last executing test programs: 36m15.70678559s ago: executing program 32 (id=916): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000f4c000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(0x0, r1) (async) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async) sendmsg$kcm(r1, &(0x7f0000001800)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000003c0)="8c313c8978f57a8aa8f96c0c743cad17542a255b00dc168b95f754af79de7cf00322b3bb9ea0400ab5fcaf5ef35d1780c61aff3e840fea2b6317732ec9f3b1c0538a50e12a72f7cb889c5f5b5ada3c67272a0d529f21bbb67081e7ae94194690cec8f6b715b40300ae93e8f415c184ace2b3b83d0d08668bfe0980f716eba9ac5597411a133435b566209cba7228a162e5a7ce800b91c78470aebda3a61f28b2ca98163af8a181fea8359f2f2256e6557d98bd88bd7a4be99d8ebb608278fff4e209024387ae26e6566c654c747cf250c82d8a9f", 0xd4}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="4a6415c944", 0x5}, {&(0x7f0000001500)="8913d18809c282e1b72a41e374c19209d820b1a2e528ca6e8f37afab02914c98ce4cfd", 0x23}, {&(0x7f0000001540)}], 0x5, &(0x7f0000001600)=[{0x20, 0x103, 0x0, "0b6ae18de20694d173"}, {0x28, 0x102, 0x8, "d661f085a765d099c27f075e98cca4ef6f3e7767"}, {0x108, 0x104, 0x10000, "2051a2973b7495634ebeac010ec3b08a6b03a23e520483cf7937bfc849fadb44a2028c5acfbb4838c1c928f382045e4874e80996e0104122d7cb8c64653e9796c860276c3d0ceaa993baba2807df9a98d6292eb179427e732011e146929567229ec9951bcf9c0dcbf0c855f3e637188c7c0a9ef6bf0e9b85d4f326d65368ee84cfdf5be679d675090aba63db75278c78a099de5a8837c9fa69d92c1737b7dc538e11b1866f1f0fffceca4767b3a70caa211e28f94dc9639c7b6552edb3eda3bec3dc62befbdd8a2bb10c99a860589409cccd89615314fcef44d582cf5fc3189edb8e95515a81885cad627fdc61ddfa850e6d0f"}, {0x88, 0x10c, 0x8, "a3a376180c4b1748baddb76cf41ec78f974c0c490474727441f535732854affb35eabdf15566b572641557b2e21ef87c8ec00d06a6905143083559fc7694f304e76fcb7f3c441217debe05e86a1f0e026d17d8c0f0f4bb966f5823459c054be16bb4547d16ee86f64d02e5d85a67f9d5e701fe"}], 0x1d8}, 0x40050) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) (async) msgrcv(0x0, 0x0, 0x24, 0x1, 0x4800) (async, rerun: 32) write$P9_RVERSION(r3, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.u'}, 0x15) (rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3}, 0xffff, 0xfff, 0x5, 0x3, 0x0, 0x0, 0x100}) (async, rerun: 32) syz_usb_connect$uac2(0x5, 0x8c, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x763, 0x150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x3, 0x1, 0xd, 0x50, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x8, 0x20, 0x98}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x6, 0x1a, 0x6e}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x101, 0x5, 0x3, 0x2, 0xc751}, @processing_unit={0x5, 0x24, 0x8, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x82, 0x2, {0x8, 0x25, 0x1, 0x81, 0xf, 0x9, 0x39b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x6, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0x6, 0x1}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300683a73683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 32m13.263634422s ago: executing program 1 (id=2338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9", 0xdf, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd", 0xe7, 0x5, 0x6}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb0993", 0x41}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15", 0x75}], 0x3}, 0x8045) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') syz_ublk_setup_io_uring(0x1a, &(0x7f00000007c0)={0x0, 0xfffffffe, 0x2, 0x0, 0x1e5, 0x0, r2}, &(0x7f0000000680), &(0x7f0000000040), &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x52000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 32m12.51508727s ago: executing program 1 (id=2341): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="f78d9ca58f06ff48ec680e835e75dd8f93283cb0a2dcaaa4b234ff4b0f3df4f6acb709814f10551e1dafebdc2eb668fb61299fde349f63698301175108ebc6e7784a273fe398c930c8d00fb927c0608d5e6bc7d2d936c4e22e695bb60950153251befe43ae11dc1f49c63b1d59488d3b942f92b30e58f1561a56eab971f0975f50caa1f2d0a3fca865956cadf8b3a0b457", 0x91}], 0x1, 0x0, 0x0, 0x4880}], 0x1, 0x150) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x420440, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) (async) syz_clone(0x89046000, 0x0, 0xffffffffffffff3f, 0x0, 0x0, 0x0) 32m12.282005485s ago: executing program 1 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x28000) 32m12.156428013s ago: executing program 1 (id=2343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x33fe0}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) 32m11.991818644s ago: executing program 1 (id=2344): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000040)=[0x16, 0x1000009, 0x1002, 0xffff32eb, 0x8, 0xffffdff9, 0x2d7b, 0x401, 0x5d, 0x5, 0x2, 0xa, 0x6, 0xce, 0x2], 0x0, 0x4000003}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001a00010000000000000000001c"], 0x28}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 32m11.851561618s ago: executing program 1 (id=2346): syz_clone(0x4e205000, &(0x7f0000000200)="63c655e72b4b35d5c59db40ad1da8c81e66d8f511ee69a9903e9ef5d2f9934d72c8f5a5e284d344f771aa5dc73a4d30cdf02e41afb0f190c491e593e8fb9c96f5f1ac9fab584fffeb32456ee7ca8fceb41aab1a75b2436fa61d34d1a384a3e4a807d69a44928c803f1488301519497cf659cd9cd0db870b9da97ffb5073a690870e0f60139f2e04cafb34b60ba73115b91d5c63c311be1727b0706ac19a318527e94dc267491c1102fc6b3e791592969019fd111ce4078", 0xb7, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="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") r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) keyctl$setperm(0x5, r1, 0x4221030) keyctl$get_security(0x11, r1, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcl726\x00', [0x0, 0x0, 0x7fffffff, 0x84df, 0x2f, 0x2006, 0x126, 0x8, 0x9, 0x0, 0x7, 0x2, 0x1003, 0xb, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0x6cd0, 0x40010, 0x3fffe, 0xb, 0x4007, 0x746f, 0x4, 0x5, 0x408, 0x2, 0x0, 0x7fff]}) 31m56.644357922s ago: executing program 33 (id=2346): syz_clone(0x4e205000, &(0x7f0000000200)="63c655e72b4b35d5c59db40ad1da8c81e66d8f511ee69a9903e9ef5d2f9934d72c8f5a5e284d344f771aa5dc73a4d30cdf02e41afb0f190c491e593e8fb9c96f5f1ac9fab584fffeb32456ee7ca8fceb41aab1a75b2436fa61d34d1a384a3e4a807d69a44928c803f1488301519497cf659cd9cd0db870b9da97ffb5073a690870e0f60139f2e04cafb34b60ba73115b91d5c63c311be1727b0706ac19a318527e94dc267491c1102fc6b3e791592969019fd111ce4078", 0xb7, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="7b38ae466bfa760e220a9475093bbfdc813d8d61bfa7f572e247a9999da7341295c97fa7e1cb121fca89a4f51bdedc61c6556fcd05a8c4a1d8dcc1020406b1d7414015281ff9e882452390865bc8a9f347a01bc939f51e1f06571142f1d799e67be7641989ff9dcbe2b98af7af7cd8070c57380f80531a7b4c6426618dbb22100acf04328f61158258b33f2c77003bde633959bcfdb18c0ee71010fafa96fe593f1fafa3a91142cc04caec6450eaad443c1fd9fb85ede70ab2e25ad0a2fd3ebc1dd72001a3c1697caa9d62e51cf0138b7f1b625a14e0dfae3d326b8fa1196a5ed71606ce26b03350314d10885b2b772c661a4dfc29a7e637e05e99417998621407b0bb6c8a685040b83687e1ff6f155704e461cea3596be459723c47bba7c5789324da276f7d6b4c1c7abc39450ef878beb7ec7002ba4a939411f086125c6dce753e8c20e7bb21d1fc39c5eff83684cae6c03769608e1467bd4dd8ab19a31d5e185730413e5a825a86b99a5691835f41bc9c50f865bd90ffb9cf11beaaa540ce9e314746252489fe8d394d160610ba6927aa3fea9f1cfb1e6d8e81dd476e8370eebff1bd835299b7591de5d598afa0d033cba19610396261b29e64ef4e3f48dcde71f7058bdf4c1058e631d1ea47dab160f1e3000488db658bc4a9ab03752fa345488ac174dedb94323d301fb3f808e706d4014878d8588e746847725ba845b076a564ce79934c2f5fa8628b8afc99b3a99e7f200963355ef829f06179ff241d916decd2ae9a5aa4d739beecfb07077feca5806bfd35b99d68feec38404cbb111bd60a6b04dee1bf2456211f4cc644fe279ea88dbfb9ccf01275dade3facae00029407a263d69c377151c3e1e6d9809f9ba5b9efe834cc64a22f5238fdc595f40b3c4331c478dc5b885dc42d9d870606240eff4deee9c561db4f3c521cb8e8fba93cd35fe3889f4141fe14dda6f061ca1109882ab2a172a00f6a5fd7ad32951bb897e52a95ae04451a3d96136b2646543416807859a55a98747f48be8d0d58e581642473611a0a3419cbf020ac3f5492dd9f04877301ecc3a543382bb5b2514707b678aa59baa55c5961cc975c09ed82d050a1e9bb619eff11ba790489c8b9b78ac9a023e272dfdffb5a0e0c528c8aa338f3c801b38e4898d743c860056565df96f373a71c3085ebea78874763b878212c69d33313eb15c11ebe989bb7afda4cafe30a32f510f985269a57d94d5503b2e56463aafbcfbbf5a9ae997e88ab5113c475cd286c5480e9de5e689846f63e53acf7ac45ec0e0b716d79e3d7890a567c45b02fe7080fbbc29aa13e3489a182cebce1a633edf8f05c8f1aa92e81c34f7921414ac78534fcf859a9c1f15a0d7352b8088f4ae826adbd142cfb41b8acf5e5867c5da59ce2a3e8d2c2954fce47778090c04ec3905d3878c29aa8378f2fb04252ce5c87da0cb945e08a18d0da56828513a94c88e3bc1b58fbbd501bd7a5e5cbf3c7562cc90871f6e6428c634c637a19a86ec9a4abbed86ba3a40512828130d0ecc2b43cdf8e237bd608627b580d4d6cb4973beb7f74bffa5332ebe2f0a868efc791374dc7601a756a80492297516383ea2f0413952a6ef2ae16fcd0d872729420d23712455674922e689a9485902b3eb944e0cb5d26f1e8e7ca97a9e50108592ab662b124cdce30c78e99309dce087e1aed3eeea0d500ce37747f7ee137a18563c3830a0a892f61ae52fb8f070163ea1fdb3133fb52999e28ace1bfb6f0027e8efb3a54c2c582361bd95998c8bfb21af385c94b8f62447e380e15b107b64221bd6320324c2f9e7a77d7784e28f0fac14bdbf90e294cacc8b04062c6026f723a1cf8d4e237e801369592d0bc421ef91ae2733fb0d124a0e6762e001971a448fb7ecde12abfb6f3f13694c5b151d6140d6ff14a283ecb51c8be0e34182eaa5454222c4294a625d1195c20ca47ebdd2a383f687bf3ae655f2b30e384d2eb5009ee4d8a52e786740a694cbc224f5d6316aa87e8d3eaa08dee4cd6f6c9a0faeb6fc2312cecfdfce311dc616f12fa615d2334c2fdea759c3a8fecee602a51e0781ab761251f33ff9a5a26688f4ecdd4e4ea87e9c66e7fdac57fd91048d1843b59152860ec039d877c3b78fd914428b5f444ae763b412662ce36efaffeb0e2a21e3bf8ca226cd25b4a24de1f76429e528a85ff0263970d2a3d8c2d942005f912776a1c0296a27e43254506727131bdd376c22a43ac42bc09e4a6166290d3896838037f963f19dc93750d72a80b7ecf60e825d8bccc917187f72fb58cdecc54e1011866dccb782534f7113253d7df0f6eb02f68fd6fb52650c27dcdd6ac3ba2edd1a91dff969444fb1f5c456ebc47d036656ab25c162ffea55fdfae0e52cfa5d08e33026d3c25b279c309c455387221ae475723596c186c71bbde650f4c5103a2c94ceac5fa4ab2d5b7affa6c3882c2a243fc05e76638b45e6d8c083d655f263f46790a5921d8b3d54e58ad42aadc57146797ce6d41b760c479642342943a2a29bd4e6e65d8ec66f431fffe7e482f4eb1ab9d56e508110da75b185c539ff523d6f40fe8c2856ea197599f3a8090b00dfb756289f734ca9ed1dcc46db25430e8add5f450267d0005818b1ac1efbb289c481b52f705608ba83fd7f44580bdbd8685a309e23cdcfedda02672a68d052df545dbc26441d6daa172e1bfc173b59de17ee0eb4c60d152ec0f51f9135fa6697ec0e6ec8c913f4766699b05d2746ed5b8757e61e87f3e41eeb499511643d304207be49ba3f3b865637ecb8bc7d38951a0cc039c7a509c01be9143d43a85d9943de0cd028c5241edf91735e3e0def10b6d12ac314a8f394dbf2969d7d9c560b4bd8a55f101f22c0b7941c49b2ea40b4bd7428429c9fb593eb343d555c592558e9c874cf2116c504e89a0831dee5ea8990fc7cc63fe7b053c10a7018281eca16cc908c07bf9ae310548661633af825215eb67109ec276fad2511a0d55c1fff77ce6ddf1836a8c68a363d4b77acac09f9ecbbb84131c1a7132e6f364b614bcc35c10100aa20c46d3ea291b2d5407c692fe3f6caff8c5fae4551dc7b7e73233a4737058410a2ef8a38e5cd0b5675ba33330d1b6c36682ccab1cdadb760eaedef33e36a19a571eb510afc9e6e44edef50f28e621934b786e6cdd9a5a8ffddf9eb298bf51fb6b9ae905c351810f10abe6c17b810f8aeb0223e785e818737b519c25c241d37d5e8e61bf37f31f0918e52c9405854bbe585e3e18df853c4a89f067172df91f9aa7833513c5b06f223a6411e4583166d437b80bb70224404f7d8a26e06a3c52c3d14a64b4ba9a7e330abfe64cc8ab1082cad41a87e4da97bec3755a5fa92a53fedf0b042e5b96ca7f3098553a21a5a42b60e94379ce9794d3b6f912efed507658daf9252b7eda420bc009b3b2e7320420f36592b5748183ba67d49777a0fab5cf39eff9c48326fa8b259a86648d20464c9230abf9a80fe7eb775717cccf79ec08bb6be357535bb1cfbc8f6c9c79c3daab7d93fbb4ee50f0598adce322046dc2e4f78d4e480e4f7c1a5171943c94179f3c47cb6c3cf1d2a37a226f52503f3c68fb167c416a4eef841e46efc072de37c03566decca2aeec8c701f5bb931b5806ae7614c17a37b5d50c8115c7ab8b7f9fcbb14f71f36d256f3445cc03ea52239ff686089f9f8b0195a23305b7b314e7de9840d6183b273e304560dd01f9b0952010184bd012600269f32ed6880a536ecae7cc8da6442e29f6c2044c3ede4d6a8f2973ccd3992026e1bb1c214a1acffb41cd95755fe613c25dbc48cacaa1f7bf0f28019a19697fdda97b669ea26ac63070a5492afeacc169e334f4c2491024a6b12cab71e994f5c7dc762b538f6b6988bfd0025d5dd163e47bf67e47952c8ac89ce7db7c466e5de097d4460516fe262711dbaaaf271a366d506634c851608adec58aa6b406efa98c2880bd6c6a38221f600ce7ee3275e44296693cc24e3fea980d217541bef7c6c94d0db4e156be117d714b55fd0b8f43ed5ed4ea7b00f127709f46755fefde288536603ef4381ba2631c3ea6a84717fe1c98dd575cc813d7222fa47126e20bba592ed1c3b3964242055115a60c2d5e0ab3c702823547fad9f558656fffeee29f252c1a68455a846163c7d294f48853bb743be983ce8f50be95278ed23bc09b8fcbb59e68473f873cb8b72bd5534297b7195995b2cc349d0d6b606ea5f96de4662e11d64e7a25fb2a8ef9673b3fb9767e7f1517d5bc828e4070ee3d7f94a015bf081528071972b3afbb1a9c1e34979da6661c3e518f7c80fdc184156aaa4b7f4ca60602cfed2e9a329f339eadb173917097fad0062ee9372fb0efebb3a613a7bb9f6f9222238c15cc2842b50ab4fd0ddcc5cee5ab732386f4fd9bc0b42ae19c743baf03fbf3ceda42917463c33c23aefb52bcd88734293c1f68e2dda67aceebf6e66e7d4c5353f5f7532576026df11cfa731030d78f56a1aa58a3c72a67766513efc0582859d0d37a69b119b4d1f35c080e5961e67c2fbca7f15a5ddb3494036551167eef4b71a4488d2d6864fa76e7d9c001166b6a30e02c5cd8df67b565a29a110c886c3ac6980bc8532cec4c3d8c0e5ce016127d587355b9b86d341ec8e9ad502a31391fc75279923e83a2df8ab3e80cb45df2d1cb7a72aee32c36379e077b5fe182dcf3fa42b17e76cd3069570cd93fdb0ad518fd5340e3cbdf10974679695d0e2633858a42bfdf90e2390177779c2795edd9c75016de59001e3141135aee749a04eab26149ae16c9466feb4527f9c4a1d3cc5d5449b9082c2b27ca2bcd2b13e36a44f16c4b5b7f65dabbd8e0b33e9d5fab4f9a833e8e0474aab7c155b7d64770c5222e3d781f1b93f9c435f6ba4262c4aac3395b084419b0367994a02bd14e6e98661e97d22fc43ff106225c922ffe3e6dcbb76f58d66831ae9f5706213108a1d4d9f1bc82e57d627edb9513706661239ebdb435a08d543db32ccb3eccb12a77586b7d01b9d72d8c4d51cc62845de939bdffc87085e7912110cf637b1a8f9dab2c952268f83339dac87f78cf5520c4f5944f0180f7be21dd1cb69e4dbd2afb061974fb0427d23a5af71eda1db4e87e74e3d2c603dac3ae1d0086d927267fa15facf75c7affc1f8e52e42d8eec9b0fab2eb9467436f0b322c23e0ab5a81ce0fd771c0faf796d8eca6d9dc9b6bac6525f3e9992e289c0c3b6b2980df80ac42ae3f81cecba04f56c0b98f5fb4cf328da52d2c4845a53265badc5814b5c26af5e176c0ae92039d99c87d83629d43ab7e9e26f5dc8f5ab73b1291d66bc51e43889e7b7ab12fad56ac0bee440c9063f0a45139795420a356db89449cd651fa276026b94bf89e87a01a3e7df285101736db1a9c5dc49b39a9bb217b6781f5dfc7d564682909617cb9131509860b365b44ea80b40686d61295450c09427de52b69763d4d61df05a99cc0015ec968f42a5c0a1b011896dd7e69d18a979f15e7b3bb1512afae03aa187d7cf221cfe0119d0f33340f428eb2d6fdaea5152b65e0d05a29a28d8fef9eaa04dd720f5c9d47a823b1990aac8abe4e388a94cbb7712304c4f9735c276f1360d87b9d2d943af8571cd3e89c19492ee28e9866eefac0630fadb717ba07eea98f53493ef14c3359ddcc2fa7c5331e02dbbc95c5f3955d9e5a7ebf51f86be738daa626a0fd4daf5c784ce0d839bb05445e3b6b20a6a60562484a3815266ba781a8c2727f8318d2cd0c4c9a24d18c754396dbb9ca74e787353bf88539a3026c6c6d596deb228189de8") r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) keyctl$setperm(0x5, r1, 0x4221030) keyctl$get_security(0x11, r1, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcl726\x00', [0x0, 0x0, 0x7fffffff, 0x84df, 0x2f, 0x2006, 0x126, 0x8, 0x9, 0x0, 0x7, 0x2, 0x1003, 0xb, 0xf, 0x10000, 0xffffffa8, 0x7ffbfffd, 0x1ff, 0x6cd0, 0x40010, 0x3fffe, 0xb, 0x4007, 0x746f, 0x4, 0x5, 0x408, 0x2, 0x0, 0x7fff]}) 18m46.076229888s ago: executing program 2 (id=7316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000af5ff0a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a32000000002800048008000140"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) 18m45.917336887s ago: executing program 2 (id=7318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r1, 0xc71, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="4bb9000005acbd9d6e0d3aa62fda13954da142a81ea4335eca5bd3052c0f7bea74d63b4b769989b6e5024d9b2cb231d9c8c313dfb45d5ffaba04fe65fd371315fdfddd9607e465fe95bcd6f0f01467e9b334044eca20539f5a0952f32b2bb4e6e656dc797d36ac2f7f2a501e191bf5f46e2621f858d3519b15b7c38a77e2227baa79ea0dcb47a4342a69f13ac1965e6ba37b31bfacf675a618660934badc67c2"], 0x14}, 0x1, 0x2}, 0x0) 18m45.586429553s ago: executing program 2 (id=7321): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000200000000000100000e60b"], 0x20}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1) 18m45.071962717s ago: executing program 2 (id=7327): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x356, 0xa0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8, 0x3e000000}, {0x8, 0x4000008}, {0x0, 0x8}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x400009, 0x6, 0x0, 0x17, 0x1, 0x2, 0x5}) 18m45.030084262s ago: executing program 2 (id=7329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="3f5e97", 0x3}], 0x1, 0x0, 0x0, 0x2a048090}], 0x1, 0x2402c080) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/4097, 0x1001}], 0x1, 0x772, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000240)={0x0, 0x11, 0x6, 0x49, 0x0, [0x0, 0x0, 0x0], [0x3, 0x7fffffff, 0x7, 0x5], [0x9, 0x8, 0x9, 0x9], [0x2, 0x1, 0x1, 0x4]}) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000240)='.\x00', 0x60000726) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f00000002c0)={0x0, 0x1, 0x1}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x20004, r8}) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_GEM_FLINK(r11, 0xc00864d2, &(0x7f0000000300)={r12}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={r3, 0x800, 0x0, 0x2, 0x3, [r4, r7, 0x0, r12], [0x66, 0x7, 0x100, 0x9], [0x9, 0x2, 0x1, 0xe], [0x9, 0x1, 0x4, 0x258]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7ffb, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0xc, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x5, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x2000014c, 0x60a7, 0xf, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) r13 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r14, 0x0, 0x0, 0x800) ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000000180)={0x1, 0x4, 0x3d, &(0x7f0000000080)=""/61}) syz_usb_control_io(r13, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000002800)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m41.657570637s ago: executing program 2 (id=7346): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x30, 0x6, 0x0, @scatter={0x0, 0x2f5ff, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) 18m26.339683705s ago: executing program 34 (id=7346): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x30, 0x6, 0x0, @scatter={0x0, 0x2f5ff, 0x0}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x8000000, 0x0}) 17m21.630212786s ago: executing program 6 (id=7638): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="d9d8c1148d6bf9ca78c1a569feeb08c7", 0x10}}, 0x400a0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000880)="1a", 0x1}, {&(0x7f00000001c0)="79e1d97d9d9ea16d38d920317e20e9421d5409a5ffe6a1f0211526c9abe9d66a7c52a92597a5f86873c127cd9f5033a16e6f9f24787d6b7e957ec4b21a4bfb226c31eeedb5d1a550324299fd820c0ebfd226dd3c219d8cff8e77b64b3ac63d18559eb5b7f550c5a0088a53b97508899108297171f3e65b5ea3b41ba16bd6f99949f5f132315ad601f9c5fb7747856171848386c2f131fdb2e2988dddd9301d4b67b190339346c261d75c89080b6f29abc2451fc6371c8c49ce291479cbe8f3a77db67f106adc4034642623449065d4486d70ec9752027585ef46a5c4640b44f18d03f3c58454ecf6", 0xe8}, {&(0x7f00000002c0)="f6a6321f3e4cece0cfa8cccbe0e9766304ed495e9df5573b3d162fb7300a9a4be5290aab3a8746a3b9c362bc5843e7115ff017e9cbabcc992d9b18c89e24d4fb5c334d98db3006f8cca4ece580795d51d6c9395ac81dcea96f0b8b837e6d41e17235a091a9235e63e24e3828f221708ff90815ae83640f78c80eb0d8e56efd9f93", 0x81}, {&(0x7f0000000380)="0b359912b57dfeb4e8d25a03370d0f98100c7a7d1da79181462dd7862765a39dd1099d3ab178bf1a7c9bf90b5be07939c568bf19ad9a1df0d9f8453c31ede522922d204ee7d2f561c37989cec227f8748ca4af684b4fe35366fb152a551f2c76a21a963a0ee9949c06ac2cff4790d9b90205140007e20a61fd5641bb1fc4d23e6b8ac7bb784b5001ec35de894e354530806716fa144208e5b2754d94d5c8494da158b5f88f3681e026d4c963c6095e481011", 0xb2}, {&(0x7f0000000440)="862370842d814b6ecea82ad16aa081b231655e4fd3bbcfdf18ad0ed9bd4df96aa8ef28ce5255c3773a124875501ea8e880068e0dbf015b776c04890b8bfddb0081f0a660cc41a10e1af157cc", 0x4c}, {&(0x7f00000004c0)="78afafa0fafb95c74b7d02912f5edfbea95b756728a9f928a28740b00780ab9ef69b121016c5f289a17361c60a02f88bf0821e0f4cbe34f68e68ef390beb46fb3a4b261c7e50af9077f82afd7731e3d744379895694dcd4244cab08a7cb615215b32ab41f71b16b7962c18c6bf980cc96b68c09695cba7a347cdf24b3d858cd7f238dfbc4496e41f944fe11da61c1afa4fbe0eb1d949bee695be5ef1f3c587dc3230cf52b4dc8ac65fbdbcf1cb57d7c5636c76b544", 0xb5}], 0x6}, 0x0) (async) sendto(r1, 0x0, 0x0, 0x40811, 0x0, 0x0) (async) r2 = syz_io_uring_complete(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0xc14, 0x0, {{0x20, 0x4, 0x0, 0x7, 0x80, 0x64, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0xa, [{@remote, 0xef}, {@rand_addr=0x64010102, 0x100}]}, @noop, @generic={0x88, 0x12, "a23e1d3ac9e9cf5dd3bd412a823c318e"}, @cipso={0x86, 0x45, 0x3, [{0x1, 0x9, "b8b58ad3150c79"}, {0x2, 0xa, "4420d12b5c07810d"}, {0x1, 0x2}, {0xf520681693583724, 0x7, "07dfe68c33"}, {0x2, 0x9, "087c61714c409e"}, {0x2, 0xb, "75f5b0f9ffa186f20a"}, {0x6, 0xf, "b1550709913a98a3e7bc42b853"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x7, 0x8, 0x78d7fd3, 0x5, {{0x34, 0x4, 0x1, 0x2, 0xd0, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast2, @local, {[@noop, @timestamp_prespec={0x44, 0x2c, 0xd0, 0x3, 0x7, [{@private=0xa010102, 0x6}, {@empty, 0x9ba}, {@remote, 0x9}, {@multicast1, 0x7}, {@multicast2, 0x7f}]}, @lsrr={0x83, 0x17, 0xd0, [@empty, @rand_addr=0x64010102, @empty, @private=0xa010102, @loopback]}, @lsrr={0x83, 0xf, 0xd1, [@rand_addr=0x64010102, @multicast2, @rand_addr=0x64010102]}, @lsrr={0x83, 0x7, 0x39, [@broadcast]}, @rr={0x7, 0x2b, 0xa3, [@dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x18}, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @private=0xa010100]}, @rr={0x7, 0x2b, 0x8a, [@multicast1, @rand_addr=0x64010102, @multicast1, @multicast2, @loopback, @multicast1, @remote, @remote, @multicast1, @private=0xa010101]}, @end, @lsrr={0x83, 0xb, 0xca, [@multicast2, @dev={0xac, 0x14, 0x14, 0x37}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000008c0)={@initdev, 0x0}, &(0x7f0000000900)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x400400c1}, 0x10) 17m19.805886726s ago: executing program 6 (id=7640): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0xc, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fe00003, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x2000, 0x34325241, 0x0, [r4, r5, 0x0, r5], [0x2b8], [0x0, 0x1], [0x0, 0x0, 0x100000000000004]}) 17m16.084695984s ago: executing program 6 (id=7641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)="7daad44510df7dc335e66c0e962a5ce64120016d3750175c423665dfd246d084c8e400b6c006f6c74ec8219e7bd29464ba326c26805a2b900e958cf88ed55de49f9400fdcf60ff1066757c78148f12b72720a63042cd274e883c9ccf0169c55d8fdbac47fa9acbfe3178cff055c59f582b1d64628b896898b9734298b75f7d23345e45e62e3a70e77d59a60afa4b543eae17ac165b13f818b7805741425fb718d691dcb6c67f51aae4dcc6875ee298353ecb", 0xb2}, {&(0x7f00000003c0)="1f125f61cc5d556d973ab358911b8772f398c25f5ef41d1ce58a62ea8e5cb1cb411cd89d45dd3267f001ba6e9698e9cf32f12d8ba96abdf5f2b0e86d30bb5c7c924be08c4fb3de1c6f7839fbaa6b86869b1263a76297b0639c50e4840c698d2778d4914ef6d3910359738c62e93f58722bfd7bbea8fa9c97ec3c7a3e1cfee6920b38e1cac0e47fad4cab9a77c66b91332406c46e324e50fd6751caf659b9e1278e47256ff7b3dd494ce5e06bb18eae091e1cb050", 0xb4}, {&(0x7f0000000540)="ead66fa4e8be0d4d9690c554a0e30356a3959c7833394e13d60c3156f904da0150ef968210846cc953b76c516564312c0559c23d5530acf640f3f2ad9858cccb07179be5", 0x44}, {&(0x7f00000005c0)="8518fed30943e2faab84a71895536356ac933c1b0b2b42a0f0b9f53a909c994f9043bd76c5678e951e31b2a38823719e1995827f5ec43e308ab99106eb1b9b078594d4e684a30561776c83cb09abdff93b9e80fe626f5965d0f7263a1d46d231abd76d854685e1bd8f325184fad326926fff9c3d441bcf95ef92d288e5ae7e0ca54e65a42e29657398c76c9aab51c00da1afe5b3069eeee1d530b4aa1af242f50b59e5be611df62c19cf75cb9fcac1a4527c0bdb054907a63227016d1ec5ff217b5ee6b6", 0xc4}, {&(0x7f00000006c0)="7fe0e46cdaba2de9c97af343e32d7a696d98fed445c92f8e7c99c1912996f2482cb694c2e7b790cdc35f098252d7a10c7b20ddccef66077eb4c38bc0c425183a20bfd609370e9d6381bfb3e2d3cd485fbae4376ab7d116dac0a023f549604b6dbdb29becb16a709a6de2859d96b5386a94c0cbf259", 0x75}], 0x5}}], 0x3, 0x2090) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x3) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000380)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x184c3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = fcntl$dupfd(r4, 0x406, r5) ioctl$VHOST_NET_SET_BACKEND(r6, 0xaf01, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="110000005200010004000000000000001c"], 0x28}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000d777f329055e95a6e26ceb1000010000000000000000000300000a54000000060a0b0400000000000000000200000028000480240001800b000100736f636b6574000014000280080002400000000b08000140000000010900010073797a30000000000900020073797a32000000001400008d1100010000000000000000000000000a"], 0x7c}}, 0x20008000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x5f93, 