08: 0000000000000000 R09: 0000000000000000 [ 914.326024][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.326030][T22088] R13: 00007fbf39a26038 R14: 00007fbf39a25fa0 R15: 00007fff1ac94d58 [ 914.326047][T22088] [ 914.535860][T16502] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 914.659441][T16502] usb 5-1: USB disconnect, device number 23 [ 914.726942][T18234] udevd[18234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.857784][T22100] overlayfs: missing 'lowerdir' [ 915.100428][T22116] FAULT_INJECTION: forcing a failure. [ 915.100428][T22116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 915.100493][T22116] CPU: 1 UID: 0 PID: 22116 Comm: syz.3.4460 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.100519][T22116] Tainted: [L]=SOFTLOCKUP [ 915.100526][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 915.100537][T22116] Call Trace: [ 915.100544][T22116] [ 915.100552][T22116] dump_stack_lvl+0xe8/0x150 [ 915.100582][T22116] should_fail_ex+0x3eb/0x540 [ 915.100614][T22116] strncpy_from_user+0x36/0x2c0 [ 915.100645][T22116] do_getname+0x77/0x250 [ 915.100668][T22116] user_path_at+0x2a/0x160 [ 915.100694][T22116] __se_sys_mount+0x2dc/0x420 [ 915.100720][T22116] ? __pfx___se_sys_mount+0x10/0x10 [ 915.100748][T22116] ? __x64_sys_mount+0x20/0xc0 [ 915.100771][T22116] do_syscall_64+0x166/0x520 [ 915.100792][T22116] ? trace_irq_disable+0x3b/0x140 [ 915.100821][T22116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.100840][T22116] ? clear_bhb_loop+0x70/0xc0 [ 915.100863][T22116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.100881][T22116] RIP: 0033:0x7fa4d459e159 [ 915.100900][T22116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.100916][T22116] RSP: 002b:00007fa4d5503028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 915.100936][T22116] RAX: ffffffffffffffda RBX: 00007fa4d4826090 RCX: 00007fa4d459e159 [ 915.100950][T22116] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000200000000440 [ 915.100963][T22116] RBP: 00007fa4d5503090 R08: 0000000000000000 R09: 0000000000000000 [ 915.100975][T22116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 915.100987][T22116] R13: 00007fa4d4826128 R14: 00007fa4d4826090 R15: 00007ffe1697f028 [ 915.101016][T22116] [ 915.689350][ T5795] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 915.839439][ T5795] usb 4-1: Using ep0 maxpacket: 8 [ 915.840083][ T5795] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 915.841247][ T5795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.841290][ T5795] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 915.841314][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.841338][ T5795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 915.843593][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 915.843617][ T5795] usb 4-1: Product: syz [ 915.843631][ T5795] usb 4-1: Manufacturer: syz [ 915.843645][ T5795] usb 4-1: SerialNumber: syz [ 915.848890][ T5795] usb 4-1: config 0 descriptor?? [ 915.948277][ T5795] rc_core: IR keymap rc-imon-rsc not found [ 915.948320][ T5795] Registered IR keymap rc-empty [ 915.965518][ T5795] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 915.972547][ T5795] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input111 [ 915.984888][ T5795] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 916.081226][ T191] usb 2-1: no suitable firmware found! [ 916.082077][ T191] usb 2-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 916.088611][T16502] usb 4-1: USB disconnect, device number 43 [ 916.109452][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 916.322721][T22168] overlayfs: missing 'lowerdir' [ 916.429037][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 916.461159][ T8213] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 916.579885][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 916.592009][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.592059][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.599372][ T8213] usb 5-1: device descriptor read/64, error -71 [ 916.605379][ T9] usb 2-1: config 0 descriptor?? [ 916.809160][ T25] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 916.839299][ T8213] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 916.959722][ T25] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 916.960880][ T25] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.960902][ T25] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 916.963110][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.963133][ T25] usb 10-1: Product: syz [ 916.963148][ T25] usb 10-1: Manufacturer: syz [ 916.963162][ T25] usb 10-1: SerialNumber: syz [ 916.969135][ T8213] usb 5-1: device descriptor read/64, error -71 [ 916.975629][ T25] usb 10-1: 0:2 : does not exist [ 917.066938][ T9] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 917.079210][ T8213] usb usb5-port1: attempt power cycle [ 917.106068][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0051/input/input112 [ 917.186956][ T25] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 917.256758][ T25] usb 10-1: USB disconnect, device number 7 [ 917.300633][T18234] udevd[18234]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 917.325087][ T9] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 917.379134][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 917.419013][ T8213] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 917.450503][ T8213] usb 5-1: device descriptor read/8, error -71 [ 917.538949][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 917.544573][ T10] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 917.548084][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.548127][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 917.548208][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 917.548233][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 917.551862][ T10] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 917.551943][ T10] usb 4-1: Product: syz [ 917.551958][ T10] usb 4-1: Manufacturer: syz [ 917.551973][ T10] usb 4-1: SerialNumber: syz [ 917.561940][ T10] usb 4-1: config 0 descriptor?? [ 917.648220][ T25] usb 2-1: USB disconnect, device number 85 [ 917.691229][ T8213] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 917.709827][ T10] rc_core: IR keymap rc-imon-rsc not found [ 917.709861][ T10] Registered IR keymap rc-empty [ 917.712033][ T10] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 917.716040][ T8213] usb 5-1: device descriptor read/8, error -71 [ 917.721251][ T10] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input113 [ 917.797409][T22194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.797846][T22194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.820940][ T8213] usb usb5-port1: unable to enumerate USB device [ 917.833604][T22194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.834023][T22194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.889389][ T10] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 917.998009][ T10] usb 4-1: USB disconnect, device number 44 [ 918.294207][T22231] overlayfs: missing 'lowerdir' [ 918.419415][T22234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.429850][T22234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.631817][T22228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.632259][T22228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.639023][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 918.909218][T16502] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 919.070624][T16502] usb 10-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 919.084104][T16502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.084144][T16502] usb 10-1: Product: syz [ 919.084175][T16502] usb 10-1: Manufacturer: syz [ 919.084193][T16502] usb 10-1: SerialNumber: syz [ 919.112635][T16502] usb 10-1: config 0 descriptor?? [ 919.122142][T16502] hub 10-1:0.0: bad descriptor, ignoring hub [ 919.129569][T16502] hub 10-1:0.0: probe with driver hub failed with error -5 [ 919.139488][T16502] f81232 10-1:0.0: f81534a converter detected [ 919.329508][T22246] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4482'. [ 919.505486][ T4217] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:aac02e13-73bd-4a9d-9148-a7f3804c74ff. [ 919.517723][T22262] nvme nvme1: creating 2 I/O queues. [ 919.553656][T22262] nvme nvme1: new ctrl: "testsubsys" [ 919.813227][T16502] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 919.813277][T16502] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 919.861871][T16502] usb 10-1: USB disconnect, device number 8 [ 919.869813][T16502] f81232 10-1:0.0: device disconnected [ 920.059125][ T8213] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 920.209460][ T8213] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 920.210926][ T8213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.210948][ T8213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.213994][ T8213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.214017][ T8213] usb 5-1: Product: syz [ 920.214031][ T8213] usb 5-1: Manufacturer: syz [ 920.214101][ T8213] usb 5-1: SerialNumber: syz [ 920.272696][ T8213] usb 5-1: 0:2 : does not exist [ 920.483691][ T8213] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 920.618029][T22295] overlayfs: missing 'lowerdir' [ 920.643478][T22290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4487'. [ 920.659969][ T8213] usb 5-1: USB disconnect, device number 28 [ 920.795615][T18234] udevd[18234]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.269214][T16502] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 921.411481][T22321] FAULT_INJECTION: forcing a failure. [ 921.411481][T22321] name failslab, interval 1, probability 0, space 0, times 0 [ 921.429739][T22321] CPU: 1 UID: 0 PID: 22321 Comm: syz.1.4493 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.429776][T22321] Tainted: [L]=SOFTLOCKUP [ 921.429785][T22321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.429798][T22321] Call Trace: [ 921.429808][T22321] [ 921.429817][T22321] dump_stack_lvl+0xe8/0x150 [ 921.429852][T22321] should_fail_ex+0x3eb/0x540 [ 921.429889][T22321] should_failslab+0xa8/0x100 [ 921.429912][T22321] ? alloc_empty_file+0x5b/0x1d0 [ 921.429937][T22321] kmem_cache_alloc_noprof+0xa1/0x600 [ 921.429967][T22321] ? stack_depot_save_flags+0x33/0x7f0 [ 921.430000][T22321] ? alloc_empty_file+0x5b/0x1d0 [ 921.430023][T22321] ? kmem_cache_alloc_noprof+0x156/0x600 [ 921.430056][T22321] alloc_empty_file+0x5b/0x1d0 [ 921.430079][T22321] path_openat+0xa2/0x1d60 [ 921.430119][T22321] ? __lock_acquire+0x6df/0x2e50 [ 921.430163][T22321] do_file_open+0x23e/0x4a0 [ 921.430200][T22321] ? __pfx_do_file_open+0x10/0x10 [ 921.430252][T22321] ? _raw_spin_unlock+0x28/0x50 [ 921.430286][T22321] ? alloc_fd+0x651/0x6c0 [ 921.430330][T22321] do_sys_openat2+0x115/0x200 [ 921.430358][T22321] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.430383][T22321] ? __x64_sys_clock_gettime+0x238/0x290 [ 921.430414][T22321] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 921.430446][T22321] __x64_sys_openat+0x138/0x170 [ 921.430475][T22321] do_syscall_64+0x166/0x520 [ 921.430499][T22321] ? trace_irq_disable+0x3b/0x140 [ 921.430529][T22321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.430553][T22321] ? clear_bhb_loop+0x70/0xc0 [ 921.430580][T22321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.430602][T22321] RIP: 0033:0x7f57e4f9e159 [ 921.430623][T22321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.430641][T22321] RSP: 002b:00007f57e5f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.430666][T22321] RAX: ffffffffffffffda RBX: 00007f57e5225fa0 RCX: 00007f57e4f9e159 [ 921.430684][T22321] RDX: 0000000000000100 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 921.430701][T22321] RBP: 00007f57e5035024 R08: 0000000000000000 R09: 0000000000000000 [ 921.430716][T22321] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000000 [ 921.430730][T22321] R13: 00007f57e5226038 R14: 00007f57e5225fa0 R15: 00007fff63e44418 [ 921.430763][T22321] [ 921.446768][T16502] usb 10-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.00 [ 921.462408][T16502] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 921.462454][T16502] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.534209][T16502] usb 10-1: config 0 descriptor?? [ 921.539695][T22305] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 921.590015][T16842] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:aac02e13-73bd-4a9d-9148-a7f3804c74ff. [ 921.677082][T22316] nvme nvme2: creating 2 I/O queues. [ 921.703536][T22316] nvme nvme2: new ctrl: "testsubsys" [ 921.744013][T16502] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input114 [ 921.806001][ T4975] bcm5974 10-1:0.0: could not read from device [ 921.870703][ T4975] bcm5974 10-1:0.0: could not read from device [ 921.930750][T16502] usb 10-1: USB disconnect, device number 9 [ 921.930934][ T4975] bcm5974 10-1:0.0: could not read from device [ 921.961066][T22331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4497'. [ 921.993471][T22336] overlayfs: missing 'lowerdir' [ 922.442800][T22354] tmpfs: Unknown parameter 'no' [ 922.558573][T16502] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 922.719116][T16502] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 922.729445][T16502] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 