last executing test programs: 13m57.706681734s ago: executing program 32 (id=583): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) sendto(r0, 0x0, 0x66, 0x4080, &(0x7f0000000080)=@caif, 0x80) 11m22.261747283s ago: executing program 33 (id=2081): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x3, 0x154, 0x0, r7}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x42, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000000000000000000a1c0000000b0a010300000000000000000500000908000440e0ffff0320000000120a01010000000000000000010000060900010073797a3100000000140000001100010000000000000000000500000a"], 0x64}}, 0x6) mount$fuse(0x0, 0x0, 0x0, 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,u']) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r12, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r12, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r12, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r12, 0x0, 0x2c, &(0x7f0000000000)={0x10002, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) syz_kvm_setup_cpu$x86(r1, r10, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f01a6b9fc0300000f324500a2be252f8a094d36420f705626002e660f3a176a4b00b9800100c035f70000000f22c067420f01c3460f79c20cb8b8010000000f01d945c194710a00000005c6828b44bcae0090", 0x5b}], 0x1, 0x9, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0xbe2}], 0x1) 11m16.647993007s ago: executing program 34 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f00000009c0)=""/204, 0xcc}, {&(0x7f0000004580)=""/4136, 0x1028}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/98, 0x62}, {&(0x7f0000003880)=""/38, 0x26}, {&(0x7f00000038c0)=""/208, 0xd0}, {&(0x7f00000039c0)=""/246, 0xf6}, {&(0x7f0000003ac0)=""/113, 0x71}, {&(0x7f0000003b40)=""/162, 0xa2}, {&(0x7f0000003c00)=""/193, 0xc1}], 0xd}, 0x1000}], 0x1, 0x40000100, 0x0) 8m23.595736592s ago: executing program 35 (id=3200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) fremovexattr(r0, &(0x7f0000000a40)=@known='user.incfs.metadata\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sync_file_range(r2, 0x7fff, 0x5, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x20) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff000000070502020002000705"], 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)=0x1) syz_usb_ep_read(r7, 0x2, 0x40, &(0x7f0000000200)) 8m20.513108867s ago: executing program 36 (id=3222): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x14, 0x39, 0x107, 0x70bd25, 0x25dfdbff, {0x19, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c094) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020004000100000000000000040001000000000010000300"], 0x24, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8m17.39853831s ago: executing program 37 (id=3231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xb4f00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) 8m9.042026168s ago: executing program 38 (id=3244): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) 7m47.253841344s ago: executing program 39 (id=3253): r0 = msgget$private(0x0, 0x3be) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001140)={0x14, &(0x7f0000001000)={0x40, 0x3, 0xc6, {0xc6, 0x3, "1c3dd5daaf655fd1f44340876d1f2ed1271f5abde979eb59c9df44f1e55c429928028b4c573d469a2ecb919b68376a2d5a2a21d5c2bd447994a2eeffb80ab2d1c14723f635e20bf37e721e98af79cf12924d573eb910eab0778ab7bad5b13c0672801186da3f927b44571475d2eb7ce57c05c8ed64a3fa07f45e486e1d7ab7dc411b4e6c519f5636cd71d30ba178718a454d97c0517fa0028661a3d8b73625bba3be7ba7e4bc866a783329507f23248c8edeef7522f3e51c421f9ecfbb5916e98aed1961"}}, &(0x7f0000001100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000013c0)={0x44, &(0x7f0000001180)={0x0, 0x1, 0x3d, "33ac62f9c0febb8af61e0ef2f238b2126c21f888343f66355388992178fa4449cda0070e7eac7049b30eca8c4883608174f4c38a0286e20d6c9f981d64"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0xaa}, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0xf, 0x9, 0x0, 0x9, 0x9, 0x1, 0x200, 0x7, 0x100, 0xe6c, 0x3, 0x1}}, &(0x7f00000012c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000001300)={0x20, 0x83, 0x2}, &(0x7f0000001340)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000001380)={0x20, 0x89, 0x2, 0x1}}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000001440)=""/4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001480)={0x0, @in={{0x2, 0x7fff, @multicast2}}}, &(0x7f0000001540)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001580)={r1, 0x1}, 0xc) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f0000001600)={&(0x7f00000015c0)="226296a4b5", 0x5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)=@can, 0x80, &(0x7f0000001740)=[{&(0x7f00000016c0)="16e8472f96d3ad6904c32b4b33120c81f433eb60509246d295bbea62cb669c0d3cef1447eff8a0d89364122c1ba2a00740772ec3c5b859121e0d81163e82e9388259f11ba97a40ce675e03fc281e94de4dc59665669f", 0x56}], 0x1}, 0x40020) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000017c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x254, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x1d, "", [{{0x9, 0x4, 0x0, 0x2b, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x3ff, 0xd, 0x1, {0x22, 0xf7c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x8, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x0, 0x6}}]}}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x310, 0x9, 0x17, 0x6, 0x8, 0x1}, 0x17, &(0x7f0000001840)={0x5, 0xf, 0x17, 0x1, [@generic={0x12, 0x10, 0x1, "2950bd199e9addd780c8ac4db5b803"}]}, 0x2, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x423}}, {0xb8, &(0x7f00000018c0)=@string={0xb8, 0x3, "8c22f7ba4c03294a7df8515ea9dd734b5993a76747713f77c4fd1ff2f01c91c494ec5db94e619474b22808986f2f9fe90051b2820b51a4e90e6f237bb030d4808d9f4c80205c85ad4382f7ddca8f053f00b0d3b921a5097624133a03ce0bae61fdbb1b46af7690c774df146bf1b753a89f5aaff73be01079fb3b6e846a359eb4d8876e1af037604279e6c3bd321fc035cd2822eb784da7ac247c448837f12d0c23b4e8f475cc64f2d2c845e9af6a573d9c2295cba0d2"}}]}) syz_usb_control_io(r2, &(0x7f0000001c40)={0x2c, &(0x7f00000019c0)={0x40, 0xb, 0x80, {0x80, 0x11, "dd269ffeb7a5f1affb177e631f47f3d515a89ea2a4290a1ea993f852ab15b75230e9e4a83a58a6f682693ddc7a20aacb8e772661e1820dc977992cc6c5cbfa3731ab54339462b517952e7d0a3b581d5e79128761247ac9e1e008c17762da5aa1d5e0f50376ab3e341ec05a379ab10fa796039e58f600e898e218dffe0dee"}}, &(0x7f0000001a80)={0x0, 0x3, 0xde, @string={0xde, 0x3, "3c5675c18aacd1b3a25843fe6d59a9312c127cf0c41ba81946e20a8825661e70acb5a175eade0b67cfa2e582612ba974a18c2af84ccba1b520dfe15a3f6bad88c97c029d1dd3808f87f001a49fe7a179973bc91f14746c544f42ebe300829691df6a7af91aab7672b4fb83dd388848947faf65b150093c81b1b06def8990db90b968153eb669cfb44be025b98f2aaca37e7d7a0e49b38c7f62cd5223585ea289ad4955347fc53a0eb58eab0cd8303a95e08fdec057b006348eb930e8c5222745e8c8f676d25abf174f03b73461e02b8ce99420105697ea5d82c28b6b"}}, &(0x7f0000001b80)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2b, "0d6802226d4b54bb5f8e5699dcdb2836"}]}}, &(0x7f0000001bc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x1, 0x2, "50a226c8", "d7affafd"}}, &(0x7f0000001c00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0x5, 0x7, 0x2, 0x2000, 0xff}}}, &(0x7f0000002080)={0x84, &(0x7f0000001c80)={0x0, 0xe, 0x38, "30063dca73f8826a77a6b998ec9cd8351a75cb745626e6ce8e44f2dd269540ca22063929db98482a3f9c3c1f0a15a98bea4cfbacecdc74f4"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x8c}, &(0x7f0000001d40)={0x20, 0x0, 0x4}, &(0x7f0000001d80)={0x20, 0x0, 0x8, {0x2, 0x20, [0xf000]}}, &(0x7f0000001dc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001e00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001e40)={0x40, 0xb, 0x2, "b174"}, &(0x7f0000001e80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001ec0)={0x40, 0x13, 0x6, @random="52f588ff5c14"}, &(0x7f0000001f00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001f40)={0x40, 0x19, 0x2, "b712"}, &(0x7f0000001f80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000001fc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000002000)={0x40, 0x1e, 0x1, 0xe7}, &(0x7f0000002040)={0x40, 0x21, 0x1}}) msgrcv(r0, &(0x7f0000002140)={0x0, ""/83}, 0x5b, 0x2, 0xd22c65351c6b21fd) msgsnd(r0, &(0x7f00000021c0)={0x1, "2e6cc5377dab7f1f1e1fae87698436887d9002ab55ba36553daf0e6f9e9941f74e870360ce034a6b6580ff5b0c8626e07ed71df092783b8d9172851d6fb43f5f8a76bf94371b538e01e97284b2d7d97f19a7faeff1d35f80c8e1522c9ba3b93588b0b7814e6057d5fc7c8d043f3afa945210744c32f2a81fac3cc3f19ee128671856e04b410a2bdc072c47227d90f6472f0d57d936281ff86966d0173ce2a8a2"}, 0xa8, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_procfs$namespace(r5, &(0x7f00000042c0)='ns/ipc\x00') r7 = accept$unix(0xffffffffffffffff, &(0x7f0000004300)=@abs, &(0x7f0000004380)=0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000004900)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004980)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000004a80)=0xe8) lstat(&(0x7f0000004ac0)='./file0\x00', &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000004b80), 0x2, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000004bc0), 0x0, 0x0) r13 = getpid() r14 = getpgrp(r5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004c00)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000004d00)=0xe8) sendmsg$unix(r7, &(0x7f0000004e80)={0x0, 0x0, &(0x7f0000004880)=[{&(0x7f00000043c0)="ffa7bf9dcf8398ed771bcfed0ebf2362919f479dae4c081e340f762ff9858eec108cd5788cfc2279a7bfe1", 0x2b}, {&(0x7f0000004400)="816a509db11701c6844fcdae37548000d91352195799d428ed08d87cc1c16ef4c0bddebfa91ccb0e317fdc6b4c8ed3cc53176c157c7a5ab34626150193583fb4f9f88ed5e2ae", 0x46}, {&(0x7f0000004480)="4e8b3f3c0bdcfec326d8a052ed967faaeaeff2af1525f88a4818296059e0bd4369e06b36ff789310b5747b9d938148b5ed0e74730dc70e1f3bfd82064493aefd91e1397ae0dc1be3a587e812964d4b87e073f293f0ebd048bef67b943e45ef2cdce2c4cd3d501aa886140c60a50be40ba5a070751bacbab8d9593a4c4dd88d681474e07d15f25d8c24049d4d2097b91e3776206b5f05282c2b044b4c5c979184cc18fe66", 0xa4}, {&(0x7f0000004540)="0ff3f7629e84c6a4dda71fbc666724812020be8d3e4903847f0144359e175c279976f350f9c550cbd748a1a384ee6708800358e09f27a5423d3b85a233224248d816af46ee31ebdc8eb24bff8ca1e12afb510d244ac896a0cc4bd7b934b8b1641cceb32f044f73604550ceab5e5cba6467475d611ee2ef41d4642044305e239597238a0f77e75c408c46b34bd1b7ffd3a097db55fa75b171da2d289b06e6", 0x9e}, {&(0x7f0000004600)="d37b5c0d7c0427e519e56f3a645260cdba7e0601ba903d3c5b3ff3bb7443176cec782c0345f5c63e8c33b8c149cb5559e281a85f701a5716fd4ec01cb2df9e589902c152a22e24ce734050e8a95c14db1d1a4ccd5a7870ef47576e89d1301d650ed4a7b7066efea8d5423069b280dbbf3f2d072db76d650b2341a220f6", 0x7d}, {&(0x7f0000004680)="3a63f7bc40c8cafeb3917db307dd07e6a5d4908e0c43584b34ec1732ead0253480aa177d6eab3d2fb557549042e166aa69b6f6e49d7ef4fbc3c1c22e85276f160bdde29cd6c5b819730bb8452dfe32cf6d6c65470515f8af13fe0600de5d9478ba60b4fbf20add4aace1e1069f53e45275e2342c43f68ec068b200d9a48353ea0cac57d05528f798f02fbcf3459b8cdc0ba95d0a3644a8767158217b1762", 0x9e}, {&(0x7f0000004740)="5ad0f397393b272b4eef09e16dcd608415d885e403392f1ef86ab839dcdb0ace5e1e3ce1b9cf442471c2cde3c0ffda561c0905e6502cb5afacba31c4c540b962052de21ba50051633aea5f75a278db5b8969e5fcf59ada8b9a0f6eb9cc2861d44c8dad389b780aac93b7becdb0983bf875af4595cd31de73940f92a6646a2bea4321b125c5628fc15557773713fc5139cbf77415002f0948b4bdba29e0f159a2cc547aaa415c", 0xa6}, {&(0x7f0000004800)="282952064790d5991c2c9f5b45ba5ea9a9d0a15498a9c2bd662a97d1ed4151b783f467e7dd98d09a00dca0344818cf4e140349e72bfa01bcd165181f84400c683ea2bbce7fa4f831f62066f5f4436fa96374a5aab85b903badac7e968af9441cb67e357bca5de40879b2e3d90da048707e4d2c7704f1ea948dc0e2259080e3", 0x7f}], 0x8, &(0x7f0000004d40)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x24, 0x1, 0x1, [r11, r6, r6, r6, r6]}}, @rights={{0x24, 0x1, 0x1, [r6, r6, r6, r12, r6]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r13, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r14, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, r15, r4}}}], 0x140, 0x4004000}, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000004ec0), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r12, 0x40045201, &(0x7f0000004f00)=0x5) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1800000) r16 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_TX_RING(r16, 0x10e, 0x7, &(0x7f0000004f40)={0x4d, 0x1, 0xa647, 0xa}, 0x10) setsockopt$SO_TIMESTAMP(r16, 0x1, 0x3f, &(0x7f0000004f80)=0x7, 0x4) 7m39.546422575s ago: executing program 40 (id=3307): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000004580)=""/4136, 0x1028}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/98, 0x62}, {&(0x7f0000003840)=""/43, 0x2b}, {&(0x7f00000038c0)=""/208, 0xd0}, {&(0x7f00000039c0)=""/246, 0xf6}, {&(0x7f0000003ac0)=""/113, 0x71}, {&(0x7f0000003b40)=""/162, 0xa2}, {&(0x7f0000003c00)=""/193, 0xc1}], 0xb}, 0x1000}], 0x1, 0x40000100, 0x0) 7m38.437803692s ago: executing program 41 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000240)='1234\n', 0x5) 7m34.077119459s ago: executing program 42 (id=3325): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd70000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x8082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000280), 0x4) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d66642c726e646e6f3de59d72f357f4877e6102ac1ef11f4cd7b43e1d7543d04653ff1f2879774c6bf1ed8b7fbc46472aa7059293a3ce9c414ba9005a693fcbd60b365ae5a6b69ceaa8f2131d40516dd1bedda6df0ac316bc57c374e9acd607a87fa8f529c57768b23c1e7e4d0e1b19423208d8703e69a1038e4d1a36385b38fae0aaa43ba9e42a2a7c112bff9541befc4878064c914bed97768978573d04c02767b1b73f3f4b223862396c", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r5], 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x103) write(r6, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) write(r7, &(0x7f00000005c0)="010000000705810240000007058102000200", 0x12) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffe}}, 0x2e) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x80047437, &(0x7f0000000200)={'wlan1\x00'}) preadv(r1, &(0x7f00000001c0), 0x0, 0x55, 0xfffffffc) 6m55.771335011s ago: executing program 43 (id=3381): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket(0x10, 0x80000, 0xf9) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = fanotify_init(0xf00, 0x2) fanotify_mark(r1, 0x105, 0x8971, r0, 0x0) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) 6m51.423121296s ago: executing program 44 (id=3391): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) readv(r0, &(0x7f00000037c0)=[{&(0x7f0000002080)=""/4105, 0x1009}], 0x1) 6m46.901577957s ago: executing program 45 (id=3401): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='f', 0x1) 6m19.289600486s ago: executing program 46 (id=3437): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read \\Xtc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x20, 0x8d, 0x1ff, 0x16, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x8, 0x7800, 0x2, 0x9}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="000026bd7000fcdbdf25040000000500050009000000080003000200000014000680060001000a00000008000700", @ANYRES32=r2, @ANYBLOB="08eaf691e54c6cbaa7521104b3721777eb8b1e2e86a52657c300e580e5ff86001569aab6156b6a134f7a975d43d35c2b4f33d8c2ec4204bc99bb31502de3e47bf40e9bf5635a2356ded2d61e5eab88d671f7e0bcb08d5193a3eef81ac5c272862de33139ab82ac9871333257636d7a90c801e7c1ea7cf0af46e0077cd732ba8687082f3dd9c913", @ANYRES32=0x0, @ANYBLOB="060001000a000000060005004e2000000800060000000000040006800800020007000000080002000700000008000300000000000800020001000000"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000090) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x20000002}) write(0xffffffffffffffff, &(0x7f0000000140)='n', 0x1) 6m16.294849061s ago: executing program 47 (id=3447): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x41, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) syz_usb_control_io(r1, 0x0, &(0x7f00000014c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x40, 0x19, 0x2, "b80d"}, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/page_tables/kernel\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x4f, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', r5, 0x4, 0x0, 0x0, 0xcbf, 0x5c, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0x101, 0x3e580000}}) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', &(0x7f0000000180), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x69, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r6, 0x29, 0x81, 0x7f, 0x4038a0b, 0x11, @empty, @mcast1, 0x20, 0x8000, 0x6, 0x2}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{0x6, 0x1ff}, {0x0, 0x8003}, {0x9}]}) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x1008, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r9, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe33) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/idVendor\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000400), &(0x7f0000000280)=0x8) 6m9.918119506s ago: executing program 48 (id=3456): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0xfffd, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 5m51.571347238s ago: executing program 49 (id=3478): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 5m39.366435623s ago: executing program 50 (id=3485): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, 0x30) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000880)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) write$nci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f60001006c43b322cf47fcca5ecccbe8ceec00000000000000"], 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r3, 0x10, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc270c84caf06e138}, 0x20008010) write$nci(r0, &(0x7f0000000300)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x2b82, 0xf5) write$cgroup_int(r5, &(0x7f0000000040)=0x920, 0x12) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m37.625996335s ago: executing program 51 (id=3494): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read \\Xtc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x20, 0x8d, 0x1ff, 0x16, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x8, 0x7800, 0x2, 0x9}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="000026bd7000fcdbdf25040000000500050009000000080003000200000014000680060001000a00000008000700", @ANYRES32=r2, @ANYBLOB="08eaf691e54c6cbaa7521104b3721777eb8b1e2e86a52657c300e580e5ff86001569aab6156b6a134f7a975d43d35c2b4f33d8c2ec4204bc99bb31502de3e47bf40e9bf5635a2356ded2d61e5eab88d671f7e0bcb08d5193a3eef81ac5c272862de33139ab82ac9871333257636d7a90c801e7c1ea7cf0af46e0077cd732ba8687082f3dd9c913", @ANYRES32=0x0, @ANYBLOB="060001000a000000060005004e2000000800060000000000040006800800020007000000080002000700000008000300000000000800020001000000"], 0x88}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000090) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)={0x20000002}) write(0xffffffffffffffff, &(0x7f0000000140)='n', 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000180)='Y', 0x1, 0x4) 5m22.285521477s ago: executing program 52 (id=3512): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0406fa1904a6ca1f2099dc8b17877f60034331b5d70951f309a984f9dfd8c2f7903f1ffa137ad169ff38bc373b2fd0c91c71ead5d8562daa50"], 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) memfd_create(&(0x7f0000000180)='\\\\&\x0e\x00\xbc\xe4\xbe\al\x9b\x13\x87\xc0\xcf\xeb\a\xa1%\x04\x18p\xe1\xb3\xca\xb0\xbf<2\xb4\xc8\xf5\x0e\xb7\xb5', 0x2) write$cgroup_pid(r1, &(0x7f0000000180)=0xffffffffffffffff, 0x12) 5m8.095833979s ago: executing program 53 (id=3528): r0 = socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 5m0.109751503s ago: executing program 54 (id=3543): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000004580)=""/4136, 0x1028}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/98, 0x62}, {&(0x7f0000003840)=""/43, 0x2b}, {&(0x7f0000003880)=""/38, 0x26}, {&(0x7f00000038c0)=""/208, 0xd0}, {&(0x7f0000003ac0)=""/113, 0x71}, {&(0x7f0000003b40)=""/162, 0xa2}, {0x0}], 0xb}, 0x1000}], 0x1, 0x40000100, 0x0) 4m52.076794277s ago: executing program 55 (id=3551): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000002440)="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", 0x15c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 4m37.996739928s ago: executing program 56 (id=3575): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = inotify_init1(0x0) r3 = dup(r2) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) utimensat(r3, 0x0, 0x0, 0x100) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) getsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2664f222e29a05a061d87572a1acea96f63d4379c54121748d17f26595b2e66ea6b6aaef4d1024ff31d313149edcdb4a72b90b5e0500f057a15ce6377f24c525846f6255434dc7dff487514f894c635c1755f496d8a0953c00d8000000000000000000000000b4d5ee963a352453fca2c65a5e2f5e49ab527f579dd1d244ec1d2f9e16b07d"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24004854) 4m24.384154911s ago: executing program 57 (id=3584): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xd140, 0x20, 0x0, 0x230}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x563, 0x1000, 0x0, 0x3a5, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf456, 0x1, 0x0, 0x34}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f3, 0x200, 0x1, 0x3c9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9ce6, 0x2100, 0x2, 0x387}}], 0x4, &(0x7f00000015c0)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xa}, 0x0, 0x0, '\x00', {0x1, 0xe9c, 0x0, &(0x7f00000005c0)=@buf_512="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"}}, &(0x7f0000001640)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000001680)={0x2102, r1}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f00000016c0)="cda33cbd9aaa14026a0d2c7347f6f7ea42f2fc0850fd8fc5760eb5d1e897c03b17c8987d1c0d4085de8c48a6a21640485269f2e6180728ed782a49d75427872d7f1c7beed0fcb15047c032a01139f1514677e0914a973d5f57b61a264a24a9d75740a666af080d59d23280b03f5203957d9ed80c3be5fb322b863c81f8eece45f8d77c1e32a20476a3c45a6906772e3ce15045061cf800527767ddcf2cf0b820a8a296ddf3b01b589643eacaab2ed15ef97b7ec7879c02efa3ddf6de1af81e6866bd4e9760ce710dd56f665d30c9c71f7f5f16d466", 0xd5) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe4, 0x5, 0x7, 0x7, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m12.193843495s ago: executing program 58 (id=3608): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) close(0x4) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000014c0)={0x1c, &(0x7f0000000400)={0x20, 0x11}, 0x0, 0x0}) 3m56.25479869s ago: executing program 59 (id=3637): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040f0406fa1904a6ca1f2099dc8b17877f60034331b5d70951f309a984f9dfd8c2f7903f1ffa137ad169ff38bc373b2fd0c91c71ead5d8562daa50"], 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_pid(r1, &(0x7f0000000180)=0xffffffffffffffff, 0x12) 3m43.052805809s ago: executing program 60 (id=3659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 3m0.169770007s ago: executing program 0 (id=3878): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r1, 0xf) landlock_restrict_self(0xffffffffffffffff, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x4000, 0x1a, 0x1, 0x602, 0x2}, 0x30, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xe) landlock_restrict_self(r1, 0xa) landlock_restrict_self(0xffffffffffffffff, 0x1a) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x110}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x66, 