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x7, 0x8, 0x6, 0x9, 0x10}}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001840)={'vcan0\x00'}) 17m14.289796465s ago: executing program 3 (id=7643): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010102, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x20000000, 0x0, 0x2, 0x4, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0) 17m12.680536328s ago: executing program 3 (id=7644): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x34324258, 0x8, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x4, 0x8}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x40, 0xd, 0x1, 0x3078182a3427730f, 0x1}}) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4}, {0x0, 0x1fffffffe, 0x40000000007, 0x6, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9071, 0x0, 0x9945}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) 17m11.076329551s ago: executing program 3 (id=7645): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) 17m9.449332979s ago: executing program 3 (id=7647): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x89, 0x0, 0xfffffffd}) 17m8.48120868s ago: executing program 6 (id=7648): set_mempolicy(0x6, &(0x7f0000000300)=0x8000000000000001, 0x2e0) syz_open_dev$ttys(0xc, 0x2, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xebe0c000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x0, 0x1, 0x6, 0x8, 0x0, 0xfffffffc}, 0x9c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$DVB_DEMUX_DMX_REQBUFS(r0, 0xc0086f3c, &(0x7f0000000200)={0x8001, 0x6}) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=""/153, &(0x7f00000000c0)=0x99) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 17m7.768266495s ago: executing program 6 (id=7651): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x15, r1, 0x800006, 0x200000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0xa, r4, 0x0, r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="0108000400000000f7ff0a00", @ANYRES32, @ANYBLOB="0a0006000802110000010000300050"], 0x58}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r7, @ANYBLOB="010000000000ffdb5f253b00000008000300", @ANYRES32=r6, @ANYBLOB="68013300d0000000ffffffffffff080211000000505050505050"], 0x184}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x8, 0x400}, 0x36, [0xfffffffe, 0x9, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x3, 0xfff, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x6], [0x2, 0x20000, 0x0, 0x1000, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0xffffffff, 0xfffffffd, 0xff, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x10000000, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xcc61, 0x6, 0xfffffffc, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x1fffffd], [0x4, 0x0, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x10000, 0x4, 0x91a, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x3, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1]}, 0x45c) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10) write(r9, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r10 = socket$key(0xf, 0x3, 0x2) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r11, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffd}, 0x18, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000002900000036"], 0x118}, 0x200440d0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) sendmsg$key(r10, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r12, @ANYRES16], 0xc8}}, 0x24000000) 17m4.841882035s ago: executing program 3 (id=7652): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) mount$9p_fd(0x300, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17m3.08219752s ago: executing program 3 (id=7654): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x2226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140), 0x4) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, 0x0) preadv(r0, &(0x7f00000000c0), 0x10000000000001f2, 0x113, 0x2) r6 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x260c40, 0x22) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="1201bec8000000086307122040000102030109026e00030107a007080b0201010130090904000000010130000a2401e00a0000e0ff1f0904010000010230000904010101010230000905010900000e07070a252501000000ce3bcd090402000001023000090402010101023000090582090800707f060a252507000000003adcf1f6149aa403142c4a4441a66533c7de5f5cf15e5102fa2b2b8798842197afe6dfb8b94703a4c6663c657e0423eb332942f029bf9ddd3c604864171abbd3bceb029813fa1762ce454f4a"], &(0x7f00000006c0)={0xffffffffffffff3b, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x7, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000780)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x8, 0x3, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000800)={0x8, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4, 0x8}) r13 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, r14}) r15 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r15) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r15, 0xc06864ce, &(0x7f0000000680)={r17, 0x1ff, 0xc, 0x1, 0x3, [], [0x7fe00003, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, r7, r8, r9, 0x0, r10, 0x0, r12], 0xa, r14, r17, 0x6, 0x3, 0x0, 0x1, {0x535, 0xc3, 0xc, 0x5, 0x8, 0xfffd, 0x1, 0x7a2, 0x11, 0xe00, 0x5aa6, 0x1, 0x1000, 0xc, "6d6a471c7d89f4500852513a439b5c14ab81678aa84aa6fd8b179ac8f12c6c77"}}) 16m58.233434762s ago: executing program 6 (id=7657): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x8, 0x7c}, {0x9, 0x1}, 0x44, 0x3, 0x8}) r1 = syz_usb_connect(0xd1cb4d2fc481e9e5, 0x3f, &(0x7f0000000380)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aa8000000060a010400000000000000000200ffff7c0004803c0001800b00010065787468647200002c000280050002009400000008000340000000f50800044000000001080006400000000208000140000000133c0001800a00010071756575650000002c000280060001400058000006000140ff8000000600024001ff00000800044000000010080004400000000c0900010073797a30000000000900020073797a32"], 0xd0}}, 0x0) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x2) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RWSTAT(r6, &(0x7f00000004c0)={0x7, 0x7f, 0x2}, 0x7) r7 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='gretap0 8'], 0xa) syz_usb_control_io$uac3(r1, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x10, 0x36, {0x36, 0xb, "8cf97d77b786d968ad0c95ef8d0941199586057d4e5324728edf4131341226596138a08c06432a64bacb7f018abd4b588f808cf1"}}, &(0x7f0000000040)={0x0, 0x3, 0x14, @string={0x14, 0x3, "6c2dd3c68ba5da2fa5ff1af5b1f8b0245b22"}}}, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x0, 0xf, 0x2c, "9aff6d7173c4e25caec47180908baca385892f246d92af9724009f96e6c5dc292719a9a6de3369709146f9f8"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000180)={0x20, 0x81, 0x3, 'aE5'}, &(0x7f00000001c0)={0x20, 0x82, 0x2, "e809"}, &(0x7f0000000200)={0x20, 0x83, 0x1, "88"}, &(0x7f0000000240)={0x20, 0x84, 0x1, 'Z'}, &(0x7f0000000280)={0x20, 0x85, 0x3, "e43e43"}}) 16m47.045779621s ago: executing program 35 (id=7654): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x2226, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140), 0x4) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, 0x0) preadv(r0, &(0x7f00000000c0), 0x10000000000001f2, 0x113, 0x2) r6 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x260c40, 0x22) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="1201bec8000000086307122040000102030109026e00030107a007080b0201010130090904000000010130000a2401e00a0000e0ff1f0904010000010230000904010101010230000905010900000e07070a252501000000ce3bcd090402000001023000090402010101023000090582090800707f060a252507000000003adcf1f6149aa403142c4a4441a66533c7de5f5cf15e5102fa2b2b8798842197afe6dfb8b94703a4c6663c657e0423eb332942f029bf9ddd3c604864171abbd3bceb029813fa1762ce454f4a"], &(0x7f00000006c0)={0xffffffffffffff3b, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x7, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000580)={0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000780)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x8, 0x3, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000800)={0x8, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000940)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x4, 0x8}) r13 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000002980)={0x0, 0x0, r14}) r15 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r15) r16 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r16, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r16, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r11, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r15, 0xc06864ce, &(0x7f0000000680)={r17, 0x1ff, 0xc, 0x1, 0x3, [], [0x7fe00003, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, r7, r8, r9, 0x0, r10, 0x0, r12], 0xa, r14, r17, 0x6, 0x3, 0x0, 0x1, {0x535, 0xc3, 0xc, 0x5, 0x8, 0xfffd, 0x1, 0x7a2, 0x11, 0xe00, 0x5aa6, 0x1, 0x1000, 0xc, "6d6a471c7d89f4500852513a439b5c14ab81678aa84aa6fd8b179ac8f12c6c77"}}) 16m43.068539666s ago: executing program 36 (id=7657): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x8, 0x7c}, {0x9, 0x1}, 0x44, 0x3, 0x8}) r1 = syz_usb_connect(0xd1cb4d2fc481e9e5, 0x3f, &(0x7f0000000380)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aa8000000060a010400000000000000000200ffff7c0004803c0001800b00010065787468647200002c000280050002009400000008000340000000f50800044000000001080006400000000208000140000000133c0001800a00010071756575650000002c000280060001400058000006000140ff8000000600024001ff00000800044000000010080004400000000c0900010073797a30000000000900020073797a32"], 0xd0}}, 0x0) r4 = socket(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x2) pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RWSTAT(r6, &(0x7f00000004c0)={0x7, 0x7f, 0x2}, 0x7) r7 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='gretap0 8'], 0xa) syz_usb_control_io$uac3(r1, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x10, 0x36, {0x36, 0xb, "8cf97d77b786d968ad0c95ef8d0941199586057d4e5324728edf4131341226596138a08c06432a64bacb7f018abd4b588f808cf1"}}, &(0x7f0000000040)={0x0, 0x3, 0x14, @string={0x14, 0x3, "6c2dd3c68ba5da2fa5ff1af5b1f8b0245b22"}}}, &(0x7f00000002c0)={0x44, &(0x7f00000000c0)={0x0, 0xf, 0x2c, "9aff6d7173c4e25caec47180908baca385892f246d92af9724009f96e6c5dc292719a9a6de3369709146f9f8"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000180)={0x20, 0x81, 0x3, 'aE5'}, &(0x7f00000001c0)={0x20, 0x82, 0x2, "e809"}, &(0x7f0000000200)={0x20, 0x83, 0x1, "88"}, &(0x7f0000000240)={0x20, 0x84, 0x1, 'Z'}, &(0x7f0000000280)={0x20, 0x85, 0x3, "e43e43"}}) 10m18.099380292s ago: executing program 8 (id=9603): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=+0000000000000000040000,user_id=', @ANYRESDEC=0x0]) 10m18.043272753s ago: executing program 8 (id=9604): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x513001, 0x92) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf51, 0x81, 0xffff, 0x9cff, 0x15}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffffe, 0xfffffff6, 0x0, 0x5, "0062007d8200edffffffffff2140f7ffffff00"}) r3 = syz_open_pts(r2, 0x20200) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) 10m17.176293357s ago: executing program 8 (id=9605): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f4e3a700", @ANYRES16=r2, @ANYBLOB="01002cbd700000dcdf251a00000020002280040000800400008004000080040000800400008004000080040000800600210061000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x52424752, 0x2, 0x6, 0x2, 0xc, 0x4000a6e, 0x0, 0x4, 0x0, 0x6}}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 10m17.161524431s ago: executing program 8 (id=9606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x300, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10m17.019925133s ago: executing program 8 (id=9608): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = getpid() socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$evdev(&(0x7f00000006c0), 0x4b82, 0x2) socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x840000000002, 0x3, 0xff) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) kcmp$KCMP_EPOLL_TFD(r4, r6, 0x7, r2, &(0x7f0000000a80)={r2, r3, 0x9c}) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f0000000400), 0x0, 0x0) 10m15.472265798s ago: executing program 8 (id=9620): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x88ca}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv6=@generic={0x3, 0x6, "cf2ab1", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x36) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0xfd86, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x44, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x0, 0x2, 0x4}, @TCA_IPT_INDEX={0x0, 0x3, 0xb8}, @TCA_IPT_TARG={0x0, 0x6, {0x9, 'security\x00', 0x5, 0x8, "5d6f9ff6f830b32eff1726b1f08b4aab5c6792ab1a582ab1ca8ab894e881080ea3d4e7f9f978878b7cf850c1c28fa6d6fdd3f804e37c468f513ba3d107548ffd3f52eccbc71deefee2d3"}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8181}, 0x4009000) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000480)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x40, 0x210, {0x77359400}, {0x2, 0x0, 0x40, 0x7, 0x65, 0xa, "5b988e8c"}, 0xf, 0x2, {&(0x7f0000000240)=[{0x100, 0xfffffff9, {&(0x7f0000000180)}, 0xfffff850}, {0x9, 0x5, {&(0x7f0000000200)}, 0x5}]}, 0x10001, 0x0, r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000332000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000580)="a566b9b402000066b83bcdce5266ba000000000f30b898000f00d00f7989277d2626f30f09f30f0136060066b9750a000066b8cc90000066ba000000000f30260f01ba36cb64f0874464660feb920080", 0x50}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r7) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0ab01c24", @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086c256e0000000000000109022400010000000009041edefe0300000009210000000122060009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x7, {0x7, 0x9, "7fe200cc4e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}}) 9m59.738588337s ago: executing program 37 (id=9620): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x88ca}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv6=@generic={0x3, 0x6, "cf2ab1", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x36) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0xfd86, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x44, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x0, 0x2, 0x4}, @TCA_IPT_INDEX={0x0, 0x3, 0xb8}, @TCA_IPT_TARG={0x0, 0x6, {0x9, 'security\x00', 0x5, 0x8, "5d6f9ff6f830b32eff1726b1f08b4aab5c6792ab1a582ab1ca8ab894e881080ea3d4e7f9f978878b7cf850c1c28fa6d6fdd3f804e37c468f513ba3d107548ffd3f52eccbc71deefee2d3"}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8181}, 0x4009000) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000480)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x40, 0x210, {0x77359400}, {0x2, 0x0, 0x40, 0x7, 0x65, 0xa, "5b988e8c"}, 0xf, 0x2, {&(0x7f0000000240)=[{0x100, 0xfffffff9, {&(0x7f0000000180)}, 0xfffff850}, {0x9, 0x5, {&(0x7f0000000200)}, 0x5}]}, 0x10001, 0x0, r4}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000332000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000580)="a566b9b402000066b83bcdce5266ba000000000f30b898000f00d00f7989277d2626f30f09f30f0136060066b9750a000066b8cc90000066ba000000000f30260f01ba36cb64f0874464660feb920080", 0x50}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r7) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0ab01c24", @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086c256e0000000000000109022400010000000009041edefe0300000009210000000122060009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x0, 0x7, {0x7, 0x9, "7fe200cc4e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}}) 2m32.502811402s ago: executing program 7 (id=12610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000006ac0f00002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000c0049"], 0x34}}, 0x4000080) 2m32.361697661s ago: executing program 7 (id=12612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0xffffffef, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m32.074920895s ago: executing program 7 (id=12619): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)) close(0x4) pipe(&(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000ff", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m31.762068028s ago: executing program 7 (id=12621): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6000000}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m31.620043488s ago: executing program 7 (id=12622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x100000000000000, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m31.403847414s ago: executing program 7 (id=12623): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fstat(r0, &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) listen(r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_pidfd_open(r4, 0x0) r5 = fsopen(&(0x7f0000000440)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000014c0)=""/4096) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) pidfd_send_signal(r7, 0x3a, &(0x7f00000001c0)={0x3f, 0x75d, 0x6}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') pread64(r8, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f00000000c0)=0x1) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu'], 0xb) 2m16.908167657s ago: executing program 38 (id=12623): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fstat(r0, &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) listen(r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_pidfd_open(r4, 0x0) r5 = fsopen(&(0x7f0000000440)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000014c0)=""/4096) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) pidfd_send_signal(r7, 0x3a, &(0x7f00000001c0)={0x3f, 0x75d, 0x6}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') pread64(r8, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f00000000c0)=0x1) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu'], 0xb) 4.003771697s ago: executing program 9 (id=13473): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007"], 0x5c}}, 0x20084884) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x15, 0x0, 0xfc, 0xb7a}, {0x2c, 0xe, 0x0, 0x3}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x9000000, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 2.398635604s ago: executing program 4 (id=13479): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010e31000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2.295295914s ago: executing program 4 (id=13480): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x1) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x1, 0x1, 0x4, 0xfffe, r1}) 2.238097577s ago: executing program 4 (id=13482): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0xb, 0x80006, 0x200006, 0x8, 0x1, "26000000000000075443940000002000", 0xa, 0x0, 0x5, 0x2, 0x1, 0xfd, 0x9d}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) 1.932113543s ago: executing program 5 (id=13486): prlimit64(0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) (async) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="218a49ba70c8f02685353600000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000005c0)={0x2, [[0x9ef8, 0xf1, 0x10, 0x1, 0xfffffffc, 0x0, 0x3, 0x10], [0xef6d, 0x8, 0x0, 0x10000007, 0xda0, 0x4, 0xffffffff], [0x2, 0x1010000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0xfffffffd}, {0xffffffff}, {0x4, 0x5, 0x0, 0x1}, {0x10003, 0xfffffffe}, {}, {0xffffffff, 0x400}, {}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0x3}, {0xfffffff8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0x18}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000080)) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000380)='\x00', 0x4040c0, &(0x7f0000000140)={@align=0xfb04, {0x800, 0x8, 0x2, 0x9}}, 0xfffffff8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x1fff2af6}) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x3f7, 0xd9bbbddda56f3d4f, 0x70bd2d, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) (async) r7 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x6, 0x80401) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, 0x0, 0x40014) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r8) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000fedbdf2513000900000000ebaba7555555550c0009000201aaaaaaaaaaaa00"/51], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4008140) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x10010, r7, 0x1e67e000) (async) mmap(&(0x7f0000950000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x85, 0x81, 0xffffffff}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x156) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) (async) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x3f7, 0x400, 0x70bd28, 0x25dfdbfc, {0x7, 0xd, './file1', './file1/file2'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) (async, rerun: 32) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (rerun: 32) write$ppp(r10, &(0x7f0000000040)="2bfdf3534eae74121c2a7a73fd9fa8a124f8aec0befdaf8ef7c4bbeb8771218f1cae3307cdb3f4610206bb0f72a9a8f7d1c9328cc2a503323e83a06601290089a8db5604d297092287bda88f8efd43c23afe0c3852f94d4729b0c87926adef767edccd9224548619677722fca8f7b4ef10af4b4480b59824e320e647f326028f5785f34873044512625dc17e0ec19a17", 0x90) 1.832611717s ago: executing program 9 (id=13487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)={0x34, r1, 0x209, 0xe0bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x9000000, 0x8140}, 0x10) 1.743966562s ago: executing program 5 (id=13488): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f0000000000)={0x953c0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0xdf00}, 0x58) 1.547834067s ago: executing program 5 (id=13489): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000000)='bfs\x00', 0x200000, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 1.453826788s ago: executing program 9 (id=13490): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0x81000000}], 0x1, 0x0) 1.219888462s ago: executing program 4 (id=13491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000500000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a310000000028000480080002401886c30108000140000000051400030669705f7674693000000000000000000028000000000a05000000000000000000010000080900010073797a3100000000080002400000000114000000110001"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.206408353s ago: executing program 0 (id=13492): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x78}}, 0x0) kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e457152031", 0xae, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb8", 0x21, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x4}, 0x41) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0xffffffffffffffff, 0x2, 0xfffffffe, 0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000000c0)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0x1, 0xb7, 0x10000}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="a9b9f13255d53e12d94953467e40af61c13cd183e55b11c70c04f2e582af325869c612258041e51b616ce5303b989ade1a9bd57faf343e98e849b270dc55f987bd8f6cdc17e38daeafc1e8fc9159353e6223ea1f2b086c119cd004dfb203855bb7d78ae05b162c70862f32d9c366fd08fb21e3ded3f8d240051720eb155091b7394ae134db1e86d915"}, {&(0x7f00000008c0)="70f2e966d3cfcc86c308abf9d2cb599ae3a6a76293432675d07e5ea656215d67eae996a6dfd46b9134b98452f41a97bf7492d53b27cd21a15bd5b33265e6523b83865bad95c2ae3e31eae9e1d2a664c6b0032c2aa9cc366f34a221de200613aba5c8ad1b8934060690535bd2621b689e59f401fd32c04639713a9447da20d8e6f8c5b01319d1735e463dc94c5ebf5917ff887fdf654f1548e44d6da49aaf8a758040173079843c7a4183133915fc91a5b2ea5ad4f90bdeaef1a832bbdaeb77eb4f1105ed826c5a6f765bb30f27885ef35822e0d0310bc8f11f35cebc71973c6db718af41734d6fd803ea8650d0"}, {&(0x7f00000009c0)="edae9a4c8d8dce6d626e50745c837f63821f67f7b40f73e1fee3fc400cd2dde92fce92145215daa0d7bddcfe13bccc7b94a0781f9cdb7500878abf9337aa67956d4f18b02e4a776143d3122230184cdf2713bd822ac042d66a82e44cffd8625775a235881ee0b6a408b93f69ed9fc833d2b4e2bac1a184d0a8f48ee0547ef3fe916a13a8ddcc38fa01e533dc6de21bd6a28cd618fb3d58569115eeb50e406c0c5db03951a8470dc8419f"}, {&(0x7f0000000a80)="6554dfc1fc317abc09aae7f0a23750ac7c3accea67c6cd7af54facb80b575667d7db01d3ec6a5691f731574994ee01ecaea59a7b039bafa6749eaf44b56d8d597acfdc340784a10c028ead4d30fddbc0"}, {&(0x7f0000000b40)="1de97118078572f019e906e8bdb6d29b43888cb5e7630d7ea2a10638bd0ff45bb87ca6258721ec8bc58b92ac02f5cf6e43640cf4373d3405a944cf79cf189c7f7e1afc30f626bcd016b3fb46c36a842bfc6a5813d212284b591613173a50046130b9cbf6cd0bf51ef5f05bf9e80ec6d34a5f080958ea667aadb4b312344739abd97a1675fee717544f069be402b1e5dde72811f27d495e6cb3853728f604a2906978c8fde51cdeb42c4548539c617cef93b85dce1456853eb22a8127cfb4"}, {&(0x7f0000000c00)="ee27db47f279df8911805856c028e0949782500181fbdfff13ddb971d07634f5d5ea9d17d730a292dddbc822c5959d5f2c16b5811ad2e4ed0e01cb4cb392ce65b3e7e9f1224b73fbbad5978a4ad9fdff341aea9d4400b4742d231be54e5b85859e5d86c1c612fe27d55de02435fa436cbe692991e19063e6789bb93560e8279124353e00002f533b770040100c8653972d5b6f7d66fec0ba9d04cbe8221572d996b7e6a0a17f8bb9aa8a709bb9b4868098b07f0640edf302f13068ccc5f8f5a1dc735b1e328b3e3889b3c7cf00c2ce4c5199b25173e89edf0f9ad38f6946532dffd93f"}, {&(0x7f0000000d00)="a140c5a8674042e4c9a426faf2be28f348361091482cffb9f192c9407bafcbfb8ef8f2936fc797e7feb9c5a9e87dccc321d318f1d4d649beb94aa840601c3a7bfdc533f04b9c8da619c1cbede5da6f2ec2b88093ea098ed1f24d997ebefc8fe3148442365231a19253cb972ea3f39b093b15320a8114c516c364c60194dfecf0b8bfcc838af3c0502f72f0f4ee7df21d5b9315d6498fc9cf7647086e109d3091d5185405f434043d1c2f15"}, {&(0x7f0000000dc0)="8eae7c833852c0a48dcba33d084663f5f05618a9c185c181bbbe58fa664c9f49ae1f222cc0e2478090156d0326bd38a0f2ccb27f949e325d9b343c59add1ab9952"}], 