last executing test programs: 8m21.641822683s ago: executing program 32 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000002900010022bc7022fddbdf2509"], 0x14}, 0x1, 0x0, 0x0, 0x44088}, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000000)='devtmpfs\x00', 0x8000, 0x0) (async, rerun: 32) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x22380, 0x0) ioctl$COMEDI_BUFCONFIG(r1, 0x8020640d, &(0x7f0000000080)={0x4, 0xe19, 0x2, 0xfffffff7}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/ttyS0\x00', 0x20002, 0x0) 6m18.516143981s ago: executing program 3 (id=912): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000003000018014000400ff020000000000000000000000000001060001000adeffff07000300ffffffff0800060001000000050005000400000005000500c600000036141b4515acac854822717c"], 0x54}}, 0x0) listen(r0, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="1a", 0x34000, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000440)={0x9, 0x7f, 0xd8, 0x3e, 0x3e, 0x0, 0xf8, 0xde, 0x0, 0xa8, 0x8, 0x5, 0xd, 0x9}, 0xe) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x8a0c3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000004c0)={0x7c, 0x1, {0xffffffffffffffff, 0x3, 0x3ff, 0x0, 0x800}, 0x95a0000}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000700)={0x2, 0x4e22, @local}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000340)={0x180}, 0x18) openat(r7, &(0x7f00000000c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) (async) r8 = socket(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x8922, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x100}, 0x0) (async) select(0x2a, 0x0, 0x0, &(0x7f0000000380)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f00000003c0)={0x0, 0x2710}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000010000001c0001800600010100010000000000dcac0f14aa080006000300000001dc46a8132adcc2837957b159eb3a706d7bef76b04de8dd23a22f8301a11aa59b5e6c69b9812686d6a6cba627ae88069b27454a08489b1bd518b9b7292de482a3b46c46b887ea3231bef44b419357b921aed790c2f28a0726bd9788c27f2df1977e50"], 0x30}}, 0x4000090) 6m18.285178647s ago: executing program 3 (id=917): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="3c0000001000ff0400000000000000000000000000000000ff000000000000001c0012000a000100767863616e0000000c000200082000007b000000", 0x3c}], 0x1}, 0x1000000) 6m17.961093561s ago: executing program 3 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa82, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5000, 0x4, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) write$cgroup_int(r0, &(0x7f0000000240)=0x9, 0x12) syz_open_dev$usbfs(&(0x7f0000000280), 0x73, 0x120141) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20120b2, 0x0) 6m16.987309244s ago: executing program 3 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="60000000300005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000002000000000600070008000000080010006674700005001100020000000500120006000000", 0x60}], 0x1}, 0x0) 6m16.875510196s ago: executing program 3 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0xe2) mount(0x0, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) r3 = openat(r1, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x0, 0xa6) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000003, 0x0, 0x400}]}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) timer_create(0x1, &(0x7f00000003c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000400)) fcntl$lock(r0, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x10002, 0x3, r4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f00000ed000/0x2000)=nil, 0x3000) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000740)='27', 0x2) setns(0xc9, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000780)=""/71) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000800)='\x00', 0x80, 0x102, &(0x7f0000000840)={0x7fffffffffffffff, 0x1, 0x5, 0x100000001}) 6m16.764388398s ago: executing program 3 (id=925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02ffffffffffffa888000000000001"], 0xfdef) 6m1.623851874s ago: executing program 33 (id=925): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02ffffffffffffa888000000000001"], 0xfdef) 5m7.444227187s ago: executing program 1 (id=1331): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = dup(r3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000040)=0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000080)={0x40000009}) write$P9_RFSYNC(r6, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) write$UHID_INPUT(r4, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) r8 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f00000025c0)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0x88, 0x2, 0x9, 0x3}}, @set_irq_handler={0xc8, 0x20, {0xe0, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x59, 0x4, 0x2, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x3, 0xffffffff}}, @cpuid={0x64, 0x18, {0xc, 0x7}}, @nested_amd_invlpga={0x17d, 0x20, {0xd000, 0xf26c}}, @nested_amd_vmload={0x182, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x1, 0x32, @gpa=0x26000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control16=0x2, 0x2, 0x8001, 0xc65}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x3880}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x5e1, 0x9, 0x7, 0x8ee}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_set_state_pages={0x140, 0x28, {0x1, 0xa, @unmapped}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x4}}], 0x270}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f0000000280)=@svm={0x4, 0x1, 0x1080, {0xdddd0000, 0x80}, {"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"}}) 5m6.300122475s ago: executing program 1 (id=1340): r0 = syz_open_dev$usbfs(&(0x7f0000001400), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000001440)={0x0, 0x0, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x14b041, 0x2) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8800, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2, 0x2}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001580)=@urb_type_control={0x2, {0x1, 0x1}, 0xffffff01, 0xc1, 0x0, 0x0, 0xffffbc1d, 0x81, 0x0, 0x5, 0x400000, 0x0}) syz_open_dev$usbfs(&(0x7f0000001400), 0x1ff, 