last executing test programs: 11m45.07977775s ago: executing program 32 (id=164): mount(0x0, 0x0, &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000003c0)='1,0x400000,0x401000,X', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000020000185"], 0x76) 9m26.707748978s ago: executing program 33 (id=737): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000300)={0x0, 0x30b3, 0x40, 0x1, 0x158}, &(0x7f0000001540)=0x0, &(0x7f0000001580)=0x0, &(0x7f00000015c0)=0x0) r5 = syz_open_dev$mouse(&(0x7f0000000240), 0x0, 0x208080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001ac0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r5, 0xc1105518, &(0x7f0000001b40)={{0x5, 0x1, 0x1000, 0x1, '\x00', 0x3}, 0x2, 0x2, 0xfffffffe, r6, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f0000001b00)=['\x00'], 0x1}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000001600)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001680)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f00000016c0)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000001700)={0x0, 0x1fffd, 0x0, 0x1, 0x2000000}, &(0x7f0000001780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x20, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x4, 0x1, 0x392}}], 0x1, &(0x7f0000001a00)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000001a80)={0x3c, {0x9, 0x6, 0x6, 0xffff, 0x4, 0x8f}}) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5200006cf71749931db36496f39ae030361c00", @ANYRES16=r13, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0xb82, 0x400000, 0x1ff, 0x4, 0x40000000, 0x402, 0x20000009, 0x5, 0x1, 0x8, 0x4006, 0x84, 0xfffffffc, 0xffffffff, 0x37e9, 0x80000004, 0x6, 0x5, 0xfffffffc, 0x3}}) syz_clone3(&(0x7f0000001480)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x14}, &(0x7f00000000c0)=""/109, 0x6d, &(0x7f0000000440)=""/4096, &(0x7f0000001440)=[0xffffffffffffffff], 0x1}, 0x58) sched_setscheduler(r14, 0x6, &(0x7f0000001500)=0x8) r15 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) 9m18.204532767s ago: executing program 34 (id=760): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x2}, 0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000740)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000b40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "e30e550f35ef77"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001b40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001d40)={{0x0, 0x1ff, 0x2, 0x400, 0x698, 0x1, 0x0, 0x1ff, 0xd, 0xfffffff8, 0x8, 0x2fa56a7f, 0x7, 0x7ff, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002d40)={0x0, 0x0, "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", "198307fad48e77e04c299addc582b0ce343ab50d0ca13a5ca008914acae656e8e3bd05b38305a3302deb690f2626441bb90c61e250764a9a56e981ab59b0a2bb858f2d28f1165f021a740b3398ca639701d35e214b27d8d8fbbdabf25eb2f980bb17ddf5cd7096cea225b6c3cd18fade980db2e055502b744fb0f365650f53d2c1e592b7320e171903664d7bd496f74ffb883d3effd1fd3f2b1b9a4de4ba52d1ee3e7fd11352c7d4b15e5617174eef5128a24e7020fecd95159e88c39f68306d67434f7521e8cd7eb4bdb258a47e004a02d5ac86e85ead56f7ed0aac90fb44740354eecb44b5fafd42ae54db6726be9869157de03ee98d88265efc7811d12f1a7a8303f098f14d451b3dacc05576036a54d16329a682d23ca6edf48418d128e824fdf68d45595bf7c2790d6fd49c67e699829bc4def3fec1b6f3bafc5efaecdf5c7abbf04fb954f8273439b97eb6b6571d3ecee34edd0ac1c6b9411367c8e94a928a67bb49b0e56e790b7d478727374436d5c250a07a8064b900853e971e6923405e68660f0fdac90d1a5b08ac7be70fe117248cbacf469df4303deadd51e4a67498dc190acfb2bff8e1a26b796eb0d4646f6be39bf1273db5c8f3660af4373d8c5dafc2f679dc62596daeb016f70fdf31c98206f1d3fd5096483f41dec0836f7f50c62c21e43706e73ac5c61eef2b52a1afa9e2231278c88a32903923e6733c1de1c31b42363e2a8a1028bb95fcbd0fdc04942bea3e199be838bf7e938f715bd618f3529748238bf8744bab863ca33c90a954c0a92fe00a627c6775044faba9af46f18c28333b1e46409b4a3775a5eb16494b9c230ffe90cfe0cc4c0a005bd0da2438a272c6bd56ea6097079617961e854898735d830c85770b56482dde101a023c88465543abae4f2210ac64db3a222fa140b9dd59aa31b38ec5b4b94e366c9e0f3f15a219d261120063d6b541e9e679d2b92841e2a8ae7ca3d4001e73ef6ceb4265385331bfc9626b8bc07e05d2d04a3f3e041222ee2c124dd314bf69c9d0c5c380b41408ec01b6e4c313d8d5107ef7bd8fc6fe1f2363218188a98171c01a912081bd35ebe72926e14aa78712379bde6c52e41a10cc53c813d4c723c56924532c79b513b8bdcd589b9064fc93da7430839edbb0449e1a780220dca7cab0a6907e759875a32c22b8b657cf9bc3e714be2d262f75b6bb617c43b9ac1b678f1f6f1a39e48d71541ace7ca021c30d6ab0a13e4ddf2545036444dee5afd9be00bb1b7bd6deccb87bceff847b2ae495c4a99d9e016639540461a2091e6ea650bb969deb9290733152d265ed47446b70a654ab6df38ef3acda981b5414cb9e9e8b7c71e18d03d9275122b9faeb5c2755b82541ae9205b3d49679cae8a922dee828132eb3a54d14ececfb466d567f8fa779abe8e9503b845ba6e131f4cfa165bd7c8416d4d69996b0de1c45c3ed021832462589fc041cae5d289df11947549bbf50c4f98e2e495ef67226c077c3eabe33a49bedd5326a881108541697dc6e25800259c4f7afc0c0e84b85543ec93fcbd21d51563a6198abed6cb75549f07ab50fff05f682486966b3e04672a5ff4ea8d9766c2303452423a60c3d528efa33b1356841c89490e52748d0fcd88f896beb7dfb91656f3c7f0dadc3dd4b66fa8079903e74f08e2a299a74734ba23e5456e44b3cd2dfe987b69f72c221b231395244c6408079e30f6555b003c5f9b25baae335bc11c40954eb87e6adc82e0f42193a3870bb62caf4e8485e83e59bdb940dfe180a58b46f6c83a7bf1e9f890c2210cec61418ba27fef25556bcb8e195cb84e24ea3f556d0fd187c3e5e5bbf19c30b76079e3267ee35574e6e278a087dd9c6596e909a043793416c4c238573948b83548803695f6e8a47737512bf38daabb54436fefa1653bdaddfe44b6c07dde84ab08cecae72d7f79783931793989ff0788dedaade71496663793206a959476c221312fdca989db959dce07465d8e2f2f7c78ba999c46670412ac66249fef96b30369c238c10da08b2223acf7b94a235964361a5fda117bea0e056d6ef8f5bea70bd736bacec19cd1527f48c919e5353fd5faf76e2bfc7c335aa591547a3de623568e4f0d88d9ae721a302b5ac4daa3a27aeffe20d5963312d3c4dc025efba4a3b5eb9afa84346ffdfb5f991838cd1508d80741bbf85adb6f19f2fefd70cf5606a236eca14d6e4d4d63fcd611855aa76eb602f2ce0e0faf4e82ce4e7f173b2a0b8ae8281be4eaa85a72d584769f2c9131b2bce33eb52afa90ea21a5644b4077b1073c1ba15cfeded535ebe00902ff4df007cf7b176aa76f4a5f4ac3009ade0f48c37ddb2a46ca093c559ec58c7201d322b55b8adeba0cb08416be5358bfdb5511877cae46d9074273129754cb787c838370353ee7ac67273b4a08ff124c4851deba543669b80ea802453c09c49948ea9934933e08fb0323df0bb3331df1f98870532c8f03e774faceb7d7b55edd72d494eb264755548c91af5ce67e00012482ab4b7ec73d29c848dcba2af99626344102e869b8b8e91cbfd9e52781b43b5c6239454c1f594a395130ca2a2f5e88968a0439fe07f8f1e2bcf5bbced95902898c3b023d1ea8fabd5e23d47afca82cc07c09ed1b9da362dba2d2c674cf7d17615d9e1e23fe6ee1351a2fe655ed238d97f8b5e5f16b611e5cc056992bd19c0aaf2ff56071b291964dfce42131b37398687a64dfac778b6dcffe1ff117c71cc5baba086b359210d592a137cb77ea46d65a86b964e76c4fbc14e21071574e253947012e9c3ef016151bd09f648b7228ac4b5fdabd85021d8e5e74dfa575a6af69001b1bda547fe782d698c1ad130990ac212904e90db62b4a5e790d7b2e0c554e7435e80ead6f08630517b3d2f9ee375a348de6e155dea15e95a246d21789f29bd4eb4cda1f24878a85ee02493de09b99709c38344cba3b45b67cabd65b7e999c6ec9d082790b80d29054d735e7199e33a62c071b005de43f3dc031e8a07d5b93c16421f5880621e7d2c9ae226f8cf84a2c6a25a56fdff6c9cca43412e5435df2d3ae9afcd2a2a8df6baa34536f4d66f6a20de608534fc091359c8fb26fa0daaec273f55d07c86c66061a70f5759e664966fc7cb55e74574bc0339b5960dc25975e1b9de57098b94e8aea180c51605114874708ee07465acd84563fea278c0cf6ab84134898af48e7878aca7e7b0218a13c22c077653339e4435abf7ff06bb96c0132a08187549f328cd18b94dfe974d1c1f7a61d3d850b6f8a3051bcc20c2a8fac03384b17cf86aff6a7f772ebec234b867e1fe018182f8aae54f9c58c4bd29521e0ef64c340a1a0308524839baa5c1c6103a506d9de601d643fb1bda3f72ac2b6416775e24d87ac780a7a5ce246a39fd4d44c9bbe40ff3e97acbec5a413c854ac55bf71b4b91a301afd6e6e3233dbf47ce7d898f4db948b9c6166032cc84fe072ed101316fc3a7def6960faaf17ddab1adc5100eabb2b4818e8e0e5b4e2a5c797051a90b3bd559c65e019f1468459cd8014018f40e1b7160ee17343dded6b00447ca78aa098dca8ba6887619d9b2475611063cfc0141d08d5a77bd24587c7d36b449e06097608cc957b26375a474213f2baa797edd700a414ad42e2e2f522cbd2e083d51d53aa274029a4ed3eeab875df76b0cd5d355de514d65d7d198b452356925874500faaf6236ff20ccf1cf7f3be26d9fd2aee9af0294df0428fe0f8c04259024275d23165252802ab9beb415f40ad22cd44839c2d5ebeec91e6d4d2887b21be6bc035db752ca9e5ecb64fad38e0e499fc2bf00ed0acc6d3c9dcdbd03ace5d7a51a475ae34e063974d2cbb0be61c7a0810710b3b784e115201780abbaf0f3cc1e9170ca2fe11c70b4062bd3cc231ccaa7a60ba7712309a030f44a4873d7c2b00d421f9b112b04334e28144d41d0e2a84faca613a12353a1af7127839e6e9566d7b883c8a1323569ce160abc12ecfd809ec7a50c1d90030d487038fde903f90a0182097159b9e3cb9a4434409aa12dbde9b1b78112e8d7003cc693bd16409f2cf496ca62ce56fdf44c87f323c81462719bdb789e3fe50e2efe278888909366ea86141ba1127d1b4e2d03c04b2bac7e8764fd77141cba586e4d4b7c66afd6288f84a9cdb3392c54631d87e0a2059069b01c683efc079ca166f623898d4df19c0495d4ccd904f55d14a6f7438e8314e636444200493027492114b44478db22773fffa5e08a7a372b87e34581baa90835bd8703a064b4a9ac09cbf542b01d927f13e5f238afa921faef835431098f42544b3f5afc6855d74164661aac12556fa1e4dabf704ef197b9634ca0ef01354b34a674826b374a30c043c41d416736833da68cda9dfed27c92a221b1b6d5d5eb4311fe109d7bd247d11709791be445e26ca568f23f810db8704e191679db142746db29f6d79bef28cebb18a50471597d5e43d1333c0568979771a4a39baac8bc3ddf69638526e25d514a7d5c55ec085ab5bcd83a371a881e54a6413bf604c3a742356457feac0486922c35b63c33d76fb5f1f51c63ed5e3e9cc233e8f308c8305f3bd643bd7cdc98d5613ca506d092a9a50b5da166179b83a874dbd268596de6f5a41448dfa2606626f5a55192a9415b231c798b6058b67e480bd42ff0163f2bdb1ed6a4f325ba758e378d501135b67519fa6587b4dfb75b11b63732ca6a731d1023ebea7227d2d3acda7acd4ba9f229185237e54c9a1867a1744af0f00d8a524de54d97820f22dc1cc2976bf92aac989b51541eacaea7d77b1f401dc75cb5278bbc520e05e1a5615a1fbf419a1749aa8d1d94acbf79cd25919cd12362175e56fdfc0a774059956ba4dfe2dca085aec1c63f6172d5dfdfc628ec8fb19df08d36189e6e8fbb49025f1e916dd5f90c4463d436cb2fb9cc03027bdfb329d905483ae051cc6ebba3d26d6d9be9bc70839c2e1be550f2e4d0f9f7e70264fcf1327c11300a08d5b683d1f3f1f5bf583818309676794de2fb19cfb5ca447c86f39739ab0b4085b78768f458e53f2f5dbc3d08dc3071f3a27ef71b178a352ed1df954a9cab5d3c66d0e506017d256a7baaa68deb5c10c9cb75ed5ffe5a8f1ffb87f4b128e6a056d8490044c5706c6a8da00ea0096633d886462b311dcca016c875886d01e3dbab50860186e93ce13aec2f1ccc570c657bc25cf7785fc4a7c0ae42cf637e5002a0ffe30aaa8d6856ba138a989a9cfd89d7a87612d6280dc59099b27671f2d3c54fffeea826b1de3165aa96e2d3fadb8090ad11c90272ad38a7e6b00d338a3ffd2da3caa9f4d1bd9384b89a3382a67db1840874233a69de113e8567383fda0e8448d618c72d4b41645ebae9fa8d32cd094440ef3ea1259a3230b55cfcc072cbdbd14b8e009f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000003d40)={{0x0, 0x2, 0x2, 0x1, 0x22fd, 0x2, 0xa80, 0xb, 0x1fd5, 0x7, 0x6, 0x3, 0x6, 0x10000, 0x95}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000003e00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x8, "25b704058a9425"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000004e00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "7708de72a8f7f8"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000005e00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000006000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000006200)={{0x0, 0x7, 0x5, 0x4, 0xe3f, 0x0, 0x6, 0x3, 0x0, 0x60, 0x3, 0x6, 0x5, 0x8, 0x81}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000007200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000007400)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000007600)={0x2fdd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "43c3193b8a81e6"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000008600)={{0x0, 0x7, 0x2, 0xffffffff, 0x2, 0x0, 0x1, 0x0, 0x8, 0x5, 0x3, 0x9, 0xfffffffffffffffc, 0x5, 0xe}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000009600)={0xb80e, [{}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0xfb, "d5224a8d795ea1"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f000000a600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000000b600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000000b800)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r3, r4}, {r5, r6}, {r8, r10}, {r11, r12}, {r13}, {r14, r15}, {r16}, {0x0, r17}, {r18, r19}, {r20, r21}, {r23, r24}, {r25, r26}], 0x0, "4083d6e6b77b0c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000000c800)={{r20, 0x8, 0xbcb2, 0x7, 0x9587, 0x1400000000000000, 0x0, 0x6, 0x6, 0x3, 0x3, 0x7fffffffffffffff, 0x2, 0xc0, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) 9m0.28454227s ago: executing program 35 (id=828): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='memory.events\x00', 0x0, r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000280)={&(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r3], 0x28}, 0x4044804) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000500)=""/57, 0x39}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/141, 0x8d}, {&(0x7f0000001600)=""/35, 0x23}, {&(0x7f0000001640)=""/178, 0xb2}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/173, 0xad}, {&(0x7f00000027c0)=""/76, 0x4c}], 0x9}, 0x9}, {{0x0, 0x0, 0x0}, 0xc43a}], 0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000006, 0x14032, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002880)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r5, 0x0, 0x5ee, 0x20008800, &(0x7f00000028c0)={0x2, 0x4e20, @private=0x4a010100}, 0x10) syz_open_dev$char_usb(0xc, 0xb4, 0x8000) 8m27.151927078s ago: executing program 3 (id=957): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x20a, 0x40a, 0x3}}], 0x30}], 0x1, 0x0) 8m26.860189253s ago: executing program 3 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x300, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000340)={0x12, 0x10, 0xfa00, {&(0x7f0000000240), r6, r7}}, 0x18) r8 = memfd_secret(0x80000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000000100)=r9) getitimer(0x0, &(0x7f00000001c0)) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000103, 0x0, 0x2}]}) 8m26.723995286s ago: executing program 3 (id=959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000500)={0x2, 0x14, @local}, 0x10) (fail_nth: 9) 8m26.333999931s ago: executing program 3 (id=961): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x11090ca, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xa) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x2000005, 0x0, &(0x7f0000000380)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) r2 = syz_usb_connect(0x0, 0x49, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000040cc1769190001000000010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x1, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0xf, &(0x7f00000004c0)="010000000001010101010101010100") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 8m24.481484432s ago: executing program 3 (id=969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000007000100001c1122334400080000000500050000000500050007"], 0x4a) 8m24.096363184s ago: executing program 3 (id=970): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x2, {0x2, 0x4e23, @loopback}}, 0x24) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000280)=0x1c) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002680)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x60042, 0x1) close(r7) r8 = fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000004c0)={0x1, [0x0]}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000540)={r11, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000580)={r11, 0x8}, 0x8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r12, 0x301, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2040}, 0x4000100) getsockname(r0, 0x0, &(0x7f0000000600)) 8m23.504440124s ago: executing program 36 (id=970): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f00000001c0)=@in4={0x21, 0x2, 0x2, 0x2, {0x2, 0x4e23, @loopback}}, 0x24) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000280)=0x1c) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000002680)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x60042, 0x1) close(r7) r8 = fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x1) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000004c0)={0x1, [0x0]}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000540)={r11, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000580)={r11, 0x8}, 0x8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r12, 0x301, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2040}, 0x4000100) getsockname(r0, 0x0, &(0x7f0000000600)) 6m3.461804332s ago: executing program 8 (id=1713): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x7b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000002c0)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000340), 0xffffffffffffff94, 0x34, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) 6m0.359390936s ago: executing program 8 (id=1727): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) write$char_usb(r1, 0x0, 0x0) 5m57.261335754s ago: executing program 8 (id=1749): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000e00000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 5m56.556827467s ago: executing program 8 (id=1751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000480)={&(0x7f0000000580)=[{0x7fff, 0x401, 0x9, 0xfffffffffffffff6}], 0x1, 0x20, 0x8001, 0x14d2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000c00000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 5m56.222253798s ago: executing program 8 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x10, 0x18, 0x0, 0x0, @binary="01ac0f00029fccd88a6baa0d"}]}, 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./security\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./security/apparmor/.load\x00', 0x1, 0xb1) write(r1, &(0x7f0000000200)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c61677300070200000000020000000002000000000402", 0x3c) syz_clone(0x89820000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m56.011836454s ago: executing program 8 (id=1756): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @empty=0xffffffff}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000e00000000000000100000001000000000000001c"], 0x50}}], 0x2, 0x40) 5m40.613624639s ago: executing program 37 (id=1756): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @empty=0xffffffff}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000e00000000000000100000001000000000000001c"], 0x50}}], 0x2, 0x40) 5m21.27240456s ago: executing program 9 (id=1905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="92f88ec4841e4ca56301a831720de35f975ed995f2fdd9503c6c3fbe4c6bdcff2419436bf862715022105afcfea94da65b5707ae90f51130944ddadc7c1296a5aa4d03036b34c91c5d35b1f28ede009fb847094d4eba634d7d2d2c77fb8b87751efda772167f44f029573ffcaa92", 0x6e, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, &(0x7f00000005c0)="f779000f20e035000001000f22e066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x50}], 0x1, 0x43, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000006c0)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) openat$kvm(0x0, &(0x7f0000000780), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) r6 = fsopen(&(0x7f0000000180)='exfat\x00', 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000400)={0x0, 0x3, 0xa0}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20400) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, &(0x7f0000000340)={0x0, 0x0, 0xeb}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='iocharset', &(0x7f0000000380)='mo#harset', 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa82, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000000c0)={[{@subsystem='hugetlb'}]}) write(r10, 0x0, 0x0) r11 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r11, &(0x7f0000000040)={0x0, &(0x7f00000002c0)}) 5m21.005506803s ago: executing program 9 (id=1906): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb5be1c3e4feff0600000001000000450000002500003f190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 5m20.680260883s ago: executing program 9 (id=1909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000002c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Ec\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x4, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x30000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0x6, 0x5, 0x6}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbf, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x7c, '\x00', 0xdc}, {0xff, 0x9, 0xfe, '\x00', 0x1}, {0xfe, 0xa, 0x26}, {0xcf, 0x3, 0x9, '\x00', 0xa}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x5, 0xb, 0x4, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x1, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 5m20.288877376s ago: executing program 9 (id=1912): syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) write$char_usb(r0, 0x0, 0x0) 5m18.932394599s ago: executing program 9 (id=1916): pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000340)=""/57, 0x39) ptrace(0x10, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) write$tcp_mem(r2, &(0x7f00000002c0)={0x0, 0x20, 0x6c64, 0x20, 0xffffffffffffffff}, 0x48) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000900)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x3) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000400)=ANY=[]) syz_usb_control_io$uac2(r6, &(0x7f00000005c0)={0x14, &(0x7f0000000440)={0x0, 