922.729483][T16502] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.754637][T16502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.754677][T16502] usb 4-1: Product: syz [ 922.754723][T16502] usb 4-1: Manufacturer: syz [ 922.754741][T16502] usb 4-1: SerialNumber: syz [ 922.803307][T16502] usb 4-1: 0:2 : does not exist [ 922.995459][T16502] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 923.066086][T16502] usb 4-1: USB disconnect, device number 45 [ 923.164045][T18234] udevd[18234]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.664094][ T4217] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:aac02e13-73bd-4a9d-9148-a7f3804c74ff. [ 923.693945][T22388] nvme nvme3: creating 2 I/O queues. [ 923.703474][T22388] nvme nvme3: new ctrl: "testsubsys" [ 923.710109][ T191] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 923.784421][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4507'. [ 923.874300][ T191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 923.874378][ T191] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=af.1e [ 923.876637][ T191] usb 5-1: config 228 has an invalid interface number: 99 but max is 0 [ 923.876661][ T191] usb 5-1: config 228 has no interface number 0 [ 923.876701][ T191] usb 5-1: config 228 interface 99 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 923.879924][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.879947][ T191] usb 5-1: Product: syz [ 923.879962][ T191] usb 5-1: Manufacturer: syz [ 923.879976][ T191] usb 5-1: SerialNumber: syz [ 928.942421][ T191] ath6kl: Failed to submit usb control message: -32 [ 928.942471][ T191] ath6kl: unable to send the bmi data to the device: -32 [ 928.942487][ T191] ath6kl: Unable to send get target info: -32 [ 928.954582][ T191] ath6kl: Failed to init ath6kl core: -32 [ 928.955883][ T191] ath6kl_usb 5-1:228.99: probe with driver ath6kl_usb failed with error -32 [ 931.410863][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.832620][ T191] usb 5-1: USB disconnect, device number 29 [ 933.929787][T22402] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 933.929874][T22402] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 934.386345][T22428] overlay: ./file2 is not a directory [ 934.455215][T22430] program syz.4.4516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 934.464807][T22430] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 934.527879][ T25] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 934.682987][T22438] syzkaller1: entered promiscuous mode [ 934.689373][ T25] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 934.692688][T22438] syzkaller1: entered allmulticast mode [ 934.709661][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 934.711516][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 934.712929][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 934.747462][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.747501][ T25] usb 2-1: Product: syz [ 934.747534][ T25] usb 2-1: Manufacturer: syz [ 934.747619][ T25] usb 2-1: SerialNumber: syz [ 934.774086][ T25] usb 2-1: config 0 descriptor?? [ 934.779979][T22420] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 934.790347][ T25] usb 2-1: ucan: probing device on interface #0 [ 934.796784][ T25] usb 2-1: ucan: invalid endpoint configuration [ 934.803393][ T25] usb 2-1: ucan: probe failed; try to update the device firmware [ 934.992522][ T10] usb 2-1: USB disconnect, device number 87 [ 935.033773][T22452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 935.045625][T22452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 935.691944][T22473] FAULT_INJECTION: forcing a failure. [ 935.691944][T22473] name failslab, interval 1, probability 0, space 0, times 0 [ 935.691999][T22473] CPU: 0 UID: 0 PID: 22473 Comm: syz.3.4525 Tainted: G L syzkaller #0 PREEMPT(full) [ 935.692026][T22473] Tainted: [L]=SOFTLOCKUP [ 935.692033][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.692045][T22473] Call Trace: [ 935.692053][T22473] [ 935.692062][T22473] dump_stack_lvl+0xe8/0x150 [ 935.692091][T22473] should_fail_ex+0x3eb/0x540 [ 935.692123][T22473] ? dup_task_struct+0x52/0xa00 [ 935.692146][T22473] should_failslab+0xa8/0x100 [ 935.692167][T22473] ? dup_task_struct+0x52/0xa00 [ 935.692187][T22473] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 935.692216][T22473] ? dup_task_struct+0x52/0xa00 [ 935.692243][T22473] dup_task_struct+0x52/0xa00 [ 935.692274][T22473] ? _raw_spin_unlock_irq+0x23/0x50 [ 935.692307][T22473] copy_process+0x820/0x43e0 [ 935.692328][T22473] ? _parse_integer_limit+0x18f/0x1e0 [ 935.692365][T22473] ? kstrtouint+0x6e/0xe0 [ 935.692392][T22473] ? lock_acquire+0x115/0x350 [ 935.692420][T22473] ? get_pid_task+0x20/0x1f0 [ 935.692452][T22473] ? __pfx_copy_process+0x10/0x10 [ 935.692475][T22473] ? get_pid_task+0x20/0x1f0 [ 935.692496][T22473] ? get_pid_task+0x20/0x1f0 [ 935.692530][T22473] kernel_clone+0x2d7/0x940 [ 935.692560][T22473] ? __pfx_kernel_clone+0x10/0x10 [ 935.692602][T22473] __x64_sys_clone+0x1b6/0x230 [ 935.692629][T22473] ? __pfx___x64_sys_clone+0x10/0x10 [ 935.692667][T22473] ? __pfx_ksys_write+0x10/0x10 [ 935.692703][T22473] do_syscall_64+0x166/0x520 [ 935.692725][T22473] ? trace_irq_disable+0x3b/0x140 [ 935.692752][T22473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.692771][T22473] ? clear_bhb_loop+0x70/0xc0 [ 935.692795][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.692814][T22473] RIP: 0033:0x7fa4d459e159 [ 935.692833][T22473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.692849][T22473] RSP: 002b:00007fa4d5523fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 935.692870][T22473] RAX: ffffffffffffffda RBX: 00007fa4d4825fa0 RCX: 00007fa4d459e159 [ 935.692885][T22473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200000 [ 935.692898][T22473] RBP: 00007fa4d5524090 R08: 0000000000000000 R09: 0000000000000000 [ 935.692911][T22473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 935.692923][T22473] R13: 00007fa4d4826038 R14: 00007fa4d4825fa0 R15: 00007ffe1697f028 [ 935.692954][T22473] [ 936.178927][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 936.208451][ T4217] IPVS: starting estimator thread 0... [ 936.215215][T22490] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 936.215283][T22490] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 936.298666][T22491] IPVS: using max 17 ests per chain, 40800 per kthread [ 936.307618][ T10] usb 10-1: device descriptor read/64, error -71 [ 936.349418][T22496] netlink: 556 bytes leftover after parsing attributes in process `syz.3.4533'. [ 936.497708][ T25] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 936.547826][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 936.637690][ T5765] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 936.658097][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 936.659246][ T25] usb 2-1: config index 0 descriptor too short (expected 49504, got 36) [ 936.659268][ T25] usb 2-1: config 8 has too many interfaces: 102, using maximum allowed: 32 [ 936.659288][ T25] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 936.659461][ T25] usb 2-1: config 8 has 0 interfaces, different from the descriptor's value: 102 [ 936.659496][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.685573][ T10] usb 10-1: device descriptor read/64, error -71 [ 936.787778][ T10] usb usb10-port1: attempt power cycle [ 936.798861][ T5765] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 936.800340][ T5765] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 936.800382][ T5765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 936.800468][ T5765] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 936.800507][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.809892][ T5765] usb 4-1: config 0 descriptor?? [ 936.810912][T22498] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 937.080196][T22494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.088195][T22494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.094724][T22494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.096624][T22494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.120669][T22494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.121451][T22494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.137151][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 937.158592][ T10] usb 10-1: device descriptor read/8, error -71 [ 937.205830][ T25] usb 2-1: USB disconnect, device number 88 [ 937.217584][ T191] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 937.268050][ T5765] usbhid 4-1:0.0: can't add hid device: -71 [ 937.268215][ T5765] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 937.271993][ T5765] usb 4-1: USB disconnect, device number 46 [ 937.378054][ T191] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 937.379251][ T191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 937.379273][ T191] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.381523][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.381546][ T191] usb 5-1: Product: syz [ 937.381559][ T191] usb 5-1: Manufacturer: syz [ 937.381574][ T191] usb 5-1: SerialNumber: syz [ 937.394016][ T191] usb 5-1: 0:2 : does not exist [ 937.418077][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 937.438376][ T10] usb 10-1: device descriptor read/8, error -71 [ 937.549251][ T10] usb usb10-port1: unable to enumerate USB device [ 937.596929][ T191] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 937.628465][ T191] usb 5-1: USB disconnect, device number 30 [ 937.651842][T22399] udevd[22399]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.913808][T22516] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 938.164745][T22529] netlink: 556 bytes leftover after parsing attributes in process `syz.1.4542'. [ 938.259297][T22534] No source specified [ 938.259429][T22534] No source specified [ 938.259544][T22534] No source specified [ 938.259647][T22534] No source specified [ 938.259750][T22534] No source specified [ 938.303492][T22534] No source specified [ 938.303609][T22534] No source specified [ 938.303698][T22534] No source specified [ 938.303785][T22534] No source specified [ 938.303904][T22534] No source specified [ 938.304044][T22534] No source specified [ 938.304138][T22534] No source specified [ 938.304223][T22534] No source specified [ 938.304310][T22534] No source specified [ 938.304395][T22534] No source specified [ 938.304480][T22534] No source specified [ 938.304567][T22534] No source specified [ 938.304655][T22534] No source specified [ 938.304743][T22534] No source specified [ 938.304835][T22534] No source specified [ 938.304920][T22534] No source specified [ 938.313151][T22534] No source specified [ 938.313262][T22534] No source specified [ 938.313351][T22534] No source specified [ 938.313437][T22534] No source specified [ 938.313522][T22534] No source specified [ 938.313607][T22534] No source specified [ 938.313695][T22534] No source specified [ 938.313814][T22534] No source specified [ 938.313906][T22534] No source specified [ 938.313997][T22534] No source specified [ 938.314093][T22534] No source specified [ 938.314179][T22534] No source specified [ 938.314265][T22534] No source specified [ 938.314350][T22534] No source specified [ 938.314435][T22534] No source specified [ 938.314522][T22534] No source specified [ 938.314644][T22534] No source specified [ 938.325288][T22534] No source specified [ 938.325580][T22534] No source specified [ 938.325671][T22534] No source specified [ 938.325757][T22534] No source specified [ 938.326024][T22534] No source specified [ 938.326130][T22534] No source specified [ 938.326218][T22534] No source specified [ 938.326306][T22534] No source specified [ 938.326393][T22534] No source specified [ 938.326485][T22534] No source specified [ 938.326576][T22534] No source specified [ 938.326661][T22534] No source specified [ 938.326750][T22534] No source specified [ 938.326840][T22534] No source specified [ 938.326926][T22534] No source specified [ 938.327013][T22534] No source specified [ 938.331197][T22534] No source specified [ 938.331292][T22534] No source specified [ 938.331399][T22534] No source specified [ 938.331490][T22534] No source specified [ 938.331575][T22534] No source specified [ 938.331663][T22534] No source specified [ 938.331782][T22534] No source specified [ 938.331870][T22534] No source specified [ 938.331956][T22534] No source specified [ 938.332041][T22534] No source specified [ 938.332134][T22534] No source specified [ 938.634009][T22541] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4546'. [ 938.822696][T22555] netlink: 556 bytes leftover after parsing attributes in process `syz.3.4553'. [ 938.857614][ T8795] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 938.940984][T22558] FAULT_INJECTION: forcing a failure. [ 938.940984][T22558] name failslab, interval 1, probability 0, space 0, times 0 [ 938.942530][T22559] loop9: detected capacity change from 0 to 7 [ 938.965519][T22559] Dev loop9: unable to read RDB block 7 [ 938.965748][T22559] loop9: unable to read partition table [ 938.965920][T22559] loop9: partition table beyond EOD, truncated [ 938.965953][T22559] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 938.968311][ C0] blk_print_req_error: 76 callbacks suppressed [ 938.968328][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 938.968420][ C0] buffer_io_error: 138 callbacks suppressed [ 938.968433][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 939.012146][ T8795] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 