last executing test programs: 8m59.818843236s ago: executing program 2 (id=2108): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000680), 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000001c0)={0xfffffffe, 0x3, 0x3}) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002280), 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000022c0)={0x20, 0x8000000000000004, 0x0, {0x7, 0x4, 0x7}}, 0x20) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x0, r1, 0x1}) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(serpent)\x00'}, 0x58) (async) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000001e875b7f105dd6b9b25eb87d3b578b41bc99117c9b706d0b72ea3edf4a6c1b0c1a78bf0", @ANYRES16=0x0, @ANYBLOB="020024bd7000f8dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x48054) 8m59.647624258s ago: executing program 2 (id=2110): openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x200000, 0x104, 0x1}, 0x18) syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) 8m59.583650665s ago: executing program 2 (id=2112): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x22000081) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x454, 0x3f4, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x1, 0x32, [0xabe7, 0x3, 0x1, 0x7f, 0xe, 0x6, 0x6, 0xfffffffe, 0x15, 0xffffff01, 0x80000001, 0x2, 0x5, 0xa, 0x7, 0x2, 0xffffffff, 0xfffff342, 0x0, 0x9, 0xfffffff9, 0x0, 0x11, 0x2f6a, 0x7f, 0x1ff, 0x2, 0x8, 0x1000, 0x694a, 0x0, 0x9, 0x7, 0x7f, 0x9, 0x9, 0x7, 0x3ff, 0xb, 0x8, 0x6, 0x400, 0x3, 0x9, 0x9, 0x1, 0x10001, 0x800000, 0x4, 0x8eac, 0x9, 0x80000000, 0x8908, 0x2, 0x81, 0x3, 0x7, 0x7f, 0xffff, 0x8, 0xbee, 0x400, 0x9, 0x200], [0x3a, 0x4, 0x7, 0x800, 0x0, 0x1, 0x1, 0x2, 0x400, 0x3, 0x1, 0x6, 0x101, 0x1, 0xbc, 0x96d, 0xf, 0x8, 0x0, 0x6, 0xd0a, 0x4, 0xc4f8, 0x5, 0xda0, 0x1e78, 0xfffffff9, 0xffffffc0, 0x4, 0x1, 0x82a, 0x2, 0x3, 0x4, 0xa917, 0x0, 0x5, 0x1, 0xfffffff9, 0x4, 0x96, 0x6, 0x10, 0x3, 0x3, 0x1, 0x8, 0x3ff, 0x4, 0x8, 0x16, 0x8, 0x6, 0x7, 0x7, 0x4, 0x80, 0x7, 0x1, 0x0, 0x2, 0x7, 0x1, 0x80000001], [0xfffffff9, 0xf3, 0x200, 0x55, 0xfffffff9, 0x8, 0x1e5, 0xfffffff7, 0x4, 0xfffffff1, 0xed04, 0x9, 0x200, 0xc, 0x563, 0x7, 0x2, 0x5, 0x6, 0x8, 0x3, 0x9, 0x3, 0x800, 0x1, 0xfffffff2, 0x7, 0x5, 0x2a8, 0x2, 0xfffffff7, 0x7, 0x6, 0xffffff81, 0x3ff, 0xa175, 0xfffffc01, 0x0, 0xe, 0x7ff, 0xde, 0x800, 0x1, 0x4, 0x1, 0x3, 0x9, 0x5, 0x82, 0x18000, 0x1000, 0x3, 0x9, 0x7ff, 0xfffffffd, 0x9, 0x5, 0x1b7, 0x8, 0xfff, 0xa90c, 0x613, 0xb], [0x0, 0x7, 0x6, 0xed0, 0xfffffff8, 0xb, 0x40, 0x1, 0x5, 0x1, 0x8000, 0x1, 0x200, 0x3, 0xa3, 0x34, 0x3, 0x7, 0x7, 0x78a3, 0xffffffff, 0x7, 0x1d, 0x2, 0x5, 0x2, 0x4c, 0x8, 0x3, 0xffff, 0x8, 0x8, 0x3, 0x9, 0xff, 0x2, 0xfff, 0xffff, 0x7, 0x3, 0x7fff, 0x7, 0x6, 0x0, 0x3, 0x8, 0x3, 0xf, 0xff, 0xc, 0x5, 0x26, 0x7, 0x6, 0x6, 0x8000, 0x7ff, 0x1, 0x5, 0x3, 0x4, 0x2, 0x7ff, 0x4], 0x34, ['/dev/vcs\x00', '/dev/vcs\x00', 'syz0\x00', '/dev/vcs\x00', '@\x9a-\xdf\x00', 'syz0\x00', 'syz0\x00', 'syz1\x00']}, ["", "", "", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x20004800}, 0x24050040) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x12ca1487ca0f451d}, 0x40040) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x14) getrusage(0x1, &(0x7f0000000940)) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc051}, 0x1) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040081}, 0x40040) getrusage(0x1, &(0x7f0000000c00)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000cc0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000d00)={r3}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000d40)) waitid$P_PIDFD(0x3, r0, &(0x7f0000000d80), 0x2, &(0x7f0000000e00)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xfc, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80804}, 0x20046080) fcntl$setstatus(r0, 0x4, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), r2) r5 = syz_open_dev$sndctrl(&(0x7f0000001100), 0xfffffffffffffffe, 0x8000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000001140)=0x1) pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/110, 0x6e}, {&(0x7f0000001240)=""/21, 0x15}, {&(0x7f0000001280)=""/211, 0xd3}], 0x3}, 0x2) socket$inet_udp(0x2, 0x2, 0x0) wait4(r1, &(0x7f0000001400), 0x40000000, &(0x7f0000001440)) r8 = dup3(r7, r6, 0x0) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001540), r7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001600)={'ip6_vti0\x00', &(0x7f0000001580)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x4, 0x8448, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0xff18, 0x7, 0xb65, 0x10}}) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x24, r9, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r10}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 8m59.390362315s ago: executing program 2 (id=2114): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x0, 0xdaf1, 0x31424752, 0x2, 0x1, [{0x730, 0x1}, {0x1, 0x2000000a}, {0x10001, 0x200}, {0x1000c061, 0x5}, {0xfffffff8, 0x801d}, {0x1, 0x4}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x40, 0x0, 0x0, 0x5}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) syz_clone(0x280400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r3, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x20402) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 8m59.252962511s ago: executing program 2 (id=2115): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000300014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x44) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r2 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0xfffffffd, 0x1000, 0xfffffffd, 0xfffffffe}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@private2, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2, 0xfff, 0x8, 0x500, 0x2}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0x800000000001780}, {0x10, 0x0, 0x8}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000000d060500000000000000000000000006050001"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8700}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xac, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3da}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7fffffff}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5da1}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x12}, {0x60}, {0xc, 0x1}, {0x6, 0x1}, {0xb}, {0x6}, {0x18, 0x1}, {0x1, 0x1}, {0x12}, {0x4}, {0xc, 0x1}, {0x9}, {0x12, 0x1}, {0x30, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x24}, {0x9}, {0xc, 0x1}, {0x36}, {0x30}, {0x60}, {0x24, 0x1}, {0x6}, {0xf, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 8m58.450555846s ago: executing program 2 (id=2121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000001600)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/212, 0xd4}, {&(0x7f0000001480)=""/215, 0xd7}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000001580)=""/122, 0x7a}], 0x5, &(0x7f0000001680)=""/241, 0xf1}, 0x7}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f00000018c0)=""/138, 0x8a}], 0x2, &(0x7f0000001980)=""/25, 0x19}, 0x1282}, {{&(0x7f00000019c0)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a40)=""/33, 0x21}, {&(0x7f0000001a80)=""/42, 0x2a}], 0x2, &(0x7f0000001b00)=""/252, 0xfc}, 0x800}, {{&(0x7f0000001c00)=@tipc=@name, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/44, 0x2c}, {&(0x7f0000002cc0)=""/179, 0xb3}, {&(0x7f0000002d80)=""/187, 0xbb}], 0x4, &(0x7f0000002e80)=""/37, 0x25}, 0xffff4de4}], 0x4, 0x2, &(0x7f0000002fc0)={0x0, 0x3938700}) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000080)=0x16) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r6, 0x57192fb92fb32ab9, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x101}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x63, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40008000) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x9, 0xe, [@measure_req={0x26, 0x3, {0xf9, 0x0, 0x7d}}]}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x401, 0x0, 0x0, {0xe, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x20, 0xd, 0x1, 0x0, "e2f0190e58aa155b3049a7b57921cf4c0ee52e8817e34409a592ccd3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}}, 0x0) alarm(0x8) 8m58.003830501s ago: executing program 32 (id=2121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000001600)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/212, 0xd4}, {&(0x7f0000001480)=""/215, 0xd7}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000001580)=""/122, 0x7a}], 0x5, &(0x7f0000001680)=""/241, 0xf1}, 0x7}, {{&(0x7f0000001780)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/189, 0xbd}, {&(0x7f00000018c0)=""/138, 0x8a}], 0x2, &(0x7f0000001980)=""/25, 0x19}, 0x1282}, {{&(0x7f00000019c0)=@alg, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a40)=""/33, 0x21}, {&(0x7f0000001a80)=""/42, 0x2a}], 0x2, &(0x7f0000001b00)=""/252, 0xfc}, 0x800}, {{&(0x7f0000001c00)=@tipc=@name, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/44, 0x2c}, {&(0x7f0000002cc0)=""/179, 0xb3}, {&(0x7f0000002d80)=""/187, 0xbb}], 0x4, &(0x7f0000002e80)=""/37, 0x25}, 0xffff4de4}], 0x4, 0x2, &(0x7f0000002fc0)={0x0, 0x3938700}) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000080)=0x16) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async, rerun: 32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r6, 0x57192fb92fb32ab9, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x101}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0x63, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40008000) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x9, 0xe, [@measure_req={0x26, 0x3, {0xf9, 0x0, 0x7d}}]}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x401, 0x0, 0x0, {0xe, 0x0, 0x3}, [@NFTA_SET_USERDATA={0x20, 0xd, 0x1, 0x0, "e2f0190e58aa155b3049a7b57921cf4c0ee52e8817e34409a592ccd3"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}}, 0x0) alarm(0x8) 4m44.274045659s ago: executing program 0 (id=3876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m44.266732219s ago: executing program 0 (id=3880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100)={r6, 0xfffffff9, 0x4, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x6, 0xd97}, &(0x7f0000000080)=0x8) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000009c0)=[@wr_drn={0x68, 0x0, {0x3, 0x4dc}}, @out_dx={0x6a, 0x0, {0x73e5, 0x7, 0x1}}, @nested_create_vm={0x12d, 0x0, 0x1}, @wr_drn={0x68, 0x0, {0x0, 0x1a30014b}}, @nested_load_code={0x12e, 0x0, {0x0, "c4c3f917b8e0e7aa9700c4c2f941010f21cdc74424003b000000c74424027ad43b3fff1c24b9c30b00000f32660fc7b33338000036450f0666b875008ec82e0a3fb988030000b828b20000ba000000000f30"}}, @nested_amd_clgi, @set_irq_handler={0xc8, 0x0, {0x6a}}, @nested_amd_set_intercept={0x181, 0x0, {0x0, 0x7ff, 0x4, 0x1}}, @code={0xa, 0x0, {"0f01c50f01cff30fc775346565410f09440f2202c7442400d7000000c74424020b000000ff1c24c4c12515949b1100c0fe440f01cbdbc002d5"}}, @nested_amd_clgi, @set_irq_handler={0xc8, 0x0, {0x8f, 0x1}}, @out_dx={0x6a, 0x0, {0xc2f9, 0x5, 0x3}}, @in_dx={0x69, 0x0, {0x3f98}}, @nested_vmlaunch={0x12f, 0x0, 0x2}, @nested_amd_vmsave={0x183, 0x0, 0x2}, @nested_amd_vmsave={0x183, 0x0, 0x2}, @code={0xa, 0x0, {"420f97b900000000b8010000000f01d9c74424004d000000c744240200480000ff1c2442f466baa000ecc4c195d0570966b81f018ed83e65420f0133440f350f01d1"}}, @nested_amd_set_intercept={0x181, 0x0, {0x3, 0x400}}, @nested_amd_vmsave={0x183, 0x0, 0x3}, @nested_vmresume={0x130, 0x0, 0x3}, @nested_amd_invlpga={0x17d, 0x0, {0xa000, 0x722a}}], 0x77}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a9000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x44, r8, 0x1, 0x0, 0x1, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{}, {0xa}, @broadcast, @device_b, @random="f3dbe921d19d", {0x6, 0xfff}}, 0x0, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x1]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m44.264321293s ago: executing program 0 (id=3883): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x32314142, 0x2, 0x6, 0x2, 0x5, 0xa6e, 0x0, 0x4, 0x0, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000040)={@loopback, r5}, 0x14) fcntl$notify(r3, 0x402, 0x80000001) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x8, r6, 0x0, 0x9, 0x27d08d, 0x3, &(0x7f00000001c0)="9bb400", 0x10001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000300)="0094", 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffff9, 0xffffffffffffffff}) mlockall(0x7) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(0xffffffffffffffff, 0xc0186443, &(0x7f0000003500)={0x0, 0x0, {0x30, 0xa, &(0x7f0000003300)=[{0x20000000, 0x0, 0x1, 0x7, 0x5, {0x10, 0x4, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0xff, 0x0, 0x8}, {0x1, 0x0, 0x7fffffff}, {0x1, 0x0, 0xffffffffffffff28}]}}, {0x10000000, 0x0, 0xa01, 0x0, 0x7, {0x10, 0x8, &(0x7f00000006c0)=[{0x1, 0x0, 0x2}, {0x1, 0x0, 0x6}, {0xff, 0x0, 0x200}, {0x80000000, 0x0, 0x7}, {0xff, 0x0, 0x91f}, {0x1, 0x0, 0x5}, {0x80000000}, {0x1, 0x0, 0x8000000000000001}]}}, {0x2, 0x0, 0x8000000000000001, 0x7, 0x5, {0x10, 0x2, &(0x7f0000000800)=[{0x1, 0x0, 0xf11}, {0x80000000, 0x0, 0xd}]}}, {0x0, 0x0, 0xffffffffffffff55, 0x9, 0x3b1, {0x10, 0x3, &(0x7f00000008c0)=[{0x1, 0x0, 0x8}, {0xff, 0x0, 0x3}, {0x80000000, 0x0, 0x8}]}}, {0x2, 0x0, 0x8, 0xffffffffffffffff, 0x3, {0x10, 0x3, &(0x7f0000000980)=[{0x0, 0x0, 0x10}, {0x1, 0x0, 0x7f}, {0xff, 0x0, 0x80000001}]}}, {0x0, 0x0, 0x200, 0x6, 0x7, {0x10, 0x9, &(0x7f0000000b40)=[{0x1}, {0xff, 0x0, 0x22c}, {0x80000000, 0x0, 0x9}, {}, {0x80000000, 0x0, 0xf2}, {0x80000000, 0x0, 0x2}, {0x1, 0x0, 0x5}, {0x80000000, 0x0, 0x6}, {0x0, 0x0, 0xfffffffffffffffb}]}}, {0xf0000000, 0x0, 0x4, 0x2687, 0x4, {0x10, 0x9, &(0x7f0000000dc0)=[{0x80000000, 0x0, 0x80000000}, {0x1, 0x0, 0x863}, {0x80000000}, {0x80000000, 0x0, 0x81}, {0xff, 0x0, 0xe9}, {0xff, 0x0, 0x5}, {0x0, 0x0, 0x3}, {0xff, 0x0, 0x1bf}, {0x1, 0x0, 0x2}]}}, {0xf0000000, 0x0, 0x6, 0x5, 0x9, {0x10, 0x5, &(0x7f0000000f40)=[{0x70924c19c7640d}, {0x80000000, 0x0, 0x1000000}, {0xff, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x1, 0x0, 0x4}]}}, {0xf0000000, 0x0, 0xfffffffffffffff3, 0x9, 0x2, {0x10, 0x3, &(0x7f0000001080)=[{0xff}, {0xff, 0x0, 0x6}, {0xff, 0x0, 0xffffffffffff7003}]}}, {0x2, 0x0, 0x7f, 0x5, 0x7f1f, {0x10, 0x8, &(0x7f0000001240)=[{0x80000000, 0x0, 0x800}, {0xff, 0x0, 0x2}, {0x80000000, 0x0, 0x85}, {0x1, 0x0, 0x7}, {0x80000000, 0x0, 0x8}, {0x80000000, 0x0, 0x5}, {0x1, 0x0, 0x8}, {0xff, 0x0, 0x4}]}}]}}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r9, 0x0, 0x58) read$FUSE(r8, &(0x7f00000012c0)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 4m43.267382039s ago: executing program 0 (id=3896): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000540)={0x0, &(0x7f00000004c0)=""/77}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4, 0x2, 0x9, 0x101}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e24, 0x3, @remote, 0x5}}, 0x1, 0x2, 0x9, 0xfabf, 0xa0, 0xe, 0x4}, 0x9c) lremovexattr(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000200)=@known='com.apple.FinderInfo\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x2d0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa6}}, 0x101, 0x1}, 0x90) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/3, 0x3, 0x1, &(0x7f00000002c0)=""/196, 0xc4}, &(0x7f0000000100)=0x40) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000480)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xac, 0x9, 0x1}, 0x9c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) dup(r0) (async) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000540)={0x0, &(0x7f00000004c0)=""/77}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4, 0x2, 0x9, 0x101}, &(0x7f0000000040)=0x10) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r4, @in6={{0xa, 0x4e24, 0x3, @remote, 0x5}}, 0x1, 0x2, 0x9, 0xfabf, 0xa0, 0xe, 0x4}, 0x9c) (async) lremovexattr(&(0x7f0000000240)='./cgroup\x00', &(0x7f0000000200)=@known='com.apple.FinderInfo\x00') (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x2d0}, &(0x7f00000001c0)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa6}}, 0x101, 0x1}, 0x90) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/3, 0x3, 0x1, &(0x7f00000002c0)=""/196, 0xc4}, &(0x7f0000000100)=0x40) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000480)) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0xffffffff, @loopback, 0x5b}}, 0x105, 0x6, 0xf06, 0x1, 0xac, 0x9, 0x1}, 0x9c) (async) 4m42.908280562s ago: executing program 0 (id=3897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = fsmount(r1, 0x0, 0x1) (rerun: 64) fchdir(r2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x44) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x6c, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) (async, rerun: 64) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) (rerun: 64) ioctl$int_in(r5, 0x5421, &(0x7f0000000f00)=0x3) (async) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180), 0x4) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000001040)={'veth0_to_bond\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) 4m42.881571378s ago: executing program 0 (id=3898): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x1, "95"}, &(0x7f0000000340)=0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x0, &(0x7f0000000380)}, &(0x7f0000000480)=0x10) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0xdfc83b4a9e11b6d, 'freezer'}]}, 0x9) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x8802, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_user}]}}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0x8, 0x8, 0x4}) 4m26.779776208s ago: executing program 33 (id=3898): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x1, "95"}, &(0x7f0000000340)=0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={r4, 0x0, &(0x7f0000000380)}, &(0x7f0000000480)=0x10) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0xdfc83b4a9e11b6d, 'freezer'}]}, 0x9) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x8802, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_user}]}}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000001c0)={0x8, 0x8, 0x4}) 3m57.323779739s ago: executing program 3 (id=4284): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty, {[@generic={0x0, 0x2}]}}}}}) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x40, 0x21, 0x8, {0x8, 0x30, "da6178cde85c"}}, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r1, 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty, {[@generic={0x0, 0x2}]}}}}}) (async) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)={0x40, 0x21, 0x8, {0x8, 0x30, "da6178cde85c"}}, 0x0}, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) 3m55.606591809s ago: executing program 3 (id=4294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0xa, 0x2, {0x2, 0xa}}, 0x0}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYRES8=r0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x800000000000040, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40140921, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="001b0002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000011400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010180"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 3m53.201902571s ago: executing program 3 (id=4303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x800}, @val={0x1, 0x1, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x11, 0x0, @private=0xa010101, @loopback}, "18e0e9d4f97b1e5d"}}}, 0x46) close(r3) 3m52.218445735s ago: executing program 3 (id=4306): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x7, 0x70bd2b, 0x25dfdc01, {{0x8}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') (async) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="181e00000500010324bd7002ffdbdd25010000000400ae80599f250114b6c519097f152f9bcd2e"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) mount(&(0x7f0000000440)=@rnullb, &(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000004c0)='virtiofs\x00', 0x830016, 0x0) (async) mount(&(0x7f0000000440)=@rnullb, &(0x7f0000000480)='./file0/../file0\x00', &(0x7f00000004c0)='virtiofs\x00', 0x830016, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000640)=@ethtool_coalesce={0xe, 