0x5, 0x8e, {0x8e, 0xd, "40e89de091b809322967c1789631e29ece06d452e96a95e8faf4c05f2b592b39804b45a7387a2584eaabcc098097d133137b545ad03788bc1291a6009b9d8a3eb494924f7a324a4a7c076199def114b528d3ae30536cfb144ae11d05c60173d07d5e506796766cb9eed2977b9e13e670dd83969f2436a147c010872bbbd9eda61747530b24332c9c09456239"}}, &(0x7f0000000500)={0x0, 0x3, 0xba, @string={0xba, 0x3, "4f6c2c084852cc1e6157fba49e9ff3cb6d58621e62897c937547383a985df8a07d424044f364b49cca2a33560d0b1f7f193e44c1caa2724fcf19234487f448bd4e373b8e816470f9e6fb3c6e281c2e862d3c551adaf3ae16354676c3436c6c3b8136d1fb372b21cc7425e5eccb2a3e6d0e71d446204d549f4f7ae28f85cc9e7af04e55e6983423efee5f04e07a340c659e0ce55e7b46e7bc37a2ece96402d4c537e7debf05036928cd86b7e4b2772e4433396baf3c7fd41d"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x9d3515671538d513, 0x57, "b3f7b6b05118da79197cf05363253023fe61fbd16194936c1ed9f66317d726b45aaa7382c088dcadebc432e8d2998b6576fb68bb4858e4defe4a250fc2cca63335e60e50ee9f49d971b4a450dbbf6d4740d37f7465f42e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x81, 0x1, "01"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "51f10c"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "8f"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "065bef2c"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "85babd"}}) r7 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000180)={0x1, 0x1}) 5m15.87064602s ago: executing program 9 (id=1933): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x20a, 0x40a, 0x3}}], 0x20}], 0x1, 0xe0ffffff) 5m7.752254508s ago: executing program 7 (id=1953): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) setfsuid(0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x3, @multicast2}, 0x7) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340)={0x20, 0xd, 0x1, '\''}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000005c0)={0x40, 0xb, 0x2, "f29e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m5.299283353s ago: executing program 7 (id=1960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000002c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Ec\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x30000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0x6, 0x5, 0x6}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbf, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x7c, '\x00', 0xdc}, {0xff, 0x9, 0xfe, '\x00', 0x1}, {0xfe, 0xa, 0x26}, {0xcf, 0x3, 0x9, '\x00', 0xa}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x5, 0xb, 0x4, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x1, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 5m4.963185416s ago: executing program 7 (id=1961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = fsopen(&(0x7f0000000240)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000002c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Ec\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x30000, 0x9, 0x10004, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x9, 0xf5, '\x00', 0xf}, {0x6, 0x5, 0x6}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x7}, {0xbf, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x7c, '\x00', 0xdc}, {0xff, 0x9, 0xfe, '\x00', 0x1}, {0xfe, 0xa, 0x26}, {0xcf, 0x3, 0x9, '\x00', 0xa}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x4, '\x00', 0x8}, {0x5, 0xb, 0x4, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x1, 0x3, '\x00', 0x10}, {0xd, 0x23, 0xf3, '\x00', 0x4}, {0x0, 0x6, 0x4}]}}) 5m3.939427737s ago: executing program 7 (id=1964): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) write$char_usb(r0, 0x0, 0x0) 5m3.313645895s ago: executing program 7 (id=1965): pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000340)=""/57, 0x39) ptrace(0x10, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) write$tcp_mem(r2, &(0x7f00000002c0)={0x0, 0x20, 0x6c64, 0x20, 0xffffffffffffffff}, 0x48) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000900)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x3) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000400)=ANY=[]) syz_usb_control_io$uac2(r6, &(0x7f00000005c0)={0x14, &(0x7f0000000440)={0x0, 0x5, 0x8e, {0x8e, 0xd, "40e89de091b809322967c1789631e29ece06d452e96a95e8faf4c05f2b592b39804b45a7387a2584eaabcc098097d133137b545ad03788bc1291a6009b9d8a3eb494924f7a324a4a7c076199def114b528d3ae30536cfb144ae11d05c60173d07d5e506796766cb9eed2977b9e13e670dd83969f2436a147c010872bbbd9eda61747530b24332c9c09456239"}}, &(0x7f0000000500)={0x0, 0x3, 0xba, @string={0xba, 0x3, "4f6c2c084852cc1e6157fba49e9ff3cb6d58621e62897c937547383a985df8a07d424044f364b49cca2a33560d0b1f7f193e44c1caa2724fcf19234487f448bd4e373b8e816470f9e6fb3c6e281c2e862d3c551adaf3ae16354676c3436c6c3b8136d1fb372b21cc7425e5eccb2a3e6d0e71d446204d549f4f7ae28f85cc9e7af04e55e6983423efee5f04e07a340c659e0ce55e7b46e7bc37a2ece96402d4c537e7debf05036928cd86b7e4b2772e4433396baf3c7fd41d"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x9d3515671538d513, 0x57, "b3f7b6b05118da79197cf05363253023fe61fbd16194936c1ed9f66317d726b45aaa7382c088dcadebc432e8d2998b6576fb68bb4858e4defe4a250fc2cca63335e60e50ee9f49d971b4a450dbbf6d4740d37f7465f42e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x81, 0x1, "01"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "51f10c"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "8f"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "065bef2c"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "85babd"}}) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000180)={0x1, 0x1}) 5m0.416894589s ago: executing program 38 (id=1933): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x20a, 0x40a, 0x3}}], 0x20}], 0x1, 0xe0ffffff) 5m0.160817654s ago: executing program 7 (id=1974): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) write$tcp_mem(r0, &(0x7f00000002c0)={0x0, 0x20, 0x6c64, 0x20, 0xffffffffffffffff}, 0x48) 4m44.345555013s ago: executing program 39 (id=1974): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) write$tcp_mem(r0, &(0x7f00000002c0)={0x0, 0x20, 0x6c64, 0x20, 0xffffffffffffffff}, 0x48) 4m8.100218665s ago: executing program 6 (id=2084): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000600)=@filename='mtd0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='jffs2\x00', 0x800000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) chdir(&(0x7f0000000780)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000007c0)='proc\x00', 0x804040, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000840)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c000014", @ANYRES16=r2, @ANYBLOB="10002abd7000fbdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) sendmsg$nl_generic(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="0c260000280029002dbd7000f9ffffff05000000041004"], 0x260c}, 0x1, 0x0, 0x0, 0x8c811}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="18010000310009002abd70000000000004000000040111800001f0800800ad00", @ANYRES32=r3, @ANYBLOB="140022000000000000010000000e000000000000c472bb53453ea085e4d531e2c81b3055e57438227851f85c09309d5226b0d5147afdb0cf799ce672c68c74ef73e2668380f550e21aadad9fae0af96cbc8798aaa00f6f4383a32d6044d4e3dbe80cebb24e1409f314924a08b5b0e8e192a65044b155db8d5d343c00d511a41a8403e78f909193406589a8ef3babf01b4a91a647fe8a04f25c41811bafb2fd639d2ac7c71eac72bc7ecf47080e927c174ffa74d9b70b47921a91cc10ae37391417dc43e7cd117578af9d7dcbda1a67f9d2fd86f4c09309fc4a1e295141711d2b788d3170dce4b61e0fae5ce0ffc0fbe211bea2d7"], 0x118}, 0x1, 0x0, 0x0, 0x42804}, 0x84) rt_sigprocmask(0x0, &(0x7f0000000c40)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000c80)={0x0, 0x5, 0x30, 0x8, 0x3}, &(0x7f0000000cc0)=0x18) getpgrp(0x0) gettid() read(0xffffffffffffffff, &(0x7f0000000dc0)=""/384, 0x200008c0) socket$inet_udp(0x2, 0x2, 0x0) 4m7.348963913s ago: executing program 6 (id=2086): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/uprobe_events\x00', 0x81, 0x41) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r1, &(0x7f0000000480)="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", 0x62) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x44) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x2a4080, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd09, &(0x7f0000000380)="040000000000000004000000000072") r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000000240)=0x7, 0x4) getpgrp(0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x100) 4m7.064377012s ago: executing program 6 (id=2087): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000002140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 4m6.124306741s ago: executing program 6 (id=2094): mount(0x0, 0x0, &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000003c0)='1,0x400000,0x401000,X', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff020000000000000000000000fff50185"], 0x76) 4m5.866169456s ago: executing program 6 (id=2096): pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000340)=""/57, 0x39) ptrace(0x10, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) write$tcp_mem(r2, &(0x7f00000002c0)={0x0, 0x20, 0x6c64, 0x20, 0xffffffffffffffff}, 0x48) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000900)={0xc, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x3) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f0000000440)={0x0, 0x5, 0x8e, {0x8e, 0xd, "40e89de091b809322967c1789631e29ece06d452e96a95e8faf4c05f2b592b39804b45a7387a2584eaabcc098097d133137b545ad03788bc1291a6009b9d8a3eb494924f7a324a4a7c076199def114b528d3ae30536cfb144ae11d05c60173d07d5e506796766cb9eed2977b9e13e670dd83969f2436a147c010872bbbd9eda61747530b24332c9c09456239"}}, &(0x7f0000000500)={0x0, 0x3, 0xba, @string={0xba, 0x3, "4f6c2c084852cc1e6157fba49e9ff3cb6d58621e62897c937547383a985df8a07d424044f364b49cca2a33560d0b1f7f193e44c1caa2724fcf19234487f448bd4e373b8e816470f9e6fb3c6e281c2e862d3c551adaf3ae16354676c3436c6c3b8136d1fb372b21cc7425e5eccb2a3e6d0e71d446204d549f4f7ae28f85cc9e7af04e55e6983423efee5f04e07a340c659e0ce55e7b46e7bc37a2ece96402d4c537e7debf05036928cd86b7e4b2772e4433396baf3c7fd41d"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x9d3515671538d513, 0x57, "b3f7b6b05118da79197cf05363253023fe61fbd16194936c1ed9f66317d726b45aaa7382c088dcadebc432e8d2998b6576fb68bb4858e4defe4a250fc2cca63335e60e50ee9f49d971b4a450dbbf6d4740d37f7465f42e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x81, 0x1, "01"}, &(0x7f0000000740)={0x20, 0x82, 0x3, "51f10c"}, &(0x7f0000000780)={0x20, 0x83, 0x1, "8f"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "065bef2c"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "85babd"}}) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000000180)={0x1, 0x1}) 4m2.609181207s ago: executing program 6 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x2f, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x9a, 0x62, 0x20, 0x40, 0x421, 0x3cd, 0xee46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x1, 0x5, 0x70, 0x3, "", [{{0x9, 0x4, 0x28, 0x81, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0xb, 0x2, 0x7, [@generic={0x2, 0x2}]}}]}}]}}]}}, 0x0) 3m46.882591674s ago: executing program 40 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x2f, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x9a, 0x62, 0x20, 0x40, 0x421, 0x3cd, 0xee46, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x1, 0x5, 0x70, 0x3, "", [{{0x9, 0x4, 0x28, 0x81, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0xb, 0x2, 0x7, [@generic={0x2, 0x2}]}}]}}]}}]}}, 0x0) 1m16.321643475s ago: executing program 5 (id=2798): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000800)='27', 0x2) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000100000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000c80080001000000000008000200dc050000", 0xa0) 1m16.260676059s ago: executing program 5 (id=2799): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="34000000000000000000000007000000441d0d"], 0x38}, 0xffffff97}], 0x1, 0x46000) 1m16.160377563s ago: executing program 5 (id=2800): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @empty=0xffffffff}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000000200110000000000ffffff9700000100000001000000000000001c"], 0x50}}], 0x2, 0x40) 1m16.156655178s ago: executing program 5 (id=2801): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/128, 0x80}], 0x1, 0xba, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d03000000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030400000000000924050000f8211cfd0924030500000004000724050401"], 0x0) r2 = syz_usbip_server_init(0x2) symlinkat(&(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0xa14000, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000600)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file7/file0\x00', 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) quotactl_fd$Q_QUOTAON(r2, 0x3, r3, &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./dev\x00', &(0x7f0000000780)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='./dev/sda1\x00', &(0x7f0000000840)='./mnt\x00', &(0x7f0000000880)='ext4\x00', 0x8410, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000900)={0x2020}, 0x2020) mount$cgroup(0x0, &(0x7f0000002940)='./dev/sda1\x00', &(0x7f0000002980), 0x10, &(0x7f00000029c0)={[{@xattr}, {@none}, {@nofavordynmods}, {@favordynmods}, {@xattr}, {}], [{@fowner_lt={'fowner<', r3}}]}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000001c0)=0x1000) r5 = semget(0x3, 0x3, 0x402) semctl$GETZCNT(r5, 0x4, 0xf, &(0x7f0000000200)=""/84) 1m14.815668304s ago: executing program 5 (id=2803): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, 0x0) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000001c00140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 1m14.228016223s ago: executing program 5 (id=2806): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04000101"], 0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x0) 1m13.372162583s ago: executing program 41 (id=2806): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04000101"], 0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x0) 8.732574821s ago: executing program 0 (id=3112): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000800)='27', 0x2) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000), 0x0) 8.675637721s ago: executing program 0 (id=3114): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000980)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000680)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000780), 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000740)=@x86={0x1, 0x0, 0x8, 0x0, 0x7, 0x1, 0x1, 0x8, 0xf, 0x2, 0x4, 0x81, 0x0, 0xac, 0x7, 0x2, 0x1, 0x2a, 0x8f, '\x00', 0xad}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.296072092s ago: executing program 0 (id=3119): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x30}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x100000003) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) 5.02043578s ago: executing program 0 (id=3122): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000800)='27', 0x2) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000100000000000100000000", 0x50) 4.712289844s ago: executing program 0 (id=3123): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r0, 0xd01, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40010) r3 = fanotify_init(0x4, 0x1) syz_emit_vhci(&(0x7f0000001240)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x81, 0xc9, 0x3, 0x0, 0xccc, 0x8}}}, 0xe) syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100300000020cd0cb100400001020301090260000301ff00070904000000010100000aa40107000a000201020904010000010200000904010101010200000905010940000606d807250118e9ff7f09040200000802"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) fanotify_mark(r3, 0x1, 0x100018, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x34b}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040d0}, 0x20004004) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, &(0x7f0000001080)={0x1, [{0x0, 0x4c0, 0x1, &(0x7f00000012c0)="5d3e9bba610858c8e04f8b0c857dbe2806fdd6d00a4c7e0a591400360bff63220698edbbc0eca53d6cbcb9bb44395261d4831882a46c7094fac80a303618d02beccf8966b01adaaccd60acda3d7fbd910669e7742a05fde013ad4f3aee14cdb35065a507532a383ff84969eee1d22b2e1192e056aae25fdb604fb09aa8282be737470dff34b8c193b429557a109ac97ad7c7bf1b6a410dc7c73926d2f1b86a598aba525c625d1e48eac87676af1271fabab08f53aeed06af91b99f32c30db7c6b968150c91834745698956e853d173475d14610a2243f6f2f951e67dff05c3d53f850993bd6fad0efe4eb75bb748d84e81ca8ddaf0efe0b6284e1090ce4f39e10618f3de16d8573962f7cc76e1d2ab01e018040a56652d2e10bd45245caf69822ddf9f661bdc5862ff299078c76890c3f5f3efd4c4a66525ebaeafafab01557d48fd1d1f2a4e430e49c33574c2a7e1"}, {0x3, 0x608, 0xfffffffd, &(0x7f0000000640)="f96f886712a5620e6c06b2d419ccd4ce9e93e1bd40df972a9ccfda8a0a0b662230c25417d59099ace23d15699d08d6d29d959cc33ef26576bb3a69f9e7e26d0f519d477ac13d84932a53d7a4f02abe3de6e677db1cb68dc6ef1cbb4e1e49e2b9d2e63abd18d4e1b52cdb2dfa75469550bfaf60597376bc682c4b95570d8d35fb057a4c91891c59ad4c720afe78657b5bc671ea9f12704bac1c38984590d38ba45fba2bf709fb40ad3cb7b3c46e88b42cd6b359477d4b8c6f6f7206ce9fa0805ea5"}, {0x1, 0x4b0, 0x2, &(0x7f0000000740)="ee4417407b65695b38b6cc14d11c682004e87f95bfe1b7502badcf4afc86dae0ff5d9bdca24333169b994c99a11265290d6036f3f3df1200b9bffb0f1f0167137a6db40bf1e0a72145048de32397eb13f1f306692e54b6d53d2f59a170358ee2daa1f06ea2105a9b282a260de979a2bd43e4da662b087409565195b0cde238512e20dabc4b63ca5ac9775794be7ae11a0c627a2d63aa"}, {0x1, 0xd8, 0x7, &(0x7f0000001280)="253829505a5cc4d55928010ca82e8958a71fe2d5678dbbacfbf1cf"}, {0x2, 0x568, 0x7, &(0x7f0000000840)="f9c49040d32ed84bbd61a1597e49f619bc1d376804b7e238d705a6528a453f7c524da9fa955edb6c799eb76b7b2addf3c436138d81c50fcfd040a6ecc375e60ec8a84ac6dcdb4d9f39d5136b644947686a065a9daaa9611860bceea14689b85e1b997a60bb2d9897a7087fc979b19bbf50f3ae0fddd251cdb881c0de4430d8f08a34e6600f51a87df4479de8c80ab40685d8d882cc586dd5efdad6a82f36c583f1a23bb7404f6821411857fae6"}, {0x1, 0x648, 0x315, &(0x7f0000000900)="3285133d400f11e5ed742262f6b0c507753eb9f8649ba8f6be9ecfe720efce62594bce4f7029bb3b0dbcd0a2adcbb6490ed50e2db29df07ebf2185b617a2d54b591938cb43a74a12ba699564914256865977f18e02b38728b3183bac4dc10e7ed5da978ae082a5ff0faa6df595f764b8ed34db6b29b16f54f3afaee1408b5208fb0d2c9f9b33ef26970644a93515c1a71cfd0cd6f3ba86745e02a896ab485d10b88f87fdbc1ad8051ca7d32c0ceabbebab892c9570b8ba6368693f12cfc23c44ae8c10a75748b87d78"}, {0x2, 0x118, 0x1, &(0x7f0000000a00)="d408a7396c328ab678ec634c601d3e3cddcaa5797582780b4ad9f8505969b1d9c55711"}, {0x0, 0x518, 0x4, &(0x7f0000000a40)="017970bc1d654d91615628f98008c34396e17f4674cf4fc3526552d6621166e41e728421997ce1b3c2861bd7d763a21fe421f79e745feaf17c6a161a13689e8684465c6a60d92ee730450680d48c4ee0baf8d26a1d46cfad7db77b7fd6b4d3b6645cdb88345c46c504f4e1f0543d685336caf21956f01ab418b5b263222abcbb1ec18b19fd8c10c3f19bc8b0f2a807f02fdc071efee2c4a54a8f930b9e36b92a0d5bbf"}, {0x1, 0x728, 0x8, &(0x7f0000000b00)="c99e4d63a9fe3a7f72373980b8bb85b12bbc54b9f11e2593ca17ac827adf41a612e8c5e50ef3cd7d69bf9929212cfc01a4c168f9979ff70a633c207e014284fc75b8a04d18c1b698a9de0968cdf624a5a1c1fd908a6289c2659b59942f491f33ad868d9b1b18aed8b449bf2999fb95899be5020920d5b2d38abbbefa0bbc6c6b7781196cc63acb340a13c2be7465936831b2dc34d2a978adc6ff341be1d50e3905f6c98eefcbdebfdf3fa9c55d42bef0be8fac38510c539927034366b5d3573b3c238cd87df205ffd52693c880cffec13831586e590f3f4b3a83422865c6e722ca2b744a98"}, {0x3, 0x6e8, 0x5, &(0x7f0000000c00)="948473559343286f4b7ca87de7bfc2564cb6bee04e7db66947315319a50a761518522d2f21197a0c0ac481be575bf0ede144bc9a0ec0e2973c865ea41fbfb8a094672c80125544727f3db5912cbe241470a513b236692d69bc2d3086a24e1106d3241e02e9f1d92a093ad231b16855d842df01351201cd718c149f8d8d3be3beef215511217c4adf11e8f8d5fc034145fda0574cff3d3605559565bbd0eacb458c92dc85f020da9ee82e64db8d55ddae42669612139195710ace8f41c82b5f706f12528f2e02fc2bb01820012574caabd52eed1608b705ecd0ab2f9ede"}, {0x3, 0x40, 0x8001, &(0x7f0000000d00)="5642c40d6321eba1"}, {0x2, 0x70, 0xf, &(0x7f0000000d40)="956c1b"}, {0x1, 0x720, 0x4, &(0x7f0000000d80)="0a16d5bbb629c6488bccf5ff439f5fb40b712b4725945d49cc1460d2bec25ac0914244228deb730065dbc3a6869cd3a84ca5cfa1f7ced305f810405297563b69a995b0bb658f866b5a74fed6aa19e1947bacb2332788537349d68c6c8b15aa4a9e76dc138cba3df69ae03d0803946d7e3e788a520a1e5c1d038cfc243bbb8e59eed1c38dcf25d91de03f3804cc316ca7c0df903d7c16cf6447781f47c69c4f579bf7c039b306042e94a05da9b8a8d403c2c1593c22b0b84a09acc5a99b8d217f8c75c7ff1ac4060c8a862d62409f59834c497ca54ba477a8fcfa222ac44ab11c9f06cc54"}, {0x1, 0x210, 0x1ff, &(0x7f0000000e80)="c484656adde385d644b93777eb6cd3fc684ad0fdf886e29e11e006bbb787d8e6b59cad8718cab45919266198d3285205832fddbeeda075aa3657b1918187d5198a11"}, {0x3, 0x3a8, 0x0, &(0x7f0000000f00)="b459317abdeb77583bb9ba70b8dac42cb73310d746470b13de3db8ed9e6befbc1db392a4b978620a0b8551ba3afd9ae7faa6bad8ac6c6e24d6b11b2624ac6883f80b95bf818d2ff6221f3939de333a184df42fcb0951b222369a7559e7189937addfb80eaf0945739240b5f6b8e60a091857bef7f3"}, {0x1, 0x718, 