0x10e5, 0x0, 0xfffffffffffffdd9, 0x10}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.175665878s ago: executing program 4 (id=13493): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703a", 0xf}], 0x1) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x100010000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.041801803s ago: executing program 0 (id=13494): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "07017555d0000600", '\x00', "0500", '\x00', ["8ba859c7eaa817c478dcf6e9", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) 994.379974ms ago: executing program 4 (id=13495): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') (async) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0xff8}, {&(0x7f0000001600)="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", 0xfa}], 0x2}], 0x1, 0x20000800) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0xff8}, {&(0x7f0000001600)="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", 0xfa}], 0x2}], 0x1, 0x20000800) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, &(0x7f0000000380)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x8500, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000180)={0x30, 0x0, 0x3bcd9a38fd325baf, 0x0, 0xf, 0x9, 0x4, 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3021830b", @ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000005100000008009f0006"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3021830b", @ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000005100000008009f0006"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) (async) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "0500", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffff9d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffff9d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001c200180060001000200000008000300ffffffff080006001e000000"], 0x30}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_generic(r3, &(0x7f0000002940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000002940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000002900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000028c0)={&(0x7f0000001740)={0x117c, 0x42, 0x300, 0x70bd2c, 0x25dfdbfd, {0xe}, [@nested={0x101c, 0xfe, 0x0, 0x1, [@typed={0x14, 0xac, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x67}, @generic="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"]}, @generic="f73f8eb9decbda94efeec14fd4a3b5471e7f9b392af1bcf1bf1a9dd99f46c2d7ce53f8836efc52b4dd71c5409419a21dcb5d93916b449ad0a565eb0a3b606d40da592d55e55e6721bdebcdd5ae0415b0af47e959bdd9d95012703efe9022f167cb084b318fd206c5a235ac800cda69102cc59134362f7d4284047c9af4566f65ccf18273debff94349a7ced1d3cad95bcbbeb0f03d7ef936942c39597f1b2a93fd3d31d67fb1dd7b06db9e690e3c9c6206aa46db7e508d5de858df32bc9bfd200da4627cc4a611f13517db54f56e7389e9431e6584be8543dee47b3d70e0cd", @typed={0x4, 0xab}, @typed={0x8, 0x5e, 0x0, 0x0, @uid=0xee00}, @generic="b3525b6a4fe7468efa85ac4586b32095d6f29f6886312ed979e5071397bf28f9d258753d0990584f17177d85c1cddd22b4f0373f2f3088a5bbad76e10833365b71453732e0de13a93914968339a2ffc9052ed9d39dbcf063c4ee3ddb150dd19b"]}, 0x117c}, 0x1, 0x0, 0x0, 0x4}, 0x400a0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 880.961048ms ago: executing program 9 (id=13496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000070a010200"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) 878.451091ms ago: executing program 0 (id=13497): socket(0x2, 0x3, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x3ea4, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10, 0x7f00}}}, &(0x7f0000000440)) 768.012642ms ago: executing program 0 (id=13498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffb, 0x0, @loopback, 0x10080bfd}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x0, 0x8, 0x4}}}, 0x118) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getpeername$l2tp(r3, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10) close_range(r1, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) 722.107874ms ago: executing program 9 (id=13499): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000002c0)={'wlan1\x00', @random="0200"}) 669.542204ms ago: executing program 0 (id=13500): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001140004000000a60c6eec00be00442ffffe8000000000600000000000000000aaff020000000000000000000000000001"], 0xfdef) 642.419427ms ago: executing program 9 (id=13501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x30}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x4}, 0xfffffff8, 0x2, 0x1, 0x1, 0xfffe, 0xe77}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={r7, 0x7}, 0x8) ioctl(r4, 0x8b32, &(0x7f0000000040)) 563.946174ms ago: executing program 5 (id=13502): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0xc64e, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x48, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0xfffffc67}, 0x0, 0x2002, 0x1, {0x3}}) r5 = socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xdbd, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000002c0)={'wlan1\x00', @random="0200"}) 170.978254ms ago: executing program 5 (id=13503): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f00000002c0)={'wlan1\x00', @random="0200"}) (fail_nth: 3) 89.058979ms ago: executing program 0 (id=13504): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xd6, 0xffffffffffffffff, 0x1}) (async) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = getpgid(0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r1, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xd}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x3a}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x42}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x22}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x24000010) (async) pselect6(0x40, &(0x7f0000000200)={0xe, 0x4, 0x200, 0x100000000, 0x52, 0x1, 0xffffffffffffff00, 0x2}, &(0x7f0000000240)={0x80000000, 0x7, 0x9, 0x5, 0x4, 0x3, 0x3, 0xfffffffffffffff7}, &(0x7f0000000280)={0x0, 0xfffffffffffffffc, 0x200000000000, 0x2, 0x5, 0x1, 0x6, 0xac}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x4]}, 0x8}) (async, rerun: 32) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x5) (async, rerun: 32) sched_getparam(r4, &(0x7f00000003c0)) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000400)={0x0, 0x5652, 0x40, 0x2, 0x24, 0x0, r2}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac04, 0x10, 0x0, 0x61, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9fa8, 0x2, 0x1, 0x138, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c83, 0x10, 0x3, 0x28e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x837f, 0x2, 0x3, 0x82, 0x0, r2}, 0xffffffffffffffff}], 0x4, &(0x7f0000001700)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, '\x00', {0x2, 0x6, 0x0, &(0x7f0000000700)=@buf_1k="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"}}, &(0x7f0000001780)) recvmsg$can_raw(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000017c0)=""/132, 0x84}], 0x1, &(0x7f00000018c0)=""/223, 0xdf}, 0x1) (async) ioctl$DVB_DVR_DMX_QUERYBUF(r2, 0xc0186f3d, &(0x7f0000001a00)={0x0, 0x5, 0x80000001, 0x3, 0x12, 0x6}) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r7, 0x40106e80, &(0x7f0000001a40)={0x6, 0x1}) (async) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000001b00)=[@text16={0x10, &(0x7f0000001a80)="66b9b702000066b88600000066ba000000000f306766c7442400ef0000006766c7442402000000006766c744240600000000670f011c24440f20c0663502000000440f22c0f2f23e0f208266b9950b00000f32baf80c66b81d3bc08166efbafc0cb0beee360f01c3d06617670f01c50f35", 0x71}], 0x1, 0x50, &(0x7f0000001b40)=[@cr0={0x0, 0x8001001a}], 0x1) (async) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000001b80), &(0x7f0000001bc0)=0x8) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000001c00)) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000001c40)) (async) ptrace$cont(0x9, r4, 0x3, 0x3) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), r2) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001dc0)={'syztnl0\x00', &(0x7f0000001d00)={'sit0\x00', 0x0, 0x8, 0x40, 0x4f9, 0x2, {{0x28, 0x4, 0x1, 0x38, 0xa0, 0x66, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @dev={0xac, 0x14, 0x14, 0x39}, {[@lsrr={0x83, 0xb, 0x82, [@local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x2c, 0x54, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0xffffb5df}, {@multicast1, 0x400}, {@local, 0xfe6}, {@rand_addr=0x64010100, 0x5}, {@private=0xa010102, 0x7fc1}]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x6, 0x8, "670ef47cf1dd"}, {0x1, 0x12, "2d839ccc0daff0a951b87f8a6959a1cf"}]}, @timestamp_prespec={0x44, 0xc, 0x2e, 0x3, 0x2, [{@local, 0xfffffffc}]}, @lsrr={0x83, 0x27, 0x9, [@rand_addr=0x64010102, @remote, @rand_addr=0x64010101, @remote, @broadcast, @empty, @empty, @multicast1, @rand_addr=0x623]}]}}}}}) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001e00)=0x0, &(0x7f0000001e40)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000002100)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e80)={0x21c, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x130, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000002140)=""/201) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) (async, rerun: 32) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) (rerun: 32) ptrace$setsig(0x4203, r4, 0x4, &(0x7f0000002240)={0x3c, 0x5, 0x6}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r11, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x4c, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x800) 0s ago: executing program 5 (id=13505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x9154}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/87, 0x57}, {&(0x7f0000000900)=""/146, 0x92}, {&(0x7f0000006ec0)=""/4075, 0xfeb}], 0x5, 0x0, 0xa1}, 0x404}], 0x3, 0x40000122, 0x0) kernel console output (not intermixed with test programs): 2345.302719][T32321] filename_create+0x20e/0x370 [ 2345.302741][T32321] ? __pfx_filename_create+0x10/0x10 [ 2345.302761][T32321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.302776][T32321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.302789][T32321] filename_symlinkat+0xf7/0x420 [ 2345.302806][T32321] ? __pfx_filename_symlinkat+0x10/0x10 [ 2345.302822][T32321] ? do_getname+0x151/0x250 [ 2345.302835][T32321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.302849][T32321] __se_sys_symlink+0x4d/0x2b0 [ 2345.302862][T32321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.302876][T32321] do_syscall_64+0x174/0x580 [ 2345.302895][T32321] ? trace_irq_disable+0x3b/0x140 [ 2345.302910][T32321] ? clear_bhb_loop+0x40/0x90 [ 2345.302935][T32321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2345.302957][T32321] RIP: 0033:0x7fc8fbbece59 [ 2345.302979][T32321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2345.302999][T32321] RSP: 002b:00007fc8f9e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 2345.303024][T32321] RAX: ffffffffffffffda RBX: 00007fc8fbe65fa0 RCX: 00007fc8fbbece59 [ 2345.303041][T32321] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 2345.303050][T32321] RBP: 00007fc8f9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2345.303058][T32321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2345.303066][T32321] R13: 00007fc8fbe66038 R14: 00007fc8fbe65fa0 R15: 00007ffe4d426988 [ 2345.303087][T32321] [ 2346.063457][T32336] FAULT_INJECTION: forcing a failure. [ 2346.063457][T32336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2346.063486][T32336] CPU: 0 UID: 0 PID: 32336 Comm: syz.9.13072 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2346.063507][T32336] Tainted: [L]=SOFTLOCKUP [ 2346.063512][T32336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2346.063520][T32336] Call Trace: [ 2346.063526][T32336] [ 2346.063532][T32336] dump_stack_lvl+0xe8/0x150 [ 2346.063554][T32336] should_fail_ex+0x46b/0x600 [ 2346.063576][T32336] prepare_alloc_pages+0x22a/0x6b0 [ 2346.063600][T32336] __alloc_frozen_pages_noprof+0x12f/0x380 [ 2346.063620][T32336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2346.063640][T32336] ? __pfx_policy_nodemask+0x10/0x10 [ 2346.063656][T32336] ? do_syscall_64+0x174/0x580 [ 2346.063675][T32336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.063693][T32336] alloc_pages_mpol+0xd1/0x380 [ 2346.063713][T32336] alloc_pages_noprof+0xd2/0x2f0 [ 2346.063732][T32336] rds_page_remainder_alloc+0x55/0xb60 [ 2346.063746][T32336] ? copy_page_from_iter+0x283/0x2d0 [ 2346.063762][T32336] rds_message_copy_from_user+0x32f/0xcc0 [ 2346.063786][T32336] ? __pfx_rds_message_copy_from_user+0x10/0x10 [ 2346.063804][T32336] ? __asan_memset+0x22/0x50 [ 2346.063818][T32336] ? rds_message_alloc_sgs+0xab/0x180 [ 2346.063837][T32336] rds_sendmsg+0xd7c/0x2130 [ 2346.063861][T32336] ? __pfx_rds_sendmsg+0x10/0x10 [ 2346.063878][T32336] ? aa_sk_perm+0x703/0x950 [ 2346.063896][T32336] ? __pfx_aa_sk_perm+0x10/0x10 [ 2346.063907][T32336] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 2346.063926][T32336] ? aa_sock_msg_perm+0x122/0x200 [ 2346.063940][T32336] ? __pfx_rds_sendmsg+0x10/0x10 [ 2346.063957][T32336] sock_sendmsg_nosec+0x13a/0x180 [ 2346.063974][T32336] ____sys_sendmsg+0x55c/0x870 [ 2346.063997][T32336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2346.064021][T32336] ? import_iovec+0x73/0xa0 [ 2346.064038][T32336] ___sys_sendmsg+0x2a5/0x360 [ 2346.064056][T32336] ? __lock_acquire+0x6b5/0x2d10 [ 2346.064074][T32336] ? __pfx____sys_sendmsg+0x10/0x10 [ 2346.064118][T32336] ? __fget_files+0x2a/0x420 [ 2346.064134][T32336] ? __fget_files+0x3a6/0x420 [ 2346.064154][T32336] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2346.064175][T32336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2346.064200][T32336] ? __pfx_ksys_write+0x10/0x10 [ 2346.064222][T32336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.064236][T32336] do_syscall_64+0x174/0x580 [ 2346.064254][T32336] ? trace_irq_disable+0x3b/0x140 [ 2346.064268][T32336] ? clear_bhb_loop+0x40/0x90 [ 2346.064284][T32336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.064297][T32336] RIP: 0033:0x7fc8fbbece59 [ 2346.064310][T32336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2346.064321][T32336] RSP: 002b:00007fc8f9e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2346.064344][T32336] RAX: ffffffffffffffda RBX: 00007fc8fbe65fa0 RCX: 00007fc8fbbece59 [ 2346.064354][T32336] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 2346.064362][T32336] RBP: 00007fc8f9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2346.064370][T32336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2346.064378][T32336] R13: 00007fc8fbe66038 R14: 00007fc8fbe65fa0 R15: 00007ffe4d426988 [ 2346.064397][T32336] [ 2346.421346][T32338] FAULT_INJECTION: forcing a failure. [ 2346.421346][T32338] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.421389][T32338] CPU: 0 UID: 0 PID: 32338 Comm: syz.9.13074 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2346.421421][T32338] Tainted: [L]=SOFTLOCKUP [ 2346.421429][T32338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2346.421443][T32338] Call Trace: [ 2346.421451][T32338] [ 2346.421461][T32338] dump_stack_lvl+0xe8/0x150 [ 2346.421488][T32338] should_fail_ex+0x46b/0x600 [ 2346.421520][T32338] should_failslab+0xa8/0x100 [ 2346.421551][T32338] __kmalloc_cache_noprof+0x84/0x690 [ 2346.421573][T32338] ? sctp_add_bind_addr+0x8c/0x370 [ 2346.421601][T32338] sctp_add_bind_addr+0x8c/0x370 [ 2346.421627][T32338] sctp_copy_local_addr_list+0x314/0x4f0 [ 2346.421653][T32338] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2346.421676][T32338] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2346.421702][T32338] ? sctp_v4_is_any+0x35/0x60 [ 2346.421726][T32338] ? sctp_copy_one_addr+0x93/0x360 [ 2346.421751][T32338] sctp_bind_addr_copy+0x189/0x3c0 [ 2346.421780][T32338] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2346.421801][T32338] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2346.421825][T32338] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 2346.421852][T32338] ? lockdep_hardirqs_on+0x7a/0x110 [ 2346.421877][T32338] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2346.421901][T32338] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2346.421928][T32338] sctp_sendmsg+0x14f2/0x29b0 [ 2346.421967][T32338] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2346.422002][T32338] ? aa_sk_perm+0x703/0x950 [ 2346.422026][T32338] ? __pfx_aa_sk_perm+0x10/0x10 [ 2346.422042][T32338] ? sock_rps_record_flow+0x19/0x350 [ 2346.422067][T32338] ? inet_sendmsg+0x2f4/0x370 [ 2346.422091][T32338] ? __pfx_inet_sendmsg+0x10/0x10 [ 2346.422112][T32338] sock_sendmsg_nosec+0x10e/0x180 [ 2346.422137][T32338] ____sys_sendmsg+0x55c/0x870 [ 2346.422169][T32338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2346.422203][T32338] ? import_iovec+0x73/0xa0 [ 2346.422226][T32338] ___sys_sendmsg+0x2a5/0x360 [ 2346.422251][T32338] ? __lock_acquire+0x6b5/0x2d10 [ 2346.422296][T32338] ? __pfx____sys_sendmsg+0x10/0x10 [ 2346.422353][T32338] ? __fget_files+0x2a/0x420 [ 2346.422373][T32338] ? __fget_files+0x3a6/0x420 [ 2346.422401][T32338] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2346.422431][T32338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2346.422465][T32338] ? __pfx_ksys_write+0x10/0x10 [ 2346.422497][T32338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.422516][T32338] do_syscall_64+0x174/0x580 [ 2346.422546][T32338] ? trace_irq_disable+0x3b/0x140 [ 2346.422566][T32338] ? clear_bhb_loop+0x40/0x90 [ 2346.422587][T32338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.422605][T32338] RIP: 0033:0x7fc8fbbece59 [ 2346.422623][T32338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2346.422639][T32338] RSP: 002b:00007fc8f9e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2346.422659][T32338] RAX: ffffffffffffffda RBX: 00007fc8fbe65fa0 RCX: 00007fc8fbbece59 [ 2346.422672][T32338] RDX: 0000000020048040 RSI: 0000200000000700 RDI: 0000000000000003 [ 2346.422686][T32338] RBP: 00007fc8f9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2346.422700][T32338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2346.422711][T32338] R13: 00007fc8fbe66038 R14: 00007fc8fbe65fa0 R15: 00007ffe4d426988 [ 2346.422739][T32338] [ 2346.854046][T32346] FAULT_INJECTION: forcing a failure. [ 2346.854046][T32346] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.854074][T32346] CPU: 1 UID: 0 PID: 32346 Comm: syz.9.13077 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2346.854095][T32346] Tainted: [L]=SOFTLOCKUP [ 2346.854100][T32346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2346.854108][T32346] Call Trace: [ 2346.854113][T32346] [ 2346.854119][T32346] dump_stack_lvl+0xe8/0x150 [ 2346.854141][T32346] should_fail_ex+0x46b/0x600 [ 2346.854163][T32346] should_failslab+0xa8/0x100 [ 2346.854181][T32346] __kmalloc_cache_noprof+0x84/0x690 [ 2346.854198][T32346] ? binder_new_node+0x56/0x720 [ 2346.854214][T32346] binder_new_node+0x56/0x720 [ 2346.854228][T32346] ? rt_spin_unlock+0x160/0x200 [ 2346.854246][T32346] binder_translate_binder+0x27f/0x890 [ 2346.854271][T32346] ? __pfx_binder_translate_binder+0x10/0x10 [ 2346.854296][T32346] binder_transaction+0x412e/0x6fd0 [ 2346.854371][T32346] ? __pfx_binder_transaction+0x10/0x10 [ 2346.854390][T32346] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2346.854419][T32346] ? __lock_acquire+0x6b5/0x2d10 [ 2346.854441][T32346] ? __lock_acquire+0x6b5/0x2d10 [ 2346.854457][T32346] ? __lock_acquire+0x6b5/0x2d10 [ 2346.854474][T32346] ? __might_fault+0xaf/0x130 [ 2346.854490][T32346] ? __might_fault+0xaf/0x130 [ 2346.854516][T32346] binder_ioctl_write_read+0xb37/0xa490 [ 2346.854535][T32346] ? is_bpf_text_address+0x26/0x2b0 [ 2346.854561][T32346] ? __kernel_text_address+0xd/0x30 [ 2346.854589][T32346] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 2346.854608][T32346] ? stack_depot_save_flags+0x33/0x810 [ 2346.854633][T32346] ? do_raw_spin_lock+0x12b/0x2f0 [ 2346.854655][T32346] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 2346.854670][T32346] ? reacquire_held_locks+0x104/0x190 [ 2346.854687][T32346] ? rt_spin_lock+0x1e0/0x400 [ 2346.854702][T32346] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2346.854720][T32346] ? rt_spin_unlock+0x14f/0x200 [ 2346.854739][T32346] ? binder_get_thread+0x177/0x6d0 [ 2346.854759][T32346] binder_ioctl+0x426/0x1b10 [ 2346.854780][T32346] ? tomoyo_path_number_perm+0x219/0x630 [ 2346.854801][T32346] ? tomoyo_path_number_perm+0x219/0x630 [ 2346.854822][T32346] ? do_vfs_ioctl+0x117b/0x1540 [ 2346.854841][T32346] ? __pfx_binder_ioctl+0x10/0x10 [ 2346.854859][T32346] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2346.854895][T32346] ? __fget_files+0x2a/0x420 [ 2346.854912][T32346] ? __fget_files+0x2a/0x420 [ 2346.854926][T32346] ? __fget_files+0x3a6/0x420 [ 2346.854939][T32346] ? __fget_files+0x2a/0x420 [ 2346.854956][T32346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2346.854975][T32346] ? __pfx_binder_ioctl+0x10/0x10 [ 2346.854991][T32346] __se_sys_ioctl+0xff/0x170 [ 2346.855009][T32346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.855023][T32346] do_syscall_64+0x174/0x580 [ 2346.855042][T32346] ? trace_irq_disable+0x3b/0x140 [ 2346.855056][T32346] ? clear_bhb_loop+0x40/0x90 [ 2346.855071][T32346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.855084][T32346] RIP: 0033:0x7fc8fbbece59 [ 2346.855097][T32346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2346.855109][T32346] RSP: 002b:00007fc8f9e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2346.855125][T32346] RAX: ffffffffffffffda RBX: 00007fc8fbe65fa0 RCX: 00007fc8fbbece59 [ 2346.855137][T32346] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 2346.855151][T32346] RBP: 00007fc8f9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2346.855161][T32346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2346.855169][T32346] R13: 00007fc8fbe66038 R14: 00007fc8fbe65fa0 R15: 00007ffe4d426988 [ 2346.855188][T32346] [ 2346.877884][T32347] netlink: 9 bytes leftover after parsing attributes in process `syz.5.13076'. [ 2347.109479][T32347] gretap0: entered promiscuous mode [ 2347.748492][T32372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13085'. [ 2347.748544][T32372] netlink: 312 bytes leftover after parsing attributes in process `syz.4.13085'. [ 2348.476444][T11704] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 2348.638258][T11704] usb 10-1: Using ep0 maxpacket: 16 [ 2348.665717][T11704] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2348.665754][T11704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.665778][T11704] usb 10-1: Product: syz [ 2348.665795][T11704] usb 10-1: Manufacturer: syz [ 2348.665812][T11704] usb 10-1: SerialNumber: syz [ 2348.722851][T11704] usb 10-1: config 0 descriptor?? [ 2348.924439][T11704] speedtch 10-1:0.0: speedtch_bind: data interface not found! [ 2348.924465][T11704] speedtch 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2349.140172][T32391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2349.152721][T32391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2349.157395][T32391] 9p: Bad value for 'wfdno' [ 2349.492719][T20446] usb 10-1: USB disconnect, device number 122 [ 2350.714741][T11704] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 2350.868803][T11704] usb 5-1: not running at top speed; connect to a high speed hub [ 2350.870485][T11704] usb 5-1: config 45 has an invalid interface number: 2 but max is 0 [ 2350.870515][T11704] usb 5-1: config 45 has no interface number 0 [ 2350.870557][T11704] usb 5-1: config 45 interface 2 has no altsetting 0 [ 2350.873623][T11704] usb 5-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 2350.873654][T11704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.873677][T11704] usb 