939.014251][ T8795] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.014296][ T8795] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 939.014321][ T8795] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 939.014344][ T8795] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 939.016604][ T8795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.016626][ T8795] usb 2-1: Product: syz [ 939.016641][ T8795] usb 2-1: Manufacturer: syz [ 939.016656][ T8795] usb 2-1: SerialNumber: syz [ 939.039410][T22543] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 939.039511][T22543] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 939.060368][ T8795] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 939.060771][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 87 [ 939.060837][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 939.066987][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 939.067067][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 939.067142][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 85 [ 939.067221][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 939.077543][ T191] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 939.078365][ T8795] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 939.112048][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 939.112137][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 939.112218][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 939.118007][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 939.118091][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 86 [ 939.118168][ T8795] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 939.127128][ T8795] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 939.129885][T22558] CPU: 0 UID: 0 PID: 22558 Comm: syz.9.4555 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.129914][T22558] Tainted: [L]=SOFTLOCKUP [ 939.129921][T22558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.129933][T22558] Call Trace: [ 939.129941][T22558] [ 939.129949][T22558] dump_stack_lvl+0xe8/0x150 [ 939.129980][T22558] should_fail_ex+0x3eb/0x540 [ 939.130010][T22558] ? __alloc_skb+0x1db/0x7a0 [ 939.130033][T22558] should_failslab+0xa8/0x100 [ 939.130054][T22558] ? __alloc_skb+0x1db/0x7a0 [ 939.130074][T22558] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 939.130100][T22558] ? __alloc_skb+0x18d/0x7a0 [ 939.130121][T22558] ? __alloc_skb+0x1db/0x7a0 [ 939.130149][T22558] __alloc_skb+0x1db/0x7a0 [ 939.130175][T22558] xfrm_alloc_compat+0x1a6/0x1740 [ 939.130286][T22558] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 939.130310][T22558] xfrm_nlmsg_multicast+0xda/0x1f0 [ 939.130343][T22558] xfrm_send_migrate+0x45a/0x910 [ 939.130380][T22558] ? __pfx_xfrm_send_migrate+0x10/0x10 [ 939.130419][T22558] ? lock_acquire+0x115/0x350 [ 939.130460][T22558] ? __pfx_xfrm_send_migrate+0x10/0x10 [ 939.130487][T22558] km_migrate+0x159/0x260 [ 939.130507][T22558] ? km_migrate+0x3c/0x260 [ 939.130536][T22558] xfrm_migrate+0x2225/0x24a0 [ 939.130576][T22558] ? __lock_acquire+0x6df/0x2e50 [ 939.130611][T22558] ? __pfx_xfrm_migrate+0x10/0x10 [ 939.130655][T22558] ? lock_acquire+0x115/0x350 [ 939.130689][T22558] xfrm_do_migrate+0x8a3/0xa40 [ 939.130722][T22558] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 939.130843][T22558] ? __nla_parse+0x40/0x60 [ 939.130868][T22558] xfrm_user_rcv_msg+0x7a8/0xf30 [ 939.130894][T22558] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 939.130943][T22558] ? __mutex_trylock_common+0x15f/0x270 [ 939.130968][T22558] ? __pfx___mutex_trylock_common+0x10/0x10 [ 939.130992][T22558] ? rcu_is_watching+0x16/0xb0 [ 939.131011][T22558] ? trace_contention_end+0x3d/0x140 [ 939.131040][T22558] netlink_rcv_skb+0x226/0x4a0 [ 939.131070][T22558] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 939.131092][T22558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.131133][T22558] ? netlink_deliver_tap+0x2e/0x1b0 [ 939.131160][T22558] ? netlink_deliver_tap+0x2e/0x1b0 [ 939.131190][T22558] xfrm_netlink_rcv+0x79/0x90 [ 939.131209][T22558] netlink_unicast+0x7bd/0x940 [ 939.131255][T22558] netlink_sendmsg+0x813/0xb40 [ 939.131292][T22558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.131327][T22558] ? apparmor_socket_sendmsg+0x98/0x360 [ 939.131356][T22558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.131382][T22558] sock_sendmsg_nosec+0x13a/0x180 [ 939.131415][T22558] ____sys_sendmsg+0x54e/0x850 [ 939.131446][T22558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.131479][T22558] ? import_iovec+0x73/0xa0 [ 939.131503][T22558] ___sys_sendmsg+0x2a5/0x360 [ 939.131537][T22558] ? __lock_acquire+0x6df/0x2e50 [ 939.131567][T22558] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.131626][T22558] ? __fget_files+0x2a/0x420 [ 939.131648][T22558] ? __fget_files+0x3a2/0x420 [ 939.131680][T22558] __x64_sys_sendmsg+0x1b1/0x290 [ 939.131708][T22558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.131753][T22558] do_syscall_64+0x166/0x520 [ 939.131774][T22558] ? trace_irq_disable+0x3b/0x140 [ 939.131801][T22558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.131821][T22558] ? clear_bhb_loop+0x70/0xc0 [ 939.131845][T22558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.131863][T22558] RIP: 0033:0x7fbf3979e159 [ 939.131881][T22558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.131899][T22558] RSP: 002b:00007fbf3a657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.131920][T22558] RAX: ffffffffffffffda RBX: 00007fbf39a25fa0 RCX: 00007fbf3979e159 [ 939.131934][T22558] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 939.131947][T22558] RBP: 00007fbf3a657090 R08: 0000000000000000 R09: 0000000000000000 [ 939.131960][T22558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.131971][T22558] R13: 00007fbf39a26038 R14: 00007fbf39a25fa0 R15: 00007fff1ac94d58 [ 939.132001][T22558] [ 939.243053][ T191] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 939.250291][ T191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.250314][ T191] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.275189][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.275213][ T191] usb 5-1: Product: syz [ 939.275227][ T191] usb 5-1: Manufacturer: syz [ 939.275242][ T191] usb 5-1: SerialNumber: syz [ 939.333832][ T191] usb 5-1: 0:2 : does not exist [ 939.402302][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4547'. [ 939.492203][T22543] ALSA: mixer_oss: invalid OSS volume '' [ 939.542508][ T191] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 939.675490][ T191] usb 5-1: USB disconnect, device number 31 [ 939.755193][T22399] udevd[22399]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.797544][ T5701] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 939.810188][ T8795] usb 2-1: USB disconnect, device number 89 [ 939.825897][ T8795] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 939.832902][ T8795] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 939.836642][ T8795] keyspan 2-1:1.0: device disconnected [ 939.951428][ T5701] usb 10-1: unable to get BOS descriptor or descriptor too short [ 939.952112][ T5701] usb 10-1: not running at top speed; connect to a high speed hub [ 939.952142][ T5701] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 939.953352][ T5701] usb 10-1: config 5 has an invalid interface number: 246 but max is 0 [ 939.953374][ T5701] usb 10-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 939.953394][ T5701] usb 10-1: config 5 has no interface number 0 [ 939.953433][ T5701] usb 10-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 25309, setting to 64 [ 939.953466][ T5701] usb 10-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.953492][ T5701] usb 10-1: config 5 interface 246 has no altsetting 0 [ 939.955874][ T5701] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.955897][ T5701] usb 10-1: Product: syz [ 939.955911][ T5701] usb 10-1: Manufacturer: syz [ 939.955926][ T5701] usb 10-1: SerialNumber: syz [ 939.969550][T22568] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 940.187429][ T25] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 940.327353][ T25] usb 4-1: device descriptor read/64, error -71 [ 940.590318][ T25] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 940.701122][ T5701] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 940.727239][ T25] usb 4-1: device descriptor read/64, error -71 [ 940.741553][ T5701] usb 10-1: USB disconnect, device number 14 [ 940.751859][T16816] usb 10-1: Failed to submit usb control message: -71 [ 940.751917][T16816] usb 10-1: unable to send the bmi data to the device: -71 [ 940.751935][T16816] usb 10-1: unable to get target info from device [ 940.751950][T16816] usb 10-1: could not get target info (-71) [ 940.752233][T16816] usb 10-1: could not probe fw (-71) [ 940.852112][ T25] usb usb4-port1: attempt power cycle [ 941.003986][T22597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.208190][ T25] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 941.237748][ T25] usb 4-1: device descriptor read/8, error -71 [ 941.322298][T22597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.413174][T22622] syzkaller1: entered promiscuous mode [ 941.413215][T22622] syzkaller1: entered allmulticast mode [ 941.431660][T22625] nvme_fabrics: missing parameter 'transport=%s' [ 941.431692][T22625] nvme_fabrics: missing parameter 'nqn=%s' [ 941.487217][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 941.529262][ T25] usb 4-1: device descriptor read/8, error -71 [ 941.637827][ T25] usb usb4-port1: unable to enumerate USB device [ 941.641594][T22597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.808997][T22643] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.816304][T22643] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4570'. [ 941.934812][T22597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.551725][T22675] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 942.551750][T22675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 942.569456][T22675] vhci_hcd vhci_hcd.0: Device attached [ 942.585560][T22677] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 942.603292][T16818] vhci_hcd vhci_hcd.9: stop threads [ 942.603309][T16818] vhci_hcd vhci_hcd.9: release socket [ 942.603328][T16818] vhci_hcd vhci_hcd.9: disconnect device [ 942.693808][T22672] XFS (loop9): SB validate failed with error -5. [ 942.817377][ T5765] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 942.818406][T16832] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.840671][T16832] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.893921][T16818] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.923579][ T2031] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 942.953030][T16832] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.955778][ T44] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 942.978541][ T5765] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 942.981872][ T5765] usb 10-1: config 0 has no interfaces? [ 942.981904][ T5765] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.994240][ T5765] usb 10-1: config 0 descriptor?? [ 943.109459][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 943.110073][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 943.110121][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 943.112122][ T44] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 943.112193][ T44] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 4 [ 943.112234][ T44] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 943.112270][ T44] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 943.112310][ T44] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 52, changing to 4 [ 943.112338][ T44] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 13368, setting to 1023 [ 943.115417][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.115441][ T44] usb 2-1: Product: syz [ 943.115497][ T44] usb 2-1: Manufacturer: syz [ 943.115512][ T44] usb 2-1: SerialNumber: syz [ 943.205468][ T5765] usb 10-1: USB disconnect, device number 15 [ 943.299700][T22698] nvme_fabrics: missing parameter 'transport=%s' [ 943.306284][T22698] nvme_fabrics: missing parameter 'nqn=%s' [ 943.361598][ T44] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 943.464201][ T44] usb 2-1: USB disconnect, device number 90 [ 943.532164][T22399] udevd[22399]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 943.677051][ T191] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 943.827013][ T9880] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 943.828467][ T191] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 943.829569][ T191] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 943.829592][ T191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.829611][ T191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 943.829652][ T191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.831304][ T191] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 943.831326][ T191] usb 4-1: Product: syz [ 943.831341][ T191] usb 4-1: Manufacturer: syz [ 943.841380][ T191] cdc_wdm 4-1:1.0: skipping garbage [ 943.841397][ T191] cdc_wdm 4-1:1.0: skipping garbage [ 943.846768][ T191] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 943.846787][ T191] cdc_wdm 4-1:1.0: Unknown control protocol [ 943.977806][ T9880] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=36.54 [ 943.981092][ T9880] usb 5-1: config 34 