0xa401) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000001440)={0x0, 0x0, "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"}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x14b041, 0x2) (async) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8800, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x40, 0x83) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2, 0x2}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001580)=@urb_type_control={0x2, {0x1, 0x1}, 0xffffff01, 0xc1, 0x0, 0x0, 0xffffbc1d, 0x81, 0x0, 0x5, 0x400000, 0x0}) (async) 5m5.983848772s ago: executing program 1 (id=1343): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e050705000000776e5310f933a27f6a3ac8b698ed8d19a91496d8e2c90941b1763355fc5baf405e56837322e52cdd4e2e5a3da953af650287125ea4636a20bc48041e96f37e75ae0764fdad4bf2b13a09bb398f2da62ff146ce80420e9aff7736773d6a41b8382a7af19aa674a37aaa02b02ac47d6693b4050416ed89b36a33473a9f829eaadf749849fd73ad135f392d101cee63ddc03f4d194c47018573ce3f52369d866486c2c41b6a4029f652a1bea44b47df4c39495a606523329f37c997feac98d84734e600e89dea66e9a7701f9499547415e7668a808cae3adb235127410ff7a4e83dddf6aa"], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) 5m2.76865524s ago: executing program 1 (id=1365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000000000000000183"], 0xfdef) 5m2.411070283s ago: executing program 1 (id=1373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xecdf, 0xfffc, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2a, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) (async) r4 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) io_setup(0xc, &(0x7f0000000580)) (async) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) (async) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x5b, {"0fc77f5d66baa000b08dee262ef30fa6c8f46466470f013966430f3880bb0900000066440fdc8ca7b49a000066d86000c7442400b8000000c744240200000000ff1c24b99e0b00000f32"}}], 0x73}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xf) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) (async, rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) (rerun: 32) write(r8, &(0x7f0000000180)='100', 0x3) (async, rerun: 32) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (rerun: 32) syz_open_dev$dvb_dvr(&(0x7f0000000080), 0x0, 0x800) 5m0.797224601s ago: executing program 1 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x80000006}]}, 0x10) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="03031b003000940006006300000001632fff00000000000000000000ffffac141419ff02000000000000018b000000000001"], 0x195) 4m57.448960898s ago: executing program 4 (id=1402): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sec\x00', &(0x7f0000000840)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x1, 0x21c) write(r1, &(0x7f00000008c0)='D-CONFIG=disabled\n', 0x12) syz_clone(0x40094600, &(0x7f0000000540)="bd94d618094dc2ff0715f9f3e7ab94ce549c8e7ec255e0a7dadd1d146cc06b23a2b63cc7f2be7b7542aeaa7fb648fe2cbb4ae82c901959f6127357a63adf3c15ab15f62ae7d44630a45b67aace40a06c490abe3583a953ed011115eb54c8242a064a9440fe9f34d3427dc2a833a7279498aede8ec30da642954f3fcec4bed6b47b385df727358acc32e6f3aff1dbe6ac109f0a7c09f9fdf9e1c4dfa6d041d318cd5ca123b3de8e916404e5670bc65f30a9690aba958f1c8d581114c397b48b07911f727b83dbb1e0e1de9e68d337", 0xce, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="ea786100f501f465222dbfd75bb0a6b8b7f092bde6d0625e3b617cb69395cf0188d5ba0bfc917d4dc4e3cacee03cd0ffa5eb8167e52f45392ccbb5ed204ca166658a04c504885ad0ecfae011fb5ae2b498f92af29e34af7393cc72bf4962dade3dcd36215aa3d72470b3a77c4b3c2ad063168eb124e6a0464c468e47ce8e4e3cdb3cc58b847931250274b28bbb7ac21b9efb52d226149257080507772cb1827e828238bef7c8618cc0a0feacc12d616acf2e9e621fc4665ec9f2c0a70eb0c51ecc05a4bd4eed08affa3a01b17640bf7487fd550892027c1ee4cf861446542a") r2 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', &(0x7f0000000980)='mqueue\x00', 0x42000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f804"], &(0x7f0000000400)=0x520) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x24}}, 0x40) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./sec/integrity/ima/binary_runtime_measurements\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0xa902, 0x120) write(r6, &(0x7f00000001c0)='27', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./sys\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/class/tty/ttyS1/rx_trig_bytes\x00', 0x2, 0x0) write$tun(r7, &(0x7f0000000ac0)=ANY=[], 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x100010, r6, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) socket$inet_sctp(0x2, 0x3, 0x84) 4m57.28423845s ago: executing program 4 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03031b003000320006006300ff0000443aff00000000000000000000ffffac141419ff02000000000000000000000000000183"], 0xfdef) 4m56.804074544s ago: executing program 4 (id=1410): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc0000001b00010026bd7000fbdbdf25e0000001000000000000000000000000ac1e03010000000000000000000000004e2400004e20000102006080"], 0xcc}, 0x1, 0x0, 0x0, 0xc008000}, 0x40040) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000400)="04", 0x1}], 0x1}}, {{&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="ff", 0x1}], 0x1}}], 0x2, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000580)={r2, 0x1000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000005c0)={r2, 0x50000}, &(0x7f0000000600)=0x8) symlink(&(0x7f0000000140)='.