5-1: Product: syz [ 2350.873693][T11704] usb 5-1: Manufacturer: syz [ 2350.873708][T11704] usb 5-1: SerialNumber: syz [ 2351.267029][T32464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13103'. [ 2351.933137][T32464] XFS (nbd4): SB validate failed with error -5. [ 2352.795486][T11704] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 2352.795589][T11704] dvb-usb: bulk message failed: -22 (3/0) [ 2352.823840][T11704] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 2352.826143][T11704] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 2352.826206][T11704] usb 5-1: media controller created [ 2352.826299][T11704] dvb-usb: bulk message failed: -22 (5/0) [ 2352.826372][T11704] dvb-usb: MAC address reading failed. [ 2352.829281][T20446] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2352.928148][T11704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2352.960951][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 2352.961287][T11704] dvb-usb: bulk message failed: -22 (6/0) [ 2352.961408][T11704] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 2352.987467][T11704] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input139 [ 2352.990525][T11704] dvb-usb: schedule remote query interval to 100 msecs. [ 2352.990551][T11704] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 2353.024031][T11704] usb 5-1: USB disconnect, device number 13 [ 2353.115308][T20446] usb 1-1: Using ep0 maxpacket: 8 [ 2353.223345][T20446] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2353.223410][T20446] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2353.223436][T20446] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2353.223464][T20446] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2353.223490][T20446] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2353.223537][T20446] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2353.223561][T20446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.315229][T11704] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 2353.710607][T32510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2353.728948][T32510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2353.735499][T14968] usb 1-1: USB disconnect, device number 42 [ 2353.994026][T32573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13120'. [ 2354.667411][T20446] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2354.797687][T20446] usb 1-1: device descriptor read/64, error -71 [ 2355.048653][T20446] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2355.237025][T20446] usb 1-1: device descriptor read/64, error -71 [ 2355.357039][T20446] usb usb1-port1: attempt power cycle [ 2355.410656][T14968] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2355.428291][T32609] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13129'. [ 2355.619912][T14968] usb 6-1: Using ep0 maxpacket: 8 [ 2355.627143][T14968] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2355.627177][T14968] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2355.627202][T14968] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2355.627245][T14968] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2355.627269][T14968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.651746][T14968] usbtmc 6-1:16.0: bulk endpoints not found [ 2355.677210][T20446] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 2355.701115][T20446] usb 1-1: device descriptor read/8, error -71 [ 2355.811593][T32619] tipc: Started in network mode [ 2355.811613][T32619] tipc: Node identity , cluster identity 4711 [ 2355.811729][T32619] tipc: Failed to obtain node identity [ 2355.811759][T32619] tipc: Enabling of bearer rejected, failed to enable media [ 2355.816981][T32619] overlay: ./file1 is not a directory [ 2355.925181][T20446] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2355.949797][T20446] usb 1-1: device descriptor read/8, error -71 [ 2356.010402][T11704] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2356.050505][T20446] usb usb1-port1: unable to enumerate USB device [ 2356.136084][T11704] usb 5-1: device descriptor read/64, error -71 [ 2356.363797][T11704] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2356.506189][T11704] usb 5-1: device descriptor read/64, error -71 [ 2356.622087][T11704] usb usb5-port1: attempt power cycle [ 2356.944081][T11704] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2356.973209][T11704] usb 5-1: device descriptor read/8, error -71 [ 2357.049007][T23931] usb 10-1: new high-speed USB device number 123 using dummy_hcd [ 2357.193504][T23931] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2357.193555][T23931] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2357.193572][T23931] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2357.195947][T23931] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2357.195975][T23931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.195989][T23931] usb 10-1: Product: syz [ 2357.195998][T23931] usb 10-1: Manufacturer: syz [ 2357.196008][T23931] usb 10-1: SerialNumber: syz [ 2357.202100][T23931] usb 10-1: config 0 descriptor?? [ 2357.210907][T11704] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2357.309669][T11704] usb 5-1: device descriptor read/8, error -71 [ 2357.414828][T32631] raw-gadget.5 gadget.9: fail, usb_ep_enable returned -22 [ 2357.415037][T32631] raw-gadget.5 gadget.9: fail, usb_ep_enable returned -22 [ 2357.418029][T23931] usb 10-1: ucan: probing device on interface #0 [ 2357.421481][T11704] usb usb5-port1: unable to enumerate USB device [ 2357.550764][T32642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13137'. [ 2357.836292][T20446] usb 6-1: USB disconnect, device number 38 [ 2358.213387][T23931] ucan 10-1:0.0: probe with driver ucan failed with error -71 [ 2358.248535][T23931] usb 10-1: USB disconnect, device number 123 [ 2358.420766][T21725] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2358.575618][T21725] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2358.575640][T21725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.575659][T21725] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2358.575681][T21725] usb 1-1: config 1 has no interface number 1 [ 2358.575729][T21725] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2358.575772][T21725] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2358.578055][T21725] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2358.578082][T21725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.578095][T21725] usb 1-1: Product: syz [ 2358.578105][T21725] usb 1-1: Manufacturer: syz [ 2358.578114][T21725] usb 1-1: SerialNumber: syz [ 2358.659117][T23931] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 2358.706184][T11704] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2358.840281][T23931] usb 10-1: Using ep0 maxpacket: 32 [ 2358.845203][T23931] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2358.845308][T23931] usb 10-1: config 0 has no interface number 0 [ 2358.847831][T23931] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2358.847860][T23931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.847942][T23931] usb 10-1: Product: syz [ 2358.847954][T23931] usb 10-1: Manufacturer: syz [ 2358.847963][T23931] usb 10-1: SerialNumber: syz [ 2358.858711][T32668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2358.871194][T32668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2358.877555][T11704] usb 6-1: Using ep0 maxpacket: 32 [ 2358.881444][T11704] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2358.881538][T11704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.899496][T23931] usb 10-1: config 0 descriptor?? [ 2358.931293][T11704] usb 6-1: config 0 descriptor?? [ 2358.980971][T11704] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2359.017603][T23931] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2359.106225][ T2801] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2359.209325][T32682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2359.210692][ C0] usb-serial ttyUSB0: qt2_process_read_urb - status message too short [ 2359.244912][T23931] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2359.249024][ T2801] usb 5-1: Using ep0 maxpacket: 16 [ 2359.262829][ T2801] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2359.262883][ T2801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2359.282112][T32682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2359.310756][ T2801] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2359.310793][ T2801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.310816][ T2801] usb 5-1: Product: syz [ 2359.310833][ T2801] usb 5-1: Manufacturer: syz [ 2359.310849][ T2801] usb 5-1: SerialNumber: syz [ 2359.359944][ T2801] usb 5-1: config 0 descriptor?? [ 2359.364076][T11704] gspca_sunplus: reg_w_riv err -71 [ 2359.364403][T11704] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2359.390776][ T2801] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2359.390812][ T2801] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 2359.453328][T23931] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2359.488680][T11704] usb 6-1: USB disconnect, device number 39 [ 2359.607444][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2359.609096][T23931] usb 10-1: USB disconnect, device number 124 [ 2359.661557][T23931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2359.889306][T23931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2359.917084][T23931] quatech2 10-1:0.51: device disconnected [ 2359.991374][ T2801] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 2359.999319][ T2801] em28xx 5-1:0.0: Config register raw data: 0xd6 [ 2360.234567][ T2801] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 2360.234594][ T2801] em28xx 5-1:0.0: No AC97 audio processor [ 2360.277150][ T2801] usb 5-1: USB disconnect, device number 18 [ 2360.293674][ T2801] em28xx 5-1:0.0: Disconnecting em28xx [ 2360.303413][ T2801] em28xx 5-1:0.0: Freeing device [ 2360.313010][T10880] udevd[10880]: setting owner of /dev/bus/usb/005/018 to uid=0, gid=0 failed: No such file or directory [ 2360.681216][T21725] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2360.681282][T21725] usb 1-1: MIDIStreaming interface descriptor not found [ 2361.031545][T21725] usb 1-1: USB disconnect, device number 47 [ 2361.231088][T19120] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 2361.234006][T15723] udevd[15723]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2361.376115][ T345] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2361.382685][T19120] usb 5-1: device descriptor read/64, error -71 [ 2361.622233][ T354] openvswitch: netlink: Actions may not be safe on all matching packets [ 2361.634341][ T357] netlink: 'syz.9.13154': attribute type 1 has an invalid length. [ 2361.652981][T19120] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2361.794177][T19120] usb 5-1: device descriptor read/64, error -71 [ 2361.897544][T19120] usb usb5-port1: attempt power cycle [ 2362.058999][T21725] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2362.204040][T21725] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2362.204077][T21725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.220540][T21725] usb 1-1: config 0 descriptor?? [ 2362.230623][T19120] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 2362.245040][ T382] syzkaller1: entered promiscuous mode [ 2362.245069][ T382] syzkaller1: entered allmulticast mode [ 2362.249078][ T382] fuse: Unknown parameter 'FdÕëša§¢' [ 2362.274048][T19120] usb 5-1: device descriptor read/8, error -71 [ 2362.455137][T21725] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 2362.455161][T21725] hackrf 1-1:0.0: Could not detect board [ 2362.455226][T21725] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 2362.467666][T21725] usb 1-1: USB disconnect, device number 48 [ 2362.499856][T19120] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 2362.522601][T19120] usb 5-1: device descriptor read/8, error -71 [ 2362.556535][ T395] FAULT_INJECTION: forcing a failure. [ 2362.556535][ T395] name failslab, interval 1, probability 0, space 0, times 0 [ 2362.556580][ T395] CPU: 0 UID: 0 PID: 395 Comm: syz.0.13162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2362.556613][ T395] Tainted: [L]=SOFTLOCKUP [ 2362.556621][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2362.556635][ T395] Call Trace: [ 2362.556644][ T395] [ 2362.556654][ T395] dump_stack_lvl+0xe8/0x150 [ 2362.556695][ T395] should_fail_ex+0x46b/0x600 [ 2362.556736][ T395] should_failslab+0xa8/0x100 [ 2362.556768][ T395] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 2362.556800][ T395] ? alloc_vfsmnt+0xe6/0x410 [ 2362.556838][ T395] kstrdup+0x42/0x100 [ 2362.556863][ T395] alloc_vfsmnt+0xe6/0x410 [ 2362.556899][ T395] clone_mnt+0x4b/0x9a0 [ 2362.556935][ T395] ? is_subdir+0x291/0x2b0 [ 2362.556966][ T395] ? is_subdir+0x2b/0x2b0 [ 2362.557002][ T395] clone_private_mount+0x3a7/0x680 [ 2362.557034][ T395] ovl_fill_super+0x1488/0x5d30 [ 2362.557076][ T395] ? __lock_acquire+0x6b5/0x2d10 [ 2362.557126][ T395] ? __pfx_ovl_fill_super+0x10/0x10 [ 2362.557160][ T395] ? __lock_acquire+0x6b5/0x2d10 [ 2362.557197][ T395] ? __lock_acquire+0x6b5/0x2d10 [ 2362.557233][ T395] ? __lock_acquire+0x6b5/0x2d10 [ 2362.557264][ T395] ? do_raw_spin_lock+0x12b/0x2f0 [ 2362.557299][ T395] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2362.557332][ T395] ? lockdep_hardirqs_on+0x7a/0x110 [ 2362.557364][ T395] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2362.557394][ T395] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2362.557413][ T395] ? __raw_spin_lock_init+0x45/0x100 [ 2362.557434][ T395] ? sget_fc+0x962/0xa40 [ 2362.557451][ T395] ? __pfx_set_anon_super_fc+0x10/0x10 [ 2362.557468][ T395] ? __pfx_ovl_fill_super+0x10/0x10 [ 2362.557481][ T395] get_tree_nodev+0xbb/0x150 [ 2362.557500][ T395] vfs_get_tree+0x92/0x2a0 [ 2362.557520][ T395] do_new_mount+0x341/0xd30 [ 2362.557533][ T395] ? apparmor_capable+0x126/0x170 [ 2362.557554][ T395] ? __pfx_do_new_mount+0x10/0x10 [ 2362.557568][ T395] ? ns_capable+0x89/0xe0 [ 2362.557588][ T395] ? path_mount+0x690/0x10e0 [ 2362.557602][ T395] ? user_path_at+0xd4/0x160 [ 2362.557620][ T395] ? user_path_at+0xd4/0x160 [ 2362.557638][ T395] __se_sys_mount+0x31d/0x420 [ 2362.557657][ T395] ? __pfx___se_sys_mount+0x10/0x10 [ 2362.557676][ T395] ? __x64_sys_mount+0x20/0xc0 [ 2362.557690][ T395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2362.557704][ T395] do_syscall_64+0x174/0x580 [ 2362.557722][ T395] ? trace_irq_disable+0x3b/0x140 [ 2362.557737][ T395] ? clear_bhb_loop+0x40/0x90 [ 2362.557752][ T395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2362.557765][ T395] RIP: 0033:0x7fd453c5ce59 [ 2362.557778][ T395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2362.557790][ T395] RSP: 002b:00007fd451eb6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2362.557806][ T395] RAX: ffffffffffffffda RBX: 00007fd453ed5fa0 RCX: 00007fd453c5ce59 [ 2362.557815][ T395] RDX: 00002000000003c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 2362.557824][ T395] RBP: 00007fd451eb6090 R08: 00002000000004c0 R09: 0000000000000000 [ 2362.557832][ T395] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 2362.557840][ T395] R13: 00007fd453ed6038 R14: 00007fd453ed5fa0 R15: 00007ffd4edcaa08 [ 2362.557860][ T395] [ 2362.558083][ T395] overlayfs: failed to clone upperpath [ 2362.694774][T19120] usb usb5-port1: unable to enumerate USB device [ 2362.984547][T21725] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2363.224717][T32544] usb 10-1: new high-speed USB device number 125 using dummy_hcd [ 2363.240266][T21725] usb 1-1: Using ep0 maxpacket: 16 [ 2363.244969][T21725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.245016][T21725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2363.245035][T21725] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2363.245050][T21725] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2363.246294][T21725] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2363.246322][T21725] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2363.246337][T21725] usb 1-1: Manufacturer: syz [ 2363.253528][T21725] usb 1-1: config 0 descriptor?? [ 2363.382987][T32544] usb 10-1: Using ep0 maxpacket: 32 [ 2363.384790][T32544] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2363.384821][T32544] usb 10-1: config 0 has no interface number 0 [ 2363.387578][T32544] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2363.387608][T32544] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.387630][T32544] usb 10-1: Product: syz [ 2363.387645][T32544] usb 10-1: Manufacturer: syz [ 2363.387655][T32544] usb 10-1: SerialNumber: syz [ 2363.395077][T32544] usb 10-1: config 0 descriptor?? [ 2363.537585][T32544] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2363.809739][ T429] netlink: 'syz.4.13169': attribute type 19 has an invalid length. [ 2363.865460][ T406] PKCS7: Unknown OID: [4] 0.0 [ 2363.865474][ T406] PKCS7: Only support pkcs7_signedData type [ 2363.893278][T21725] usb 1-1: USB disconnect, device number 49 [ 2364.088408][T32544] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2364.119674][T32544] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2364.886394][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2364.887647][T21725] usb 10-1: USB disconnect, device number 125 [ 2364.924094][T21725] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2364.957592][T21725] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2364.963202][T21725] quatech2 10-1:0.51: device disconnected [ 2364.994895][ T466] FAULT_INJECTION: forcing a failure. [ 2364.994895][ T466] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.994923][ T466] CPU: 0 UID: 0 PID: 466 Comm: syz.5.13173 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2364.994943][ T466] Tainted: [L]=SOFTLOCKUP [ 2364.994948][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2364.994956][ T466] Call Trace: [ 2364.994961][ T466] [ 2364.994967][ T466] dump_stack_lvl+0xe8/0x150 [ 2364.994988][ T466] should_fail_ex+0x46b/0x600 [ 2364.995011][ T466] should_failslab+0xa8/0x100 [ 2364.995028][ T466] __kmalloc_cache_noprof+0x84/0x690 [ 2364.995045][ T466] ? vfs_parse_monolithic_sep+0x290/0x360 [ 2364.995063][ T466] ? v9fs_get_tree+0xaa/0xac0 [ 2364.995081][ T466] v9fs_get_tree+0xaa/0xac0 [ 2364.995096][ T466] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 2364.995122][ T466] ? __pfx_v9fs_get_tree+0x10/0x10 [ 2364.995167][ T466] vfs_get_tree+0x92/0x2a0 [ 2364.995202][ T466] do_new_mount+0x341/0xd30 [ 2364.995223][ T466] ? apparmor_capable+0x126/0x170 [ 2364.995257][ T466] ? __pfx_do_new_mount+0x10/0x10 [ 2364.995275][ T466] ? ns_capable+0x89/0xe0 [ 2364.995295][ T466] ? path_mount+0x690/0x10e0 [ 2364.995308][ T466] ? user_path_at+0xd4/0x160 [ 2364.995327][ T466] ? user_path_at+0xd4/0x160 [ 2364.995344][ T466] __se_sys_mount+0x31d/0x420 [ 2364.995362][ T466] ? __pfx___se_sys_mount+0x10/0x10 [ 2364.995380][ T466] ? __x64_sys_mount+0x20/0xc0 [ 2364.995394][ T466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2364.995408][ T466] do_syscall_64+0x174/0x580 [ 2364.995427][ T466] ? trace_irq_disable+0x3b/0x140 [ 2364.995442][ T466] ? clear_bhb_loop+0x40/0x90 [ 2364.995457][ T466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2364.995470][ T466] RIP: 0033:0x7f2a2f0ece59 [ 2364.995483][ T466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2364.995495][ T466] RSP: 002b:00007f2a2d346028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2364.995510][ T466] RAX: ffffffffffffffda RBX: 00007f2a2f365fa0 RCX: 00007f2a2f0ece59 [ 2364.995520][ T466] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 2364.995529][ T466] RBP: 00007f2a2d346090 R08: 0000200000000000 R09: 0000000000000000 [ 2364.995537][ T466] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000002 [ 2364.995550][ T466] R13: 00007f2a2f366038 R14: 00007f2a2f365fa0 R15: 00007fff40e17d68 [ 2364.995569][ T466] [ 2365.888184][T32544] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2366.049905][T32544] usb 6-1: Using ep0 maxpacket: 16 [ 2366.060462][T32544] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2366.062513][T32544] usb 6-1: config index 0 descriptor too short (expected 43058, got 2015) [ 2366.062544][T32544] usb 6-1: config 212 has too many interfaces: 93, using maximum allowed: 32 [ 2366.062569][T32544] usb 6-1: config 212 has an invalid interface descriptor of length 5, skipping [ 2366.062591][T32544] usb 6-1: config 212 has an invalid descriptor of length 0, skipping remainder of the config [ 2366.062612][T32544] usb 6-1: config 212 has 0 interfaces, different from the descriptor's value: 93 [ 2366.067209][T32544] usb 6-1: string descriptor 0 read error: -22 [ 2366.067501][T32544] usb 6-1: New USB device found, idVendor=12d1, idProduct=7d0e, bcdDevice=68.11 [ 2366.067531][T32544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.265462][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13183'. [ 2366.265602][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13183'. [ 2366.290792][ T515] netlink: 16 bytes leftover after parsing attributes in process `syz.9.13182'. [ 2366.291076][ T515] FAULT_INJECTION: forcing a failure. [ 2366.291076][ T515] name failslab, interval 1, probability 0, space 0, times 0 [ 2366.291111][ T515] CPU: 0 UID: 0 PID: 515 Comm: syz.9.13182 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2366.291142][ T515] Tainted: [L]=SOFTLOCKUP [ 2366.291150][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2366.291164][ T515] Call Trace: [ 2366.291173][ T515] [ 2366.291183][ T515] dump_stack_lvl+0xe8/0x150 [ 2366.291216][ T515] should_fail_ex+0x46b/0x600 [ 2366.291255][ T515] should_failslab+0xa8/0x100 [ 2366.291287][ T515] __kvmalloc_node_noprof+0x170/0x8e0 [ 2366.291320][ T515] ? __rhashtable_init_noprof+0x56d/0xae0 [ 2366.291344][ T515] ? __rhashtable_init_noprof+0x148/0xae0 [ 2366.291390][ T515] __rhashtable_init_noprof+0x56d/0xae0 [ 2366.291421][ T515] nft_rhash_init+0x11f/0x3c0 [ 2366.291449][ T515] ? __pfx_nft_rhash_init+0x10/0x10 [ 2366.291470][ T515] ? kasan_quarantine_put+0xbb/0x1f0 [ 2366.291494][ T515] ? __pfx_nft_rhash_key+0x10/0x10 [ 2366.291516][ T515] ? __pfx_nft_rhash_obj+0x10/0x10 [ 2366.291538][ T515] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 2366.291565][ T515] ? kfree+0x1c5/0x6c0 [ 2366.291587][ T515] ? nf_tables_newset+0x13bf/0x2580 [ 2366.291625][ T515] nf_tables_newset+0x1c2b/0x2580 [ 2366.291669][ T515] ? __pfx_nf_tables_newset+0x10/0x10 [ 2366.291721][ T515] ? __nla_parse+0x40/0x60 [ 2366.291749][ T515] nfnetlink_rcv+0x1247/0x27b0 [ 2366.291817][ T515] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2366.291867][ T515] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 2366.291893][ T515] ? ref_tracker_free+0x673/0x820 [ 2366.291954][ T515] ? lockdep_hardirqs_on+0x7a/0x110 [ 2366.291988][ T515] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2366.292022][ T515] ? rcu_preempt_deferred_qs_irqrestore+0x856/0xc60 [ 2366.292070][ T515] netlink_unicast+0x780/0x920 [ 2366.292112][ T515] netlink_sendmsg+0x813/0xb40 [ 2366.292145][ T515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2366.292171][ T515] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 2366.292204][ T515] ? aa_sock_msg_perm+0x122/0x200 [ 2366.292230][ T515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2366.292250][ T515] sock_sendmsg_nosec+0x13a/0x180 [ 2366.292280][ T515] ____sys_sendmsg+0x55c/0x870 [ 2366.292319][ T515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2366.292372][ T515] ? import_iovec+0x73/0xa0 [ 2366.292402][ T515] ___sys_sendmsg+0x2a5/0x360 [ 2366.292435][ T515] ? __lock_acquire+0x6b5/0x2d10 [ 2366.292467][ T515] ? __pfx____sys_sendmsg+0x10/0x10 [ 2366.292539][ T515] ? __fget_files+0x2a/0x420 [ 2366.292566][ T515] ? __fget_files+0x3a6/0x420 [ 2366.292602][ T515] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2366.292640][ T515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2366.292682][ T515] ? __pfx_ksys_write+0x10/0x10 [ 2366.292722][ T515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2366.292748][ T515] do_syscall_64+0x174/0x580 [ 2366.292781][ T515] ? trace_irq_disable+0x3b/0x140 [ 2366.292806][ T515] ? clear_bhb_loop+0x40/0x90 [ 2366.292832][ T515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2366.292855][ T515] RIP: 0033:0x7fc8fbbece59 [ 2366.292875][ T515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2366.292893][ T515] RSP: 002b:00007fc8f9e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2366.292920][ T515] RAX: ffffffffffffffda RBX: 00007fc8fbe65fa0 RCX: 00007fc8fbbece59 [ 2366.292938][ T515] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2366.292953][ T515] RBP: 00007fc8f9e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 2366.292966][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2366.292980][ T515] R13: 00007fc8fbe66038 R14: 00007fc8fbe65fa0 R15: 00007ffe4d426988 [ 2366.293015][ T515] [ 2366.361891][ T486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2366.365702][ T486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2366.371284][T21725] usb 6-1: USB disconnect, device number 40 [ 2366.445788][ T69] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2367.107875][T20446] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2367.259833][T20446] usb 5-1: Using ep0 maxpacket: 32 [ 2367.266711][T20446] usb 5-1: config 255 has an invalid interface number: 8 but max is 3 [ 2367.266747][T20446] usb 5-1: config 255 has an invalid interface number: 207 but max is 3 [ 2367.266772][T20446] usb 5-1: config 255 has an invalid interface number: 78 but max is 3 [ 2367.266796][T20446] usb 5-1: config 255 has an invalid interface number: 148 but max is 3 [ 2367.266821][T20446] usb 5-1: config 255 has an invalid descriptor of length 162, skipping remainder of the config [ 2367.266843][T20446] usb 5-1: config 255 has no interface number 0 [ 2367.266862][T20446] usb 5-1: config 255 has no interface number 1 [ 2367.266881][T20446] usb 5-1: config 255 has no interface number 2 [ 2367.266900][T20446] usb 5-1: config 255 has no interface number 3 [ 2367.267011][T20446] usb 5-1: config 255 interface 207 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2367.267039][T20446] usb 5-1: config 255 interface 207 altsetting 8 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 2367.267071][T20446] usb 5-1: config 255 interface 207 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2367.267093][T20446] usb 5-1: config 255 interface 207 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 2367.267126][T20446] usb 5-1: config 255 interface 207 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 2367.267153][T20446] usb 5-1: config 255 interface 207 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 2367.267178][T20446] usb 5-1: config 255 interface 207 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 2367.267225][T20446] usb 5-1: config 255 interface 78 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 2367.267271][T20446] usb 5-1: config 255 interface 78 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 2367.267298][T20446] usb 5-1: config 255 interface 78 altsetting 9 endpoint 0x1 has invalid maxpacket 544, setting to 64 [ 2367.267343][T20446] usb 5-1: config 255 interface 148 altsetting 158 has an invalid descriptor for endpoint zero, skipping [ 2367.267367][T20446] usb 5-1: config 255 interface 148 altsetting 158 has a duplicate endpoint with address 0x5, skipping [ 2367.267392][T20446] usb 5-1: config 255 interface 148 altsetting 158 has a duplicate endpoint with address 0x5, skipping [ 2367.267419][T20446] usb 5-1: config 255 interface 148 altsetting 158 has a duplicate endpoint with address 0x8A, skipping [ 2367.267445][T20446] usb 5-1: config 255 interface 148 altsetting 158 has a duplicate endpoint with address 0x1, skipping [ 2367.267473][T20446] usb 5-1: config 255 interface 148 altsetting 158 has a duplicate endpoint with address 0x5, skipping [ 2367.267498][T20446] usb 5-1: config 255 interface 148 altsetting 158 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 2367.267529][T20446] usb 5-1: config 255 interface 8 has no altsetting 0 [ 2367.267549][T20446] usb 5-1: config 255 interface 207 has no altsetting 0 [ 2367.267570][T20446] usb 5-1: config 255 interface 78 has no altsetting 0 [ 2367.267590][T20446] usb 5-1: config 255 interface 148 has no altsetting 0 [ 2367.364997][T20446] usb 5-1: New USB device found, idVendor=1199, idProduct=9041, bcdDevice=31.cc [ 2367.365036][T20446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.365059][T20446] usb 5-1: Product: å · [ 2367.365076][T20446] usb 5-1: Manufacturer: 《 [ 2367.365093][T20446] usb 5-1: SerialNumber: ë”·î¨çºé½‚ä–鵫펳鈋ꎓ⌎䈨뮊躥ᬉäŒî¸²æ°€áº‹ç²‚ì脒圤뗣è­ë‰¢ç²šï·ªëª¢ç˜ä é ë¢äŒ—匚熔쥮륟ꨅ⟧囉锹㌀枫ì´è¦­ä›¢áª´ï·ç»†éˆä´šï¡µë«„î¹§é‹á¨†éƒÑ¾é‚­äœ¤ä®›à«€ç†³ë„“㰾㑱ᅘ翺䇓懓﷢ꦃᤠ[ 2367.630261][T20446] usb 5-1: Interface #207 referenced by multiple IADs [ 2367.630387][T20446] usb 5-1: Interface #148 referenced by multiple IADs [ 2367.809000][ T564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13189'. [ 2367.856368][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2367.859091][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.063664][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.068461][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.212526][T14968] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2368.287522][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.300631][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.355490][T14968] usb 1-1: Using ep0 maxpacket: 32 [ 2368.359588][T14968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2368.359758][T14968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2368.359867][T14968] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2368.359894][T14968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.419919][T14968] usb 1-1: config 0 descriptor?? [ 2368.443988][T14968] hub 1-1:0.0: USB hub found [ 2368.725478][T20446] usb 5-1: USB disconnect, device number 23 [ 2369.209833][ T600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13196'. [ 2370.036836][ T623] loop5: detected capacity change from 0 to 127 [ 2370.039779][ T623] loop5: unable to read partition table [ 2370.039999][ T623] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5) [ 2370.213159][ T626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13198'. [ 2370.507683][T20446] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2370.653721][T20446] usb 5-1: Using ep0 maxpacket: 32 [ 2370.668289][T20446] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2370.668331][T20446] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2370.668356][T20446] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2370.702346][T20446] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2370.702617][T20446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.702644][T20446] usb 5-1: Product: syz [ 2370.702662][T20446] usb 5-1: Manufacturer: syz [ 2370.702680][T20446] usb 5-1: SerialNumber: syz [ 2370.758638][T20446] usb 5-1: config 0 descriptor?? [ 2370.878715][T14968] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2370.922174][T14968] usbhid 1-1:0.0: can't add hid device: -71 [ 2370.922544][T14968] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2370.982162][T20446] gs_usb 5-1:0.0: Configuring for 21 interfaces [ 2370.994994][T14968] usb 1-1: USB disconnect, device number 50 [ 2371.055046][ T663] syzkaller1: entered promiscuous mode [ 2371.055077][ T663] syzkaller1: entered allmulticast mode [ 2371.151809][T20446] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 2371.259467][T20446] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPIPE) [ 2371.489685][T20446] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 2371.558840][T21726] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 2371.688937][T21726] usb 1-1: device descriptor read/64, error -71 [ 2371.974675][T21726] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 2372.098356][T21726] usb 1-1: device descriptor read/64, error -71 [ 2372.215158][T21726] usb usb1-port1: attempt power cycle [ 2372.547220][T21726] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 2372.565945][T21726] usb 1-1: device descriptor read/8, error -71 [ 2372.793827][T21726] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 2372.815888][T21726] usb 1-1: device descriptor read/8, error -71 [ 2372.923986][T21726] usb usb1-port1: unable to enumerate USB device [ 2373.150946][T32544] usb 5-1: USB disconnect, device number 24 [ 2373.660929][T32544] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2373.682337][ T653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2374.066632][T32544] usb 5-1: Using ep0 maxpacket: 16 [ 2374.114452][T32544] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2374.114486][T32544] usb 5-1: config 0 has no interface number 0 [ 2374.132227][T32544] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2374.132263][T32544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2374.132286][T32544] usb 5-1: Product: syz [ 2374.132304][T32544] usb 5-1: Manufacturer: syz [ 2374.132320][T32544] usb 5-1: SerialNumber: syz [ 2374.154491][T32544] usb 5-1: config 0 descriptor?? [ 2374.164884][T32544] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2374.179695][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13213'. [ 2374.488815][ T736] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13215'. [ 2374.554374][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2374.561288][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.563666][T32544] gspca_spca1528: reg_w err -71 [ 2374.584541][T32544] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 2374.594234][T32544] usb 5-1: USB disconnect, device number 25 [ 2374.628023][ T740] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13216'. [ 2375.483210][ T775] syzkaller1: entered promiscuous mode [ 2375.483241][ T775] syzkaller1: entered allmulticast mode [ 2375.659812][T20446] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 2375.671891][ T783] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 2375.703899][ T786] netlink: 112 bytes leftover after parsing attributes in process `syz.4.13225'. [ 2375.850499][ T761] netlink: 'syz.5.13220': attribute type 3 has an invalid length. [ 2375.850524][ T761] netlink: 666 bytes leftover after parsing attributes in process `syz.5.13220'. [ 2375.856483][ T761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2375.857157][ T761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2375.879618][T20446] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2375.883034][T20446] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2375.883070][T20446] usb 6-1: can't read configurations, error -71 [ 2375.935857][ T796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13227'. [ 2376.074138][ T805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13226'. [ 2376.078379][ T802] vivid-003: ================= START STATUS ================= [ 2376.078403][ T802] vivid-003: RDS Tx I/O Mode: Controls [ 2376.078430][ T802] vivid-003: RDS Program ID: 32904 [ 2376.078451][ T802] vivid-003: RDS Program Type: 3 [ 2376.078472][ T802] vivid-003: RDS PS Name: VIVID-TX [ 2376.078491][ T802] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 2376.078512][ T802] vivid-003: RDS Stereo: true [ 2376.078530][ T802] vivid-003: RDS Artificial Head: false [ 2376.078548][ T802] vivid-003: RDS Compressed: false [ 2376.078566][ T802] vivid-003: RDS Dynamic PTY: false [ 2376.078586][ T802] vivid-003: RDS Traffic Announcement: false [ 2376.078605][ T802] vivid-003: RDS Traffic Program: true [ 2376.078624][ T802] vivid-003: RDS Music: true [ 2376.078643][ T802] vivid-003: ================== END STATUS ================== [ 2376.342554][ T813] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13232'. [ 2376.342626][ T813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13232'. [ 2376.725116][ T829] FAULT_INJECTION: forcing a failure. [ 2376.725116][ T829] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.725158][ T829] CPU: 1 UID: 0 PID: 829 Comm: syz.4.13237 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2376.725192][ T829] Tainted: [L]=SOFTLOCKUP [ 2376.725201][ T829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2376.725214][ T829] Call Trace: [ 2376.725223][ T829] [ 2376.725233][ T829] dump_stack_lvl+0xe8/0x150 [ 2376.725265][ T829] should_fail_ex+0x46b/0x600 [ 2376.725306][ T829] should_failslab+0xa8/0x100 [ 2376.725344][ T829] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 2376.725373][ T829] ? __alloc_skb+0x1d0/0x7d0 [ 2376.725403][ T829] ? lockdep_hardirqs_on+0x7a/0x110 [ 2376.725443][ T829] __alloc_skb+0x1d0/0x7d0 [ 2376.725474][ T829] ? netlink_ack_tlv_len+0x6c/0x210 [ 2376.725511][ T829] netlink_ack+0x146/0xa50 [ 2376.725543][ T829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2376.725568][ T829] ? ref_tracker_free+0x673/0x820 [ 2376.725598][ T829] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2376.725620][ T829] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2376.725646][ T829] ? ____sys_sendmsg+0x55c/0x870 [ 2376.725675][ T829] ? ___sys_sendmsg+0x2a5/0x360 [ 2376.725702][ T829] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 2376.725733][ T829] ? do_syscall_64+0x174/0x580 [ 2376.725764][ T829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2376.725799][ T829] netlink_rcv_skb+0x2b6/0x4b0 [ 2376.725836][ T829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2376.725866][ T829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2376.725915][ T829] ? netlink_deliver_tap+0x2e/0x1b0 [ 2376.725949][ T829] ? netlink_deliver_tap+0x2e/0x1b0 [ 2376.725999][ T829] genl_rcv+0x28/0x40 [ 2376.726024][ T829] netlink_unicast+0x780/0x920 [ 2376.726070][ T829] netlink_sendmsg+0x813/0xb40 [ 2376.726103][ T829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2376.726128][ T829] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 2376.726164][ T829] ? aa_sock_msg_perm+0x122/0x200 [ 2376.726189][ T829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2376.726211][ T829] sock_sendmsg_nosec+0x13a/0x180 [ 2376.726242][ T829] ____sys_sendmsg+0x55c/0x870 [ 2376.726284][ T829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2376.726329][ T829] ? import_iovec+0x73/0xa0 [ 2376.726361][ T829] ___sys_sendmsg+0x2a5/0x360 [ 2376.726395][ T829] ? __lock_acquire+0x6b5/0x2d10 [ 2376.726427][ T829] ? __pfx____sys_sendmsg+0x10/0x10 [ 2376.726502][ T829] ? __fget_files+0x2a/0x420 [ 2376.726529][ T829] ? __fget_files+0x3a6/0x420 [ 2376.726566][ T829] __x64_sys_sendmsg+0x1c3/0x2a0 [ 2376.726606][ T829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2376.726653][ T829] ? __pfx_ksys_write+0x10/0x10 [ 2376.726695][ T829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2376.726721][ T829] do_syscall_64+0x174/0x580 [ 2376.726753][ T829] ? trace_irq_disable+0x3b/0x140 [ 2376.726780][ T829] ? clear_bhb_loop+0x40/0x90 [ 2376.726809][ T829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2376.726832][ T829] RIP: 0033:0x7f46aee9ce59 [ 2376.726855][ T829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2376.726875][ T829] RSP: 002b:00007f46ad0ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2376.726901][ T829] RAX: ffffffffffffffda RBX: 00007f46af115fa0 RCX: 00007f46aee9ce59 [ 2376.726919][ T829] RDX: 0000000000008040 RSI: 0000200000005f00 RDI: 0000000000000003 [ 2376.726933][ T829] RBP: 00007f46ad0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2376.726948][ T829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2376.726971][ T829] R13: 00007f46af116038 R14: 00007f46af115fa0 R15: 00007ffcdd978258 [ 2376.727008][ T829] [ 2377.167985][T32200] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2377.269485][ T839] : renamed from virt_wifi0 [ 2377.308685][T32200] usb 1-1: Using ep0 maxpacket: 16 [ 2377.312270][T32200] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2377.312370][T32200] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 2377.315167][T32200] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2377.315214][T32200] usb 1-1: can't read configurations, error -61 [ 2377.442684][T32200] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2377.585233][T32200] usb 1-1: Using ep0 maxpacket: 16 [ 2377.592340][T32200] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2377.592442][T32200] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 2377.627152][T32200] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2377.627191][T32200] usb 1-1: can't read configurations, error -61 [ 2377.627633][T32200] usb usb1-port1: attempt power cycle [ 2377.708942][T21726] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 2377.864820][T21726] usb 5-1: config index 0 descriptor too short (expected 8210, got 18) [ 2377.864854][T21726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2377.864877][T21726] usb 5-1: config 0 has no interfaces? [ 2377.868642][T21726] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2377.868676][T21726] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2377.868699][T21726] usb 5-1: Product: syz [ 2377.868716][T21726] usb 5-1: Manufacturer: syz [ 2377.868732][T21726] usb 5-1: SerialNumber: syz [ 2377.935779][T21726] usb 5-1: config 0 descriptor?? [ 2377.956477][T32200] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2377.977513][T32200] usb 1-1: Using ep0 maxpacket: 16 [ 2377.980467][T32200] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2377.980559][T32200] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 2377.983407][T32200] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2377.983448][T32200] usb 1-1: can't read configurations, error -61 [ 2378.109283][T32200] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2378.130389][T32200] usb 1-1: Using ep0 maxpacket: 16 [ 2378.143330][T32200] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2378.143434][T32200] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 2378.163016][T32200] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2378.163061][T32200] usb 1-1: can't read configurations, error -61 [ 2378.182191][T32200] usb usb1-port1: unable to enumerate USB device [ 2378.190886][T21726] usb 5-1: USB disconnect, device number 26 [ 2378.547138][T32200] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2378.690007][T32200] usb 6-1: Using ep0 maxpacket: 32 [ 2378.708567][T32200] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 2378.708603][T32200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.727604][T32200] usb 6-1: Product: syz [ 2378.727627][T32200] usb 6-1: Manufacturer: syz [ 2378.727645][T32200] usb 6-1: SerialNumber: syz [ 2378.971829][T32200] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 2378.992459][T32200] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2378.992917][T32200] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 2378.992972][T32200] usb 6-1: media controller created [ 2379.060479][T32200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2379.133263][T32200] usb 6-1: selecting invalid altsetting 2 [ 2379.133288][T32200] set interface failed [ 2379.133307][T32200] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2379.133327][T32200] error writing reg: 0xff, val: 0x00 [ 2379.216027][T32200] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 2379.286337][T32200] usb 6-1: USB disconnect, device number 43 [ 2379.842322][T32200] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2379.999403][T32200] usb 6-1: Using ep0 maxpacket: 32 [ 2380.009875][T32200] usb 6-1: config 7 has an invalid interface number: 79 but max is 0 [ 2380.009909][T32200] usb 6-1: config 7 has no interface number 0 [ 2380.009955][T32200] usb 6-1: config 7 interface 79 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2380.009994][T32200] usb 6-1: config 7 interface 79 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 2380.010017][T32200] usb 6-1: config 7 interface 79 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 2380.010040][T32200] usb 6-1: config 7 interface 79 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 2380.010066][T32200] usb 6-1: config 7 interface 79 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 2380.010089][T32200] usb 6-1: config 7 interface 79 altsetting 3 endpoint 0x8 has an invalid bInterval 141, changing to 7 [ 2380.010120][T32200] usb 6-1: config 7 interface 79 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2380.010148][T32200] usb 6-1: config 7 interface 79 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 2380.010173][T32200] usb 6-1: config 7 interface 79 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 2380.010198][T32200] usb 6-1: config 7 interface 79 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 2380.010221][T32200] usb 6-1: config 7 interface 79 has no altsetting 0 [ 2380.030689][T32200] usb 6-1: New USB device found, idVendor=0557, idProduct=2011, bcdDevice=f2.fc [ 2380.030726][T32200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2380.030750][T32200] usb 6-1: Product: 倊 [ 2380.030766][T32200] usb 6-1: Manufacturer: †[ 2380.030782][T32200] usb 6-1: SerialNumber: ⋯審댅è«ä†ƒèºœì±¡á“žá¶‰è—쪣᫔蕡헱볾囊僾ᦳ䃥ꤪê¾ç™Ÿìº”뇾ꬫ烻éœãƒ”ë£äœŒè”ˆãš£ç‹¢ï«ì€¥ä¥„殛踼æ¥ê¡î•䪨á»è¤†ê¾˜ï§ç¢®ê£¤åŸ¼å¯¯ê†©í°î¡£ê½Ší‘°ï¢œî‰¬ïºšå¯£ì–•Ⓜ慵뺪쑂çƒâ—‡è«ŒãŸ¡è‰€â–Žã•„衪퟽뵢ëªè¹¶ãµ¦æ±‹ë–„ꮫڔ俨槥⿃㮴ã¸í‰›é…‹ê²³ä¢ˆê¦Œá¼’⮎᭺ۥá™î²¤ì’³é±¢ä¿–僥떊煵兇뫽鋆ë½ä†±å£“ [ 2380.433943][ T926] syzkaller1: entered promiscuous mode [ 2380.433974][ T926] syzkaller1: entered allmulticast mode [ 2380.446474][ T927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13257'. [ 2381.425369][ T920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input140 [ 2381.896721][ T939] syzkaller1: entered promiscuous mode [ 2381.896753][ T939] syzkaller1: entered allmulticast mode [ 2382.015773][T13915] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 2382.519196][T13915] usb 10-1: Using ep0 maxpacket: 8 [ 2382.522890][T13915] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2382.524500][T13915] usb 10-1: config 6 has an invalid interface number: 218 but max is 0 [ 2382.524536][T13915] usb 10-1: config 6 has no interface number 0 [ 2382.524572][T13915] usb 10-1: config 6 interface 218 has no altsetting 0 [ 2382.527625][T13915] usb 10-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=35.2f [ 2382.527657][T13915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.527680][T13915] usb 10-1: Product: syz [ 2382.527697][T13915] usb 10-1: Manufacturer: syz [ 2382.527712][T13915] usb 10-1: SerialNumber: syz [ 2382.781993][T32200] mos7840 6-1:7.79: required endpoints missing [ 2382.821701][ T903] syz.5.13250 (903) used greatest stack depth: 16664 bytes left [ 2382.852659][T32200] usb 6-1: USB disconnect, device number 44 [ 2383.435100][ T936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2383.435905][ T936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2383.536814][T13915] mdc800 10-1:6.218: probe fails -> wrong Interface [ 2383.567047][T13915] usb 10-1: USB disconnect, device number 126 [ 2383.804068][ T1016] loop8: detected capacity change from 0 to 7 [ 2383.812398][ T1014] sctp: [Deprecated]: syz.4.13271 (pid 1014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2383.812398][ T1014] Use struct sctp_sack_info instead [ 2383.813765][ T1016] Dev loop8: unable to read RDB block 7 [ 2383.813810][ T1016] loop8: unable to read partition table [ 2383.814057][ T1016] loop8: partition table beyond EOD, truncated [ 2383.825738][ T1016] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2383.835915][T21725] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2383.894737][ T1020] sg_write: data in/out 451179/114 bytes for SCSI command 0x0-- guessing data in; [ 2383.894737][ T1020] program syz.4.13273 not setting count and/or reply_len properly [ 2383.896307][ T1020] FAULT_INJECTION: forcing a failure. [ 2383.896307][ T1020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2383.896347][ T1020] CPU: 0 UID: 0 PID: 1020 Comm: syz.4.13273 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2383.896384][ T1020] Tainted: [L]=SOFTLOCKUP [ 2383.896392][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2383.896405][ T1020] Call Trace: [ 2383.896414][ T1020] [ 2383.896423][ T1020] dump_stack_lvl+0xe8/0x150 [ 2383.896458][ T1020] should_fail_ex+0x46b/0x600 [ 2383.896497][ T1020] _copy_from_iter+0x1d3/0x1670 [ 2383.896529][ T1020] ? pfn_valid+0x125/0x4c0 [ 2383.896554][ T1020] ? pfn_valid+0x440/0x4c0 [ 2383.896579][ T1020] ? __pfx__copy_from_iter+0x10/0x10 [ 2383.896602][ T1020] ? bvec_try_merge_page+0x1d4/0x280 [ 2383.896636][ T1020] ? bio_add_page+0x2e9/0x6f0 [ 2383.896666][ T1020] copy_page_from_iter+0x220/0x2d0 [ 2383.896694][ T1020] blk_rq_map_user_iov+0xa14/0x1790 [ 2383.896746][ T1020] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2383.896798][ T1020] ? import_ubuf+0xfb/0x1d0 [ 2383.896825][ T1020] blk_rq_map_user_io+0x2ae/0x440 [ 2383.896865][ T1020] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2383.896902][ T1020] ? do_raw_spin_lock+0x12b/0x2f0 [ 2383.896935][ T1020] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2383.896967][ T1020] ? lockdep_hardirqs_on+0x7a/0x110 [ 2383.897001][ T1020] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2383.897034][ T1020] ? rt_mutex_slowunlock+0x1cb/0x300 [ 2383.897062][ T1020] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2383.897101][ T1020] sg_common_write+0xcff/0x13e0 [ 2383.897144][ T1020] ? __pfx_sg_common_write+0x10/0x10 [ 2383.897170][ T1020] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 2383.897266][ T1020] ? ___ratelimit+0x58c/0x8d0 [ 2383.897351][ T1020] sg_write+0xafb/0xf00 [ 2383.897412][ T1020] ? __pfx_sg_write+0x10/0x10 [ 2383.897450][ T1020] ? __pfx_aa_file_perm+0x10/0x10 [ 2383.897515][ T1020] ? rw_verify_area+0x25b/0x4e0 [ 2383.897546][ T1020] ? __pfx_sg_write+0x10/0x10 [ 2383.897582][ T1020] vfs_write+0x2a3/0xba0 [ 2383.897623][ T1020] ? __pfx_vfs_write+0x10/0x10 [ 2383.897657][ T1020] ? __fget_files+0x2a/0x420 [ 2383.897694][ T1020] ? __fget_files+0x2a/0x420 [ 2383.897719][ T1020] ? __fget_files+0x3a6/0x420 [ 2383.897745][ T1020] ? __fget_files+0x2a/0x420 [ 2383.897782][ T1020] ksys_write+0x156/0x270 [ 2383.897817][ T1020] ? __pfx_ksys_write+0x10/0x10 [ 2383.897877][ T1020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2383.897926][ T1020] do_syscall_64+0x174/0x580 [ 2383.897959][ T1020] ? trace_irq_disable+0x3b/0x140 [ 2383.897985][ T1020] ? clear_bhb_loop+0x40/0x90 [ 2383.898015][ T1020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2383.898039][ T1020] RIP: 0033:0x7f46aee9ce59 [ 2383.898063][ T1020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2383.898084][ T1020] RSP: 002b:00007f46ad0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2383.898109][ T1020] RAX: ffffffffffffffda RBX: 00007f46af115fa0 RCX: 00007f46aee9ce59 [ 2383.898126][ T1020] RDX: 000000000000009c RSI: 0000200000000c40 RDI: 0000000000000004 [ 2383.898141][ T1020] RBP: 00007f46ad0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2383.898156][ T1020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2383.898171][ T1020] R13: 00007f46af116038 R14: 00007f46af115fa0 R15: 00007ffcdd978258 [ 2383.898214][ T1020] [ 2384.007357][T21725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2384.007503][T21725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2384.007544][T21725] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2384.007568][T21725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.017880][T21725] usb 1-1: config 0 descriptor?? [ 2384.394546][ T1032] FAULT_INJECTION: forcing a failure. [ 2384.394546][ T1032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2384.394584][ T1032] CPU: 1 UID: 0 PID: 1032 Comm: syz.9.13276 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2384.394610][ T1032] Tainted: [L]=SOFTLOCKUP [ 2384.394617][ T1032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2384.394629][ T1032] Call Trace: [ 2384.394636][ T1032] [ 2384.394644][ T1032] dump_stack_lvl+0xe8/0x150 [ 2384.394673][ T1032] should_fail_ex+0x46b/0x600 [ 2384.394706][ T1032] _copy_from_user+0x2d/0xb0 [ 2384.394728][ T1032] sctp_getsockopt_maxseg+0x130/0x3f0 [ 2384.394753][ T1032] ? __local_bh_enable+0x1e1/0x2f0 [ 2384.394783][ T1032] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 2384.394810][ T1032] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 2384.394836][ T1032] ? lockdep_hardirqs_on+0x7a/0x110 [ 2384.394869][ T1032] sctp_getsockopt+0x92d/0xb90 [ 2384.394899][ T1032] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2384.394925][ T1032] do_sock_getsockopt+0x51d/0x7e0 [ 2384.394960][ T1032] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2384.395001][ T1032] ? __fget_files+0x3a6/0x420 [ 2384.395021][ T1032] ? __fget_files+0x2a/0x420 [ 2384.395047][ T1032] __x64_sys_getsockopt+0x1aa/0x250 [ 2384.395079][ T1032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.395099][ T1032] do_syscall_64+0x174/0x580 [ 2384.395133][ T1032] ? trace_irq_disable+0x3b/0x140 [ 2384.395160][ T1032] ? clear_bhb_loop+0x40/0x90 [ 2384.395182][ T1032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.395200][ T1032] RIP: 0033:0x7fc8fbbece59 [ 2384.395218][ T1032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2384.395234][ T1032] RSP: 002b:00007fc8f9e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2384.395255][ T1032] RAX: ffffffffffffffda RBX: 00007fc8fbe65fa0 RCX: 00007fc8fbbece59 [ 2384.395268][ T1032] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 2384.395280][ T1032] RBP: 00007fc8f9e3e090 R08: 0000200000000200 R09: 0000000000000000 [ 2384.395291][ T1032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2384.395302][ T1032] R13: 00007fc8fbe66038 R14: 00007fc8fbe65fa0 R15: 00007ffe4d426988 [ 2384.395331][ T1032] [ 2384.444042][T32544] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 2384.564526][T21725] usbhid 1-1:0.0: can't add hid device: -71 [ 2384.564681][T21725] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2384.600428][T21725] usb 1-1: USB disconnect, device number 59 [ 2384.607776][T32544] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 2384.607808][T32544] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 2384.607830][T32544] usb 5-1: config 150 has no interface number 0 [ 2384.607874][T32544] usb 5-1: config 150 interface 204 has no altsetting 0 [ 2384.638660][T32544] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2384.638693][T32544] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.638714][T32544] usb 5-1: Product: syz [ 2384.638729][T32544] usb 5-1: Manufacturer: syz [ 2384.638744][T32544] usb 5-1: SerialNumber: syz [ 2384.950577][T32544] xr_serial 5-1:150.204: skipping garbage [ 2384.952292][T32544] xr_serial 5-1:150.204: xr_serial converter detected [ 2385.881623][T32544] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 2385.881694][T32544] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2385.899373][T32544] usb 5-1: USB disconnect, device number 27 [ 2385.904776][T32544] xr_serial 5-1:150.204: device disconnected [ 2385.970353][T21725] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2386.120597][T21725] usb 1-1: Using ep0 maxpacket: 8 [ 2386.124382][T21725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2386.127713][T21725] usb 1-1: config 4 interface 0 has no altsetting 0 [ 2386.137035][T21725] usb 1-1: string descriptor 0 read error: -22 [ 2386.137138][T21725] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2386.137163][T21725] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2386.180969][T21725] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2386.185669][ T1112] binder: 1110:1112 unknown command 0 [ 2386.185692][ T1112] binder: 1110:1112 ioctl c0306201 200000000100 returned -22 [ 2386.285530][T21725] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2386.285837][T21725] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2386.285872][T21725] usb 1-1: media controller created [ 2386.321782][ T1118] openvswitch: netlink: Actions may not be safe on all matching packets [ 2386.364555][T21725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2386.484853][ T1124] FAULT_INJECTION: forcing a failure. [ 2386.484853][ T1124] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.484896][ T1124] CPU: 1 UID: 0 PID: 1124 Comm: syz.5.13288 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2386.484938][ T1124] Tainted: [L]=SOFTLOCKUP [ 2386.484947][ T1124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2386.484960][ T1124] Call Trace: [ 2386.484969][ T1124] [ 2386.484979][ T1124] dump_stack_lvl+0xe8/0x150 [ 2386.485013][ T1124] should_fail_ex+0x46b/0x600 [ 2386.485052][ T1124] should_failslab+0xa8/0x100 [ 2386.485081][ T1124] __kmalloc_noprof+0xdf/0x7b0 [ 2386.485106][ T1124] ? kfree+0x4d/0x6c0 [ 2386.485128][ T1124] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2386.485161][ T1124] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2386.485189][ T1124] ? tomoyo_domain+0xd7/0x130 [ 2386.485227][ T1124] tomoyo_path_perm+0x283/0x560 [ 2386.485262][ T1124] ? tomoyo_path_perm+0x251/0x560 [ 2386.485295][ T1124] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2386.485328][ T1124] ? rt_spin_lock+0x1e0/0x400 [ 2386.485387][ T1124] ? __pfx_current_check_access_path+0x10/0x10 [ 2386.485418][ T1124] ? lookup_one_qstr_excl+0x1d4/0x360 [ 2386.485453][ T1124] tomoyo_path_symlink+0xab/0xf0 [ 2386.485480][ T1124] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 2386.485518][ T1124] ? __pfx_filename_create+0x10/0x10 [ 2386.485555][ T1124] security_path_symlink+0x16f/0x360 [ 2386.485586][ T1124] filename_symlinkat+0x134/0x420 [ 2386.485617][ T1124] ? __pfx_filename_symlinkat+0x10/0x10 [ 2386.485643][ T1124] ? do_getname+0x151/0x250 [ 2386.485667][ T1124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.485690][ T1124] __se_sys_symlink+0x4d/0x2b0 [ 2386.485713][ T1124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.485738][ T1124] do_syscall_64+0x174/0x580 [ 2386.485771][ T1124] ? trace_irq_disable+0x3b/0x140 [ 2386.485796][ T1124] ? clear_bhb_loop+0x40/0x90 [ 2386.485825][ T1124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.485847][ T1124] RIP: 0033:0x7f2a2f0ece59 [ 2386.485869][ T1124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2386.485889][ T1124] RSP: 002b:00007f2a2d346028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 2386.485917][ T1124] RAX: ffffffffffffffda RBX: 00007f2a2f365fa0 RCX: 00007f2a2f0ece59 [ 2386.485944][ T1124] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 2386.485959][ T1124] RBP: 00007f2a2d346090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.485971][ T1124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.485984][ T1124] R13: 00007f2a2f366038 R14: 00007f2a2f365fa0 R15: 00007fff40e17d68 [ 2386.486021][ T1124] [ 2386.486569][ T1124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2386.843469][ T1138] netlink: 'syz.9.13287': attribute type 5 has an invalid length. [ 2386.947224][T20446] usb 1-1: USB disconnect, device number 60 [ 2387.096864][ T1154] netlink: 'syz.9.13292': attribute type 27 has an invalid length. [ 2387.261182][ T1161] FAULT_INJECTION: forcing a failure. [ 2387.261182][ T1161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.261227][ T1161] CPU: 0 UID: 0 PID: 1161 Comm: syz.4.13293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2387.261265][ T1161] Tainted: [L]=SOFTLOCKUP [ 2387.261273][ T1161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2387.261287][ T1161] Call Trace: [ 2387.261298][ T1161] [ 2387.261308][ T1161] dump_stack_lvl+0xe8/0x150 [ 2387.261343][ T1161] should_fail_ex+0x46b/0x600 [ 2387.261383][ T1161] _copy_from_user+0x2d/0xb0 [ 2387.261411][ T1161] copy_folio_from_user+0x1e3/0x320 [ 2387.261448][ T1161] mfill_atomic_copy+0xf37/0x15b0 [ 2387.261509][ T1161] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 2387.261554][ T1161] userfaultfd_ioctl+0x2567/0x8520 [ 2387.261587][ T1161] ? __pfx_stack_trace_save+0x10/0x10 [ 2387.261626][ T1161] ? kasan_save_track+0x4f/0x80 [ 2387.261649][ T1161] ? kasan_save_track+0x3e/0x80 [ 2387.261673][ T1161] ? kasan_save_free_info+0x46/0x50 [ 2387.261705][ T1161] ? __kasan_slab_free+0x5c/0x80 [ 2387.261731][ T1161] ? kfree+0x1c5/0x6c0 [ 2387.261753][ T1161] ? tomoyo_path_number_perm+0x501/0x630 [ 2387.261787][ T1161] ? security_file_ioctl+0xc3/0x2a0 [ 2387.261817][ T1161] ? __se_sys_ioctl+0x47/0x170 [ 2387.261870][ T1161] ? do_syscall_64+0x174/0x580 [ 2387.261908][ T1161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.261937][ T1161] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2387.262004][ T1161] ? kasan_quarantine_put+0xbb/0x1f0 [ 2387.262039][ T1161] ? tomoyo_path_number_perm+0x219/0x630 [ 2387.262076][ T1161] ? tomoyo_path_number_perm+0x219/0x630 [ 2387.262114][ T1161] ? do_vfs_ioctl+0x117b/0x1540 [ 2387.262147][ T1161] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2387.262213][ T1161] ? __fget_files+0x2a/0x420 [ 2387.262244][ T1161] ? __fget_files+0x2a/0x420 [ 2387.262268][ T1161] ? __fget_files+0x3a6/0x420 [ 2387.262293][ T1161] ? __fget_files+0x2a/0x420 [ 2387.262323][ T1161] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2387.262357][ T1161] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2387.262390][ T1161] __se_sys_ioctl+0xff/0x170 [ 2387.262423][ T1161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.262449][ T1161] do_syscall_64+0x174/0x580 [ 2387.262482][ T1161] ? trace_irq_disable+0x3b/0x140 [ 2387.262508][ T1161] ? clear_bhb_loop+0x40/0x90 [ 2387.262537][ T1161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2387.262560][ T1161] RIP: 0033:0x7f46aee9ce59 [ 2387.262583][ T1161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2387.262603][ T1161] RSP: 002b:00007f46ad0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2387.262629][ T1161] RAX: ffffffffffffffda RBX: 00007f46af115fa0 RCX: 00007f46aee9ce59 [ 2387.262646][ T1161] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 2387.262663][ T1161] RBP: 00007f46ad0ee090 R08: 0000000000000000 R09: 0000000000000000 [ 2387.262678][ T1161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2387.262693][ T1161] R13: 00007f46af116038 R14: 00007f46af115fa0 R15: 00007ffcdd978258 [ 2387.262726][ T1161] [ 2387.582864][ T1168] netlink: 'syz.4.13294': attribute type 10 has an invalid length. [ 2387.671672][ T1173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13297'. [ 2387.777060][T21725] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2387.804230][ T37] audit: type=1326 audit(2000000161.772:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.5.13298" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a2f0ece59 code=0x0 [ 2387.903431][ T1177] binder: 1175:1177 ioctl 400c620e 200000000000 returned -22 [ 2387.923031][ T1181] netlink: 340 bytes leftover after parsing attributes in process `syz.9.13300'. [ 2387.932636][T21725] usb 1-1: Using ep0 maxpacket: 16 [ 2387.952306][T21725] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 2387.952339][T21725] usb 1-1: config 0 has no interface number 0 [ 2387.952375][T21725] usb 1-1: config 0 interface 66 has no altsetting 0 [ 2387.975600][T21725] usb 1-1: New USB device found, idVendor=13d8, idProduct=0022, bcdDevice=eb.aa [ 2387.975635][T21725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.975658][T21725] usb 1-1: Product: syz [ 2387.975675][T21725] usb 1-1: Manufacturer: syz [ 2387.975692][T21725] usb 1-1: SerialNumber: syz [ 2388.004674][T21725] usb 1-1: config 0 descriptor?? [ 2388.066369][ T1184] 9pnet_fd: Insufficient options for proto=fd [ 2388.153717][ T1190] comedi: valid board names for 8255 driver are: [ 2388.153736][ T1190] 8255 [ 2388.153744][ T1190] comedi: valid board names for vmk80xx driver are: [ 2388.153754][ T1190] vmk80xx [ 2388.153763][ T1190] comedi: valid board names for usbduxsigma driver are: [ 2388.153774][ T1190] usbduxsigma [ 2388.153781][ T1190] comedi: valid board names for usbduxfast driver are: [ 2388.153792][ T1190] usbduxfast [ 2388.153800][ T1190] comedi: valid board names for usbdux driver are: [ 2388.153810][ T1190] usbdux [ 2388.153818][ T1190] comedi: valid board names for ni6501 driver are: [ 2388.153828][ T1190] ni6501 [ 2388.153836][ T1190] comedi: valid board names for dt9812 driver are: [ 2388.153846][ T1190] dt9812 [ 2388.153854][ T1190] comedi: valid board names for ni_labpc_cs driver are: [ 2388.153864][ T1190] ni_labpc_cs [ 2388.153890][ T1190] comedi: valid board names for ni_daq_700 driver are: [ 2388.153900][ T1190] ni_daq_700 [ 2388.153909][ T1190] comedi: valid board names for labpc_pci driver are: [ 2388.153918][ T1190] labpc_pci [ 2388.153926][ T1190] comedi: valid board names for adl_pci9118 driver are: [ 2388.153937][ T1190] pci9118dg [ 2388.153945][ T1190] pci9118hg [ 2388.153952][ T1190] pci9118hr [ 2388.153960][ T1190] comedi: valid board names for 8255_pci driver are: [ 2388.153970][ T1190] 8255_pci [ 2388.153978][ T1190] comedi: valid board names for s526 driver are: [ 2388.153988][ T1190] s526 [ 2388.153996][ T1190] comedi: valid board names for multiq3 driver are: [ 2388.154005][ T1190] multiq3 [ 2388.154012][ T1190] comedi: valid board names for pcmuio driver are: [ 2388.154022][ T1190] pcmuio48 [ 2388.154030][ T1190] pcmuio96 [ 2388.154037][ T1190] comedi: valid board names for pcmmio driver are: [ 2388.154046][ T1190] pcmmio [ 2388.154054][ T1190] comedi: valid board names for pcmda12 driver are: [ 2388.154063][ T1190] pcmda12 [ 2388.154071][ T1190] comedi: valid board names for pcmad driver are: [ 2388.154080][ T1190] pcmad12 [ 2388.154087][ T1190] pcmad16 [ 2388.154095][ T1190] comedi: valid board names for ni_labpc driver are: [ 2388.154105][ T1190] lab-pc-1200 [ 2388.154113][ T1190] lab-pc-1200ai [ 2388.154120][ T1190] lab-pc+ [ 2388.154128][ T1190] comedi: valid board names for atmio16 driver are: [ 2388.154138][ T1190] atmio16 [ 2388.154145][ T1190] atmio16d [ 2388.154152][ T1190] comedi: valid board names for ni_at_ao driver are: [ 2388.154163][ T1190] at-ao-6 [ 2388.154170][ T1190] at-ao-10 [ 2388.154178][ T1190] comedi: valid board names for ni_at_a2150 driver are: [ 2388.154189][ T1190] ni_at_a2150 [ 2388.154196][ T1190] comedi: valid board names for adq12b driver are: [ 2388.154206][ T1190] adq12b [ 2388.154213][ T1190] comedi: valid board names for mpc624 driver are: [ 2388.154223][ T1190] mpc624 [ 2388.154230][ T1190] comedi: valid board names for c6xdigio driver are: [ 2388.154240][ T1190] c6xdigio [ 2388.154247][ T1190] comedi: valid board names for aio_iiro_16 driver are: [ 2388.154258][ T1190] aio_iiro_16 [ 2388.154266][ T1190] comedi: valid board names for aio_aio12_8 driver are: [ 2388.154276][ T1190] aio_aio12_8 [ 2388.154283][ T1190] aio_ai12_8 [ 2388.154291][ T1190] aio_ao12_4 [ 2388.154299][ T1190] comedi: valid board names for fl512 driver are: [ 2388.154309][ T1190] fl512 [ 2388.154316][ T1190] comedi: valid board names for dmm32at driver are: [ 2388.154326][ T1190] dmm32at [ 2388.154334][ T1190] comedi: valid board names for dt282x driver are: [ 2388.154344][ T1190] dt2821 [ 2388.154351][ T1190] dt2821-f [ 2388.154359][ T1190] dt2821-g [ 2388.154366][ T1190] dt2823 [ 2388.154372][ T1190] dt2824-pgh [ 2388.154380][ T1190] dt2824-pgl [ 2388.154389][ T1190] dt2825 [ 2388.154395][ T1190] dt2827 [ 2388.154403][ T1190] dt2828 [ 2388.154410][ T1190] dt2829 [ 2388.154417][ T1190] dt21-ez [ 2388.154425][ T1190] dt23-ez [ 2388.154432][ T1190] dt24-ez [ 2388.154440][ T1190] dt24-ez-pgl [ 2388.154448][ T1190] comedi: valid board names for dt2817 driver are: [ 2388.154458][ T1190] dt2817 [ 2388.154465][ T1190] comedi: valid board names for dt2815 driver are: [ 2388.154475][ T1190] dt2815 [ 2388.154483][ T1190] comedi: valid board names for dt2814 driver are: [ 2388.154493][ T1190] dt2814 [ 2388.154500][ T1190] comedi: valid board names for dt2811 driver are: [ 2388.154509][ T1190] dt2811-pgh [ 2388.154517][ T1190] dt2811-pgl [ 2388.154526][ T1190] comedi: valid board names for dt2801 driver are: [ 2388.154535][ T1190] dt2801 [ 2388.154542][ T1190] comedi: valid board names for das6402 driver are: [ 2388.154551][ T1190] das6402-12 [ 2388.154559][ T1190] das6402-16 [ 2388.154567][ T1190] comedi: valid board names for das1800 driver are: [ 2388.154577][ T1190] das-1701st [ 2388.154584][ T1190] das-1701st-da [ 2388.154593][ T1190] das-1702st [ 2388.154600][ T1190] das-1702st-da [ 2388.154607][ T1190] das-1702hr [ 2388.154615][ T1190] das-1702hr-da [ 2388.154623][ T1190] das-1701ao [ 2388.154631][ T1190] das-1702ao [ 2388.154638][ T1190] das-1801st [ 2388.154646][ T1190] das-1801st-da [ 2388.154654][ T1190] das-1802st [ 2388.154662][ T1190] das-1802st-da [ 2388.154670][ T1190] das-1802hr [ 2388.154678][ T1190] das-1802hr-da [ 2388.154685][ T1190] das-1801hc [ 2388.154693][ T1190] das-1802hc [ 2388.154699][ T1190] das-1801ao [ 2388.154707][ T1190] das-1802ao [ 2388.154714][ T1190] comedi: valid board names for das800 driver are: [ 2388.154724][ T1190] das-800 [ 2388.154731][ T1190] cio-das800 [ 2388.154739][ T1190] das-801 [ 2388.154746][ T1190] cio-das801 [ 2388.154753][ T1190] das-802 [ 2388.154761][ T1190] cio-das802 [ 2388.154768][ T1190] cio-das802/16 [ 2388.154776][ T1190] comedi: valid board names for isa-das08 driver are: [ 2388.154786][ T1190] isa-das08 [ 2388.154801][ T1190] das08-pgm [ 2388.154809][ T1190] das08-pgh [ 2388.154816][ T1190] das08-pgl [ 2388.154825][ T1190] das08-aoh [ 2388.154832][ T1190] das08-aol [ 2388.154839][ T1190] das08-aom [ 2388.154847][ T1190] das08/jr-ao [ 2388.154855][ T1190] das08jr-16-ao [ 2388.154861][ T1190] pc104-das08 [ 2388.154877][ T1190] das08jr/16 [ 2388.154884][ T1190] comedi: valid board names for das16m1 driver are: [ 2388.154894][ T1190] das16m1 [ 2388.154902][ T1190] comedi: valid board names for dac02 driver are: [ 2388.154912][ T1190] dac02 [ 2388.154919][ T1190] comedi: valid board names for rti802 driver are: [ 2388.154929][ T1190] rti802 [ 2388.154937][ T1190] comedi: valid board names for rti800 driver are: [ 2388.154947][ T1190] rti800 [ 2388.154954][ T1190] rti815 [ 2388.154962][ T1190] comedi: valid board names for pcm3724 driver are: [ 2388.154972][ T1190] pcm3724 [ 2388.154979][ T1190] comedi: valid board names for pcl818 driver are: [ 2388.154989][ T1190] pcl818l [ 2388.154997][ T1190] pcl818h [ 2388.155004][ T1190] pcl818hd [ 2388.155011][ T1190] pcl818hg [ 2388.155018][ T1190] pcl818 [ 2388.155026][ T1190] pcl718 [ 2388.155033][ T1190] pcm3718 [ 2388.155040][ T1190] comedi: valid board names for pcl816 driver are: [ 2388.155050][ T1190] pcl816 [ 2388.155057][ T1190] pcl814b [ 2388.155065][ T1190] comedi: valid board names for pcl812 driver are: [ 2388.155074][ T1190] pcl812 [ 2388.155081][ T1190] pcl812pg [ 2388.155089][ T1190] acl8112pg [ 2388.155096][ T1190] acl8112dg [ 2388.155103][ T1190] acl8112hg [ 2388.155110][ T1190] a821pgl [ 2388.155117][ T1190] a821pglnda [ 2388.155124][ T1190] a821pgh [ 2388.155131][ T1190] a822pgl [ 2388.155139][ T1190] a822pgh [ 2388.155144][ T1190] a823pgl [ 2388.155150][ T1190] a823pgh [ 2388.155158][ T1190] pcl813 [ 2388.155165][ T1190] pcl813b [ 2388.155172][ T1190] acl8113 [ 2388.155179][ T1190] iso813 [ 2388.155186][ T1190] acl8216 [ 2388.155193][ T1190] a826pg [ 2388.155200][ T1190] comedi: valid board names for pcl730 driver are: [ 2388.155210][ T1190] pcl730 [ 2388.155217][ T1190] iso730 [ 2388.155225][ T1190] acl7130 [ 2388.155232][ T1190] pcm3730 [ 2388.155239][ T1190] pcl725 [ 2388.155247][ T1190] p8r8dio [ 2388.155254][ T1190] acl7225b [ 2388.155262][ T1190] p16r16dio [ 2388.155269][ T1190] pcl733 [ 2388.155277][ T1190] pcl734 [ 2388.155284][ T1190] opmm-1616-xt [ 2388.155292][ T1190] pearl-mm-p [ 2388.155300][ T1190] ir104-pbf [ 2388.155307][ T1190] comedi: valid board names for pcl726 driver are: [ 2388.155317][ T1190] pcl726 [ 2388.155324][ T1190] pcl727 [ 2388.155332][ T1190] pcl728 [ 2388.155339][ T1190] acl6126 [ 2388.155347][ T1190] acl6128 [ 2388.155353][ T1190] comedi: valid board names for pcl724 driver are: [ 2388.155363][ T1190] pcl724 [ 2388.155371][ T1190] pcl722 [ 2388.155378][ T1190] pcl731 [ 2388.155385][ T1190] acl7122 [ 2388.155393][ T1190] acl7124 [ 2388.155400][ T1190] pet48dio [ 2388.155408][ T1190] pcmio48 [ 2388.155415][ T1190] onyx-mm-dio [ 2388.155423][ T1190] comedi: valid board names for pcl711 driver are: [ 2388.155432][ T1190] pcl711 [ 2388.155440][ T1190] pcl711b [ 2388.155447][ T1190] acl8112hg [ 2388.155455][ T1190] acl8112dg [ 2388.155462][ T1190] comedi: valid board names for amplc_pc263 driver are: [ 2388.155473][ T1190] pc263 [ 2388.155480][ T1190] comedi: valid board names for amplc_pc236 driver are: [ 2388.155490][ T1190] pc36at [ 2388.155498][ T1190] comedi: valid board names for amplc_dio200 driver are: [ 2388.155508][ T1190] pc212e [ 2388.155516][ T1190] pc214e [ 2388.155522][ T1190] pc215e [ 2388.155529][ T1190] pc218e [ 2388.155536][ T1190] pc272e [ 2388.155543][ T1190] comedi: valid board names for comedi_parport driver are: [ 2388.155554][ T1190] comedi_parport [ 2388.155562][ T1190] comedi: valid board names for comedi_test driver are: [ 2388.155572][ T1190] comedi_test [ 2388.155579][ T1190] comedi: valid board names for comedi_bond driver are: [ 2388.155589][ T1190] comedi_bond [ 2388.406285][T20446] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 2388.426800][T13915] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2388.528713][T21725] usb 1-1: selecting invalid altsetting 3 [ 2388.528738][T21725] comedi comedi5: could not set alternate setting 3 in high speed [ 2388.528754][T21725] usbduxsigma 1-1:0.66: driver 'usbduxsigma' failed to auto-configure device. [ 2388.550772][T21725] usbduxsigma 1-1:0.66: probe with driver usbduxsigma failed with error -22 [ 2388.563729][T21725] usb 1-1: USB disconnect, device number 61 [ 2388.597245][T13915] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2388.597274][T13915] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2388.597337][T13915] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2388.600939][T13915] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 2388.600968][T13915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.600987][T13915] usb 5-1: Product: syz [ 2388.601002][T13915] usb 5-1: Manufacturer: syz [ 2388.601016][T13915] usb 