has an invalid interface number: 167 but max is 0 [ 943.981116][ T9880] usb 5-1: config 34 has no interface number 0 [ 943.981144][ T9880] usb 5-1: config 34 interface 167 has no altsetting 0 [ 943.983310][ T9880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.983333][ T9880] usb 5-1: Product: syz [ 943.983348][ T9880] usb 5-1: Manufacturer: syz [ 943.983362][ T9880] usb 5-1: SerialNumber: syz [ 944.033487][ T44] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 944.101479][ C1] wdm_int_callback: 6 callbacks suppressed [ 944.101557][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 944.101576][ C1] wdm_int_callback: 6 callbacks suppressed [ 944.101592][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 944.102180][ T191] usb 4-1: USB disconnect, device number 51 [ 944.103414][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 944.103437][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 944.103454][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 944.230049][ T9880] usb 5-1: USB disconnect, device number 32 [ 944.249719][ T44] usb 10-1: unable to get BOS descriptor or descriptor too short [ 944.259654][ T44] usb 10-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=5a.9d [ 944.270041][ T44] usb 10-1: config 3 has an invalid interface number: 249 but max is 0 [ 944.279091][ T44] usb 10-1: config 3 has no interface number 0 [ 944.285695][ T44] usb 10-1: config 3 interface 249 has no altsetting 0 [ 944.295231][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.303558][ T44] usb 10-1: Product: syz [ 944.307971][ T44] usb 10-1: Manufacturer: syz [ 944.312754][ T44] usb 10-1: SerialNumber: syz [ 944.627105][ T191] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 944.777026][ T191] usb 4-1: Using ep0 maxpacket: 16 [ 944.777662][ T191] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 944.780024][ T191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.780053][ T191] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 944.780092][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.784975][ T191] usb 4-1: config 0 descriptor?? [ 944.827049][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 944.879022][T22740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.884220][T22740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.977467][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 944.979725][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 944.981719][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.981808][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 944.999485][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.999510][ T10] usb 2-1: Product: syz [ 944.999524][ T10] usb 2-1: Manufacturer: syz [ 944.999539][ T10] usb 2-1: SerialNumber: syz [ 945.038602][ T10] usb 2-1: config 0 descriptor?? [ 945.051210][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 945.051326][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 945.067892][ T44] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 945.075124][ T44] gspca_sn9c2028: read1 error -71 [ 945.081847][ T44] gspca_sn9c2028: read1 error -71 [ 945.088041][ T44] gspca_sn9c2028: read1 error -71 [ 945.093260][ T44] sn9c2028 10-1:3.249: probe with driver sn9c2028 failed with error -71 [ 945.104501][ T44] usb 10-1: USB disconnect, device number 16 [ 945.119939][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 945.161736][ T4217] usb 2-1: Failed to submit usb control message: -71 [ 945.161784][ T4217] usb 2-1: unable to send the bmi data to the device: -71 [ 945.161821][ T4217] usb 2-1: unable to get target info from device [ 945.161840][ T4217] usb 2-1: could not get target info (-71) [ 945.161860][ T4217] usb 2-1: could not probe fw (-71) [ 945.237696][T22747] nvme_fabrics: missing parameter 'transport=%s' [ 945.237785][T22747] nvme_fabrics: missing parameter 'nqn=%s' [ 945.332549][ T191] microsoft 0003:045E:07DA.0052: unknown main item tag 0x0 [ 945.332641][ T191] microsoft 0003:045E:07DA.0052: report is too long [ 945.332666][ T191] microsoft 0003:045E:07DA.0052: item 0 4 0 11 parsing failed [ 945.337817][ T191] microsoft 0003:045E:07DA.0052: parse failed [ 945.337914][ T191] microsoft 0003:045E:07DA.0052: probe with driver microsoft failed with error -22 [ 945.519100][ T5765] usb 2-1: USB disconnect, device number 91 [ 945.529111][ T44] usb 4-1: USB disconnect, device number 52 [ 945.720158][T22763] ADFS-fs (nbd9): error: unable to read block 3, try 0 [ 945.887288][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 946.044801][T22766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 946.057492][ T25] usb 5-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 946.062760][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.062784][ T25] usb 5-1: Product: syz [ 946.062799][ T25] usb 5-1: Manufacturer: syz [ 946.062813][ T25] usb 5-1: SerialNumber: syz [ 946.109910][ T44] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 946.324955][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 946.325094][ T25] usb 5-1: MIDIStreaming interface descriptor not found [ 946.538790][ T25] usb 5-1: USB disconnect, device number 33 [ 946.705370][T22398] udevd[22398]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.755121][T22798] netlink: 620 bytes leftover after parsing attributes in process `syz.3.4596'. [ 946.872245][T22799] nvme_fabrics: missing parameter 'transport=%s' [ 946.880062][T22799] nvme_fabrics: missing parameter 'nqn=%s' [ 946.918584][T22804] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 947.250144][ T8213] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 947.258938][T22818] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 4, id = 0 [ 947.408837][ T8213] usb 2-1: device descriptor read/64, error -71 [ 947.653953][ T8213] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 947.715052][T22839] netlink: 620 bytes leftover after parsing attributes in process `syz.4.4605'. [ 947.789443][ T8213] usb 2-1: device descriptor read/64, error -71 [ 947.897446][ T8213] usb usb2-port1: attempt power cycle [ 948.021028][T22847] nvme_fabrics: missing parameter 'transport=%s' [ 948.027648][T22847] nvme_fabrics: missing parameter 'nqn=%s' [ 948.174272][T22852] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 948.236770][ T8213] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 948.259464][ T8213] usb 2-1: device descriptor read/8, error -71 [ 948.336905][ T25] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 948.496757][ T8213] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 948.507364][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.517261][ T8213] usb 2-1: device descriptor read/8, error -71 [ 948.525589][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.525617][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 948.543536][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.543560][ T25] usb 5-1: Product: syz [ 948.543574][ T25] usb 5-1: Manufacturer: syz [ 948.543589][ T25] usb 5-1: SerialNumber: syz [ 948.565135][ T9880] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 948.569705][ T25] usb 5-1: 0:2 : does not exist [ 948.628712][ T8213] usb usb2-port1: unable to enumerate USB device [ 948.726697][ T9880] usb 4-1: Using ep0 maxpacket: 32 [ 948.727350][ T9880] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 948.728467][ T9880] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 948.728490][ T9880] usb 4-1: config 0 has no interface number 0 [ 948.728527][ T9880] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 948.728552][ T9880] usb 4-1: config 0 interface 196 has no altsetting 0 [ 948.730768][ T9880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.730790][ T9880] usb 4-1: Product: syz [ 948.730805][ T9880] usb 4-1: Manufacturer: syz [ 948.730820][ T9880] usb 4-1: SerialNumber: syz [ 948.734003][ T9880] usb 4-1: config 0 descriptor?? [ 948.734496][T22855] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 948.814386][ T25] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 948.882238][ T25] usb 5-1: USB disconnect, device number 34 [ 948.933463][T22796] udevd[22796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.952647][T22855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.953361][T22855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.794067][T22886] nvme_fabrics: missing parameter 'transport=%s' [ 949.800612][T22886] nvme_fabrics: missing parameter 'nqn=%s' [ 950.476750][ T8213] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 950.627775][ T8213] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.629970][ T8213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.630041][ T8213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 950.634715][ T8213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.634738][ T8213] usb 5-1: Product: syz [ 950.634752][ T8213] usb 5-1: Manufacturer: syz [ 950.634768][ T8213] usb 5-1: SerialNumber: syz [ 950.674877][ T8213] usb 5-1: 0:2 : does not exist [ 950.885344][ T8213] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 951.087468][ T8213] usb 5-1: USB disconnect, device number 35 [ 951.138566][T22796] udevd[22796]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 951.305614][T22924] nvme_fabrics: missing parameter 'nqn=%s' [ 951.383937][T22927] IPv4: Oversized IP packet from 127.202.26.0 [ 951.465463][ T9880] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 951.465752][ T9880] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 951.492392][ T9880] usb 4-1: USB disconnect, device number 53 [ 951.535180][T22929] FAULT_INJECTION: forcing a failure. [ 951.535180][T22929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.548512][T22929] CPU: 1 UID: 0 PID: 22929 Comm: syz.1.4631 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.548541][T22929] Tainted: [L]=SOFTLOCKUP [ 951.548549][T22929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.548561][T22929] Call Trace: [ 951.548569][T22929] [ 951.548578][T22929] dump_stack_lvl+0xe8/0x150 [ 951.548617][T22929] should_fail_ex+0x3eb/0x540 [ 951.548651][T22929] _copy_from_user+0x2d/0xb0 [ 951.548673][T22929] kstrtouint_from_user+0xd6/0x180 [ 951.548703][T22929] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 951.548738][T22929] ? lock_acquire+0x115/0x350 [ 951.548770][T22929] proc_fail_nth_write+0x8e/0x210 [ 951.548794][T22929] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 951.548827][T22929] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 951.548853][T22929] vfs_write+0x296/0xba0 [ 951.548886][T22929] ? __pfx_vfs_write+0x10/0x10 [ 951.548913][T22929] ? __fget_files+0x2a/0x420 [ 951.548940][T22929] ? __fget_files+0x3a2/0x420 [ 951.548962][T22929] ? __fget_files+0x2a/0x420 [ 951.548991][T22929] ksys_write+0x150/0x270 [ 951.549017][T22929] ? __pfx_ksys_write+0x10/0x10 [ 951.549051][T22929] do_syscall_64+0x166/0x520 [ 951.549074][T22929] ? trace_irq_disable+0x3b/0x140 [ 951.549100][T22929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.549118][T22929] ? clear_bhb_loop+0x70/0xc0 [ 951.549142][T22929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.549161][T22929] RIP: 0033:0x7f57e4f5e98e [ 951.549178][T22929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 951.549196][T22929] RSP: 002b:00007f57e5f40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 951.549217][T22929] RAX: ffffffffffffffda RBX: 00007f57e5f416c0 RCX: 00007f57e4f5e98e [ 951.549233][T22929] RDX: 0000000000000001 RSI: 00007f57e5f410a0 RDI: 0000000000000004 [ 951.549246][T22929] RBP: 00007f57e5f41090 R08: 0000000000000000 R09: 0000000000000000 [ 951.549258][T22929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.549271][T22929] R13: 00007f57e5226038 R14: 00007f57e5225fa0 R15: 00007fff63e44418 [ 951.549302][T22929] [ 951.797252][T22937] binder: 22935:22937 ioctl c0306201 0 returned -14 [ 951.869699][T22939] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 951.982313][T22943] binder: 22935:22943 ioctl c0306201 0 returned -14 [ 952.006439][ T44] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 952.167141][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 952.173160][ T44] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 952.186556][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.186618][ T44] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 952.186660][ T44] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 952.186685][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 952.186731][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.267718][T22933] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 952.277319][ T44] mdc800 4-1:1.0: probe fails -> wrong Interface [ 952.312260][T22937] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.513991][T22954] nvme_fabrics: missing parameter 'nqn=%s' [ 952.545852][T22956] usb usb8: usbfs: process 22956 (syz.3.4630) did not claim interface 0 before use [ 952.633476][T22958] No source specified [ 952.638314][T22937] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.779549][ T9880] usb 4-1: USB disconnect, device number 54 [ 953.099730][T22937] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.310239][T22937] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.329266][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 953.488456][ T25] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 953.501717][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.510381][ T25] usb 5-1: Product: syz [ 953.510424][ T25] usb 5-1: Manufacturer: syz [ 953.510444][ T25] usb 5-1: SerialNumber: syz [ 953.527140][ T25] usb 5-1: config 0 descriptor?? [ 953.540483][ T25] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 953.905910][T22969] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 954.369420][ T191] usb 5-1: USB disconnect, device number 36 [ 954.444282][T22982] nvme_fabrics: missing parameter 'nqn=%s' [ 954.961340][T22997] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4651'. [ 954.971948][ T52] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 955.039445][T23000] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 955.060297][T23001] binder: 22999:23001 ioctl c0306201 0 returned -14 [ 955.131901][T23004] binder: 22999:23004 ioctl c0306201 0 returned -14 [ 955.632614][T16818] nvmet: connect request for invalid subsystem test! [ 955.640911][T23015] nvme nvme4: Connect Invalid Data Parameter, subsysnqn "test" [ 956.166636][T23027] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 956.246184][ T9880] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 956.397025][ T9880] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 956.409174][ T9880] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 956.409219][ T9880] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 956.409268][ T9880] usb 5-1: config 1 interface 0 has no altsetting 0 [ 956.442091][ T9880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.442909][ T9880] usb 5-1: Product: syz [ 956.442941][ T9880] usb 5-1: Manufacturer: syz [ 956.442960][ T9880] usb 5-1: SerialNumber: syz [ 956.471743][T23021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 956.471817][T23021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 956.569373][T23040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4664'. [ 957.007398][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 957.286178][ T191] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 957.286579][ T8213] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 957.437666][ T8213] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 957.439053][ T191] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.440966][ T8213] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 957.441047][ T8213] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.441067][ T8213] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 957.441110][ T8213] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.441586][ T191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.441663][ T191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 957.445751][ T8213] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 957.445774][ T8213] usb 2-1: Product: syz [ 957.445787][ T8213] usb 2-1: Manufacturer: syz [ 957.450724][ T191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.450802][ T191] usb 4-1: Product: syz [ 957.450818][ T191] usb 4-1: Manufacturer: syz [ 957.450832][ T191] usb 4-1: SerialNumber: syz [ 957.478891][ T8213] cdc_wdm 2-1:1.0: skipping garbage [ 957.478908][ T8213] cdc_wdm 2-1:1.0: skipping garbage [ 957.486846][ T8213] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 957.486865][ T8213] cdc_wdm 2-1:1.0: Unknown control protocol [ 957.491508][ T191] usb 4-1: 0:2 : does not exist [ 957.526895][ T9880] (unnamed net_device) (uninitialized): Assigned a random MAC address: f6:20:82:82:a8:91 [ 957.624222][ T9880] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 957.690833][ T191] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 957.763431][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.763457][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.763687][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.763708][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.763943][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.763962][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.764189][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.764208][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.764432][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.764449][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.764676][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.764695][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.764920][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.764939][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.765161][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.765180][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.765406][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.765425][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.765649][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 957.765667][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 957.785335][ T44] usb 2-1: USB disconnect, device number 96 [ 957.785529][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 957.888386][ T191] usb 4-1: USB disconnect, device number 55 [ 957.922738][T23055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.923217][T23055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.020907][T22796] udevd[22796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.436005][ T44] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 958.598028][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 958.604149][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 958.616390][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.629358][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 958.630004][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.660421][ T44] usb 2-1: config 0 descriptor?? [ 958.663688][ C0] usb 5-1: Rx status -71 [ 958.663920][ C0] usb 5-1: Rx status -71 [ 958.664157][ C0] usb 5-1: Rx status -71 [ 958.664385][ C0] usb 5-1: Rx status -71 [ 958.664610][ C0] usb 5-1: Rx status -71 [ 958.664855][ C0] usb 5-1: Rx status -71 [ 958.665083][ C0] usb 5-1: Rx status -71 [ 958.665318][ C0] usb 5-1: Rx status -71 [ 958.665543][ C0] usb 5-1: Rx status -71 [ 958.665772][ C0] usb 5-1: Rx status -71 [ 958.871336][ C0] usb 5-1: eth9: intr status -71 [ 958.871583][ C0] usb 5-1: eth9: intr status -71 [ 958.871821][ C0] usb 5-1: eth9: intr status -71 [ 958.872051][ C0] usb 5-1: eth9: intr status -71 [ 958.872306][ C0] usb 5-1: eth9: intr status -71 [ 958.872535][ C0] usb 5-1: eth9: intr status -71 [ 958.872768][ C0] usb 5-1: eth9: intr status -71 [ 958.872991][ C0] usb 5-1: eth9: intr status -71 [ 958.873217][ C0] usb 5-1: eth9: intr status -71 [ 958.873452][ C0] usb 5-1: eth9: intr status -71 [ 958.873680][ C0] usb 5-1: eth9: intr status -71 [ 958.873907][ C0] usb 5-1: eth9: intr status -71 [ 958.874145][ C0] usb 5-1: eth9: intr status -71 [ 958.874381][ C0] usb 5-1: eth9: intr status -71 [ 958.874607][ C0] usb 5-1: eth9: intr status -71 [ 958.874837][ C0] usb 5-1: eth9: intr status -71 [ 958.875066][ C0] usb 5-1: eth9: intr status -71 [ 958.875291][ C0] usb 5-1: eth9: intr status -71 [ 958.875527][ C0] usb 5-1: eth9: intr status -71 [ 958.875757][ C0] usb 5-1: eth9: intr status -71 [ 958.876234][ C0] usb 5-1: eth9: intr status -71 [ 958.876461][ C0] usb 5-1: eth9: intr status -71 [ 958.876698][ C0] usb 5-1: eth9: intr status -71 [ 958.876943][ C0] usb 5-1: eth9: intr status -71 [ 958.877166][ C0] usb 5-1: eth9: intr status -71 [ 958.877395][ C0] usb 5-1: eth9: intr status -71 [ 958.877629][ C0] usb 5-1: eth9: intr status -71 [ 958.877862][ C0] usb 5-1: eth9: intr status -71 [ 958.878081][ C0] usb 5-1: eth9: intr status -71 [ 958.878303][ C0] usb 5-1: eth9: intr status -71 [ 958.878530][ C0] usb 5-1: eth9: intr status -71 [ 958.878768][ C0] usb 5-1: eth9: intr status -71 [ 958.878993][ C0] usb 5-1: eth9: intr status -71 [ 958.879214][ C0] usb 5-1: eth9: intr status -71 [ 958.879437][ C0] usb 5-1: eth9: intr status -71 [ 958.879668][ C0] usb 5-1: eth9: intr status -71 [ 958.879899][ C0] usb 5-1: eth9: intr status -71 [ 958.880134][ C0] usb 5-1: eth9: intr status -71 [ 958.880364][ C0] usb 5-1: eth9: intr status -71 [ 958.880593][ C0] usb 5-1: eth9: intr status -71 [ 958.880824][ C0] usb 5-1: eth9: intr status -71 [ 958.881067][ C0] usb 5-1: eth9: intr status -71 [ 958.881293][ C0] usb 5-1: eth9: intr status -71 [ 958.881525][ C0] usb 5-1: eth9: intr status -71 [ 958.881750][ C0] usb 5-1: eth9: intr status -71 [ 958.881981][ C0] usb 5-1: eth9: intr status -71 [ 958.882206][ C0] usb 5-1: eth9: intr status -71 [ 958.882446][ C0] usb 5-1: eth9: intr status -71 [ 958.882675][ C0] usb 5-1: eth9: intr status -71 [ 958.882907][ C0] usb 5-1: eth9: intr status -71 [ 958.883139][ C0] usb 5-1: eth9: intr status -71 [ 958.883366][ C0] usb 5-1: eth9: intr status -71 [ 958.883595][ C0] usb 5-1: eth9: intr status -71 [ 958.883831][ C0] usb 5-1: eth9: intr status -71 [ 958.884060][ C0] usb 5-1: eth9: intr status -71 [ 958.884280][ C0] usb 5-1: eth9: intr status -71 [ 958.884501][ C0] usb 5-1: eth9: intr status -71 [ 958.884724][ C0] usb 5-1: eth9: intr status -71 [ 958.884948][ C0] usb 5-1: eth9: intr status -71 [ 958.885172][ C0] usb 5-1: eth9: intr status -71 [ 958.885389][ C0] usb 5-1: eth9: intr status -71 [ 958.885613][ C0] usb 5-1: eth9: intr status -71 [ 958.885919][ C0] usb 5-1: eth9: intr status -71 [ 958.886285][ C0] usb 5-1: eth9: intr status -71 [ 958.886508][ C0] usb 5-1: eth9: intr status -71 [ 958.886737][ C0] usb 5-1: eth9: intr status -71 [ 958.886968][ C0] usb 5-1: eth9: intr status -71 [ 958.887197][ C0] usb 5-1: eth9: intr status -71 [ 958.887481][ C0] usb 5-1: eth9: intr status -71 [ 958.887699][ C0] usb 5-1: eth9: intr status -71 [ 958.887928][ C0] usb 5-1: eth9: intr status -71 [ 958.888150][ C0] usb 5-1: eth9: intr status -71 [ 958.888370][ C0] usb 5-1: eth9: intr status -71 [ 958.888596][ C0] usb 5-1: eth9: intr status -71 [ 958.888821][ C0] usb 5-1: eth9: intr status -71 [ 958.889047][ C0] usb 5-1: eth9: intr status -71 [ 958.889269][ C0] usb 5-1: eth9: intr status -71 [ 958.889490][ C0] usb 5-1: eth9: intr status -71 [ 958.889715][ C0] usb 5-1: eth9: intr status -71 [ 958.889939][ C0] usb 5-1: eth9: intr status -71 [ 958.890169][ C0] usb 5-1: eth9: intr status -71 [ 958.890399][ C0] usb 5-1: eth9: intr status -71 [ 958.890625][ C0] usb 5-1: eth9: intr status -71 [ 958.890849][ C0] usb 5-1: eth9: intr status -71 [ 958.891080][ C0] usb 5-1: eth9: intr status -71 [ 958.891315][ C0] usb 5-1: eth9: intr status -71 [ 958.891541][ C0] usb 5-1: eth9: intr status -71 [ 958.891776][ C0] usb 5-1: eth9: intr status -71 [ 958.892009][ C0] usb 5-1: eth9: intr status -71 [ 958.892236][ C0] usb 5-1: eth9: intr status -71 [ 958.892475][ C0] usb 5-1: eth9: intr status -71 [ 958.892706][ C0] usb 5-1: eth9: intr status -71 [ 958.892933][ C0] usb 5-1: eth9: intr status -71 [ 958.893161][ C0] usb 5-1: eth9: intr status -71 [ 958.893423][ C0] usb 5-1: eth9: intr status -71 [ 958.893657][ C0] usb 5-1: eth9: intr status -71 [ 958.893906][ C0] usb 5-1: eth9: intr status -71 [ 958.894145][ C0] usb 5-1: eth9: intr status -71 [ 958.894383][ C0] usb 5-1: eth9: intr status -71 [ 958.894612][ C0] usb 5-1: eth9: intr status -71 [ 958.894836][ C0] usb 5-1: eth9: intr status -71 [ 958.895071][ C0] usb 5-1: eth9: intr status -71 [ 958.895293][ C0] usb 5-1: eth9: intr status -71 [ 958.895530][ C0] usb 5-1: eth9: intr status -71 [ 958.895761][ C0] usb 5-1: eth9: intr status -71 [ 958.896053][ C0] usb 5-1: eth9: intr status -71 [ 958.896689][ C0] usb 5-1: eth9: intr status -71 [ 958.897255][ C0] usb 5-1: eth9: intr status -71 [ 958.897936][ C0] usb 5-1: eth9: intr status -71 [ 958.898428][ C0] usb 5-1: eth9: intr status -71 [ 958.898644][ C0] usb 5-1: eth9: intr status -71 [ 958.898876][ C0] usb 5-1: eth9: intr status -71 [ 958.899105][ C0] usb 5-1: eth9: intr status -71 [ 958.899345][ C0] usb 5-1: eth9: intr status -71 [ 958.900321][ C0] usb 5-1: eth9: intr status -71 [ 958.900552][ C0] usb 5-1: eth9: intr status -71 [ 958.900779][ C0] usb 5-1: eth9: intr status -71 [ 958.901005][ C0] usb 5-1: eth9: intr status -71 [ 958.901226][ C0] usb 5-1: eth9: intr status -71 [ 958.901444][ C0] usb 5-1: eth9: intr status -71 [ 958.901703][ C0] usb 5-1: eth9: intr status -71 [ 958.901925][ C0] usb 5-1: eth9: intr status -71 [ 958.902147][ C0] usb 5-1: eth9: intr status -71 [ 958.902364][ C0] usb 5-1: eth9: intr status -71 [ 958.902587][ C0] usb 5-1: eth9: intr status -71 [ 958.902811][ C0] usb 5-1: eth9: intr status -71 [ 958.903033][ C0] usb 5-1: eth9: intr status -71 [ 958.903255][ C0] usb 5-1: eth9: intr status -71 [ 958.903480][ C0] usb 5-1: eth9: intr status -71 [ 958.903707][ C0] usb 5-1: eth9: intr status -71 [ 958.903931][ C0] usb 5-1: eth9: intr status -71 [ 958.904156][ C0] usb 5-1: eth9: intr status -71 [ 958.904374][ C0] usb 5-1: eth9: intr status -71 [ 958.904599][ C0] usb 5-1: eth9: intr status -71 [ 958.904861][ C0] usb 5-1: eth9: intr status -71 [ 958.905085][ C0] usb 5-1: eth9: intr status -71 [ 958.905319][ C0] usb 5-1: eth9: intr status -71 [ 958.905542][ C0] usb 5-1: eth9: intr status -71 [ 958.905764][ C0] usb 5-1: eth9: intr status -71 [ 958.906081][ C0] usb 5-1: eth9: intr status -71 [ 958.906313][ C0] usb 5-1: eth9: intr status -71 [ 958.906542][ C0] usb 5-1: eth9: intr status -71 [ 958.906774][ C0] usb 5-1: eth9: intr status -71 [ 958.907002][ C0] usb 5-1: eth9: intr status -71 [ 958.907229][ C0] usb 5-1: eth9: intr status -71 [ 958.907479][ C0] usb 5-1: eth9: intr status -71 [ 958.907705][ C0] usb 5-1: eth9: intr status -71 [ 958.907938][ C0] usb 5-1: eth9: intr status -71 [ 958.908233][ C0] usb 5-1: eth9: intr status -71 [ 958.908455][ C0] usb 5-1: eth9: intr status -71 [ 958.908675][ C0] usb 5-1: eth9: intr status -71 [ 958.908896][ C0] usb 5-1: eth9: intr status -71 [ 958.909132][ C0] usb 5-1: eth9: intr status -71 [ 958.909358][ C0] usb 5-1: eth9: intr status -71 [ 958.909578][ C0] usb 5-1: eth9: intr status -71 [ 958.909794][ C0] usb 5-1: eth9: intr status -71 [ 958.910029][ C0] usb 5-1: eth9: intr status -71 [ 958.910247][ C0] usb 5-1: eth9: intr status -71 [ 958.910481][ C0] usb 5-1: eth9: intr status -71 [ 958.910706][ C0] usb 5-1: eth9: intr status -71 [ 958.910931][ C0] usb 5-1: eth9: intr status -71 [ 958.911157][ C0] usb 5-1: eth9: intr status -71 [ 958.911398][ C0] usb 5-1: eth9: intr status -71 [ 958.911624][ C0] usb 5-1: eth9: intr status -71 [ 958.911854][ C0] usb 5-1: eth9: intr status -71 [ 958.912083][ C0] usb 5-1: eth9: intr status -71 [ 958.912320][ C0] usb 5-1: eth9: intr status -71 [ 958.912541][ C0] usb 5-1: eth9: intr status -71 [ 958.912772][ C0] usb 5-1: eth9: intr status -71 [ 958.912999][ C0] usb 5-1: eth9: intr status -71 [ 958.913229][ C0] usb 5-1: eth9: intr status -71 [ 958.913460][ C0] usb 5-1: eth9: intr status -71 [ 958.913681][ C0] usb 5-1: eth9: intr status -71 [ 958.913896][ C0] usb 5-1: eth9: intr status -71 [ 958.914111][ C0] usb 5-1: eth9: intr status -71 [ 958.914338][ C0] usb 5-1: eth9: intr status -71 [ 958.914564][ C0] usb 5-1: eth9: intr status -71 [ 958.914794][ C0] usb 5-1: eth9: intr status -71 [ 958.915025][ C0] usb 5-1: eth9: intr status -71 [ 958.915254][ C0] usb 5-1: eth9: intr status -71 [ 958.915486][ C0] usb 5-1: eth9: intr status -71 [ 958.915710][ C0] usb 5-1: eth9: intr status -71 [ 958.916079][ C0] usb 5-1: eth9: intr status -71 [ 958.916321][ C0] usb 5-1: eth9: intr status -71 [ 958.916541][ C0] usb 5-1: eth9: intr status -71 [ 958.916771][ C0] usb 5-1: eth9: intr status -71 [ 958.917005][ C0] usb 5-1: eth9: intr status -71 [ 958.917230][ C0] usb 5-1: eth9: intr status -71 [ 958.917451][ C0] usb 5-1: eth9: intr status -71 [ 958.917676][ C0] usb 5-1: eth9: intr status -71 [ 958.917899][ C0] usb 5-1: eth9: intr status -71 [ 958.918136][ C0] usb 5-1: eth9: intr status -71 [ 958.918367][ C0] usb 5-1: eth9: intr status -71 [ 958.918594][ C0] usb 5-1: eth9: intr status -71 [ 958.918816][ C0] usb 5-1: eth9: intr status -71 [ 958.919043][ C0] usb 5-1: eth9: intr status -71 [ 958.919271][ C0] usb 5-1: eth9: intr status -71 [ 958.919497][ C0] usb 5-1: eth9: intr status -71 [ 958.919720][ C0] usb 5-1: eth9: intr status -71 [ 958.919945][ C0] usb 5-1: eth9: intr status -71 [ 958.920166][ C0] usb 5-1: eth9: intr status -71 [ 958.920384][ C0] usb 5-1: eth9: intr status -71 [ 958.920638][ C0] usb 5-1: eth9: intr status -71 [ 958.920861][ C0] usb 5-1: eth9: intr status -71 [ 958.921080][ C0] usb 5-1: eth9: intr status -71 [ 958.921304][ C0] usb 5-1: eth9: intr status -71 [ 958.921526][ C0] usb 5-1: eth9: intr status -71 [ 958.921748][ C0] usb 5-1: eth9: intr status -71 [ 958.921975][ C0] usb 5-1: eth9: intr status -71 [ 958.922201][ C0] usb 5-1: eth9: intr status -71 [ 958.922425][ C0] usb 5-1: eth9: intr status -71 [ 958.922653][ C0] usb 5-1: eth9: intr status -71 [ 958.922882][ C0] usb 5-1: eth9: intr status -71 [ 958.923127][ C0] usb 5-1: eth9: intr status -71 [ 958.923359][ C0] usb 5-1: eth9: intr status -71 [ 958.923590][ C0] usb 5-1: eth9: intr status -71 [ 958.923817][ C0] usb 5-1: eth9: intr status -71 [ 958.924063][ C0] usb 5-1: eth9: intr status -71 [ 958.924292][ C0] usb 5-1: eth9: intr status -71 [ 958.924514][ C0] usb 5-1: eth9: intr status -71 [ 958.924737][ C0] usb 5-1: eth9: intr status -71 [ 958.924963][ C0] usb 5-1: eth9: intr status -71 [ 958.925189][ C0] usb 5-1: eth9: intr status -71 [ 958.925417][ C0] usb 5-1: eth9: intr status -71 [ 958.925644][ C0] usb 5-1: eth9: intr status -71 [ 958.926157][ C0] usb 5-1: eth9: intr status -71 [ 958.926471][ C0] usb 5-1: eth9: intr status -71 [ 958.926688][ C0] usb 5-1: eth9: intr status -71 [ 958.926905][ C0] usb 5-1: eth9: intr status -71 [ 958.927131][ C0] usb 5-1: eth9: intr status -71 [ 958.927351][ C0] usb 5-1: eth9: intr status -71 [ 958.927571][ C0] usb 5-1: eth9: intr status -71 [ 958.927792][ C0] usb 5-1: eth9: intr status -71 [ 958.928009][ C0] usb 5-1: eth9: intr status -71 [ 958.928229][ C0] usb 5-1: eth9: intr status -71 [ 958.928452][ C0] usb 5-1: eth9: intr status -71 [ 958.928679][ C0] usb 5-1: eth9: intr status -71 [ 958.928906][ C0] usb 5-1: eth9: intr status -71 [ 958.929137][ C0] usb 5-1: eth9: intr status -71 [ 958.929226][ T25] usb 5-1: USB disconnect, device number 37 [ 958.929361][ C0] usb 5-1: eth9: intr status -71 [ 958.964726][ T5285] usb 5-1: device reset failed [ 959.031139][T16832] nvmet: connect request for invalid subsystem test! [ 959.031268][T23075] nvme nvme4: Connect Invalid Data Parameter, subsysnqn "test" [ 959.214244][ T44] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 959.214315][ T44] microsoft 0003:045E:07DA.0053: report is too long [ 959.214339][ T44] microsoft 0003:045E:07DA.0053: item 0 4 0 11 parsing failed [ 959.215056][ T44] microsoft 0003:045E:07DA.0053: parse failed [ 959.215149][ T44] microsoft 0003:045E:07DA.0053: probe with driver microsoft failed with error -22 [ 959.500615][ T5765] usb 2-1: USB disconnect, device number 97 [ 960.106441][T23084] binder: 23083:23084 ioctl c0306201 0 returned -14 [ 960.291879][T23091] binder: 23083:23091 ioctl c0306201 0 returned -14 [ 960.350660][T16830] nvmet: connect request for invalid subsystem test! [ 960.350827][T23085] nvme nvme4: Connect Invalid Data Parameter, subsysnqn "test" [ 960.755290][T23104] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 961.029833][T23110] loop0: detected capacity change from 0 to 1 [ 961.050939][T23110] loop0: [ 961.050978][T23110] loop0: partition table partially beyond EOD, truncated [ 961.156093][T23115] FAULT_INJECTION: forcing a failure. [ 961.156093][T23115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 961.170234][T23115] CPU: 1 UID: 0 PID: 23115 Comm: syz.3.4677 Tainted: G L syzkaller #0 PREEMPT(full) [ 961.170265][T23115] Tainted: [L]=SOFTLOCKUP [ 961.170273][T23115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 961.170286][T23115] Call Trace: [ 961.170295][T23115] [ 961.170304][T23115] dump_stack_lvl+0xe8/0x150 [ 961.170335][T23115] should_fail_ex+0x3eb/0x540 [ 961.170370][T23115] _copy_from_user+0x2d/0xb0 [ 961.170393][T23115] kstrtouint_from_user+0xd6/0x180 [ 961.170424][T23115] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 961.170461][T23115] ? lock_acquire+0x115/0x350 [ 961.170496][T23115] proc_fail_nth_write+0x8e/0x210 [ 961.170524][T23115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 961.170560][T23115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 961.170587][T23115] vfs_write+0x296/0xba0 [ 961.170622][T23115] ? __pfx_vfs_write+0x10/0x10 [ 961.170649][T23115] ? __fget_files+0x2a/0x420 [ 961.170676][T23115] ? __fget_files+0x3a2/0x420 [ 961.170696][T23115] ? __fget_files+0x2a/0x420 [ 961.170729][T23115] ksys_write+0x150/0x270 [ 961.170755][T23115] ? __pfx_ksys_write+0x10/0x10 [ 961.170779][T23115] ? __pfx_v4l2_ioctl+0x10/0x10 [ 961.170818][T23115] do_syscall_64+0x166/0x520 [ 961.170839][T23115] ? trace_irq_disable+0x3b/0x140 [ 961.170867][T23115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.170885][T23115] ? clear_bhb_loop+0x70/0xc0 [ 961.170908][T23115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.170926][T23115] RIP: 0033:0x7fa4d455e98e [ 961.170944][T23115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 961.170959][T23115] RSP: 002b:00007fa4d5523fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 961.170980][T23115] RAX: ffffffffffffffda RBX: 00007fa4d55246c0 RCX: 00007fa4d455e98e [ 961.170995][T23115] RDX: 0000000000000001 RSI: 00007fa4d55240a0 RDI: 0000000000000005 [ 961.171016][T23115] RBP: 00007fa4d5524090 R08: 0000000000000000 R09: 0000000000000000 [ 961.171028][T23115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.171040][T23115] R13: 00007fa4d4826038 R14: 00007fa4d4825fa0 R15: 00007ffe1697f028 [ 961.171071][T23115] [ 961.655707][ T25] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 961.735708][ T44] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 961.826363][ T25] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 961.838627][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 961.838697][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 961.838742][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.873600][T16830] nvmet: connect request for invalid subsystem testsubs! [ 961.883547][ T25] usb 5-1: config 0 descriptor?? [ 961.884917][T23125] nvme nvme4: Connect Invalid Data Parameter, subsysnqn "testsubs" [ 961.897575][ T44] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 961.908140][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.908199][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 961.908300][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.946653][ T44] usb 4-1: config 0 descriptor?? [ 961.957051][ T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 962.150734][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4679'. [ 962.150776][T23119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4679'. [ 962.150813][T23119] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 962.399764][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.399818][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.399861][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.399891][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.399920][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.399950][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.399979][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.400008][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.400036][ T25] uclogic 0003:5543:0781.0054: unknown main item tag 0x0 [ 962.474596][ T25] uclogic 0003:5543:0781.0054: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 962.603893][ T25] usb 5-1: USB disconnect, device number 38 [ 962.619396][T23130] FAULT_INJECTION: forcing a failure. [ 962.619396][T23130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.633215][T23130] CPU: 1 UID: 0 PID: 23130 Comm: syz.1.4683 Tainted: G L syzkaller #0 PREEMPT(full) [ 962.633245][T23130] Tainted: [L]=SOFTLOCKUP [ 962.633253][T23130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.633265][T23130] Call Trace: [ 962.633274][T23130] [ 962.633281][T23130] dump_stack_lvl+0xe8/0x150 [ 962.633313][T23130] should_fail_ex+0x3eb/0x540 [ 962.633346][T23130] _copy_from_iter+0x1d3/0x1660 [ 962.633374][T23130] ? __might_fault+0xaf/0x130 [ 962.633402][T23130] ? _copy_from_iter+0x21b/0x1660 [ 962.633431][T23130] ? __pfx__copy_from_iter+0x10/0x10 [ 962.633464][T23130] ? __pfx__copy_from_iter+0x10/0x10 [ 962.633499][T23130] copy_page_from_iter+0x219/0x2d0 [ 962.633532][T23130] skb_copy_datagram_from_iter+0x2f4/0x720 [ 962.633573][T23130] tun_get_user+0xc7f/0x44d0 [ 962.633610][T23130] ? aa_file_perm+0x18b/0x15f0 [ 962.633635][T23130] ? aa_file_perm+0x4ed/0x15f0 [ 962.633655][T23130] ? __pfx_tun_get_user+0x10/0x10 [ 962.633678][T23130] ? __lock_acquire+0x6df/0x2e50 [ 962.633708][T23130] ? kstrtoull+0x137/0x1d0 [ 962.633739][T23130] ? ref_tracker_alloc+0x341/0x4b0 [ 962.633758][T23130] ? lock_acquire+0x115/0x350 [ 962.633794][T23130] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 962.633815][T23130] ? lock_acquire+0x115/0x350 [ 962.633843][T23130] ? tun_get+0x1c/0x2f0 [ 962.633868][T23130] ? tun_get+0x1c/0x2f0 [ 962.633889][T23130] ? tun_get+0x1c/0x2f0 [ 962.633913][T23130] tun_chr_write_iter+0x113/0x200 [ 962.633937][T23130] vfs_write+0x612/0xba0 [ 962.633973][T23130] ? __pfx_vfs_write+0x10/0x10 [ 962.634007][T23130] ? __fget_files+0x2a/0x420 [ 962.634038][T23130] ksys_write+0x150/0x270 [ 962.634065][T23130] ? __pfx_ksys_write+0x10/0x10 [ 962.634100][T23130] do_syscall_64+0x166/0x520 [ 962.634121][T23130] ? trace_irq_disable+0x3b/0x140 [ 962.634148][T23130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.634168][T23130] ? clear_bhb_loop+0x70/0xc0 [ 962.634192][T23130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.634211][T23130] RIP: 0033:0x7f57e4f9e159 [ 962.634229][T23130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.634247][T23130] RSP: 002b:00007f57e5f41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 962.634268][T23130] RAX: ffffffffffffffda RBX: 00007f57e5225fa0 RCX: 00007f57e4f9e159 [ 962.634283][T23130] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 962.634296][T23130] RBP: 00007f57e5f41090 R08: 0000000000000000 R09: 0000000000000000 [ 962.634308][T23130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 962.634320][T23130] R13: 00007f57e5226038 R14: 00007f57e5225fa0 R15: 00007fff63e44418 [ 962.634351][T23130] [ 963.266831][T23135] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 963.520029][T23139] syzkaller1: entered promiscuous mode [ 963.520066][T23139] syzkaller1: entered allmulticast mode [ 963.742810][T23143] FAULT_INJECTION: forcing a failure. [ 963.742810][T23143] name failslab, interval 1, probability 0, space 0, times 0 [ 963.742876][T23143] CPU: 0 UID: 0 PID: 23143 Comm: syz.4.4688 Tainted: G L syzkaller #0 PREEMPT(full) [ 963.742905][T23143] Tainted: [L]=SOFTLOCKUP [ 963.742912][T23143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.742924][T23143] Call Trace: [ 963.742931][T23143] [ 963.742939][T23143] dump_stack_lvl+0xe8/0x150 [ 963.742969][T23143] should_fail_ex+0x3eb/0x540 [ 963.743003][T23143] should_failslab+0xa8/0x100 [ 