0x5, &(0x7f0000000f80)="bbccedc4755331eff556180be713d0d7186b0d74baf24dad474f1eed5505ef17396c6459684d7419efdfc6a42a5636e4b82d790da7fb4b52f81b4f7d06ba3db3f96fb11810d53e70d5b717b8a69feecd544bebc7bfdd1aaac3ffce72b920fa8232df7f50a3c4ab4da080198fd486b0a1c3a0179d3083d9aff62d3f2ba091fc0182ba42b328c29d79cc4b6f105b400577444e3bfc59d06de53657ff59a43590141f74b0fc7b475efc310140417d18b9de3dcdb10ced8de24a3fb69c9d89acb1657e64294871628e56fd34b3712546ece8a3f4f8c9521b72aee7cb801bb81e7c9a89afa3"}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x3ff, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x9, 0xfffffffffffffffe]}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003"], 0x104}}, 0x0) 4.464890252s ago: executing program 1 (id=3127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac2(0x3, 0x7b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000002c0)=0x8a4, 0x4) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000040)='my_sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000100)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', 'my_sys/bus/pci/devices/0000:00:03.0/resource1'}, 0x31) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000340), 0xffffffffffffff94, 0x34, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000440)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000580)) 2.144408657s ago: executing program 4 (id=3131): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000800)='27', 0x2) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000100000000000100000000", 0x50) 2.136913195s ago: executing program 4 (id=3132): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) inotify_init1(0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f00000018c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r2, &(0x7f0000001940)=@generic={0x8, "ffff0000feff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, 0x0, 0x10) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) 1.810387942s ago: executing program 2 (id=3133): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) 1.642665612s ago: executing program 0 (id=3134): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3c, 0x40, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x0, 0xff, {0x7, 0x25, 0x1, 0x0, 0x7f, 0x6e3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x5, 0x9, {0x7, 0x25, 0x1, 0x8, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x8927, &(0x7f00000005c0)={0xfffffffffffffffb, 0xd93a, 0x0, 0x2, 0x1, [0x0, 0x401]}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x8927, &(0x7f00000005c0)={0xfffffffffffffffb, 0xd93a, 0x0, 0x2, 0x1, [0x0, 0x401]}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="19", 0x1, 0x80, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa00) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f00000007c0)={{0xc}, {0xe}, 0x40000}) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f00000007c0)={{0xc}, {0xe}, 0x40000}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f0000000280), &(0x7f00000002c0)=0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00006003ffffffffff00450a003680b1850468030000000000000000000000000000000469252032ae434126ae005984010000050000000600"/70], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f00000006c0)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e31429fd3000175e63fb8d38a8700"/252, 0xfc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000480)='name', &(0x7f0000000ac0)='\xf0\xdd\x0e\xbd\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000480)='name', &(0x7f0000000ac0)='\xf0\xdd\x0e\xbd\x00', 0x0) 1.502926832s ago: executing program 4 (id=3135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000080)={0x0, 0xfffffffb}, 0x8) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344f5080000000500050000000580020007"], 0x4a) 1.34837656s ago: executing program 1 (id=3136): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000400), 0x1, 0x2703) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x0, 0x1, 0x5, &(0x7f0000000480)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x0, 0x3, 0x60, {0x60, 0x24, "06c6b15fc626cd5c3529b4fa22006066d7c085dae68c7535a7abf4f3139edef036eda280b0007b35f2bccffda53d6c7d3ad140085e8d2bb886df137074abaff5c4750f204b90dfdeb6474ef0281bc208815bd5dbc467dd0ba3c09045fbab"}}, &(0x7f0000000540)={0x0, 0x3, 0x96, @string={0x96, 0x3, "4467f2d66cc4875be17f8c9d6cf45fc340a7a3a969d5935b5a36a03028a836146f39d2c8ada0463aac5c5a810974e630a2c4e344e40eaa339844ce69632ab2510badd280b8fbfc4c0c4fcde8eaac66acbd1879786d0cbf7ce0c20f5ef5f9943bbdf07871388e7a6c84c2518e2b55a81e6c55236e6c9f37ced6870ac9c4a6206855992fed28d7d37e4d8cf014149bfcb620a92d36"}}}, &(0x7f0000000900)={0x34, &(0x7f0000000640)={0x0, 0x12, 0x62, "2ffb3249ad3d7214759f7883b6f975be6f162f2b795687ce22302f56bcea5ceec8f5a02ea132af2e36ae777b00c76dc22282244b6285c5ffb8c65c3392375d41bb0a048d1b9896cd4efa95ed0998a0b8d74f09a0c3767c799c62ce4f5381eb4d05c1"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xae}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000740)={0x20, 0x0, 0x100, {0xfe, "eca0a4117e009a4b5106d6b44c3af5a546c74e359ca4187c87967ade878de7f15cdb0cc8ccc8b3ab037473aeeab4a69c9480080a9da92245f06bc02d7ff4acc4be6d7122c03a88aaf5654f776b76af28dde2dbe8c6e2d5e15350b6d3de1e0edf837c9e619697950fef283ef537af994bdc0ee7d685c66b8986ce282aad6fd49ff57b75354cad65f1a23153a0f4dd48379bfcbb28f23e80470ce743a6aea35df151f7c8ffed219232dacc5dd63ce6ae92b40b775e15824fd6aebd556bca47c1ac2ed25106e782c064fe3d3554ac200450e4cc7bb5811eec99fe0fa08230d1e950c14ac770faf553e0592592bddc7fd56b21716daf01ac408a6f8dcdb5eee7"}}, &(0x7f0000000880)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000008c0)={0x20, 0x0, 0x1, 0xcf}}) 1.32883655s ago: executing program 4 (id=3137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000480)={&(0x7f0000000580)=[{0x7fff, 0x401, 0x9, 0xfffffffffffffff6}], 0x1, 0x20, 0x8001, 0x14d2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000400000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.238648553s ago: executing program 4 (id=3138): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000980)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000680)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)="15a0d68a05819232310cec1b7b19939b2b6df4aba81e78b39ae5aa1417dffa1fa57382a548fddb72424d0715984557657c9bfdd6df932ae74999f3a617d0b5a7fe2e44911aaf95144e46d5831c9735d9882146650a2053b381b4a7975e4befa64cc3e50367b281881b3e71b195c20609071bb84fec78c8aaa9adbd15db6f5fe89165c54e8d7d156d5a35aa84377ed4f3632cf56277560c57db9bb0b4baf1915468146a416cf1b6756fb597ec2aed80253b49cb5d163892e83cdf609471bb3537ea230871ce13f3c359b3e0a65885e2a6981f478cc4243e8f2754b20deba68cb68cef7c53707f1c6b08", 0xe9) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000740)=@x86={0x1, 0x0, 0x8, 0x0, 0x7, 0x1, 0x1, 0x8, 0xf, 0x2, 0x4, 0x81, 0x0, 0xac, 0x7, 0x2, 0x1, 0x2a, 0x8f, '\x00', 0xad}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 889.376005ms ago: executing program 4 (id=3139): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cifs\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./cifs\x00', &(0x7f00000004c0)='cifs\x00', 0x0, &(0x7f0000000500)='source=//127.0.0.1/test,username=root,password=root,port=12345,handletimeout=1\x00') ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001140)={{}, "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"}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "68b91d57"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f0000000780)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 720.247371ms ago: executing program 1 (id=3140): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000040)='.\x00', 0x10000, 0x5b) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x54, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) sendmsg$nl_generic(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000280)={0x0, 0x5, 0x63}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r4, 0x400452c8, &(0x7f0000000680)="000000000000000000000000000000000000000001") ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000ac0)={r5, 0x100000001, 0x0, [0x81, 0x339e, 0x9, 0x5, 0xff], [0x80000001, 0x25c0000000000000, 0x9, 0x8000, 0xfffffffffffff001, 0x2, 0x4, 0x7, 0x4, 0xffffffffffffff4f, 0x7f, 0x200, 0x9, 0x100000000, 0x7fffffff, 0x7, 0x8000000000000000, 0x120000000000000, 0x80000000, 0x4, 0x9, 0x5, 0x9, 0x4e, 0x3, 0x0, 0x8, 0x6, 0x8, 0xfffffffffffff027, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x400, 0x8, 0x40, 0x8, 0x5, 0xffffffffffffffff, 0x8000000000000000, 0x8, 0xcba, 0x2, 0x8000000000000000, 0x7, 0x7ff, 0x8, 0x0, 0x7, 0x7, 0x8001, 0x0, 0x2, 0xffffffffffffffa4, 0x2, 0x3, 0x1, 0x7b, 0x489f6fad, 0x3, 0x2, 0x8, 0x8, 0x2, 0x3, 0x7, 0xaf3, 0x3, 0xba, 0x0, 0xb, 0x8000, 0x6, 0x8, 0x7, 0x2, 0x7, 0x10000, 0x1ff, 0x2, 0x5, 0x4, 0x7, 0x3749, 0x1, 0xf, 0x4, 0xe, 0x9, 0xff, 0xdd9, 0x5, 0x2, 0x6, 0x1, 0x506, 0xce5, 0x800, 0x3, 0xff, 0x2, 0x800000000, 0x7, 0x7fff, 0x6, 0x7fffffff, 0x0, 0xb0f, 0x7, 0x9b4, 0x4, 0x2, 0x0, 0xffff, 0x7, 0x858, 0x4, 0x8]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001000)={0x0, "30b5d6d20d0718e719ac0a35ef2c6b5e"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000002000)={0x2, 0x6, {0x1000, @struct={0x7, 0x7fff}, r3, 0xa5, 0x56, 0x3, 0x800, 0x4, 0x8, @usage, 0x8, 0x9, [0x3, 0x5c8, 0x4, 0x9, 0x7fffffff, 0xffffffff]}, {0x2, @struct={0xd, 0x1}, r5, 0x2, 0x6, 0x3, 0x6, 0x40, 0x94, @usage, 0x188, 0x7, [0x6e6, 0x7, 0x7, 0x1, 0xeabf, 0x90b]}, {0x6, @usage=0x4, r6, 0x1800000000000, 0x800, 0x6, 0x7, 0x7, 0x10, @struct={0x2, 0x7}, 0x7, 0x9, [0x4, 0x4, 0x9, 0x6, 0x7, 0x10001]}, {0x0, 0x100000001, 0x8d5}}) 702.333182ms ago: executing program 1 (id=3141): mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000800)='27', 0x2) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000100000000000100000000", 0x50) 664.261169ms ago: executing program 1 (id=3142): inotify_rm_watch(0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc0145b0e, &(0x7f0000000200)={0x100000, 0x2, 0xfffffffc, 0x0, 0x1}) 476.496964ms ago: executing program 2 (id=3143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a2401006d617463680000002c00028014000300f4f03b020000000002110c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 300.242995ms ago: executing program 2 (id=3144): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x2002, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0xe1, 0x4) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x10, 0x1, 0x51, 0x3}}], 0x10}, 0xe000) mount(&(0x7f00000250c0)=@filename='./file0\x00', &(0x7f0000025100)='./file0\x00', &(0x7f0000025140)='ubifs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x2002, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0xe1, 0x4) (async) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0x10, 0x1, 0x51, 0x3}}], 0x10}, 0xe000) (async) mount(&(0x7f00000250c0)=@filename='./file0\x00', &(0x7f0000025100)='./file0\x00', &(0x7f0000025140)='ubifs\x00', 0x0, 0x0) (async) 263.535023ms ago: executing program 2 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000f50100001c1122334400080000000500050000000500050007"], 0x4a) 127.605587ms ago: executing program 2 (id=3146): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900032a0400ad000200000000000006040000000000f93132", 0x39}], 0x1) 361.202µs ago: executing program 2 (id=3147): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000225c17d03000200000001000000", 0x38}], 0x1}}], 0x2, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x8]}, 0x8, 0x80800) readv(r2, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) syz_usb_connect(0x0, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904"], 0x0) 0s ago: executing program 1 (id=3148): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000980)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f0000000680)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)="15a0d68a05819232310cec1b7b19939b2b6df4aba81e78b39ae5aa1417dffa1fa57382a548fddb72424d0715984557657c9bfdd6df932ae74999f3a617d0b5a7fe2e44911aaf95144e46d5831c9735d9882146650a2053b381b4a7975e4befa64cc3e50367b281881b3e71b195c20609071bb84fec", 0x75) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000740)=@x86={0x1, 0x0, 0x8, 0x0, 0x7, 0x1, 0x1, 0x8, 0xf, 0x2, 0x4, 0x81, 0x0, 0xac, 0x7, 0x2, 0x1, 0x2a, 0x8f, '\x00', 0xad}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 8.618530][T13322] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 768.618551][T13322] usb 6-1: config 0 has no interface number 0 [ 768.621790][T13322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.621809][T13322] usb 6-1: Product: syz [ 768.621819][T13322] usb 6-1: Manufacturer: syz [ 768.621830][T13322] usb 6-1: SerialNumber: syz [ 768.624529][T13322] usb 6-1: config 0 descriptor?? [ 768.704505][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.704554][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.704584][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.704613][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.704818][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.704850][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.704880][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.704911][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705223][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705257][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705287][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705319][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705519][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705572][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705603][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 768.705635][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 768.707870][ T5785] usb 2-1: USB disconnect, device number 121 [ 769.107815][T13322] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 769.107840][T13322] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 769.662948][T15552] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2682'. [ 769.684222][ T5703] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 769.738475][T13322] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 769.738685][T13322] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 769.791834][T13322] usb 6-1: USB disconnect, device number 34 [ 769.861339][ T5703] usb 2-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 769.864049][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.864065][ T5703] usb 2-1: Product: syz [ 769.864075][ T5703] usb 2-1: Manufacturer: syz [ 769.864086][ T5703] usb 2-1: SerialNumber: syz [ 769.889124][ T5703] usb 2-1: config 0 descriptor?? [ 770.115284][ T5703] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 122 [ 770.401774][T15568] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 770.977688][ T5703] usb 2-1: USB disconnect, device number 122 [ 771.574272][ T5703] libceph: connect (1)0.0.0.0:6789 error -22 [ 771.574398][ T5703] libceph: mon0 (1)0.0.0.0:6789 connect error [ 771.691615][T15599] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2696'. [ 771.697802][T15599] netlink: 'syz.2.2696': attribute type 4 has an invalid length. [ 771.822388][T15603] jffs2: notice: (15603) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 771.829267][ T5703] libceph: connect (1)0.0.0.0:6789 error -22 [ 771.829450][ T5703] libceph: mon0 (1)0.0.0.0:6789 connect error [ 771.868012][T15603] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 771.868030][T15603] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.2698'. [ 771.936148][T15602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.159199][T15609] syzkaller1: entered promiscuous mode [ 772.159230][T15609] syzkaller1: entered allmulticast mode [ 772.185526][T15609] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 772.185541][T15609] One or more global auth toks could not properly register; rc = [-22] [ 772.185582][T15609] Error validating options; rc = [-22] [ 772.341375][T13322] libceph: connect (1)0.0.0.0:6789 error -22 [ 772.341484][T13322] libceph: mon0 (1)0.0.0.0:6789 connect error [ 772.387842][T15592] ceph: No mds server is up or the cluster is laggy [ 772.787811][T15622] xt_l2tp: invalid flags combination: c [ 772.826410][T15624] netlink: 'syz.5.2707': attribute type 4 has an invalid length. [ 772.837745][T15624] netlink: 25 bytes leftover after parsing attributes in process `syz.5.2707'. [ 773.198672][ T5703] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 773.349044][ T5703] usb 6-1: Using ep0 maxpacket: 8 [ 773.355471][ T5703] usb 6-1: New USB device found: idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 773.371193][ T5703] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 773.371214][ T5703] usb 6-1: config 0 has no interface number 0 [ 773.371235][ T5703] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 773.371261][ T5703] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 773.371281][ T5703] usb 6-1: config 0 interface 48 has no altsetting 0 [ 773.371306][ T5703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.376139][ T5703] usb 6-1: config 0 descriptor?? [ 773.593256][T15628] random: crng reseeded on system resumption [ 773.798415][ T5785] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 773.888450][T13322] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 773.950610][ T5785] usb 3-1: unable to get BOS descriptor or descriptor too short [ 773.951166][ T5785] usb 3-1: not running at top speed; connect to a high speed hub [ 773.951188][ T5785] usb 3-1: New USB device found: idVendor=041e, idProduct=323b, bcdDevice=0.40 [ 773.952272][ T5785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 773.952293][ T5785] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 21965, setting to 1023 [ 773.954617][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.954653][ T5785] usb 3-1: Product: syz [ 773.954664][ T5785] usb 3-1: Manufacturer: syz [ 773.954675][ T5785] usb 3-1: SerialNumber: syz [ 774.108349][T13322] usb 2-1: Using ep0 maxpacket: 8 [ 774.109139][T13322] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 774.110182][T13322] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 774.110215][T13322] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.110231][T13322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 774.110248][T13322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.110321][T13322] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.110351][T13322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.261784][ T5785] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 774.262130][ T5785] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 774.331317][T13322] usb 2-1: GET_CAPABILITIES returned 0 [ 774.331373][T13322] usbtmc 2-1:16.0: can't read capabilities [ 774.332693][ T5785] usb 3-1: USB disconnect, device number 30 [ 774.440631][T11961] udevd[11961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.534980][T13322] usb 2-1: USB disconnect, device number 123 [ 775.679718][T13322] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 775.831088][T13322] usb 3-1: descriptor type invalid, skip [ 775.831500][T13322] usb 3-1: not running at top speed; connect to a high speed hub [ 775.831521][T13322] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40 [ 775.832121][T13322] usb 3-1: config 0 has no interfaces? [ 775.834548][T13322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.834565][T13322] usb 3-1: Product: syz [ 775.834592][T13322] usb 3-1: Manufacturer: syz [ 775.834602][T13322] usb 3-1: SerialNumber: syz [ 775.840321][T13322] usb 3-1: config 0 descriptor?? [ 776.125060][T15672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.125372][T15672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.153996][ T5785] usb 3-1: USB disconnect, device number 31 [ 776.994195][T15687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.994560][T15687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.078943][ T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 777.100272][T15691] netlink: 'syz.0.2731': attribute type 4 has an invalid length. [ 777.117226][T15692] netlink: 'syz.0.2731': attribute type 4 has an invalid length. [ 777.135436][T15691] netlink: 'syz.0.2731': attribute type 4 has an invalid length. [ 777.230966][ T9] usb 3-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 777.250842][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.250862][ T9] usb 3-1: Product: syz [ 777.250873][ T9] usb 3-1: Manufacturer: syz [ 777.250883][ T9] usb 3-1: SerialNumber: syz [ 777.257532][ T9] usb 3-1: config 0 descriptor?? [ 777.388142][T15697] nfs: Unknown parameter '@' [ 777.490812][ T9] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 032 [ 777.928364][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 778.079921][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 778.081419][ T9] usb 2-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa [ 778.082472][ T9] usb 2-1: config 245 has an invalid descriptor of length 0, skipping remainder of the config [ 778.084608][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.084624][ T9] usb 2-1: Product: syz [ 778.084654][ T9] usb 2-1: Manufacturer: syz [ 778.084665][ T9] usb 2-1: SerialNumber: syz [ 778.350123][T13322] usb 3-1: USB disconnect, device number 32 [ 778.472921][ T5703] usb 6-1: string descriptor 0 read error: -32 [ 778.476491][ T5703] usb-storage 6-1:0.48: USB Mass Storage device detected [ 778.498124][ T5703] usb-storage 6-1:0.48: device ignored [ 778.601388][ T9] usb 6-1: USB disconnect, device number 35 [ 778.710007][T15710] kvm: vcpu 0: requested 152 ns lapic timer period limited to 200000 ns [ 778.746745][ T5703] usb 2-1: USB disconnect, device number 124 [ 778.747450][ T5703] f81534a_ctrl 2-1:245.0: failed to enable ports: -19 [ 778.867096][T15714] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2737'. [ 778.881745][T15714] netlink: 'syz.5.2737': attribute type 4 has an invalid length. [ 778.991889][T15716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2738'. [ 779.462237][ T5703] libceph: connect (1)0.0.0.0:6789 error -22 [ 779.462390][ T5703] libceph: mon0 (1)0.0.0.0:6789 connect error [ 779.718938][T13322] libceph: connect (1)0.0.0.0:6789 error -22 [ 779.719053][T13322] libceph: mon0 (1)0.0.0.0:6789 connect error [ 779.744335][T15734] jffs2: notice: (15734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 779.768122][T15734] netlink: 'syz.2.2744': attribute type 4 has an invalid length. [ 779.768139][T15734] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.2744'. [ 779.837292][T15733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.230688][ T9] libceph: connect (1)0.0.0.0:6789 error -22 [ 780.230810][ T9] libceph: mon0 (1)0.0.0.0:6789 connect error [ 780.274702][T15727] ceph: No mds server is up or the cluster is laggy [ 780.310524][ T5703] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 780.419920][T15743] xt_l2tp: invalid flags combination: c [ 780.489070][ T5703] usb 6-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 780.491536][ T5703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.491556][ T5703] usb 6-1: Product: syz [ 780.491566][ T5703] usb 6-1: Manufacturer: syz [ 780.491576][ T5703] usb 6-1: SerialNumber: syz [ 780.493435][ T5703] usb 6-1: config 0 descriptor?? [ 780.546738][T15745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2749'. [ 780.581170][T15747] netlink: 'syz.1.2750': attribute type 4 has an invalid length. [ 780.584570][T15747] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2750'. [ 780.702339][ T5703] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 036 [ 780.998496][ T5703] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 781.150624][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 781.150681][ T5703] usb 2-1: New USB device found: idVendor=2b53, idProduct=0024, bcdDevice=0.40 [ 781.152059][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.152126][ T5703] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 781.152154][ T5703] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.154741][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 781.154776][ T5703] usb 2-1: Product: syz [ 781.154787][ T5703] usb 2-1: Manufacturer: syz [ 781.154798][ T5703] usb 2-1: SerialNumber: syz [ 781.487151][ T32] audit: type=1326 audit(1792708097.196:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15758 comm="syz.2.2755" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e3b9f559 code=0x0 [ 781.562103][ T5703] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 781.568208][ T5703] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 781.655630][ T5703] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 781.674069][ T5703] usb 2-1: USB disconnect, device number 125 [ 781.730489][T14781] udevd[14781]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.451093][T15769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2759'. [ 782.749356][ T5703] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 782.899189][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 782.899958][ T5703] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 782.901050][ T5703] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 782.901113][ T5703] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 782.901128][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 782.901144][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 782.901160][ T5703] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.901187][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.120949][ T5703] usb 3-1: GET_CAPABILITIES returned 0 [ 783.121002][ T5703] usbtmc 3-1:16.0: can't read capabilities [ 783.190562][T15739] i2c i2c-1: failure reading status [ 783.234675][ T5703] usb 6-1: USB disconnect, device number 36 [ 783.335824][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.335864][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.335893][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.335921][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.335950][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.335979][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336169][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336202][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336234][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336283][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336316][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336348][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336568][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336598][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336627][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 783.336662][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 783.495246][ T5703] usb 3-1: USB disconnect, device number 33 [ 783.882189][T15793] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2768'. [ 784.330197][ T5703] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 784.408736][T15813] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 784.479124][ T5703] usb 3-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 784.483209][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.483229][ T5703] usb 3-1: Product: syz [ 784.483239][ T5703] usb 3-1: Manufacturer: syz [ 784.483250][ T5703] usb 3-1: SerialNumber: syz [ 784.487421][ T5703] usb 3-1: config 0 descriptor?? [ 784.581143][T15815] FAULT_INJECTION: forcing a failure. [ 784.581143][T15815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 784.581168][T15815] CPU: 0 UID: 0 PID: 15815 Comm: syz.5.2776 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 784.581190][T15815] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 784.581197][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 784.581209][T15815] Call Trace: [ 784.581215][T15815] [ 784.581222][T15815] dump_stack_lvl+0xe8/0x150 [ 784.581247][T15815] should_fail_ex+0x3eb/0x540 [ 784.581267][T15815] _copy_to_user+0x31/0xb0 [ 784.581285][T15815] simple_read_from_buffer+0xe1/0x170 [ 784.581305][T15815] proc_fail_nth_read+0x1bb/0x230 [ 784.581327][T15815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.581349][T15815] ? rw_verify_area+0x24a/0x4c0 [ 784.581366][T15815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 784.581385][T15815] vfs_read+0x213/0xa80 [ 784.581405][T15815] ? __pfx___mutex_lock+0x10/0x10 [ 784.581429][T15815] ? __pfx_vfs_read+0x10/0x10 [ 784.581446][T15815] ? __fget_files+0x2a/0x420 [ 784.581461][T15815] ? __fget_files+0x3a2/0x420 [ 784.581475][T15815] ? __fget_files+0x2a/0x420 [ 784.581492][T15815] ? fdget+0x1ac/0x250 [ 784.581512][T15815] ksys_read+0x150/0x270 [ 784.581530][T15815] ? __pfx_ksys_read+0x10/0x10 [ 784.581555][T15815] do_syscall_64+0x166/0x520 [ 784.581576][T15815] ? trace_irq_disable+0x3b/0x140 [ 784.581594][T15815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.581609][T15815] ? clear_bhb_loop+0x70/0xc0 [ 784.581628][T15815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.581644][T15815] RIP: 0033:0x7fa0a575fd8e [ 784.581658][T15815] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 784.581671][T15815] RSP: 002b:00007fa0a6613fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 784.581687][T15815] RAX: ffffffffffffffda RBX: 00007fa0a66146c0 RCX: 00007fa0a575fd8e [ 784.581699][T15815] RDX: 000000000000000f RSI: 00007fa0a66140a0 RDI: 0000000000000004 [ 784.581708][T15815] RBP: 00007fa0a6614090 R08: 0000000000000000 R09: 0000000000000000 [ 784.581718][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.581727][T15815] R13: 00007fa0a5a26038 R14: 00007fa0a5a25fa0 R15: 00007ffc791e26b8 [ 784.581751][T15815] [ 784.866189][ T5703] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 034 [ 785.002434][T15819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2778'. [ 785.357441][T15831] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2783'. [ 785.387237][T15831] netlink: 'syz.0.2783': attribute type 4 has an invalid length. [ 785.599200][T13322] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 785.749444][T13322] usb 6-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 785.750437][T13322] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.752263][T13322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.752281][T13322] usb 6-1: Product: syz [ 785.752292][T13322] usb 6-1: Manufacturer: syz [ 785.752303][T13322] usb 6-1: SerialNumber: syz [ 785.811110][T13322] usb 6-1: config 0 descriptor?? [ 785.829689][T13322] ims_pcu 6-1:0.0: Zero length descriptor [ 785.829727][T13322] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 785.944767][T13322] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 786.079988][T13322] usb 6-1: USB disconnect, device number 37 [ 786.197118][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'. [ 786.208974][ T5703] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 786.281776][T15852] vhci_hcd vhci_hcd.0: failed to lookup sock [ 786.520023][T13322] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 786.649434][T13322] usb 2-1: device descriptor read/64, error -71 [ 786.712653][T15855] jffs2: notice: (15855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 786.719184][ T5785] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 786.746912][T15844] ceph: No mds server is up or the cluster is laggy [ 786.757442][T15855] netlink: 'syz.5.2791': attribute type 4 has an invalid length. [ 786.757459][T15855] netlink: 5620 bytes leftover after parsing attributes in process `syz.5.2791'. [ 786.890921][T13322] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 786.936182][T15854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.965999][T15859] xt_l2tp: invalid flags combination: c [ 787.018784][T13322] usb 2-1: device descriptor read/64, error -71 [ 787.039181][T15861] ubi0: attaching mtd0 [ 787.044587][T15861] ubi0: scanning is finished [ 787.044697][T15861] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 787.132263][T13322] usb usb2-port1: attempt power cycle [ 787.149952][T15861] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 787.348552][T15803] i2c i2c-1: failure reading status [ 787.375265][ T9] usb 3-1: USB disconnect, device number 34 [ 787.445108][T15864] netlink: 'syz.2.2794': attribute type 4 has an invalid length. [ 787.465589][T15864] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2794'. [ 787.468599][T13322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 787.489155][T13322] usb 2-1: device descriptor read/8, error -71 [ 787.728711][T13322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 787.749051][T13322] usb 2-1: device descriptor read/8, error -71 [ 787.849133][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 787.858622][T13322] usb usb2-port1: unable to enumerate USB device [ 787.998426][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 787.999219][ T9] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 788.000241][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 788.000259][ T9] usb 3-1: config 0 has no interface number 0 [ 788.000289][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 788.002247][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.002263][ T9] usb 3-1: Product: syz [ 788.002273][ T9] usb 3-1: Manufacturer: syz [ 788.002282][ T9] usb 3-1: SerialNumber: syz [ 788.014962][ T9] usb 3-1: config 0 descriptor?? [ 788.247779][T15872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2798'. [ 788.658381][T13322] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 788.809160][T13322] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0003, bcdDevice=0.00 [ 788.810433][T13322] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.810450][T13322] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.811517][T13322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 788.811534][T13322] usb 6-1: SerialNumber: syz [ 788.870665][T13322] usb 6-1: 0:2 : does not exist [ 789.019854][T15878] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 789.019875][T15878] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 789.020004][T15878] vhci_hcd vhci_hcd.0: Device attached [ 789.070527][T15878] cgroup: Unknown subsys name 'fowner<00000000000000000000' [ 789.071070][T15879] vhci_hcd: connection closed [ 789.071244][ T33] vhci_hcd vhci_hcd.5: stop threads [ 789.071279][ T33] vhci_hcd vhci_hcd.5: release socket [ 789.071295][ T33] vhci_hcd vhci_hcd.5: disconnect device [ 789.154305][T13322] usb 6-1: USB disconnect, device number 38 [ 789.187474][T11938] udevd[11938]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.530822][ T9] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 789.530862][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 789.530874][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 789.530926][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 789.538088][ T9] usb 3-1: USB disconnect, device number 35 [ 789.686387][T13730] overlayfs: failed lookup in lower (newroot/159, name='bus', err=-40): overlapping layers [ 789.695996][T13730] overlayfs: failed lookup in lower (newroot/159, name='bus', err=-40): overlapping layers [ 789.720052][ T9688] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 789.837304][T15013] bridge0: port 3(syz_tun) entered disabled state [ 789.890834][T15013] syz_tun (unregistering): left allmulticast mode [ 789.890856][T15013] syz_tun (unregistering): left promiscuous mode [ 789.890935][T15013] bridge0: port 3(syz_tun) entered disabled state [ 789.924570][ T9688] usb 2-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 789.940499][ T9688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.940519][ T9688] usb 2-1: Product: syz [ 789.940529][ T9688] usb 2-1: Manufacturer: syz [ 789.940539][ T9688] usb 2-1: SerialNumber: syz [ 789.978748][ T9688] usb 2-1: config 0 descriptor?? [ 790.213287][ T9688] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 004 [ 790.505354][ T9198] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.934023][ T9198] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.115703][ T9198] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.275532][ T9198] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.306112][T15903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2808'. [ 791.596418][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.612899][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.627397][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.638668][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.639180][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 791.750184][ T9688] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 791.847983][ T9198] bridge_slave_1: left allmulticast mode [ 791.848005][ T9198] bridge_slave_1: left promiscuous mode [ 791.848197][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.875987][ T9198] bridge_slave_0: left allmulticast mode [ 791.876007][ T9198] bridge_slave_0: left promiscuous mode [ 791.876190][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.933363][ T9688] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 791.936732][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.936756][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.936772][ T9688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.936821][ T9688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.002278][ T9688] usb 3-1: config 0 descriptor?? [ 792.235190][ T9198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.237646][ T9198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.263626][ T9198] bond0 (unregistering): Released all slaves [ 792.458047][ T9688] usbhid 3-1:0.0: can't add hid device: -71 [ 792.458147][ T9688] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 792.487265][ T9688] usb 3-1: USB disconnect, device number 36 [ 792.710392][T15882] i2c i2c-1: failure reading status [ 792.798258][ T9688] usb 2-1: USB disconnect, device number 4 [ 793.556686][T15907] rxe_eth0 speed is unknown, defaulting to 1000 [ 793.710729][ T9198] hsr_slave_0: left promiscuous mode [ 793.714693][ T9198] hsr_slave_1: left promiscuous mode [ 793.715336][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.715352][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.748635][T14594] Bluetooth: hci0: command tx timeout [ 793.755783][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.755803][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.806813][ T9198] veth1_macvtap: left promiscuous mode [ 793.806844][ T9198] veth0_macvtap: left promiscuous mode [ 793.806931][ T9198] veth1_vlan: left promiscuous mode [ 793.806952][ T9198] veth0_vlan: left promiscuous mode [ 794.137840][T15943] FAULT_INJECTION: forcing a failure. [ 794.137840][T15943] name failslab, interval 1, probability 0, space 0, times 0 [ 794.137867][T15943] CPU: 0 UID: 0 PID: 15943 Comm: syz.2.2815 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 794.137890][T15943] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 794.137897][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 794.137907][T15943] Call Trace: [ 794.137914][T15943] [ 794.137920][T15943] dump_stack_lvl+0xe8/0x150 [ 794.137946][T15943] should_fail_ex+0x3eb/0x540 [ 794.137966][T15943] should_failslab+0xa8/0x100 [ 794.137986][T15943] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 794.138010][T15943] kmem_cache_alloc_noprof+0x9c/0x600 [ 794.138035][T15943] ? __kvmalloc_node_noprof+0x340/0x820 [ 794.138051][T15943] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 794.138073][T15943] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 794.138101][T15943] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 794.138141][T15943] mmu_topup_memory_caches+0x21/0x1a0 [ 794.138168][T15943] kvm_mmu_load+0x9d/0x21e0 [ 794.138185][T15943] ? kvm_msr_allowed+0x9a/0x490 [ 794.138210][T15943] ? kvm_msr_allowed+0x9a/0x490 [ 794.138233][T15943] ? kvm_msr_allowed+0x9a/0x490 [ 794.138257][T15943] ? apic_find_highest_vector+0x1bd/0x2d0 [ 794.138276][T15943] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 794.138306][T15943] vcpu_run+0x4f5b/0x7a90 [ 794.138384][T15943] ? __pfx_vcpu_run+0x10/0x10 [ 794.138407][T15943] ? lock_acquire+0x115/0x350 [ 794.138427][T15943] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 794.138447][T15943] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 794.138475][T15943] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 794.138501][T15943] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 794.138526][T15943] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 794.138545][T15943] kvm_vcpu_ioctl+0xa61/0xfd0 [ 794.138565][T15943] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 794.138595][T15943] ? __fget_files+0x2a/0x420 [ 794.138613][T15943] ? __fget_files+0x2a/0x420 [ 794.138629][T15943] ? __fget_files+0x2a/0x420 [ 794.138647][T15943] ? bpf_lsm_file_ioctl+0x9/0x20 [ 794.138666][T15943] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 794.138682][T15943] __se_sys_ioctl+0xfc/0x170 [ 794.138704][T15943] do_syscall_64+0x166/0x520 [ 794.138726][T15943] ? trace_irq_disable+0x3b/0x140 [ 794.138757][T15943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.138773][T15943] ? clear_bhb_loop+0x70/0xc0 [ 794.138792][T15943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.138807][T15943] RIP: 0033:0x7f15e3b9f559 [ 794.138821][T15943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.138834][T15943] RSP: 002b:00007f15e4b38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.138850][T15943] RAX: ffffffffffffffda RBX: 00007f15e3e25fa0 RCX: 00007f15e3b9f559 [ 794.138861][T15943] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 794.138871][T15943] RBP: 00007f15e4b38090 R08: 0000000000000000 R09: 0000000000000000 [ 794.138880][T15943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.138889][T15943] R13: 00007f15e3e26038 R14: 00007f15e3e25fa0 R15: 00007ffdb537e848 [ 794.138914][T15943] [ 794.759056][T15953] fuse: Unknown parameter 'b' [ 795.100766][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 795.147696][T15963] CIFS: Attempting to mount //127.0.0.1/test [ 795.148080][T15963] CIFS: VFS: Error connecting to socket. Aborting operation. [ 795.148111][T15963] CIFS: VFS: cifs_mount failed w/return code = -101 [ 795.204379][ T9198] team0 (unregistering): Port device team_slave_1 removed [ 795.225316][ T9198] team0 (unregistering): Port device team_slave_0 removed [ 795.261107][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 795.261726][ T9] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 795.262564][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 795.262598][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.262614][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 795.262631][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.262648][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.262676][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.472956][ T9688] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 795.476639][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 795.596361][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 795.596411][ T9] usbtmc 3-1:16.0: can't read capabilities [ 795.652746][ T9688] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 795.655041][ T9688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.655076][ T9688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.698195][ T9688] usb 2-1: config 0 descriptor?? [ 795.828914][T14594] Bluetooth: hci0: command tx timeout [ 795.836946][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.836989][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837022][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837054][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837085][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837289][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837319][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837349][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837378][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837408][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837611][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837643][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837674][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837705][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837736][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 795.837945][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 795.882580][ T9] usb 3-1: USB disconnect, device number 37 [ 796.223558][ T9688] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor [ 796.247306][ T9688] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0038/input/input47 [ 796.418505][ T9688] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 796.752022][ T9688] usb 2-1: USB disconnect, device number 5 [ 796.975334][T15907] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.977002][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.977108][T15907] bridge_slave_0: entered allmulticast mode [ 797.003849][T15907] bridge_slave_0: entered promiscuous mode [ 797.015756][T15907] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.015881][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.016007][T15907] bridge_slave_1: entered allmulticast mode [ 797.040826][ T5879] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 797.055893][T15907] bridge_slave_1: entered promiscuous mode [ 797.129474][T15907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.137218][T15907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.200686][ T5879] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 797.201789][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.201809][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.201831][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 797.201859][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.203708][ T5879] usb 3-1: config 0 descriptor?? [ 797.284582][T15907] team0: Port device team_slave_0 added [ 797.301631][T15907] team0: Port device team_slave_1 added [ 797.416846][T15907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.416861][T15907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.416881][T15907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.472929][T15907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.472942][T15907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.472961][T15907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.649741][T15907] hsr_slave_0: entered promiscuous mode [ 797.652320][T15907] hsr_slave_1: entered promiscuous mode [ 797.685926][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 797.686025][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 797.710348][ T5879] usb 3-1: USB disconnect, device number 38 [ 797.809336][ T9688] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 797.851682][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 797.909222][T14594] Bluetooth: hci0: command tx timeout [ 797.959661][ T9688] usb 2-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 797.962225][ T9688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.962243][ T9688] usb 2-1: Product: syz [ 797.962252][ T9688] usb 2-1: Manufacturer: syz [ 797.962262][ T9688] usb 2-1: SerialNumber: syz [ 797.998005][ T9688] usb 2-1: config 0 descriptor?? [ 798.022155][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2823'. [ 798.227040][ T9688] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 006 [ 799.413041][T16020] fuse: Unknown parameter 'b' [ 799.569963][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 799.790071][T15907] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 799.807608][T15907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 799.822087][T15907] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 799.843406][T15907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.846805][T15907] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 799.893318][T15907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.898177][T15907] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 799.945565][T15907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.989053][T14594] Bluetooth: hci0: command tx timeout [ 800.276590][T15907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.332910][T15907] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.357862][T14539] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.357939][T14539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.385154][T16037] CIFS: Attempting to mount //127.0.0.1/test [ 800.385791][T16037] CIFS: VFS: Error connecting to socket. Aborting operation. [ 800.385821][T16037] CIFS: VFS: cifs_mount failed w/return code = -101 [ 800.423350][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.423444][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.657941][ T9] usb 2-1: USB disconnect, device number 6 [ 800.701157][T13322] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 800.861296][T13322] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 800.873014][T13322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.873049][T13322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.917253][T13322] usb 3-1: config 0 descriptor?? [ 800.942576][T16046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2831'. [ 801.338106][T13322] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 801.372692][T13322] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0039/input/input48 [ 801.461557][ T9688] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 801.556479][T13322] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 801.612782][ T9688] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 801.629587][ T9688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.629612][ T9688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.629628][ T9688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 801.629816][ T9688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.754624][ T9688] usb 2-1: config 0 descriptor?? [ 802.012182][ T5785] usb 3-1: USB disconnect, device number 39 [ 802.125219][T16055] fido_id[16055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 802.259599][ T9688] usbhid 2-1:0.0: can't add hid device: -71 [ 802.259674][ T9688] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 802.292450][ T9688] usb 2-1: USB disconnect, device number 7 [ 802.322419][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 802.722931][T15907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.003154][T16080] fuse: Unknown parameter 'b' [ 803.442422][T16095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2839'. [ 803.490709][ T9688] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 803.649192][ T9688] usb 2-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 803.654292][ T9688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.654311][ T9688] usb 2-1: Product: syz [ 803.654321][ T9688] usb 2-1: Manufacturer: syz [ 803.654331][ T9688] usb 2-1: SerialNumber: syz [ 803.698698][ T9688] usb 2-1: config 0 descriptor?? [ 803.700888][T15907] veth0_vlan: entered promiscuous mode [ 803.749804][T15907] veth1_vlan: entered promiscuous mode [ 803.854445][T15907] veth0_macvtap: entered promiscuous mode [ 803.878263][T15907] veth1_macvtap: entered promiscuous mode [ 803.933290][ T9688] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 008 [ 803.979055][T15907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.023484][T15907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.093619][T16105] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2842'. [ 804.111878][T16105] netlink: 'syz.2.2842': attribute type 4 has an invalid length. [ 804.149462][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.157530][ T630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.157570][ T630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.157597][ T630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.366272][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.366288][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.463685][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.463704][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.652752][ T9688] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 804.802512][ T9688] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 804.802872][T16120] CIFS: Attempting to mount //127.0.0.1/test [ 804.803400][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.803421][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.803436][ T9688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 804.803466][ T9688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.837823][ T9688] usb 3-1: config 0 descriptor?? [ 804.896143][T16120] CIFS: VFS: Error connecting to socket. Aborting operation. [ 804.896195][T16120] CIFS: VFS: cifs_mount failed w/return code = -111 [ 805.170030][T13939] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 805.287774][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 805.303400][ T9688] usbhid 3-1:0.0: can't add hid device: -71 [ 805.303469][ T9688] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 805.327128][T13939] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 805.328159][T13939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.328194][T13939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.364925][ T9688] usb 3-1: USB disconnect, device number 40 [ 805.391653][T13939] usb 5-1: config 0 descriptor?? [ 805.805771][T13939] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 805.835412][T13939] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003A/input/input49 [ 805.984045][T13939] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 806.304581][ T9688] usb 2-1: USB disconnect, device number 8 [ 806.410959][T13939] usb 5-1: USB disconnect, device number 57 [ 806.528570][ T5703] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 806.680533][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 806.683484][ T5703] usb 3-1: New USB device found: idVendor=28bd, idProduct=0934, bcdDevice=0.00 [ 806.684633][ T5703] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 806.684665][ T5703] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.684684][ T5703] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.684699][ T5703] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 806.684718][ T5703] usb 3-1: config 0 interface 0 has no altsetting 0 [ 806.684741][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.763017][ T5703] usb 3-1: config 0 descriptor?? [ 806.922118][T16155] fuse: Unknown parameter 'b' [ 806.933822][T16156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2848'. [ 807.288624][ T5703] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0934.003B/input/input50 [ 807.322095][ T5703] uclogic 0003:28BD:0934.003B: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0934] on usb-dummy_hcd.2-1/input0 [ 807.504875][T13939] usb 3-1: USB disconnect, device number 41 [ 807.678200][T16170] fido_id[16170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 807.861128][ T9688] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 807.888730][ T5703] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 808.040340][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 808.041163][ T5703] usb 2-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00 [ 808.044309][ T5703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.044354][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.044373][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.044388][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 808.044417][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.126600][ T9688] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 808.138156][ T5703] usb 2-1: config 0 descriptor?? [ 808.269359][T13939] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 808.419471][T13939] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 808.420911][T13939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.420934][T13939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.420950][T13939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.420980][T13939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.426636][T13939] usb 3-1: config 0 descriptor?? [ 808.582052][ T5703] hid_parser_main: 38 callbacks suppressed [ 808.582069][ T5703] nintendo 0003:057E:2019.003C: unknown main item tag 0x0 [ 808.582089][ T5703] nintendo 0003:057E:2019.003C: unknown main item tag 0x0 [ 808.582107][ T5703] nintendo 0003:057E:2019.003C: unknown main item tag 0x0 [ 808.582123][ T5703] nintendo 0003:057E:2019.003C: unknown main item tag 0x0 [ 808.582140][ T5703] nintendo 0003:057E:2019.003C: unknown main item tag 0x0 [ 808.587176][ T5703] nintendo 0003:057E:2019.003C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 808.587531][ T5703] nintendo 0003:057E:2019.003C: Failed to get joycon info; ret=-38 [ 808.587546][ T5703] nintendo 0003:057E:2019.003C: Failed to retrieve controller info; ret=-38 [ 808.587557][ T5703] nintendo 0003:057E:2019.003C: Failed to initialize controller; ret=-38 [ 808.630395][ T5701] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 808.631462][ T9688] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 808.712450][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.716600][T16178] ceph: No mds server is up or the cluster is laggy [ 808.745955][ T5703] nintendo 0003:057E:2019.003C: probe - fail = -38 [ 808.746118][ T5703] nintendo 0003:057E:2019.003C: probe with driver nintendo failed with error -38 [ 808.856122][ T9688] usb 5-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 808.880762][ T9688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.880782][ T9688] usb 5-1: Product: syz [ 808.880791][ T9688] usb 5-1: Manufacturer: syz [ 808.880802][ T9688] usb 5-1: SerialNumber: syz [ 808.923083][ T9688] usb 5-1: config 0 descriptor?? [ 809.040302][T13939] usbhid 3-1:0.0: can't add hid device: -71 [ 809.040404][T13939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 809.071563][T13939] usb 3-1: USB disconnect, device number 42 [ 809.172489][ T9688] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 058 [ 809.364785][T13939] usb 2-1: USB disconnect, device number 9 [ 809.673554][T16211] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2856'. [ 809.772976][T16217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2857'. [ 809.882081][T16220] jffs2: notice: (16220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 809.926043][T16220] netlink: 'syz.2.2858': attribute type 4 has an invalid length. [ 809.926062][T16220] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.2858'. [ 810.079752][T16218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.082392][T16225] CIFS: Attempting to mount //127.0.0.1/test [ 810.082750][T16225] CIFS: VFS: Error connecting to socket. Aborting operation. [ 810.082781][T16225] CIFS: VFS: cifs_mount failed w/return code = -101 [ 810.362813][T13939] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 810.511140][T13939] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 810.512157][T13939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.512191][T13939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.516014][T13939] usb 2-1: config 0 descriptor?? [ 810.946403][T13939] keytouch 0003:0926:3333.003D: fixing up Keytouch IEC report descriptor [ 810.972344][T13939] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.003D/input/input52 [ 811.022946][T16248] No control pipe specified [ 811.114095][T13939] keytouch 0003:0926:3333.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 811.503231][ T5703] usb 5-1: USB disconnect, device number 58 [ 811.553180][ T9688] usb 2-1: USB disconnect, device number 10 [ 811.750384][T16257] netlink: 'syz.4.2862': attribute type 4 has an invalid length. [ 811.783463][T16257] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2862'. [ 812.178836][ T5701] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 812.287064][T16271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2866'. [ 812.330563][ T5701] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 812.334567][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.334598][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.334614][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.334645][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.338040][ T5701] usb 5-1: config 0 descriptor?? [ 812.856423][ T5701] usbhid 5-1:0.0: can't add hid device: -71 [ 812.856504][ T5701] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 812.887026][ T5701] usb 5-1: USB disconnect, device number 59 [ 813.514376][ T5701] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 813.679668][ T5701] usb 3-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 813.682211][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.682229][ T5701] usb 3-1: Product: syz [ 813.682240][ T5701] usb 3-1: Manufacturer: syz [ 813.682250][ T5701] usb 3-1: SerialNumber: syz [ 813.684215][ T5701] usb 3-1: config 0 descriptor?? [ 813.910241][ T5701] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 043 [ 813.971244][T16311] CIFS: Attempting to mount //127.0.0.1/test [ 813.971808][T16311] CIFS: VFS: Error connecting to socket. Aborting operation. [ 813.971839][T16311] CIFS: VFS: cifs_mount failed w/return code = -101 [ 814.248966][ T5701] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 814.255244][T16318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2877'. [ 814.400091][ T5701] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 814.401081][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.401111][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.407720][ T5701] usb 5-1: config 0 descriptor?? [ 814.849300][ T5701] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 814.854065][T16338] device-mapper: table: 248:3: thin: Error opening origin device (-ENOENT) [ 814.854084][T16338] device-mapper: ioctl: error adding target to table [ 814.889232][ T5701] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003E/input/input53 [ 814.999784][ T5701] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 815.419801][ T9688] usb 5-1: USB disconnect, device number 60 [ 815.419922][ C0] keytouch 0003:0926:3333.003E: usb_submit_urb(ctrl) failed: -19 [ 816.012267][ T9688] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 816.180510][ T9688] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 816.182991][ T9688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.183015][ T9688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.183041][ T9688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 816.183071][ T9688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.198698][ T9688] usb 2-1: config 0 descriptor?? [ 816.344698][ T5879] usb 3-1: USB disconnect, device number 43 [ 816.357303][ T5701] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 816.529990][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 816.530650][ T5701] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 816.531756][ T5701] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 816.531790][ T5701] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 816.531806][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 816.531824][ T5701] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 816.531840][ T5701] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 816.531888][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.637355][T16369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2886'. [ 