0x1000, 0x8000, 0x80000000, 0x5, 0x2, 0x8, 0x2, 0xa, 0x4, 0xffffff12, 0x0, 0x0, 0x1, 0x9, 0x3, 0x3, 0x2, 0x4, 0x2, 0x400, 0x7, 0x3}}) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000640)=@ethtool_coalesce={0xe, 0x1000, 0x8000, 0x80000000, 0x5, 0x2, 0x8, 0x2, 0xa, 0x4, 0xffffff12, 0x0, 0x0, 0x1, 0x9, 0x3, 0x3, 0x2, 0x4, 0x2, 0x400, 0x7, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="0b041000e0ff02000200477baa96a13bb100000000008864110071225aac2191", 0x20, 0x4008000, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x77, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6tnl0\x00', &(0x7f0000001d00)={'ip6gre0\x00', 0x0, 0x29, 0xa0, 0xd8, 0x4, 0x3, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x10, 0x9, 0x5}}) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001dc0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001e80)={'ip6_vti0\x00', &(0x7f0000001e00)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x2, 0xff, 0x40, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8, 0x4, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001ec0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001f00)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001f00)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000028c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002880)={&(0x7f0000001f40)={0x924, 0x0, 0x501, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf47}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x5, 0x7, 0x5}, {0x8, 0xd7, 0xc0, 0x7}, {0x7, 0x6, 0x3, 0x9}, {0x0, 0x4, 0x3, 0x3ff}, {0x2, 0x20, 0x7, 0x401}, {0x9, 0x10, 0x7, 0x9}, {0x2, 0x58, 0x7, 0x80000001}, {0xd, 0x94, 0x0, 0x80000000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x48d1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000080)=""/124, 0x7c}], 0x3}, 0x2000) (async) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000080)=""/124, 0x7c}], 0x3}, 0x2000) 3m51.217264903s ago: executing program 3 (id=4311): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3m50.831918743s ago: executing program 3 (id=4322): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xb8102, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6ee80, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) io_setup(0x100, &(0x7f00000004c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000200)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r1, 0x0, 0x0, 0x3, 0x0, 0x10}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x4, r1, 0x0, 0x0, 0x3e3, 0x0, 0x2}]) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@loopback, @empty}, 0x8) 3m50.297466872s ago: executing program 34 (id=4322): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xb8102, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6ee80, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) io_setup(0x100, &(0x7f00000004c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000200)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r1, 0x0, 0x0, 0x3, 0x0, 0x10}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x4, r1, 0x0, 0x0, 0x3e3, 0x0, 0x2}]) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@loopback, @empty}, 0x8) 5.658246073s ago: executing program 4 (id=5494): r0 = socket$inet(0x2, 0x3, 0x33) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) (rerun: 32) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000000)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c514000300ad81366772653000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) (async) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 5.564256252s ago: executing program 4 (id=5495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20008094}, 0x48854) 5.540066681s ago: executing program 4 (id=5497): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x1) write$qrtrtun(r0, 0x0, 0xffffff9a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r4, &(0x7f0000001980)) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRES16=r0, @ANYBLOB="9575d09d14018aacee8035d3d9e1c88ae10ae2ddd742dc7f940918b1855f3909e6d8df4d3ed11df22a00"/55, @ANYRES64=r1, @ANYRES8=r4], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xd01c4813, &(0x7f00000000c0)={0x3, 0xffffffff, 0xfffffffe, 0x1, 0xea40, 0x2}) 4.87477279s ago: executing program 6 (id=5507): syz_usb_connect$uac1(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x6, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1b}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x6, 0x6, 0x4}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x3, 0x8, "dc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x81, 0x5, {0x7, 0x25, 0x1, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x93, 0x12, 0x40, {0x7, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000740)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2715, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "cf2bf386e13c8b5d", "44fba076453ceca698ea87032fb95738d8d654852fccd1d61dd9d7601357eaca", "c6a66986", "51a6204de67e17f8"}, 0x38) 4.21598807s ago: executing program 6 (id=5513): open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000040)={&(0x7f00000005c0)="706de969419119a5bf751eeff31fcfa599f457ce1b5ff77aeef28516739372f078af6c1ba2ab0a07805a74933969babb670e985cfbc7eb5e5a6f28810f957178b251ac74038f88ccf8bb70523b46fac1c64170fe8154c4a16b0162660bfff9138391d0fdef36e6fc14d92fcf976f3134be6ee840774075637fcf481469ee9f0e", 0x80}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x2208440, &(0x7f0000000300)='trans=rdma,') open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) sendmsg$802154_dgram(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000040)={&(0x7f00000005c0)="706de969419119a5bf751eeff31fcfa599f457ce1b5ff77aeef28516739372f078af6c1ba2ab0a07805a74933969babb670e985cfbc7eb5e5a6f28810f957178b251ac74038f88ccf8bb70523b46fac1c64170fe8154c4a16b0162660bfff9138391d0fdef36e6fc14d92fcf976f3134be6ee840774075637fcf481469ee9f0e", 0x80}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) (async) mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x2208440, &(0x7f0000000300)='trans=rdma,') (async) 4.210183949s ago: executing program 6 (id=5514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000008000a40000000000900020073797a310000000009000100"], 0x8c}, 0x1, 0x0, 0x0, 0x20008094}, 0x48854) 4.145306726s ago: executing program 6 (id=5515): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40480, 0x0) setitimer(0x0, &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, 0x0) r3 = signalfd(r0, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r3) close(0xffffffffffffffff) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) r6 = gettid() fcntl$setown(r3, 0x8, r6) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000000c0)={[0x8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') lseek(r2, 0x0, 0x1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r8 = syz_open_dev$media(&(0x7f0000000240), 0x4000000, 0x2000) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0xfffffffffffffffe}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="9d9a", 0x2}], 0x1}, 0x4004) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="02617e9a", @ANYRES16=r10, @ANYBLOB="0100000046a50000000001000080"], 0x18}}, 0x0) 3.135889431s ago: executing program 6 (id=5521): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000012c0)={&(0x7f0000000200)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xda8a}, {&(0x7f0000000340)=""/138, 0x8a}, &(0x7f0000000300)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000001c0)=""/14, 0xe}], 0x2, 0x11, 0xfffffffffffffffd}}], 0x48}, 0x0) syz_usb_connect$uac1(0x5, 0x94, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x6, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1b}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x6, 0x6, 0x4}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x3, 0x8, "dc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x9, 0x81}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x81, 0x5, {0x7, 0x25, 0x1, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x93, 0x12, 0x40, {0x7, 0x25, 0x1, 0x8, 0x8}}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5b, 0x0}]}) 2.444518227s ago: executing program 6 (id=5528): request_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0) inotify_init() ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000440)="1dd2f383c0a91c65311e279f7ddad9", 0xffffff09, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000140)=0x4, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0xfffffffffffffffe, 0x80200) write$qrtrtun(r3, &(0x7f0000000240)="5afd468b99da7102989f9f025a0938f2fdb77577837b936d29d27e0b08bfdfad189417df7500c93b2a385f5e5827aae2ca3a774f1af09ef5ee546c607a1945e7f6808a52d068bf18d198f7f04b71683031d62e28b88af4ef786b2f27ea4a607fc154f7c5f3efafb338eafe8778110c14b62710f16f4fb1ac7dd307df9c37c2c829ec70c8860cce6a88767510c4f8b3f6203e9abb67f764a2077a159bfe29cf3d791ca4475e9bcf0fbfae2af6265b21e14d73e2c4fe365e175f2601d5216898fd0d2a30da1133b150b26fc55126bae2d6c86893cc0e3fc755362ac988c60e7570da7f433790579dd97e0a31", 0xeb) add_key$user(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000b00)='Y', 0x1, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x1) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@bcast, @bcast, @remote, @bcast, @default, @default, @netrom, @null]}, &(0x7f00000000c0)=0x48) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r5 = syz_io_uring_setup(0x123d, &(0x7f0000000340)={0x0, 0xe537, 0x3000, 0x10001, 0x1ed}, &(0x7f0000000000), &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0xab) write$P9_RSTAT(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="470000007d02000000400033640d000000080000000002000000000000000000b534030000008b6a8b0057fa000000000000050066642f340000000300402c5c050066642f3400"], 0x47) vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000001040)='_', 0x1}], 0x1, 0x8) poll(&(0x7f0000000280)=[{r5, 0x1400}], 0x1, 0x6) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) r9 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000400), 0x6, 0x400001) 2.223032221s ago: executing program 4 (id=5529): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x248f00, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil}) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x8}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000001e00)=""/4096, 0x1000}], 0x1, 0x4b}}], 0x48, 0x8000}, 0x0) 2.144601987s ago: executing program 4 (id=5530): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0xa, 0x3, 0x3a) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) 2.109202811s ago: executing program 4 (id=5532): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) fsetxattr$security_capability(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000296fdcf084f17125210400102030109022f000106e370130904dc02000e010001052406"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x21, 0x76, {0x76, 0x23, "c90ad7dd0f3517f84101f98bce5841a9a6b9bb50fef8e13a67338698be9992644c4aa9b3619cec5faf908a3e4b2f232f933d771ec593d76bffea63469b8bf34c727e9e6efacbe2dce274094da8f8b508918c4c18ccbd9ebe3c6e0a40ff3913dc53e4e0203d37a70e997c5f2589d398205c6be4f9"}}, &(0x7f00000018c0)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "513a18e10efe73395b1877ffd32688a6b6162bbaa3fef2e91bc69c0a74c22ef1f60d58ca38425b9a1735295c379a60fb38444d5d4d0e75d8684a36f90aa969f177b48cfee8145fa5b578b6008b58a12675ff3f3687452f5fa15c7ad2f78a5c6abe8383926b4a7742e9e57b3bbd5ff214626976bb9057aa3738547eeee21a75e7135edaed0071367e43b4c0f06c2fd406ce4156142ff5210a6789b7eb604126fc650c9830d54fe8f01dc9e8d4b3081c84661bbfaeb1d93d1e502165634232769fe12f0da2f8474cb66388534ddc8921796bea77546ef28b1223dd79193669d6cf98bd"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x0, 0x6, 0x88, "899c0bd58cc63164139cae086df1518d043c107de0bf2f15f5cc192ee1672a2ceba6a0a16c445f79618c2aa449f18792a7f1071ea4472060ddf2c0174adb79d0f1404510e68c66cf04894242a59117891f4afc1acdc45eb66eae267625c995b081bf20f55ce7e603c0a000115e9a9e0616078f912f5fec3b5d9ae8977ed2f74c5e6eb09e1c4cdac8"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000001c0)={0x0, 0x8, 0xfffffffffffffef3, 0x81}, &(0x7f0000000340)={0x20, 0x81, 0x2, "7aa0"}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "b7"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "bdd7b5"}, &(0x7f0000001880)={0x20, 0x84, 0x4, "def98c00"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "61d6ee"}}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r7, 0x560f, &(0x7f0000000000)) ioctl$KVM_CAP_HYPERV_VP_INDEX(r5, 0x4068aea3, &(0x7f0000001800)) write$tun(r3, &(0x7f0000000640)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x401, 0x0, 0xfffe}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x1148, 0x11, 0xff, @local, @local, {[@hopopts={0x2b, 0x2b, '\x00', [@jumbo={0xc2, 0x4, 0xd7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x7, 0xb4, "a06d659bc27456e6cf3d07e3fb4d74dc5e95735f166d2c3571c92c47e13c72dfe75c5cc0147024071daadfb6e60c70f3fb2acfb3fff586961c33b8856981a0b2aa4eecf210f34a3b0c469ca68606c573c5f798237f172bb4548235179142b06beb0704310814a3c9cbfb26dfe6b7e0ac0a48899661fe01c504a6d7413b1ba0d9fe1d7c0cbc75b8ced311c81a114879a7421ec6c50c234331778971fd2ad23bd32b22305eef476a494481b41a9e7b2186d5574f93"}, @calipso={0x7, 0x50, {0x2cdfc1ce7b9fbf6a, 0x12, 0x5, 0xfbe2, [0xf665, 0xa, 0x2, 0x8000000000000000, 0x7, 0x7, 0x2f, 0x8, 0xff]}}, @enc_lim={0x4, 0x1, 0xb9}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0xcb6, [0x5, 0x7f9, 0x7ff, 0x0, 0xd]}}, @hao={0xc9, 0x10, @private1}]}, @routing={0x62, 0x2, 0x2, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x9, 0x38, 0x10, [@mcast1]}, @dstopts={0x5c, 0x1c1, '\x00', [@pad1, @padn, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x5, 0xdff, "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"}]}, @hopopts={0x21, 0x15, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x1, 0x3, [0x6f, 0x6, 0x8, 0x6]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x26, 0x29c, [0x4, 0xe0ed, 0x2, 0x8c7, 0x8, 0x8, 0x93]}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x15}}, @hao={0xc9, 0x10, @private1}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], "edac99e59c7b644049a480fdc35c6daf244fe284f5df0717f3ffe98acae00df1e96f3eedd0018278768074f81679bd72aa936258286a1517a3757fd533420dae17fee6db3adfcfff7b53f8ba888b63b08b5c0c6116515a2f87ff85e3fafe36bfcbfd499a2630e3ae2b91af23e8cfdbf50ab98b99d6c0e5e376e34ae8a7b10223c3ca60857af1bea34bb950e912fe655f2965a18b6ab993592a8c6a75411b550d6f1e1975d1f5a80fb5205579cd5d29a17d839e0542d38e96ced4beb9a03a80e133a3fa08fdf52febf93564594c92db5036049c66b78e3fde93d8491c377d237b"}}}}, 0x117e) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x9, 0x4000, 0x0, 0x0}], 0x1}) 1.707819575s ago: executing program 1 (id=5537): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, &(0x7f0000000100)={0x4, 0xffffffff, 0xfffffffe, 0x100001, 0x4000004, 0x2}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, {0x306, @broadcast}, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0_to_hsr\x00'}) ioctl$TIOCNXCL(r1, 0x540d) 1.676638091s ago: executing program 5 (id=5538): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) 1.602954812s ago: executing program 5 (id=5539): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)=ANY=[@ANYBLOB="20000000110001000000000002969a0ca400000007"], 0x20}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x5c, 0x6c, 0x94, 0x20, 0x12d1, 0x1407, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf6, 0x6, 0xc0, 0x1, "", [{{0x9, 0x4, 0xa8, 0x2, 0x0, 0x96, 0x59, 0x3, 0x1}}, {{0x9, 0x4, 0x83, 0xf, 0x0, 0xff, 0x5d, 0x1, 0x2}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 916.013953ms ago: executing program 1 (id=5540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000080)={{@_ha_fsid={[0x1, 0x4]}, {0x7, 0x7f, 0x715b, 0x4}}, {{[0x6, 0x2, 0x2, 0xea88]}, 0x0, 0x30a0b9b26448ddea, 0x211, 0x0, &(0x7f0000000240)=[{{@align=0x6, {0x7, 0x7, 0x8, 0xffffffffffffff81}}, 0xda, 0x0, '\x00'}, {{@_ha_fsid={[0x7, 0x1]}, {0x673, 0x6bec, 0xff, 0x4}}, 0x1000, 0x0, '!,@V\x00'}, {{@_ha_fsid={[0x8, 0x1]}, {0x1000, 0x3ff, 0xfffffff5, 0x80000001}}, 0x6, 0x0, 'syz'}, {{@_ha_fsid={[0x6bb, 0x8]}, {0x4, 0x7, 0xb4, 0x9}}, 0x8, 0x0, '\xf1{}:\'%\',-\'-/\x00'}, {{@align=0x5, {0x9, 0x7fff, 0x0, 0x16}}, 0x0, 0x0, '\x00'}, {{@align=0xfffffffffffffffb, {0x1, 0xfe7, 0xe6}}, 0xffff, 0x0, '\x00'}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x2}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001"], 0x18, 0x40001}}], 0x1, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0x13, 0x1, 0x81, 0x0, 0x0, 0x20}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x3, 0xe, 0x0, 0x5, 0xfc}, {0x41000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0xff, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x58000, 0x100000, 0x0, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x420, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) 915.218979ms ago: executing program 5 (id=5541): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000), 0x12) setsockopt(r0, 0x10000, 0x7fff, &(0x7f0000000040)="8847237c4a5d1f6c45a6f163beccda7322012787456edb", 0x17) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3ff, 0x4000) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x6}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000140)={0x81}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x8e}, 0x1) (async) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) (async) r3 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x2, 0x8400) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000240)={0x1, 'netdevsim0\x00', {}, 0xaef}) (async) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000280)={'pimreg0\x00', @ifru_ivalue}) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x37, "ecb4ce53201fa7712adbf5f69fc5f6fae87f6956a3bdb83f1c89bd0a30802830f3ac92331f436e27145facc61be114ec6586661c9a3acb"}, &(0x7f0000000300)=0x3f) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r4, 0xc}, 0x8) (async) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0x7ff, 0xfff, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000400)={r6}) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000440)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0xf3, 0xd9b}, 0x90) r7 = signalfd(r0, &(0x7f0000000500)={[0x4]}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000540)={r4, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x2, 0x3, 0x5, 0x0, 0x18, 0x1000, 0x10}, &(0x7f0000000600)=0x9c) (async) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040090}, 0x8004) (async) fstatfs(r7, &(0x7f0000000740)=""/18) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000780)={0x8}, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000007c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000840)={r8, 0x0, 0xffffffffffffffff, 0xffffffff}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000880)=0x8) (async) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000008c0)="fc80c909b0b73dd41062c4f18f85ecb455833b785de3361267f3923cfb44668845516d55ba7db6dc348bceefe3e86acabc3b9b2560b4610d02e2c1c1802bf2d4492a9696baf28c1738ec251c8cb416d6f82f3d049156665272d3d10e75186065d9c98b05037cdba51ee20c197e34ff0a2f1e1086d143bfb640de9e2a15e9a2e997") (async) r9 = socket$pptp(0x18, 0x1, 0x2) close_range(r9, r2, 0x0) 820.17973ms ago: executing program 1 (id=5542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a090400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031"], 0x8c}, 0x1, 0x0, 0x0, 0x20008094}, 0x48854) 704.584113ms ago: executing program 5 (id=5543): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xffffffffffffffff}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000001180)={'erspan0\x00', {0x2, 0x4e22, @rand_addr=0x64010102}}) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x40, 0x17, 0x4, 0x4, 0xecff, 0x5ff2, 0x0}) userfaultfd(0x800) 671.661067ms ago: executing program 1 (id=5544): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) (async) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0x7e422000) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000400)) (async) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000400)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) recvmsg(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/239, 