963.743023][T23143] ? skb_clone+0x212/0x3a0 [ 963.743049][T23143] kmem_cache_alloc_noprof+0xa1/0x600 [ 963.743077][T23143] ? skb_clone+0x212/0x3a0 [ 963.743108][T23143] skb_clone+0x212/0x3a0 [ 963.743137][T23143] __netlink_deliver_tap+0x413/0x860 [ 963.743177][T23143] ? netlink_deliver_tap+0x2e/0x1b0 [ 963.743206][T23143] netlink_deliver_tap+0x19c/0x1b0 [ 963.743233][T23143] netlink_sendskb+0x68/0x140 [ 963.743260][T23143] netlink_rcv_skb+0x2a4/0x4a0 [ 963.743287][T23143] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 963.743315][T23143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 963.743352][T23143] ? bpf_lsm_capable+0x9/0x20 [ 963.743376][T23143] ? security_capable+0x7e/0x2c0 [ 963.743412][T23143] nfnetlink_rcv+0x2b9/0x28c0 [ 963.743439][T23143] ? __dev_queue_xmit+0x29b/0x3820 [ 963.743471][T23143] ? __local_bh_enable_ip+0xd6/0x140 [ 963.743493][T23143] ? lockdep_hardirqs_on+0x7b/0x110 [ 963.743514][T23143] ? __dev_queue_xmit+0x29b/0x3820 [ 963.743538][T23143] ? __local_bh_enable_ip+0xd6/0x140 [ 963.743558][T23143] ? __dev_queue_xmit+0x29b/0x3820 [ 963.743583][T23143] ? __dev_queue_xmit+0x1edc/0x3820 [ 963.743609][T23143] ? do_syscall_64+0x166/0x520 [ 963.743628][T23143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.743658][T23143] ? __dev_queue_xmit+0x29b/0x3820 [ 963.743685][T23143] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 963.743723][T23143] ? __pfx___dev_queue_xmit+0x10/0x10 [ 963.743755][T23143] ? ref_tracker_free+0x689/0x830 [ 963.743777][T23143] ? __pfx_ref_tracker_free+0x10/0x10 [ 963.743796][T23143] ? __asan_memcpy+0x40/0x70 [ 963.743820][T23143] ? __skb_clone+0x5c/0x6c0 [ 963.743848][T23143] ? __skb_clone+0x449/0x6c0 [ 963.743879][T23143] ? skb_clone+0x246/0x3a0 [ 963.743907][T23143] ? __netlink_deliver_tap+0x811/0x860 [ 963.743933][T23143] ? netlink_deliver_tap+0x2e/0x1b0 [ 963.743965][T23143] ? netlink_deliver_tap+0x2e/0x1b0 [ 963.743992][T23143] ? netlink_deliver_tap+0x2e/0x1b0 [ 963.744024][T23143] netlink_unicast+0x7bd/0x940 [ 963.744058][T23143] netlink_sendmsg+0x813/0xb40 [ 963.744094][T23143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.744129][T23143] ? apparmor_socket_sendmsg+0x98/0x360 [ 963.744156][T23143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.744182][T23143] sock_sendmsg_nosec+0x13a/0x180 [ 963.744216][T23143] ____sys_sendmsg+0x54e/0x850 [ 963.744246][T23143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 963.744278][T23143] ? import_iovec+0x73/0xa0 [ 963.744302][T23143] ___sys_sendmsg+0x2a5/0x360 [ 963.744325][T23143] ? __lock_acquire+0x6df/0x2e50 [ 963.744356][T23143] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.744414][T23143] ? __fget_files+0x2a/0x420 [ 963.744436][T23143] ? __fget_files+0x3a2/0x420 [ 963.744467][T23143] __x64_sys_sendmsg+0x1b1/0x290 [ 963.744494][T23143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 963.744539][T23143] do_syscall_64+0x166/0x520 [ 963.744558][T23143] ? trace_irq_disable+0x3b/0x140 [ 963.744584][T23143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.744604][T23143] ? clear_bhb_loop+0x70/0xc0 [ 963.744628][T23143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.744647][T23143] RIP: 0033:0x7f78b799e159 [ 963.744664][T23143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.744681][T23143] RSP: 002b:00007f78b87fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.744701][T23143] RAX: ffffffffffffffda RBX: 00007f78b7c25fa0 RCX: 00007f78b799e159 [ 963.744722][T23143] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 963.744735][T23143] RBP: 00007f78b87fd090 R08: 0000000000000000 R09: 0000000000000000 [ 963.744747][T23143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.744759][T23143] R13: 00007f78b7c26038 R14: 00007f78b7c25fa0 R15: 00007ffdbb2ebdc8 [ 963.744789][T23143] [ 964.107484][T23145] Unsupported ieee802154 address type: 0 [ 964.560957][ T5765] usb 4-1: USB disconnect, device number 56 [ 965.055591][ T5765] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 965.111282][T23162] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 965.215424][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 965.222621][ T5765] usb 4-1: unable to get BOS descriptor or descriptor too short [ 965.222692][ T5765] usb 4-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 965.240590][ T5765] usb 4-1: config 2 has an invalid interface number: 99 but max is 0 [ 965.240628][ T5765] usb 4-1: config 2 has no interface number 0 [ 965.240685][ T5765] usb 4-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 965.240718][ T5765] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 965.240746][ T5765] usb 4-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.240769][ T5765] usb 4-1: config 2 interface 99 has no altsetting 0 [ 965.297824][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.297864][ T5765] usb 4-1: Product: syz [ 965.297896][ T5765] usb 4-1: Manufacturer: syz [ 965.297915][ T5765] usb 4-1: SerialNumber: syz [ 965.642038][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 965.654395][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 965.658664][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 965.667178][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 965.667802][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 965.715730][T23169] cifs: Unknown parameter 'ӭ'4,Zz-#F<]%gC [ 965.715730][T23169] SȘȞZ6' [ 965.846790][T23153] syz.3.4693 (23153): drop_caches: 2 [ 965.959194][ T5765] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.99/input/input115 [ 965.991182][ T5765] usb 4-1: USB disconnect, device number 57 [ 965.991357][ C0] xpad 4-1:2.99: xpad_irq_in - usb_submit_urb failed with result -19 [ 966.343663][T23172] lo speed is unknown, defaulting to 1000 [ 966.445875][ T25] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 966.635622][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 966.641277][ T25] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 966.651402][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 966.651458][ T25] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.651498][ T25] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 966.651528][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 966.651564][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.656843][ T25] usb 5-1: config 0 descriptor?? [ 966.815452][ T191] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 966.930692][T23193] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.977874][ T191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 966.978456][ T191] usb 2-1: not running at top speed; connect to a high speed hub [ 966.978494][ T191] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=36.a1 [ 966.980083][ T191] usb 2-1: config 4 has an invalid interface number: 84 but max is 0 [ 966.980106][ T191] usb 2-1: config 4 has no interface number 0 [ 966.980144][ T191] usb 2-1: config 4 interface 84 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 966.980170][ T191] usb 2-1: config 4 interface 84 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 966.980195][ T191] usb 2-1: config 4 interface 84 has no altsetting 0 [ 966.982585][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.982607][ T191] usb 2-1: Product: syz [ 966.982622][ T191] usb 2-1: Manufacturer: syz [ 966.982636][ T191] usb 2-1: SerialNumber: syz [ 967.079405][ T25] bigben 0003:146B:0902.0055: unexpected rdesc, please submit for review [ 967.090040][ T25] bigben 0003:146B:0902.0055: missing HID_OUTPUT_REPORT 0 [ 967.093596][T23195] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 967.098143][ T25] bigben 0003:146B:0902.0055: no output report found [ 967.124325][ T25] bigben 0003:146B:0902.0055: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 967.209361][T23193] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.309559][ T8213] usb 5-1: USB disconnect, device number 39 [ 967.382181][T23193] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.477381][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 967.511197][ T191] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 967.522844][ T191] usb 2-1: USB disconnect, device number 98 [ 967.562296][T23172] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.562483][T23172] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.562616][T23172] bridge_slave_0: entered allmulticast mode [ 967.564284][T23172] bridge_slave_0: entered promiscuous mode [ 967.566829][T23172] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.566923][T23172] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.567040][T23172] bridge_slave_1: entered allmulticast mode [ 967.568725][T23172] bridge_slave_1: entered promiscuous mode [ 967.599212][T23172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.601810][T23172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.656394][T23193] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.666360][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 967.671954][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 967.676992][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 967.677033][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 967.677059][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 967.677091][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.682382][ T10] usb 4-1: config 0 descriptor?? [ 967.740555][T23172] team0: Port device team_slave_0 added [ 967.744578][T23172] team0: Port device team_slave_1 added [ 967.774733][T23172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.777903][T23172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.777932][T23172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.780781][T23172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.780795][T23172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.780820][T23172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.805529][ T52] Bluetooth: hci4: command tx timeout [ 967.888722][T23172] hsr_slave_0: entered promiscuous mode [ 967.891885][T23172] hsr_slave_1: entered promiscuous mode [ 967.893031][T23172] debugfs: 'hsr0' already exists in 'hsr' [ 967.893048][T23172] Cannot create hsr debugfs directory [ 968.106738][ T10] logitech-djreceiver 0003:046D:C51B.0056: ignoring exceeding usage max [ 968.345655][T23193] bridge_slave_1: left allmulticast mode [ 968.353215][T23193] bridge_slave_1: left promiscuous mode [ 968.353454][T23193] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.387833][T23193] bridge_slave_0: left allmulticast mode [ 968.387860][T23193] bridge_slave_0: left promiscuous mode [ 968.388074][T23193] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.846991][T23193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.905780][T23193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.938984][T23193] bond0 (unregistering): Released all slaves [ 969.027904][ T191] usb 4-1: USB disconnect, device number 58 [ 969.200389][ T5285] 8021q: adding VLAN 0 to HW filter on device eth9 [ 969.395327][T23193] tipc: Left network mode [ 969.556381][ T8213] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 969.747500][ T8213] usb 2-1: unable to get BOS descriptor or descriptor too short [ 969.766746][ T8213] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 969.776951][ T8213] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 969.776985][ T8213] usb 2-1: can't read configurations, error -71 [ 969.885270][ T52] Bluetooth: hci4: command tx timeout [ 969.994379][T23258] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4716'. [ 970.243626][T23271] jffs2: notice: (23271) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 970.264816][T23271] FAULT_INJECTION: forcing a failure. [ 970.264816][T23271] name failslab, interval 1, probability 0, space 0, times 0 [ 970.291063][T23271] CPU: 0 UID: 0 PID: 23271 Comm: syz.4.4718 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.291094][T23271] Tainted: [L]=SOFTLOCKUP [ 970.291102][T23271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.291114][T23271] Call Trace: [ 970.291123][T23271] [ 970.291132][T23271] dump_stack_lvl+0xe8/0x150 [ 970.291163][T23271] should_fail_ex+0x3eb/0x540 [ 970.291197][T23271] should_failslab+0xa8/0x100 [ 970.291219][T23271] __kmalloc_noprof+0xfe/0x720 [ 970.291254][T23271] ? load_xattr_datum+0x347/0xaf0 [ 970.291278][T23271] ? load_xattr_datum+0x347/0xaf0 [ 970.291309][T23271] load_xattr_datum+0x347/0xaf0 [ 970.291353][T23271] ? __pfx_load_xattr_datum+0x10/0x10 [ 970.291378][T23271] ? kasan_save_track+0x4f/0x80 [ 970.291405][T23271] ? kasan_save_track+0x3e/0x80 [ 970.291431][T23271] ? __kasan_slab_alloc+0x6c/0x80 [ 970.291450][T23271] ? inode_init_always_gfp+0x97e/0xd30 [ 970.291477][T23271] check_xattr_ref_inode+0x11d/0x720 ** replaying previous printk message ** [ 970.291477][T23271] check_xattr_ref_inode+0x11d/0x720 [ 970.291502][T23271] ? get_cached_acl+0xe4/0x550 [ 970.291633][T23271] do_jffs2_getxattr+0x97/0x4d0 [ 970.291660][T23271] ? get_cached_acl+0x4fa/0x550 [ 970.291690][T23271] jffs2_get_acl+0x84/0xb30 [ 970.291713][T23271] ? __mutex_trylock_common+0x15f/0x270 [ 970.291741][T23271] ? __pfx_jffs2_get_acl+0x10/0x10 [ 970.291765][T23271] __get_acl+0x27e/0x410 [ 970.291791][T23271] ? __pfx___get_acl+0x10/0x10 [ 970.291815][T23271] ? __mutex_lock+0x30b/0x1550 [ 970.291839][T23271] ? security_inode_alloc+0x39/0x310 [ 970.291857][T23271] ? kmem_cache_alloc_noprof+0x156/0x600 [ 970.291882][T23271] posix_acl_create+0x134/0x4a0 [ 970.291909][T23271] jffs2_init_acl_pre+0xc3/0x290 [ 