816.670347][T16371] FAULT_INJECTION: forcing a failure. [ 816.670347][T16371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 816.670373][T16371] CPU: 0 UID: 0 PID: 16371 Comm: syz.0.2885 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 816.670396][T16371] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 816.670404][T16371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 816.670413][T16371] Call Trace: [ 816.670420][T16371] [ 816.670427][T16371] dump_stack_lvl+0xe8/0x150 [ 816.670453][T16371] should_fail_ex+0x3eb/0x540 [ 816.670474][T16371] prepare_alloc_pages+0x21e/0x5f0 [ 816.670567][T16371] __alloc_frozen_pages_noprof+0x17c/0x410 [ 816.670593][T16371] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 816.670610][T16371] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 816.670629][T16371] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 816.670655][T16371] __alloc_pages_noprof+0x10/0x100 [ 816.670673][T16371] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 816.670700][T16371] ? alloc_pages_noprof+0x140/0x2b0 [ 816.670725][T16371] __kasan_populate_vmalloc+0xb7/0x1c0 [ 816.670747][T16371] alloc_vmap_area+0xd10/0x1410 [ 816.670799][T16371] ? __pfx_alloc_vmap_area+0x10/0x10 [ 816.670818][T16371] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 816.670836][T16371] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 816.670852][T16371] ? __get_vm_area_node+0x155/0x2f0 [ 816.670877][T16371] __get_vm_area_node+0x200/0x2f0 [ 816.670904][T16371] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 816.670946][T16371] ? copy_process+0x7ea/0x44b0 [ 816.670972][T16371] ? percpu_ref_get_many+0x19/0x140 [ 816.671081][T16371] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 816.671109][T16371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 816.671132][T16371] ? dup_task_struct+0x52/0xa00 [ 816.671148][T16371] ? trace_kmem_cache_alloc+0x29/0xe0 [ 816.671172][T16371] ? memcpy_and_pad+0x48/0x80 [ 816.671196][T16371] __vmalloc_node_noprof+0xc2/0x100 [ 816.671219][T16371] ? copy_process+0x7ea/0x44b0 [ 816.671234][T16371] ? copy_process+0x7ea/0x44b0 [ 816.671256][T16371] dup_task_struct+0x2c6/0xa00 [ 816.671279][T16371] copy_process+0x7ea/0x44b0 [ 816.671317][T16371] ? rcu_is_watching+0x16/0xb0 [ 816.671340][T16371] ? __pfx_copy_process+0x10/0x10 [ 816.671363][T16371] ? mutex_init_lockdep+0xdf/0x110 [ 816.671385][T16371] vhost_task_create+0x1f9/0x380 [ 816.671400][T16371] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 816.671418][T16371] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 816.671437][T16371] ? __pfx_vhost_task_create+0x10/0x10 [ 816.671455][T16371] ? register_lock_class+0x31/0x2e0 [ 816.671478][T16371] ? __pfx_vhost_task_fn+0x10/0x10 [ 816.671499][T16371] ? kasan_quarantine_put+0xbb/0x1f0 [ 816.671522][T16371] kvm_mmu_post_init_vm+0x147/0x2b0 [ 816.671544][T16371] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 816.671573][T16371] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 816.671593][T16371] kvm_vcpu_ioctl+0xa61/0xfd0 [ 816.671613][T16371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 816.671643][T16371] ? __fget_files+0x2a/0x420 [ 816.671661][T16371] ? __fget_files+0x2a/0x420 [ 816.671676][T16371] ? __fget_files+0x2a/0x420 [ 816.671695][T16371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 816.671714][T16371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 816.671729][T16371] __se_sys_ioctl+0xfc/0x170 [ 816.671751][T16371] do_syscall_64+0x166/0x520 [ 816.671778][T16371] ? trace_irq_disable+0x3b/0x140 [ 816.671797][T16371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.671813][T16371] ? clear_bhb_loop+0x70/0xc0 [ 816.671833][T16371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.671849][T16371] RIP: 0033:0x7fa29f19f559 [ 816.671864][T16371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.671877][T16371] RSP: 002b:00007fa2a00b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.671894][T16371] RAX: ffffffffffffffda RBX: 00007fa29f426090 RCX: 00007fa29f19f559 [ 816.671906][T16371] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 816.671916][T16371] RBP: 00007fa2a00b6090 R08: 0000000000000000 R09: 0000000000000000 [ 816.671926][T16371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 816.671935][T16371] R13: 00007fa29f426128 R14: 00007fa29f426090 R15: 00007fff5609d1a8 [ 816.671961][T16371] [ 816.971291][T16371] syz.0.2885: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 816.971362][T16371] CPU: 0 UID: 0 PID: 16371 Comm: syz.0.2885 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 816.971386][T16371] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 816.971392][T16371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 816.971400][T16371] Call Trace: [ 816.971406][T16371] [ 816.971412][T16371] dump_stack_lvl+0xe8/0x150 [ 816.971435][T16371] warn_alloc+0x24d/0x270 [ 816.971451][T16371] ? lockdep_hardirqs_on+0x7b/0x110 [ 816.971473][T16371] ? __pfx_warn_alloc+0x10/0x10 [ 816.971486][T16371] ? kfree+0x1c5/0x650 [ 816.971511][T16371] ? __get_vm_area_node+0x219/0x2f0 [ 816.971536][T16371] __vmalloc_node_range_noprof+0x396/0x16f0 [ 816.971565][T16371] ? percpu_ref_get_many+0x19/0x140 [ 816.971590][T16371] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 816.971614][T16371] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 816.971635][T16371] ? dup_task_struct+0x52/0xa00 [ 816.971651][T16371] ? trace_kmem_cache_alloc+0x29/0xe0 [ 816.971673][T16371] ? memcpy_and_pad+0x48/0x80 [ 816.971694][T16371] __vmalloc_node_noprof+0xc2/0x100 [ 816.971714][T16371] ? copy_process+0x7ea/0x44b0 [ 816.971728][T16371] ? copy_process+0x7ea/0x44b0 [ 816.971745][T16371] dup_task_struct+0x2c6/0xa00 [ 816.971784][T16371] copy_process+0x7ea/0x44b0 [ 816.971821][T16371] ? rcu_is_watching+0x16/0xb0 [ 816.971843][T16371] ? __pfx_copy_process+0x10/0x10 [ 816.971866][T16371] ? mutex_init_lockdep+0xdf/0x110 [ 816.971886][T16371] vhost_task_create+0x1f9/0x380 [ 816.971901][T16371] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 816.971918][T16371] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 816.971936][T16371] ? __pfx_vhost_task_create+0x10/0x10 [ 816.971949][T16371] ? register_lock_class+0x31/0x2e0 [ 816.971970][T16371] ? __pfx_vhost_task_fn+0x10/0x10 [ 816.971991][T16371] ? kasan_quarantine_put+0xbb/0x1f0 [ 816.972019][T16371] kvm_mmu_post_init_vm+0x147/0x2b0 [ 816.972040][T16371] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 816.972070][T16371] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 816.972088][T16371] kvm_vcpu_ioctl+0xa61/0xfd0 [ 816.972107][T16371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 816.972137][T16371] ? __fget_files+0x2a/0x420 [ 816.972154][T16371] ? __fget_files+0x2a/0x420 [ 816.972169][T16371] ? __fget_files+0x2a/0x420 [ 816.972187][T16371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 816.972206][T16371] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 816.972220][T16371] __se_sys_ioctl+0xfc/0x170 [ 816.972242][T16371] do_syscall_64+0x166/0x520 [ 816.972263][T16371] ? trace_irq_disable+0x3b/0x140 [ 816.972281][T16371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.972296][T16371] ? clear_bhb_loop+0x70/0xc0 [ 816.972315][T16371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.972330][T16371] RIP: 0033:0x7fa29f19f559 [ 816.972346][T16371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.972359][T16371] RSP: 002b:00007fa2a00b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.972374][T16371] RAX: ffffffffffffffda RBX: 00007fa29f426090 RCX: 00007fa29f19f559 [ 816.972386][T16371] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 816.972395][T16371] RBP: 00007fa2a00b6090 R08: 0000000000000000 R09: 0000000000000000 [ 816.972405][T16371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 816.972414][T16371] R13: 00007fa29f426128 R14: 00007fa29f426090 R15: 00007fff5609d1a8 [ 816.972439][T16371] [ 817.169497][ T9688] usbhid 2-1:0.0: can't add hid device: -71 [ 817.169587][ T9688] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 817.348307][ T9688] usb 2-1: USB disconnect, device number 11 [ 817.535137][ T5701] usb 5-1: GET_CAPABILITIES returned 0 [ 817.535172][ T5701] usbtmc 5-1:16.0: can't read capabilities [ 817.698039][T16371] Mem-Info: [ 817.698053][T16371] active_anon:8262 inactive_anon:0 isolated_anon:0 [ 817.698053][T16371] active_file:2109 inactive_file:56933 isolated_file:0 [ 817.698053][T16371] unevictable:0 dirty:66 writeback:0 [ 817.698053][T16371] slab_reclaimable:12094 slab_unreclaimable:106778 [ 817.698053][T16371] mapped:25560 shmem:553 pagetables:2144 [ 817.698053][T16371] sec_pagetables:0 bounce:0 [ 817.698053][T16371] kernel_misc_reclaimable:0 [ 817.698053][T16371] free:1298622 free_pcp:9780 free_cma:0 [ 817.698096][T16371] Node 0 active_anon:33048kB inactive_anon:0kB active_file:8436kB inactive_file:227520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102240kB dirty:260kB writeback:0kB shmem:2212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13632kB pagetables:8440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 817.698139][T16371] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 817.698178][T16371] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.698224][T16371] lowmem_reserve[]: 0 2461 2463 2463 2463 [ 817.698252][T16371] Node 0 DMA32 free:1246228kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33048kB inactive_anon:0kB active_file:8436kB inactive_file:227520kB unevictable:0kB writepending:260kB zspages:0kB present:3129332kB managed:2520772kB mlocked:0kB bounce:0kB free_pcp:39120kB local_pcp:39120kB free_cma:0kB [ 817.698441][T16371] lowmem_reserve[]: 0 0 1 1 1 [ 817.698469][T16371] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.698512][T16371] lowmem_reserve[]: 0 0 0 0 0 [ 817.698538][T16371] Node 1 Normal free:3932896kB boost:0kB min:55964kB low:69952kB high:83940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.698581][T16371] lowmem_reserve[]: 0 0 0 0 0 [ 817.698607][T16371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 817.698712][T16371] Node 0 DMA32: 883*4kB (UE) 481*8kB (UME) 696*16kB (UME) 822*32kB (UME) 422*64kB (UME) 337*128kB (UME) 109*256kB (UME) 27*512kB (UME) 14*1024kB (UME) 3*2048kB (UE) 261*4096kB (UM) = 1246228kB [ 817.698844][T16371] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 817.698941][T16371] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 9*16kB (UM) 14*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3932896kB [ 817.699046][T16371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 817.699057][T16371] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 817.699069][T16371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 817.699080][T16371] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 817.699091][T16371] 59591 total pagecache pages [ 817.699097][T16371] 0 pages in swap cache [ 817.699102][T16371] Free swap = 124996kB [ 817.699107][T16371] Total swap = 124996kB [ 817.699112][T16371] 2097051 pages RAM [ 817.699117][T16371] 0 pages HighMem/MovableOnly [ 817.699123][T16371] 434901 pages reserved [ 817.699128][T16371] 0 pages cma reserved [ 818.364829][ T9] usb 5-1: USB disconnect, device number 61 [ 818.638474][ T5701] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 818.789076][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 818.789972][ T5701] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 818.792764][ T5701] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 818.792802][ T5701] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 818.792817][ T5701] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 818.792833][ T5701] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.792849][ T5701] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.792875][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.014557][ T5701] usb 3-1: GET_CAPABILITIES returned 0 [ 819.014592][ T5701] usbtmc 3-1:16.0: can't read capabilities [ 819.102880][T16394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2891'. [ 819.102901][T16394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2891'. [ 819.102910][T16394] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 819.234671][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.234713][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.234750][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.234788][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.234820][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.234851][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235046][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235077][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235109][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235140][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235171][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235201][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235420][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235452][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235483][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 819.235514][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 819.238185][ T9] usb 3-1: USB disconnect, device number 44 [ 819.430282][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2891'. [ 819.430300][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2891'. [ 819.430309][T16401] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 820.129218][T16418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 820.568381][ T9688] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 820.721216][ T9688] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 820.722148][ T9688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.722168][ T9688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.722183][ T9688] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 820.722210][ T9688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.727323][ T9688] usb 5-1: config 0 descriptor?? [ 821.211064][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 821.214391][ T9688] usbhid 5-1:0.0: can't add hid device: -71 [ 821.214469][ T9688] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 821.217769][ T9688] usb 5-1: USB disconnect, device number 62 [ 821.506949][T16437] Invalid argument reading file caps for ./file0 [ 821.982565][T16451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2905'. [ 822.183010][T16458] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2908'. [ 822.206150][T16458] netlink: 'syz.4.2908': attribute type 4 has an invalid length. [ 822.334306][T16460] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 822.360092][ T9688] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 822.365626][T16460] VFS: Can't find a romfs filesystem on dev nullb0. [ 822.365626][T16460] [ 822.510282][ T9688] usb 3-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 822.518003][ T9688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.518024][ T9688] usb 3-1: Product: syz [ 822.518036][ T9688] usb 3-1: Manufacturer: syz [ 822.518046][ T9688] usb 3-1: SerialNumber: syz [ 822.565464][ T9688] usb 3-1: config 0 descriptor?? [ 822.794483][ T9688] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 045 [ 823.000980][T13939] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 823.026254][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2915'. [ 823.161407][T13939] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 823.163801][T13939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.163825][T13939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.163842][T13939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.163872][T13939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.167980][T13939] usb 5-1: config 0 descriptor?? [ 823.294952][ T5703] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 823.549714][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 823.648433][T13939] usbhid 5-1:0.0: can't add hid device: -71 [ 823.648523][T13939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 823.653621][T13939] usb 5-1: USB disconnect, device number 63 [ 824.061876][T13939] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 824.103600][T16486] ceph: No mds server is up or the cluster is laggy [ 824.609733][T16524] jffs2: notice: (16524) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 824.720219][T16524] netlink: 'syz.1.2923': attribute type 4 has an invalid length. [ 824.720238][T16524] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.2923'. [ 824.984706][T16534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2924'. [ 825.028119][T16522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.181130][ T5703] usb 3-1: USB disconnect, device number 45 [ 825.247533][T16536] netlink: 'syz.0.2925': attribute type 4 has an invalid length. [ 825.294669][T16536] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2925'. [ 825.595386][T16542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4084932136 (130717828352 ns) > initial count (25800231296 ns). Using initial count to start timer. [ 825.684212][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2928'. [ 826.420229][T16575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2935'. [ 827.348502][ T5879] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 827.499165][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 827.499983][ T5879] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 827.501026][ T5879] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 827.501043][ T5879] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 827.501057][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 827.501086][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 827.501101][ T5879] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 827.501117][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 827.501144][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.503584][ T5879] usb 5-1: config 0 descriptor?? [ 827.707372][T16610] FAULT_INJECTION: forcing a failure. [ 827.707372][T16610] name failslab, interval 1, probability 0, space 0, times 0 [ 827.707398][T16610] CPU: 0 UID: 0 PID: 16610 Comm: syz.2.2945 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 827.707424][T16610] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 827.707430][T16610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 827.707440][T16610] Call Trace: [ 827.707447][T16610] [ 827.707454][T16610] dump_stack_lvl+0xe8/0x150 [ 827.707479][T16610] should_fail_ex+0x3eb/0x540 [ 827.707499][T16610] should_failslab+0xa8/0x100 [ 827.707521][T16610] __kmalloc_noprof+0xf9/0x710 [ 827.707535][T16610] ? rcu_is_watching+0x16/0xb0 [ 827.707556][T16610] ? tomoyo_realpath_from_path+0xef/0x640 [ 827.707579][T16610] ? tomoyo_realpath_from_path+0xef/0x640 [ 827.707602][T16610] tomoyo_realpath_from_path+0xef/0x640 [ 827.707663][T16610] tomoyo_check_open_permission+0x229/0x470 [ 827.707691][T16610] ? tomoyo_check_open_permission+0x1d3/0x470 [ 827.707716][T16610] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 827.707743][T16610] ? __asan_memset+0x22/0x50 [ 827.707772][T16610] ? seqcount_lockdep_reader_access+0xea/0x100 [ 827.707809][T16610] ? devcgroup_check_permission+0x31/0x8f0 [ 827.707835][T16610] security_file_open+0xa9/0x240 [ 827.707859][T16610] do_dentry_open+0x495/0x1360 [ 827.707890][T16610] vfs_open_consume+0x4a/0x350 [ 827.707911][T16610] ? path_openat+0x16e1/0x20f0 [ 827.707938][T16610] path_openat+0x16fc/0x20f0 [ 827.707972][T16610] do_file_open+0x23e/0x4a0 [ 827.707995][T16610] ? __pfx_do_file_open+0x10/0x10 [ 827.708031][T16610] ? _raw_spin_unlock+0x28/0x50 [ 827.708051][T16610] ? alloc_fd+0x6af/0x760 [ 827.708149][T16610] do_sys_openat2+0x115/0x200 [ 827.708172][T16610] ? __se_sys_futex+0x3a8/0x450 [ 827.708195][T16610] ? __pfx_do_sys_openat2+0x10/0x10 [ 827.708223][T16610] ? rcu_is_watching+0x16/0xb0 [ 827.708247][T16610] __x64_sys_openat+0x138/0x170 [ 827.708274][T16610] do_syscall_64+0x166/0x520 [ 827.708296][T16610] ? trace_irq_disable+0x3b/0x140 [ 827.708314][T16610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.708332][T16610] ? clear_bhb_loop+0x70/0xc0 [ 827.708351][T16610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.708368][T16610] RIP: 0033:0x7f15e3b9f559 [ 827.708383][T16610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.708397][T16610] RSP: 002b:00007f15e4b38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 827.708415][T16610] RAX: ffffffffffffffda RBX: 00007f15e3e25fa0 RCX: 00007f15e3b9f559 [ 827.708427][T16610] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 827.708438][T16610] RBP: 00007f15e3c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 827.708449][T16610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.708459][T16610] R13: 00007f15e3e26038 R14: 00007f15e3e25fa0 R15: 00007ffdb537e848 [ 827.708484][T16610] [ 828.059288][ T5879] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 828.065081][T16610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 828.129519][T16610] netlink: 'syz.2.2945': attribute type 33 has an