\x00', &(0x7f0000000340)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1/file2\x00', 0x1000, 0x0) setns(0xc9, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="6c300c82a1c64250797164e826be124616b335950d0bcf3591b3", 0x1a}], 0x1, 0x0, 0x0, 0x800}, 0x8000) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000280), 0x12) listen(r5, 0x1) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0x97) r6 = landlock_create_ruleset(&(0x7f0000000a00)={0x2001}, 0x18, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640), 0x8301, 0x0) write$sequencer(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8108031d0600006d6a825920889b7ef42902b74156edcfff67cef1ecd5e068667a8fdf071f1a07a9bdd559d252ae6d2e3497355ed09851a16d3bb107c3b57ea335dde5cb14875b86be7a27b25b89e249746dcf41b0c57e9e53d2e027ba70825b68d09e4745a8ca3a46bd8dc5973710ba6109f1408e7c52b34d953ed659dbd53e4187cd83dfe8da5dc2989fc533459d1e5b0d56b75e2ded905555f7c656bfb1466c07e9cb852500a969d2e9f0cda5a433ce091c0c18"], 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000800)={0x6001}, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0xc) renameat2(0xffffffffffffff9c, &(0x7f0000000b00)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x2) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1/file2\x00', &(0x7f0000000080), 0x84020, 0x0) 4m56.316188184s ago: executing program 4 (id=1414): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60) (async, rerun: 64) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (rerun: 64) umount2(&(0x7f00000001c0)='./file0\x00', 0xc) mount$overlay(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x200000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) (async) setsockopt(r0, 0x0, 0x483, &(0x7f0000000040)="060000007f00000100150000000000006d6800"/44, 0x2c) (async) setsockopt(r0, 0x0, 0x487, &(0x7f0000000080)="060000007f00000100150000000000006d68000000000000000000000000000000000000000000000000faff7e00000100"/68, 0x44) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x290) (async) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') (async) mount$cgroup(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{}, {@subsystem='pids'}]}) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x108) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x802) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000009c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0x0, 0xf7fffffb], [0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xb, 0xffffffff, 0xfffffdf7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0x349, 0xffffffff, 0xe8e1, 0xffffffff, 0xfdffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x3388, 0x186a0, 0x0, 0x0, 0x1}, {0xff, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000c40)=0xfd8) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000500)={@mcast2}, 0x14) 4m55.293407691s ago: executing program 4 (id=1417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0xc, 0x0, 0x1ffc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[@code={0xa, 0x30, {"b80000c0fec70010000000c7401020000000c70011000000c74010000000ff"}}], 0x30}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m53.239646341s ago: executing program 4 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b0000000700210062620000f14074897cc0987c7e65ff630a76830bb9a07c88708edd56a51b4288d2bb17edf391339c62882c3c4ed5fc5c1f05b7d0768a8bcc09a3156fd5159944732e3798c894000000009e6a97704e2169d2f0d006b6a9de9511090434431c2eb30dbebf98c77a6fd65f849761507624de7e466d200aae7dad9926dfb93e001ff1562f3d1b12b286e1055c05f6a581e7440d7c8a89dc1040dae4039769faf152"], 0x1c}}, 0x0) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a010000070021004242000030002280"], 0x4c}}, 0x0) 4m52.702283498s ago: executing program 34 (id=1423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001b0000000700210062620000f14074897cc0987c7e65ff630a76830bb9a07c88708edd56a51b4288d2bb17edf391339c62882c3c4ed5fc5c1f05b7d0768a8bcc09a3156fd5159944732e3798c894000000009e6a97704e2169d2f0d006b6a9de9511090434431c2eb30dbebf98c77a6fd65f849761507624de7e466d200aae7dad9926dfb93e001ff1562f3d1b12b286e1055c05f6a581e7440d7c8a89dc1040dae4039769faf152"], 0x1c}}, 0x0) r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000001a010000070021004242000030002280"], 0x4c}}, 0x0) 4m45.673946607s ago: executing program 35 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x80000006}]}, 0x10) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="03031b003000940006006300000001632fff00000000000000000000ffffac141419ff02000000000000018b000000000001"], 0x195) 3m29.487638529s ago: executing program 7 (id=1911): r0 = gettid() r1 = dup(0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x45, 0x8000047, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000002c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000080), 0xffffffffffffffff, 0x0) 3m28.995544056s ago: executing program 7 (id=1916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000012ffffac141419ff020000000000000000000000000001a1"], 0xfdef) 3m28.679958654s ago: executing program 7 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x80000006}]}, 0x10) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="03031b003000940006006300000001632fff00000000000000000000ffffac141419ff020000000000000000000001000001"], 0x195) 3m27.644210209s ago: executing program 7 (id=1927): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write$nsim_port_qreset(r3, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ftruncate(r1, 0x7fffffffffffffff) write(r0, &(0x7f0000000180), 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) bind$netlink(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x198) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000480)='.\x00', &(0x7f00000004c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x40, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000300)='cgroup2\x00', 0x1) 3m27.284840732s ago: executing program 7 (id=1928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000002000000000000ffffac141419ff02000000000000000000000000000183"], 0xfdef) 3m26.784396791s ago: executing program 7 (id=1930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000500)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000000440)={0xc, 0x7fffffff, 0xffff}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x815) unshare(0x22020600) 3m26.379064348s ago: executing program 36 (id=1930): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000500)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000000440)={0xc, 0x7fffffff, 0xffff}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x815) unshare(0x22020600) 3m11.12618325s ago: executing program 2 (id=2008): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x171) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x5, 0x0, 0x81, 0xffffffa7, 0x4, 0x2, 0xb}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x32600) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4800) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000002090300000000000000000004000001"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000480)={'wg2\x00'}) pwrite64(r4, &(0x7f0000000000)="ff", 