5-1: SerialNumber: syz [ 2388.720179][T20446] usb 10-1: Using ep0 maxpacket: 16 [ 2388.868561][T13915] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2388.870558][T13915] usb 5-1: unit 6 not found! [ 2388.870582][T13915] usb 5-1: unit 251 not found! [ 2388.989449][T20446] usb 10-1: config 251 has an invalid interface number: 202 but max is 0 [ 2388.989482][T20446] usb 10-1: config 251 has no interface number 0 [ 2388.989536][T20446] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2388.989561][T20446] usb 10-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 2388.989589][T20446] usb 10-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2388.989614][T20446] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 2388.989645][T20446] usb 10-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 2388.989674][T20446] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 2388.989706][T20446] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 25705, setting to 1024 [ 2388.989738][T20446] usb 10-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2388.989768][T20446] usb 10-1: config 251 interface 202 has no altsetting 0 [ 2389.017368][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 2389.017475][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 2389.474026][T13915] usb 5-1: USB disconnect, device number 28 [ 2389.718363][T10984] udevd[10984]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2389.798148][T20446] usb 10-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 2389.798185][T20446] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2389.798209][T20446] usb 10-1: Product: syz [ 2389.798227][T20446] usb 10-1: SerialNumber: syz [ 2389.834270][T32200] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2389.944786][ T1184] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2389.996135][T32200] usb 1-1: Using ep0 maxpacket: 8 [ 2390.018652][T32200] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2390.018912][T32200] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2390.018938][T32200] usb 1-1: Product: syz [ 2390.018955][T32200] usb 1-1: Manufacturer: syz [ 2390.018971][T32200] usb 1-1: SerialNumber: syz [ 2390.072901][T32200] usb 1-1: config 0 descriptor?? [ 2390.100018][T32200] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2390.253477][T13915] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2390.281251][ T1231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2390.290739][T20446] cxacru 10-1:251.202: cxacru_bind: interface has incorrect endpoints [ 2390.290879][T20446] cxacru 10-1:251.202: usbatm_usb_probe: bind failed: -19! [ 2390.310212][ T1231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2390.321688][T32200] gspca_zc3xx: reg_w_i err -71 [ 2390.321812][T32200] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2390.356446][T32200] usb 1-1: USB disconnect, device number 62 [ 2390.374156][T20446] usb 10-1: USB disconnect, device number 127 [ 2390.408871][T13915] usb 5-1: Using ep0 maxpacket: 32 [ 2390.432848][T13915] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2390.432883][T13915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.432905][T13915] usb 5-1: Product: syz [ 2390.432932][T13915] usb 5-1: Manufacturer: syz [ 2390.432950][T13915] usb 5-1: SerialNumber: syz [ 2390.474824][T13915] usb 5-1: config 0 descriptor?? [ 2390.499815][T13915] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2390.589120][ T1289] snd_dummy snd_dummy.0: control 4:8:34110:syz0:1025 is already present [ 2390.589816][ T1289] No source specified [ 2391.437372][T13915] gspca_topro: reg_r err -32 [ 2391.437387][T13915] gspca_topro: Sensor soi763a [ 2391.864892][T23931] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2392.015615][T23931] usb 1-1: Using ep0 maxpacket: 16 [ 2392.018056][T23931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2392.018082][T23931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2392.020710][T23931] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2392.020742][T23931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.020762][T23931] usb 1-1: Product: syz [ 2392.020772][T23931] usb 1-1: Manufacturer: syz [ 2392.020782][T23931] usb 1-1: SerialNumber: syz [ 2392.029147][T23931] usb 1-1: config 0 descriptor?? [ 2392.106133][T23931] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2392.106162][T23931] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2392.236535][T13915] usb 5-1: USB disconnect, device number 29 [ 2392.710192][T23931] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2392.713268][T23931] em28xx 1-1:0.0: Config register raw data: 0x41 [ 2392.844543][T13915] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 2392.981717][T13915] usb 5-1: device descriptor read/64, error -71 [ 2393.083416][T20446] usb 1-1: USB disconnect, device number 63 [ 2393.086674][T20446] em28xx 1-1:0.0: Disconnecting em28xx [ 2393.122818][T20446] em28xx 1-1:0.0: Freeing device [ 2393.230712][T13915] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 2393.369717][T13915] usb 5-1: device descriptor read/64, error -71 [ 2393.486374][T13915] usb usb5-port1: attempt power cycle [ 2393.775778][ T1372] tipc: Started in network mode [ 2393.775812][ T1372] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 2393.776040][ T1372] tipc: Enabled bearer , priority 10 [ 2393.806449][T13915] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 2393.826972][T13915] usb 5-1: device descriptor read/8, error -71 [ 2393.970379][ T1382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13325'. [ 2393.996730][T20446] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2394.063696][T13915] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 2394.093630][T13915] usb 5-1: device descriptor read/8, error -71 [ 2394.139748][T20446] usb 6-1: Using ep0 maxpacket: 32 [ 2394.141679][T20446] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 2394.143742][T20446] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2394.143781][T20446] usb 6-1: can't read configurations, error -61 [ 2394.218821][T13915] usb usb5-port1: unable to enumerate USB device [ 2394.320845][T20446] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2394.463435][T20446] usb 6-1: Using ep0 maxpacket: 32 [ 2394.467812][T20446] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 2394.469497][T20446] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2394.469536][T20446] usb 6-1: can't read configurations, error -61 [ 2394.469916][T20446] usb usb6-port1: attempt power cycle [ 2394.674278][T23931] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2394.704326][ T1401] netlink: 'syz.0.13331': attribute type 1 has an invalid length. [ 2394.749590][T13915] tipc: Node number set to 10136234 [ 2394.799782][T20446] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2394.822499][T20446] usb 6-1: Using ep0 maxpacket: 32 [ 2394.824802][T20446] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 2394.830469][T23931] usb 10-1: Using ep0 maxpacket: 32 [ 2394.847351][T20446] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2394.847396][T20446] usb 6-1: can't read configurations, error -61 [ 2394.877517][T23931] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2394.915706][T23931] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 2394.978207][T20446] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2394.998120][T23931] usb 10-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 2394.998155][T23931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.998179][T23931] usb 10-1: Product: syz [ 2394.998197][T23931] usb 10-1: Manufacturer: syz [ 2394.998213][T23931] usb 10-1: SerialNumber: syz [ 2394.999385][T20446] usb 6-1: Using ep0 maxpacket: 32 [ 2395.001987][T20446] usb 6-1: too many configurations: 108, using maximum allowed: 8 [ 2395.045002][T20446] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2395.045050][T20446] usb 6-1: can't read configurations, error -61 [ 2395.047883][T20446] usb usb6-port1: unable to enumerate USB device [ 2395.386141][ T37] audit: type=1400 audit(2000000169.730:3078): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A208205820540 pid=1391 comm="syz.9.13328" [ 2395.552489][T23931] usb 10-1: Unsupported UAC3 BADD profile [ 2395.578195][ T1420] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2395.700075][T23931] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2395.828456][T10984] udevd[10984]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2395.911366][T23931] usb 10-1: USB disconnect, device number 2 [ 2396.291284][ T6788] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2396.455805][ T1451] tipc: Invalid UDP bearer configuration [ 2396.455836][ T1451] tipc: Enabling of bearer rejected, failed to enable media [ 2396.484166][T20446] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 2396.631045][T20446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2396.631089][T20446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2396.631114][T20446] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2396.631162][T20446] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 2396.631189][T20446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2396.704557][T20446] usb 1-1: config 0 descriptor?? [ 2396.910908][ T1444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2396.917213][ T1444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2396.954509][ T1471] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13343'. [ 2397.102296][T20446] usbhid 1-1:0.0: can't add hid device: -71 [ 2397.102434][T20446] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2397.130456][T20446] usb 1-1: USB disconnect, device number 64 [ 2397.220744][ T1485] netlink: 'syz.4.13347': attribute type 4 has an invalid length. [ 2397.220770][ T1485] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13347'. [ 2397.601400][ T1507] netlink: 324 bytes leftover after parsing attributes in process `syz.5.13353'. [ 2397.775722][ T1509] FAULT_INJECTION: forcing a failure. [ 2397.775722][ T1509] name failslab, interval 1, probability 0, space 0, times 0 [ 2397.775758][ T1509] CPU: 1 UID: 0 PID: 1509 Comm: syz.0.13354 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2397.775778][ T1509] Tainted: [L]=SOFTLOCKUP [ 2397.775783][ T1509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2397.775791][ T1509] Call Trace: [ 2397.775797][ T1509] [ 2397.775803][ T1509] dump_stack_lvl+0xe8/0x150 [ 2397.775824][ T1509] should_fail_ex+0x46b/0x600 [ 2397.775847][ T1509] should_failslab+0xa8/0x100 [ 2397.775865][ T1509] kmem_cache_alloc_noprof+0x87/0x680 [ 2397.775882][ T1509] ? vm_area_dup+0x2b/0x670 [ 2397.775902][ T1509] vm_area_dup+0x2b/0x670 [ 2397.775922][ T1509] dup_mmap+0x8ba/0x1d70 [ 2397.775969][ T1509] ? __pfx_dup_mmap+0x10/0x10 [ 2397.775997][ T1509] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2397.776035][ T1509] ? copy_mm+0x10f/0x480 [ 2397.776068][ T1509] ? copy_mm+0x10f/0x480 [ 2397.776103][ T1509] copy_mm+0x11a/0x480 [ 2397.776124][ T1509] copy_process+0x1e30/0x43d0 [ 2397.776147][ T1509] ? copy_process+0xd4e/0x43d0 [ 2397.776177][ T1509] ? __pfx_copy_process+0x10/0x10 [ 2397.776196][ T1509] ? get_pid_task+0x20/0x1f0 [ 2397.776209][ T1509] ? get_pid_task+0x20/0x1f0 [ 2397.776227][ T1509] kernel_clone+0x2d7/0x940 [ 2397.776250][ T1509] ? __pfx_kernel_clone+0x10/0x10 [ 2397.776269][ T1509] ? do_raw_spin_lock+0x12b/0x2f0 [ 2397.776293][ T1509] __x64_sys_clone+0x1b6/0x230 [ 2397.776307][ T1509] ? __pfx___x64_sys_clone+0x10/0x10 [ 2397.776330][ T1509] ? __pfx_ksys_write+0x10/0x10 [ 2397.776347][ T1509] ? fput+0xa0/0xd0 [ 2397.776365][ T1509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.776379][ T1509] do_syscall_64+0x174/0x580 [ 2397.776398][ T1509] ? trace_irq_disable+0x3b/0x140 [ 2397.776412][ T1509] ? clear_bhb_loop+0x40/0x90 [ 2397.776428][ T1509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2397.776441][ T1509] RIP: 0033:0x7fd453c5ce59 [ 2397.776455][ T1509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2397.776467][ T1509] RSP: 002b:00007fd451eb5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2397.776483][ T1509] RAX: ffffffffffffffda RBX: 00007fd453ed5fa0 RCX: 00007fd453c5ce59 [ 2397.776493][ T1509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004948000 [ 2397.776501][ T1509] RBP: 00007fd451eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 2397.776509][ T1509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 2397.776517][ T1509] R13: 00007fd453ed6038 R14: 00007fd453ed5fa0 R15: 00007ffd4edcaa08 [ 2397.776537][ T1509] [ 2398.059238][ T1514] binder: 1513:1514 ioctl c0306201 0 returned -14 [ 2399.039300][ T1542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13368'. [ 2399.225715][ T1543] tipc: Invalid UDP bearer configuration [ 2399.225934][ T1543] tipc: Enabling of bearer rejected, failed to enable media [ 2399.638738][T21726] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2399.664195][T23931] IPVS: starting estimator thread 0... [ 2399.759510][ T1569] IPVS: using max 7 ests per chain, 16800 per kthread [ 2399.897710][T21726] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2399.911944][T21726] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2399.911977][T21726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2399.911999][T21726] usb 10-1: Product: syz [ 2399.912009][T21726] usb 10-1: Manufacturer: syz [ 2399.912018][T21726] usb 10-1: SerialNumber: syz [ 2399.916118][ T1577] 9p: Bad value for 'rfdno' [ 2400.310826][T21726] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2400.317480][T21726] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2400.482090][T21726] usb 10-1: USB disconnect, device number 3 [ 2400.560316][T23931] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2400.604147][T10984] udevd[10984]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2400.732103][T23931] usb 1-1: Using ep0 maxpacket: 32 [ 2400.735515][T23931] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2400.735551][T23931] usb 1-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2400.735577][T23931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2400.735615][T23931] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 2400.735642][T23931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2400.752591][T23931] usb 1-1: config 0 descriptor?? [ 2401.327513][ T1639] FAULT_INJECTION: forcing a failure. [ 2401.327513][ T1639] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.327545][ T1639] CPU: 1 UID: 0 PID: 1639 Comm: syz.4.13390 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2401.327574][ T1639] Tainted: [L]=SOFTLOCKUP [ 2401.327583][ T1639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2401.327596][ T1639] Call Trace: [ 2401.327606][ T1639] [ 2401.327616][ T1639] dump_stack_lvl+0xe8/0x150 [ 2401.327650][ T1639] should_fail_ex+0x46b/0x600 [ 2401.327688][ T1639] should_failslab+0xa8/0x100 [ 2401.327711][ T1639] __kmalloc_cache_noprof+0x84/0x690 [ 2401.327727][ T1639] ? sctp_add_bind_addr+0xb0/0x370 [ 2401.327748][ T1639] ? sctp_add_bind_addr+0x8c/0x370 [ 2401.327780][ T1639] sctp_add_bind_addr+0x8c/0x370 [ 2401.327824][ T1639] sctp_copy_local_addr_list+0x314/0x4f0 [ 2401.327857][ T1639] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2401.327880][ T1639] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2401.327899][ T1639] ? sctp_v6_is_any+0x64/0x80 [ 2401.327919][ T1639] ? sctp_copy_one_addr+0x93/0x360 [ 2401.327952][ T1639] sctp_bind_addr_copy+0xb3/0x3c0 [ 2401.327983][ T1639] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2401.328012][ T1639] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2401.328037][ T1639] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2401.328060][ T1639] ? sctp_inet6_send_verify+0x23a/0x300 [ 2401.328076][ T1639] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 2401.328091][ T1639] __sctp_connect+0x5cb/0xdc0 [ 2401.328125][ T1639] ? __pfx___sctp_connect+0x10/0x10 [ 2401.328147][ T1639] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2401.328184][ T1639] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 2401.328214][ T1639] sctp_getsockopt_connectx3+0x227/0x360 [ 2401.328236][ T1639] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 2401.328257][ T1639] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 2401.328284][ T1639] ? lockdep_hardirqs_on+0x7a/0x110 [ 2401.328322][ T1639] sctp_getsockopt+0x984/0xb90 [ 2401.328356][ T1639] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2401.328384][ T1639] do_sock_getsockopt+0x51d/0x7e0 [ 2401.328410][ T1639] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2401.328438][ T1639] ? __fget_files+0x3a6/0x420 [ 2401.328463][ T1639] ? __fget_files+0x2a/0x420 [ 2401.328497][ T1639] __x64_sys_getsockopt+0x1aa/0x250 [ 2401.328536][ T1639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2401.328560][ T1639] do_syscall_64+0x174/0x580 [ 2401.328582][ T1639] ? trace_irq_disable+0x3b/0x140 [ 2401.328596][ T1639] ? clear_bhb_loop+0x40/0x90 [ 2401.328612][ T1639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2401.328633][ T1639] RIP: 0033:0x7f46aee9ce59 [ 2401.328655][ T1639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2401.328675][ T1639] RSP: 002b:00007f46ad0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2401.328700][ T1639] RAX: ffffffffffffffda RBX: 00007f46af115fa0 RCX: 00007f46aee9ce59 [ 2401.328717][ T1639] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 2401.328731][ T1639] RBP: 00007f46ad0ee090 R08: 0000200000000140 R09: 0000000000000000 [ 2401.328745][ T1639] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000002 [ 2401.328753][ T1639] R13: 00007f46af116038 R14: 00007f46af115fa0 R15: 00007ffcdd978258 [ 2401.328773][ T1639] [ 2401.565774][T23931] a4tech 0003:09DA:0006.0042: unknown main item tag 0x5 [ 2401.565812][T23931] a4tech 0003:09DA:0006.0042: unknown main item tag 0x4 [ 2401.565840][T23931] a4tech 0003:09DA:0006.0042: unknown main item tag 0x2 [ 2401.565866][T23931] a4tech 0003:09DA:0006.0042: unknown main item tag 0x3 [ 2401.565892][T23931] a4tech 0003:09DA:0006.0042: unknown main item tag 0x7 [ 2401.565916][T23931] a4tech 0003:09DA:0006.0042: item fetching failed at offset 39/41 [ 2401.670269][ T1649] netlink: 264 bytes leftover after parsing attributes in process `syz.4.13395'. [ 2401.680507][T23931] a4tech 0003:09DA:0006.0042: parse failed [ 2401.680631][T23931] a4tech 0003:09DA:0006.0042: probe with driver a4tech failed with error -22 [ 2401.756570][T23931] usb 1-1: USB disconnect, device number 65 [ 2401.847866][ T1662] fuse: Bad value for 'rootmode' [ 2401.897871][T32392] Bluetooth: hci2: command 0x0c1a tx timeout [ 2401.963775][ T1670] netlink: 324 bytes leftover after parsing attributes in process `syz.4.13398'. [ 2402.627319][ T2801] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2402.645511][T23931] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2402.775898][ T2801] usb 5-1: config index 0 descriptor too short (expected 65220, got 45) [ 2402.778242][ T2801] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2402.778274][ T2801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.778298][ T2801] usb 5-1: Product: syz [ 2402.778314][ T2801] usb 5-1: Manufacturer: syz [ 2402.778330][ T2801] usb 5-1: SerialNumber: syz [ 2402.817991][T23931] usb 1-1: Using ep0 maxpacket: 8 [ 2402.830563][T23931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2402.830594][T23931] usb 1-1: config 0 has no interfaces? [ 2402.854529][T23931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2402.854563][T23931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.854585][T23931] usb 1-1: Product: syz [ 2402.854601][T23931] usb 1-1: Manufacturer: syz [ 2402.854617][T23931] usb 1-1: SerialNumber: syz [ 2402.991178][T23931] usb 1-1: config 0 descriptor?? [ 2403.235015][ T2801] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2403.235079][ T2801] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2403.322479][T23931] usb 1-1: USB disconnect, device number 66 [ 2403.515695][ T1724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13412'. [ 2403.762010][ T1731] netlink: 'syz.9.13414': attribute type 1 has an invalid length. [ 2404.185008][ T1737] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 2404.359029][ T1746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13420'. [ 2404.359056][ T1746] openvswitch: netlink: Message has 1 unknown bytes. [ 2404.397486][ T2801] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2404.403196][ T2801] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2404.731613][T19120] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2404.875404][T19120] usb 1-1: Using ep0 maxpacket: 16 [ 2404.886357][T19120] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 2404.886460][T19120] usb 1-1: config 0 has no interface number 0 [ 2404.886496][T19120] usb 1-1: too many endpoints for config 0 interface 211 altsetting 93: 48, using maximum allowed: 30 [ 2404.886548][T19120] usb 1-1: config 0 interface 211 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 2404.886976][T19120] usb 1-1: config 0 interface 211 has no altsetting 0 [ 2404.898341][T19120] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2404.898373][T19120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.899124][T19120] usb 1-1: Product: syz [ 2404.899142][T19120] usb 1-1: Manufacturer: syz [ 2404.899158][T19120] usb 1-1: SerialNumber: syz [ 2404.925971][T19120] usb 1-1: config 0 descriptor?? [ 2404.983519][ T2801] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 2404.983700][ T2801] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2405.053177][ T2801] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2405.136627][ T2801] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2405.200414][T19120] ssu100 1-1:0.211: Quatech SSU-100 USB to Serial Driver converter detected [ 2405.216183][T19120] ssu100 1-1:0.211: probe with driver ssu100 failed with error -71 [ 2405.222936][ T2801] usb 5-1: USB disconnect, device number 34 [ 2405.259495][T19120] usb 1-1: USB disconnect, device number 67 [ 2405.994254][ T37] audit: type=1326 audit(2000000180.869:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1801 comm="syz.0.13431" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd453c5ce59 code=0x0 [ 2406.316723][ T1814] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13437'. [ 2406.542466][T13915] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2406.560409][T19120] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2406.703286][T13915] usb 5-1: Using ep0 maxpacket: 32 [ 2406.721549][T13915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2406.733243][T13915] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 2406.733282][T13915] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 2406.736549][T13915] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 2406.736584][T13915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.736607][T13915] usb 5-1: Product: syz [ 2406.736624][T13915] usb 5-1: Manufacturer: syz [ 2406.736650][T13915] usb 5-1: SerialNumber: syz [ 2406.812273][ T1811] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2406.908061][T19120] usb 10-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2406.908102][T19120] usb 10-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2406.908130][T19120] usb 10-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 2406.908157][T19120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2406.976402][T19120] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 2406.976438][T19120] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.976463][T19120] usb 10-1: Product: syz [ 2406.976479][T19120] usb 10-1: Manufacturer: syz [ 2406.976497][T19120] usb 10-1: SerialNumber: syz [ 2407.003843][T19120] usb 10-1: config 0 descriptor?? [ 2407.022361][ T1820] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 2407.053755][ T1842] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13446'. [ 2407.071901][ T1842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2407.105289][ T1846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2407.107279][ T1846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2407.244770][T13915] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2407.244836][T13915] usb 5-1: MIDIStreaming interface descriptor not found [ 2407.260034][ T1856] fuse: Bad value for 'fd' [ 2407.351528][T13915] usb 5-1: USB disconnect, device number 35 [ 2407.412447][T14968] usb 10-1: USB disconnect, device number 4 [ 2407.855408][T10820] udevd[10820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2408.125510][ T1911] binder_alloc: 1910: binder_alloc_buf size 16384 failed, no address space [ 2408.125536][ T1911] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 