0x66, 0x62, 0x65, 0x30, 0x11626d41527ac875, 0x61, 0x39, 0x66, 0x62, 0x63, 0x33, 0x62, 0x2, 0x64, 0x64]}, &(0x7f0000000200)={0x0, "8dac6cf606a99a1ab75dcf59f1e50020d7343469e78e3dece9214bc840c8aedd837ee0b448ee98b2b17748eba017c697960cff867e3d76d9bdbfc360d314cfcb", 0x22}, 0x48, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r3) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3081", 0x2, r4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) write(r5, &(0x7f00000002c0)="cd901707e2571e82d7e38b14180cb2ece23bb3aee5f7c3a937a3dd2e7c4f22f28e96093466a6078f882e3d633460e42f44e8524d185d2fa111bde1aaefa1a2b3b14daf55a9feee23887615d3a9e00a14b5b87929397d03cddc0dab26755e9437b49eda3b6845677c27324aeea51981d5a84dfe969b2fb87f0850dd7ad35139a7b537723c9f6d1a18a37edf54bce6ff1c5624be30c9408c7961801bbe4cb54e9bf7917795a087a9025fe6745f69d2bf03bef3dd01d4de9ed62390b04f3500639db8f47fe2e0b2", 0xc6) connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) fcntl$dupfd(r0, 0x406, r0) 2m59.847638144s ago: executing program 0 (id=3881): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003e80)=ANY=[@ANYBLOB="c47b000011000100040000000000", @ANYRES32=r0, @ANYBLOB="a4112e"], 0x11c4}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2m59.630710699s ago: executing program 0 (id=3882): r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 2m59.010806364s ago: executing program 0 (id=3885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f00000022c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x0, @local}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000100)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}}], 0x2, 0x44) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r9, 0x0, r8}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5}) ioctl$SIOCPNGETOBJECT(r10, 0x89e0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000780)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd=r0, 0x0, 0x0, 0x1, {0x200}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r11, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x4, 0x5, 0x0, 0x2, 0x42, 0x3, 0x2, 0xff, 0x5, 0x81, 0x2, 0x1, 0x800, 0xffffffff, 0x1, 0x50, {0x2, 0x5}, 0x40, 0x1}}) 2m45.40821751s ago: executing program 61 (id=3873): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') socket(0x2d, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1) 2m43.82962781s ago: executing program 62 (id=3885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xd3a, &(0x7f0000000380)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r6, &(0x7f00000022c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x0, @local}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000100)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, 0x0}}], 0x2, 0x44) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r9, 0x0, r8}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5}) ioctl$SIOCPNGETOBJECT(r10, 0x89e0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000780)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd=r0, 0x0, 0x0, 0x1, {0x200}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r11, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x4, 0x5, 0x0, 0x2, 0x42, 0x3, 0x2, 0xff, 0x5, 0x81, 0x2, 0x1, 0x800, 0xffffffff, 0x1, 0x50, {0x2, 0x5}, 0x40, 0x1}}) 2m41.820482035s ago: executing program 63 (id=3896): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 2m16.627890657s ago: executing program 8 (id=3988): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 2m16.330250535s ago: executing program 8 (id=3990): mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) 2m16.144336312s ago: executing program 8 (id=3991): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0xc2600, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000040000000) 2m15.879567187s ago: executing program 8 (id=3993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000300)={{0x2, 0xb000, 0x0, 0x9b, 0x80, 0x5, 0x81, 0x9, 0x7f, 0x54, 0x0, 0x7}, {0x1ffc, 0xe000, 0xd, 0x40, 0x8, 0x8, 0xa9, 0x5e, 0x44, 0x7, 0x6, 0x9}, {0x80a0000, 0xffff4fff, 0xd, 0x6, 0x9, 0x7, 0x4, 0x10, 0xd, 0x5, 0x7, 0x9}, {0xb000, 0x1ffe, 0xb, 0x6, 0xb6, 0x4, 0x6, 0x6, 0x6, 0x4, 0x2, 0x3}, {0x2000, 0x1, 0x2b4cef225d1ad0e0, 0x5, 0x2, 0x3, 0x9, 0x4f, 0xff, 0x5, 0xe4, 0xf3}, {0x100000, 0xdddd1000, 0xd, 0x9, 0x80, 0x5, 0x8, 0xf4, 0xfa, 0xfe, 0xe1, 0x8}, {0x25000, 0x24002, 0xb, 0x1, 0xc, 0x2, 0x22, 0xff, 0x6, 0x2, 0x9, 0x5}, {0x5000, 0x25000, 0x0, 0x9, 0x6, 0xc8, 0x6, 0xf8, 0x7, 0x1, 0x6d, 0x1}, {0x1, 0x4}, {0x60000, 0x5}, 0x20000000, 0x2000000, 0x3ff8, 0x244, 0xd, 0x2400, 0x0, 0x0, [0x0, 0xcc6, 0x4, 0x9]}) 2m10.853518145s ago: executing program 8 (id=3997): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(&(0x7f0000000080)=@rnullb={'/dev/syzrnull', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='pipefs\x00', 0x8070, &(0x7f0000000140)='@\\[\x00') r2 = dup(r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000040)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"]) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f6) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000300)={{0x2, 0xb000, 0x0, 0x9b, 0x80, 0x5, 0x81, 0x9, 0x7f, 0x54, 0x9, 0x7}, {0x1ffc, 0xe000, 0xd, 0x40, 0x8, 0x8, 0xa9, 0x5e, 0x44, 0x7, 0x6, 0x9}, {0x1ff8, 0xffff4fff, 0xd, 0x6, 0x9, 0x7, 0x4, 0x10, 0xd, 0x5, 0x7, 0x9}, {0x1ffc, 0x1ffe, 0xb, 0x6, 0xb6, 0x4, 0x6, 0x6, 0x6, 0x4, 0x2, 0x3}, {0x2000, 0x1, 0x2b4cef225d1ad0e0, 0x5, 0x2, 0x3, 0x9, 0x4f, 0xff, 0x5, 0xe4, 0xf3}, {0x100000, 0xdddd1000, 0xd, 0x9, 0x80, 0x5, 0x8, 0xf4, 0xfa, 0xfe, 0xe1, 0x8}, {0x25000, 0x24002, 0xb, 0x1, 0xc, 0x2, 0x22, 0xff, 0x6, 0x2, 0x9, 0x5}, {0x5000, 0x25000, 0x0, 0x9, 0x6, 0xc8, 0x6, 0xf8, 0x7, 0x1, 0x6d, 0x1}, {0x1, 0x4}, {0x60000, 0x5}, 0x20000000, 0x0, 0x3ff8, 0x244, 0xd, 0xa481, 0x0, 0x0, [0x0, 0xcc6, 0x4, 0x9]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x7, 0x0, '\x00', [{0xffffad8f, 0x9, 0x80000001, 0x2, 0x5de0000000000000, 0x80000001}, {0x5, 0xffff, 0x7, 0xb, 0xff, 0x200}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x2c, r9, 0x1, 0x270bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendto$packet(r1, &(0x7f0000000480)="892139e15e2829fa0970bbc5154bd27540869959477a7af8cde27332931916d3623f16e2a06a77fbbf982039c09f79272ea69f3b6bc0470cf7745360d823d9fcaae696de76d27f974f25d0e34456bf11213697a40ed4f80c42b5039e5530ef8cd76387af5349c23cd1a2cd4073040515ade4be451876b77482c79560bb4d25516e86a7d0b3a55faf10097173cd59c9fea8cbe9b7261e1a2e5740d094e89a8d452a08e11fda049bdf289259d30fa7e6e73fee636734042b59683af73b4f782cd6bc06722c872c57efd1d8d8e65a5f477db8331d3abf21e711f76f51872c059fdd296eb32b", 0xe4, 0x1, &(0x7f0000000580)={0x11, 0x5, r7, 0x1, 0x10, 0x6, @random="4f3de9d8bea9"}, 0x14) 2m10.392961409s ago: executing program 8 (id=4003): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20004018) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r1, &(0x7f0000000200)="e1", 0x1, 0x40880, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r2 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r2, 0x3a, 0x0, 0x0, 0x2000005d) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2d, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) listen(r3, 0xa) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x20000040) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_generic(r6, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f0000000600)={0x2340, 0x23, 0x2, 0x70bd25, 0x25dfdbff, {0x12}, [@typed={0x8, 0x123, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x15d, 0x0, 0x0, @pid=r7}, @generic="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", @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x101}, @nested={0x12f8, 0x128, 0x0, 0x1, [@generic="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", @generic, @nested={0x4, 0x8f}, @generic="cad1f36e6a6b13ccef4762f47d0665e22dc97f59311fcced764afd4479c35807ec8864c350a5b55dde2ffa1f7bb4745c74a27bbe5e0283c9bbdf142c079c36c1bb88f5a59b1ad8c45d7e3b247ab655e5d5f64b7b2bdfa940fd7188762b7056906f7990cf235cb96fa471dcb33f72016a3636657199a6763cf1edad9f06169b56358db7d229aaa06a47b1a40a415db4223eb74a0626617da289f215dd59d29e679855ccfd3096bd3881a9ce45135c2410a62b37baba6bd4b97bdcb1644adf6c084e2df849e82f31424e1a09ceb560bb225b84ea8a6da6bca3", @generic="4565845a9ffdc9a8a8180eb2a5e9771496b65b1f48454ee22ebf3ff53c", @generic="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", @generic="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"]}, @nested={0x4, 0x135}, @nested={0x18, 0xd5, 0x0, 0x1, [@typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000400}, 0x50) 1m55.146743186s ago: executing program 64 (id=4003): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20004018) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r1, &(0x7f0000000200)="e1", 0x1, 0x40880, &(0x7f0000000340)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r2 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r2, 0x3a, 0x0, 0x0, 0x2000005d) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x2d, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, 0x0) listen(r3, 0xa) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x20000040) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_generic(r6, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f0000000600)={0x2340, 0x23, 0x2, 0x70bd25, 0x25dfdbff, {0x12}, [@typed={0x8, 0x123, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x15d, 0x0, 0x0, @pid=r7}, @generic="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", @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x101}, @nested={0x12f8, 0x128, 0x0, 0x1, [@generic="c4e7c1cde98503470110d3191f99c5e7e590e8eab8afb439874e4d38aff9936f69508fecc982acbfc8ef07243006174808e93ae235bd858d1ae0c325c19374a393075341470c7dd4eabf0ef5bbe310ca5a8eb72425616804fe8a50cdae858684cf86ed608d8413ee21c5c6b84cb98b2d03d5d29973f72062f8230f9cd2db072f998c12580bb8b39da3283f99ab08f234b788ad6c5332c3daa3a4a55f0492084ee55a2316b0e68274971b2a2c356e801d64d1b3a8d886bb5fedf0bf8de628cd1b6e6f9398ad0a0190f03f7347559018effe2d0e4f3b2880e3c788b732524b8bc114826cf6ab41f624d382d8cab1ed13559027248ee1d5cff1d18d73fa07f92bfce273a9e8d14e04447f919a48b6fb335cdbf349ad1cdbe5384939cbf3544bcfd1c5b02bdf65316a8d9479e5a0157f141698a7869d35cec115b91d666e8899bbc60c9e5c9212a7ee91d58a45b614069376f80cfd72dfa19288313081fd669e759a9b0f979390327a5847be5d6046c355b60b6c7f8019e9bb34853612d9ae5cc501b32c492c7ec32dd1c7ccd0750a1cb57e88d242c3e46d4b77aadd99ae21b60f30e9f4f292213008ad154d113ca2f76b40ebbb4a17093100f9f7e1868a4e48655655ff3f8bc5d130a2311ac6098011d11c8aed47fd66fd71f27be8c2a7f583d71619d9584170a59ba59a4fb81eebc6542cb5bac7fdd6bb0a9ed79113e18681d51a8a1100cbbffee5e829f95a5051362b99c05166f206ead0d4b5746c84bf4ca629cd61a8a9aee4f0c84fba8ba1306a8e01b6ab33c171cf4f7f24ff4ea2f9628e99f022e8c944feb79829a9355e00f2f92e4a44173bd3e52bf1d45174343f4b81575dbadae6f7e3e99498044aa1962b855a2b84fa4f42446c01a694f60c5ada32bf069a594802c5a983248c5a43dfc6a5cdeaee0e7fe9035047b28bf192087fbf4986db148acf61423537b8d3559232816abea11918f389340637651ac0c2297b3ac7d91bd79c1c2021bebd99d343da75682b2798b282e63429c540b799e587416ba99c4552b6199a151aba816eafe7b88f9ec746ab7434803f4a3faebdb0f4153987d8d178e4592fa1ba02be4950079f39eb3dbad9517b5ed3d9e88641781e519a0854ea14fc087bc11329bcc115d73ba556dcb1e4d22fc8b85006ecddedbb2ca28322a2df0368f32301fccaff900db71ec015b1c99e13f088269ca33d572ceedca2f32de88ad82aaa826f992b2f73a85d4aa767f7c1dc1b33cd64f79eec66fc4b0b57645f81add1007a8c340c8b6ff0ca668c388e17c4db62a18bfae2dc9b8cb26b47802126d79525d2f74106989cf5b856834ef42c62e97366b8b639f307cc1d795635a94a6de27bc495c6618318e086a7465934c05851a557d097473008db299575541776b0b8fcf596b6c1b59a06c93eec5f29c0019145f3b469a325be18a183915967db7ce1958c5c7c51b41b3501f4d1f0daa9e4532782418d0c92b55df4382ac880aa811d8fee9ff20753493bdb87505150126efaf7a9d6d0b145ecee557faf1d21896dd562070925d8a441e7e25d4b20799a0d07cbb515de51816627422fc1e071c884fb198180ecf47383c5af2e09e634d35aacdf1feef35977d69d76bff35015dcb2a56aed580528097b67b2f73e19d62ed02cf500c82f2e6e1a08e1ed4f567c8dce5c040bd7e9fbd5d5cad6f68282540752c86976462c81521af35372306a45d716f68277b0594c647962f8a273a678eeb66f8810bba2213bb5d7e621008f5bfa6adb7631b213760ed5d5c617a4f53d1bc6f86a87e728be4174e38ca552762e8b0237c8fdc609fcd5a628d7439caa4cf1108319fba61c3e7b2f56fcdb10a88cf7ca0512e51c15d0e6071e891cd1dd4b67deaae3d0a538d78e94b5e478cda2076aac8315b12b448099fd7b8d1cc55a915609ac1fa2b6c7d5cdba7b6fbb2ec304d2caafc1cd735f2e59209f127fea9a31ec2758d40208c26413c41dce04181de23c4f1bc008dbb00831b27cf45370d72345a46bf671da36f2e3361debd5991d1c3e22f42ef2cbc8c03b2638c9f69f19f5907d5782a1af144127c4b26cca246b0d2c31fd4bd810715cf4fa773efad9282c22f249c3e66f4f46b261c56d4f06d32725bfb7ea1545c82e902c803e735a8fa720d6cc7d012c95f0129a87410d97c51b14b0ecca62c9edc15a372d3910f346a39075759d80b3fffd03a2c4a22d7846f4bad48c48aec2089f575bb6fe43344569e4496f5de37c6446d9c131b4fe70e954fc1fdba0798667ee72955df3d0d7f66309fbf176ca1bcf693fb29eff1f762d360e379f397c1e077cf102bb7040ac096de926f232035a80f1e4b615d83d486a45b30ab64774f40f15ae4ea0a51e556930503746c597d98df5f51f08fba3709261901a0773ff96b3da33cb187b36f612b82a45eea944d01d4a266368688bd610e2798c96d8038da487c5ec73e075b0583e67d9111d39cc6ae933927136324aef04dfc75c361cec9858c11a14bcac68dd02f751b5b8b344733748990d6e8dc9d61c757cdbd854ea286ac6dc717ec390eccd6edd1a63118f4a3fdb4e8a9f6a7b391db987f7ed4eda006477669a6616d3f034ab2a5d9c0451e343542e41d8fed2903fd3c0bfa110f7f3721caf884858f3ae041bf4896288a245a963552203464706826541c3ef3cd317a4106889e19cc9c21f4791509ae0985d82ab47ff9780e8380138ee38d74e192b66f9023f32a91b94d1245eee87edadcc9ea964331872c15dd3ddd34df8f1db5a27f271ad24c0fe02e96a3d3aa929c76b8094af3ad4aafafbe583d907bc1da4ff766ac576e8522608fd09d26199e0c5f2b74ce3bb77f99393958e839a1af9ead59b9caf86c4a70a6e34a84abecd1152de7c8fdf05ea55ca841b24ec80a8837b04af5e8063040da7be679acdff7c87692c4f2e78493ca32e9d19ff6c29f27482eb3e3a538d847992a75c10034bde5d9d21b3c63cd4ea6de9fa15f4621472e2cc7f746fd56db5328d79b1169f3ec0cea5e7050da4f095e01e0fc3b507bfec2b7663a0e0908f33f68dea97f7dbdf44a33cd11b47d50bb65ae2bd7df3d3d9ff5ce837b4dd624542cbc5521d4ba84c1b53b35f05282ab63ea3927090f1ffff680d559b3f33075703f0692467cfce4a1713c04599d99171cc9aee3510200976b6c731435c82501f7b80b467e40b750b0b169d95e32c809db330bd6cbc08c01ad68ef0dba106ec88d9cd62c3e3cdd44931f386dfcbbba4ab2a353a6bff4fafbebd64c42d1247a75a3be16882af611296c479a0c52a12c6e8efdb1e8938f331a5030a2bf0f13ca259bfecfb6d05f2108963bfdf6c1fd1ac8ac0cf689686236c3a68caf5f6e2cddaf880524bebf267aa1ac7b65604c80d7d43fa7e09aaef2ef17893abf610ade27e22b426cceb7ea0cf6bd07b75b63fef6a30f9ae30aba41eefc92d1fa3a04881e13c218a4a1768a85070dd503f2b8ce31f3a44155c0525de0b495c1247257bb4b0730f3151978b857a62870a53feff94560a9e4bf7ec8aa993be86eb2b65560162730d955d0d7ca171a4574e24b4efa482e79f63b9b59fd3444c5a2442048fe66cb247cfc58f911af74707835b8e85053905fb9b2b35a1b71bcc3a0d4eaed23c68c86c293723d63c8959e785cf44c2c1827c0435dc4d068869ceb369781730f088af3b15e31c920b55ca85c9fce23cd4f71a52528091fb888d2b824d947a08ce577131ca3d9d3fd1e23a4bbaa97185c2d2c54e4bd76610dfe8529e43bb056248718251a13d7045bc2d6efffcd8453f252bbbc6e2c3e5eaeac9c2df5367b4f0927defa98b568cbba76acd27cb4056678555cbaa0b85600bcbbcc252aad0b39b6150d56dd28e0e1bc51dcc1702f94d3320a446532d41144c9244678efe6ef3df8f2389012b358ee36688d861c3bd46ac2b0c19cdf053db01507a70003f86d99251eac4b364b5d701481f60a00d83472dba9cab56d9405580911a5f555c1f9ac28d5d3df665bf9305700232e0fb53e78764ae35635a5e4744e0b3402019c82cc712e0fdfcb99dc0597b9374e550fe5b44b18e3ce0f882a02452252b5875a49ee8295dd1e8b416645fcfd2bf1f092d6036ac7a82a66c353cecef8f9f9e10e8bbb92d1c0da6b6ce86c82375adcb3f09e6182831605d6f2b7664776230782becc982e17feaa8c250c8d8fb732c82bebf86869d1c3dbe1222ddb028e1d2971cc12323427dd61ef5f777c8b5e58479a8ae98c119a44b54767d7e3c0d3db0780d12a72fb242596c2018bfb41cfe15e204b4ade24ac01d3831d6d9add22fb6f7056306c78e672ea31807bc8351c058c1406b12bcb18c2fd91069dbb50c917b72e833fffbde2eabdca770cbdafbf3a16aa85b1e2f1898fb88ed514a3c982e881e0b61a9e9e9d7bbcbc168dbe9b5840b8e45cdb7d149fa7f61b56e3d949dc8ed9928558e41b064d50ca58713bb1c9a2caeb40429a3222f596c14eab71c7a9c0ccc6db7ff9c9f74e6abde900c79764877256e54aa7d3ca921438304d40f32f2281644563ad6a0d76c76418bbd81b941e7f9750e299e7afcd13d28534b516626f67a1639c755de0e4e07fcb062ae92632c8d418e46e5f507cc22f65c0756b00884c735ae10e1329bf6ec91e6c23a697b3dac505351cc5b6d093b300603a97edfde6849b9a4405f396aa98ebd928117a05681385ccb8b1d5a123a287913873f14120292f406730c86fa01681e85a0d2d8a87d6c35661fa02481d91ebbbd5e1f62829fd99b3aae53a29927be7b34b0c570904bdb510ed5f603a5ac1e9c692b6425854a141e5f09bb0eade4178c7085b3fe69fa1d6f8249de5bbaaf4cfa08a4d57cef89ce4ec6b7015f25be2ca7f0271ead7c0820543e634ad4d8400a26d4ec2db66990ed9b1cbd5e3aa5dae0445e50a2a7d779159f9aeb64ddb765f8e1b010a6e49a5d9e13f653fc4be486548cb31b232545ffa7777073cf60b5ba3d389c513e32013c75fc48740203ae83f07d242bcb5ed4c3d11bc6391392f86517074a399c9af468991ad5334b4615cb8cf9dfff1dab619d27cf3f425c9cf87ccc6b6dba62ea3873425c7f0d09f4790731a041c96dc48dbbb02bb61f1857da707ee65a92de8351b69013651862f991a2f2de70da5c34448654877d846e70dacbfe972907df7c6896afe1199c3d24a6beb4da1fbaebbce7c6b527db1196eae7be4df2427d162e70522e1c6b60778a38612017d5039877e697e5ed7ddf4ffce7120f76e48856a6cb886aca3e283b069f99a9e60f89713845af5da56c66b7de9c5b491ed8fc19904000cea4e14b5039e95dec0c9cccaad3924e62c8b7198355b8f8710ca82db730f2b2b6a6140fe8b50c934a4ab2129ab6577091207a841d24463187c58c571df47418190bf166117f093af1d589047b84946976c3b94f2f1d843d1ed74a4526132578d7ee241d50aba4f42d2e1aff1d8f77790189427515d5166f6339f7f2d1f18bc269c10ce8bb0e446c574121c40d1b30a109e1e0c0866b35c1a9f688efb93a9d8d3ff8c7ddbed8196989901941a736fda1f27b6d36f74f5ecf37c7615fcefebf79babc9ae79790ec50dcd3931555bfacdd87943c0c85f963571ddd76f5661a16c0331f9bd082e824a68e4326aaf9e6f2a7d978a0342be0b2be35121173aff6835acebdae287465c2b3e8baa38bfa828b5e7051edbfa70ae83657f5b17148995c619d297fb978a813e4a06134c6da34391207f50a5fe4c0f617ba1e36dfc90347440baeded8bfc3fe2776e6152ffef56e89b8b4f75644c8e401", @generic, @nested={0x4, 0x8f}, @generic="cad1f36e6a6b13ccef4762f47d0665e22dc97f59311fcced764afd4479c35807ec8864c350a5b55dde2ffa1f7bb4745c74a27bbe5e0283c9bbdf142c079c36c1bb88f5a59b1ad8c45d7e3b247ab655e5d5f64b7b2bdfa940fd7188762b7056906f7990cf235cb96fa471dcb33f72016a3636657199a6763cf1edad9f06169b56358db7d229aaa06a47b1a40a415db4223eb74a0626617da289f215dd59d29e679855ccfd3096bd3881a9ce45135c2410a62b37baba6bd4b97bdcb1644adf6c084e2df849e82f31424e1a09ceb560bb225b84ea8a6da6bca3", @generic="4565845a9ffdc9a8a8180eb2a5e9771496b65b1f48454ee22ebf3ff53c", @generic="47902e25d10eb86e8f027a6545fb35869a0b530c15e572ffaa9f5d1ec97303564aaa8a9ab02cdfdc1a1089905e0ef0cf1b68c0f5e0cc79df81b7c5becf68cf960b9f84ee6531fda6f743f36cf98c752f44498bd9559905cd1bb9c093afb3829b8ccf1eaa8214f0f6690ba358abc93fe79d4b42e0bac9676c62c0af1f2331b15a97c183df58ac57fb738cc948801ed1ae340a3cd8444cbd7d710dc638df630f8e62e25ac63db357f9f23c24036f1df6290d2db8a2d62efab59bfcef1078f51b9066d5ffac00e339418d7a66485c4eb7e8365dae3689e6c4225e64fff06461eaeb8bb7da064a66812fe371604d961c7d79492618428fb20f3d579f9b68816298", @generic="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"]}, @nested={0x4, 0x135}, @nested={0x18, 0xd5, 0x0, 0x1, [@typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x2340}, 0x1, 0x0, 0x0, 0x20000400}, 0x50) 1m20.445609667s ago: executing program 9 (id=4242): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r2, &(0x7f00000001c0), 0xf001) 1m20.171237264s ago: executing program 6 (id=4246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x8000000000000000, 0x0, 0x2, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x8000, 0x0, 0x2, r2, 0x3}) 1m20.072251281s ago: executing program 9 (id=4248): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x80111500, 0x20000000) ioctl$KVM_CREATE_VM(r1, 0x541b, 0x2004001f) 1m19.917603203s ago: executing program 9 (id=4249): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x101e40, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) 1m19.756108252s ago: executing program 6 (id=4251): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VM(r2, 0x400454e2, 0x2c) 1m19.716648636s ago: executing program 9 (id=4252): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 1m19.479907407s ago: executing program 6 (id=4254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x300}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x1, 0x4, 0x103, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) creat(&(0x7f0000000080)='./sys\x00', 0x21) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x1f02) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r6, &(0x7f0000000180)=0xffffffffffffffff, 0x12) 1m19.043616951s ago: executing program 9 (id=4265): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 1m18.642563598s ago: executing program 9 (id=4259): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1c1800, 0xb2) mincore(&(0x7f0000ddc000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/143) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000168000/0x4000)=nil], &(0x7f0000000100)=[0x3, 0x1], &(0x7f00000001c0), 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000700)={0x0, 0x6, 0x0, 0x3}, &(0x7f0000000740)=0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x400282, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f00000006c0)={&(0x7f0000000400)=0x3, 0x3a, &(0x7f0000000440)=[{}, {}, {}], &(0x7f0000000680)}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009f, 0x0, 0xff}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) 1m17.16284031s ago: executing program 6 (id=4266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) 1m16.74850778s ago: executing program 6 (id=4268): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 1m16.508620799s ago: executing program 6 (id=4269): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) (async) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$uac3(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m3.137057065s ago: executing program 65 (id=4259): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1c1800, 0xb2) mincore(&(0x7f0000ddc000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/143) move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000168000/0x4000)=nil], &(0x7f0000000100)=[0x3, 0x1], &(0x7f00000001c0), 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000700)={0x0, 0x6, 0x0, 0x3}, &(0x7f0000000740)=0x18) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000020c0)='devpts\x00', 0x22008d0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x400282, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f00000006c0)={&(0x7f0000000400)=0x3, 0x3a, &(0x7f0000000440)=[{}, {}, {}], &(0x7f0000000680)}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4000009f, 0x0, 0xff}]}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) 1m3.126797003s ago: executing program 3 (id=4271): ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x6, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x9, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x2}) write$eventfd(r2, &(0x7f00000001c0)=0x3, 0x50) 1m2.742039185s ago: executing program 3 (id=4273): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x90000005}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x25, 0x0, &(0x7f0000000040)) epoll_pwait(r6, &(0x7f0000000580)=[{}], 0x1, 0xf7fefffb, 0x0, 0x0) epoll_pwait(r6, &(0x7f00000000c0)=[{}], 0x1, 0x100, 0x0, 0x0) close(r4) ioctl$FICLONE(r2, 0x40049409, r3) r9 = dup(r2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000891f0301c7000800050005000180c2000002bbbbbbbbbbbb88a83f00810034000800450200cc0064000009029078ac14140bffffffff168090786401010177859d516df08a50b9ea1d26012d5e320776ad2ee7f907a12ca80ab4345e8f9c89c4d1f2488c0f46e580687fba237f3159111a75d77fc6f0e784a3d79a631b38b8b757569f8d1278b468985ceff22a8a3fe235629a7cbfccb0db42465c3431bfbcc62777e4dcead5a0c4340520ad9a4020261da506cd25fb39fb5d21d84a2a6ad5ce202c0f732bf29c990d291b060e54fa338db321c44bedd478c386fd86d51fef1200000000000000000000000000002a89f9ed7e5c00e843a4783386fe3431f0c033fbc42f560228b68ad6561383d66ebfb0be01c9e50d42aaf498dbb0afa0a4792b530b7632fcf4317c3780631129ed32d8939117cea2efe2d18dd7fe495aa831e76a27b5f21fa3f7bbcbc380c84181f6462711c272304c3257bf6274560c15d6c533a8"], 0xf0) sendmsg$key(r0, &(0x7f0000000840)={0x40030000000000, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb4, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0xe, 0x0, @in6=@private2, @in=@empty}}]}, 0x50}}, 0x840) 1m1.52024439s ago: executing program 3 (id=4274): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003e80)=ANY=[@ANYBLOB="c411000011000100040000000000", @ANYRES32=r0, @ANYBLOB="a4112e"], 0x11c4}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (fail_nth: 7) 1m1.005420133s ago: executing program 66 (id=4269): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) (async) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$uac3(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m0.963873303s ago: executing program 3 (id=4276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) 1m0.610791457s ago: executing program 3 (id=4277): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 1m0.185507943s ago: executing program 3 (id=4278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 54.746351206s ago: executing program 1 (id=4287): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003e80)=ANY=[@ANYBLOB="c411008111000100040000000000", @ANYRES32=r0, @ANYBLOB="a4112e"], 0x11c4}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 54.614168507s ago: executing program 1 (id=4288): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0x5, 0xc, 0x400001}) r1 = socket$inet(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r2, &(0x7f0000000200)='\\x01020304 2000000000 0 \\', 0x19) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nullb, r3, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r4) listen(r1, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x800, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x640f, 0x4) 54.48769761s ago: executing program 1 (id=4289): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/vrf/strict_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1', 0x1) write(r0, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r1 = userfaultfd(0x801) syz_usb_connect(0x3, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040801b09e300010102000109021900010100803209040000010000000007058202000200"], 0x0) nanosleep(&(0x7f0000000080)={0x1}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x2) syz_usb_connect(0x5, 0x57, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406016320900010000000109024500010100803209040000030000000007050102000200070581020002000705820200020009040015"], 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)=@mmap={0x3, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x35}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f00004fc000/0x2000)=nil, 0x2000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000280)={0x0, 0x8ce4, 0x40, 0x2, 0x3c2}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000180)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x86, 0x200000000000057, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x4}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000f80902"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f0000000000)={0x0, 0xe1}, 0x2) 51.686976321s ago: executing program 1 (id=4290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) 51.318330194s ago: executing program 1 (id=4291): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 45.971521393s ago: executing program 1 (id=4298): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x8863}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e21, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x10, 0x9}}}}, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000680), &(0x7f00000006c0)=@v2={0x2000000, [{0x7ff, 0x5}, {0x4, 0x7fffffff}]}, 0x14, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000004000, 0x6, 0x1000, 0x800000003, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x3, 0x7, 0x1, 0x4, 0x2, 0x6, 0x3, 0x2c3, 0x40, 0x32f, 0xfffff307, 0x8, 0x38, 0x1, 0x4ed, 0x9, 0x2}, [{0x70000000, 0xb96d, 0x5, 0x2, 0x3, 0x6, 0x71f0000000, 0xa0}]}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f0000000440)="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", 0x232}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}], 0x18}, 0x40048000) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 45.031492637s ago: executing program 67 (id=4278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.568020636s ago: executing program 2 (id=4306): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0xc0000000, 0x0, 0x0) 41.149581062s ago: executing program 2 (id=4307): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) 40.811669523s ago: executing program 2 (id=4309): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000100008002120001000000000904000000ff4826020abbf03addaa239ee5a8add5aabccc1b3b2373b334dfd1709476a002115a33a6dbcae4c99e814d6d0e3a8312ba6b5977ebcf5d6d7e2c21509ecf7c76039756d1eef80cdec2d93af43d58b4b3f56ab3e6"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x20, 0x9, 0xc2, {0xc2, 0x4, "9f775e4eef4d262bc0024788b0988cc08aa854d850adc92ff5a3ebaaf4bc53beaee694b930b65ff61069bce9f7f574dbad17bec7dcf74154569aa97ab9a973fd244ea9b1c706b7eba278d6db1aa39de8c3916013cdca234010448a044340c6979fb86984718fdc20e0d1c7b72e96486824d9c5f3e9a934ff299bb774c965fea6937a363b6c1d73f5db0cd0a4e236aa9cc77d1fa16ecfdd2c98b5fb253e8f7399746b6ad3a91cc3b9fcb4dcaf5011f4394027dd4cfe9d5aef96315a019fd104bb"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000000340)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x8, 0x8, 0x64, "2e2c9322", "d139c50e"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x3, 0x2, 0x1, 0x200, 0x2}}}, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x9, 0xa6, "1905713a2103e2a1ac7a6e49f699d2142aacc296f09828cea38d1d481d7e220837b6b0dcd81d8cfdd7f7b3917a81edb1d61f1c26f2a1ac93c31e517e7a20d23bdadd256b690c9ad85d5d0dbe11c7234ba81065af5cc8aec9d906c0626ddcd86b284e59baf234544458302eab9ba8a16e4cd7fbc9a652689d4a6eb18ace184bed09b3590e9e0d46cde6225720cc8b0b5780acacc1646a003b4310d679aa28dbef63e536c9c843"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x0, 0x44}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000680)={0x40, 0xb, 0x2, "be87"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xb3ec}, &(0x7f0000000700)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000740)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000780)={0x40, 0x19, 0x2, "9b35"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x7}}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4050000) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_usb_disconnect(r0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 37.563993782s ago: executing program 2 (id=4314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000029c0), 0x400, 0x0) (rerun: 64) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10064) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, &(0x7f0000000140)) (async, rerun: 32) r4 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) (rerun: 32) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r4, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x20, 0x6, 0x52, "78392db8198a239846ac2d059153c68d5a5c1635aa4f4d26fdf1438a6c13ee5a66be2cf8fc247ad91fa928c36fc1a02f255401d96e7ecbc5c0b04688ecb6a2d959af78376b8d4a15dc9f7fc27f2c4111ad13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36.067574553s ago: executing program 2 (id=4317): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 35.678413265s ago: executing program 2 (id=4319): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket(0x28, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x2, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x2}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f00000000c0)="0c5bc74f5c23cee58e01532b211583c309d9cca76a6cd7f37be4194ff41a4f670df0efdfe6686e235b4e37ee0d90792fe67770ea049ccc9ffbfbf9bc37328b55d9ef7993e0dbcfa5e968a7d87aad5f6a5cdccc4d105a7f9147ee605c3a28036fccfefba9f4d0c9e7a3cb1ff6c3ed604c4fc5f764fc11bb03f872daf1aced4827d5926772be2035eac05bb1dbcb814cd3c1ae60a77ef550"}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000200)={0x20, r4, &(0x7f00000001c0)=[{}, {0x0, 0x3}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x3}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'gretap0\x00', {0x4004}, 0x4}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) read$FUSE(r7, &(0x7f0000005580)={0x2020}, 0x2020) ioctl$KVM_RUN(r6, 0xae80, 0x0) 30.357752896s ago: executing program 68 (id=4298): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x8863}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x2c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e21, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x10, 0x9}}}}, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000680), &(0x7f00000006c0)=@v2={0x2000000, [{0x7ff, 0x5}, {0x4, 0x7fffffff}]}, 0x14, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000004000, 0x6, 0x1000, 0x800000003, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x3, 0x7, 0x1, 0x4, 0x2, 0x6, 0x3, 0x2c3, 0x40, 0x32f, 0xfffff307, 0x8, 0x38, 0x1, 0x4ed, 0x9, 0x2}, [{0x70000000, 0xb96d, 0x5, 0x2, 0x3, 0x6, 0x71f0000000, 0xa0}]}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f0000000440)="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", 0x232}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}], 0x18}, 0x40048000) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 20.454283249s ago: executing program 69 (id=4319): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket(0x28, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x2, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x2}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, &(0x7f00000000c0)="0c5bc74f5c23cee58e01532b211583c309d9cca76a6cd7f37be4194ff41a4f670df0efdfe6686e235b4e37ee0d90792fe67770ea049ccc9ffbfbf9bc37328b55d9ef7993e0dbcfa5e968a7d87aad5f6a5cdccc4d105a7f9147ee605c3a28036fccfefba9f4d0c9e7a3cb1ff6c3ed604c4fc5f764fc11bb03f872daf1aced4827d5926772be2035eac05bb1dbcb814cd3c1ae60a77ef550"}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000200)={0x20, r4, &(0x7f00000001c0)=[{}, {0x0, 0x3}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x3}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'gretap0\x00', {0x4004}, 0x4}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) read$FUSE(r7, &(0x7f0000005580)={0x2020}, 0x2020) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.946762375s ago: executing program 0 (id=4326): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 9.723830327s ago: executing program 0 (id=4361): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 9.559762092s ago: executing program 5 (id=4362): mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x7000006, 0x4000010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x41555856, 0x0, &(0x7f0000af2000/0x3000)=nil) 9.452705851s ago: executing program 5 (id=4363): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_usb_disconnect(r0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000000c0)) 7.605606269s ago: executing program 4 (id=4365): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x17c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x13}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x18, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast1}}}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)={0x2, 0x0, [{0x400000b5}, {0xa68, 0x0, 0x6}]}) syz_usb_connect$uac2(0x2, 0xb3, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0xc, 0x20, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0xa, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x2, 0x29, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x6, 0x400, 0x6, 0x3, 0xbb, 0x7f, 0x5, 0x5, 0x2}, @input_terminal={0x10, 0x24, 0x2, 0x4, 0x204, 0x3, 0x7, 0x6, 0x0, 0xf7, 0xad, 0xf9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x9, 0x1, 0x2, 0x4, 0x1, 0x80000001, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x3, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x3, 0xf7, {0x8, 0x25, 0x1, 0x0, 0x3, 0xa9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6f, 0x1, 0x9, {0x8, 0x25, 0x1, 0x1, 0x3c, 0x5, 0x6}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1404}}]}) 7.605065698s ago: executing program 5 (id=4366): r0 = socket$packet(0x11, 0x3, 0x300) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000580)={0x374, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb886}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x84}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "34e9fc45ad4e004f8a2201a452b18dc1f2cf15c6"}}, @TIPC_NLA_NODE_ID={0x5, 0x3, "cf"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x181, 0x3, "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"}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x4048001}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000640)={0x10200, 0x0, 0xfee00000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000380)={0x0, 0x0}) 7.328059943s ago: executing program 5 (id=4367): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000240)={0x0, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x4, 0x4000, 0xba994d21c8ea99c1, 0x2}) (fail_nth: 5) 6.968508695s ago: executing program 5 (id=4368): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000740)='dummy_udc.0', 0xb) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 6.54261601s ago: executing program 5 (id=4369): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x7, r1, r1, 0x7, 0x1, 0x4}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) 4.322814528s ago: executing program 4 (id=4373): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x41595556, 0x0, 0x0, 0x0, 0xc}}) (fail_nth: 4) 3.900545818s ago: executing program 4 (id=4375): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1000a7, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f", 0x12}], 0x1}, 0x20000050) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)}, 0x5}], 0x1, 0x40002042, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}], 0x1}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000ffdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="b6d3d19debbd756004df050e5fa01bcd936b037b9b231c65edb7ef6363cad609dcdb3b4277589fbeb4f0f3eea3372e9d77addbd8478cce44053adde838848aca533b162adaded1910d9ce4d9f8d141f4cf"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="587280027196660200", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000000000000000000006400010008000c006400000008000d0000000000050091006e000000"], 0x5c}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x41595556, 0x0, 0x0, 0x0, 0xc}}) 3.701904516s ago: executing program 4 (id=4376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xb0}}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4006d39, 0x80, 0xfffffffd, 0x279}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000740)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x805, 0xdac, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x3}}}, &(0x7f0000000880)=0x0) write(r0, &(0x7f0000000280)="78fa9a85735b25f42cc53cda7ea73568983058570392909f5c2ef3173854a43bbce09632e74509790b43fb6d1c037c8634ea19f0ca5eb5d877f11e107ab71c5c2e32faf4369147a93a9841ac13922dcc7970ae8cec38948f103b06c4f11a410d3abc4ab62e1e4c8646d883a61ef179ad9947", 0x72) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r8, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x20000}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b15, 0x8, 0x3, 0x8000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa2c5, 0x0, 0xfffffffd, 0x68, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fe3, 0x800, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0xc028, 0x2, 0xfffffffb}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x0, 0xdb9, 0x0, 0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}], 0x6}}], 0x1, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000020c0)=""/4116, &(0x7f00000003c0)=0x1037) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x2400c004) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d3", 0x1}], 0x1) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(r10, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) r11 = fsmount(r1, 0x0, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000480)) r12 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r13 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r17 = syz_ublk_add_dev(r13, r14, r15, r16, &(0x7f0000000200)={0x2e, 0x0, 0x0, r12, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000340)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r17, 0x2) syz_open_dev$ublk_chdev(&(0x7f0000000300), r17, 0x4103) ioctl$USBDEVFS_CLEAR_HALT(r11, 0x80045515, &(0x7f00000004c0)={0x0, 0x1}) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) 2.908570567s ago: executing program 4 (id=4378): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x129202, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x45, 0x0, 0x0, 0xfe, "80000008"}, 0x0, 0x2, {}, 0x207fe}) 2.564521598s ago: executing program 4 (id=4380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1.956857989s ago: executing program 7 (id=4382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0xf5ff, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.746001551s ago: executing program 7 (id=4383): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf005860", @ANYRES64=r0], 0xb2) 1.463676033s ago: executing program 7 (id=4384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x5420, &(0x7f0000001d40)) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24010044}, 0x4000000) 1.299834985s ago: executing program 7 (id=4385): r0 = syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) syz_usb_disconnect(r0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000000c0)) 382.266967ms ago: executing program 7 (id=4386): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f", 0x35}], 0x1, 0x0, 0x5, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000005c0)=""/4163, 0x1043}], 0x18}, 0x40000000) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 0s ago: executing program 7 (id=4387): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x6a, 0x48202) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000680)={0x30a32c0, 0x0, @qam={0x1, 0x17, 0x7}}) read(r0, &(0x7f0000000080)=""/26, 0x1a) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000340)='f2fs\x00', 0x0, &(0x7f0000000240)='acl') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4a20, 0x8000, @empty, 0x40}, 0x1c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0) getdents(r3, &(0x7f0000000080)=""/106, 0x6a) rmdir(&(0x7f0000001640)='./my_configfs/target/core/rd_mcp_0\x00') listen(r2, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000154000480500000800b00010074617267657400004000028008000240000000012c0003007339f2179455afb9fdd672ba0100000000000000e891a0c7130000000000000000000000000000000800010054454556d4e93773000900020073797a32000000000900010073797a310000000014000000ffffffffffffffff000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): 437][ T1731] block nbd0: Connection timed out, retrying (0/1 alive) [ 901.204615][ T1731] block nbd0: Connection timed out, retrying (0/1 alive) [ 901.204682][ T1731] block nbd0: Connection timed out, retrying (0/1 alive) [ 901.204730][ T1731] block nbd0: Connection timed out, retrying (0/1 alive) [ 901.205143][ T1731] block nbd0: Dead connection, failed to find a fallback [ 901.205165][ T1731] block nbd0: shutting down sockets [ 901.205181][ T1731] blk_print_req_error: 10 callbacks suppressed [ 901.205195][ T1731] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.205226][ T1731] buffer_io_error: 10 callbacks suppressed [ 901.205240][ T1731] Buffer I/O error on dev nbd0, logical block 3, async page read [ 901.209982][ T1731] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.210018][ T1731] Buffer I/O error on dev nbd0, logical block 2, async page read [ 901.210047][ T1731] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.210075][ T1731] Buffer I/O error on dev nbd0, logical block 1, async page read [ 901.210100][ T1731] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.210127][ T1731] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.235746][ T28] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.235849][ T28] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.253542][ T28] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.253586][ T28] Buffer I/O error on dev nbd0, logical block 1, async page read [ 901.253718][ T28] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.253748][ T28] Buffer I/O error on dev nbd0, logical block 2, async page read [ 901.254901][ T28] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.254985][ T28] Buffer I/O error on dev nbd0, logical block 3, async page read [ 901.257465][ T28] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.257545][ T28] Buffer I/O error on dev nbd0, logical block 0, async page read [ 901.258803][ T28] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 901.258883][ T28] Buffer I/O error on dev nbd0, logical block 1, async page read [ 901.334124][T20682] ldm_validate_partition_table(): Disk read failed. [ 901.346867][T20682] Dev nbd0: unable to read RDB block 0 [ 901.367915][T20682] nbd0: unable to read partition table [ 901.537403][T20682] ldm_validate_partition_table(): Disk read failed. [ 901.541696][T20682] Dev nbd0: unable to read RDB block 0 [ 901.566215][T20682] nbd0: unable to read partition table [ 901.668927][T20892] netlink: 'syz.3.4102': attribute type 10 has an invalid length. [ 901.668968][T20892] mac80211_hwsim hwsim93 wlan0: entered allmulticast mode [ 901.697273][T20892] team0: Port device wlan0 added [ 901.746481][T20785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.865913][T20785] veth0_vlan: entered promiscuous mode [ 901.893735][T20785] veth1_vlan: entered promiscuous mode [ 901.989623][T20785] veth0_macvtap: entered promiscuous mode [ 902.002828][T20785] veth1_macvtap: entered promiscuous mode [ 902.078280][T20785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.132195][T20785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.205087][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.205142][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.205181][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.205219][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.551590][T20909] FAULT_INJECTION: forcing a failure. [ 902.551590][T20909] name failslab, interval 1, probability 0, space 0, times 0 [ 902.551628][T20909] CPU: 0 UID: 0 PID: 20909 Comm: syz.6.4107 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.551660][T20909] Tainted: [L]=SOFTLOCKUP [ 902.551668][T20909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 902.551683][T20909] Call Trace: [ 902.551696][T20909] [ 902.551706][T20909] dump_stack_lvl+0xe8/0x150 [ 902.551736][T20909] should_fail_ex+0x3eb/0x540 [ 