0x33000, 0x100b000) 3m10.077125246s ago: executing program 2 (id=2011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="0f20c035000000200f22c0b9b1030000b8f0ffffffbaffffff7f0f3066baf80cb8bb0e708bef66bafc0cb044ee440f20c03507000000440f22c0410f185e4666b86a008ed8440f0748b80d180000000000000f23c00f21f835010002000f23f8c4217d29d9a20068000000000000", 0x6e}], 0x1, 0x11, 0x0, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x10, &(0x7f00000000c0)=ANY=[]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./pipefs\x00', 0x1df) mount(0x0, &(0x7f0000000180)='./pipefs\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='27', 0x26) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x88800, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r6, 0x8931, &(0x7f00000004c0)={'team0\x00', @ifru_data=0x0}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m7.546916775s ago: executing program 2 (id=2019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000020000000000000ffffac141419ff02000000000000000000000000000183"], 0xfdef) 3m7.140345604s ago: executing program 2 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x103496, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x23fd080, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)={0x2940, 0x2, 0x10}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000084}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xb1, 0x0, 0x0, 0x200003}, {0x6, 0xfe, 0x0, 0x8000006}]}, 0x10) 3m6.855483832s ago: executing program 2 (id=2022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000200)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005001c000580020008"], 0x4a) 3m6.619887153s ago: executing program 2 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 3m6.330029356s ago: executing program 37 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000006000600ff80000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2m43.774972716s ago: executing program 6 (id=2149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000d900000000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a31"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m43.492457146s ago: executing program 6 (id=2151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m43.452058057s ago: executing program 6 (id=2152): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f00000000c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000140)=@generic={0x8, "ffff0000feff000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffe00"}, 0xc) 2m43.367781767s ago: executing program 6 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', 0x1}) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x80000006}]}, 0x10) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="03031b003000940006006300000001632fff00000000000000000000ffffac141419ff02000000000000000000018b000001"], 0x195) 2m43.196624546s ago: executing program 6 (id=2154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) mount(0x0, &(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) readv(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0xfdef) 2m42.25784409s ago: executing program 6 (id=2165): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) (async) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400") (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r0 = socket$kcm(0x2d, 0x2, 0x0) getsockopt$bt_hci(r0, 0x11d, 0x1, 0x0, &(0x7f0000000380)) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000240)=0x5) (async) write$dsp(r1, &(0x7f0000000280)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f00000002c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) (async, rerun: 32) write$dsp(r1, &(0x7f0000000340)="cd", 0x1) (rerun: 32) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 32) r3 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000180)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x1, 0x0) write$nsim_port_qreset(r3, &(0x7f0000000200)={0x30, 0x20, 0xb1}, 0x3) write(r2, &(0x7f0000000100)='3', 0x4e) sync() 2m27.064176078s ago: executing program 38 (id=2165): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) (async) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000000)="0400") (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r0 = socket$kcm(0x2d, 0x2, 0x0) getsockopt$bt_hci(r0, 0x11d, 0x1, 0x0, &(0x7f0000000380)) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000240)=0x5) (async) write$dsp(r1, &(0x7f0000000280)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f00000002c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) (async, rerun: 32) write$dsp(r1, &(0x7f0000000340)="cd", 0x1) (rerun: 32) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 32) r3 = openat$nsim_port_qreset(0xffffffffffffff9c, &(0x7f0000000180)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x30}, 0x1, 0x0) write$nsim_port_qreset(r3, &(0x7f0000000200)={0x30, 0x20, 0xb1}, 0x3) write(r2, &(0x7f0000000100)='3', 0x4e) sync() 5.844046688s ago: executing program 5 (id=3001): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000140)='27', 0x2) r1 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000200)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x4000000000000) 4.886339481s ago: executing program 5 (id=3006): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1800000072006bcd9e3fe3dc6e080000070900001d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_ep_read(r1, 0x2, 0x40, &(0x7f00000002c0)) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) syz_usb_ep_read(r1, 0x2, 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x3, &(0x7f0000000300)="837d7e") setuid(0xee01) r2 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write(r5, &(0x7f0000000180)="dd18f57f5c", 0x5) write$sndseq(0xffffffffffffffff, &(0x7f0000000280)=[{0xe, 0x7a, 0xe, 0x6, @time={0x10000022, 0x1}, {0x2}, {0xe1, 0x7d}, @ext={0x0, 0x0}}], 0x1c) r7 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r7, &(0x7f00000002c0)=ANY=[], 0x18) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000001c0), 0x4) shmctl$SHM_LOCK(r2, 0xb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000000c0)) 4.136580751s ago: executing program 0 (id=3007): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000800), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="9f0200007d200000050c00000000000005a7000000000a00fdffffffffffffff406100000000e0e5000005000000000000001b00046e6f6465767b65"], 0x29f) 4.136365614s ago: executing program 9 (id=3008): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040), 0x0) r1 = syz_clone(0x20000000, &(0x7f0000000000)="dc36e65a49ea46191f25482288765533e35ec438e8a493acb0a5bf623c0709609d21fabc841e5eb8ef6957", 0x2b, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="9aa9748f5cb95488820c27ccc46e353febfd750d7c33594c49991af5a6562cd9d3e49446ae87d6a7a8feb6c6d94683") syz_open_procfs(r1, &(0x7f0000000100)='net/rfcomm\x00') 4.092468315s ago: executing program 0 (id=3009): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000380)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{'addr=127.0.0.1'}, {'port=20000'}, {'noresvport'}]}) 4.029005643s ago: executing program 9 (id=3010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002100)={0x0, 0x35, &(0x7f0000002140)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0xf5ffffff}, 0x0) 3.892483912s ago: executing program 0 (id=3011): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000400), 0x1, 0x402) write$dsp(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x20, 0x22, 0xe4, {0xe4, 0xb, "39276255f724cdc281a352a5d5ee289c5cdce4c65bb6a6d73df915bb43308579dea6397ee21bf21419ea346ae96280350948f615e1970373d406b612abfb73f790dce1d179be556b2dcf6e591b78ca9e351124a7b00048d8c10658000652b9816686af636968fd948dce2ff3415ce4452d1e63c507cd88de90dcde3aac89741212d80c335d7103a94db8e8c1d93ab082baec6d77e8f9975c74bb639c0f41efbf73354f33bac0413cc077ca679b19faad0fef667c0b0dcf818c9efdf9109a12f6a3b588f3e22d9cb809389942440043908072109b33b06f6f67de2cb6bc7e18ea3fcf"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000640)={0x0, 0x16, 0x41, "ac894d9d038f09d91814457229c4c3e2d426dac060c20826dcbc5dab63242785f056ac45d3cd4a4f470c9d616d946ba705e064929fffa7a3db006d1fd10f601768"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x8}}) 3.86723176s ago: executing program 9 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000004c0)={0x238, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x54}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xda}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36b}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xad}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x184, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x0, 0x4, 0xfffe, 0x5, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x6, 0x0, 0x1000, 0xfffb]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0xfffe, 0x5, 0x200]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x8, 0x0, 0x4, 0x0, 0x6, 0x9, 0xd]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x31, 0x7f, [@rann={0x7e, 0x15, {{0x1, 0x3e}, 0x2, 0x0, @device_a, 0x8, 0x0, 0x6}}, @erp={0x2a, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @measure_req={0x26, 0x5, {0x3, 0x7, 0x6, "a1b9"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x38, 0x10}}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @NL80211_ATTR_IE={0xc0, 0x2a, [@ht={0x2d, 0x1a, {0x2000, 0x1, 0x2, 0x0, {0x7, 0x10, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xb2e616461663730f, 0x4}}, @peer_mgmt={0x75, 0x4, {0x0, 0x8, @void, @void, @void}}, @tim={0x5, 0x31, {0xa, 0x20, 0x78, "a7b1b9e8a10a2ced6bfb4cab46d275e092c4776195a79d453fb5981274a67fba3c5443d2a71ae49ca62af13c106f"}}, @supported_rates={0x1, 0x8, [{0x5}, {0x3c, 0x1}, {0xc, 0x1}, {0x1, 0x1}, {0x4}, {0x6c, 0x1}, {0xb, 0x1}, {0x25, 0x1}]}, @random={0x8, 0x3b, "372c19864acbbac34b9f96ff4bca0d6b092bbb115d5aea97c19d6bcf82d08160174fda287aa6eb577da3c58531bb05adf7d8ac851bfaccd69b9fe2"}, @mic={0x8c, 0x18, {0x950, "78de0e3fbdb2", @long="1ff27ff8079aed6886bf5f0f172e3dfb"}}, @chsw_timing={0x68, 0x4, {0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1e, 0x7f, [@peer_mgmt={0x75, 0x18, {0x0, 0x9a4, @val=0x7, @val=0xa, @val="7d77db4eb7836f818f78401562dfea40"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@ssid={0x0, 0x6, @default_ibss_ssid}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x3, 0x3, 0x6, 0x9ed, 0x8001]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0xffff, 0x71b9, 0x9, 0x9, 0x2c, 0x3, 0x4]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]]}, 0x238}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000c40)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x200000, 0x200000, 0x7}) openat(0xffffffffffffff9c, 0x0, 0x149000, 0x1ba) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev_mnt\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYRES16=r5], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket(0x10, 0x3, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000740)) sendmsg$inet6(r5, &(0x7f0000000c80)={&(0x7f0000000cc0)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000d40)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000d80)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000dc0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$binfmt_script(r6, &(0x7f0000000e80)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xffe) sendmmsg$inet(r6, &(0x7f0000001e80)=[{{&(0x7f0000001f40)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001fc0)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002040)="d2", 0x1}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000002100)="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", 0xea0}], 0x1}}], 0x3, 0x4040040) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x300, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r4}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}}, 0x2004c000) r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x4a4241) ioctl$SNDRV_PCM_IOCTL_LINK(r10, 0x40044160, &(0x7f0000000240)=0x10) socket$netlink(0x10, 0x3, 0x9) 2.174199722s ago: executing program 8 (id=3014): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000140)='27', 0x2) r1 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000200)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x4000000000000) 1.81747254s ago: executing program 5 (id=3015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc02000000000000000000000000000005000000fffe000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r1], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.754172932s ago: executing program 5 (id=3016): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000480)=0x80000000, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) r3 = dup(r2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000d00), 0x100000000ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000d40)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000d80)=@userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0x8, 0x9, 0x48, 0x3, 0x8}, 0x3, 0x2, {&(0x7f0000000e00)}, 0x496000}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000006c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000840)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000880)=0x0) syz_ublk_setup_queues(r3, r9, &(0x7f00000008c0)={0x0, 0x9e80, 0x820, 0x3, 0x27a, 0x0, r4}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfafb, 0x8, 0x3, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61a, 0x0, 0x1, 0xd0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd920, 0x4, 0x401, 0x8f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6583, 0x80058, 0x0, 0x205, 0x0, r3}}], 0x4, &(0x7f0000000bc0)={0x2e, 0x0, 0x0, r3, 0x1201, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, '\x00', {0x1, 0x455, 0x0, 0x0}}, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000640)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000c80)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000344000/0x800000)=nil, 0x800000, 0x17) ioctl$UFFDIO_COPY(r10, 0xc028aa05, &(0x7f0000000cc0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000c40)=@req3={0x1, 0xc, 0x3ff, 0x2, 0x14f, 0x6, 0x10000000}, 0x1c) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x800016, 0x10, 0x1f2, &(0x7f0000000040)="477f18a29629bb0802bafc18bd2902b65d86bf820146be56a65bfe2b99b654725639c8fc605839dffc6752f29586ae9d10a96837465540da466293ee7924ae0b5ff985d835ecc45e41caaf7d421af9e4629a97e8a78925f3494a64483257b1ebd25d5c32dc8c3ce8da146d4a366e35f84fb9e77168712e2af4a28d5885c1b98579c4beb2af5ab3b141e8cdf1cb806589b77a1db5fb1d0bc9a69358072d92eadab871874c985d546fba446eef8fb423cb489f094934a9280ad5909fdc46d699189c03f27d9a7cfdb5c8448400c85b91b298ea29b733fecc7aa43b8bdb4372c8f19921ea7a51f74ace1b3579f46cf1f099b71998245cc7a725527c11bd5ab56776bb119dea013428a3b0e9aa4634793b2c487432a230aa43e2fb92c3465fedfebce104547fa1881dddab2a55a7b8416f2f36313ee3dd5fa12d89fa3451fdd18ca13cdc00e5ce8e68237b6c6f0a04cbdbe84534135bedf628de432c5986dfc012d473cde8e2e05af80c29d35a65a60f06219ccaf7f4584b4b2cb664fed6261b499a8401e4a0619a6c401bddb5a736b066099319481020697afcd420c1c3b685495295b68dbbf54a8d6111957ca78ebc0c23c2ed5e376f72daf8b279050364ffffc145b82faf1c1e3adb52a6743fd32540692ea2c7fee07b034c49a0ee3d77e5e771adf0295b09cf822d005fe5aa10478f2f71ac4daab78fee58177e9d54870bff76dc818a041163ec4bc18de2c286ba3c7485d2c868549883fd514134c766501ad5e17f3f087eb362fc17b9f6b17b2ab6dd84510faba9566428c4449584ce81182a65752c6481ddc4554b8105ae2c4c7ed5016fa101051fa0112ee005762e426122675ed7aa85a9ff2a983f4417b0e2766f5b334fe9170db09e6728fff31cfb815d5b64c7584c922a47930957945cd5b95944ed382af6a174b2a2afcc2ecce4bbc50318f27efde5c7bcc6839d04deaf69acec2d9e35441b3dd6ab76ddaeff40a8df811f203ac4ac5ab50c1fc33c719af74e7b2d2a98204a492f7ee0fefa008caab92eec557758942d45351691babddc6e9eebcaa62578149829c15967133dfb2248a1f9f8e5080cffa99d856e2c08aad74716e6cabeae3a6dc2dc616929981fd2d978774f63e4524e4b42d642fc23f703b2bf0a3772074a2d0637a2953a24431c50ff6ecb60a2f324805d3d380175be1bcf43fe99892b280317d15d3e606493c339e79f5aa3362ec251fad8273af06a6ea9979a000855c98cfabc5c86a304ae9f5874afb2f072457d5cc8bdcfb8348b2bb88e9a48a4b7eec0b442c85a5565e876f53544d206b85ec5ef1f12b9d0f9a7cc01fa1674e07525c30ae8200a7dc4f184dd79d4107f8f3d2767aa06db84bd066244a9781479850fd8111a0af6ea58bb347c4f5fcd8b328d8b650c338735aa67953dd377fd75e0d3900165f6da483f072f04"}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000680)={0x5, 0xc, 0x1}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000740)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x8c0a00, 0x0, {}, {}, 0x0, 0x1, {&(0x7f00000007c0)}, 0x2}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000440)) 1.221874206s ago: executing program 5 (id=3017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.21871305s ago: executing program 8 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0104000000efff0000000a0000070900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004540000000c0a090000000000000000000a0000060900020073797a31000000000900010073797a310000000028000380180000800c00018006000100d103000008000340000000010c00008008000340000000022c0000000e0a010200000000000000000a0000000900020073797a31000000000900010073797a31"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.09645415s ago: executing program 5 (id=3019): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0xe) syz_open_dev$video(&(0x7f0000000080), 0x9999, 0x400) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x9999, 0x400) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x4, 0x8, 0x2}) syz_usb_connect(0x2, 0x48, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100192701840101412a05fc4010203010902360002020150cb0904000801ff3a140809050603100001060809047b6f014234b90309050c001000090906090441"], 0x0) 1.096287744s ago: executing program 8 (id=3020): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02000000000000003e880000000001"], 0xfdef) 970.607565ms ago: executing program 8 (id=3021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) 920.817983ms ago: executing program 8 (id=3022): r0 = socket$inet6(0xa, 0x80000, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6erspan0\x00', 0x10) ioctl$sock_ifreq(r0, 0x19b2e, &(0x7f0000000040)={'hsr0\x00', @ifru_hwaddr}) getsockopt$packet_int(r0, 0x107, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvfrom(r0, &(0x7f0000000100)=""/36, 0x24, 0x2000, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80) sendmsg$inet6(r0, &(0x7f0000002500)={&(0x7f00000001c0)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)="d2f4109fc9b50c8d24746acbfeeacc57b62783502080e6d3a904d7a816d963a4aeaef564ddf8cde16d4221667ccd9a85d9f954a6d53b96cbbd36eb54fedb8ef8651faa0c096fdcdec58806df37d8fe04", 