2408.798736][T23931] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2408.942706][T23931] usb 5-1: device descriptor read/64, error -71 [ 2409.179703][T23931] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2409.398785][T23931] usb 5-1: device descriptor read/64, error -71 [ 2409.514377][T23931] usb usb5-port1: attempt power cycle [ 2409.858634][T23931] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2409.876172][T23931] usb 5-1: device descriptor read/8, error -71 [ 2409.992606][ T1997] loop5: detected capacity change from 0 to 7 [ 2410.005288][ T1997] loop5: [POWERTEC] p1 p2 p3 p4 [ 2410.007397][ T1997] loop5: p1 size 1153433600 extends beyond EOD, truncated [ 2410.026499][ T1997] loop5: p2 size 327680 extends beyond EOD, truncated [ 2410.041977][ T1997] loop5: p3 start 589824 is beyond EOD, truncated [ 2410.042008][ T1997] loop5: p4 start 1848407154 is beyond EOD, truncated [ 2410.163095][T23931] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2410.200375][T23931] usb 5-1: device descriptor read/8, error -71 [ 2410.324237][T32544] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 2410.324744][T23931] usb usb5-port1: unable to enumerate USB device [ 2410.517043][T32544] usb 10-1: Using ep0 maxpacket: 32 [ 2410.539852][T32544] usb 10-1: config index 0 descriptor too short (expected 11556, got 36) [ 2410.539887][T32544] usb 10-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 2410.539908][T32544] usb 10-1: config 0 has no interfaces? [ 2410.772054][T32544] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2410.772092][T32544] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2410.772115][T32544] usb 10-1: Product: syz [ 2410.772133][T32544] usb 10-1: Manufacturer: syz [ 2410.772149][T32544] usb 10-1: SerialNumber: syz [ 2410.897884][T32544] usb 10-1: config 0 descriptor?? [ 2411.161611][T32544] usb 10-1: USB disconnect, device number 5 [ 2411.267277][ T2023] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13477'. [ 2411.460881][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13478'. [ 2411.576281][ T2036] netlink: 'syz.4.13479': attribute type 83 has an invalid length. [ 2412.839128][ T2077] loop8: detected capacity change from 0 to 8 [ 2412.862611][ T2077] Dev loop8: unable to read RDB block 8 [ 2412.862665][ T2077] loop8: unable to read partition table [ 2412.862911][ T2077] loop8: partition table beyond EOD, truncated [ 2412.862964][ T2077] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2413.017185][ T2082] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13495'. [ 2413.195050][ T2094] netlink: 72 bytes leftover after parsing attributes in process `syz.9.13496'. [ 2413.285342][T23931] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2413.433680][T23931] usb 5-1: Using ep0 maxpacket: 16 [ 2413.453404][T23931] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2413.453478][T23931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2413.453500][T23931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2413.453513][T23931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2413.453528][T23931] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2413.454818][T23931] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2413.454846][T23931] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2413.454865][T23931] usb 5-1: Manufacturer: syz [ 2413.483974][T23931] usb 5-1: config 0 descriptor?? [ 2413.770892][T23931] rc_core: IR keymap rc-hauppauge not found [ 2413.770918][T23931] Registered IR keymap rc-empty [ 2413.771096][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.789945][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.811849][T23931] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2413.823670][T23931] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input143 [ 2413.837025][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.854296][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.866524][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.885182][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.904365][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.926929][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.951716][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.973350][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2413.989984][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2414.009782][ T38] INFO: task syz.7.12623:29568 blocked for more than 143 seconds. [ 2414.009813][ T38] Tainted: G L syzkaller #0 [ 2414.009835][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2414.009847][ T38] task:syz.7.12623 state:D stack:25224 pid:29568 tgid:29566 ppid:17440 task_flags:0x400140 flags:0x00080002 [ 2414.009985][ T38] Call Trace: [ 2414.009994][ T38] [ 2414.010010][ T38] __schedule+0x16f9/0x5500 [ 2414.010128][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 2414.010168][ T38] ? __pfx___schedule+0x10/0x10 [ 2414.010273][ T38] ? schedule+0x90/0x360 [ 2414.010310][ T38] schedule+0x164/0x360 [ 2414.010345][ T38] cgroup_lock_and_drain_offline+0x516/0x650 [ 2414.010446][ T38] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 2414.010474][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2414.010517][ T38] cgroup_k[ 2414.010517][ T38] cgroup_kn_lock_live+0x120/0x230 [ 2414.010603][ T38] cgroup_subtree_control_write+0x4b3/0x10a0 [ 2414.010645][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2414.010670][ T38] ? kernfs_root+0x1c/0x230 [ 2414.010696][ T38] ? kernfs_root+0x1c/0x230 [ 2414.010784][ T38] ? kernfs_root+0x1ea/0x230 [ 2414.010814][ T38] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2414.010848][ T38] cgroup_file_write+0x331/0x8f0 [ 2414.010953][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 2414.010988][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2414.011023][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 2414.011128][ T38] ? __pfx_cgroup_file_write+0x10/0x10 [ 2414.011160][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 2414.011199][ T38] vfs_write+0x629/0xba0 [ 2414.011293][ T38] ? __pfx_vfs_write+0x10/0x10 [ 2414.011326][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2414.011356][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 2414.011444][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 2414.011469][ T38] ? fdget_pos+0x252/0x320 [ 2414.011504][ T38] ksys_write+0x156/0x270 [ 2414.011536][ T38] ? __pfx_ksys_write+0x10/0x10 [ 2414.011628][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2414.011652][ T38] do_syscall_64+0x174/0x580 [ 2414.011684][ T38] ? trace_irq_disable+0x3b/0x140 [ 2414.011709][ T38] ? clear_bhb_loop+0x40/0x90 [ 2414.011788][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2414.011811][ T38] RIP: 0033:0x7f085c84ce59 [ 2414.011841][ T38] RSP: 002b:00007f085aa85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2414.011865][ T38] RAX: ffffffffffffffda RBX: 00007f085cac6090 RCX: 00007f085c84ce59 [ 2414.011882][ T38] RDX: 000000000000000b RSI: 0000200000000180 RDI: 0000000000000006 [ 2414.012000][ T38] RBP: 00007f085c8e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 2414.012015][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2414.012029][ T38] R13: 00007f085cac6128 R14: 00007f085cac6090 R15: 00007ffd3b062ee8 [ 2414.012065][ T38] [ 2414.012141][ T38] [ 2414.012141][ T38] Showing all locks held in the system: [ 2414.012153][ T38] 1 lock held by khungtaskd/38: [ 2414.012165][ T38] #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2414.012295][ T38] 9 locks held by kworker/u8:5/69: [ 2414.012309][ T38] #0: ffff888039957138 ((wq_completion)wg-kex-wg1#20){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.012378][ T38] #1: ffffc9000155fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.012502][ T38] #2: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2414.012625][ T38] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2414.012688][ T38] #4: ffff8880385a4238 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 2414.012804][ T38] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 2414.012870][ T38] #6: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2414.012990][ T38] #7: ffffffff8e1cacc0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x220/0xed0 [ 2414.013044][ T38] #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 2414.013173][ T38] 2 locks held by kworker/R-nbd5-/947: [ 2414.013188][ T38] #0: ffff888027391138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.013249][ T38] #1: ffffc900057efc00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.013373][ T38] 2 locks held by kworker/R-nbd10/962: [ 2414.013386][ T38] #0: ffff8880275cf138 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.013507][ T38] #1: ffffc900058afc00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.013590][ T38] 2 locks held by getty/5366: [ 2414.013603][ T38] #0: ffff888035fd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2414.013722][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 2414.013863][ T38] 2 locks held by kworker/u9:3/5628: [ 2414.017859][T23931] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2414.027846][ T38] #0: ffff88802535a138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.027925][ T38] #1: ffffc90004e8fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.028042][ T38] 2 locks held by kworker/u9:4/5629: [ 2414.028054][ T38] #0: ffff888025784138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.028162][ T38] #1: ffffc90004e6fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.028220][ T38] 9 locks held by kworker/u8:19/5851: [ 2414.028231][ T38] #0: ffff888039957138 ((wq_completion)wg-kex-wg1#20){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.034948][ T38] #1: ffffc90005ec7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.035065][ T38] #2: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2414.035121][ T38] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2414.035227][ T38] #4: ffff8880385a6230 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 2414.035278][ T38] #5: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x277/0x4b0 [ 2414.035391][ T38] #6: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2414.035445][ T38] #7: ffffffff8e1cacc0 (rcu_read_lock_bh){....}-{1:3}, at: send4+0x220/0xed0 [ 2414.035553][ T38] #8: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 2414.035606][ T38] 4 locks held by kworker/u8:23/6195: [ 2414.035671][ T38] #0: ffff88805d173138 ((wq_completion)wg-kex-wg0#45){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.035730][ T38] #1: ffffc90006667c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.035848][ T38] #2: ffff8880b8646420 ((&pcs->lock)){+.+.}-{3:3}, at: kmem_cache_alloc_node_noprof+0x304/0x6e0 [ 2414.035902][ T38] #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 2414.036014][ T38] 2 locks held by kworker/u9:0/15123: [ 2414.036027][ T38] #0: ffff888025784138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.036080][ T38] #1: ffffc9000154fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.036187][ T38] 2 locks held by kworker/u9:1/15795: [ 2414.036199][ T38] #0: ffff888025784138 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.036251][ T38] #1: ffffc9000498fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.036358][ T38] 2 locks held by kworker/u9:2/16831: [ 2414.036370][ T38] #0: ffff88802535a138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.036426][ T38] #1: ffffc90005dc7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.036529][ T38] 2 locks held by kworker/u9:5/17437: [ 2414.036542][ T38] #0: ffff88802535a138 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.036645][ T38] #1: ffffc90006f17c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.036702][ T38] 2 locks held by kworker/u9:6/20108: [ 2414.036714][ T38] #0: ffff888027373138 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.036816][ T38] #1: ffffc9000d29fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.036877][ T38] 2 locks held by kworker/u9:7/20118: [ 2414.036888][ T38] #0: ffff8880252b6938 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.036992][ T38] #1: ffffc900045bfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.037046][ T38] 2 locks held by kworker/u9:8/20162: [ 2414.037058][ T38] #0: ffff8880252b6938 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.037157][ T38] #1: ffffc900000f7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.037213][ T38] 5 locks held by kworker/0:0/23931: [ 2414.037224][ T38] #0: ffff888022a94938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.037516][ T38] #1: ffffc9000448fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.037573][ T38] #2: ffff88802a28e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 2414.037672][ T38] #3: ffff8880510cc210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2414.037724][ T38] #4: ffff888054e6d1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 2414.037823][ T38] 2 locks held by kworker/u9:9/23947: [ 2414.037843][ T38] #0: ffff8880252b6938 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.037896][ T38] #1: ffffc9000447fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.037999][ T38] 2 locks held by kworker/u9:10/23974: [ 2414.038012][ T38] #0: ffff888027373138 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.038066][ T38] #1: ffffc9000413fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.038171][ T38] 2 locks held by kworker/u9:11/24160: [ 2414.038184][ T38] #0: ffff888027373138 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.038237][ T38] #1: ffffc90003e6fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.038340][ T38] 2 locks held by kworker/u9:12/28332: [ 2414.038352][ T38] #0: ffff88802745d138 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.038404][ T38] #1: ffffc9000482fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.038517][ T38] 2 locks held by kworker/u9:13/28412: [ 2414.038530][ T38] #0: ffff888027391138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.038585][ T38] #1: ffffc9000471fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.038728][ T38] 2 locks held by kworker/u9:14/28821: [ 2414.038741][ T38] #0: ffff888027391138 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.038793][ T38] #1: ffffc9000401fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.038904][ T38] 2 locks held by kworker/u9:15/31578: [ 2414.038916][ T38] #0: ffff888027397138 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.038971][ T38] #1: ffffc9000d34fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.039082][ T38] 2 locks held by kworker/u9:16/32587: [ 2414.039094][ T38] #0: ffff888027397138 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.039146][ T38] #1: ffffc90004c1fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.039258][ T38] 2 locks held by kworker/u9:17/6531: [ 2414.039271][ T38] #0: ffff888027397138 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.039323][ T38] #1: ffffc9000d03fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.039426][ T38] 2 locks held by kworker/u9:18/8161: [ 2414.039439][ T38] #0: ffff88802745d138 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.039490][ T38] #1: ffffc9000dbefc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.039670][ T38] 2 locks held by kworker/u9:19/8335: [ 2414.039684][ T38] #0: ffff88802745d138 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.039795][ T38] #1: ffffc90010917c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.039862][ T38] 4 locks held by udevd/10984: [ 2414.043411][ T38] #0: ffff88805917a4f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 2414.043477][ T38] #1: ffff888053920478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 2414.058311][ T38] #2: ffff8880358880f8 (kn->active#27){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 2414.058444][ T38] #3: ffff8880510cc210 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 2414.058495][ T38] 2 locks held by kworker/u9:20/13505: [ 2414.058508][ T38] #0: ffff888027523138 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.058618][ T38] #1: ffffc9001ba0fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.058671][ T38] 2 locks held by kworker/u9:21/13518: [ 2414.058736][ T38] #0: ffff888027523138 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.058793][ T38] #1: ffffc90019607c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.058909][ T38] 2 locks held by kworker/u9:22/13519: [ 2414.058922][ T38] #0: ffff888027523138 ((wq_completion)nbd8-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.058974][ T38] #1: ffffc900195f7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.059084][ T38] 2 locks held by kworker/u9:23/16861: [ 2414.059097][ T38] #0: ffff8880275c9138 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.059150][ T38] #1: ffffc9001307fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.059256][ T38] 2 locks held by kworker/u9:24/16946: [ 2414.059267][ T38] #0: ffff8880275c9138 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.059321][ T38] #1: ffffc9001406fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.059427][ T38] 2 locks held by kworker/u9:25/17444: [ 2414.059439][ T38] #0: ffff8880275c9138 ((wq_completion)nbd9-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.059491][ T38] #1: ffffc900162afc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.059662][ T38] 2 locks held by kworker/u9:26/20682: [ 2414.059676][ T38] #0: ffff888027635138 ((wq_completion)nbd11-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.060923][ T38] #1: ffffc9001665fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.060978][ T38] 2 locks held by kworker/u9:27/20751: [ 2414.060990][ T38] #0: ffff8880275cf138 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.062247][ T38] #1: ffffc9001675fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.063562][ T38] 2 locks held by kworker/u9:28/20862: [ 2414.063577][ T38] #0: ffff8880275cf138 ((wq_completion)nbd10-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.063684][ T38] #1: ffffc900167dfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.069090][ T38] 2 locks held by kworker/u9:29/22164: [ 2414.069103][ T38] #0: ffff888027635138 ((wq_completion)nbd11-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.069259][ T38] #1: ffffc90005ae7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.069531][ T38] 2 locks held by kworker/u9:30/22253: [ 2414.069544][ T38] #0: ffff888027635138 ((wq_completion)nbd11-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.069599][ T38] #1: ffffc900055ffc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.069714][ T38] 2 locks held by kworker/u9:31/27722: [ 2414.069727][ T38] #0: ffff8880276bb138 ((wq_completion)nbd12-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.069782][ T38] #1: ffffc9001072fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.069900][ T38] 2 locks held by kworker/u9:32/27724: [ 2414.069912][ T38] #0: ffff8880277d5138 ((wq_completion)nbd15-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.070128][ T38] #1: ffffc900107bfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.070238][ T38] 2 locks held by kworker/u9:33/28348: [ 2414.070250][ T38] #0: ffff8880276bb138 ((wq_completion)nbd12-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.070681][ T38] #1: ffffc90006ca7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.070740][ T38] 2 locks held by kworker/u9:34/29476: [ 2414.070752][ T38] #0: ffff8880276bb138 ((wq_completion)nbd12-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.082894][ T38] #1: ffffc90004c2fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.082967][ T38] 2 locks held by kworker/u9:35/29477: [ 2414.082980][ T38] #0: ffff8880277d5138 ((wq_completion)nbd15-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.083098][ T38] #1: ffffc90004befc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.083219][ T38] 2 locks held by kworker/u9:36/29489: [ 2414.083234][ T38] #0: ffff8880277d5138 ((wq_completion)nbd15-recv){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 2414.083294][ T38] #1: ffffc90004bbfc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 2414.083420][ T38] 3 locks held by syz.7.12623/29568: [ 2414.083435][ T38] #0: ffff88804d491f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 2414.091671][ T38] #1: ffff888036ede480 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 2414.091743][ T38] #2: ffff888059c4e078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 2414.091870][ T38] 2 locks held by syz.0.13504/2119: [ 2414.091883][ T38] #0: ffffffff8f61d740 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2414.091985][ T38] #1: ffffffff8f61d558 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 2414.092036][ T38] 2 locks held by syz.5.13505/2123: [ 2414.092048][ T38] #0: ffff88805b511f30 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2c2/0x9e0 [ 2414.092148][ T38] #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 2414.092203][ T38] [ 2414.092208][ T38] ============================================= [ 2414.092208][ T38] [ 2414.092218][ T38] NMI backtrace for cpu 0 [ 2414.092235][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2414.092268][ T38] Tainted: [L]=SOFTLOCKUP [ 2414.092276][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2414.092288][ T38] Call Trace: [ 2414.092296][ T38] [ 2414.092304][ T38] dump_stack_lvl+0xe8/0x150 [ 2414.092330][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2414.092357][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2414.092382][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2414.092409][ T38] sys_info+0x135/0x170 [ 2414.092431][ T38] watchdog+0xfd3/0x1030 [ 2414.092459][ T38] ? watchdog+0x1c9/0x1030 [ 2414.092486][ T38] kthread+0x388/0x470 [ 2414.092509][ T38] ? __pfx_watchdog+0x10/0x10 [ 2414.092528][ T38] ? __pfx_kthread+0x10/0x10 [ 2414.092551][ T38] ret_from_fork+0x514/0xb70 [ 2414.092577][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2414.092600][ T38] ? __switch_to+0xc79/0x1410 [ 2414.092622][ T38] ? __pfx_kthread+0x10/0x10 [ 2414.092645][ T38] ret_from_fork_asm+0x1a/0x30 [ 2414.092686][ T38] [ 2414.092709][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2414.092739][ C1] NMI backtrace for cpu 1 [ 2414.092758][ C1] CPU: 1 UID: 0 PID: 26509 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2414.092784][ C1] Tainted: [L]=SOFTLOCKUP [ 2414.092790][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2414.092801][ C1] RIP: 0010:__switch_to+0x2c2/0x1410 [ 2414.092821][ C1] Code: 00 00 00 00 fc ff df 0f b6 04 18 84 c0 0f 85 11 06 00 00 48 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 1e 06 00 00 4d 89 65 68 <49> 83 c5 70 4d 8d be 78 19 00 00 4c 89 f8 48 c1 e8 03 80 3c 18 00 [ 2414.092837][ C1] RSP: 0018:ffffc90000167730 EFLAGS: 00000046 [ 2414.092854][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: dffffc0000000000 [ 2414.092868][ C1] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2414.092880][ C1] RBP: ffff8880b870e06f R08: 0000000000000000 R09: 0000000000000000 [ 2414.092892][ C1] R10: dffffc0000000000 R11: fffffbfff1f5d99f R12: 0000000000000000 [ 2414.092904][ C1] R13: ffff8880b870e000 R14: ffff88801de85d00 R15: ffff8880b870e068 [ 2414.092918][ C1] FS: 00005555700b7500(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000 [ 2414.092934][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2414.092947][ C1] CR2: 00007fd453caa540 CR3: 000000005ddd8000 CR4: 00000000003526f0 [ 2414.092964][ C1] Call Trace: [ 2414.095155][T23931] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2414.095180][T23931] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2414.107723][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2414.107748][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2414.107777][ T38] Tainted: [L]=SOFTLOCKUP [ 2414.107785][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2414.107798][ T38] Call Trace: [ 2414.107807][ T38] [ 2414.107821][ T38] vpanic+0x56c/0xa60 [ 2414.107861][ T38] ? __pfx___schedule+0x10/0x10 [ 2414.107890][ T38] ? __pfx_vpanic+0x10/0x10 [ 2414.107926][ T38] panic+0xc5/0xd0 [ 2414.107953][ T38] ? __pfx_panic+0x10/0x10 [ 2414.107981][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 2414.108017][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 2414.108046][ T38] watchdog+0x102c/0x1030 [ 2414.108076][ T38] ? watchdog+0x1c9/0x1030 [ 2414.108102][ T38] kthread+0x388/0x470 [ 2414.108125][ T38] ? __pfx_watchdog+0x10/0x10 [ 2414.108144][ T38] ? __pfx_kthread+0x10/0x10 [ 2414.108167][ T38] ret_from_fork+0x514/0xb70 [ 2414.108194][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2414.108216][ T38] ? __switch_to+0xc79/0x1410 [ 2414.108238][ T38] ? __pfx_kthread+0x10/0x10 [ 2414.108262][ T38] ret_from_fork_asm+0x1a/0x30 [ 2414.108308][ T38] [ 2414.108502][ T38] Kernel Offset: disabled