902.551766][T20909] should_failslab+0xa8/0x100 [ 902.551791][T20909] __kmalloc_cache_noprof+0x9e/0x600 [ 902.551815][T20909] ? rcu_is_watching+0x16/0xb0 [ 902.551836][T20909] ? vhost_task_create+0x123/0x380 [ 902.551858][T20909] ? vhost_task_create+0x123/0x380 [ 902.551888][T20909] vhost_task_create+0x123/0x380 [ 902.551911][T20909] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 902.551936][T20909] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 902.551963][T20909] ? __pfx_vhost_task_create+0x10/0x10 [ 902.551984][T20909] ? register_lock_class+0x31/0x2e0 [ 902.552017][T20909] ? __pfx_vhost_task_fn+0x10/0x10 [ 902.552049][T20909] ? kasan_quarantine_put+0xbb/0x1f0 [ 902.552081][T20909] kvm_mmu_post_init_vm+0x147/0x2b0 [ 902.552109][T20909] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 902.552141][T20909] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 902.552171][T20909] kvm_vcpu_ioctl+0xa61/0xfd0 [ 902.552201][T20909] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 902.552245][T20909] ? __fget_files+0x2a/0x420 [ 902.552270][T20909] ? __fget_files+0x2a/0x420 [ 902.552300][T20909] ? __fget_files+0x2a/0x420 [ 902.552326][T20909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 902.552350][T20909] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 902.552373][T20909] __se_sys_ioctl+0xfc/0x170 [ 902.552400][T20909] do_syscall_64+0x166/0x520 [ 902.552422][T20909] ? trace_irq_disable+0x3b/0x140 [ 902.552443][T20909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.552468][T20909] ? clear_bhb_loop+0x70/0xc0 [ 902.552494][T20909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.552517][T20909] RIP: 0033:0x7f8c1f19e199 [ 902.552538][T20909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.552559][T20909] RSP: 002b:00007f8c20003028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.552583][T20909] RAX: ffffffffffffffda RBX: 00007f8c1f426090 RCX: 00007f8c1f19e199 [ 902.552599][T20909] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 902.552614][T20909] RBP: 00007f8c20003090 R08: 0000000000000000 R09: 0000000000000000 [ 902.552628][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.552642][T20909] R13: 00007f8c1f426128 R14: 00007f8c1f426090 R15: 00007ffce5706cf8 [ 902.552676][T20909] [ 902.580401][T19815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.580456][T19815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.090618][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 903.090641][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.132174][T20917] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.4110'. [ 903.132203][T20917] openvswitch: netlink: Message has 512 unknown bytes. [ 903.183401][T17476] Bluetooth: hci4: command 0x041b tx timeout [ 903.223472][ T5343] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 903.283496][T20921] netlink: 'syz.6.4111': attribute type 2 has an invalid length. [ 903.283522][T20921] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4111'. [ 903.301232][T20923] netlink: 'syz.6.4111': attribute type 2 has an invalid length. [ 903.301255][T20923] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4111'. [ 903.378819][ T5343] usb 4-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 903.387057][ T5343] usb 4-1: config 1 has an invalid interface number: 27 but max is 1 [ 903.387133][ T5343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.387187][ T5343] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 903.387259][ T5343] usb 4-1: config 1 has no interface number 2 [ 903.387433][ T5343] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 903.387555][ T5343] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.387636][ T5343] usb 4-1: config 1 interface 1 has no altsetting 0 [ 903.459456][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.459484][ T5343] usb 4-1: Product: syz [ 903.459501][ T5343] usb 4-1: Manufacturer: syz [ 903.459516][ T5343] usb 4-1: SerialNumber: syz [ 903.461093][T20920] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 903.559570][T20927] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 903.584175][T15220] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 903.704868][ T10] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 903.739862][T15220] usb 7-1: unable to get BOS descriptor or descriptor too short [ 903.744577][T15220] usb 7-1: not running at top speed; connect to a high speed hub [ 903.744750][T15220] usb 7-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 903.758820][T15220] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.758956][T15220] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.798302][T15220] usb 7-1: string descriptor 0 read error: -22 [ 903.798465][T15220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.855032][ T10] usb 10-1: New USB device found: idVendor=13ec, idProduct=0006, bcdDevice=0.00 [ 903.857987][ T10] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.858023][ T10] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 903.858052][ T10] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 903.858096][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 903.858131][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.884841][ T10] usb 10-1: config 0 descriptor?? [ 903.885620][T20924] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 903.947797][T20913] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 903.993251][ T5762] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 904.156603][ T5762] usb 2-1: Using ep0 maxpacket: 16 [ 904.157480][ T5762] usb 2-1: New USB device found: idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 904.161542][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.161569][ T5762] usb 2-1: Product: syz [ 904.161616][ T5762] usb 2-1: Manufacturer: syz [ 904.161634][ T5762] usb 2-1: SerialNumber: syz [ 904.214509][ T5762] usb 2-1: config 0 descriptor?? [ 904.233364][T15220] usb 7-1: unable to issue vendor read request (ret = -71) [ 904.238500][T15220] usb 7-1: unable to issue vendor read request (ret = -71) [ 904.240945][T15220] usb 7-1: unable to issue vendor read request (ret = -71) [ 904.329702][ T10] zydacron 0003:13EC:0006.0023: reserved main item tag 0xd [ 904.329745][ T10] zydacron 0003:13EC:0006.0023: collection stack underflow [ 904.329802][ T10] zydacron 0003:13EC:0006.0023: item 0 1 0 12 parsing failed [ 904.330747][ T10] zydacron 0003:13EC:0006.0023: parse failed [ 904.330884][ T10] zydacron 0003:13EC:0006.0023: probe with driver zydacron failed with error -22 [ 904.438828][ T5762] usb_8dev 2-1:0.0 can0: sending command message failed [ 904.438856][ T5762] usb_8dev 2-1:0.0 can0: can't get firmware version [ 904.498248][T15220] usb 7-1: USB disconnect, device number 74 [ 904.523587][ T5762] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 904.543998][ T5762] usb 2-1: USB disconnect, device number 99 [ 904.605727][ C1] usbatm_complete: 53 callbacks suppressed [ 904.605752][ C1] ATM dev 0: usbatm_complete: urb 0xffff888021acee00 failed (-71)! [ 904.605817][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805a75f300 failed (-71)! [ 904.605881][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805a75f800 failed (-71)! [ 904.605942][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801fa91900 failed (-71)! [ 904.684599][T15217] usb 10-1: USB disconnect, device number 11 [ 904.713992][ C1] ATM dev 0: usbatm_complete: urb 0xffff888021acee00 failed (-71)! [ 904.714054][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805a75f300 failed (-71)! [ 904.714100][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805a75f800 failed (-71)! [ 904.714146][ C1] ATM dev 0: usbatm_complete: urb 0xffff88801fa91900 failed (-71)! [ 904.823749][ C1] ATM dev 0: usbatm_complete: urb 0xffff888021acee00 failed (-71)! [ 904.823827][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805a75f300 failed (-71)! [ 904.963774][ T5343] speedtch 4-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 904.963806][ T5343] speedtch 4-1:1.27: usbatm_usb_probe: bind failed: -16! [ 904.963864][ T5343] speedtch 4-1:1.27: probe with driver speedtch failed with error -16 [ 905.009481][ T5343] usb 4-1: USB disconnect, device number 78 [ 905.263533][T17476] Bluetooth: hci4: command 0x041b tx timeout [ 905.322249][T20943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.739615][T20950] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 906.064181][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 906.214401][ T10] usb 10-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 906.216988][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.217040][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 906.217066][ T10] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 906.217093][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.217139][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.295717][T20956] tmpfs: Unknown parameter '0x00000000ffffffff' [ 907.084411][ T5343] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 907.172705][ T10] gud 10-1:1.0: Failed to get connectors (error=-5) [ 907.172742][ T10] gud 10-1:1.0: probe with driver gud failed with error -5 [ 907.233238][ T5343] usb 7-1: Using ep0 maxpacket: 16 [ 907.234428][ T5343] usb 7-1: New USB device found: idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 907.258302][ T5343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.258334][ T5343] usb 7-1: Product: syz [ 907.258352][ T5343] usb 7-1: Manufacturer: syz [ 907.258378][ T5343] usb 7-1: SerialNumber: syz [ 907.299047][ T5343] usb 7-1: config 0 descriptor?? [ 907.387069][ T10] usb 10-1: USB disconnect, device number 12 [ 907.544334][ T5343] usb_8dev 7-1:0.0 can0: sending command message failed [ 907.544363][ T5343] usb_8dev 7-1:0.0 can0: can't get firmware version [ 907.655079][ T5343] usb_8dev 7-1:0.0: probe with driver usb_8dev failed with error -22 [ 907.680082][ T5343] usb 7-1: USB disconnect, device number 75 [ 907.695978][T20978] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4130'. [ 907.933496][ T5762] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 907.995421][T20982] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 908.086741][ T5762] usb 2-1: device descriptor read/64, error -71 [ 908.335179][ T5762] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 908.463224][ T5762] usb 2-1: device descriptor read/64, error -71 [ 908.573864][ T5762] usb usb2-port1: attempt power cycle [ 908.773192][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 908.853945][T15220] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 908.893268][ T5343] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 908.913203][ T5762] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 908.933945][ T5762] usb 2-1: device descriptor read/8, error -71 [ 908.934476][ T10] usb 4-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 908.936422][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.939409][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 908.939436][ T10] usb 4-1: Product: syz [ 908.939454][ T10] usb 4-1: Manufacturer: syz [ 908.997748][ T10] usb 4-1: selecting invalid altsetting 1 [ 909.005583][T15220] usb 7-1: New USB device found: idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 909.012246][T15220] usb 7-1: config 0 has an invalid interface number: 6 but max is 0 [ 909.012320][T15220] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.012374][T15220] usb 7-1: config 0 has no interface number 0 [ 909.043885][ T5343] usb 10-1: device descriptor read/64, error -71 [ 909.052757][T15220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.052783][T15220] usb 7-1: Product: syz [ 909.052798][T15220] usb 7-1: Manufacturer: syz [ 909.052813][T15220] usb 7-1: SerialNumber: syz [ 909.076203][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 909.076222][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 909.103566][T15220] usb 7-1: config 0 descriptor?? [ 909.194568][ T5762] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 909.199071][T20997] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 909.219091][ T10] DVB: Unable to find symbol cx22700_attach() [ 909.219610][ T5762] usb 2-1: device descriptor read/8, error -71 [ 909.253686][T15220] vmk80xx 7-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 909.286632][ T5343] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 909.333705][ T5762] usb usb2-port1: unable to enumerate USB device [ 909.404677][T15220] usb 7-1: USB disconnect, device number 76 [ 909.416578][ T5343] usb 10-1: device descriptor read/64, error -71 [ 909.446411][ T10] DVB: Unable to find symbol tda10046_attach() [ 909.446427][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 909.451441][ T10] usb 4-1: USB disconnect, device number 79 [ 909.524150][ T5343] usb usb10-port1: attempt power cycle [ 909.863495][ T5343] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 909.885867][ T5343] usb 10-1: device descriptor read/8, error -71 [ 910.123308][ T5343] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 910.125125][T21012] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 910.149403][ T5343] usb 10-1: device descriptor read/8, error -71 [ 910.255392][ T5343] usb usb10-port1: unable to enumerate USB device [ 911.135269][T15967] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 911.306144][T15967] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 911.307208][T15967] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 911.307235][T15967] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 911.309480][T15967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.309508][T15967] usb 2-1: Product: syz [ 911.309524][T15967] usb 2-1: Manufacturer: syz [ 911.309541][T15967] usb 2-1: SerialNumber: syz [ 911.318277][T21033] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 911.452269][T21038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.457205][T21038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.590168][T21023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.601735][T21023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.643221][ T5343] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 911.773271][ T5343] usb 7-1: device descriptor read/64, error -71 [ 911.895145][T15967] usb 2-1: Cannot retrieve CPort count: -110 [ 911.895199][T15967] usb 2-1: Cannot retrieve CPort count: -110 [ 911.895227][T15967] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 912.013266][ T5343] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 912.124710][T21048] FAULT_INJECTION: forcing a failure. [ 912.124710][T21048] name failslab, interval 1, probability 0, space 0, times 0 [ 912.124745][T21048] CPU: 0 UID: 0 PID: 21048 Comm: syz.3.4159 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.124775][T21048] Tainted: [L]=SOFTLOCKUP [ 912.124783][T21048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 912.124795][T21048] Call Trace: [ 912.124805][T21048] [ 912.124815][T21048] dump_stack_lvl+0xe8/0x150 [ 912.124844][T21048] should_fail_ex+0x3eb/0x540 [ 912.124872][T21048] should_failslab+0xa8/0x100 [ 912.124896][T21048] __kmalloc_cache_node_noprof+0xa5/0x620 [ 912.124921][T21048] ? __get_vm_area_node+0x155/0x2f0 [ 912.124943][T21048] ? __get_vm_area_node+0x155/0x2f0 [ 912.124972][T21048] __get_vm_area_node+0x155/0x2f0 [ 912.125001][T21048] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 912.125026][T21048] ? copy_process+0x7db/0x4430 [ 912.125068][T21048] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 912.125103][T21048] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 912.125126][T21048] ? dup_task_struct+0x52/0xa00 [ 912.125147][T21048] ? trace_kmem_cache_alloc+0x29/0xe0 [ 912.125170][T21048] ? memcpy_and_pad+0x48/0x80 [ 912.125196][T21048] __vmalloc_node_noprof+0xc2/0x100 [ 912.125219][T21048] ? copy_process+0x7db/0x4430 [ 912.125239][T21048] ? copy_process+0x7db/0x4430 [ 912.125263][T21048] dup_task_struct+0x2c6/0xa00 [ 912.125295][T21048] copy_process+0x7db/0x4430 [ 912.125351][T21048] ? rcu_is_watching+0x16/0xb0 [ 912.125380][T21048] ? __pfx_copy_process+0x10/0x10 [ 912.125411][T21048] ? mutex_init_lockdep+0xdf/0x110 [ 912.125446][T21048] vhost_task_create+0x1f9/0x380 [ 912.125470][T21048] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 912.125496][T21048] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 912.125523][T21048] ? __pfx_vhost_task_create+0x10/0x10 [ 912.125544][T21048] ? register_lock_class+0x31/0x2e0 [ 912.125576][T21048] ? __pfx_vhost_task_fn+0x10/0x10 [ 912.125609][T21048] ? kasan_quarantine_put+0xbb/0x1f0 [ 912.125641][T21048] kvm_mmu_post_init_vm+0x147/0x2b0 [ 912.125669][T21048] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 912.125702][T21048] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 912.125732][T21048] kvm_vcpu_ioctl+0xa61/0xfd0 [ 912.125761][T21048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 912.125806][T21048] ? __fget_files+0x2a/0x420 [ 912.125832][T21048] ? __fget_files+0x2a/0x420 [ 912.125854][T21048] ? __fget_files+0x2a/0x420 [ 912.125881][T21048] ? bpf_lsm_file_ioctl+0x9/0x20 [ 912.125904][T21048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 912.125927][T21048] __se_sys_ioctl+0xfc/0x170 [ 912.125954][T21048] do_syscall_64+0x166/0x520 [ 912.125976][T21048] ? trace_irq_disable+0x3b/0x140 [ 912.125997][T21048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.126021][T21048] ? clear_bhb_loop+0x70/0xc0 [ 912.126047][T21048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.126071][T21048] RIP: 0033:0x7f683719e199 [ 912.126093][T21048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.126113][T21048] RSP: 002b:00007f683810d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.126138][T21048] RAX: ffffffffffffffda RBX: 00007f6837426090 RCX: 00007f683719e199 [ 912.126155][T21048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 912.126170][T21048] RBP: 00007f683810d090 R08: 0000000000000000 R09: 0000000000000000 [ 912.126185][T21048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.126208][T21048] R13: 00007f6837426128 R14: 00007f6837426090 R15: 00007ffc02172388 [ 912.126245][T21048] [ 912.145463][ T5343] usb 7-1: device descriptor read/64, error -71 [ 912.146702][T21048] syz.3.4159: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 912.146975][T21048] CPU: 0 UID: 0 PID: 21048 Comm: syz.3.4159 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.147015][T21048] Tainted: [L]=SOFTLOCKUP [ 912.147024][T21048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 912.147037][T21048] Call Trace: [ 912.147046][T21048] [ 912.147056][T21048] dump_stack_lvl+0xe8/0x150 [ 912.147086][T21048] warn_alloc+0x24d/0x270 [ 912.147108][T21048] ? __kasan_kmalloc+0x22/0xb0 [ 912.147135][T21048] ? __pfx_warn_alloc+0x10/0x10 [ 912.147156][T21048] ? __get_vm_area_node+0x155/0x2f0 [ 912.147186][T21048] ? __get_vm_area_node+0x2a9/0x2f0 [ 912.147218][T21048] __vmalloc_node_range_noprof+0x396/0x16f0 [ 912.147265][T21048] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 912.147302][T21048] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 912.147326][T21048] ? dup_task_struct+0x52/0xa00 [ 912.147346][T21048] ? trace_kmem_cache_alloc+0x29/0xe0 [ 912.147370][T21048] ? memcpy_and_pad+0x48/0x80 [ 912.147396][T21048] __vmalloc_node_noprof+0xc2/0x100 [ 912.147419][T21048] ? copy_process+0x7db/0x4430 [ 912.147446][T21048] ? copy_process+0x7db/0x4430 [ 912.147470][T21048] dup_task_struct+0x2c6/0xa00 [ 912.147500][T21048] copy_process+0x7db/0x4430 [ 912.147551][T21048] ? rcu_is_watching+0x16/0xb0 [ 912.147582][T21048] ? __pfx_copy_process+0x10/0x10 [ 912.147613][T21048] ? mutex_init_lockdep+0xdf/0x110 [ 912.147641][T21048] vhost_task_create+0x1f9/0x380 [ 912.147664][T21048] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 912.147689][T21048] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 912.147715][T21048] ? __pfx_vhost_task_create+0x10/0x10 [ 912.147736][T21048] ? register_lock_class+0x31/0x2e0 [ 912.147768][T21048] ? __pfx_vhost_task_fn+0x10/0x10 [ 912.147800][T21048] ? kasan_quarantine_put+0xbb/0x1f0 [ 912.147833][T21048] kvm_mmu_post_init_vm+0x147/0x2b0 [ 912.147860][T21048] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 912.147892][T21048] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 912.147921][T21048] kvm_vcpu_ioctl+0xa61/0xfd0 [ 912.147951][T21048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 912.147995][T21048] ? __fget_files+0x2a/0x420 [ 912.148021][T21048] ? __fget_files+0x2a/0x420 [ 912.148042][T21048] ? __fget_files+0x2a/0x420 [ 912.148068][T21048] ? bpf_lsm_file_ioctl+0x9/0x20 [ 912.148091][T21048] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 912.148114][T21048] __se_sys_ioctl+0xfc/0x170 [ 912.148138][T21048] do_syscall_64+0x166/0x520 [ 912.148160][T21048] ? trace_irq_disable+0x3b/0x140 [ 912.148180][T21048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.148203][T21048] ? clear_bhb_loop+0x70/0xc0 [ 912.148228][T21048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.148251][T21048] RIP: 0033:0x7f683719e199 [ 912.148271][T21048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.148292][T21048] RSP: 002b:00007f683810d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.148315][T21048] RAX: ffffffffffffffda RBX: 00007f6837426090 RCX: 00007f683719e199 [ 912.148332][T21048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 912.148346][T21048] RBP: 00007f683810d090 R08: 0000000000000000 R09: 0000000000000000 [ 912.148361][T21048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.148374][T21048] R13: 00007f6837426128 R14: 00007f6837426090 R15: 00007ffc02172388 [ 912.148410][T21048] [ 912.256980][ T5343] usb usb7-port1: attempt power cycle [ 912.311216][T21048] Mem-Info: [ 912.311278][T21048] active_anon:4997 inactive_anon:4860 isolated_anon:0 [ 912.311278][T21048] active_file:552 inactive_file:5532 isolated_file:0 [ 912.311278][T21048] unevictable:2 dirty:25 writeback:0 [ 912.311278][T21048] slab_reclaimable:8090 slab_unreclaimable:125657 [ 912.311278][T21048] mapped:23415 shmem:347 pagetables:1604 [ 912.311278][T21048] sec_pagetables:0 bounce:0 [ 912.311278][T21048] kernel_misc_reclaimable:0 [ 912.311278][T21048] free:1323686 free_pcp:11783 free_cma:0 [ 912.311459][T21048] Node 0 active_anon:19988kB inactive_anon:19440kB active_file:2208kB inactive_file:21920kB unevictable:8kB isolated(anon):0kB isolated(file):0kB mapped:93660kB dirty:100kB writeback:0kB shmem:1388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:18432kB kernel_stack:15228kB pagetables:6016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 912.311656][T21048] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 912.311817][T21048] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 912.312021][T21048] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 912.312155][T21048] Node 0 DMA32 free:1343844kB boost:0kB min:34336kB low:42920kB high:51504kB reserved_highatomic:0kB free_highatomic:0kB active_anon:19988kB inactive_anon:19440kB active_file:2208kB inactive_file:21920kB unevictable:8kB writepending:100kB zspages:1788kB present:3129332kB managed:2541360kB mlocked:0kB bounce:0kB free_pcp:43132kB local_pcp:18700kB free_cma:0kB [ 912.312350][T21048] lowmem_reserve[]: 0 0 1 1 1 [ 912.312518][T21048] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1412kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 