0xef}, {&(0x7f0000002980)=""/233, 0xe9}, {&(0x7f0000002a80)=""/165, 0xa5}], 0x4}, 0xe3}, {{0x0, 0x0, 0x0}, 0xfffffff9}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x10100, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xa, 0x6, 0x57, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x20, 0x7, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xa, 0x6, 0x57, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x20, 0x7, 0x10}}) socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x128, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x200040c4}, 0x4000010) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r13, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff51ae00"}) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES8=r14, @ANYRESOCT=r14], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES8=r14, @ANYRESOCT=r14], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 407.905114ms ago: executing program 1 (id=5545): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)) 398.040039ms ago: executing program 1 (id=5546): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x6, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=ANY=[], 0x1c}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="4f68440892cae9c7845bd78fe7122cacf8f0564af02cc6", 0x17}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @loopback, 0x7}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="2ecc033aac0abdb4557455497b0006e76a4d6173c31ad1f7772197a87c7e08183185e1acfbf0c0eaf0e0d8744fb7cce4dc1b65b19060e61f1d6d5d85ece8678a039dd91172358f507d828ed45ef50880c024d4557e0764e0ae88d745d4", 0x5d}, {&(0x7f0000000180)="b5ff9870716f2a1b7eb1276c0a03fb1afc0bf44e128aa088e74dd78a7646194878e016ad4ee86931115e163ea1fa850a3aaa8213f28a692bacfd543c43983122823321ea18d042bfa4acda2f96", 0x4d}], 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000002900000032000000fc0100"/32, @ANYRES32=r3, @ANYBLOB="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"], 0x40}}], 0x1, 0x4) syz_usb_connect$uac1(0x5, 0x94, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000300000020351214804000010203010902820003010620000904000000010100000a240106001b0002010209240306040306060408240803030008dc09040106000102000009040101010102000008090501091000028105072501040300000904020000010200000904020101010200000924020204000500000905820900029312400725010808000000000000000000"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 343.817702ms ago: executing program 5 (id=5547): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000040)) (fail_nth: 2) 0s ago: executing program 5 (id=5548): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYRESOCT=r2]) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES8=r1, @ANYRESHEX=r7], 0x15) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r8, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582003b9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) kernel console output (not intermixed with test programs): rcopy, interval 1, probability 0, space 0, times 0 [ 827.898715][T22310] CPU: 0 UID: 0 PID: 22310 Comm: syz.1.5013 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.898750][T22310] Tainted: [L]=SOFTLOCKUP [ 827.898758][T22310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.898771][T22310] Call Trace: [ 827.898779][T22310] [ 827.898789][T22310] dump_stack_lvl+0xe8/0x150 [ 827.898827][T22310] should_fail_ex+0x412/0x560 [ 827.898854][T22310] _copy_to_user+0x31/0xb0 [ 827.898882][T22310] simple_read_from_buffer+0xe1/0x170 [ 827.898914][T22310] proc_fail_nth_read+0x1bb/0x230 [ 827.898945][T22310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.898977][T22310] ? rw_verify_area+0x2a6/0x4d0 [ 827.899006][T22310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.899034][T22310] vfs_read+0x20c/0xa70 [ 827.899074][T22310] ? __pfx_vfs_read+0x10/0x10 [ 827.899108][T22310] ? kmem_cache_free+0x189/0x640 [ 827.899128][T22310] ? fd_install+0x94/0x3d0 [ 827.899151][T22310] ? do_sys_openat2+0x14c/0x200 [ 827.899192][T22310] ksys_read+0x150/0x270 [ 827.899212][T22310] ? __pfx_ksys_read+0x10/0x10 [ 827.899244][T22310] do_syscall_64+0x14d/0xf80 [ 827.899262][T22310] ? trace_irq_disable+0x3b/0x150 [ 827.899286][T22310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.899313][T22310] ? clear_bhb_loop+0x40/0x90 [ 827.899340][T22310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.899361][T22310] RIP: 0033:0x7fa04655cfce [ 827.899382][T22310] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 827.899400][T22310] RSP: 002b:00007fa04746ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 827.899423][T22310] RAX: ffffffffffffffda RBX: 00007fa0474706c0 RCX: 00007fa04655cfce [ 827.899439][T22310] RDX: 000000000000000f RSI: 00007fa0474700a0 RDI: 0000000000000004 [ 827.899461][T22310] RBP: 00007fa047470090 R08: 0000000000000000 R09: 0000000000000000 [ 827.899474][T22310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.899487][T22310] R13: 00007fa046816038 R14: 00007fa046815fa0 R15: 00007ffe5b31e528 [ 827.899520][T22310] [ 828.154018][T22312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.163299][T22312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.175827][T12909] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 828.337724][T12909] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 828.347127][T12909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.358493][T12909] usb 5-1: config 0 descriptor?? [ 828.367473][T12909] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 828.487678][T20153] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 828.576786][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b6c00: rx timeout, send abort [ 828.596708][T12909] gp8psk: usb in 128 operation failed. [ 828.657630][T20153] usb 7-1: Using ep0 maxpacket: 8 [ 828.665927][T22321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.675649][T20153] usb 7-1: config 1 interface 0 has no altsetting 0 [ 828.678737][T22321] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 828.686058][T20153] usb 7-1: string descriptor 0 read error: -22 [ 828.697682][T22321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.698311][T20153] usb 7-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 828.718264][T20153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.820513][T12909] gp8psk: usb in 146 operation failed. [ 828.827085][T12909] gp8psk: failed to get FW version [ 828.832997][T12909] gp8psk: usb in 149 operation failed. [ 828.839042][T12909] gp8psk: failed to get FPGA version [ 828.844921][T12909] gp8psk: usb in 138 operation failed. [ 828.857115][T12909] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 828.881386][T12909] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 828.900217][T12909] usb 5-1: USB disconnect, device number 75 [ 828.904086][T22326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.916182][T22326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.971551][T20153] usbhid 7-1:1.0: can't add hid device: -71 [ 828.980132][T20153] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 828.994722][T20153] usb 7-1: USB disconnect, device number 56 [ 829.111485][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802781b000: rx timeout, send abort [ 829.123396][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880697b6c00: abort rx timeout. Force session deactivation [ 829.452597][T22330] nfs: Unknown parameter 'defcontext' [ 829.654345][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802781b000: abort rx timeout. Force session deactivation [ 829.740267][T22342] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5023'. [ 829.899072][T22348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.911470][T22348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.971906][T12909] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 830.118030][T22350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.133862][T12909] usb 7-1: Using ep0 maxpacket: 32 [ 830.134116][T22350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.144447][T12909] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 830.164028][T12909] usb 7-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 830.174784][T12909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.183835][T12909] usb 7-1: Product: î·ê»˜è¾¼Û—籖瑗擬뛿黎崋ś嚰儥燩໭뵵䯧㖻䌘脫儢è™í–¥î…०䰌湼ⱔ쇾顟둺榮䴭ꓘ刡ê‡î¥æ§äªªí— ç…€ëº”⇠湕牌㚮趣売毄⥗쪔䰮纽é®í€¶ç‚¿æ³¢å—ºá‡¡ã˜»å©¾ç§€î¯æ¯ä²µëˆ¾ãŸ…åšé°‚㼶䫌몀侪柟矘ᆠᣘ禞ृ쉡ᯯꋛ륵 [ 830.211903][T12909] usb 7-1: Manufacturer: éµã€î¦ˆï¨å¾å´æ‹™è‚⬅䱕⯭幒쑼ãŠè¡˜è·ì‹‹é’Žä®Ÿ [ 830.222187][T12909] usb 7-1: SerialNumber: 俫䞉릨郔臿㮣뜛烇櫹垑撒簃䎞탑분ê™ã„¹á‡Œë¢éš¬îŸˆá³Ä‹ä»Ÿã ¸íœ‚㉦銜橈ʨ酖뷮鮡罨ç§é•¡ê¡ˆî•¯é´•ã£¢êˆ°ïƒŽî€¼â›ë´šæ¨¿ç“©î­‘è«åŒé¶¸ì±‰éº½ [ 830.470889][T12909] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 830.478245][T12909] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 830.535824][T12909] usb 7-1: USB disconnect, device number 57 [ 830.597305][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 830.659240][T22354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.669710][T22354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.805105][T22356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.814894][T22356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.072988][T18859] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 831.243985][T18859] usb 5-1: Using ep0 maxpacket: 8 [ 831.252309][T18859] usb 5-1: config 1 interface 0 has no altsetting 0 [ 831.264181][T18859] usb 5-1: string descriptor 0 read error: -22 [ 831.274952][T18859] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 831.284376][T18859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.329584][T12909] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 831.492867][T12909] usb 7-1: config 2 has an invalid interface number: 184 but max is 0 [ 831.492903][T12909] usb 7-1: config 2 has no interface number 0 [ 831.492934][T12909] usb 7-1: config 2 interface 184 has no altsetting 0 [ 831.495640][T12909] usb 7-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= c.2f [ 831.495675][T12909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.495697][T12909] usb 7-1: Product: syz [ 831.495714][T12909] usb 7-1: Manufacturer: syz [ 831.495729][T12909] usb 7-1: SerialNumber: syz [ 831.565851][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 831.611064][T18859] usbhid 5-1:1.0: can't add hid device: -71 [ 831.611216][T18859] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 831.617812][T18859] usb 5-1: USB disconnect, device number 76 [ 831.765018][T12909] usb 7-1: unknown interface protocol 0xd0, assuming v1 [ 831.765050][T12909] usb 7-1: cannot find UAC_HEADER [ 831.819860][T12909] snd-usb-audio 7-1:2.184: probe with driver snd-usb-audio failed with error -22 [ 831.842010][T12909] usb 7-1: USB disconnect, device number 58 [ 831.879344][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.963648][T22381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.964091][T22381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.054059][T22385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.064541][T22385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.834107][T22412] fuse: Unknown parameter ' ' [ 832.844026][T22416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.868670][T22416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.294311][T22433] netlink: 'syz.5.5054': attribute type 2 has an invalid length. [ 833.436606][T22447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.460156][T22447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.532598][T12909] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 833.693091][T22461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.708650][T22461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.713701][T12909] usb 5-1: Using ep0 maxpacket: 8 [ 833.725370][T22461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.738072][T22462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.740520][T12909] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 51015, setting to 1024 [ 833.758904][T22461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.768860][T22462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.780318][T12909] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 833.794858][T12909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.803725][T12909] usb 5-1: Product: syz [ 833.808370][T12909] usb 5-1: Manufacturer: syz [ 833.814147][T12909] usb 5-1: SerialNumber: syz [ 834.066569][T12909] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 834.187278][T12909] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 834.212413][T12909] usb 5-1: USB disconnect, device number 77 [ 834.314614][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.428862][T22477] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5068'. [ 834.735440][T22496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.747004][T22496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.776264][T22492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.785298][T22492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.799748][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5071'. [ 834.813389][T22492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5071'. [ 835.060656][T20153] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 835.081746][T22509] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5078'. [ 835.253067][T20153] usb 5-1: Using ep0 maxpacket: 32 [ 835.262626][T20153] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 835.271954][T20153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.281144][T20153] usb 5-1: Product: syz [ 835.285747][T20153] usb 5-1: Manufacturer: syz [ 835.290400][T20153] usb 5-1: SerialNumber: syz [ 835.298158][T20153] usb 5-1: config 0 descriptor?? [ 835.306155][T20153] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 835.314678][T20153] dvb-usb: bulk message failed: -22 (2/0) [ 835.329883][T20153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 835.340572][T20153] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 835.353112][T20153] usb 5-1: media controller created [ 835.374025][T20153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.398279][T22512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.403618][T20153] usb 5-1: selecting invalid altsetting 7 [ 835.412823][T20153] cxusb: set interface failed [ 835.414004][T22512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.417791][T20153] dvb-usb: bulk message failed: -22 (1/0) [ 835.435737][T22513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.456524][T22512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.456546][T22513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.480019][T22512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.522843][T20153] DVB: Unable to find symbol lgdt330x_attach() [ 835.545754][T20153] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 835.622106][T22520] syzkaller1: entered promiscuous mode [ 835.637874][T22520] syzkaller1: entered allmulticast mode [ 835.696400][T20153] rc_core: IR keymap rc-dvico-portable not found [ 835.734843][T20153] Registered IR keymap rc-empty [ 835.763104][T20153] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 835.808463][T20153] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input70 [ 835.873553][T20153] dvb-usb: schedule remote query interval to 100 msecs. [ 835.903133][T20153] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 835.946876][T20153] usb 5-1: USB disconnect, device number 78 [ 836.103306][T20153] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 836.169885][T22535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.202639][T22535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.242467][T22535] netlink: 'syz.1.5081': attribute type 9 has an invalid length. [ 836.263046][T22537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.284011][T22535] netlink: 'syz.1.5081': attribute type 11 has an invalid length. [ 836.294185][T22537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.302270][T22535] netlink: 'syz.1.5081': attribute type 12 has an invalid length. [ 836.314036][T22535] netlink: 179556 bytes leftover after parsing attributes in process `syz.1.5081'. [ 836.325151][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5081'. [ 836.413585][T22547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.421167][T22547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.434555][T22547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.445334][T22547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.577350][T22535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.587163][T22535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.771524][T20153] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 836.945872][T20153] usb 5-1: Using ep0 maxpacket: 32 [ 836.977352][T20153] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 837.020325][T20153] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 837.036849][T20153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.045907][T20153] usb 5-1: Product: î·ê»˜è¾¼Û—籖瑗擬뛿黎崋ś嚰儥燩໭뵵䯧㖻䌘脫儢è™í–¥î…०䰌湼ⱔ쇾顟둺榮䴭ꓘ刡ê‡î¥æ§äªªí— ç…€ëº”⇠湕牌㚮趣売毄⥗쪔䰮纽é®í€¶ç‚¿æ³¢å—ºá‡¡ã˜»å©¾ç§€î¯æ¯ä²µëˆ¾ãŸ…åšé°‚㼶䫌몀侪柟矘ᆠᣘ禞ृ쉡ᯯꋛ륵 [ 837.072450][T22560] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5091'. [ 837.074820][T20153] usb 5-1: Manufacturer: éµã€î¦ˆï¨å¾å´æ‹™è‚⬅䱕⯭幒쑼ãŠè¡˜è·ì‹‹é’Žä®Ÿ [ 837.093371][T20153] usb 5-1: SerialNumber: 俫䞉릨郔臿㮣뜛烇櫹垑撒簃䎞탑분ê™ã„¹á‡Œë¢éš¬îŸˆá³Ä‹ä»Ÿã ¸íœ‚㉦銜橈ʨ酖뷮鮡罨ç§é•¡ê¡ˆî•¯é´•ã£¢êˆ°ïƒŽî€¼â›ë´šæ¨¿ç“©î­‘è«åŒé¶¸ì±‰éº½ [ 837.421981][T20153] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 837.430310][T20153] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 837.484859][T22569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.509806][T22569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.535413][T20153] usb 5-1: USB disconnect, device number 79 [ 837.555714][T22569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.634924][T22570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.636298][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 837.673510][T22570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.726884][T22558] syz.6.5090 (22558): drop_caches: 2 [ 837.794563][T22572] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5094'. [ 838.050385][T22580] Set syz0 is full, maxelem 0 reached [ 838.286355][T22588] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5100'. [ 838.304787][T22588] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5100'. [ 838.349690][T22597] JFS: discard option not supported on device [ 838.360030][T22597] Mount JFS Failure: -22 [ 838.364707][T22597] jfs_mount failed w/return code = -22 [ 838.372609][T22600] JFS: discard option not supported on device [ 838.379397][T22600] Mount JFS Failure: -22 [ 838.384138][T22600] jfs_mount failed w/return code = -22 [ 838.418587][T20153] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 838.604149][T20153] usb 5-1: Using ep0 maxpacket: 8 [ 838.620171][T20153] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 51015, setting to 1024 [ 838.657936][T20153] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 838.681979][T20153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.701258][T20153] usb 5-1: Product: syz [ 838.711515][T20153] usb 5-1: Manufacturer: syz [ 838.722020][T20153] usb 5-1: SerialNumber: syz [ 838.932052][T22615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.956926][T22615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.978434][T22586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.997022][T22586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.018940][T22586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 839.052960][T20153] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 839.152865][T20153] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 839.186206][T20153] usb 5-1: USB disconnect, device number 80 [ 839.253063][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.946526][T22629] __nla_validate_parse: 9 callbacks suppressed [ 839.946548][T22629] netlink: 624 bytes leftover after parsing attributes in process `syz.5.5109'. [ 840.076682][ T5906] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 840.129891][T22633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.151916][T22633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.245566][ T5906] usb 5-1: device descriptor read/64, error -71 [ 840.512790][ T5906] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 840.582608][T22643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5116'. [ 840.610491][T22643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.630737][T22643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.663575][ T5906] usb 5-1: device descriptor read/64, error -71 [ 840.804847][ T5906] usb usb5-port1: attempt power cycle [ 841.114457][T22649] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5119'. [ 841.143783][ T24] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 841.186646][ T5906] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 841.225849][ T5906] usb 5-1: device descriptor read/8, error -71 [ 841.321147][T22653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.340765][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 841.350639][T22653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.363458][ T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 51015, setting to 1024 [ 841.393248][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 841.415920][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.427698][ T24] usb 7-1: Product: syz [ 841.433819][ T24] usb 7-1: Manufacturer: syz [ 841.438694][ T24] usb 7-1: SerialNumber: syz [ 841.520564][ T5906] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 841.550621][ T5906] usb 5-1: device descriptor read/8, error -71 [ 841.669065][ T5906] usb usb5-port1: unable to enumerate USB device [ 841.693546][ T24] usb 7-1: BAAD SPEAKERPHONE c_chmask mismatch [ 841.768077][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 841.788083][ T24] usb 7-1: USB disconnect, device number 59 [ 841.842681][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.906076][T22662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.923101][T22662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.943956][T22662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.956854][T22662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.054013][ T30] audit: type=1326 audit(1842.675:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22665 comm="syz.1.5125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa04659c799 code=0x0 [ 842.203522][T22669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.212419][T22669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.418953][T22677] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5129'. [ 842.640786][T22684] syzkaller1: entered promiscuous mode [ 842.646633][T22684] syzkaller1: entered allmulticast mode [ 842.993737][T22696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.256707][T22709] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5139'. [ 844.008931][ T24] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 844.083065][T22736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5149'. [ 844.184838][ T24] usb 7-1: no configurations [ 844.211825][ T24] usb 7-1: can't read configurations, error -22 [ 844.271106][T22740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.288425][T22740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.350680][ T24] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 844.503255][T22749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.519417][T22749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.529225][ T24] usb 7-1: no configurations [ 844.535929][ T24] usb 7-1: can't read configurations, error -22 [ 844.543433][ T24] usb usb7-port1: attempt power cycle [ 844.906557][ T24] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 844.962815][ T24] usb 7-1: no configurations [ 844.968984][ T24] usb 7-1: can't read configurations, error -22 [ 845.122820][ T24] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 845.175338][ T24] usb 7-1: no configurations [ 845.184708][ T24] usb 7-1: can't read configurations, error -22 [ 845.197852][ T24] usb usb7-port1: unable to enumerate USB device [ 845.321728][T22763] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5158'. [ 845.446967][T22768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5160'. [ 845.493036][T22770] netlink: 'syz.5.5161': attribute type 1 has an invalid length. [ 845.626356][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5162'. [ 845.639272][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.654514][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.725842][T22776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.734968][T22776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.657126][T22796] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5171'. [ 846.833817][T22800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.843047][T22800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.937855][T12909] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 847.108864][T12909] usb 5-1: Using ep0 maxpacket: 16 [ 847.116433][T12909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 847.127198][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.138425][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 847.148292][T12909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 847.158993][T12909] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 847.174953][T12909] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 847.184860][T12909] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 847.192959][T12909] usb 5-1: Manufacturer: syz [ 847.206748][T12909] usb 5-1: config 0 descriptor?? [ 847.352289][T22804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.361799][T22804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.380548][T22804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.391052][T22804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.395112][ T5831] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 847.536453][T12909] rc_core: IR keymap rc-hauppauge not found [ 847.542631][T12909] Registered IR keymap rc-empty [ 847.548686][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.568591][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.579249][ T5831] usb 7-1: Using ep0 maxpacket: 32 [ 847.587157][ T5831] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 847.599664][T12909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 847.614996][ T5831] usb 7-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 847.626634][T12909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input72 [ 847.639302][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.647803][ T5831] usb 7-1: Product: î·ê»˜è¾¼Û—籖瑗擬뛿黎崋ś嚰儥燩໭뵵䯧㖻䌘脫儢è™í–¥î…०䰌湼ⱔ쇾顟둺榮䴭ꓘ刡ê‡î¥æ§äªªí— ç…€ëº”⇠湕牌㚮趣売毄⥗쪔䰮纽é®í€¶ç‚¿æ³¢å—ºá‡¡ã˜»å©¾ç§€î¯æ¯ä²µëˆ¾ãŸ…åšé°‚㼶䫌몀侪柟矘ᆠᣘ禞ृ쉡ᯯꋛ륵 [ 847.676755][ T5831] usb 7-1: Manufacturer: éµã€î¦ˆï¨å¾å´æ‹™è‚⬅䱕⯭幒쑼ãŠè¡˜è·ì‹‹é’Žä®Ÿ [ 847.687733][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.695408][ T5831] usb 7-1: SerialNumber: 俫䞉릨郔臿㮣뜛烇櫹垑撒簃䎞탑분ê™ã„¹á‡Œë¢éš¬îŸˆá³Ä‹ä»Ÿã ¸íœ‚㉦銜橈ʨ酖뷮鮡罨ç§é•¡ê¡ˆî•¯é´•ã£¢êˆ°ïƒŽî€¼â›ë´šæ¨¿ç“©î­‘è«åŒé¶¸ì±‰éº½ [ 847.714286][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.750557][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.782434][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.805478][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.825491][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.857350][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.878676][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.900233][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.921394][T12909] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 847.957014][ T5831] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 847.965236][T12909] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 847.974363][T12909] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 847.988582][ T5831] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 848.023285][T12909] usb 5-1: USB disconnect, device number 85 [ 848.112999][ T5831] usb 7-1: USB disconnect, device number 64 [ 848.209557][T22814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.223331][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 848.247091][T22814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.261364][T22814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.287981][T22814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.729618][T22825] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5181'. [ 848.742218][T22824] netlink: 'syz.5.5180': attribute type 4 has an invalid length. [ 848.758908][T22824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.772806][T22824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.429151][ T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 849.514361][T12909] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 849.599912][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 849.608321][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 849.625878][ T24] usb 5-1: string descriptor 0 read error: -22 [ 849.636712][ T24] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 849.650171][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.717643][T12909] usb 7-1: Using ep0 maxpacket: 16 [ 849.737161][T12909] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 849.758952][T12909] usb 7-1: config 0 has no interface number 0 [ 849.765633][T12909] usb 7-1: config 0 interface 246 altsetting 249 bulk endpoint 0x9 has invalid maxpacket 1023 [ 849.783874][T12909] usb 7-1: config 0 interface 246 has no altsetting 0 [ 849.811390][T12909] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=27.0a [ 849.822635][T12909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.850390][T12909] usb 7-1: Product: syz [ 849.859486][T12909] usb 7-1: Manufacturer: syz [ 849.870894][T12909] usb 7-1: SerialNumber: syz [ 849.890613][T12909] usb 7-1: config 0 descriptor?? [ 849.906970][T22840] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 849.960852][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 849.972382][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 850.004898][ T24] usb 5-1: USB disconnect, device number 86 [ 850.325256][T12909] usb 7-1: USB disconnect, device number 65 [ 850.675445][T22860] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5190'. [ 850.820577][T12909] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 850.989516][T12909] usb 7-1: Using ep0 maxpacket: 32 [ 850.999476][T12909] usb 7-1: unable to get BOS descriptor or descriptor too short [ 851.013402][T12909] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 851.024320][T12909] usb 7-1: can't read configurations, error -71 [ 851.085743][ T5831] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 851.235875][ T5831] usb 5-1: device descriptor read/64, error -71 [ 851.440598][T22864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.513397][ T5831] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 851.652400][ T5831] usb 5-1: device descriptor read/64, error -71 [ 851.773338][ T5831] usb usb5-port1: attempt power cycle [ 851.930411][T12909] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 852.064261][T22869] netlink: 'syz.1.5194': attribute type 29 has an invalid length. [ 852.073868][T22869] netlink: 'syz.1.5194': attribute type 29 has an invalid length. [ 852.088830][T22869] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5194'. [ 852.101352][T12909] usb 7-1: Using ep0 maxpacket: 8 [ 852.111564][T12909] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 51015, setting to 1024 [ 852.127254][T12909] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 852.137380][T12909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.145791][ T5831] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 852.153555][T12909] usb 7-1: Product: syz [ 852.161441][T12909] usb 7-1: Manufacturer: syz [ 852.169710][T12909] usb 7-1: SerialNumber: syz [ 852.187597][ T5831] usb 5-1: device descriptor read/8, error -71 [ 852.404857][T22875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.419956][T22875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.435993][T22866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.452274][T22866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.463552][ T5831] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 852.481707][T12909] usb 7-1: BAAD SPEAKERPHONE c_chmask mismatch [ 852.499629][ T5831] usb 5-1: device descriptor read/8, error -71 [ 852.539413][T12909] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 852.569331][T12909] usb 7-1: USB disconnect, device number 67 [ 852.605004][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.636320][ T5831] usb usb5-port1: unable to enumerate USB device [ 853.124057][T22879] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5199'. [ 853.258801][T22883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.298407][T22883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.544661][ T24] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 853.570917][T22890] 9p: Bad value for 'rfdno' [ 853.621751][T22892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.634388][T22892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.715755][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 853.723917][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 853.732985][ T24] usb 7-1: config 15 has an invalid interface number: 118 but max is 0 [ 853.741538][ T24] usb 7-1: config 15 has no interface number 0 [ 853.748156][ T24] usb 7-1: config 15 interface 118 has no altsetting 0 [ 853.757460][ T24] usb 7-1: New USB device found, idVendor=07af, idProduct=0005, bcdDevice= 1.00 [ 853.767090][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.775868][ T24] usb 7-1: Product: 䀊 [ 853.780381][ T24] usb 7-1: Manufacturer: ã°Š [ 853.785022][ T24] usb 7-1: SerialNumber: âµîŠë¡½âƒ”嘿ගൠ墟쾦軮䨱⩣令㱯íŒæŽºá‘¤ï´‹ï³½ä›»ì±å•«á ¬åµ¸æ½²ç‘烛桥ꇯ欟 [ 853.894482][T22894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.903815][T22894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.025013][ T24] usb-storage 7-1:15.118: USB Mass Storage device detected [ 854.048746][ T24] usb-storage 7-1:15.118: Quirks match for vid 07af pid 0005: 4 [ 854.095537][T22898] nftables ruleset with unbound set [ 854.120147][ T24] usb 7-1: USB disconnect, device number 68 [ 854.272059][T22904] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5210'. [ 854.507645][T12909] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 854.534266][T22913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5213'. [ 854.674884][T22918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.684647][T22918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.693843][T12909] usb 5-1: Using ep0 maxpacket: 8 [ 854.695166][T22920] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5215'. [ 854.703031][T12909] usb 5-1: config 1 interface 0 has no altsetting 0 [ 854.725665][T12909] usb 5-1: string descriptor 0 read error: -22 [ 854.739229][T12909] usb 5-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 854.753496][T12909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.804405][T22922] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5216'. [ 854.830665][T22922] hsr_slave_0: left promiscuous mode [ 854.837388][T22922] hsr_slave_1: left promiscuous mode [ 855.009239][ T24] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 855.017257][T12909] usbhid 5-1:1.0: can't add hid device: -71 [ 855.040955][T12909] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 855.064814][T12909] usb 5-1: USB disconnect, device number 91 [ 855.131425][T22931] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5219'. [ 855.191263][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 855.199562][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 855.210185][ T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 855.221909][ T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.233202][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 855.250210][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 855.259446][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.267757][ T24] usb 7-1: Product: syz [ 855.271994][ T24] usb 7-1: Manufacturer: syz [ 855.276947][ T24] usb 7-1: SerialNumber: syz [ 855.294449][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 855.312245][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input74 [ 855.400131][T22935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.411604][T22935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.523961][ T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 855.533522][ T24] (id 0x00) [ 855.586817][ T24] rc_core: IR keymap rc-imon-pad not found [ 855.592792][ T24] Registered IR keymap rc-empty [ 855.597989][ T24] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 855.611775][ T24] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 855.720351][ T24] imon:send_packet: packet tx failed (-71) [ 855.746956][ T24] imon 7-1:155.0: remote input dev register failed [ 855.754021][ T24] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 855.776477][ T24] imon 7-1:155.0: unable to initialize intf0, err 0 [ 855.786232][ T24] imon:imon_probe: failed to initialize context! [ 855.793969][ T24] imon 7-1:155.0: unable to register, err -19 [ 855.809261][ T24] usb 7-1: USB disconnect, device number 69 [ 856.003085][T22949] netlink: 'syz.4.5225': attribute type 2 has an invalid length. [ 856.159319][T22955] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5228'. [ 856.280626][T22960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.292756][ T24] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 856.318488][T22960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.476796][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 128, setting to 64 [ 856.488399][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.505587][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 856.516418][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.524817][ T24] usb 5-1: Product: syz [ 856.530152][ T24] usb 5-1: Manufacturer: syz [ 856.535013][ T24] usb 5-1: SerialNumber: syz [ 856.549842][ T24] usb 5-1: config 0 descriptor?? [ 856.559616][T22949] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 856.583878][ T24] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 856.590918][ T24] mcba_usb 5-1:0.0 can0: couldn't start device: -90 [ 856.634287][T20153] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 856.658613][ T24] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90 [ 856.698456][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 856.794516][T20153] usb 7-1: Using ep0 maxpacket: 8 [ 856.802812][ T24] usb 5-1: USB disconnect, device number 92 [ 856.810378][T20153] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 51015, setting to 1024 [ 856.837666][T20153] usb 7-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 856.861418][T20153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.872340][T20153] usb 7-1: Product: syz [ 856.876591][T20153] usb 7-1: Manufacturer: syz [ 856.881424][T20153] usb 7-1: SerialNumber: syz [ 857.118331][T20153] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 857.135025][T20153] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 857.163441][T20153] usb 7-1: USB disconnect, device number 70 [ 857.212432][T22988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.226760][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 857.235700][T22986] netlink: 'syz.5.5236': attribute type 10 has an invalid length. [ 857.240161][T22988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.257063][T22986] bond0: (slave bond_slave_0): Releasing backup interface [ 857.418219][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.429664][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.439574][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 857.452957][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 857.462087][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.473013][ T24] usb 5-1: config 0 descriptor?? [ 