0x50}, {&(0x7f0000000280)="da55e6d1f8553b260833006213a886d80012bfb001777c15eb55b68ce1549dc743b5af2dbae138c1aada00f8432f5e7d30a1e346b2f8", 0x36}], 0x2, &(0x7f0000000300)=[@rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0xf0a815419d0783e7, 0x10, 0x0, [@private2, @loopback, @mcast1]}}}, @rthdr={{0x48, 0x29, 0x39, {0x62, 0x6, 0x0, 0x0, 0x0, [@private0, @mcast1, @local]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts={{0x28, 0x29, 0x36, {0x88, 0x1, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x11, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x22fe}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim, @jumbo={0xc2, 0x4, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x800}}, @hopopts={{0x1080, 0x29, 0x36, {0x3b, 0x20c, '\x00', [@enc_lim={0x4, 0x1, 0xf9}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x3}, @generic={0x5, 0x36, "85344753f8a983e6eb8bf687df6350c2b82355ec0d56ebe8b4cbfe350d58b6d27456086e4b8c9b8d954fe84df5ab94680133e5632ddc"}, @generic={0x0, 0x1000, "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"}]}}}, @dstopts={{0x1030, 0x29, 0x37, {0x84, 0x202, '\x00', [@generic={0x80, 0x1000, "92b203f48b76b41770922c25176a58571cdade47d90e895a7a84e56d2ad000b7998b144b64ef3278dc26b41b23a39f7eb1cbbf38059c41a113ea6b98c7d3be6492726e0224ba1400f37f8282c5ec36983ed82bb6f341f1fc0e7c602f6b066274aec37c9318c487374c62293acf2e83c1e6e370316bc32ebc7ade770ef252e47f3b54fb3040848039f88d8228571dd04fd4c276dfdfad67a2166b3d1887aa75ec0a481764dbce3f079e20fc2eebb7ef8c6b5094154af6f36506d4129182ee6fd3d18f4927725b20281c899f243c817b6ceab0cbbd505f68e4b7b284397581201257320d501cc2a6d536bc12a48728bad0ae4c430bb28342a86bc3d441a4deb9c06672316e552663b845701d3084a6c322db70e52a5b936ac2f5368ad0895eaf3c6a4dbb1806342f1c023151c56bc17b37d99fd9651cc47e7bcff98ade7602f0c28065cb939a99494a609320239d6ff1116791962c01e9340c8daa476f92af9244e60e7a43ce310cbc9ada8d4ec1aebb98cc50eeb91c88d0f3a6d105943c985218556b19ba3ef738a3da0b37659f9fabcb3c58b6c6df072d4cc246bf0f07cd54bf9f3cee57e25a963d3e172e1a4a6712e4a554a8c1094afdcf9d08c665cf5d17db9a95d4a89d96534d9bc0e70b8ea32854bf01fb0d434ed4867b45f883e23aa0e976234b8bf8f43c6e0a8adfd3057e38cb8d88cbebbf9db105de0e96882eaac7aff6b8f93cb09fcc9273a2992fd1cf464dcf911c5672207c259c91892e361a16c98a06df0ea56a5bed2048c3b7cdb123defd3cf905c6f64e6dd7e748d19bd541add85e48447fd2626fa9b8c4247228a08144e40f29ec9549721246084d512a5e83c36a8621a2b601a59fb9cf5edaea07af1fc5565451588c87408048b71ec1655423e19c52a94e01ad195aec2837dc1703e415a41e567f994b8d45a3fe385d033d3eaa5bda80f30720cb45c884fc3e669298caf2e199d456a4b99e479a21addbc1a721e8c08690824932c6429694531efebf0ac7406bcc53ce2c12ceda5e722364a8ba313b91c487cd14fd6e4fa0b28a74abed032a395f9653d948a2677d7a6b4313a5eca6b9ffa54f25da3d82401d3732008ace4432a404d26786331c1d40a217dc19b98eb2924898ae3bb5c5b0b187007956c4306d0d4e139fa5823939eec47a110b8c15c86dcc8529ea8cd0f956a5eff91c69fbc8c17acd337efa69032ce806f37652654f4f4e8ee22f778cf4144c3af4a994e1b40d79f7dc2a8a58bc892771fcdadd5d8881748fb99245b3789af83ef4fd46b81728cad1a6a439632b289f9768afa83eb79fcaf9dfae68416e2a6e6bcfd4d65cc4b50095cb12b55b338e824da1120ec113a690f07f46ed0848dc46a71195db04495784281b375a7f2fe66c746ad8c50538a46f2dd963786d790a3d5fbc5e811043bf104a13d30d761df5722ab19a45e684cf9cd46a0862edce905f1198bc66f5f1b7ce4257ec400de058f8d1c8d5336cdb86f2a0934f92c2bf45946218d826fddc8719c3dea6bf9700519bfd24c4e2bc24aa7c599d7f7888b872ba5102dcf64cb37972aa93c072ba7bc0059ba7f3581a9a9454ee6fccadcb384a79b8980fcdc585cc74ea206c5eada70aded740d4b73a4b10fa9940a0e2580adf6825aef5e0a454d7ee4c770163e089ba47d19d3c42c58b799774896bc9ab8bcba9e37c78d895d40112dd40e7fcb96bccae31d555f67913c55b9f4f9b718f463b3ea112f8665f199f2ed170c7fd0bcaae316989ade885524b049e83085f925b46ea50890ef61b85d2f0fd727c62b0cb7d487c0a173802044be0dc8fdc580ab484880af5a47bdebadb745673b1a2849baa510632807ded86730100099a82d560fe56b8db8f159f382e541eb26229f134e3aa3d1d4a13b8c163552ec14df55f4a8ac546ea28ef1b1cbbfd56a140e6f60324b5cef6ef82af4b59c99885d043b3d7b2f3062675378bbe9f67bb75a3e8cb0cdb6255d1529d7f58cd642226d5310f5f2e0b582d040425489a239a3fc3d91b46cf5a7a303a0ba812205c183603d25c362ea941ed07370a870647caf384d4ccd774d19c59cfde28e42290f50db874f0ceb706a3db6937aa868cbc38cad9f42d196dad3a7cf056efe18e2fe763b57b76a6c2ed2567cf66ffad1d1cab42bc6b8abafade52ff324caebb50cbcfabdbbdd0db39e81850e174fcb705e0acef45378c9837d1291d03668f854bcbf39c60b9eb60e152639b0e84c7440a9b1c376319b2bbcd73c191a0954d43a75b2d822ad0a3fb7243679b9e5b5778d2ad6802cec31354bdb477e1300e74ebb990685e042eb58662354d8b5de57467199c2084c5dd230bd083bbdb5ae11212b13ffa0a0765a811a13d7a2df84f7907719143c9e56d3160fa2c301d10c129d0c4f4c119b74b928e01205d562786bf2284cbf0d9a9bd4e1d3cca51344621d29fdcf4b696a0500d17512c6aab269463f4590cb0616b661bfbad8f477793a483bb8126fcd8ac31fe0d82935b305c95aac7cfdaa6e9c6960530ee948a61a995f1794591a6160b68f75564de5acbd8c720b0ce2d0cb7a895299c896bbd6d465a87c213a42f4760d57ec7d7d8e4228362802fb31c3bbb9a6c8399914bdb108393d71249a91e2596f575f8a61efccf87bc1a1f34a4ceaae4db9b2143ee4d7ed3a060a258af3d455ad87797dcc8a91b5d0fc84f5f0f03190188c95fd86868ce084b6be76819a5ba079b3e2262885f4bf0f9194166d0f15c34f99a8bbbde5ac541b011dd5ca05290be44b8bc264116580c2bdee4cd1a960100ad4eb643cf174cd9d7d119eb1d50c01c5d95001043f1c76bd2e07106976a5a7f6b5ce879a6febc49a6ec31597c3386937ac64a0605bd4c7cb8ec1dde1b65bfb2c878ce68fcc4963c05a7cb23e811a9bb23cc33da2f829199b31df7c00f852aebd8406b27003829a900ac4341c33ac52c9863e1a32d4627a5f1e1147f4b6f093b8eeeec741155d47873440e5e9b80f13710134686b6b2aa768341f52ff4ebdb9021b06fd7f91d2f1c36786aeb0450aa68b4b7d4095b3f2ff3d0586582049f827de671ae6906e5ad82ec94131b52ab64d3ede9abb13b047652d08f7683845109d4b9570b95231a00e13e3dc19d94521c2dd7f40ccf2279f8209829e48bc5a22154d29975719d2347668117987436799a30b534b0ec915b74314d3eebb50ca1169e40686584cc1e4ba97ee491b001a272bf287dfe25f4d4f60bc3ad5ec29d4518f4c5dbc1763622cd0da588b0129f341d0b44567aeec553eb1cfb282c9613c1ba67094009fe2c63c8b26b53f9ec77a6257af8ef919891ac5fbe0df50650f224a62c48941070eba4d9cb29ac623a7c231b3b3a9c717fcf41b169223a13e9048447873c4101da10185b3f67fd8687d60af7438876144e32c4f6f73ce64698f8bbf83f9151413fc7c986897b926b0ab24bff57fbae49874d286910021b4830570e46d057867af68c4b880a2ae3d91fa2a9e8ff49b2fd2992f3a1bdfc5e71666c3e37f8c8f838fb1da14d99803b8193c80afcfacb69753d1ab980562fd176a878507b23fa140c18545f63c09d35a6055ac7a9b1dd62cbeee4180f