912.312710][T21048] lowmem_reserve[]: 0 0 0 0 0 [ 912.312874][T21048] Node 1 Normal free:3935520kB boost:0kB min:55544kB low:69428kB high:83312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:3984kB local_pcp:3984kB free_cma:0kB [ 912.358214][T21048] lowmem_reserve[]: 0 0 0 0 0 [ 912.358322][T21048] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 912.359121][T21048] Node 0 DMA32: 313*4kB (UME) 762*8kB (UME) 1407*16kB (UM) 1424*32kB (UME) 729*64kB (UME) 373*128kB (UME) 164*256kB (UME) 91*512kB (UME) 72*1024kB (UME) 0*2048kB 247*4096kB (UM) = 1343844kB [ 912.359627][T21048] Node 0 Normal: 1*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 912.372513][T21048] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 3*32kB (UM) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935520kB [ 912.402047][T15220] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 912.552416][T21048] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.552587][T21048] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 912.552641][T21048] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.552693][T21048] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 912.552738][T21048] 6530 total pagecache pages [ 912.552779][T21048] 99 pages in swap cache [ 912.552800][T21048] Free swap = 121864kB [ 912.552824][T21048] Total swap = 124996kB [ 912.552855][T21048] 2097051 pages RAM [ 912.552879][T21048] 0 pages HighMem/MovableOnly [ 912.552906][T21048] 429742 pages reserved [ 912.552928][T21048] 0 pages cma reserved [ 912.595137][T15220] usb 10-1: Using ep0 maxpacket: 32 [ 912.601531][T15220] usb 10-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 912.635876][T15220] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.653745][ T5343] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 912.701189][ T5343] usb 7-1: device descriptor read/8, error -71 [ 912.794266][T15220] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.794334][T15220] usb 10-1: Product: syz [ 912.794379][T15220] usb 10-1: Manufacturer: syz [ 912.794528][T15220] usb 10-1: SerialNumber: syz [ 912.908445][T15220] usb 10-1: config 0 descriptor?? [ 912.953703][ T5343] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 912.997053][ T5343] usb 7-1: device descriptor read/8, error -71 [ 913.000412][T15220] quatech2 10-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 913.109686][ T5343] usb usb7-port1: unable to enumerate USB device [ 913.218090][T15220] usb 10-1: qt2_setup_urbs - submit read urb failed -8 [ 913.218880][T15220] quatech2 10-1:0.0: probe with driver quatech2 failed with error -8 [ 913.440661][T15220] usb 10-1: USB disconnect, device number 17 [ 913.646878][T21056] dummy0: entered allmulticast mode [ 913.649916][T21056] dummy0: left allmulticast mode [ 913.803597][T21060] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 913.912738][T15220] usb 2-1: USB disconnect, device number 104 [ 914.487745][T21070] tipc: Started in network mode [ 914.487792][T21070] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 914.516456][T15220] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 914.520925][T21070] tipc: Enabled bearer , priority 10 [ 914.881419][T15220] usb 10-1: unable to get BOS descriptor or descriptor too short [ 914.881474][T15220] usb 10-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 914.882362][T15220] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 914.882400][T15220] usb 10-1: can't read configurations, error -71 [ 914.982390][T21085] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 915.513183][T15967] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 915.633342][ T5343] tipc: Node number set to 4269801488 [ 915.662295][T21087] nfs: Unknown parameter 'smackfsflŸ®§— ¨' [ 915.671793][T15967] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 915.682772][T15967] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.682828][T15967] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 915.682855][T15967] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 915.682884][T15967] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.682935][T15967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.781757][T21092] dummy0: entered allmulticast mode [ 915.828483][T21092] dummy0: left allmulticast mode [ 916.065654][ T5762] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 916.190239][T15967] gud 2-1:1.0: probe with driver gud failed with error -5 [ 916.201865][ T5762] usb 7-1: device descriptor read/64, error -71 [ 916.444883][ T5762] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 916.583721][ T5762] usb 7-1: device descriptor read/64, error -71 [ 916.616760][T19815] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.695832][ T5762] usb usb7-port1: attempt power cycle [ 916.821044][T19815] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.962810][T21104] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4182'. [ 917.064312][ T5762] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 917.086456][ T5762] usb 7-1: device descriptor read/8, error -71 [ 917.213634][T19815] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.274497][T21106] tipc: Started in network mode [ 917.274537][T21106] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 917.282993][T21106] tipc: Enabled bearer , priority 10 [ 917.333197][ T5762] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 917.354212][ T5762] usb 7-1: device descriptor read/8, error -71 [ 917.463494][ T5762] usb usb7-port1: unable to enumerate USB device [ 917.491558][T19815] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.647122][T21111] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 917.649500][T21114] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 917.971729][T19815] bridge_slave_1: left allmulticast mode [ 917.971761][T19815] bridge_slave_1: left promiscuous mode [ 917.972047][T19815] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.010862][T19815] bridge_slave_0: left allmulticast mode [ 918.010894][T19815] bridge_slave_0: left promiscuous mode [ 918.011148][T19815] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.013451][ T5343] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 918.163439][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 918.164176][ T5343] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 918.165690][ T5343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.165714][ T5343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.170128][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.170155][ T5343] usb 4-1: Product: syz [ 918.170172][ T5343] usb 4-1: Manufacturer: syz [ 918.170188][ T5343] usb 4-1: SerialNumber: syz [ 918.291342][ T5343] usb 4-1: 0:2 : does not exist [ 918.313359][T15967] usb 2-1: USB disconnect, device number 105 [ 918.597584][T19815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.614985][T19815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.627720][T19815] bond0 (unregistering): Released all slaves [ 918.657133][T15217] tipc: Node number set to 4269801488 [ 918.763184][T15967] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 918.813947][T21125] sit0: entered promiscuous mode [ 918.844765][T21125] netlink: 'syz.9.4188': attribute type 1 has an invalid length. [ 918.844791][T21125] netlink: 1 bytes leftover after parsing attributes in process `syz.9.4188'. [ 919.115362][T15967] usb 2-1: unable to get BOS descriptor or descriptor too short [ 919.115419][T15967] usb 2-1: New USB device found: idVendor=17cc, idProduct=1011, bcdDevice=0.40 [ 919.116563][T15967] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 919.116599][T15967] usb 2-1: can't read configurations, error -71 [ 919.701707][T19815] hsr_slave_0: left promiscuous mode [ 919.709535][T19815] hsr_slave_1: left promiscuous mode [ 919.710774][T19815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.710796][T19815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.712524][T19815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.712544][T19815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.817263][T19815] veth1_macvtap: left promiscuous mode [ 919.817963][T19815] veth0_macvtap: left promiscuous mode [ 919.818124][T19815] veth1_vlan: left promiscuous mode [ 919.818220][T19815] veth0_vlan: left promiscuous mode [ 920.115438][ T27] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 920.267018][ T27] usb 10-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 920.268725][ T27] usb 10-1: config index 0 descriptor too short (expected 65183, got 72) [ 920.277231][ T27] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.277373][ T27] usb 10-1: Product: syz [ 920.277423][ T27] usb 10-1: Manufacturer: syz [ 920.277521][ T27] usb 10-1: SerialNumber: syz [ 920.503938][T15217] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 920.712945][T19815] team0 (unregistering): Port device team_slave_1 removed [ 920.765035][ T5343] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 920.808728][T19815] team0 (unregistering): Port device team_slave_0 removed [ 921.125464][ T5343] usb 4-1: USB disconnect, device number 80 [ 921.292725][T20682] udevd[20682]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.618466][T21143] tipc: Started in network mode [ 921.618506][T21143] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 921.620914][ T191] usb 10-1: USB disconnect, device number 20 [ 921.649214][T21143] tipc: Enabled bearer , priority 10 [ 921.665782][T15217] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 921.665955][T15217] ath9k_htc: Failed to initialize the device [ 921.689058][ T191] usb 10-1: ath9k_htc: USB layer deinitialized [ 922.504341][T21175] FAULT_INJECTION: forcing a failure. [ 922.504341][T21175] name failslab, interval 1, probability 0, space 0, times 0 [ 922.504378][T21175] CPU: 0 UID: 0 PID: 21175 Comm: syz.3.4205 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.504410][T21175] Tainted: [L]=SOFTLOCKUP [ 922.504419][T21175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 922.504433][T21175] Call Trace: [ 922.504443][T21175] [ 922.504453][T21175] dump_stack_lvl+0xe8/0x150 [ 922.504487][T21175] should_fail_ex+0x3eb/0x540 [ 922.504515][T21175] should_failslab+0xa8/0x100 [ 922.504541][T21175] __kmalloc_noprof+0xf9/0x710 [ 922.504564][T21175] ? iovec_from_user+0x87/0x250 [ 922.504585][T21175] ? iovec_from_user+0x87/0x250 [ 922.504615][T21175] iovec_from_user+0x87/0x250 [ 922.504642][T21175] __import_iovec+0x15e/0x7e0 [ 922.504675][T21175] import_iovec+0x73/0xa0 [ 922.504701][T21175] ___sys_recvmsg+0x4c9/0x5a0 [ 922.504731][T21175] ? __pfx____sys_recvmsg+0x10/0x10 [ 922.504760][T21175] ? lock_acquire+0x115/0x350 [ 922.504798][T21175] ? __fget_files+0x2a/0x420 [ 922.504819][T21175] ? __fget_files+0x3a2/0x420 [ 922.504840][T21175] ? __fget_files+0x2a/0x420 [ 922.504866][T21175] ? fdget+0x1ac/0x250 [ 922.504890][T21175] do_recvmmsg+0x31a/0x7f0 [ 922.504923][T21175] ? __pfx_do_recvmmsg+0x10/0x10 [ 922.504958][T21175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 922.504987][T21175] ? fdget+0x1ac/0x250 [ 922.505023][T21175] __x64_sys_recvmmsg+0x198/0x250 [ 922.505051][T21175] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 922.505084][T21175] do_syscall_64+0x166/0x520 [ 922.505106][T21175] ? trace_irq_disable+0x3b/0x140 [ 922.505127][T21175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.505151][T21175] ? clear_bhb_loop+0x70/0xc0 [ 922.505176][T21175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.505200][T21175] RIP: 0033:0x7f683719e199 [ 922.505221][T21175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.505240][T21175] RSP: 002b:00007f683812e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 922.505265][T21175] RAX: ffffffffffffffda RBX: 00007f6837425fa0 RCX: 00007f683719e199 [ 922.505282][T21175] RDX: 0000000000000001 RSI: 0000200000004480 RDI: 0000000000000003 [ 922.505298][T21175] RBP: 00007f683812e090 R08: 0000000000000000 R09: 0000000000000000 [ 922.505312][T21175] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 922.505326][T21175] R13: 00007f6837426038 R14: 00007f6837425fa0 R15: 00007ffc02172388 [ 922.505360][T21175] [ 922.595641][ T5343] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 922.738028][ T191] tipc: Node number set to 4269801488 [ 922.745708][ T5343] usb 7-1: Using ep0 maxpacket: 8 [ 922.760453][ T5343] usb 7-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 922.792064][ T5343] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 922.792095][ T5343] usb 7-1: config 0 has no interface number 0 [ 922.792143][ T5343] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 922.792169][ T5343] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 922.792198][ T5343] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 922.792227][ T5343] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 922.792255][ T5343] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.834672][ T5343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.834764][ T5343] usb 7-1: Product: syz [ 922.834818][ T5343] usb 7-1: Manufacturer: syz [ 922.834859][ T5343] usb 7-1: SerialNumber: syz [ 922.897855][ T5343] usb 7-1: config 0 descriptor?? [ 923.146485][ T5343] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 923.233156][ T191] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 923.315936][T21191] tipc: Enabling of bearer rejected, already enabled [ 923.393930][ T191] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 923.395084][ T191] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 923.395119][ T191] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 923.395144][ T191] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 923.395186][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.465497][ T191] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 923.711944][T20680] udevd[20680]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.907150][ T191] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 923.934133][ T191] usb 4-1: USB disconnect, device number 81 [ 924.482482][ T10] hid_parser_main: 245 callbacks suppressed [ 924.482512][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 924.524474][ T10] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 924.750776][T21208] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 924.784150][T21208] md: array md0 already has disks! [ 924.945515][T21208] md: personality for level ra is not loaded! [ 924.946379][T21204] fido_id[21204]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 925.140491][T21217] tipc: Enabling of bearer rejected, already enabled [ 925.514669][ T10] usb 7-1: USB disconnect, device number 85 [ 925.604842][T15967] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 925.755697][T15967] usb 10-1: New USB device found: idVendor=03e8, idProduct=0008, bcdDevice=0.00 [ 925.761128][T15967] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 925.761181][T15967] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 925.761207][T15967] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 925.761234][T15967] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.785459][T15967] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.785488][T15967] usb 10-1: Product: syz [ 925.785506][T15967] usb 10-1: Manufacturer: syz [ 925.785522][T15967] usb 10-1: SerialNumber: syz [ 925.864914][T15967] kaweth 10-1:1.0: couldn't find required endpoints [ 925.965066][ T5343] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 926.118599][ T5343] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 926.121266][ T5343] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 926.121301][ T5343] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 926.121324][ T5343] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 926.121365][ T5343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.220662][ T5343] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 926.358007][T15967] usb 10-1: USB disconnect, device number 21 [ 926.489835][T21236] program syz.6.4226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 926.822501][ T5343] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 926.849318][ T5343] usb 4-1: USB disconnect, device number 82 [ 926.893291][ T10] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 926.942792][T21245] tipc: Enabling of bearer rejected, already enabled [ 927.046904][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 927.046966][ T10] usb 7-1: New USB device found: idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 927.048362][ T10] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 927.048420][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 927.048450][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 14385, setting to 1024 [ 927.048485][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 927.052215][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.052246][ T10] usb 7-1: Product: syz [ 927.052265][ T10] usb 7-1: Manufacturer: syz [ 927.052284][ T10] usb 7-1: SerialNumber: syz [ 927.142584][ T10] usb 7-1: config 0 descriptor?? [ 927.150007][T21241] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 927.150154][T21241] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 927.169180][ C0] usb 7-1: NFC: Urb failure (status -71) [ 927.170817][ C0] usb 7-1: NFC: Urb failure (status -71) [ 927.180484][ T10] usb 7-1: NFC: Unable to get FW version [ 927.213541][ T10] pn533_usb 7-1:0.0: probe with driver pn533_usb failed with error -71 [ 927.360376][T15967] usb 7-1: USB disconnect, device number 86 [ 929.760055][T21312] tipc: Enabling of bearer rejected, already enabled [ 930.887999][T21331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4262'. [ 931.146069][T15967] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 931.306902][T15967] usb 4-1: Invalid ep0 maxpacket: 64 [ 931.446056][T15967] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 931.593257][T15967] usb 4-1: Invalid ep0 maxpacket: 64 [ 931.593552][T15967] usb usb4-port1: attempt power cycle [ 931.751051][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.751113][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.934569][T15967] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 931.959445][T15967] usb 4-1: Invalid ep0 maxpacket: 64 [ 932.083190][T15967] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 932.106152][T15967] usb 4-1: Invalid ep0 maxpacket: 64 [ 932.106540][T15967] usb usb4-port1: unable to enumerate USB device [ 932.483208][ T5343] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 932.636759][ T5343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 932.637288][ T5343] usb 2-1: not running at top speed; connect to a high speed hub [ 932.637322][ T5343] usb 2-1: New USB device found: idVendor=041e, idProduct=3040, bcdDevice=0.40 [ 932.640598][ T5343] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 932.641654][ T5343] usb 2-1: language id specifier not provided by device, defaulting to English [ 932.697752][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.697785][ T5343] usb 2-1: Manufacturer: 妵éŠçƒ¶â·Šé¼•â†«î¡’㧸疌Ῐ֙ⳉ妮ᅜÛ憾ₒ [ 932.697805][ T5343] usb 2-1: SerialNumber: syz [ 932.997404][ T5343] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 932.999313][ T5343] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 933.198179][ T5343] usb 2-1: USB disconnect, device number 108 [ 933.429692][T20187] udevd[20187]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 937.284116][T13800] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.529383][T13800] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.726208][T13800] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.897426][T13800] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.476225][T13800] bridge_slave_1: left allmulticast mode [ 938.476255][T13800] bridge_slave_1: left promiscuous mode [ 938.476493][T13800] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.507461][T13800] bridge_slave_0: left allmulticast mode [ 938.507489][T13800] bridge_slave_0: left promiscuous mode [ 938.507732][T13800] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.626870][T13800] hsr_slave_0: left promiscuous mode [ 939.649575][T13800] hsr_slave_1: left promiscuous mode [ 939.650615][T13800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.650647][T13800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.652450][T13800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.652472][T13800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.717909][T13800] veth1_macvtap: left promiscuous mode [ 939.717973][T13800] veth0_macvtap: left promiscuous mode [ 939.718088][T13800] veth1_vlan: left promiscuous mode [ 939.718163][T13800] veth0_vlan: left promiscuous mode [ 940.734817][T13800] team0 (unregistering): Port device team_slave_1 removed [ 940.791410][T13800] team0 (unregistering): Port device team_slave_0 removed [ 946.374260][T15220] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 946.530554][T15220] usb 2-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 946.545976][T15220] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.546039][T15220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 946.546063][T15220] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 946.546089][T15220] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 946.546135][T15220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.551734][T17476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 946.594207][T17476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 946.599233][T17476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 946.625303][T17476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 946.636322][T17476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 947.436667][T15220] gud 2-1:1.0: Failed to get connectors (error=-5) [ 947.436703][T15220] gud 2-1:1.0: probe with driver gud failed with error -5 [ 947.771737][T21376] netlink: 4516 bytes leftover after parsing attributes in process `syz.3.4274'. [ 947.862334][T21376] hsr_slave_1 (unregistering): left promiscuous mode [ 948.371557][T17476] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.391138][T17476] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.393292][T17476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.411483][T17476] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.412546][T17476] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.783537][T17476] Bluetooth: hci0: command tx timeout [ 949.231163][T15220] usb 2-1: USB disconnect, device number 109 [ 949.439788][ T1015] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.711654][T21399] dlm: no locking on control device [ 949.919172][ T1015] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.039323][T21358] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.040027][T21358] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.040212][T21358] bridge_slave_0: entered allmulticast mode [ 950.052861][T21358] bridge_slave_0: entered promiscuous mode [ 950.201067][ T1015] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.326085][T21358] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.326216][T21358] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.326397][T21358] bridge_slave_1: entered allmulticast mode [ 950.348217][T21358] bridge_slave_1: entered promiscuous mode [ 950.423825][T21358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.426938][T21358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.463617][T17476] Bluetooth: hci1: command tx timeout [ 950.505701][T21358] team0: Port device team_slave_0 added [ 950.519045][T21358] team0: Port device team_slave_1 added [ 950.662049][ T1015] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.863750][T17476] Bluetooth: hci0: command tx timeout [ 950.865850][T21358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.865867][T21358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.865896][T21358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.870740][T21358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.870757][T21358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.870787][T21358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.871307][T21411] tipc: Enabling of bearer rejected, already enabled [ 951.302563][T21358] hsr_slave_0: entered promiscuous mode [ 951.312856][T21358] hsr_slave_1: entered promiscuous mode [ 951.322434][T21358] debugfs: 'hsr0' already exists in 'hsr' [ 951.322463][T21358] Cannot create hsr debugfs directory [ 952.423162][ T1015] bridge_slave_1: left allmulticast mode [ 952.423191][ T1015] bridge_slave_1: left promiscuous mode [ 952.423420][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.439793][ T1015] bridge_slave_0: left allmulticast mode [ 952.439819][ T1015] bridge_slave_0: left promiscuous mode [ 952.445114][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.543274][T17476] Bluetooth: hci1: command tx timeout [ 952.949806][T17476] Bluetooth: hci0: command tx timeout [ 953.080417][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.097383][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.117305][ T1015] bond0 (unregistering): Released all slaves [ 953.444147][ T1015] tipc: Disabling bearer [ 953.444493][ T1015] tipc: Left network mode [ 953.956872][T21382] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.957063][T21382] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.958793][T21382] bridge_slave_0: entered allmulticast mode [ 953.985886][T21382] bridge_slave_0: entered promiscuous mode [ 954.207072][T21382] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.207307][T21382] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.207492][T21382] bridge_slave_1: entered allmulticast mode [ 954.212393][T21382] bridge_slave_1: entered promiscuous mode [ 954.406803][ T1015] hsr_slave_0: left promiscuous mode [ 954.407642][ T1015] hsr_slave_1: left promiscuous mode [ 954.408820][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.408844][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.411506][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.411529][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.470848][ T1015] veth1_macvtap: left promiscuous mode [ 954.470915][ T1015] veth0_macvtap: left promiscuous mode [ 954.471033][ T1015] veth1_vlan: left promiscuous mode [ 954.471111][ T1015] veth0_vlan: left promiscuous mode [ 954.626565][T17476] Bluetooth: hci1: command tx timeout [ 954.963211][ T27] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 955.023656][T17476] Bluetooth: hci0: command tx timeout [ 955.113828][ T27] usb 2-1: New USB device found: idVendor=1b80, idProduct=e309, bcdDevice=1.00 [ 955.116569][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 955.116596][ T27] usb 2-1: Product: syz [ 955.116614][ T27] usb 2-1: Manufacturer: syz [ 955.158137][ T27] em28xx 2-1:1.0: New device syz syz @ 480 Mbps (1b80:e309, interface 0, class 0) [ 955.158184][ T27] em28xx 2-1:1.0: Video interface 0 found: bulk [ 955.422686][T21438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.423732][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 955.451922][T21438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.496202][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 955.538064][T21438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.540573][T21438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.570989][T21438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.577376][T21438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.214563][T21382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.231288][T21382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.295546][ T27] em28xx 2-1:1.0: unknown em28xx chip ID (0) [ 956.448409][ T27] em28xx 2-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 956.448557][ T27] em28xx 2-1:1.0: board has no eeprom [ 956.469855][T21382] team0: Port device team_slave_0 added [ 956.482069][T21382] team0: Port device team_slave_1 added [ 956.524626][ T27] em28xx 2-1:1.0: Identified as Easy Cap Capture DC-60 (card=64) [ 956.524732][ T27] em28xx 2-1:1.0: analog set to bulk mode. [ 956.527192][T15220] em28xx 2-1:1.0: Registering V4L2 extension [ 956.570891][T21382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.570910][T21382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.570938][T21382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.643610][T21382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.643631][T21382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.643665][T21382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.724378][T17476] Bluetooth: hci1: command tx timeout [ 956.768960][ T10] usb 2-1: USB disconnect, device number 110 [ 956.782688][ T10] em28xx 2-1:1.0: Disconnecting em28xx [ 956.957292][T15220] em28xx 2-1:1.0: Config register raw data: 0xffffffed [ 956.957329][T15220] em28xx 2-1:1.0: AC97 chip type couldn't be determined [ 956.957346][T15220] em28xx 2-1:1.0: No AC97 audio processor [ 957.071345][T15220] usb 2-1: Decoder not found [ 957.071369][T15220] em28xx 2-1:1.0: failed to create media graph [ 957.071404][T15220] em28xx 2-1:1.0: V4L2 device video103 deregistered [ 957.175648][T21382] hsr_slave_0: entered promiscuous mode [ 957.178609][T15220] em28xx 2-1:1.0: Remote control support is not available for this card. [ 957.179899][T21382] hsr_slave_1: entered promiscuous mode [ 957.181773][ T10] em28xx 2-1:1.0: Closing input extension [ 957.233946][T21382] debugfs: 'hsr0' already exists in 'hsr' [ 957.233996][T21382] Cannot create hsr debugfs directory [ 957.538093][ T10] em28xx: Freeing device [ 958.186660][T21358] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 958.212569][T21358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 958.227814][T21358] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 958.247597][T21358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 958.254322][T21358] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 958.295854][T21358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 958.298499][T21358] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 958.326817][T21358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 959.020079][T21358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.177607][T21358] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.211220][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.211331][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.304660][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.304781][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.989248][T21382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 960.012698][T21382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.025317][T21382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 960.031813][T21382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.049813][T21382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 960.065644][T21382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.068186][T21382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 960.091124][T21382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 960.421453][T21382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.516057][T21382] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.601265][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.601370][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.650786][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.650902][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.473968][T21358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.706709][T21358] veth0_vlan: entered promiscuous mode [ 961.775963][T21358] veth1_vlan: entered promiscuous mode [ 961.955945][T21358] veth0_macvtap: entered promiscuous mode [ 961.978313][T21358] veth1_macvtap: entered promiscuous mode [ 962.086768][T21358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.166558][T21358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.342963][T21382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.403397][ T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.403788][ T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.446348][ T1015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.458481][T13800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.751256][T19631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.751281][T19631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.929784][T13802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.929807][T13802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.317413][T21382] veth0_vlan: entered promiscuous mode [ 963.349948][T21382] veth1_vlan: entered promiscuous mode [ 963.461303][T21382] veth0_macvtap: entered promiscuous mode [ 963.496694][T21382] veth1_macvtap: entered promiscuous mode [ 963.589830][T21382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.643889][T21382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.706684][T19815] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.706903][T19815] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.707252][T19815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.912454][T19631] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.186546][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.186570][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.276672][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.276697][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.331689][T21493] tipc: Started in network mode [ 964.331724][T21493] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 964.332466][T21493] tipc: Enabled bearer , priority 10 [ 964.700009][T21496] tipc: Started in network mode [ 964.700041][T21496] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 964.700733][T21496] tipc: Enabled bearer , priority 10 [ 964.757948][T17476] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 964.764446][T17476] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 964.782979][T17476] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 964.795752][T17476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 964.822450][T17476] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.639878][T19815] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.778339][ T5611] tipc: Node number set to 4269801488 [ 965.807968][ T5611] tipc: Node number set to 4269801488 [ 965.884522][T21508] devtmpfs: Cannot enable quota on remount [ 966.113797][T19815] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.359335][T19815] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.587398][T21518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4299'. [ 966.657322][T19815] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.944242][ T5617] Bluetooth: hci3: command tx timeout [ 967.199202][T21528] tipc: Enabling of bearer rejected, already enabled [ 967.331226][T21531] netlink: 'syz.2.4304': attribute type 46 has an invalid length. [ 967.331250][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4304'. [ 967.460277][T21533] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 967.460306][T21533] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 967.694894][T19815] bridge_slave_1: left allmulticast mode [ 967.694938][T19815] bridge_slave_1: left promiscuous mode [ 967.695184][T19815] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.747239][T19815] bridge_slave_0: left allmulticast mode [ 967.747271][T19815] bridge_slave_0: left promiscuous mode [ 967.747531][T19815] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.456291][T19815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.475105][T19815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.479668][T19815] bond0 (unregistering): Released all slaves [ 968.674547][T15967] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 968.805986][T19815] tipc: Disabling bearer [ 968.806129][T19815] tipc: Left network mode [ 968.855853][T15967] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 968.855905][T15967] usb 3-1: no configurations [ 968.855921][T15967] usb 3-1: can't read configurations, error -22 [ 968.993799][T15967] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 969.024015][ T5617] Bluetooth: hci3: command tx timeout [ 969.147913][T15967] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 969.147976][T15967] usb 3-1: no configurations [ 969.147993][T15967] usb 3-1: can't read configurations, error -22 [ 969.148456][T15967] usb usb3-port1: attempt power cycle [ 969.275433][T19815] team0: Port device wlan0 removed [ 969.504240][T15967] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 969.526197][T15967] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 969.526243][T15967] usb 3-1: no configurations [ 969.526258][T15967] usb 3-1: can't read configurations, error -22 [ 969.564979][T19815] hsr_slave_0: left promiscuous mode [ 969.565942][T19815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.565965][T19815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.570704][T19815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.570722][T19815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.620595][T19815] veth1_macvtap: left promiscuous mode [ 969.620636][T19815] veth0_macvtap: left promiscuous mode [ 969.620823][T19815] veth1_vlan: left promiscuous mode [ 969.620932][T19815] veth0_vlan: left promiscuous mode [ 969.667579][T15967] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 969.685306][T15967] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 969.685353][T15967] usb 3-1: no configurations [ 969.685368][T15967] usb 3-1: can't read configurations, error -22 [ 969.685796][T15967] usb usb3-port1: unable to enumerate USB device [ 970.431279][T19815] team0 (unregistering): Port device team_slave_1 removed [ 970.492061][T19815] team0 (unregistering): Port device team_slave_0 removed [ 971.131504][ T5617] Bluetooth: hci3: command tx timeout [ 971.157896][T21497] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.158102][T21497] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.158271][T21497] bridge_slave_0: entered allmulticast mode [ 971.160407][T21497] bridge_slave_0: entered promiscuous mode [ 971.190589][T21497] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.190755][T21497] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.190888][T21497] bridge_slave_1: entered allmulticast mode [ 971.192539][T21497] bridge_slave_1: entered promiscuous mode [ 971.254738][T21497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.258504][T21497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.311548][T21497] team0: Port device team_slave_0 added [ 971.320899][T21497] team0: Port device team_slave_1 added [ 971.399153][T21497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.399171][T21497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.399207][T21497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.406224][T21497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.406241][T21497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.406265][T21497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.787831][T21497] hsr_slave_0: entered promiscuous mode [ 971.792192][T21497] hsr_slave_1: entered promiscuous mode [ 971.797920][T21497] debugfs: 'hsr0' already exists in 'hsr' [ 971.797978][T21497] Cannot create hsr debugfs directory [ 972.290340][T21569] tipc: Enabling of bearer rejected, already enabled [ 973.183970][ T5617] Bluetooth: hci3: command tx timeout [ 973.987946][T21497] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 974.012233][T21497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.014120][T21490] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 974.022875][T21497] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 974.060062][T21497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.061036][T21497] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 974.126696][T21497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.132774][T21497] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 974.164185][T21497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 974.202320][T21490] usb 6-1: unable to get BOS descriptor or descriptor too short [ 974.207602][T21490] usb 6-1: not running at top speed; connect to a high speed hub [ 974.207698][T21490] usb 6-1: New USB device found: idVendor=0582, idProduct=008d, bcdDevice=0.40 [ 974.212739][T21490] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.257034][T21490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.257065][T21490] usb 6-1: Product: syz [ 974.257083][T21490] usb 6-1: Manufacturer: syz [ 974.257099][T21490] usb 6-1: SerialNumber: syz [ 974.308105][T21490] snd-ua101 6-1:1.1: sample format descriptor not found [ 974.308131][T21490] snd-ua101 6-1:1.0: invalid bNumEndpoints [ 974.563888][T21490] usb 6-1: USB disconnect, device number 52 [ 974.635083][T21497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.694228][T21497] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.733099][T19631] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.733203][T19631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.776134][T19631] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.776251][T19631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.751347][T21591] kvm: pic: non byte read [ 975.760638][T21591] kvm: pic: non byte read [ 976.582574][T21497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.529930][T21497] veth0_vlan: entered promiscuous mode [ 977.562633][T21497] veth1_vlan: entered promiscuous mode [ 977.689198][T21497] veth0_macvtap: entered promiscuous mode [ 977.722779][T21497] veth1_macvtap: entered promiscuous mode [ 977.798131][T21497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.858261][T21497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.904380][T19631] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.908575][ T61] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.908621][ T61] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.908660][ T61] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.011212][T21613] tipc: Enabling of bearer rejected, already enabled [ 978.361393][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.361420][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.588949][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.588973][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.406255][T21623] kAFS: Invalid Command on /proc/fs/afs/cells file [ 979.455583][T17476] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 979.471489][T17476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 979.483589][T17476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 979.484652][T17476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 979.485608][T17476] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 979.523281][T15157] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 979.678046][T15157] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 979.680939][T15157] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 979.680983][T15157] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 979.681012][T15157] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 979.681038][T15157] usb 8-1: config 0 interface 0 has no altsetting 0 [ 979.712189][T15157] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 979.712271][T15157] usb 8-1: Product: syz [ 979.712314][T15157] usb 8-1: Manufacturer: syz [ 979.712357][T15157] usb 8-1: SerialNumber: syz [ 979.767854][T15157] usb 8-1: config 0 descriptor?? [ 979.889773][T15157] usb 8-1: selecting invalid altsetting 0 [ 980.213688][T15157] usb 8-1: USB disconnect, device number 18 [ 980.498911][T21357] udevd[21357]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.589341][T13802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.772165][T21636] syz_tun: entered allmulticast mode [ 980.789558][T21635] syz_tun: left allmulticast mode [ 980.801121][T21635] syzkaller1: entered promiscuous mode [ 980.801143][T21635] syzkaller1: entered allmulticast mode [ 981.059183][T13802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.126278][T21636] syz_tun: entered allmulticast mode [ 981.344197][ T27] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 981.391302][T13802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.497592][ T27] usb 8-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 981.520850][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.520880][ T27] usb 8-1: Product: syz [ 981.520898][ T27] usb 8-1: Manufacturer: syz [ 981.520915][ T27] usb 8-1: SerialNumber: syz [ 981.583261][ T5617] Bluetooth: hci2: command tx timeout [ 981.803465][T13802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.888276][T15157] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 982.673812][T21653] tipc: Enabling of bearer rejected, already enabled [ 982.830478][T13802] bridge_slave_1: left allmulticast mode [ 982.830509][T13802] bridge_slave_1: left promiscuous mode [ 982.830855][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.892054][T13802] bridge_slave_0: left allmulticast mode [ 982.892084][T13802] bridge_slave_0: left promiscuous mode [ 982.903033][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.506441][T15157] usb 8-1: Service connection timeout for: 256 [ 983.506485][T15157] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 983.551175][T15157] ath9k_htc: Failed to initialize the device [ 983.664525][ T5617] Bluetooth: hci2: command tx timeout [ 983.965247][T15157] usb 8-1: ath9k_htc: USB layer deinitialized [ 984.116774][T13802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.162306][T13802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.178430][T13802] bond0 (unregistering): Released all slaves [ 984.191510][T15292] usb 8-1: USB disconnect, device number 19 [ 984.373491][T21490] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 984.442675][T13802] tipc: Disabling bearer [ 984.442837][T13802] tipc: Left network mode [ 984.524765][T21490] usb 6-1: Using ep0 maxpacket: 32 [ 984.525617][T21490] usb 6-1: New USB device found: idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 984.527193][T21490] usb 6-1: config 2 has an invalid interface number: 51 but max is 0 [ 984.527220][T21490] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 984.527241][T21490] usb 6-1: config 2 has no interface number 0 [ 984.527280][T21490] usb 6-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 984.527308][T21490] usb 6-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 984.527332][T21490] usb 6-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 984.527358][T21490] usb 6-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 984.527385][T21490] usb 6-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 984.527415][T21490] usb 