970.291932][T23271] ? from_kgid+0x1c6/0x660 [ 970.291954][T23271] ? __pfx_jffs2_init_acl_pre+0x10/0x10 [ 970.291976][T23271] ? __pfx_from_kgid+0x10/0x10 [ 970.292006][T23271] jffs2_new_inode+0x438/0xd40 [ 970.292032][T23271] ? __pfx_jffs2_new_inode+0x10/0x10 [ 970.292046][T23271] ? jffs2_create+0x21/0x320 [ 970.292063][T23271] ? add_memory_resource+0x1f/0x60 [ 970.292080][T23271] ? jffs2_create+0x21/0x320 [ 970.292103][T23271] jffs2_create+0x87/0x320 [ 970.292123][T23271] lookup_open+0xc0d/0x1a40 [ 970.292169][T23271] path_openat+0x677/0x1d60 [ 970.292208][T23271] do_file_open+0x23e/0x4a0 [ 970.292234][T23271] ? __pfx_do_file_open+0x10/0x10 [ 970.292282][T23271] ? _raw_spin_unlock+0x28/0x50 [ 970.292305][T23271] ? alloc_fd+0x651/0x6c0 [ 970.292332][T23271] do_sys_openat2+0x115/0x200 [ 970.292352][T23271] ? __pfx_do_sys_openat2+0x10/0x10 [ 970.292370][T23271] ? ksys_write+0x242/0x270 [ 970.292393][T23271] ? __pfx_ksys_write+0x10/0x10 [ 970.292417][T23271] __x64_sys_openat+0x138/0x170 [ 970.292439][T23271] do_syscall_64+0x166/0x520 [ 970.292457][T23271] ? trace_irq_disable+0x3b/0x140 [ 970.292482][T23271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.292500][T23271] ? clear_bhb_loop+0x70/0xc0 [ 970.292521][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.292537][T23271] RIP: 0033:0x7f78b799e159 [ 970.292553][T23271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.292568][T23271] RSP: 002b:00007f78b87fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 970.292589][T23271] RAX: ffffffffffffffda RBX: 00007f78b7c25fa0 RCX: 00007f78b799e159 [ 970.292604][T23271] RDX: 0000000000000042 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 970.292617][T23271] RBP: 00007f78b87fd090 R08: 0000000000000000 R09: 0000000000000000 [ 970.292630][T23271] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 970.292643][T23271] R13: 00007f78b7c26038 R14: 00007f78b7c25fa0 R15: 00007ffdbb2ebdc8 [ 970.292673][T23271] [ 970.329338][T23273] loop3: detected capacity change from 0 to 2049 [ 970.364204][T23271] ================================================================== [ 970.364218][T23271] BUG: KASAN: slab-use-after-free in jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 970.364247][T23271] Read of size 4 at addr ffff88806273b968 by task syz.4.4718/23271 [ 970.364263][T23271] [ 970.364276][T23271] CPU: 1 UID: 0 PID: 23271 Comm: syz.4.4718 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.364301][T23271] Tainted: [L]=SOFTLOCKUP [ 970.364308][T23271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.364320][T23271] Call Trace: [ 970.364328][T23271] [ 970.364336][T23271] dump_stack_lvl+0xe8/0x150 [ 970.364360][T23271] print_address_description+0x55/0x1e0 [ 970.364387][T23271] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 970.364408][T23271] print_report+0x58/0x70 [ 970.364431][T23271] kasan_report+0x117/0x150 [ 970.364452][T23271] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 970.364478][T23271] jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 970.364504][T23271] jffs2_do_clear_inode+0x58/0x390 [ 970.364530][T23271] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 970.364558][T23271] evict+0x624/0xb50 [ 970.364589][T23271] ? __pfx_evict+0x10/0x10 [ 970.364614][T23271] ? do_raw_spin_unlock+0xf5/0x200 [ 970.364638][T23271] ? _raw_spin_unlock+0x28/0x50 [ 970.364665][T23271] ? iput+0xb84/0xf00 [ 970.364689][T23271] jffs2_new_inode+0x49c/0xd40 [ 970.364711][T23271] ? __pfx_jffs2_new_inode+0x10/0x10 [ 970.364727][T23271] ? jffs2_create+0x21/0x320 [ 970.364752][T23271] ? add_memory_resource+0x1f/0x60 [ 970.364774][T23271] ? jffs2_create+0x21/0x320 [ 970.364797][T23271] jffs2_create+0x87/0x320 [ 970.364817][T23271] lookup_open+0xc0d/0x1a40 [ 970.364853][T23271] path_openat+0x677/0x1d60 [ 970.364887][T23271] do_file_open+0x23e/0x4a0 [ 970.364913][T23271] ? __pfx_do_file_open+0x10/0x10 [ 970.364947][T23271] ? _raw_spin_unlock+0x28/0x50 [ 970.364973][T23271] ? alloc_fd+0x651/0x6c0 [ 970.364997][T23271] do_sys_openat2+0x115/0x200 [ 970.365017][T23271] ? __pfx_do_sys_openat2+0x10/0x10 [ 970.365037][T23271] ? ksys_write+0x242/0x270 [ 970.365060][T23271] ? __pfx_ksys_write+0x10/0x10 [ 970.365084][T23271] __x64_sys_openat+0x138/0x170 [ 970.365107][T23271] do_syscall_64+0x166/0x520 [ 970.365125][T23271] ? trace_irq_disable+0x3b/0x140 [ 970.365153][T23271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.365171][T23271] ? clear_bhb_loop+0x70/0xc0 [ 970.365192][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.365211][T23271] RIP: 0033:0x7f78b799e159 [ 970.365226][T23271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.365242][T23271] RSP: 002b:00007f78b87fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 970.365263][T23271] RAX: ffffffffffffffda RBX: 00007f78b7c25fa0 RCX: 00007f78b799e159 [ 970.365278][T23271] RDX: 0000000000000042 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 970.365291][T23271] RBP: 00007f78b87fd090 R08: 0000000000000000 R09: 0000000000000000 [ 970.365305][T23271] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 970.365316][T23271] R13: 00007f78b7c26038 R14: 00007f78b7c25fa0 R15: 00007ffdbb2ebdc8 [ 970.365338][T23271] [ 970.365345][T23271] [ 970.365358][T23271] Allocated by task 14147: [ 970.365367][T23271] kasan_save_track+0x3e/0x80 [ 970.365393][T23271] __kasan_slab_alloc+0x6c/0x80 [ 970.365407][T23271] kmem_cache_alloc_noprof+0x2b9/0x600 [ 970.365428][T23271] jffs2_scan_make_ino_cache+0x89/0x1d0 [ 970.365453][T23271] jffs2_scan_medium+0x2b58/0x70c0 [ 970.365477][T23271] jffs2_do_mount_fs+0x775/0x22c0 [ 970.365501][T23271] jffs2_do_fill_super+0x555/0xc50 [ 970.365516][T23271] mtd_get_sb+0x18a/0x410 [ 970.365632][T23271] get_tree_mtd+0x597/0x7d0 [ 970.365657][T23271] vfs_get_tree+0x92/0x2a0 [ 970.365679][T23271] do_new_mount+0x319/0xdc0 [ 970.365696][T23271] __se_sys_mount+0x31d/0x420 [ 970.365715][T23271] do_syscall_64+0x166/0x520 [ 970.365739][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.365756][T23271] [ 970.365761][T23271] Freed by task 8027: [ 970.365770][T23271] kasan_save_track+0x3e/0x80 [ 970.365794][T23271] kasan_save_free_info+0x40/0x50 [ 970.365814][T23271] __kasan_slab_free+0x5c/0x80 [ 970.365838][T23271] kmem_cache_free+0x182/0x650 [ 970.365862][T23271] jffs2_free_ino_caches+0xec/0x1c0 [ 970.365882][T23271] jffs2_put_super+0x6c/0x170 [ 970.365898][T23271] generic_shutdown_super+0x13d/0x2d0 [ 970.365918][T23271] kill_mtd_super+0x23/0x70 [ 970.365931][T23271] jffs2_kill_sb+0x96/0xb0 [ 970.365946][T23271] deactivate_locked_super+0xbc/0x110 [ 970.365965][T23271] cleanup_mnt+0x3d3/0x460 [ 970.365987][T23271] task_work_run+0x1d9/0x270 [ 970.366013][T23271] exit_to_user_mode_loop+0x204/0x770 [ 970.366037][T23271] do_syscall_64+0x328/0x520 [ 970.366055][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.366072][T23271] [ 970.366077][T23271] The buggy address belongs to the object at ffff88806273b940 [ 970.366077][T23271] which belongs to the cache jffs2_inode_cache of size 48 [ 970.366094][T23271] The buggy address is located 40 bytes inside of [ 970.366094][T23271] freed 48-byte region [ffff88806273b940, ffff88806273b970) [ 970.366114][T23271] [ 970.366118][T23271] The buggy address belongs to the physical page: [ 970.366129][T23271] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806273b3c0 pfn:0x6273b [ 970.366148][T23271] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 970.366164][T23271] page_type: f5(slab) [ 970.366181][T23271] raw: 00fff00000000200 ffff888140ab5c80 ffff88801e3a8708 ffffea0001e73550 [ 970.366198][T23271] raw: ffff88806273b3c0 0000000200400031 00000000f5000000 0000000000000000 [ 970.366207][T23271] page dumped because: kasan: bad access detected [ 970.366217][T23271] page_owner tracks the page as allocated [ 970.366224][T23271] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9782, tgid 9780 (syz.0.898), ts 248485156433 [ 970.366252][T23271] post_alloc_hook+0x1f9/0x250 [ 970.366274][T23271] get_page_from_freelist+0x2209/0x2280 [ 970.366299][T23271] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 970.366324][T23271] allocate_slab+0x7d/0x620 [ 970.366342][T23271] refill_objects+0x2d5/0x350 [ 970.366360][T23271] __pcs_replace_empty_main+0x2c8/0x6c0 [ 970.366377][T23271] kmem_cache_alloc_noprof+0x399/0x600 [ 970.366399][T23271] jffs2_do_read_inode+0x33f/0x6a0 [ 970.366421][T23271] jffs2_iget+0x228/0xcc0 [ 970.366445][T23271] jffs2_do_fill_super+0x59d/0xc50 [ 970.366460][T23271] mtd_get_sb+0x18a/0x410 [ 970.366484][T23271] get_tree_mtd+0x597/0x7d0 [ 970.366509][T23271] vfs_get_tree+0x92/0x2a0 [ 970.366531][T23271] do_new_mount+0x319/0xdc0 [ 970.366548][T23271] __se_sys_mount+0x31d/0x420 [ 970.366566][T23271] do_syscall_64+0x166/0x520 [ 970.366584][T23271] page last free pid 9784 tgid 9784 ts 248483591325 stack trace: [ 970.366597][T23271] __free_frozen_pages+0xc93/0xd90 [ 970.366619][T23271] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 970.366642][T23271] alloc_vmap_area+0xd1a/0x1420 [ 970.366660][T23271] __get_vm_area_node+0x200/0x2f0 [ 970.366679][T23271] __vmalloc_node_range_noprof+0x343/0x1540 [ 970.366701][T23271] __vmalloc_node_noprof+0xc2/0x100 [ 970.366722][T23271] dup_task_struct+0x2c6/0xa00 [ 970.366747][T23271] copy_process+0x820/0x43e0 [ 970.366764][T23271] kernel_clone+0x2d7/0x940 [ 970.366783][T23271] __se_sys_clone3+0x33c/0x360 [ 970.366804][T23271] do_syscall_64+0x166/0x520 [ 970.366821][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.366838][T23271] [ 970.366843][T23271] Memory state around the buggy address: [ 970.366853][T23271] ffff88806273b800: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 970.366865][T23271] ffff88806273b880: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 970.366877][T23271] >ffff88806273b900: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 970.366887][T23271] ^ [ 970.366898][T23271] ffff88806273b980: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 970.366910][T23271] ffff88806273ba00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc [ 970.366920][T23271] ================================================================== [ 970.395206][T23271] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 971.456933][T23271] CPU: 1 UID: 0 PID: 23271 Comm: syz.4.4718 Tainted: G L syzkaller #0 PREEMPT(full) [ 971.467855][T23271] Tainted: [L]=SOFTLOCKUP [ 971.472166][T23271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 971.482203][T23271] Call Trace: [ 971.485467][T23271] [ 971.488387][T23271] vpanic+0x56d/0xa60 [ 971.492365][T23271] ? __pfx_vpanic+0x10/0x10 [ 971.496864][T23271] panic+0xc5/0xd0 [ 971.500579][T23271] ? __pfx_panic+0x10/0x10 [ 971.504985][T23271] ? preempt_schedule_thunk+0x16/0x40 [ 971.510350][T23271] ? preempt_schedule_thunk+0x16/0x40 [ 971.515713][T23271] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 971.521424][T23271] check_panic_on_warn+0x89/0xb0 [ 971.526351][T23271] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 971.532058][T23271] end_report+0x73/0x170 [ 971.536285][T23271] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 971.541991][T23271] kasan_report+0x128/0x150 [ 971.546479][T23271] ? jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 971.552187][T23271] jffs2_xattr_delete_inode+0x2c8/0x2d0 [ 971.557722][T23271] jffs2_do_clear_inode+0x58/0x390 [ 971.562823][T23271] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 971.568272][T23271] evict+0x624/0xb50 [ 971.572163][T23271] ? __pfx_evict+0x10/0x10 [ 971.576574][T23271] ? do_raw_spin_unlock+0xf5/0x200 [ 971.581673][T23271] ? _raw_spin_unlock+0x28/0x50 [ 971.586517][T23271] ? iput+0xb84/0xf00 [ 971.590489][T23271] jffs2_new_inode+0x49c/0xd40 [ 971.595242][T23271] ? __pfx_jffs2_new_inode+0x10/0x10 [ 971.600508][T23271] ? jffs2_create+0x21/0x320 [ 971.605083][T23271] ? add_memory_resource+0x1f/0x60 [ 971.610179][T23271] ? jffs2_create+0x21/0x320 [ 971.614757][T23271] jffs2_create+0x87/0x320 [ 971.619161][T23271] lookup_open+0xc0d/0x1a40 [ 971.623666][T23271] path_openat+0x677/0x1d60 [ 971.628166][T23271] do_file_open+0x23e/0x4a0 [ 971.632659][T23271] ? __pfx_do_file_open+0x10/0x10 [ 971.637681][T23271] ? _raw_spin_unlock+0x28/0x50 [ 971.642523][T23271] ? alloc_fd+0x651/0x6c0 [ 971.646845][T23271] do_sys_openat2+0x115/0x200 [ 971.651512][T23271] ? __pfx_do_sys_openat2+0x10/0x10 [ 971.656697][T23271] ? ksys_write+0x242/0x270 [ 971.661190][T23271] ? __pfx_ksys_write+0x10/0x10 [ 971.666030][T23271] __x64_sys_openat+0x138/0x170 [ 971.670867][T23271] do_syscall_64+0x166/0x520 [ 971.675440][T23271] ? trace_irq_disable+0x3b/0x140 [ 971.680453][T23271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.686503][T23271] ? clear_bhb_loop+0x70/0xc0 [ 971.691168][T23271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.697043][T23271] RIP: 0033:0x7f78b799e159 [ 971.701444][T23271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.721032][T23271] RSP: 002b:00007f78b87fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 971.729440][T23271] RAX: ffffffffffffffda RBX: 00007f78b7c25fa0 RCX: 00007f78b799e159 [ 971.737404][T23271] RDX: 0000000000000042 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 971.745360][T23271] RBP: 00007f78b87fd090 R08: 0000000000000000 R09: 0000000000000000 [ 971.753319][T23271] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 971.761272][T23271] R13: 00007f78b7c26038 R14: 00007f78b7c25fa0 R15: 00007ffdbb2ebdc8 [ 971.769242][T23271] [ 971.772476][T23271] Kernel Offset: disabled [ 971.776782][T23271] Rebooting in 86400 seconds..