857.805512][T22993] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5239'. [ 857.862416][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.872543][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.884561][T22997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.894763][T22997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.929427][ T24] hid_parser_main: 30 callbacks suppressed [ 857.929455][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 857.949292][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 857.967360][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 857.975637][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 857.984279][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 857.993064][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 858.000763][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 858.009638][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 858.026036][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 858.033484][ T24] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 858.069326][ T24] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 858.186153][ T24] usb 5-1: USB disconnect, device number 93 [ 858.258111][T23009] program syz.6.5244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.923871][T20029] Bluetooth: hci1: command 0x0c1a tx timeout [ 859.082388][T12909] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 859.242718][T12909] usb 5-1: Using ep0 maxpacket: 8 [ 859.250548][T12909] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 51015, setting to 1024 [ 859.265943][T12909] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 859.275481][T12909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.283912][T12909] usb 5-1: Product: syz [ 859.288236][T12909] usb 5-1: Manufacturer: syz [ 859.293041][T12909] usb 5-1: SerialNumber: syz [ 859.533480][T12909] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 859.570303][T12909] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 859.591189][T12909] usb 5-1: USB disconnect, device number 94 [ 859.630875][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.365219][T12909] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 860.466275][T23026] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5250'. [ 860.527898][T12909] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 860.538286][T12909] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 860.549102][T12909] usb 5-1: config 1 interface 0 has no altsetting 0 [ 860.560540][T12909] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 860.571521][T12909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.580091][T12909] usb 5-1: Product: syz [ 860.584412][T12909] usb 5-1: Manufacturer: syz [ 860.589043][T12909] usb 5-1: SerialNumber: syz [ 860.603263][T23022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.610903][T23022] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 860.834945][T23022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.844606][T23022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.868960][T23035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.351815][T23005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 861.522339][T23039] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5254'. [ 861.536146][T23039] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 861.546493][T23039] overlayfs: conflicting options: userxattr,redirect_dir=on [ 861.597234][T23045] overlay: filesystem on ./file0 not supported as upperdir [ 861.690521][T23047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.703315][T23047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.727768][T12909] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:2b:4f:c1:b8:a4 [ 861.751448][T12909] rtl8150 5-1:1.0: eth9: rtl8150 is detected [ 861.773367][T23051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5259'. [ 862.748076][ C0] usb 5-1: Rx status -71 [ 862.753152][ C0] usb 5-1: Rx status -71 [ 862.758861][ C0] usb 5-1: Rx status -71 [ 862.763374][ C0] usb 5-1: Rx status -71 [ 862.768238][ C0] usb 5-1: Rx status -71 [ 862.773982][ C0] usb 5-1: Rx status -71 [ 862.778737][ C0] usb 5-1: Rx status -71 [ 862.783945][ C0] usb 5-1: Rx status -71 [ 862.788973][ C0] usb 5-1: Rx status -71 [ 862.793915][ C0] usb 5-1: Rx status -71 [ 863.039670][T23092] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5268'. [ 863.049059][ C0] usb 5-1: eth9: intr status -71 [ 863.049305][ C0] usb 5-1: eth9: intr status -71 [ 863.049518][ C0] usb 5-1: eth9: intr status -71 [ 863.065168][ C0] usb 5-1: eth9: intr status -71 [ 863.070404][ C0] usb 5-1: eth9: intr status -71 [ 863.075594][ C0] usb 5-1: eth9: intr status -71 [ 863.081111][ C0] usb 5-1: eth9: intr status -71 [ 863.086415][ C0] usb 5-1: eth9: intr status -71 [ 863.091615][ C0] usb 5-1: eth9: intr status -71 [ 863.096804][ C0] usb 5-1: eth9: intr status -71 [ 863.102059][ C0] usb 5-1: eth9: intr status -71 [ 863.107412][ C0] usb 5-1: eth9: intr status -71 [ 863.113461][ C0] usb 5-1: eth9: intr status -71 [ 863.118732][ C0] usb 5-1: eth9: intr status -71 [ 863.123991][ C0] usb 5-1: eth9: intr status -71 [ 863.129512][ C0] usb 5-1: eth9: intr status -71 [ 863.134737][ C0] usb 5-1: eth9: intr status -71 [ 863.141659][ C0] usb 5-1: eth9: intr status -71 [ 863.147024][ C0] usb 5-1: eth9: intr status -71 [ 863.152200][ C0] usb 5-1: eth9: intr status -71 [ 863.157535][ C0] usb 5-1: eth9: intr status -71 [ 863.162807][ C0] usb 5-1: eth9: intr status -71 [ 863.163055][T23096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.167975][ C0] usb 5-1: eth9: intr status -71 [ 863.180649][T23096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.182042][ C0] usb 5-1: eth9: intr status -71 [ 863.195486][ C0] usb 5-1: eth9: intr status -71 [ 863.201287][ C0] usb 5-1: eth9: intr status -71 [ 863.206760][ C0] usb 5-1: eth9: intr status -71 [ 863.212473][ C0] usb 5-1: eth9: intr status -71 [ 863.218048][ C0] usb 5-1: eth9: intr status -71 [ 863.223725][ C0] usb 5-1: eth9: intr status -71 [ 863.229390][ C0] usb 5-1: eth9: intr status -71 [ 863.235132][ C0] usb 5-1: eth9: intr status -71 [ 863.240518][ C0] usb 5-1: eth9: intr status -71 [ 863.245732][ C0] usb 5-1: eth9: intr status -71 [ 863.250883][ C0] usb 5-1: eth9: intr status -71 [ 863.256140][ C0] usb 5-1: eth9: intr status -71 [ 863.261643][ C0] usb 5-1: eth9: intr status -71 [ 863.266852][ C0] usb 5-1: eth9: intr status -71 [ 863.272080][ C0] usb 5-1: eth9: intr status -71 [ 863.277327][ C0] usb 5-1: eth9: intr status -71 [ 863.282447][T23098] trusted_key: syz.5.5269 sent an empty control message without MSG_MORE. [ 863.282609][ C0] usb 5-1: eth9: intr status -71 [ 863.296443][ C0] usb 5-1: eth9: intr status -71 [ 863.302098][ C0] usb 5-1: eth9: intr status -71 [ 863.307444][T12909] usb 5-1: USB disconnect, device number 95 [ 863.315453][ C0] usb 5-1: eth9: intr status -71 [ 863.329626][ T5495] usb 5-1: device reset failed [ 863.668951][ T5831] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 863.834753][T23117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.852429][T23117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.863479][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.886508][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.910705][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.939341][ T5831] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.952805][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.977134][ T5831] usb 7-1: config 0 descriptor?? [ 864.066718][T12909] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 864.106422][T23127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.118611][T23127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.222144][T23130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.231585][T23130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.269590][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.280917][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.291609][T12909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 864.304949][T12909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 864.314590][T12909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.326685][T12909] usb 5-1: config 0 descriptor?? [ 864.423104][ T5831] hid_parser_main: 5 callbacks suppressed [ 864.423132][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.437789][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.445996][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.454060][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.461710][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.469335][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.477204][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.484900][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.492447][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.499882][ T5831] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 864.521306][ T5831] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 864.695667][T23100] FAULT_INJECTION: forcing a failure. [ 864.695667][T23100] name failslab, interval 1, probability 0, space 0, times 0 [ 864.708679][T23100] CPU: 0 UID: 0 PID: 23100 Comm: syz.6.5271 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.708712][T23100] Tainted: [L]=SOFTLOCKUP [ 864.708720][T23100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.708733][T23100] Call Trace: [ 864.708744][T23100] [ 864.708753][T23100] dump_stack_lvl+0xe8/0x150 [ 864.708792][T23100] should_fail_ex+0x412/0x560 [ 864.708823][T23100] should_failslab+0xa8/0x100 [ 864.708842][T23100] __kmalloc_noprof+0xe8/0x760 [ 864.708867][T23100] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 864.708896][T23100] tomoyo_realpath_from_path+0xe3/0x5d0 [ 864.708928][T23100] ? tomoyo_path_number_perm+0x219/0x630 [ 864.708948][T23100] tomoyo_path_number_perm+0x246/0x630 [ 864.708971][T23100] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 864.708993][T23100] ? __lock_acquire+0x6b5/0x2cf0 [ 864.709027][T23100] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 864.709060][T23100] ? __fget_files+0x2a/0x420 [ 864.709083][T23100] ? __fget_files+0x2a/0x420 [ 864.709102][T23100] ? __fget_files+0x3a0/0x420 [ 864.709121][T23100] ? __fget_files+0x2a/0x420 [ 864.709144][T23100] security_file_ioctl+0xc3/0x2a0 [ 864.709165][T23100] __se_sys_ioctl+0x47/0x170 [ 864.709184][T23100] do_syscall_64+0x14d/0xf80 [ 864.709199][T23100] ? trace_irq_disable+0x3b/0x150 [ 864.709218][T23100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.709235][T23100] ? clear_bhb_loop+0x40/0x90 [ 864.709254][T23100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.709271][T23100] RIP: 0033:0x7fc57799c799 [ 864.709287][T23100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.709300][T23100] RSP: 002b:00007fc57878a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.709321][T23100] RAX: ffffffffffffffda RBX: 00007fc577c15fa0 RCX: 00007fc57799c799 [ 864.709333][T23100] RDX: 0000200000000100 RSI: 00000000d01c4813 RDI: 0000000000000004 [ 864.709343][T23100] RBP: 00007fc57878a090 R08: 0000000000000000 R09: 0000000000000000 [ 864.709353][T23100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.709363][T23100] R13: 00007fc577c16038 R14: 00007fc577c15fa0 R15: 00007fffc7d4bfe8 [ 864.709389][T23100] [ 864.709438][T23100] ERROR: Out of memory at tomoyo_realpath_from_path. [ 864.937949][T23135] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5279'. [ 864.973102][T20153] usb 7-1: USB disconnect, device number 71 [ 865.007624][T23137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.017116][T23137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.021926][T12909] plantronics 0003:047F:FFFF.002F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 865.115288][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.124945][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.144919][T18859] usb 5-1: USB disconnect, device number 96 [ 865.191791][T23140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.201041][T23140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.602518][T23142] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5282'. [ 865.620477][T23142] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5282'. [ 865.986369][T23164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.996604][T23164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.126094][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5293'. [ 866.138335][T23177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.151628][T23177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.223692][T18859] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 866.396602][T18859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.407936][T18859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.418421][T18859] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.431898][T18859] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.442211][T18859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.454875][T18859] usb 7-1: config 0 descriptor?? [ 866.533803][T12909] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 866.699432][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 866.709551][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 86, changing to 7 [ 866.725270][T12909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9231, setting to 1024 [ 866.747229][T12909] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 866.758091][T12909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.768344][T12909] usb 5-1: Product: syz [ 866.774657][T12909] usb 5-1: Manufacturer: syz [ 866.779412][T12909] usb 5-1: SerialNumber: syz [ 866.788763][T12909] usb 5-1: config 0 descriptor?? [ 866.795427][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5298'. [ 866.820373][T12909] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 41, bLength 9, bSynchAddress c3 [ 866.926407][T18859] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 866.953744][T23193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.964470][T23193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.007487][T23193] binder: 23191:23193 ioctl c0306201 2000000001c0 returned -14 [ 867.017843][T23193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5300'. [ 867.124158][T12909] usb 5-1: USB disconnect, device number 97 [ 867.167599][T23163] FAULT_INJECTION: forcing a failure. [ 867.167599][T23163] name failslab, interval 1, probability 0, space 0, times 0 [ 867.182985][T23163] CPU: 1 UID: 0 PID: 23163 Comm: syz.6.5290 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.183021][T23163] Tainted: [L]=SOFTLOCKUP [ 867.183029][T23163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.183041][T23163] Call Trace: [ 867.183056][T23163] [ 867.183066][T23163] dump_stack_lvl+0xe8/0x150 [ 867.183104][T23163] should_fail_ex+0x412/0x560 [ 867.183133][T23163] should_failslab+0xa8/0x100 [ 867.183157][T23163] __kmalloc_noprof+0xe8/0x760 [ 867.183189][T23163] ? tomoyo_encode+0x28b/0x550 [ 867.183223][T23163] tomoyo_encode+0x28b/0x550 [ 867.183264][T23163] tomoyo_realpath_from_path+0x58d/0x5d0 [ 867.183304][T23163] ? tomoyo_path_number_perm+0x219/0x630 [ 867.183330][T23163] tomoyo_path_number_perm+0x246/0x630 [ 867.183360][T23163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 867.183386][T23163] ? __lock_acquire+0x6b5/0x2cf0 [ 867.183426][T23163] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 867.183467][T23163] ? __fget_files+0x2a/0x420 [ 867.183497][T23163] ? __fget_files+0x2a/0x420 [ 867.183519][T23163] ? __fget_files+0x3a0/0x420 [ 867.183544][T23163] ? __fget_files+0x2a/0x420 [ 867.183574][T23163] security_file_ioctl+0xc3/0x2a0 [ 867.183601][T23163] __se_sys_ioctl+0x47/0x170 [ 867.183624][T23163] do_syscall_64+0x14d/0xf80 [ 867.183642][T23163] ? trace_irq_disable+0x3b/0x150 [ 867.183665][T23163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.183685][T23163] ? clear_bhb_loop+0x40/0x90 [ 867.183707][T23163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.183725][T23163] RIP: 0033:0x7fc57799c799 [ 867.183746][T23163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.183762][T23163] RSP: 002b:00007fc57878a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.183784][T23163] RAX: ffffffffffffffda RBX: 00007fc577c15fa0 RCX: 00007fc57799c799 [ 867.183799][T23163] RDX: 0000200000000100 RSI: 00000000d01c4813 RDI: 0000000000000004 [ 867.183812][T23163] RBP: 00007fc57878a090 R08: 0000000000000000 R09: 0000000000000000 [ 867.183824][T23163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.183837][T23163] R13: 00007fc577c16038 R14: 00007fc577c15fa0 R15: 00007fffc7d4bfe8 [ 867.183867][T23163] [ 867.184096][T23163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 867.429267][T18859] usb 7-1: USB disconnect, device number 72 [ 867.480759][T23195] x_tables: duplicate entry at hook 2 [ 867.535384][T23198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.547784][T23198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.559214][T23198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.569189][T23198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.722582][T23202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.733666][T23202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.137807][T18859] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 868.307154][T23216] program syz.5.5310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.318993][T18859] usb 5-1: Using ep0 maxpacket: 8 [ 868.321940][ T988] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 868.333547][T18859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 868.350663][T18859] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 868.372948][T18859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.395646][T18859] usb 5-1: Product: syz [ 868.416837][T18859] usb 5-1: Manufacturer: syz [ 868.421869][T18859] usb 5-1: SerialNumber: syz [ 868.469120][T23218] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 868.489282][T23218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.513662][ T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.528048][T23218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.537005][ T988] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.548110][T23218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.557723][ T988] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 868.578993][ T988] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 868.591431][ T988] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.610689][ T988] usb 7-1: config 0 descriptor?? [ 868.810074][T23227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.827772][T23227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.283727][ T988] usbhid 7-1:0.0: can't add hid device: -71 [ 869.300449][ T988] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 869.361938][ T988] usb 7-1: USB disconnect, device number 73 [ 869.569625][T23236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.579340][T23236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.603158][T23238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.621325][T23238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.407646][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5324'. [ 870.528798][T23251] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967290 out of range (51000000..2150000000) [ 870.670251][T23253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 870.817932][T23259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5328'. [ 870.830628][T23259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5328'. [ 870.952077][T23263] sg_write: data in/out 295085/136 bytes for SCSI command 0x0-- guessing data in; [ 870.952077][T23263] program syz.1.5330 not setting count and/or reply_len properly [ 870.964485][ T10] IPVS: starting estimator thread 0... [ 870.964871][T23263] IPVS: ip_vs_add_dest(): server weight less than zero [ 871.014752][T12909] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 871.056039][T23265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.056531][T23265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.066806][T23264] IPVS: using max 33 ests per chain, 79200 per kthread [ 871.070676][T18859] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 871.072020][T18859] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 871.072499][T18859] usb 5-1: unit 1 not found! [ 871.072521][T18859] usb 5-1: unit 9 not found! [ 871.076093][T23265] delete_channel: no stack [ 871.176676][T12909] usb 7-1: device descriptor read/64, error -71 [ 871.237660][T18859] usb 5-1: USB disconnect, device number 98 [ 871.285880][T23272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.298562][T23272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.337586][T23272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.358152][T20378] udevd[20378]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.358343][T23272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.475535][T12909] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 871.565977][T23280] tmpfs: Bad value for 'mpol' [ 871.567119][T23280] netlink: 'syz.5.5335': attribute type 4 has an invalid length. [ 871.567141][T23280] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5335'. [ 871.575133][T23280] .