6-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 984.527440][T21490] usb 6-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 984.527464][T21490] usb 6-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 984.527491][T21490] usb 6-1: config 2 interface 51 altsetting 255 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 984.527519][T21490] usb 6-1: config 2 interface 51 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 984.527547][T21490] usb 6-1: config 2 interface 51 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 984.527572][T21490] usb 6-1: config 2 interface 51 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 984.527611][T21490] usb 6-1: config 2 interface 51 has no altsetting 0 [ 984.529726][T21490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.529752][T21490] usb 6-1: Product: syz [ 984.529769][T21490] usb 6-1: Manufacturer: syz [ 984.529786][T21490] usb 6-1: SerialNumber: syz [ 984.593993][T15292] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 984.746882][T21659] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 984.787778][T15292] usb 8-1: unable to get BOS descriptor or descriptor too short [ 984.788509][T15292] usb 8-1: not running at top speed; connect to a high speed hub [ 984.788540][T15292] usb 8-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 984.789977][T15292] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 984.790052][T15292] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 4 [ 984.798967][T15292] usb 8-1: string descriptor 0 read error: -22 [ 984.799506][T15292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.932921][T15292] usb 8-1: 1:1 : bogus bTerminalLink 9 [ 985.015076][T21490] keyspan_pda 6-1:2.51: Keyspan PDA converter detected [ 985.134504][T15292] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 985.180002][T21490] usb 6-1: Keyspan PDA converter now attached to ttyUSB0 [ 985.190689][T13802] hsr_slave_0: left promiscuous mode [ 985.199581][T13802] hsr_slave_1: left promiscuous mode [ 985.202204][T13802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.202226][T13802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.237849][T13802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.237874][T13802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.288567][T13802] veth1_macvtap: left promiscuous mode [ 985.288630][T13802] veth0_macvtap: left promiscuous mode [ 985.288774][T13802] veth1_vlan: left promiscuous mode [ 985.288846][T13802] veth0_vlan: left promiscuous mode [ 985.290680][T21490] usb 6-1: USB disconnect, device number 53 [ 985.412413][T21490] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 985.426484][T21490] keyspan_pda 6-1:2.51: device disconnected [ 985.542180][T15292] usb 8-1: USB disconnect, device number 20 [ 985.744454][ T5617] Bluetooth: hci2: command tx timeout [ 986.043174][T15157] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 986.194699][T15157] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 986.195787][T15157] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.195821][T15157] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 986.195850][T15157] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 986.195875][T15157] usb 6-1: config 0 interface 0 has no altsetting 0 [ 986.202105][T15157] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 986.202131][T15157] usb 6-1: Product: syz [ 986.202148][T15157] usb 6-1: Manufacturer: syz [ 986.202164][T15157] usb 6-1: SerialNumber: syz [ 986.286529][T15157] usb 6-1: config 0 descriptor?? [ 986.322524][T15157] usb 6-1: selecting invalid altsetting 0 [ 986.470738][T13802] team0 (unregistering): Port device team_slave_1 removed [ 986.528443][T15157] usb 6-1: USB disconnect, device number 54 [ 986.572557][T13802] team0 (unregistering): Port device team_slave_0 removed [ 986.790203][T21357] udevd[21357]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.503808][T21680] tipc: Enabling of bearer rejected, already enabled [ 987.539589][T21624] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.546881][T21624] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.547012][T21624] bridge_slave_0: entered allmulticast mode [ 987.553871][T21624] bridge_slave_0: entered promiscuous mode [ 987.596555][T21624] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.596667][T21624] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.596838][T21624] bridge_slave_1: entered allmulticast mode [ 987.598799][T21624] bridge_slave_1: entered promiscuous mode [ 987.823794][ T5617] Bluetooth: hci2: command tx timeout [ 987.840828][T21624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.864533][T21624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.014027][T21624] team0: Port device team_slave_0 added [ 988.027394][T21624] team0: Port device team_slave_1 added [ 988.221287][T21624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.221307][T21624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.221355][T21624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.309398][T21624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.309418][T21624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.309450][T21624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.454800][T21624] hsr_slave_0: entered promiscuous mode [ 988.455871][T21624] hsr_slave_1: entered promiscuous mode [ 988.456618][T21624] debugfs: 'hsr0' already exists in 'hsr' [ 988.456639][T21624] Cannot create hsr debugfs directory [ 988.838068][T21687] FAULT_INJECTION: forcing a failure. [ 988.838068][T21687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.838106][T21687] CPU: 0 UID: 0 PID: 21687 Comm: syz.5.4345 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.838138][T21687] Tainted: [L]=SOFTLOCKUP [ 988.838147][T21687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 988.838162][T21687] Call Trace: [ 988.838171][T21687] [ 988.838182][T21687] dump_stack_lvl+0xe8/0x150 [ 988.838213][T21687] should_fail_ex+0x3eb/0x540 [ 988.838242][T21687] _copy_from_user+0x2d/0xb0 [ 988.838277][T21687] memdup_user+0x5e/0xd0 [ 988.838300][T21687] kvm_arch_vcpu_ioctl+0xb70/0x23a0 [ 988.838329][T21687] ? lock_acquire+0x115/0x350 [ 988.838352][T21687] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 988.838381][T21687] ? lock_acquire+0x115/0x350 [ 988.838413][T21687] ? is_bpf_text_address+0x26/0x2b0 [ 988.838443][T21687] ? is_bpf_text_address+0x292/0x2b0 [ 988.838465][T21687] ? is_bpf_text_address+0x26/0x2b0 [ 988.838491][T21687] ? kernel_text_address+0xa5/0xe0 [ 988.838515][T21687] ? __kernel_text_address+0xd/0x30 [ 988.838537][T21687] ? unwind_get_return_address+0x4d/0x90 [ 988.838560][T21687] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 988.838584][T21687] ? arch_stack_walk+0xfb/0x150 [ 988.838625][T21687] ? stack_trace_save+0xa9/0x100 [ 988.838649][T21687] ? __pfx_stack_trace_save+0x10/0x10 [ 988.838669][T21687] ? kasan_save_track+0x4f/0x80 [ 988.838695][T21687] ? stack_depot_save_flags+0x33/0x7f0 [ 988.838722][T21687] ? __lock_acquire+0x747/0x2de0 [ 988.838748][T21687] ? kfree+0x1c5/0x650 [ 988.838768][T21687] ? __se_sys_ioctl+0x47/0x170 [ 988.838787][T21687] ? do_syscall_64+0x166/0x520 [ 988.838812][T21687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.838853][T21687] ? __mutex_trylock_common+0x15f/0x270 [ 988.838879][T21687] ? __pfx___mutex_trylock_common+0x10/0x10 [ 988.838907][T21687] ? rcu_is_watching+0x16/0xb0 [ 988.838930][T21687] ? trace_contention_end+0x3d/0x140 [ 988.838955][T21687] ? __mutex_lock+0x305/0x15a0 [ 988.838981][T21687] ? kasan_quarantine_put+0xbb/0x1f0 [ 988.839010][T21687] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 988.839035][T21687] ? __pfx___mutex_lock+0x10/0x10 [ 988.839059][T21687] ? tomoyo_path_number_perm+0x219/0x5f0 [ 988.839088][T21687] ? do_vfs_ioctl+0x116f/0x1530 [ 988.839114][T21687] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 988.839140][T21687] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 988.839170][T21687] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 988.839214][T21687] ? __fget_files+0x2a/0x420 [ 988.839238][T21687] ? __fget_files+0x2a/0x420 [ 988.839268][T21687] ? __fget_files+0x2a/0x420 [ 988.839295][T21687] ? bpf_lsm_file_ioctl+0x9/0x20 [ 988.839318][T21687] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 988.839341][T21687] __se_sys_ioctl+0xfc/0x170 [ 988.839367][T21687] do_syscall_64+0x166/0x520 [ 988.839388][T21687] ? trace_irq_disable+0x3b/0x140 [ 988.839409][T21687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.839433][T21687] ? clear_bhb_loop+0x70/0xc0 [ 988.839459][T21687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.839482][T21687] RIP: 0033:0x7f68db99e199 [ 988.839504][T21687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.839525][T21687] RSP: 002b:00007f68dc94d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 988.839550][T21687] RAX: ffffffffffffffda RBX: 00007f68dbc25fa0 RCX: 00007f68db99e199 [ 988.839568][T21687] RDX: 00002000000001c0 RSI: 000000004400ae8f RDI: 0000000000000005 [ 988.839584][T21687] RBP: 00007f68dc94d090 R08: 0000000000000000 R09: 0000000000000000 [ 988.839599][T21687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.839613][T21687] R13: 00007f68dbc26038 R14: 00007f68dbc25fa0 R15: 00007ffd5f156f68 [ 988.839648][T21687] [ 989.042687][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 989.682472][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 989.704536][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 989.705688][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 989.706683][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 989.707330][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 989.743373][T15292] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 989.863681][T15292] usb 6-1: device descriptor read/64, error -71 [ 990.113335][T15292] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 990.146928][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.243754][T15157] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 990.243877][T15292] usb 6-1: device descriptor read/64, error -71 [ 990.355330][T15292] usb usb6-port1: attempt power cycle [ 990.393936][T15157] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 990.395401][T15157] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.395444][T15157] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 990.395473][T15157] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 990.395497][T15157] usb 8-1: config 0 interface 0 has no altsetting 0 [ 990.400180][T15157] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 990.400217][T15157] usb 8-1: Product: syz [ 990.400236][T15157] usb 8-1: Manufacturer: syz [ 990.400253][T15157] usb 8-1: SerialNumber: syz [ 990.483174][T15157] usb 8-1: config 0 descriptor?? [ 990.509673][T15157] usb 8-1: selecting invalid altsetting 0 [ 990.703563][T15292] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 990.725525][T15292] usb 6-1: device descriptor read/8, error -71 [ 990.783804][T21490] usb 8-1: USB disconnect, device number 21 [ 990.864903][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.922693][T21357] udevd[21357]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 990.965984][T15292] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 990.984044][T15292] usb 6-1: device descriptor read/8, error -71 [ 991.094898][T15292] usb usb6-port1: unable to enumerate USB device [ 991.172771][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.292041][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.801010][T21709] FAULT_INJECTION: forcing a failure. [ 991.801010][T21709] name failslab, interval 1, probability 0, space 0, times 0 [ 991.801139][T21709] CPU: 0 UID: 0 PID: 21709 Comm: syz.7.4350 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.801172][T21709] Tainted: [L]=SOFTLOCKUP [ 991.801181][T21709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 991.801196][T21709] Call Trace: [ 991.801204][T21709] [ 991.801214][T21709] dump_stack_lvl+0xe8/0x150 [ 991.801245][T21709] should_fail_ex+0x3eb/0x540 [ 991.801274][T21709] should_failslab+0xa8/0x100 [ 991.801299][T21709] __kmalloc_noprof+0xf9/0x710 [ 991.801321][T21709] ? rcu_is_watching+0x16/0xb0 [ 991.801344][T21709] ? tomoyo_realpath_from_path+0xef/0x640 [ 991.801368][T21709] ? tomoyo_realpath_from_path+0xef/0x640 [ 991.801406][T21709] tomoyo_realpath_from_path+0xef/0x640 [ 991.801441][T21709] ? tomoyo_path_number_perm+0x219/0x5f0 [ 991.801465][T21709] tomoyo_path_number_perm+0x246/0x5f0 [ 991.801496][T21709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 991.801518][T21709] ? __lock_acquire+0x747/0x2de0 [ 991.801549][T21709] ? __ia32_sys_rt_sigreturn+0x7b9/0x8c0 [ 991.801614][T21709] ? __fget_files+0x2a/0x420 [ 991.801639][T21709] ? __fget_files+0x2a/0x420 [ 991.801660][T21709] ? __fget_files+0x2a/0x420 [ 991.801687][T21709] security_file_ioctl+0xc3/0x2a0 [ 991.801713][T21709] __se_sys_ioctl+0x47/0x170 [ 991.801737][T21709] do_syscall_64+0x166/0x520 [ 991.801760][T21709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.801783][T21709] ? clear_bhb_loop+0x70/0xc0 [ 991.801807][T21709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.801831][T21709] RIP: 0033:0x7f478c39e199 [ 991.801851][T21709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.801870][T21709] RSP: 002b:00007f478d1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 991.801895][T21709] RAX: ffffffffffffffda RBX: 00007f478c625fa0 RCX: 00007f478c39e199 [ 991.801912][T21709] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 991.801926][T21709] RBP: 00007f478d1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 991.801940][T21709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.801954][T21709] R13: 00007f478c626038 R14: 00007f478c625fa0 R15: 00007ffe777537a8 [ 991.801988][T21709] [ 991.809336][T21709] ERROR: Out of memory at tomoyo_realpath_from_path. [ 991.833562][T17476] Bluetooth: hci0: command tx timeout [ 992.202013][T21624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 992.233962][T21624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.292230][T21624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 992.314767][T21624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.401892][T21624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 992.420960][T21624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.444496][T21624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 992.463693][T21624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 992.649143][ T61] bridge_slave_1: left allmulticast mode [ 992.649174][ T61] bridge_slave_1: left promiscuous mode [ 992.649407][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.674220][ T61] bridge_slave_0: left allmulticast mode [ 992.674246][ T61] bridge_slave_0: left promiscuous mode [ 992.674458][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.937391][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.941125][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.943701][T15217] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 992.976136][ T61] bond0 (unregistering): Released all slaves [ 993.103173][T15217] usb 8-1: Using ep0 maxpacket: 32 [ 993.103981][T15217] usb 8-1: New USB device found: idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 993.105141][T15217] usb 8-1: config 2 has an invalid interface number: 51 but max is 0 [ 993.105170][T15217] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 993.105191][T15217] usb 8-1: config 2 has no interface number 0 [ 993.105238][T15217] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 993.105281][T15217] usb 8-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 993.105306][T15217] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 993.105331][T15217] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 993.105367][T15217] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 993.105398][T15217] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 993.105423][T15217] usb 8-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 993.105448][T15217] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 993.105475][T15217] usb 8-1: config 2 interface 51 altsetting 255 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 993.105504][T15217] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 993.105533][T15217] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 993.105558][T15217] usb 8-1: config 2 interface 51 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 993.105588][T15217] usb 8-1: config 2 interface 51 has no altsetting 0 [ 993.107907][T15217] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.107935][T15217] usb 8-1: Product: syz [ 993.107951][T15217] usb 8-1: Manufacturer: syz [ 993.107968][T15217] usb 8-1: SerialNumber: syz [ 993.205152][T21723] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 993.261254][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.261416][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.363909][ T61] tipc: Disabling bearer [ 993.364119][ T61] tipc: Left network mode [ 993.586486][T15217] keyspan_pda 8-1:2.51: Keyspan PDA converter detected [ 993.605993][T15217] usb 8-1: Keyspan PDA converter now attached to ttyUSB0 [ 993.641703][T15217] usb 8-1: USB disconnect, device number 22 [ 993.696495][T15217] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 993.698038][T15217] keyspan_pda 8-1:2.51: device disconnected [ 993.783144][ T27] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 993.895444][T21694] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.895562][T21694] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.895674][T21694] bridge_slave_0: entered allmulticast mode [ 993.900045][T21694] bridge_slave_0: entered promiscuous mode [ 993.907959][T17476] Bluetooth: hci0: command tx timeout [ 993.915402][ T27] usb 6-1: device descriptor read/64, error -71 [ 993.922993][T21694] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.935340][T21694] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.935748][T21694] bridge_slave_1: entered allmulticast mode [ 993.951623][T21694] bridge_slave_1: entered promiscuous mode [ 994.069397][ T61] hsr_slave_0: left promiscuous mode [ 994.070858][ T61] hsr_slave_1: left promiscuous mode [ 994.072986][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.073008][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.100682][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 994.100705][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.129443][ T61] veth1_macvtap: left promiscuous mode [ 994.129473][ T61] veth0_macvtap: left promiscuous mode [ 994.129546][ T61] veth1_vlan: left promiscuous mode [ 994.129594][ T61] veth0_vlan: left promiscuous mode [ 994.173233][ T27] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 994.303392][ T27] usb 6-1: device descriptor read/64, error -71 [ 994.413518][ T27] usb usb6-port1: attempt power cycle [ 994.703300][T17476] Bluetooth: hci1: command 0x0406 tx timeout [ 994.753191][ T27] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 994.775944][ T27] usb 6-1: device descriptor read/8, error -71 [ 994.825006][ T61] team0 (unregistering): Port device team_slave_1 removed [ 994.848951][ T61] team0 (unregistering): Port device team_slave_0 removed [ 995.014603][ T27] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 995.034828][ T27] usb 6-1: device descriptor read/8, error -71 [ 995.072293][T21694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.084901][T21694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.143949][ T27] usb usb6-port1: unable to enumerate USB device [ 995.195628][T21694] team0: Port device team_slave_0 added [ 995.201596][T21694] team0: Port device team_slave_1 added [ 995.338490][T21694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.338509][T21694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.338534][T21694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.346564][T21694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.346580][T21694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.346607][T21694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.563925][T21694] hsr_slave_0: entered promiscuous mode [ 995.565667][T21694] hsr_slave_1: entered promiscuous mode [ 995.568107][T21694] debugfs: 'hsr0' already exists in 'hsr' [ 995.568129][T21694] Cannot create hsr debugfs directory [ 995.720670][T21624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.862332][T21624] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.882177][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.882299][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.968043][T21694] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.984843][ T5617] Bluetooth: hci0: command tx timeout [ 996.026716][T19815] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.026835][T19815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.129837][T21694] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.230786][T21694] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.387164][T21694] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.056952][T21694] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 997.077158][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.079674][T21694] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 997.103899][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.106519][T21694] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 997.130673][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.131670][T21694] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 997.150620][T21694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.273619][T21490] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 997.305599][T21694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.333543][T21694] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.356004][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.356082][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.399426][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.399500][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.437440][T21490] usb 8-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 997.438442][T21490] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 997.438480][T21490] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 997.438502][T21490] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 997.438519][T21490] usb 8-1: config 0 interface 0 has no altsetting 0 [ 997.444938][T21490] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 997.444998][T21490] usb 8-1: Product: syz [ 997.445031][T21490] usb 8-1: Manufacturer: syz [ 997.445079][T21490] usb 8-1: SerialNumber: syz [ 997.497804][T21490] usb 8-1: config 0 descriptor?? [ 997.570258][T21490] usb 8-1: selecting invalid altsetting 0 [ 997.586698][ T27] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 997.739168][ T27] usb 6-1: unable to get BOS descriptor or descriptor too short [ 997.741116][ T27] usb 6-1: not running at top speed; connect to a high speed hub [ 997.741150][ T27] usb 6-1: New USB device found: idVendor=0e41, idProduct=4249, bcdDevice=0.40 [ 997.742350][ T27] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 997.742396][ T27] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 111, changing to 4 [ 997.802496][ T27] usb 6-1: string descriptor 0 read error: -22 [ 