invalid length. [ 828.129536][T16610] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2945'. [ 828.283580][T16620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2947'. [ 828.688358][ T5879] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 828.767600][ T5785] usb 5-1: USB disconnect, device number 64 [ 828.787355][ T5785] usblp0: removed [ 828.838401][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 828.839321][ T5879] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 828.840324][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 828.840368][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 828.840384][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 828.840401][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 828.840417][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.840446][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.078733][ T5879] usb 3-1: GET_CAPABILITIES returned 0 [ 829.078771][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 829.284322][T16625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.299792][T16625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.664398][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664441][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664472][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664504][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664535][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664566][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664778][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664810][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664842][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664873][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.664904][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.665133][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.665166][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.665197][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.665229][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 829.665260][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 830.148675][ T5785] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 830.300848][ T5785] usb 5-1: Using ep0 maxpacket: 8 [ 830.303488][ T5785] usb 5-1: unable to get BOS descriptor or descriptor too short [ 830.303522][ T5785] usb 5-1: New USB device found: idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 830.304370][ T5785] usb 5-1: config 2 has an invalid interface number: 232 but max is 0 [ 830.304387][ T5785] usb 5-1: config 2 has no interface number 0 [ 830.304413][ T5785] usb 5-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0 [ 830.304428][ T5785] usb 5-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0 [ 830.304443][ T5785] usb 5-1: config 2 interface 232 has no altsetting 0 [ 830.306210][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.306226][ T5785] usb 5-1: Product: syz [ 830.306236][ T5785] usb 5-1: Manufacturer: syz [ 830.306246][ T5785] usb 5-1: SerialNumber: syz [ 830.545696][T16650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2956'. [ 830.776539][T16658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.795856][T16658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.491339][ T5703] usb 3-1: USB disconnect, device number 46 [ 832.120187][T16700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2965'. [ 832.643739][T16715] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2969'. [ 832.645687][T16715] netlink: 'syz.1.2969': attribute type 4 has an invalid length. [ 833.070237][ T5785] usb 5-1: USB disconnect, device number 65 [ 833.113408][T11961] udevd[11961]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.337219][T16728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2975'. [ 833.389346][ T5785] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 833.454102][T16729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2973'. [ 833.454131][T16729] : renamed from veth1_vlan (while UP) [ 833.549171][ T5785] usb 5-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 833.551797][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.551816][ T5785] usb 5-1: Product: syz [ 833.551827][ T5785] usb 5-1: Manufacturer: syz [ 833.551837][ T5785] usb 5-1: SerialNumber: syz [ 833.554494][ T5785] usb 5-1: config 0 descriptor?? [ 833.766325][ T5785] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 066 [ 833.827066][T16737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 833.827112][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2979'. [ 833.936381][ T5785] libceph: connect (1)0.0.0.0:6789 error -22 [ 833.936506][ T5785] libceph: mon0 (1)0.0.0.0:6789 connect error [ 834.190254][ T5785] libceph: connect (1)0.0.0.0:6789 error -22 [ 834.190392][ T5785] libceph: mon0 (1)0.0.0.0:6789 connect error [ 834.214199][T16750] netlink: 'syz.1.2983': attribute type 4 has an invalid length. [ 834.237357][T16750] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2983'. [ 834.377034][T16752] CIFS: Attempting to mount //127.0.0.1/test [ 834.385950][T16752] CIFS: VFS: Error connecting to socket. Aborting operation. [ 834.385986][T16752] CIFS: VFS: cifs_mount failed w/return code = -101 [ 834.434454][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2985'. [ 834.538505][T16756] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4084932136 (130717828352 ns) > initial count (25800231296 ns). Using initial count to start timer. [ 834.638478][ T9688] usb 5-1: USB disconnect, device number 66 [ 834.699262][ T5785] libceph: connect (1)0.0.0.0:6789 error -22 [ 834.699379][ T5785] libceph: mon0 (1)0.0.0.0:6789 connect error [ 834.736726][T16759] usb usb9: usbfs: process 16759 (syz.2.2987) did not claim interface 0 before use [ 834.760183][T16740] ceph: No mds server is up or the cluster is laggy [ 835.000797][T16768] jffs2: notice: (16768) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 835.026572][T16768] netlink: 'syz.1.2990': attribute type 4 has an invalid length. [ 835.026590][T16768] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.2990'. [ 835.087766][T16767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 835.208467][ T5785] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 835.359833][ T5785] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 835.360798][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.360819][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.360835][ T5785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 835.360864][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.363902][ T5785] usb 3-1: config 0 descriptor?? [ 835.510806][T16779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2994'. [ 835.717595][T16783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4084932136 (130717828352 ns) > initial count (25800231296 ns). Using initial count to start timer. [ 835.784400][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784427][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784446][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784464][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784483][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784501][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784537][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784556][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784575][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.784594][ T5785] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 835.897482][ T5785] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 836.011050][ T5785] usb 3-1: USB disconnect, device number 47 [ 836.085948][T16790] CIFS: Attempting to mount //127.0.0.1/test [ 836.086320][T16790] CIFS: VFS: Error connecting to socket. Aborting operation. [ 836.086348][T16790] CIFS: VFS: cifs_mount failed w/return code = -101 [ 836.148197][T16788] fido_id[16788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 836.424982][T16801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3003'. [ 837.194505][T16827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3012'. [ 837.538398][T13939] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 837.689290][T13939] usb 5-1: Using ep0 maxpacket: 8 [ 837.689929][T13939] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 837.690770][T13939] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 837.690807][T13939] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.690822][T13939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.690841][T13939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.690858][T13939] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.690888][T13939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.698374][ T5785] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 837.879122][ T5785] usb 3-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 837.880027][ T5785] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.880056][ T5785] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.885015][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 837.885034][ T5785] usb 3-1: SerialNumber: syz [ 837.963793][T13939] usb 5-1: GET_CAPABILITIES returned 0 [ 837.963848][T13939] usbtmc 5-1:16.0: can't read capabilities [ 838.175639][ T5785] usb 3-1: 0:2 : does not exist [ 838.175716][ T5785] usb 3-1: unit 5: unexpected type 0x09 [ 838.211919][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.211968][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.211999][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212030][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212060][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212090][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212315][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212348][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212381][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212413][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212446][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212623][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212653][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212682][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212711][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 838.212739][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 838.301144][T13939] usb 5-1: USB disconnect, device number 67 [ 838.434684][ T5785] usb 3-1: USB disconnect, device number 48 [ 838.502351][T11961] udevd[11961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.144079][T16853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3021'. [ 839.458748][ T9688] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 839.588685][ T9688] usb 5-1: device descriptor read/64, error -71 [ 839.831470][ T9688] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 839.959715][ T9688] usb 5-1: device descriptor read/64, error -71 [ 840.068475][ T5785] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 840.070574][ T9688] usb usb5-port1: attempt power cycle [ 840.219548][ T5785] usb 3-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 840.222113][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.222132][ T5785] usb 3-1: Product: syz [ 840.222142][ T5785] usb 3-1: Manufacturer: syz [ 840.222153][ T5785] usb 3-1: SerialNumber: syz [ 840.266722][ T5785] usb 3-1: config 0 descriptor?? [ 840.408900][ T9688] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 840.430866][ T9688] usb 5-1: device descriptor read/8, error -71 [ 840.488080][ T5785] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 049 [ 840.550938][T16872] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3027'. [ 840.570632][T16872] netlink: 'syz.1.3027': attribute type 4 has an invalid length. [ 840.668443][ T9688] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 840.692148][ T9688] usb 5-1: device descriptor read/8, error -71 [ 840.799517][ T9688] usb usb5-port1: unable to enumerate USB device [ 841.365368][ T9688] usb 3-1: USB disconnect, device number 49 [ 841.391395][T16879] CIFS: Attempting to mount //127.0.0.1/test [ 841.392231][T16879] CIFS: VFS: Error connecting to socket. Aborting operation. [ 841.392264][T16879] CIFS: VFS: cifs_mount failed w/return code = -111 [ 842.021803][T16882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3030'. [ 842.654966][T16905] CIFS: Attempting to mount //127.0.0.1/test [ 842.668106][T16905] CIFS: VFS: Error connecting to socket. Aborting operation. [ 842.668144][T16905] CIFS: VFS: cifs_mount failed w/return code = -111 [ 842.800904][T16908] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3039'. [ 842.905230][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3041'. [ 842.958954][ T9688] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 842.965633][T16914] netlink: 'syz.1.3042': attribute type 4 has an invalid length. [ 843.050985][ T127] libceph: connect (1)0.0.0.0:6789 error -22 [ 843.051094][ T127] libceph: mon0 (1)0.0.0.0:6789 connect error [ 843.052301][ T127] libceph: connect (1)0.0.0.0:6789 error -22 [ 843.052414][ T127] libceph: mon0 (1)0.0.0.0:6789 connect error [ 843.109335][ T9688] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 843.110324][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.110358][ T9688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.114630][ T9688] usb 3-1: config 0 descriptor?? [ 843.309073][ T5785] libceph: connect (1)0.0.0.0:6789 error -22 [ 843.309209][ T5785] libceph: mon0 (1)0.0.0.0:6789 connect error [ 843.480108][ T127] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 843.521212][ T9688] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor [ 843.527740][ T9688] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0040/input/input55 [ 843.626509][ T9688] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 843.645111][ T127] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 843.646182][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.646204][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.646219][ T127] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.646247][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.714833][ T127] usb 5-1: config 0 descriptor?? [ 843.818743][ T9688] libceph: connect (1)0.0.0.0:6789 error -22 [ 843.819049][ T9688] libceph: mon0 (1)0.0.0.0:6789 connect error [ 843.864554][T16916] ceph: No mds server is up or the cluster is laggy [ 844.110483][ T9688] usb 3-1: USB disconnect, device number 50 [ 844.110609][ C0] keytouch 0003:0926:3333.0040: usb_submit_urb(ctrl) failed: -19 [ 844.173495][ T127] hid_parser_main: 14 callbacks suppressed [ 844.173513][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173548][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173566][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173586][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173604][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173622][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173641][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173659][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173678][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.173696][ T127] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 844.295268][ T127] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 844.370167][ T127] usb 5-1: USB disconnect, device number 72 [ 844.456649][T16930] fido_id[16930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 844.612894][T16936] jffs2: notice: (16936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 844.641551][T16936] netlink: 'syz.1.3049': attribute type 4 has an invalid length. [ 844.641567][T16936] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.3049'. [ 844.724657][T16935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.763265][T16940] FAULT_INJECTION: forcing a failure. [ 844.763265][T16940] name fail_futex, interval 1, probability 0, space 0, times 0 [ 844.763290][T16940] CPU: 0 UID: 0 PID: 16940 Comm: syz.2.3050 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 844.763326][T16940] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 844.763332][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 844.763341][T16940] Call Trace: [ 844.763347][T16940] [ 844.763354][T16940] dump_stack_lvl+0xe8/0x150 [ 844.763398][T16940] should_fail_ex+0x3eb/0x540 [ 844.763418][T16940] get_futex_key+0x1ab/0x1410 [ 844.763447][T16940] ? __pfx_get_futex_key+0x10/0x10 [ 844.763466][T16940] ? __cgroup_account_cputime+0xe8/0x120 [ 844.763491][T16940] futex_wait_setup+0x4a/0x590 [ 844.763511][T16940] ? __futex_wait+0xdb/0x470 [ 844.763529][T16940] __futex_wait+0x175/0x470 [ 844.763550][T16940] ? __pfx___futex_wait+0x10/0x10 [ 844.763569][T16940] ? __pfx_futex_wake_mark+0x10/0x10 [ 844.763588][T16940] ? try_to_wake_up+0x8ce/0x14e0 [ 844.763625][T16940] futex_wait+0x121/0x390 [ 844.763641][T16940] ? __pfx_futex_wait+0x10/0x10 [ 844.763668][T16940] do_futex+0x3e7/0x4e0 [ 844.763692][T16940] ? __pfx_do_futex+0x10/0x10 [ 844.763710][T16940] ? __fget_files+0x3a2/0x420 [ 844.763724][T16940] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 844.763753][T16940] __se_sys_futex+0x3a8/0x450 [ 844.763795][T16940] ? ksys_write+0x242/0x270 [ 844.763811][T16940] ? __pfx___se_sys_futex+0x10/0x10 [ 844.763833][T16940] ? __pfx_ksys_write+0x10/0x10 [ 844.763853][T16940] ? __x64_sys_futex+0x21/0xf0 [ 844.763877][T16940] do_syscall_64+0x166/0x520 [ 844.763898][T16940] ? trace_irq_disable+0x3b/0x140 [ 844.763916][T16940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.763932][T16940] ? clear_bhb_loop+0x70/0xc0 [ 844.763951][T16940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.763966][T16940] RIP: 0033:0x7f15e3b9f559 [ 844.763980][T16940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.763993][T16940] RSP: 002b:00007f15e4b380e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 844.764010][T16940] RAX: ffffffffffffffda RBX: 00007f15e3e25fa8 RCX: 00007f15e3b9f559 [ 844.764022][T16940] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f15e3e25fa8 [ 844.764032][T16940] RBP: 00007f15e3e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 844.764042][T16940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.764051][T16940] R13: 00007f15e3e26038 R14: 00007ffdb537e760 R15: 00007ffdb537e848 [ 844.764075][T16940] [ 844.765112][T16940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3050'. [ 845.388401][ T127] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 845.538985][ T127] usb 5-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 845.540104][ T127] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 845.540124][ T127] usb 5-1: config 0 has no interface number 0 [ 845.542148][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.542165][ T127] usb 5-1: Product: syz [ 845.542176][ T127] usb 5-1: Manufacturer: syz [ 845.542187][ T127] usb 5-1: SerialNumber: syz [ 845.544585][ T127] usb 5-1: config 0 descriptor?? [ 846.133984][T16959] CIFS: Attempting to mount //127.0.0.1/test [ 846.134412][T16959] CIFS: VFS: Error connecting to socket. Aborting operation. [ 846.134458][T16959] CIFS: VFS: cifs_mount failed w/return code = -101 [ 846.174681][ T127] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 846.174864][ T127] asix 5-1:0.251: probe with driver asix failed with error -524 [ 846.381455][ T5785] usb 5-1: USB disconnect, device number 73 [ 846.982074][T16977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 847.438445][ T127] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 847.590987][ T127] usb 3-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 847.593575][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.593594][ T127] usb 3-1: Product: syz [ 847.593604][ T127] usb 3-1: Manufacturer: syz [ 847.593614][ T127] usb 3-1: SerialNumber: syz [ 847.597760][ T127] usb 3-1: config 0 descriptor?? [ 847.856247][ T127] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 051 [ 848.295603][T16990] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3069'. [ 848.468163][T16996] CIFS: Attempting to mount //127.0.0.1/test [ 848.475689][T16996] CIFS: VFS: Error connecting to socket. Aborting operation. [ 848.475723][T16996] CIFS: VFS: cifs_mount failed w/return code = -101 [ 848.714294][ T5785] usb 3-1: USB disconnect, device number 51 [ 849.796925][T17012] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3077'. [ 849.813842][T17012] netlink: 'syz.1.3077': attribute type 4 has an invalid length. [ 850.281222][T17019] CIFS: Attempting to mount //127.0.0.1/test [ 850.284468][T17019] CIFS: VFS: Error connecting to socket. Aborting operation. [ 850.284503][T17019] CIFS: VFS: cifs_mount failed w/return code = -111 [ 850.568389][ T5785] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 850.688517][ T9688] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 850.720155][ T5785] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 850.721213][ T5785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.721253][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.723012][ T5785] usb 5-1: config 0 descriptor?? [ 850.839523][ T9688] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 850.840591][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.840684][ T9688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.840701][ T9688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.840732][ T9688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.844576][ T9688] usb 3-1: config 0 descriptor?? [ 851.145980][ T5785] keytouch 0003:0926:3333.0042: fixing up Keytouch IEC report descriptor [ 851.169302][ T5785] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0042/input/input56 [ 851.266554][ T9688] hid_parser_main: 14 callbacks suppressed [ 851.266592][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266633][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266652][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266671][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266690][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266715][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266735][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266771][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266802][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.266821][ T9688] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0 [ 851.267780][ T5785] keytouch 0003:0926:3333.0042: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 851.420890][ T9688] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 851.486024][ T9688] usb 3-1: USB disconnect, device number 52 [ 851.660214][T17031] fido_id[17031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 851.747405][ T9688] usb 5-1: USB disconnect, device number 74 [ 851.748507][ C0] keytouch 0003:0926:3333.0042: usb_submit_urb(ctrl) failed: -19 [ 852.653730][T17060] netlink: 'syz.2.3094': attribute type 4 has an invalid length. [ 852.773743][ T127] libceph: connect (1)0.0.0.0:6789 error -22 [ 852.773853][ T127] libceph: mon0 (1)0.0.0.0:6789 connect error [ 852.979593][ T9688] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 853.029759][ T127] libceph: connect (1)0.0.0.0:6789 error -22 [ 853.029873][ T127] libceph: mon0 (1)0.0.0.0:6789 connect error [ 853.109339][ T9688] usb 5-1: device descriptor read/64, error -71 [ 853.197563][T17075] CIFS: Attempting to mount //127.0.0.1/test [ 853.207005][T17075] CIFS: VFS: Error connecting to socket. Aborting operation. [ 853.207041][T17075] CIFS: VFS: cifs_mount failed w/return code = -111 [ 853.348356][ T9688] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 853.478346][ T9688] usb 5-1: device descriptor read/64, error -71 [ 853.538827][ T5785] libceph: connect (1)0.0.0.0:6789 error -22 [ 853.538990][ T5785] libceph: mon0 (1)0.0.0.0:6789 connect error [ 853.588891][ T9688] usb usb5-port1: attempt power cycle [ 853.606443][T17066] ceph: No mds server is up or the cluster is laggy [ 853.930201][ T9688] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 853.948998][ T9688] usb 5-1: device descriptor read/8, error -71 [ 854.188715][ T9688] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 854.209651][ T9688] usb 5-1: device descriptor read/8, error -71 [ 854.296762][T17098] jffs2: notice: (17098) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 854.318803][ T9688] usb usb5-port1: unable to enumerate USB device [ 854.322014][T17098] netlink: 'syz.1.3107': attribute type 4 has an invalid length. [ 854.322030][T17098] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.3107'. [ 854.385387][T17097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.478480][ T127] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 854.629598][ T127] usb 3-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 854.632934][ T127] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.632952][ T127] usb 3-1: Product: syz [ 854.632962][ T127] usb 3-1: Manufacturer: syz [ 854.632972][ T127] usb 3-1: SerialNumber: syz [ 854.634873][ T127] usb 3-1: config 0 descriptor?? [ 854.848373][ T127] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 053 [ 855.573679][T17109] CIFS: Attempting to mount //127.0.0.1/test [ 855.574423][T17109] CIFS: VFS: Error connecting to socket. Aborting operation. [ 855.574455][T17109] CIFS: VFS: cifs_mount failed w/return code = -111 [ 855.702867][ T127] usb 3-1: USB disconnect, device number 53 [ 857.285241][ T127] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 857.285443][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 857.658376][ T127] usb 5-1: device descriptor read/64, error -32 [ 858.258714][ T127] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 859.076646][ T127] usb 5-1: unable to get BOS descriptor or descriptor too short [ 859.076683][ T127] usb 5-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 859.099481][ T127] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 859.099510][ T127] usb 5-1: can't read configurations, error -71 [ 859.099946][ T127] usb usb5-port1: attempt power cycle [ 859.513345][T17140] FAULT_INJECTION: forcing a failure. [ 859.513345][T17140] name failslab, interval 1, probability 0, space 0, times 0 [ 859.513554][T17140] CPU: 0 UID: 0 PID: 17140 Comm: syz.4.3121 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 859.513577][T17140] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 859.513583][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 859.513592][T17140] Call Trace: [ 859.513598][T17140] [ 859.513605][T17140] dump_stack_lvl+0xe8/0x150 [ 859.513629][T17140] should_fail_ex+0x3eb/0x540 [ 859.513648][T17140] should_failslab+0xa8/0x100 [ 859.513668][T17140] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 859.513702][T17140] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 859.513718][T17140] ? v9fs_init_fs_context+0x145/0x540 [ 859.513834][T17140] ? v9fs_init_fs_context+0x145/0x540 [ 859.513859][T17140] kstrdup+0x42/0x100 [ 859.513881][T17140] v9fs_init_fs_context+0x145/0x540 [ 859.513903][T17140] alloc_fs_context+0x99e/0xd00 [ 859.513947][T17140] do_new_mount+0x177/0xb00 [ 859.513974][T17140] ? __pfx_do_new_mount+0x10/0x10 [ 859.513998][T17140] ? ns_capable+0x84/0xe0 [ 859.514016][T17140] ? path_mount+0x647/0x1050 [ 859.514046][T17140] ? user_path_at+0xd4/0x160 [ 859.514064][T17140] __se_sys_mount+0x31d/0x420 [ 859.514082][T17140] ? __pfx___se_sys_mount+0x10/0x10 [ 859.514100][T17140] ? __x64_sys_mount+0x20/0xc0 [ 859.514116][T17140] do_syscall_64+0x166/0x520 [ 859.514137][T17140] ? trace_irq_disable+0x3b/0x140 [ 859.514154][T17140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.514169][T17140] ? clear_bhb_loop+0x70/0xc0 [ 859.514187][T17140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.514201][T17140] RIP: 0033:0x7fb56e39f559 [ 859.514215][T17140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.514227][T17140] RSP: 002b:00007fb56f1b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 859.514243][T17140] RAX: ffffffffffffffda RBX: 00007fb56e625fa0 RCX: 00007fb56e39f559 [ 859.514254][T17140] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 0000200000000300 [ 859.514265][T17140] RBP: 00007fb56e436b20 R08: 00002000000003c0 R09: 0000000000000000 [ 859.514275][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.514284][T17140] R13: 00007fb56e626038 R14: 00007fb56e625fa0 R15: 00007ffdb3548ce8 [ 859.514306][T17140] [ 859.885673][T17146] CIFS: Attempting to mount //127.0.0.1/test [ 859.886404][T17146] CIFS: VFS: Error connecting to socket. Aborting operation. [ 859.886435][T17146] CIFS: VFS: cifs_mount failed w/return code = -111 [ 860.023155][T17150] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3125'. [ 860.026107][T17150] netlink: 'syz.1.3125': attribute type 4 has an invalid length. [ 860.179164][ T127] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 860.202778][ T127] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 860.203807][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.203840][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.208126][ T127] usb 5-1: config 0 descriptor?? [ 860.656208][ T127] keytouch 0003:0926:3333.0044: fixing up Keytouch IEC report descriptor [ 860.677219][ T127] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0044/input/input57 [ 860.756365][ T127] keytouch 0003:0926:3333.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 861.208218][ T127] usb 5-1: USB disconnect, device number 81 [ 861.208428][ C0] keytouch 0003:0926:3333.0044: usb_submit_urb(ctrl) failed: -19 [ 861.409023][ T5785] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 861.558430][ T5785] usb 3-1: Using ep0 maxpacket: 8 [ 861.559907][ T5785] usb 3-1: New USB device found: idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 861.562949][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 861.562967][ T5785] usb 3-1: Product: syz [ 861.562977][ T5785] usb 3-1: Manufacturer: syz [ 861.562988][ T5785] usb 3-1: SerialNumber: syz [ 861.566946][ T5785] usb 3-1: config 0 descriptor?? [ 861.617793][ T5785] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 861.822007][T17163] futex_wake_op: syz.4.3130 tries to shift op by 144; fix this program [ 861.823118][ T5785] gspca_sn9c2028: read1 error -32 [ 861.887292][T17161] kvm: pic: single mode not supported [ 861.921754][ T5785] gspca_sn9c2028: read1 error -71 [ 861.923833][ T5785] gspca_sn9c2028: read1 error -71 [ 861.923889][ T5785] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 861.962676][ T5785] usb 3-1: USB disconnect, device number 54 [ 862.740335][ T5785] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 862.891536][ T5785] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 862.892599][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.892620][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.892635][ T5785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 862.892663][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.896076][ T5785] usb 3-1: config 0 descriptor?? [ 863.330307][ T5785] hid_parser_main: 14 callbacks suppressed [ 863.330327][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330349][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330368][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330387][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330407][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330426][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330445][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330464][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330483][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.330501][ T5785] plantronics 0003:047F:FFFF.0045: unknown main item tag 0x0 [ 863.337538][ T5785] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 863.536487][ T5785] usb 3-1: USB disconnect, device number 55 [ 863.666243][T17187] CIFS: Attempting to mount //127.0.0.1/test [ 863.667055][T17187] CIFS: VFS: Error connecting to socket. Aborting operation. [ 863.667089][T17187] CIFS: VFS: cifs_mount failed w/return code = -111 [ 863.793673][T17189] openvswitch: netlink: IPv4 tunnel dst address is zero [ 863.928399][ T9688] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 864.078216][T17195] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3143'. [ 864.089305][ T9688] usb 5-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 864.092206][T17195] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3143'. [ 864.092618][ T9688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.092650][ T9688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.142111][ T9688] usb 5-1: config 0 descriptor?? [ 864.219691][T17197] Invalid source name [ 864.219705][T17197] UBIFS error (pid: 17197): cannot open "./file0", error -22 [ 864.222407][T17197] Invalid source name [ 864.222421][T17197] UBIFS error (pid: 17197): cannot open "./file0", error -22 [ 864.432624][T17204] netlink: 'syz.2.3146': attribute type 4 has an invalid length. [ 864.558187][ T9688] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor [ 867.887005][ T9688] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0046/input/input58 [ 868.902037][ C0] sched: DL replenish lagged too much [ 875.658358][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 919.668354][ T5610] Bluetooth: hci0: command 0x0406 tx timeout [ 927.759588][ T4978] udevd[4978]: worker [11961] /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0046/input/input58 is taking a long time [ 932.379451][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.928227][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 972.935202][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17209/1:b..l.. P17186/1:b..l.. [ 972.946340][ C0] rcu: (detected by 0, t=10502 jiffies, g=319033, q=460 ncpus=1) [ 972.954177][ C0] task:syz.4.3139 state:R running task stack:25576 pid:17186 tgid:17186 ppid:15907 task_flags:0x40044c flags:0x00080002 [ 972.967682][ C0] Call Trace: [ 972.970993][ C0] [ 972.973945][ C0] __schedule+0x17dd/0x5830 [ 972.978508][ C0] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 972.984669][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 972.989459][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 972.994496][ C0] ? __pfx___schedule+0x10/0x10 [ 972.999363][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 973.004740][ C0] preempt_schedule_common+0x7f/0xd0 [ 973.010044][ C0] preempt_schedule_thunk+0x16/0x40 [ 973.015265][ C0] _raw_spin_unlock+0x41/0x50 [ 973.019950][ C0] __zap_vma_range+0x3d29/0x4b50 [ 973.024948][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 973.030247][ C0] ? mas_find+0x6d6/0xcb0 [ 973.034598][ C0] unmap_vmas+0x38b/0x550 [ 973.038939][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 973.043807][ C0] ? mas_next_slot+0xc91/0xd70 [ 973.048599][ C0] exit_mmap+0x290/0xa40 [ 973.052928][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 973.057760][ C0] ? __pfx_exit_aio+0x10/0x10 [ 973.062494][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 973.067715][ C0] __mmput+0x118/0x420 [ 973.071794][ C0] exit_mm+0x18e/0x240 [ 973.075891][ C0] do_exit+0x6a8/0x2360 [ 973.080072][ C0] ? __pfx_do_exit+0x10/0x10 [ 973.084689][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 973.089744][ C0] do_group_exit+0x22d/0x2f0 [ 973.094358][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 973.099581][ C0] get_signal+0x1216/0x12c0 [ 973.104119][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 973.109684][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 973.115886][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 973.121276][ C0] ? rcu_is_watching+0x16/0xb0 [ 973.126066][ C0] do_syscall_64+0x328/0x520 [ 973.130668][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.136740][ C0] ? clear_bhb_loop+0x70/0xc0 [ 973.141427][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.147323][ C0] RIP: 0033:0x7fb56e39f559 [ 973.151738][ C0] RSP: 002b:00007ffdb3548e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 973.160238][ C0] RAX: 0000000000000000 RBX: 00000000000d30fc RCX: 00007fb56e39f559 [ 973.168209][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb56e625fac [ 973.176189][ C0] RBP: 000000000000015e R08: 3fffffffffffffff R09: 0000000000000000 [ 973.184177][ C0] R10: 00007ffdb3548f50 R11: 0000000000000246 R12: 00007ffdb3548f70 [ 973.192154][ C0] R13: 00007fb56e625fac R14: 00000000000d325a R15: 00007ffdb3548f50 [ 973.200146][ C0] [ 973.203165][ C0] task:getty state:R running task stack:23880 pid:17209 tgid:17209 ppid:1 task_flags:0x400000 flags:0x00080000 [ 973.216672][ C0] Call Trace: [ 973.219952][ C0] [ 973.222890][ C0] __schedule+0x17dd/0x5830 [ 973.227412][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 973.233057][ C0] ? kasan_save_track+0x4f/0x80 [ 973.237927][ C0] ? kasan_save_track+0x3e/0x80 [ 973.242782][ C0] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 973.248423][ C0] ? mmap_region+0x1a23/0x2840 [ 973.253190][ C0] ? vm_mmap_pgoff+0x27a/0x520 [ 973.257987][ C0] ? elf_load+0x237/0x6a0 [ 973.262385][ C0] ? do_execveat_common+0x99f/0xbd0 [ 973.267591][ C0] ? __pfx___schedule+0x10/0x10 [ 973.272449][ C0] ? __lock_acquire+0x747/0x2de0 [ 973.277410][ C0] preempt_schedule_irq+0x4b/0x90 [ 973.282469][ C0] irqentry_exit+0x14f/0x9b0 [ 973.287063][ C0] ? trace_irq_disable+0x3b/0x140 [ 973.292212][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 973.298260][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 973.303471][ C0] Code: 8b 05 c8 8d 40 13 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 c7 8d 40 13 83 f8 08 0f 83 60 02 00 00 89 c0 48 0f a3 05 34 e2 19 10 <73> 0d e8 c5 25 09 00 84 c0 0f 84 9e 02 00 00 83 3d 56 11 1a 10 00 [ 973.323102][ C0] RSP: 0018:ffffc900048bed98 EFLAGS: 00000293 [ 973.329193][ C0] RAX: 0000000000000000 RBX: ffffc900048beeb8 RCX: 8000000000000001 [ 973.337167][ C0] RDX: ffffc900048bee01 RSI: ffffffff8178898f RDI: ffffffff9015a4a0 [ 973.345146][ C0] RBP: 1ffffffff24cad01 R08: ffffc900048bf4f8 R09: 0000000000000000 [ 973.353168][ C0] R10: ffffc900048beef8 R11: fffff52000917de1 R12: ffffc900048b8000 [ 973.361153][ C0] R13: ffffffff8178898f R14: ffffffff9015a4a0 R15: ffffc900048bf508 [ 973.369147][ C0] ? unwind_next_frame+0x8f/0x2550 [ 973.374269][ C0] ? unwind_next_frame+0x8f/0x2550 [ 973.379404][ C0] ? deref_stack_reg+0x18e/0x220 [ 973.384353][ C0] ? unwind_next_frame+0x8f/0x2550 [ 973.389467][ C0] unwind_next_frame+0x1baa/0x2550 [ 973.394583][ C0] ? __alloc_frozen_pages_noprof+0x1fe/0x410 [ 973.400590][ C0] ? unwind_next_frame+0x8f/0x2550 [ 973.405721][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 973.411919][ C0] arch_stack_walk+0x11b/0x150 [ 973.416730][ C0] ? alloc_pages_mpol+0x21e/0x390 [ 973.421764][ C0] stack_trace_save+0xa9/0x100 [ 973.426546][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 973.431915][ C0] ? vma_set_page_prot+0xc3/0x100 [ 973.436984][ C0] save_stack+0x122/0x230 [ 973.441319][ C0] ? __pfx_save_stack+0x10/0x10 [ 973.446171][ C0] ? __lock_acquire+0x747/0x2de0 [ 973.451127][ C0] ? post_alloc_hook+0x1f9/0x250 [ 973.456085][ C0] ? get_page_from_freelist+0x220f/0x2280 [ 973.461801][ C0] ? __alloc_frozen_pages_noprof+0x1fe/0x410 [ 973.467799][ C0] __set_page_owner+0x8d/0x4c0 [ 973.472574][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 973.477968][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 973.484076][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 973.489299][ C0] post_alloc_hook+0x1f9/0x250 [ 973.494070][ C0] get_page_from_freelist+0x220f/0x2280 [ 973.499625][ C0] ? lock_acquire+0x115/0x350 [ 973.504335][ C0] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 973.510146][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 973.516479][ C0] ? policy_nodemask+0x31b/0x980 [ 973.521427][ C0] alloc_pages_mpol+0x21e/0x390 [ 973.526291][ C0] alloc_pages_noprof+0xb1/0x2b0 [ 973.531237][ C0] __pud_alloc+0x3a/0x460 [ 973.535596][ C0] handle_mm_fault+0x24c3/0x3540 [ 973.540545][ C0] ? handle_mm_fault+0xee/0x3540 [ 973.545495][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 973.550793][ C0] ? __lock_acquire+0x747/0x2de0 [ 973.555736][ C0] ? lock_mm_and_find_vma+0xa7/0x340 [ 973.561025][ C0] do_user_addr_fault+0x7f6/0x1480 [ 973.566159][ C0] exc_page_fault+0x6a/0xc0 [ 973.570678][ C0] asm_exc_page_fault+0x26/0x30 [ 973.575531][ C0] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 973.581336][ C0] Code: c9 75 f6 e9 42 93 04 00 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 973.600940][ C0] RSP: 0018:ffffc900048bf9c8 EFLAGS: 00050206 [ 973.607005][ C0] RAX: 0000000000000000 RBX: 00007f77aeaa5310 RCX: 00000000000004b4 [ 973.614969][ C0] RDX: 00000000085f6dfd RSI: ffffffff8ea4b2ee RDI: 00007f77aeaa4b4c [ 973.622934][ C0] RBP: dffffc0000000000 R08: ffffffff82266e7f R09: 0000000000000000 [ 973.630921][ C0] R10: dffffc0000000000 R11: ffffed1005b8b7d1 R12: 00007f77aeaa4b4c [ 973.638898][ C0] R13: 0000000000000b4c R14: 00000000000004b4 R15: ffff88803456a0a8 [ 973.646917][ C0] ? __might_fault+0xaf/0x130 [ 973.651614][ C0] elf_load+0x4bc/0x6a0 [ 973.655784][ C0] load_elf_interp+0x4da/0xb50 [ 973.660555][ C0] load_elf_binary+0x1bda/0x28d0 [ 973.665588][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 973.670903][ C0] bprm_execve+0x930/0x1590 [ 973.675415][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 973.680350][ C0] ? __might_fault+0xaf/0x130 [ 973.685031][ C0] do_execveat_common+0x99f/0xbd0 [ 973.690064][ C0] __x64_sys_execve+0x97/0xc0 [ 973.694743][ C0] do_syscall_64+0x166/0x520 [ 973.699346][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.705413][ C0] ? clear_bhb_loop+0x70/0xc0 [ 973.710089][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.715974][ C0] RIP: 0033:0x7f73427ba107 [ 973.720381][ C0] RSP: 002b:00007ffea6f933f8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 973.728789][ C0] RAX: ffffffffffffffda RBX: 00007ffea6f93510 RCX: 00007f73427ba107 [ 973.736762][ C0] RDX: 0000559f97a24480 RSI: 00007ffea6f93470 RDI: 00007ffea6f93510 [ 973.744744][ C0] RBP: 00007ffea6f93460 R08: 0000000000000000 R09: 0000000000000001 [ 973.752711][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffea6f93470 [ 973.760692][ C0] R13: 0000559f97a24480 R14: 0000000000000001 R15: 0000000000000001 [ 973.768676][ C0]