`: renamed from bond0 (while UP) [ 871.643802][T18859] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 871.665183][T12909] usb 7-1: device descriptor read/64, error -71 [ 871.783209][T12909] usb usb7-port1: attempt power cycle [ 871.804135][T18859] usb 5-1: Using ep0 maxpacket: 32 [ 871.809099][T18859] usb 5-1: unable to get BOS descriptor or descriptor too short [ 871.810250][T18859] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 871.819329][T18859] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 871.819364][T18859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.819385][T18859] usb 5-1: Product: î·ê»˜è¾¼Û—籖瑗擬뛿黎崋ś嚰儥燩໭뵵䯧㖻䌘脫儢è™í–¥î…०䰌湼ⱔ쇾顟둺榮䴭ꓘ刡ê‡î¥æ§äªªí— ç…€ëº”⇠湕牌㚮趣売毄⥗쪔䰮纽é®í€¶ç‚¿æ³¢å—ºá‡¡ã˜»å©¾ç§€î¯æ¯ä²µëˆ¾ãŸ…åšé°‚㼶䫌몀侪柟矘ᆠᣘ禞ृ쉡ᯯꋛ륵 [ 871.819414][T18859] usb 5-1: Manufacturer: éµã€î¦ˆï¨å¾å´æ‹™è‚⬅䱕⯭幒쑼ãŠè¡˜è·ì‹‹é’Žä®Ÿ [ 871.819432][T18859] usb 5-1: SerialNumber: 俫䞉릨郔臿㮣뜛烇櫹垑撒簃䎞탑분ê™ã„¹á‡Œë¢éš¬îŸˆá³Ä‹ä»Ÿã ¸íœ‚㉦銜橈ʨ酖뷮鮡罨ç§é•¡ê¡ˆî•¯é´•ã£¢êˆ°ïƒŽî€¼â›ë´šæ¨¿ç“©î­‘è«åŒé¶¸ì±‰éº½ [ 871.824638][T23282] netlink: 'syz.1.5336': attribute type 10 has an invalid length. [ 871.934088][T23282] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5336'. [ 872.146727][T12909] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 872.190952][T12909] usb 7-1: device descriptor read/8, error -71 [ 872.214951][T18859] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 872.235938][T18859] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 872.344962][T18859] usb 5-1: USB disconnect, device number 99 [ 872.421063][T23291] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5337'. [ 872.452084][T23291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 872.467099][T12909] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 872.493813][T12909] usb 7-1: device descriptor read/8, error -71 [ 872.507177][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.515068][T23291] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5337'. [ 872.571724][T23297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5337'. [ 872.587017][T23297] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 872.609031][T12909] usb usb7-port1: unable to enumerate USB device [ 873.302118][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5339'. [ 873.336037][T18859] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 873.494248][T18859] usb 5-1: device descriptor read/64, error -71 [ 873.771855][T18859] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 873.923899][T23341] Mount JFS Failure: -22 [ 873.934491][T18859] usb 5-1: device descriptor read/64, error -71 [ 873.936814][T23341] jfs_mount failed w/return code = -22 [ 874.060441][T18859] usb usb5-port1: attempt power cycle [ 874.194287][T23345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.234237][T23345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.425473][T18859] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 874.466988][T18859] usb 5-1: device descriptor read/8, error -71 [ 874.733549][T18859] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 874.755490][T18859] usb 5-1: device descriptor read/8, error -71 [ 874.873049][T18859] usb usb5-port1: unable to enumerate USB device [ 875.125041][T23374] netlink: 'syz.1.5358': attribute type 11 has an invalid length. [ 875.137705][T23374] netlink: 'syz.1.5358': attribute type 11 has an invalid length. [ 875.146155][T23374] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5358'. [ 875.328853][T23385] 9p: Bad value for 'wfdno' [ 875.544473][T23392] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5363'. [ 875.650012][T23394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.670294][T23394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.757955][T23401] program syz.1.5366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 876.027850][T18859] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 876.187379][T18859] usb 7-1: Using ep0 maxpacket: 8 [ 876.196330][T18859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 876.208700][T18859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 876.219477][T18859] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 876.229379][T18859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 876.240706][T18859] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 876.250863][T18859] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 876.260474][T18859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.270952][T18859] usb 7-1: config 0 descriptor?? [ 876.277645][T23403] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 876.410377][T23408] netlink: 'syz.4.5370': attribute type 64 has an invalid length. [ 876.420219][T23408] netlink: 'syz.4.5370': attribute type 4 has an invalid length. [ 876.431008][T23408] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5370'. [ 876.570125][T23414] syz.4.5371 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 876.612694][T23418] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5372'. [ 876.735086][ T5844] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 876.744783][T18859] usb 7-1: USB disconnect, device number 78 [ 876.861422][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 876.899138][T23422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.914451][T23422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.046938][ T24] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 877.056537][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.066141][ T24] usb 5-1: Product: syz [ 877.070988][ T24] usb 5-1: Manufacturer: syz [ 877.075720][ T24] usb 5-1: SerialNumber: syz [ 877.099018][ T24] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 877.145106][T18859] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 877.601469][ T5906] usb 5-1: USB disconnect, device number 104 [ 877.717226][ T10] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 877.783957][T23436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.807762][T23436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.894136][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.906061][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.918704][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 877.935721][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 877.945168][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.963651][ T10] usb 7-1: config 0 descriptor?? [ 878.251091][T23426] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 878.251091][T23426] program syz.6.5376 not setting count and/or reply_len properly [ 878.261401][T18859] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 878.280346][T23426] sg_write: data in/out 337/4061 bytes for SCSI command 0x22-- guessing data in; [ 878.280346][T23426] program syz.6.5376 not setting count and/or reply_len properly [ 878.297831][ T5844] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 878.325770][T18859] ath9k_htc: Failed to initialize the device [ 878.339427][ T5906] usb 5-1: ath9k_htc: USB layer deinitialized [ 878.429530][T23458] FAULT_INJECTION: forcing a failure. [ 878.429530][T23458] name failslab, interval 1, probability 0, space 0, times 0 [ 878.482682][T23458] CPU: 1 UID: 0 PID: 23458 Comm: syz.4.5382 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.482719][T23458] Tainted: [L]=SOFTLOCKUP [ 878.482728][T23458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 878.482740][T23458] Call Trace: [ 878.482749][T23458] [ 878.482758][T23458] dump_stack_lvl+0xe8/0x150 [ 878.482795][T23458] should_fail_ex+0x412/0x560 [ 878.482823][T23458] should_failslab+0xa8/0x100 [ 878.482846][T23458] __kmalloc_noprof+0xe8/0x760 [ 878.482878][T23458] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 878.482916][T23458] tomoyo_realpath_from_path+0xe3/0x5d0 [ 878.482956][T23458] ? tomoyo_path_number_perm+0x219/0x630 [ 878.482982][T23458] tomoyo_path_number_perm+0x246/0x630 [ 878.483012][T23458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 878.483040][T23458] ? __lock_acquire+0x6b5/0x2cf0 [ 878.483083][T23458] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 878.483123][T23458] ? __fget_files+0x2a/0x420 [ 878.483153][T23458] ? __fget_files+0x2a/0x420 [ 878.483178][T23458] ? __fget_files+0x3a0/0x420 [ 878.483211][T23458] ? __fget_files+0x2a/0x420 [ 878.483256][T23458] security_file_ioctl+0xc3/0x2a0 [ 878.483282][T23458] __se_sys_ioctl+0x47/0x170 [ 878.483306][T23458] do_syscall_64+0x14d/0xf80 [ 878.483325][T23458] ? trace_irq_disable+0x3b/0x150 [ 878.483348][T23458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.483366][T23458] ? clear_bhb_loop+0x40/0x90 [ 878.483390][T23458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.483410][T23458] RIP: 0033:0x7fa80499c799 [ 878.483430][T23458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.483447][T23458] RSP: 002b:00007fa805932028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.483469][T23458] RAX: ffffffffffffffda RBX: 00007fa804c15fa0 RCX: 00007fa80499c799 [ 878.483484][T23458] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 878.483496][T23458] RBP: 00007fa805932090 R08: 0000000000000000 R09: 0000000000000000 [ 878.483507][T23458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.483518][T23458] R13: 00007fa804c16038 R14: 00007fa804c15fa0 R15: 00007fff314a2138 [ 878.483549][T23458] [ 878.483558][T23458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 878.653432][ T10] hid_parser_main: 35 callbacks suppressed [ 878.653460][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 878.802336][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 878.828028][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 878.843042][T23472] netlink: 704 bytes leftover after parsing attributes in process `syz.1.5384'. [ 878.854215][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 878.895475][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 878.925250][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 878.959161][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 878.984119][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 879.023907][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 879.041053][ T10] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 879.096989][ T10] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 879.105547][T23479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.263129][T23485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.272526][T23485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.295222][T23486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.333373][T23486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.490800][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 879.543778][T23502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.570300][T23502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.652434][ T10] usb 5-1: device descriptor read/64, error -71 [ 879.761077][T23508] FAULT_INJECTION: forcing a failure. [ 879.761077][T23508] name failslab, interval 1, probability 0, space 0, times 0 [ 879.775028][T23508] CPU: 1 UID: 0 PID: 23508 Comm: syz.5.5393 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.775062][T23508] Tainted: [L]=SOFTLOCKUP [ 879.775069][T23508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.775081][T23508] Call Trace: [ 879.775090][T23508] [ 879.775099][T23508] dump_stack_lvl+0xe8/0x150 [ 879.775134][T23508] should_fail_ex+0x412/0x560 [ 879.775161][T23508] should_failslab+0xa8/0x100 [ 879.775184][T23508] __kmalloc_noprof+0xe8/0x760 [ 879.775216][T23508] ? tomoyo_encode+0x28b/0x550 [ 879.775250][T23508] tomoyo_encode+0x28b/0x550 [ 879.775285][T23508] tomoyo_realpath_from_path+0x58d/0x5d0 [ 879.775333][T23508] ? tomoyo_path_number_perm+0x219/0x630 [ 879.775359][T23508] tomoyo_path_number_perm+0x246/0x630 [ 879.775387][T23508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 879.775414][T23508] ? __lock_acquire+0x6b5/0x2cf0 [ 879.775455][T23508] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 879.775496][T23508] ? __fget_files+0x2a/0x420 [ 879.775525][T23508] ? __fget_files+0x2a/0x420 [ 879.775549][T23508] ? __fget_files+0x3a0/0x420 [ 879.775573][T23508] ? __fget_files+0x2a/0x420 [ 879.775602][T23508] security_file_ioctl+0xc3/0x2a0 [ 879.775628][T23508] __se_sys_ioctl+0x47/0x170 [ 879.775650][T23508] do_syscall_64+0x14d/0xf80 [ 879.775668][T23508] ? trace_irq_disable+0x3b/0x150 [ 879.775691][T23508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.775711][T23508] ? clear_bhb_loop+0x40/0x90 [ 879.775735][T23508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.775755][T23508] RIP: 0033:0x7f4d5999c799 [ 879.775774][T23508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.775791][T23508] RSP: 002b:00007f4d57bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.775813][T23508] RAX: ffffffffffffffda RBX: 00007f4d59c15fa0 RCX: 00007f4d5999c799 [ 879.775828][T23508] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 879.775840][T23508] RBP: 00007f4d57bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 879.775852][T23508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.775864][T23508] R13: 00007f4d59c16038 R14: 00007f4d59c15fa0 R15: 00007fff9eea4448 [ 879.775896][T23508] [ 879.775919][T23508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 879.966031][ T10] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 880.164772][ T10] usb 5-1: device descriptor read/64, error -71 [ 880.292824][ T10] usb usb5-port1: attempt power cycle [ 880.295357][T23521] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 880.306358][T23521] overlayfs: failed to set xattr on upper [ 880.312255][T23521] overlayfs: ...falling back to redirect_dir=nofollow. [ 880.319796][T23521] overlayfs: ...falling back to metacopy=off. [ 880.328830][T23521] overlayfs: ...falling back to index=off. [ 880.337934][T23521] overlayfs: ...falling back to uuid=null. [ 880.422546][T23526] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5400'. [ 880.434158][T23526] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5400'. [ 880.447648][T23526] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5400'. [ 880.468084][T23526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.491425][T23526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.512983][T23526] bond0 (unregistering): Released all slaves [ 880.516119][T23528] netlink: 'syz.5.5401': attribute type 21 has an invalid length. [ 880.531753][T23528] netlink: 'syz.5.5401': attribute type 1 has an invalid length. [ 880.541835][ T30] kauditd_printk_skb: 1177 callbacks suppressed [ 880.541854][ T30] audit: type=1326 audit(1878.678:7921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23525 comm="syz.6.5400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc57799c799 code=0x0 [ 880.688273][ T10] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 880.739959][ T10] usb 5-1: device descriptor read/8, error -71 [ 880.941905][T23540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.954555][T23540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.008757][ T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 881.041675][ T10] usb 5-1: device descriptor read/8, error -71 [ 881.174594][ T10] usb usb5-port1: unable to enumerate USB device [ 881.186398][T23545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.203730][T23545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.390873][T23551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.402484][T23551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.459590][T23556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.473097][T23556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.538759][T23558] 9p: Bad value for 'rfdno' [ 881.548125][T23558] netlink: 'syz.1.5411': attribute type 12 has an invalid length. [ 881.867418][T23570] program syz.5.5414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.941145][T23572] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 881.947761][T23572] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 881.956167][T23572] vhci_hcd vhci_hcd.0: Device attached [ 881.966753][T23573] vhci_hcd: connection closed [ 881.969179][ T49] vhci_hcd vhci_hcd.5: stop threads [ 881.981069][ T49] vhci_hcd vhci_hcd.5: release socket [ 881.990940][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 882.260109][T23582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.278515][T23584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.286642][T23582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.289846][T23584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.448739][T23588] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 882.457096][T23588] overlayfs: failed to set xattr on upper [ 882.463463][T23588] overlayfs: ...falling back to redirect_dir=nofollow. [ 882.470400][T23588] overlayfs: ...falling back to index=off. [ 882.479403][T23588] overlayfs: ...falling back to uuid=null. [ 882.485445][T23588] overlayfs: ...falling back to xino=off. [ 882.537352][T23582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.559818][T23585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.574184][T23582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.592790][T23585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.602812][T23594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.626471][T23594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.637304][T23594] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5421'. [ 882.650327][T23594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.659806][T23594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.746220][T23594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.760421][T23594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.077509][T23608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.087960][T23608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.109493][T20211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.119768][T20211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.382260][T23614] netlink: 'syz.5.5428': attribute type 15 has an invalid length. [ 883.391402][T23614] netlink: 'syz.5.5428': attribute type 7 has an invalid length. [ 883.420570][T23614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.429778][T23614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.712185][T23617] netlink: 'syz.4.5429': attribute type 2 has an invalid length. [ 883.753797][T23619] FAULT_INJECTION: forcing a failure. [ 883.753797][T23619] name failslab, interval 1, probability 0, space 0, times 0 [ 883.768630][T23619] CPU: 0 UID: 0 PID: 23619 Comm: syz.6.5430 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.768654][T23619] Tainted: [L]=SOFTLOCKUP [ 883.768659][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 883.768667][T23619] Call Trace: [ 883.768673][T23619] [ 883.768679][T23619] dump_stack_lvl+0xe8/0x150 [ 883.768703][T23619] should_fail_ex+0x412/0x560 [ 883.768721][T23619] should_failslab+0xa8/0x100 [ 883.768735][T23619] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 883.768755][T23619] ? dup_task_struct+0x52/0x840 [ 883.768777][T23619] dup_task_struct+0x52/0x840 [ 883.768795][T23619] ? _raw_spin_unlock_irq+0x23/0x50 [ 883.768814][T23619] copy_process+0x89b/0x4430 [ 883.768850][T23619] ? __pfx_copy_process+0x10/0x10 [ 883.768873][T23619] ? mutex_init_lockdep+0xdf/0x110 [ 883.768888][T23619] vhost_task_create+0x1f9/0x380 [ 883.768904][T23619] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 883.768918][T23619] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 883.768932][T23619] ? __pfx_vhost_task_create+0x10/0x10 [ 883.768951][T23619] ? __pfx_vhost_task_fn+0x10/0x10 [ 883.768971][T23619] ? __lock_acquire+0x6b5/0x2cf0 [ 883.768993][T23619] kvm_mmu_post_init_vm+0x14c/0x300 [ 883.769011][T23619] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 883.769033][T23619] ? __mutex_trylock_common+0x158/0x260 [ 883.769049][T23619] ? __pfx___mutex_trylock_common+0x10/0x10 [ 883.769063][T23619] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 883.769078][T23619] ? register_lock_class+0x31/0x2e0 [ 883.769098][T23619] ? __lock_acquire+0x6b5/0x2cf0 [ 883.769126][T23619] ? kasan_quarantine_put+0xbb/0x1f0 [ 883.769146][T23619] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 883.769164][T23619] ? do_raw_write_lock+0x11d/0x260 [ 883.769189][T23619] kvm_vcpu_ioctl+0xa62/0xfd0 [ 883.769206][T23619] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 883.769218][T23619] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 883.769249][T23619] ? __fget_files+0x2a/0x420 [ 883.769268][T23619] ? __fget_files+0x2a/0x420 [ 883.769282][T23619] ? __fget_files+0x3a0/0x420 [ 883.769297][T23619] ? __fget_files+0x2a/0x420 [ 883.769315][T23619] ? bpf_lsm_file_ioctl+0x9/0x20 [ 883.769328][T23619] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 883.769342][T23619] __se_sys_ioctl+0xfc/0x170 [ 883.769356][T23619] do_syscall_64+0x14d/0xf80 [ 883.769367][T23619] ? trace_irq_disable+0x3b/0x150 [ 883.769382][T23619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.769395][T23619] ? clear_bhb_loop+0x40/0x90 [ 883.769410][T23619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.769422][T23619] RIP: 0033:0x7fc57799c799 [ 883.769441][T23619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.769452][T23619] RSP: 002b:00007fc57878a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 883.769466][T23619] RAX: ffffffffffffffda RBX: 00007fc577c15fa0 RCX: 00007fc57799c799 [ 883.769478][T23619] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 883.769486][T23619] RBP: 00007fc57878a090 R08: 0000000000000000 R09: 0000000000000000 [ 883.769493][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.769501][T23619] R13: 00007fc577c16038 R14: 00007fc577c15fa0 R15: 00007fffc7d4bfe8 [ 883.769520][T23619] [ 884.509463][T23631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.525327][T23631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.533493][ T5906] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 884.561434][T23631] netlink: 'syz.5.5435': attribute type 1 has an invalid length. [ 884.578987][T23631] netlink: 'syz.5.5435': attribute type 1 has an invalid length. [ 884.628011][T23633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.639859][T23633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.709362][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 884.722952][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 884.733209][ T5906] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 147, changing to 7 [ 884.756314][ T5906] usb 5-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 884.774491][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.793274][ T5906] usb 5-1: Product: syz [ 884.797690][ T5906] usb 5-1: SerialNumber: syz [ 884.851282][T23635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.860427][T23635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.035300][ T5906] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 885.042932][ T5906] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 885.082541][ T5906] usb 5-1: USB disconnect, device number 109 [ 885.116119][T20379] udevd[20379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 885.352750][T23639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.361976][T23639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.494081][T23643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.504539][T23643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.515889][T23641] FAULT_INJECTION: forcing a failure. [ 885.515889][T23641] name failslab, interval 1, probability 0, space 0, times 0 [ 885.530270][T23641] CPU: 0 UID: 0 PID: 23641 Comm: syz.1.5441 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.530304][T23641] Tainted: [L]=SOFTLOCKUP [ 885.530313][T23641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 885.530325][T23641] Call Trace: [ 885.530334][T23641] [ 885.530343][T23641] dump_stack_lvl+0xe8/0x150 [ 885.530379][T23641] should_fail_ex+0x412/0x560 [ 885.530408][T23641] should_failslab+0xa8/0x100 [ 885.530432][T23641] __kmalloc_noprof+0xe8/0x760 [ 885.530472][T23641] ? security_task_alloc+0x4d/0x330 [ 885.530499][T23641] security_task_alloc+0x4d/0x330 [ 885.530528][T23641] copy_process+0x1cf3/0x4430 [ 885.530578][T23641] ? copy_process+0xd68/0x4430 [ 885.530619][T23641] ? __pfx_copy_process+0x10/0x10 [ 885.530655][T23641] ? mutex_init_lockdep+0xdf/0x110 [ 885.530681][T23641] vhost_task_create+0x1f9/0x380 [ 885.530707][T23641] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 885.530735][T23641] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 885.530757][T23641] ? __pfx_vhost_task_create+0x10/0x10 [ 885.530789][T23641] ? __pfx_vhost_task_fn+0x10/0x10 [ 885.530822][T23641] ? __lock_acquire+0x6b5/0x2cf0 [ 885.530858][T23641] kvm_mmu_post_init_vm+0x14c/0x300 [ 885.530887][T23641] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 885.530922][T23641] ? __mutex_trylock_common+0x158/0x260 [ 885.530948][T23641] ? __pfx___mutex_trylock_common+0x10/0x10 [ 885.530972][T23641] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 885.530993][T23641] ? register_lock_class+0x31/0x2e0 [ 885.531013][T23641] ? __lock_acquire+0x6b5/0x2cf0 [ 885.531036][T23641] ? kasan_quarantine_put+0xbb/0x1f0 [ 885.531055][T23641] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 885.531074][T23641] ? do_raw_write_lock+0x11d/0x260 [ 885.531098][T23641] kvm_vcpu_ioctl+0xa62/0xfd0 [ 885.531115][T23641] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 885.531127][T23641] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 885.531152][T23641] ? __fget_files+0x2a/0x420 [ 885.531170][T23641] ? __fget_files+0x2a/0x420 [ 885.531185][T23641] ? __fget_files+0x3a0/0x420 [ 885.531201][T23641] ? __fget_files+0x2a/0x420 [ 885.531221][T23641] ? bpf_lsm_file_ioctl+0x9/0x20 [ 885.531234][T23641] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 885.531248][T23641] __se_sys_ioctl+0xfc/0x170 [ 885.531262][T23641] do_syscall_64+0x14d/0xf80 [ 885.531273][T23641] ? trace_irq_disable+0x3b/0x150 [ 885.531287][T23641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.531299][T23641] ? clear_bhb_loop+0x40/0x90 [ 885.531314][T23641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.531327][T23641] RIP: 0033:0x7fa04659c799 [ 885.531340][T23641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.531351][T23641] RSP: 002b:00007fa047470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 885.531366][T23641] RAX: ffffffffffffffda RBX: 00007fa046815fa0 RCX: 00007fa04659c799 [ 885.531375][T23641] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 885.531383][T23641] RBP: 00007fa047470090 R08: 0000000000000000 R09: 0000000000000000 [ 885.531390][T23641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.531397][T23641] R13: 00007fa046816038 R14: 00007fa046815fa0 R15: 00007ffe5b31e528 [ 885.531417][T23641] [ 886.154846][T23654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5445'. [ 886.166235][T23654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5445'. [ 886.523974][T23665] batman_adv: batadv0: adding TT local entry 02:04:00:bf:05:00 to non-existent VLAN 512 [ 886.553627][T23668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.580811][T23668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.609420][T23665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5450'. [ 886.650098][T23671] FAULT_INJECTION: forcing a failure. [ 886.650098][T23671] name failslab, interval 1, probability 0, space 0, times 0 [ 886.659809][T23665] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5450'. [ 886.663233][T23671] CPU: 1 UID: 0 PID: 23671 Comm: syz.1.5452 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.663261][T23671] Tainted: [L]=SOFTLOCKUP [ 886.663268][T23671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 886.663278][T23671] Call Trace: [ 886.663286][T23671] [ 886.663294][T23671] dump_stack_lvl+0xe8/0x150 [ 886.663326][T23671] should_fail_ex+0x412/0x560 [ 886.663352][T23671] should_failslab+0xa8/0x100 [ 886.663373][T23671] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 886.663403][T23671] ? alloc_vmap_area+0x229/0x14b0 [ 886.663433][T23671] alloc_vmap_area+0x229/0x14b0 [ 886.663468][T23671] ? rcu_is_watching+0x15/0xb0 [ 886.663490][T23671] ? __pfx_alloc_vmap_area+0x10/0x10 [ 886.663512][T23671] ? __kasan_kmalloc+0x93/0xb0 [ 886.663542][T23671] ? __get_vm_area_node+0x13f/0x300 [ 886.663566][T23671] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 886.663593][T23671] ? copy_process+0x89b/0x4430 [ 886.663621][T23671] __get_vm_area_node+0x1f8/0x300 [ 886.663653][T23671] __vmalloc_node_range_noprof+0x36a/0x1750 [ 886.663680][T23671] ? copy_process+0x89b/0x4430 [ 886.663727][T23671] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 886.663761][T23671] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 886.663790][T23671] ? rcu_is_watching+0x15/0xb0 [ 886.663810][T23671] ? memcpy_and_pad+0x48/0x80 [ 886.663840][T23671] __vmalloc_node_noprof+0xc2/0x100 [ 886.663866][T23671] ? copy_process+0x89b/0x4430 [ 886.663890][T23671] ? copy_process+0x89b/0x4430 [ 886.663925][T23671] dup_task_struct+0x298/0x840 [ 886.663956][T23671] copy_process+0x89b/0x4430 [ 886.664014][T23671] ? __pfx_copy_process+0x10/0x10 [ 886.664048][T23671] ? mutex_init_lockdep+0xdf/0x110 [ 886.664071][T23671] vhost_task_create+0x1f9/0x380 [ 886.664095][T23671] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 886.664115][T23671] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 886.664137][T23671] ? __pfx_vhost_task_create+0x10/0x10 [ 886.664167][T23671] ? __pfx_vhost_task_fn+0x10/0x10 [ 886.664198][T23671] ? __lock_acquire+0x6b5/0x2cf0 [ 886.664231][T23671] kvm_mmu_post_init_vm+0x14c/0x300 [ 886.664257][T23671] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 886.664287][T23671] ? __mutex_trylock_common+0x158/0x260 [ 886.664308][T23671] ? __pfx___mutex_trylock_common+0x10/0x10 [ 886.664327][T23671] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 886.664349][T23671] ? register_lock_class+0x31/0x2e0 [ 886.664378][T23671] ? __lock_acquire+0x6b5/0x2cf0 [ 886.664413][T23671] ? kasan_quarantine_put+0xbb/0x1f0 [ 886.664441][T23671] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 886.664470][T23671] ? do_raw_write_lock+0x11d/0x260 [ 886.664508][T23671] kvm_vcpu_ioctl+0xa62/0xfd0 [ 886.664542][T23671] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 886.664560][T23671] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 886.664600][T23671] ? __fget_files+0x2a/0x420 [ 886.664627][T23671] ? __fget_files+0x2a/0x420 [ 886.664649][T23671] ? __fget_files+0x3a0/0x420 [ 886.664671][T23671] ? __fget_files+0x2a/0x420 [ 886.664697][T23671] ? bpf_lsm_file_ioctl+0x9/0x20 [ 886.664717][T23671] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 886.664737][T23671] __se_sys_ioctl+0xfc/0x170 [ 886.664759][T23671] do_syscall_64+0x14d/0xf80 [ 886.664775][T23671] ? trace_irq_disable+0x3b/0x150 [ 886.664797][T23671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.664815][T23671] ? clear_bhb_loop+0x40/0x90 [ 886.664839][T23671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.664857][T23671] RIP: 0033:0x7fa04659c799 [ 886.664876][T23671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.664892][T23671] RSP: 002b:00007fa047470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.664935][T23671] RAX: ffffffffffffffda RBX: 00007fa046815fa0 RCX: 00007fa04659c799 [ 886.664948][T23671] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 886.664959][T23671] RBP: 00007fa047470090 R08: 0000000000000000 R09: 0000000000000000 [ 886.664971][T23671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.664982][T23671] R13: 00007fa046816038 R14: 00007fa046815fa0 R15: 00007ffe5b31e528 [ 886.665013][T23671] [ 886.665375][T23671] syz.1.5452: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 887.113571][T23671] CPU: 1 UID: 0 PID: 23671 Comm: syz.1.5452 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.113601][T23671] Tainted: [L]=SOFTLOCKUP [ 887.113607][T23671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.113618][T23671] Call Trace: [ 887.113625][T23671] [ 887.113633][T23671] dump_stack_lvl+0xe8/0x150 [ 887.113665][T23671] warn_alloc+0x249/0x340 [ 887.113683][T23671] ? kasan_quarantine_put+0xbb/0x1f0 [ 887.113712][T23671] ? __pfx_warn_alloc+0x10/0x10 [ 887.113731][T23671] ? __get_vm_area_node+0x211/0x300 [ 887.113756][T23671] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 887.113788][T23671] ? copy_process+0x89b/0x4430 [ 887.113819][T23671] ? __get_vm_area_node+0x211/0x300 [ 887.113854][T23671] __vmalloc_node_range_noprof+0x38f/0x1750 [ 887.113906][T23671] ? __memcg_slab_post_alloc_hook+0x493/0xe80 [ 887.113942][T23671] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 887.113975][T23671] ? rcu_is_watching+0x15/0xb0 [ 887.113999][T23671] ? memcpy_and_pad+0x48/0x80 [ 887.114031][T23671] __vmalloc_node_noprof+0xc2/0x100 [ 887.114061][T23671] ? copy_process+0x89b/0x4430 [ 887.114085][T23671] ? copy_process+0x89b/0x4430 [ 887.114110][T23671] dup_task_struct+0x298/0x840 [ 887.114138][T23671] copy_process+0x89b/0x4430 [ 887.114188][T23671] ? __pfx_copy_process+0x10/0x10 [ 887.114219][T23671] ? mutex_init_lockdep+0xdf/0x110 [ 887.114239][T23671] vhost_task_create+0x1f9/0x380 [ 887.114260][T23671] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 887.114278][T23671] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 887.114296][T23671] ? __pfx_vhost_task_create+0x10/0x10 [ 887.114336][T23671] ? __pfx_vhost_task_fn+0x10/0x10 [ 887.114362][T23671] ? __lock_acquire+0x6b5/0x2cf0 [ 887.114392][T23671] kvm_mmu_post_init_vm+0x14c/0x300 [ 887.114414][T23671] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 887.114442][T23671] ? __mutex_trylock_common+0x158/0x260 [ 887.114463][T23671] ? __pfx___mutex_trylock_common+0x10/0x10 [ 887.114481][T23671] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 887.114502][T23671] ? register_lock_class+0x31/0x2e0 [ 887.114529][T23671] ? __lock_acquire+0x6b5/0x2cf0 [ 887.114559][T23671] ? kasan_quarantine_put+0xbb/0x1f0 [ 887.114584][T23671] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 887.114609][T23671] ? do_raw_write_lock+0x11d/0x260 [ 887.114643][T23671] kvm_vcpu_ioctl+0xa62/0xfd0 [ 887.114666][T23671] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 887.114682][T23671] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 887.114716][T23671] ? __fget_files+0x2a/0x420 [ 887.114741][T23671] ? __fget_files+0x2a/0x420 [ 887.114759][T23671] ? __fget_files+0x3a0/0x420 [ 887.114779][T23671] ? __fget_files+0x2a/0x420 [ 887.114802][T23671] ? bpf_lsm_file_ioctl+0x9/0x20 [ 887.114819][T23671] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 887.114837][T23671] __se_sys_ioctl+0xfc/0x170 [ 887.114855][T23671] do_syscall_64+0x14d/0xf80 [ 887.114870][T23671] ? trace_irq_disable+0x3b/0x150 [ 887.114888][T23671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.114904][T23671] ? clear_bhb_loop+0x40/0x90 [ 887.114924][T23671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.114940][T23671] RIP: 0033:0x7fa04659c799 [ 887.114956][T23671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.114970][T23671] RSP: 002b:00007fa047470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.114990][T23671] RAX: ffffffffffffffda RBX: 00007fa046815fa0 RCX: 00007fa04659c799 [ 887.115001][T23671] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 887.115012][T23671] RBP: 00007fa047470090 R08: 0000000000000000 R09: 0000000000000000 [ 887.115022][T23671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.115031][T23671] R13: 00007fa046816038 R14: 00007fa046815fa0 R15: 00007ffe5b31e528 [ 887.115058][T23671] [ 887.115094][T23671] Mem-Info: [ 887.276272][T23681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.281267][T23671] active_anon:12797 inactive_anon:0 isolated_anon:0 [ 887.281267][T23671] active_file:4869 inactive_file:53703 isolated_file:0 [ 887.281267][T23671] unevictable:768 dirty:240 writeback:0 [ 887.281267][T23671] slab_reclaimable:8117 slab_unreclaimable:101289 [ 887.281267][T23671] mapped:30857 shmem:6293 pagetables:1895 [ 887.281267][T23671] sec_pagetables:0 bounce:0 [ 887.281267][T23671] kernel_misc_reclaimable:0 [ 887.281267][T23671] free:1296765 free_pcp:10534 free_cma:0 [ 887.300335][T23681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.308268][T23671] Node 0 active_anon:51188kB inactive_anon:0kB active_file:19476kB inactive_file:214528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123344kB dirty:960kB writeback:0kB shmem:23636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13204kB pagetables:7456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 887.432977][T23684] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5456'. [ 887.448624][T23671] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 887.669423][T23671] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.700698][T23671] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 887.707040][T23671] Node 0 DMA32 free:1235784kB boost:0kB min:34080kB low:42600kB high:51120kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51388kB inactive_anon:0kB active_file:19476kB inactive_file:214528kB unevictable:1536kB writepending:960kB zspages:0kB present:3129332kB managed:2540324kB mlocked:0kB bounce:0kB free_pcp:39108kB local_pcp:20012kB free_cma:0kB [ 887.730563][T23689] syz.5.5457 (23689): drop_caches: 2 [ 887.744630][T23671] lowmem_reserve[]: 0 0 1 1 1 [ 887.751323][T23671] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1432kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 887.782389][T23671] lowmem_reserve[]: 0 0 0 0 0 [ 887.787393][T23671] Node 1 Normal free:3935692kB boost:0kB min:55800kB low:69748kB high:83696kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 887.791610][T23690] syz.5.5457 (23690): drop_caches: 2 [ 887.832994][T23671] lowmem_reserve[]: 0 0 0 0 0 [ 887.837792][T23671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 887.850795][T23671] Node 0 DMA32: 5506*4kB (UME) 4628*8kB (UME) 3254*16kB (UME) 1155*32kB (UME) 1059*64kB (UME) 352*128kB (UME) 264*256kB (UME) 294*512kB (UME) 179*1024kB (UM) 100*2048kB (UME) 90*4096kB (UM) = 1235752kB [ 887.871645][T23671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 887.884556][T23671] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 3*16kB (UM) 14*32kB (UM) 9*64kB (UM) 7*128kB (UM) 2*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (M) 959*4096kB (UM) = 3935692kB [ 887.902835][T23671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.914169][T23671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 887.924838][T23671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 887.935977][T23671] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 887.969910][T23671] 64861 total pagecache pages [ 887.990109][T23671] 0 pages in swap cache [ 887.995924][T23671] Free swap = 124996kB [ 888.008538][T23671] Total swap = 124996kB [ 888.035786][T23671] 2097051 pages RAM [ 888.041860][T23671] 0 pages HighMem/MovableOnly [ 888.063455][T23696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.069736][T23671] 429997 pages reserved [ 888.088920][T23696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.089266][T23671] 