997.802649][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.931028][ T27] usb 6-1: 1:1 : bogus bTerminalLink 9 [ 997.945721][T21490] usb 8-1: USB disconnect, device number 23 [ 998.065639][ T5617] Bluetooth: hci0: command tx timeout [ 998.098806][ T27] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 998.174479][T21742] snd-usb-audio 8-1:0.0: Runtime PM usage count underflow! [ 998.204247][ T27] usb 6-1: USB disconnect, device number 63 [ 998.260424][T21624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.479675][T21357] udevd[21357]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 998.519833][T21624] veth0_vlan: entered promiscuous mode [ 998.557289][T21624] veth1_vlan: entered promiscuous mode [ 998.614801][T21624] veth0_macvtap: entered promiscuous mode [ 998.619891][T21624] veth1_macvtap: entered promiscuous mode [ 998.683983][T21624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.715883][T21624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.784698][T19815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.815817][T19815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.840254][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.840598][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.919440][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.919464][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.012858][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.012893][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.150327][T21694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.044394][T15967] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 1000.122527][T21694] veth0_vlan: entered promiscuous mode [ 1000.169405][T21694] veth1_vlan: entered promiscuous mode [ 1000.206224][T15967] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1000.232575][T15967] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1000.232612][T15967] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1000.232641][T15967] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1000.232667][T15967] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1000.286697][T15967] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1000.286728][T15967] usb 6-1: Product: syz [ 1000.286745][T15967] usb 6-1: Manufacturer: syz [ 1000.286761][T15967] usb 6-1: SerialNumber: syz [ 1000.315086][T21694] veth0_macvtap: entered promiscuous mode [ 1000.320423][T15967] usb 6-1: config 0 descriptor?? [ 1000.336729][T21694] veth1_macvtap: entered promiscuous mode [ 1000.362439][T15967] usb 6-1: selecting invalid altsetting 0 [ 1000.428220][T21694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.459813][T21694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.563198][T13802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.563254][T13802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.563297][T13802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.563338][T13802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.677439][T15967] usb 6-1: USB disconnect, device number 64 [ 1000.945331][T13800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.945357][T13800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.972541][T21357] udevd[21357]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1001.102291][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.102315][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.670338][T15292] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1001.813215][T15292] usb 8-1: Using ep0 maxpacket: 8 [ 1001.814081][T15292] usb 8-1: New USB device found: idVendor=0582, idProduct=00a3, bcdDevice=0.40 [ 1001.815478][T21806] FAULT_INJECTION: forcing a failure. [ 1001.815478][T21806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.815509][T21806] CPU: 0 UID: 0 PID: 21806 Comm: syz.5.4367 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.815541][T21806] Tainted: [L]=SOFTLOCKUP [ 1001.815549][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1001.815563][T21806] Call Trace: [ 1001.815571][T21806] [ 1001.815586][T21806] dump_stack_lvl+0xe8/0x150 [ 1001.815615][T21806] should_fail_ex+0x3eb/0x540 [ 1001.815643][T21806] _copy_to_user+0x31/0xb0 [ 1001.815667][T21806] simple_read_from_buffer+0xe1/0x170 [ 1001.815697][T21806] proc_fail_nth_read+0x1bb/0x230 [ 1001.815722][T21806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.815748][T21806] ? rw_verify_area+0x24a/0x4c0 [ 1001.815773][T21806] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.815795][T21806] vfs_read+0x213/0xa80 [ 1001.815822][T21806] ? __pfx___mutex_lock+0x10/0x10 [ 1001.815845][T21806] ? __pfx_vfs_read+0x10/0x10 [ 1001.815868][T21806] ? __fget_files+0x2a/0x420 [ 1001.815888][T21806] ? __fget_files+0x3a2/0x420 [ 1001.815908][T21806] ? __fget_files+0x2a/0x420 [ 1001.815933][T21806] ? fdget+0x1ac/0x250 [ 1001.815961][T21806] ksys_read+0x150/0x270 [ 1001.815985][T21806] ? __pfx_ksys_read+0x10/0x10 [ 1001.816006][T21806] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1001.816040][T21806] do_syscall_64+0x166/0x520 [ 1001.816061][T21806] ? trace_irq_disable+0x3b/0x140 [ 1001.816082][T21806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.816115][T21806] ? clear_bhb_loop+0x70/0xc0 [ 1001.816157][T21806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.816182][T21806] RIP: 0033:0x7f68db95e9ce [ 1001.816203][T21806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1001.816223][T21806] RSP: 002b:00007f68dc94cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1001.816249][T21806] RAX: ffffffffffffffda RBX: 00007f68dc94d6c0 RCX: 00007f68db95e9ce [ 1001.816266][T21806] RDX: 000000000000000f RSI: 00007f68dc94d0a0 RDI: 0000000000000004 [ 1001.816282][T21806] RBP: 00007f68dc94d090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.816297][T21806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.816311][T21806] R13: 00007f68dbc26038 R14: 00007f68dbc25fa0 R15: 00007ffd5f156f68 [ 1001.816347][T21806] [ 1001.816843][T15292] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1001.819470][T15292] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.819498][T15292] usb 8-1: Product: syz [ 1001.819514][T15292] usb 8-1: Manufacturer: syz [ 1001.819531][T15292] usb 8-1: SerialNumber: syz [ 1002.234676][T15292] usb 8-1: USB disconnect, device number 24 [ 1002.334697][T21356] udevd[21356]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.223155][T15967] usb 8-1: new low-speed USB device number 25 using dummy_hcd [ 1003.373900][T15967] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1003.374919][T15967] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1003.374983][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1003.375013][T15967] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.375040][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1003.375069][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1003.377333][T15967] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1003.377381][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1003.377410][T15967] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.377439][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1003.377467][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1003.378557][T15967] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1003.378607][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1003.378638][T15967] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.378667][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1003.378696][T15967] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1003.382890][T15967] usb 8-1: string descriptor 0 read error: -22 [ 1003.383084][T15967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.618597][T15967] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1003.850418][T15967] usb 8-1: USB disconnect, device number 25 [ 1004.936677][T21820] FAULT_INJECTION: forcing a failure. [ 1004.936677][T21820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.936715][T21820] CPU: 1 UID: 0 PID: 21820 Comm: syz.4.4373 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.936746][T21820] Tainted: [L]=SOFTLOCKUP [ 1004.936755][T21820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1004.936769][T21820] Call Trace: [ 1004.936778][T21820] [ 1004.936788][T21820] dump_stack_lvl+0xe8/0x150 [ 1004.936818][T21820] should_fail_ex+0x3eb/0x540 [ 1004.936846][T21820] _copy_from_user+0x2d/0xb0 [ 1004.936870][T21820] video_usercopy+0x359/0x1430 [ 1004.936901][T21820] ? __pfx___video_do_ioctl+0x10/0x10 [ 1004.936927][T21820] ? __pfx_video_usercopy+0x10/0x10 [ 1004.936966][T21820] ? __fget_files+0x2a/0x420 [ 1004.936988][T21820] ? __fget_files+0x2a/0x420 [ 1004.937016][T21820] v4l2_ioctl+0x18d/0x1e0 [ 1004.937040][T21820] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1004.937063][T21820] __se_sys_ioctl+0xfc/0x170 [ 1004.937089][T21820] do_syscall_64+0x166/0x520 [ 1004.937111][T21820] ? trace_irq_disable+0x3b/0x140 [ 1004.937132][T21820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.937157][T21820] ? clear_bhb_loop+0x70/0xc0 [ 1004.937182][T21820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.937205][T21820] RIP: 0033:0x7fd8af19e199 [ 1004.937226][T21820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.937245][T21820] RSP: 002b:00007fd8b00e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.937270][T21820] RAX: ffffffffffffffda RBX: 00007fd8af425fa0 RCX: 00007fd8af19e199 [ 1004.937287][T21820] RDX: 0000200000000380 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1004.937302][T21820] RBP: 00007fd8b00e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.937317][T21820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.937331][T21820] R13: 00007fd8af426038 R14: 00007fd8af425fa0 R15: 00007ffdef860418 [ 1004.937365][T21820] [ 1005.375011][T21822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1006.339128][T21829] netlink: 'syz.7.4377': attribute type 11 has an invalid length. [ 1007.518617][T21840] sg_write: data in/out 352308/136 bytes for SCSI command 0x0-- guessing data in; [ 1007.518617][T21840] program syz.7.4383 not setting count and/or reply_len properly [ 1008.920214][T21846] netlink: 'syz.7.4386': attribute type 2 has an invalid length. [ 1008.920243][T21846] netlink: 'syz.7.4386': attribute type 1 has an invalid length. [ 1008.920260][T21846] netlink: 'syz.7.4386': attribute type 8 has an invalid length. [ 1008.920278][T21846] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1009.231425][T21848] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.231455][T21848] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1009.231552][T21848] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1009.231574][T21848] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1009.425016][T21848] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4387'. [ 1009.710825][T21847] [ 1009.713247][T21847] ====================================================== [ 1009.720288][T21847] WARNING: possible circular locking dependency detected [ 1009.727343][T21847] syzkaller #0 Tainted: G L [ 1009.733428][T21847] ------------------------------------------------------ [ 1009.740557][T21847] syz.7.4387/21847 is trying to acquire lock: [ 1009.746647][T21847] ffff88807b792fe8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd30 [ 1009.758205][T21847] [ 1009.758205][T21847] but task is already holding lock: [ 1009.765614][T21847] ffff888021318ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1009.774628][T21847] [ 1009.774628][T21847] which lock already depends on the new lock. [ 1009.774628][T21847] [ 1009.785051][T21847] [ 1009.785051][T21847] the existing dependency chain (in reverse order) is: [ 1009.794092][T21847] [ 1009.794092][T21847] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1009.801870][T21847] lock_sock_nested+0x41/0x100 [ 1009.807200][T21847] smc_listen_out+0xd4/0x3d0 [ 1009.812345][T21847] smc_listen_work+0x81d/0x1410 [ 1009.818302][T21847] process_scheduled_works+0xc3d/0x1630 [ 1009.824420][T21847] worker_thread+0xa47/0xfb0 [ 1009.829579][T21847] kthread+0x38b/0x480 [ 1009.834199][T21847] ret_from_fork+0x514/0xb70 [ 1009.839354][T21847] ret_from_fork_asm+0x1a/0x30 [ 1009.844687][T21847] [ 1009.844687][T21847] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1009.854915][T21847] __lock_acquire+0x164c/0x2de0 [ 1009.860336][T21847] lock_acquire+0x115/0x350 [ 1009.865404][T21847] __flush_work+0x7a6/0xd30 [ 1009.870465][T21847] cancel_work_sync+0xb8/0xf0 [ 1009.875690][T21847] smc_clcsock_release+0x60/0xf0 [ 1009.881179][T21847] __smc_release+0x64e/0x7c0 [ 1009.886317][T21847] smc_close_non_accepted+0xd5/0x1f0 [ 1009.892159][T21847] smc_close_active+0xbd8/0x1000 [ 1009.897656][T21847] __smc_release+0x9c/0x7c0 [ 1009.902704][T21847] smc_release+0x2c5/0x550 [ 1009.907668][T21847] __sock_release+0xa0/0x1f0 [ 1009.912811][T21847] sock_close+0x1c/0x30 [ 1009.917508][T21847] __fput+0x408/0xa40 [ 1009.922033][T21847] fput_close_sync+0x11f/0x240 [ 1009.927371][T21847] filp_close_sync+0x6e/0xa0 [ 1009.932514][T21847] __se_sys_close_range+0xa77/0xef0 [ 1009.938256][T21847] do_syscall_64+0x166/0x520 [ 1009.943433][T21847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.949908][T21847] [ 1009.949908][T21847] other info that might help us debug this: [ 1009.949908][T21847] [ 1009.960154][T21847] Possible unsafe locking scenario: [ 1009.960154][T21847] [ 1009.967628][T21847] CPU0 CPU1 [ 1009.973018][T21847] ---- ---- [ 1009.978410][T21847] lock(sk_lock-AF_SMC/1); [ 1009.982973][T21847] lock((work_completion)(&new_smc->smc_listen_work)); [ 1009.992480][T21847] lock(sk_lock-AF_SMC/1); [ 1009.999550][T21847] lock((work_completion)(&new_smc->smc_listen_work)); [ 1010.006509][T21847] [ 1010.006509][T21847] *** DEADLOCK *** [ 1010.006509][T21847] [ 1010.014669][T21847] locks held by syz.7.4387/21847: 3, last CPU#0: [ 1010.021034][T21847] #0: ffff888059201380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1010.031605][T21847] #1: ffff888021318ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1010.041046][T21847] #2: ffffffff8f15a260 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd30 [ 1010.050305][T21847] [ 1010.050305][T21847] stack backtrace: [ 1010.056238][T21847] CPU: 0 UID: 0 PID: 21847 Comm: syz.7.4387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.067314][T21847] Tainted: [L]=SOFTLOCKUP [ 1010.071659][T21847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1010.081743][T21847] Call Trace: [ 1010.085049][T21847] [ 1010.088004][T21847] dump_stack_lvl+0xe8/0x150 [ 1010.092625][T21847] print_circular_bug+0x2e2/0x300 [ 1010.097675][T21847] check_noncircular+0x12f/0x150 [ 1010.102638][T21847] __lock_acquire+0x164c/0x2de0 [ 1010.107513][T21847] ? do_raw_spin_unlock+0xf5/0x200 [ 1010.112649][T21847] lock_acquire+0x115/0x350 [ 1010.117174][T21847] ? __flush_work+0x101/0xd30 [ 1010.121889][T21847] ? __flush_work+0x101/0xd30 [ 1010.126590][T21847] __flush_work+0x7a6/0xd30 [ 1010.131205][T21847] ? __flush_work+0x101/0xd30 [ 1010.135910][T21847] ? __flush_work+0x101/0xd30 [ 1010.140615][T21847] ? __pfx___flush_work+0x10/0x10 [ 1010.145664][T21847] ? __pfx_wq_barrier_func+0x10/0x10 [ 1010.150994][T21847] ? cancel_work_sync+0x5a/0xf0 [ 1010.155881][T21847] cancel_work_sync+0xb8/0xf0 [ 1010.160589][T21847] smc_clcsock_release+0x60/0xf0 [ 1010.165576][T21847] __smc_release+0x64e/0x7c0 [ 1010.170199][T21847] smc_close_non_accepted+0xd5/0x1f0 [ 1010.175515][T21847] smc_close_active+0xbd8/0x1000 [ 1010.180479][T21847] ? __pfx_sock_def_readable+0x10/0x10 [ 1010.185971][T21847] __smc_release+0x9c/0x7c0 [ 1010.190496][T21847] ? __local_bh_enable_ip+0xd6/0x140 [ 1010.195810][T21847] smc_release+0x2c5/0x550 [ 1010.200252][T21847] __sock_release+0xa0/0x1f0 [ 1010.204870][T21847] ? __pfx_sock_close+0x10/0x10 [ 1010.209744][T21847] sock_close+0x1c/0x30 [ 1010.213932][T21847] __fput+0x408/0xa40 [ 1010.217949][T21847] fput_close_sync+0x11f/0x240 [ 1010.222738][T21847] ? __pfx_fput_close_sync+0x10/0x10 [ 1010.228075][T21847] filp_close_sync+0x6e/0xa0 [ 1010.232693][T21847] __se_sys_close_range+0xa77/0xef0 [ 1010.237957][T21847] ? __pfx___se_sys_close_range+0x10/0x10 [ 1010.243717][T21847] do_syscall_64+0x166/0x520 [ 1010.248354][T21847] ? trace_irq_disable+0x3b/0x140 [ 1010.253405][T21847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.259495][T21847] ? clear_bhb_loop+0x70/0xc0 [ 1010.264199][T21847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.270131][T21847] RIP: 0033:0x7f478c39e199 [ 1010.274597][T21847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.294312][T21847] RSP: 002b:00007ffe77753908 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1010.302766][T21847] RAX: ffffffffffffffda RBX: 00007f478c627da0 RCX: 00007f478c39e199 [ 1010.310798][T21847] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1010.318798][T21847] RBP: 00007f478c627da0 R08: 00007f478c626038 R09: 0000000000000000 [ 1010.326791][T21847] R10: 00000000003ffc44 R11: 0000000000000246 R12: 00000000000f6932 [ 1010.334791][T21847] R13: 00007f478c62609c R14: 00000000000f674b R15: 00007f478c626090 [ 1010.342790][T21847] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1010.959869][T21382] syz_tun (unregistering): left allmulticast mode [ 1011.245305][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.348013][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.488492][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.540210][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.714559][ T13] bridge_slave_1: left allmulticast mode [ 1011.714586][ T13] bridge_slave_1: left promiscuous mode [ 1011.714756][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.718485][ T13] bridge_slave_0: left allmulticast mode [ 1011.718507][ T13] bridge_slave_0: left promiscuous mode [ 1011.718671][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.921882][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.932895][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.941929][ T13] bond0 (unregistering): Released all slaves [ 1012.022384][ T13] tipc: Disabling bearer [ 1012.022488][ T13] tipc: Left network mode [ 1012.119853][ T13] hsr_slave_0: left promiscuous mode [ 1012.120362][ T13] hsr_slave_1: left promiscuous mode [ 1012.120973][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.120993][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.121578][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.121596][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.141684][ T13] veth1_macvtap: left promiscuous mode [ 1012.141766][ T13] veth0_macvtap: left promiscuous mode [ 1012.146601][ T13] veth1_vlan: left promiscuous mode [ 1012.146741][ T13] veth0_vlan: left promiscuous mode [ 1012.451130][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1012.484137][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1012.915295][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.981172][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.018509][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.082436][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.232706][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.291803][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.349999][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.419174][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.563944][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.619664][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.681350][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.741291][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.894549][ T13] bridge_slave_1: left allmulticast mode [ 1013.894587][ T13] bridge_slave_1: left promiscuous mode [ 1013.894777][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.897313][ T13] bridge_slave_0: left allmulticast mode [ 1013.898848][ T13] bridge_slave_0: left promiscuous mode [ 1013.899007][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.939554][ T13] bridge_slave_1: left allmulticast mode [ 1013.939588][ T13] bridge_slave_1: left promiscuous mode [ 1013.939726][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.942837][ T13] bridge_slave_0: left allmulticast mode [ 1013.942857][ T13] bridge_slave_0: left promiscuous mode [ 1013.942985][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.988983][ T13] bridge_slave_1: left allmulticast mode [ 1013.989009][ T13] bridge_slave_1: left promiscuous mode [ 1013.989169][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.991596][ T13] bridge_slave_0: left allmulticast mode [ 1013.991619][ T13] bridge_slave_0: left promiscuous mode [ 1013.991748][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.166523][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.168286][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.169383][ T13] bond0 (unregistering): Released all slaves [ 1014.285082][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.288439][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.291199][ T13] bond0 (unregistering): Released all slaves [ 1014.388909][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.403891][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.405078][ T13] bond0 (unregistering): Released all slaves [ 1014.869155][ T13] hsr_slave_0: left promiscuous mode [ 1014.869630][ T13] hsr_slave_1: left promiscuous mode [ 1014.870245][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.870265][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.872232][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.872252][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.917617][ T13] hsr_slave_0: left promiscuous mode [ 1014.918065][ T13] hsr_slave_1: left promiscuous mode [ 1014.918640][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.918658][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.920825][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.920843][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.966534][ T13] hsr_slave_0: left promiscuous mode [ 1014.968418][ T13] hsr_slave_1: left promiscuous mode [ 1014.969000][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.969019][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.969618][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.969635][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.019513][ T13] veth1_macvtap: left promiscuous mode [ 1015.019547][ T13] veth0_macvtap: left promiscuous mode [ 1015.019635][ T13] veth1_vlan: left promiscuous mode [ 1015.019685][ T13] veth0_vlan: left promiscuous mode [ 1015.021800][ T13] veth1_macvtap: left promiscuous mode [ 1015.021827][ T13] veth0_macvtap: left promiscuous mode [ 1015.021898][ T13] veth1_vlan: left promiscuous mode [ 1015.021959][ T13] veth0_vlan: left promiscuous mode [ 1015.068100][ T13] veth1_macvtap: left promiscuous mode [ 1015.068134][ T13] veth0_macvtap: left promiscuous mode [ 1015.068204][ T13] veth1_vlan: left promiscuous mode [ 1015.068254][ T13] veth0_vlan: left promiscuous mode [ 1015.381866][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1015.421386][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1015.681845][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1015.700079][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1015.996947][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1016.002795][ T13] team0 (unregistering): Port device team_slave_0 removed