0 pages cma reserved [ 888.238704][T23702] loop3: detected capacity change from 0 to 1 [ 888.259606][T23702] Dev loop3: unable to read RDB block 1 [ 888.269243][T23702] loop3: unable to read partition table [ 888.275078][T23702] loop3: partition table beyond EOD, truncated [ 888.281450][T23702] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 888.294182][T23702] openvswitch: netlink: IP tunnel dst address not specified [ 888.362392][T23704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.372809][T23704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.385328][ T5906] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 888.545754][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 888.555656][ T5906] usb 5-1: config 4 has an invalid interface number: 241 but max is 0 [ 888.564242][ T5906] usb 5-1: config 4 has no interface number 0 [ 888.570469][ T5906] usb 5-1: config 4 interface 241 has no altsetting 0 [ 888.579875][ T5906] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=14.7c [ 888.589660][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.597795][ T5906] usb 5-1: Product: syz [ 888.602518][ T5906] usb 5-1: Manufacturer: syz [ 888.607168][ T5906] usb 5-1: SerialNumber: syz [ 888.843270][ T5906] hub 5-1:4.241: bad descriptor, ignoring hub [ 888.849787][ T5906] hub 5-1:4.241: probe with driver hub failed with error -5 [ 888.873678][T23718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.877809][ T5906] usb 5-1: USB disconnect, device number 110 [ 888.886195][T23718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.999068][T23722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.015451][T23722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.077055][ T5844] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 889.086630][T23727] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5469'. [ 889.104068][ T5844] Bluetooth: hci1: Malformed Event: 0x02 [ 889.206110][T23730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.215758][T23730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.596755][T23742] batadv_slave_0: entered promiscuous mode [ 889.716767][T23749] batadv_slave_0: left promiscuous mode [ 889.742496][T23750] overlayfs: missing 'workdir' [ 889.876228][T23752] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5476'. [ 890.572457][T23776] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5485'. [ 890.592382][T23776] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5485'. [ 890.681287][T23779] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5486'. [ 890.935118][T23785] CIFS mount error: No usable UNC path provided in device string! [ 890.935118][T23785] [ 890.960517][T23785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 891.073069][T23791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.085725][T23791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.560410][ T5906] usb 5-1: new low-speed USB device number 111 using dummy_hcd [ 891.727761][ T5906] usb 5-1: device descriptor read/64, error -71 [ 891.802646][T23824] nfs4: Unknown parameter '' [ 891.807563][T23826] __nla_validate_parse: 1 callbacks suppressed [ 891.807605][T23826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5505'. [ 891.963243][T23834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.975395][T23834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.998711][ T5906] usb 5-1: new low-speed USB device number 112 using dummy_hcd [ 892.137921][ T5906] usb 5-1: device descriptor read/64, error -71 [ 892.168866][T23839] QAT: Device 253 not found [ 892.252060][T23841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.256945][ T5906] usb usb5-port1: attempt power cycle [ 892.264938][T23841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.416094][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.428520][T23847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.437673][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.445859][T23847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.622290][T23853] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5514'. [ 892.630467][ T5906] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 892.664561][ T5906] usb 5-1: device descriptor read/8, error -71 [ 892.920699][T23862] netlink: 328 bytes leftover after parsing attributes in process `syz.5.5517'. [ 892.940923][ T5906] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 892.961810][ T5906] usb 5-1: device descriptor read/8, error -71 [ 893.089803][ T5906] usb usb5-port1: unable to enumerate USB device [ 893.116947][T23869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.135842][T23869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.756172][T23873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.789136][T23873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.892579][T23877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5523'. [ 894.062894][T23885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.078182][T23883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.080036][T23885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.088404][T23883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.102037][T23886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.112178][T23886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.753597][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5533'. [ 894.819103][T23902] program syz.1.5534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 894.869015][T23907] FAULT_INJECTION: forcing a failure. [ 894.869015][T23907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.901861][T23907] CPU: 1 UID: 0 PID: 23907 Comm: syz.5.5535 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.901898][T23907] Tainted: [L]=SOFTLOCKUP [ 894.901906][T23907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 894.901919][T23907] Call Trace: [ 894.901927][T23907] [ 894.901936][T23907] dump_stack_lvl+0xe8/0x150 [ 894.901974][T23907] should_fail_ex+0x412/0x560 [ 894.902001][T23907] _copy_from_user+0x2d/0xb0 [ 894.902026][T23907] do_sock_getsockopt+0x165/0x3f0 [ 894.902061][T23907] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 894.902091][T23907] ? __fget_files+0x3a0/0x420 [ 894.902116][T23907] ? __fget_files+0x2a/0x420 [ 894.902150][T23907] __x64_sys_getsockopt+0x1a4/0x240 [ 894.902191][T23907] do_syscall_64+0x14d/0xf80 [ 894.902210][T23907] ? trace_irq_disable+0x3b/0x150 [ 894.902235][T23907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.902256][T23907] ? clear_bhb_loop+0x40/0x90 [ 894.902282][T23907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.902302][T23907] RIP: 0033:0x7f4d5999c799 [ 894.902386][T23907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.902405][T23907] RSP: 002b:00007f4d57bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 894.902428][T23907] RAX: ffffffffffffffda RBX: 00007f4d59c15fa0 RCX: 00007f4d5999c799 [ 894.902443][T23907] RDX: 0000000000000008 RSI: 0000000000000084 RDI: 0000000000000004 [ 894.902454][T23907] RBP: 00007f4d57bf6090 R08: 0000200000000040 R09: 0000000000000000 [ 894.902468][T23907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.902479][T23907] R13: 00007f4d59c16038 R14: 00007f4d59c15fa0 R15: 00007fff9eea4448 [ 894.902510][T23907] [ 895.083167][ T5831] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 895.114197][T23911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.135785][T23911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.239107][T23915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.248783][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 895.257950][T23915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.268615][ T5831] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 895.277965][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.289693][ T5831] usb 5-1: Product: syz [ 895.294103][ T5831] usb 5-1: Manufacturer: syz [ 895.299009][ T5831] usb 5-1: SerialNumber: syz [ 895.306656][ T5831] usb 5-1: config 0 descriptor?? [ 895.747869][T23900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.756895][T23900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.766974][ T5831] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 895.777055][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 895.787017][ T5831] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 895.796052][ T5831] usb 5-1: media controller created [ 895.820415][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 895.983094][ T5831] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 895.991439][ T5831] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 896.070607][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5542'. [ 896.293490][T23935] dtv5100: wlen = 0, aborting. [ 896.434156][T23940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.446173][T23940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.488514][T23942] FAULT_INJECTION: forcing a failure. [ 896.488514][T23942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 896.504564][T23942] CPU: 1 UID: 0 PID: 23942 Comm: syz.5.5547 Tainted: G L syzkaller #0 PREEMPT(full) [ 896.504599][T23942] Tainted: [L]=SOFTLOCKUP [ 896.504606][T23942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 896.504617][T23942] Call Trace: [ 896.504626][T23942] [ 896.504633][T23942] dump_stack_lvl+0xe8/0x150 [ 896.504669][T23942] should_fail_ex+0x412/0x560 [ 896.504693][T23942] _copy_to_user+0x31/0xb0 [ 896.504713][T23942] simple_read_from_buffer+0xe1/0x170 [ 896.504733][T23942] proc_fail_nth_read+0x1bb/0x230 [ 896.504758][T23942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 896.504777][T23942] ? rw_verify_area+0x2a6/0x4d0 [ 896.504795][T23942] ? reacquire_held_locks+0x104/0x190 [ 896.504807][T23942] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 896.504824][T23942] vfs_read+0x20c/0xa70 [ 896.504846][T23942] ? fdget_pos+0x246/0x320 [ 896.504864][T23942] ? __pfx___mutex_lock+0x10/0x10 [ 896.504877][T23942] ? __pfx_vfs_read+0x10/0x10 [ 896.504897][T23942] ? __fget_files+0x2a/0x420 [ 896.504918][T23942] ? __fget_files+0x3a0/0x420 [ 896.504933][T23942] ? __fget_files+0x2a/0x420 [ 896.504953][T23942] ksys_read+0x150/0x270 [ 896.504966][T23942] ? __pfx_ksys_read+0x10/0x10 [ 896.504976][T23942] ? fput+0xa0/0xd0 [ 896.504997][T23942] do_syscall_64+0x14d/0xf80 [ 896.505008][T23942] ? trace_irq_disable+0x3b/0x150 [ 896.505023][T23942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.505036][T23942] ? clear_bhb_loop+0x40/0x90 [ 896.505051][T23942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.505063][T23942] RIP: 0033:0x7f4d5995cfce [ 896.505078][T23942] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 896.505089][T23942] RSP: 002b:00007f4d57bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 896.505104][T23942] RAX: ffffffffffffffda RBX: 00007f4d57bf66c0 RCX: 00007f4d5995cfce [ 896.505114][T23942] RDX: 000000000000000f RSI: 00007f4d57bf60a0 RDI: 0000000000000005 [ 896.505121][T23942] RBP: 00007f4d57bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 896.505129][T23942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.505139][T23942] R13: 00007f4d59c16038 R14: 00007f4d59c15fa0 R15: 00007fff9eea4448 [ 896.505160][T23942] [ 896.811131][T23944] 9p: Bad value for 'wfdno' [ 896.817146][T23944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.827287][T23944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.858292][T23944] ------------[ cut here ]------------ [ 896.864607][T23944] usb 5-1: BOGUS control dir, pipe 80007380 doesn't match bRequestType c0 [ 896.875731][T23944] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.5.5548/23944 [ 896.886368][T23944] Modules linked in: [ 896.890692][T23944] CPU: 1 UID: 0 PID: 23944 Comm: syz.5.5548 Tainted: G L syzkaller #0 PREEMPT(full) [ 896.893071][T23945] netlink: 'syz.5.5548': attribute type 9 has an invalid length. [ 896.902350][T23944] Tainted: [L]=SOFTLOCKUP [ 896.916842][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 896.917052][T23945] netlink: 'syz.5.5548': attribute type 11 has an invalid length. [ 896.927415][T23944] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 896.927471][T23944] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 896.927493][T23944] RSP: 0018:ffffc90005d8f6e8 EFLAGS: 00010246 [ 896.936646][T23945] netlink: 'syz.5.5548': attribute type 12 has an invalid length. [ 896.941179][T23944] [ 896.941194][T23944] RAX: 0000000000000000 RBX: ffff8880359a7800 RCX: 0000000080007380 [ 896.941213][T23944] RDX: ffff88805b3d9220 RSI: ffffffff8ca27760 RDI: ffffffff9061a950 [ 896.962672][T23945] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.5548'. [ 896.968214][T23944] RBP: 1ffff1100f32c3d4 R08: 00000000000000c0 R09: 0000000000000000 [ 896.968234][T23944] R10: ffffc90005d8f7e0 R11: fffff52000bb1f08 R12: ffff88802b9f4100 [ 896.968252][T23944] R13: ffff888079961ea0 R14: 0000000080007380 R15: ffff88805b3d9220 [ 896.968271][T23944] FS: 00007f4d57bf66c0(0000) GS:ffff888124ee0000(0000) knlGS:0000000000000000 [ 896.968291][T23944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.984176][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5548'. [ 896.987274][T23944] CR2: 000000110c43bf39 CR3: 000000008ffe0000 CR4: 00000000003526f0 [ 897.064880][T23944] Call Trace: [ 897.069221][T23944] [ 897.072657][T23944] ? __init_swait_queue_head+0xa9/0x150 [ 897.079372][T23944] usb_start_wait_urb+0x13f/0x5b0 [ 897.084730][T23944] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 897.090523][T23944] usb_control_msg+0x234/0x3e0 [ 897.095338][T23944] dtv5100_i2c_msg+0x231/0x2f0 [ 897.100420][T23944] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 897.105379][T23944] __i2c_transfer+0x79a/0x2020 [ 897.110288][T23944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 897.116142][T23944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 897.122151][T23944] ? i2c_transfer+0xc8/0x2d0 [ 897.127401][T23944] i2c_transfer+0x1cc/0x2d0 [ 897.132508][T23944] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 897.138369][T23944] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 897.144680][T23944] ? _copy_from_user+0x94/0xb0 [ 897.149534][T23944] i2cdev_write+0x113/0x1e0 [ 897.154369][T23944] vfs_writev+0x4bd/0x990 [ 897.158920][T23944] ? __pfx_i2cdev_write+0x10/0x10 [ 897.164112][T23944] ? __pfx_vfs_writev+0x10/0x10 [ 897.169287][T23944] ? __fget_files+0x2a/0x420 [ 897.174336][T23944] ? __fget_files+0x3a0/0x420 [ 897.179139][T23944] ? __fget_files+0x2a/0x420 [ 897.183854][T23944] do_writev+0x154/0x2e0 [ 897.188132][T23944] ? __pfx_do_writev+0x10/0x10 [ 897.193041][T23944] do_syscall_64+0x14d/0xf80 [ 897.197896][T23944] ? trace_irq_disable+0x3b/0x150 [ 897.203087][T23944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.209247][T23944] ? clear_bhb_loop+0x40/0x90 [ 897.213982][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.220018][T23944] RIP: 0033:0x7f4d5999c799 [ 897.224565][T23944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.246811][T23944] RSP: 002b:00007f4d57bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 897.256340][T23944] RAX: ffffffffffffffda RBX: 00007f4d59c15fa0 RCX: 00007f4d5999c799 [ 897.264553][T23944] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 000000000000000f [ 897.264725][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.272701][T23944] RBP: 00007f4d59a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 897.272723][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.272739][T23944] R13: 00007f4d59c16038 R14: 00007f4d59c15fa0 R15: 00007fff9eea4448 [ 897.272775][T23944] [ 897.306818][T23944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 897.314497][T23944] CPU: 1 UID: 0 PID: 23944 Comm: syz.5.5548 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.325742][T23944] Tainted: [L]=SOFTLOCKUP [ 897.330314][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 897.340853][T23944] Call Trace: [ 897.344253][T23944] [ 897.347208][T23944] vpanic+0x56c/0xa60 [ 897.351204][T23944] ? __pfx__printk+0x10/0x10 [ 897.355826][T23944] ? __pfx_vpanic+0x10/0x10 [ 897.360694][T23944] ? is_bpf_text_address+0x292/0x2b0 [ 897.366353][T23944] ? is_bpf_text_address+0x26/0x2b0 [ 897.371701][T23944] panic+0xc5/0xd0 [ 897.375523][T23944] ? __pfx_panic+0x10/0x10 [ 897.379970][T23944] __warn+0x315/0x4f0 [ 897.384130][T23944] ? usb_submit_urb+0x1052/0x18b0 [ 897.389482][T23944] ? usb_submit_urb+0x1052/0x18b0 [ 897.394562][T23944] __report_bug+0x29a/0x540 [ 897.399102][T23944] ? unwind_get_return_address+0x4d/0x90 [ 897.404850][T23944] ? usb_submit_urb+0x1052/0x18b0 [ 897.410085][T23944] ? __pfx___report_bug+0x10/0x10 [ 897.415463][T23944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 897.421483][T23944] ? lockdep_hardirqs_on+0x7a/0x110 [ 897.426895][T23944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 897.432850][T23944] ? stack_depot_save_flags+0x3f3/0x810 [ 897.438583][T23944] report_bug_entry+0x19a/0x290 [ 897.443544][T23944] ? usb_submit_urb+0x1114/0x18b0 [ 897.448578][T23944] ? usb_submit_urb+0x1119/0x18b0 [ 897.453626][T23944] handle_bug+0xce/0x200 [ 897.458005][T23944] exc_invalid_op+0x1a/0x50 [ 897.462623][T23944] asm_exc_invalid_op+0x1a/0x20 [ 897.467571][T23944] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 897.473317][T23944] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 897.493127][T23944] RSP: 0018:ffffc90005d8f6e8 EFLAGS: 00010246 [ 897.499382][T23944] RAX: 0000000000000000 RBX: ffff8880359a7800 RCX: 0000000080007380 [ 897.507475][T23944] RDX: ffff88805b3d9220 RSI: ffffffff8ca27760 RDI: ffffffff9061a950 [ 897.515542][T23944] RBP: 1ffff1100f32c3d4 R08: 00000000000000c0 R09: 0000000000000000 [ 897.523694][T23944] R10: ffffc90005d8f7e0 R11: fffff52000bb1f08 R12: ffff88802b9f4100 [ 897.531843][T23944] R13: ffff888079961ea0 R14: 0000000080007380 R15: ffff88805b3d9220 [ 897.540013][T23944] ? usb_submit_urb+0x10a3/0x18b0 [ 897.545146][T23944] ? __init_swait_queue_head+0xa9/0x150 [ 897.550708][T23944] usb_start_wait_urb+0x13f/0x5b0 [ 897.555766][T23944] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 897.561365][T23944] usb_control_msg+0x234/0x3e0 [ 897.566168][T23944] dtv5100_i2c_msg+0x231/0x2f0 [ 897.570966][T23944] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 897.575847][T23944] __i2c_transfer+0x79a/0x2020 [ 897.580905][T23944] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 897.586925][T23944] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 897.592846][T23944] ? i2c_transfer+0xc8/0x2d0 [ 897.597460][T23944] i2c_transfer+0x1cc/0x2d0 [ 897.601988][T23944] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 897.608070][T23944] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 897.614251][T23944] ? _copy_from_user+0x94/0xb0 [ 897.619299][T23944] i2cdev_write+0x113/0x1e0 [ 897.623937][T23944] vfs_writev+0x4bd/0x990 [ 897.628372][T23944] ? __pfx_i2cdev_write+0x10/0x10 [ 897.633409][T23944] ? __pfx_vfs_writev+0x10/0x10 [ 897.638287][T23944] ? __fget_files+0x2a/0x420 [ 897.643095][T23944] ? __fget_files+0x3a0/0x420 [ 897.648069][T23944] ? __fget_files+0x2a/0x420 [ 897.652784][T23944] do_writev+0x154/0x2e0 [ 897.657136][T23944] ? __pfx_do_writev+0x10/0x10 [ 897.661924][T23944] do_syscall_64+0x14d/0xf80 [ 897.666522][T23944] ? trace_irq_disable+0x3b/0x150 [ 897.671607][T23944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.677773][T23944] ? clear_bhb_loop+0x40/0x90 [ 897.682548][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.688451][T23944] RIP: 0033:0x7f4d5999c799 [ 897.692875][T23944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.712920][T23944] RSP: 002b:00007f4d57bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 897.721521][T23944] RAX: ffffffffffffffda RBX: 00007f4d59c15fa0 RCX: 00007f4d5999c799 [ 897.729595][T23944] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 000000000000000f [ 897.737771][T23944] RBP: 00007f4d59a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 897.745756][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.753735][T23944] R13: 00007f4d59c16038 R14: 00007f4d59c15fa0 R15: 00007fff9eea4448 [ 897.761723][T23944] [ 897.765579][T23944] Kernel Offset: disabled [ 897.769917][T23944] Rebooting in 86400 seconds..