44c2c04a61a25ed76b59b338dd7fb916a71ca009fe152d045dac8101038d8f2ff9ec8a56cba8a135cb59fb994905122cc2ee141349e6d4de17fc0a514ceff3cf9b93dc5a9156d12691d7e06837964df605aa3e4f828378b721f2929a162d372192b7468b7da03cd6e3b308046e43657db711ee5efcfaae406a54701c305da2b20f5c5fbe960c01f6d083f49e15865b6ef7a380280ad2bee891a373f56e86ef6f776b8f12b779bc878e46e7225adc22a1dc54117ae3b1484556e49e0d31a837c20b4b1f12cd0b7d3a09b0b889f647c20fd835674a75b616a7ecaf9c02943a4c941df2e6bd86324b87e36c7ad27c22c83b6cea43ecc953dc23690ca5c5471ccbb2345013b92b56649b6208e9f8ef08e4f94e82845ddfb4be8baf6066835b5778daafd0002bcea13781d6f621f29e26d4f5b01084fe8d4442d1eaff09e82ba47a437a01daca20ebfd731e80628f1e6b3b9c4e7f248d5b34c8914e0ed6065d0c8d59b9b30901ecc89b6c7cfcb308d138fb45c61b68582ab2bd471a392ef6cac12f8279df3d8472bdb5164aab5e6f489426551e62564b353d317beec0148c2fc2e5197beca9d01a2f79ea3026b3e3e0125fba9824cdca8eda94f7c12bb766f29c8e8cc41767fa7f68f8d08298e5781e4a04762a09d1a6e8d702c1c37fc407bcba3eb94cbf7cff4331af55383df0dcca5dc0d60fb05df070d232a38391b50120a58bd83d88337343d79aad7bef879b5293a5d5dd1729325bd53f63e41505138ae2aaa1f6acf3eac91debb753a89861a0fca4125bea5294f4d99e324d3f6c5e0d58a62a2581872c77ddc066ccfe0c223d8b083be1afa8df25e794ae50804c5074377a805f0eca862fba0b33eb0247b3861623357559bd08161accf818fefdb7956067f53151713301cce788a016d377fcdceef2718ef3866b479bcd1255fdaa5e3b63c1e8fbbce7a10763c353cf294c237cb8ebc4b93b2c5392e69addc2c1ca111833f272dfaf4a6acab077abc92f26aa581a459db27563f52da86325f2b415d6c0fd13d389c767b2e9cdd344b71dda8d1729355dcce786d2011941f8ac335e62b9cc38419fc214692c59c0e96ab410de4346682c4e0217258c1df09119fdb9448955b121fc2af63ed91048139d9ffc5a4cf182d75df769a1dfc5d766f0aa2c9bec91c20441a8d9c63f61819ec812e881d5931315686e50805300297371c4543f083e3d8bf468d3368982f6b73a793b595931c802e36ca93aee46ba935285a20afef0d20676858ca94e9ba3ef3af19cdd6a561805b650fe78449ed188aafefe1c772068f34b58137168bab94e74e41b159ad7b2410d88181b6999b1d229d58659b0d5719ecdba28f4eeff639691cb92020d5dfa0dda38dafd2711cbb1d9c0f9e7dada9325da36e721ab43f20f8361fcaafc151b762ad4fda4e465bc9358444d9c7331a421069c01b54bec4967ac8f1471c273655c0e6951effd241beba1d1a6ac6ccf0a7f9449817f1d5c9f8976921b03480080baf2a312ce409ad4c8d8a45bb799063e42535c3a9a5034fe1557cd748a5cc3a173623118abf9e2e41354ca338d0dadd19c48dcb1281a017b19fa0d17e7e4de1b54b427c4a975ed660cbc4d031e04fa2775f5cd35c726a59a622cb3269fae114cbd580a79654780e9e35b98fff484947b9a8ce3c7dc39aa6ad094cc3b8a25b201189b2b7dfb05160b3a9bc55853901a36c10c94b8d2269d84b419dc5b9c7ce64bcb5cd5d142c1e71762934861f36a028f4b7f0d39a6e4b0b2e28451bdd6d5cc4b211861a22ebc7956470c2dc0370dbdfd163211760508a8b98bbca568ca555ef65e5d33ef939ce5c90c2876a12ca5b5e6440b59d41ba075cfe51bc77cfec6b26dbcf5f73faf288181923d8c68db005cd409825a55fc9c14de8be6b23273e0ce630a29da2e3cb3912daa49b6302d5694044036779a4505bacc4fc764a876d476da209e60013d450b929516b451a03d95ff187eaa659dbabe0003abb9a8501086d2846d5e6e158dfd0c8b0d584f123071158d6531d1b9c7c91eb1f5441ad48797a9e408dd631adc621ddb95e90c44c9623df6806f61067dfccd45b3d61fb184591c1a2db6cfa619e131d739bce65a8d4fecc250e97f1fde64d651532f25cb4a8208459b7d867d44b6385ce1836e35f63ec0977a2cd20ae976c7cb2c28435b0fc0"}, @hao={0xc9, 0x10, @local}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x2b}}}], 0x21e8}, 0x4040000) r1 = syz_open_dev$audion(&(0x7f0000002540), 0xfffffffffffffff9, 0x40800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x48, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r3, &(0x7f0000002700)=""/240, 0xf0, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000028c0)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) sendmsg$kcm(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002900)="0e94e8f8565cc2f727d821f5b06291857bd37546810a9f571d537d236e", 0x1d}, {&(0x7f0000002940)="de7bffeb925a9aeac7e8c5aa630fa238aee3b119ec41ceb58c3aacde4eabfa64eb8523257befaa950bd56349639c32b5714422ee32040f548408e21ce463dc38fda5049be24e9d95be2d60f109204fdb8acda88700fc6c7ea2070e3905c1359d6cd7c7b39beb65a9d008a01c78d196900db8f675c7d24d118e15ba17196c8cda79500fb958f2000fe4ac5077355c1a88b03940da121bee59c4e28468fba4d7249fa69d5c7ad252c2f84a8aaeee92cc3a4c0f8522fc359d83e3d395f4e8", 0xbd}], 0x2, &(0x7f0000002a40)=[{0x20, 0x119, 0x8, "f3583e51b6da728c078166"}, {0x88, 0x117, 0x3, "0528ab4109aa25728c7d3621458a1cb63561d7f626eed7cb23fea5d5ef3b6439b037002d9260aec06efd3734aefaa750a6176ccaebaee2431909a64c9bfcb73fc803f866b95e88bf5432d0f0e53b302f6899e2c3e3bcf51c7da0f54c2b148fc57610810520f9d14f3c3423c25dfe45a5db519e6b01"}, {0xf0, 0x119, 0x8, "dbc88a146e6a487ce2c27bcf7335e2acd7e4f446319efc8fc87f93c32330216c0bcdf4fdd4c973a6514c4cf06d624eeaa0dc7f1ed40023ff1c918a0ca949516fb9427c51f531edbda255f22d022bd61c12e739e58593cbe4f332e293301eb715c484d5edcdd514b8c616291b611bce90b9b47c5e5473a510e36a16c29606bc97d39986485eebf925f1536920c26c31f566482cab0575fc6ce0770b998f9e5d73c8872584bbae180c1ce4fbf28add7ace1b2fd3e4abfca449113e644aea780b8507ac3c8445d7307bad92e0a96d94cce70a637263be834e87eb19135a7f77b364"}, {0x58, 0x84, 0x5, "55c1eafd8ea615414a86c8862b99286d8fb24630f1be028456508afe5cf9e69bad38fc91ecee198aac3b2d5aab16326efc27aec2e1dc10c369176bac8ea625d454f70d87"}, {0xe8, 0x6, 0xf, "542e0c51c52b229e8183b9b74ec095dbbeeafeb36aa14a441024d9f62e593c445c016608ec0cba7fbf0099217f318ec33b82afa8f04ea5d13dcc6394a861c9542be4327b885a6a33048c18ad65a620c817673acb62d62083d2c7237106e87fb636ee89bd11081905eeca0880484f2ed8c295487d312aae1596aba7b8e3b58fffb890e67291be0923347d63db3816a08a4957a329c9c25f7a394305ac4aa61931a87067e7d142ec320fb46c69a9c113694f359f0a936999af14f3a8c9f00ba3ebe92ab02661c7564c4177182835ec0826a4c46040d842"}, {0xb0, 0x0, 0x2, "13f041fad4f8482cb71c8212f58ce26a6b653fed0de9f21045a9a62dfa28a2aa23c5c9a122221693cb32ff1737e6d91dbf30f9168c0b976b07733ced8519b32285092cecc64a94466ad4587e8f2172101bb714d03649b4c4f1aec5f09f95b047b022875fb3d114fc1b9acf1295d63bf9ae1545984681652936e951d98c3bac8137aad4c1b18b3a1c199cd4c8f9102ea93d72e3381960d923f052eb735ed364"}, {0xc0, 0x108, 0x5, "83036481bb71aacbb91b19acb4024b72868189f008ec1c80b74de05d5fc09c5be6c2982effd23cfa82526add98dc388a19dd152a68d589381e03dfd3fd7e5cf1bf33d0a2c0d50cef9edd73082af47cf62931ed73bd72472b6c718f3c6cc6e0efa09e36f86bb38e31f399af8ea0e052902a7f41954313ce847ebfbf65c04d3f4d422b81463aa890ef7986b49eb0c82cd415b8c79e637f018b4fe240477dca99f05dc4c6ebe11399be3342287db338ad"}, {0x28, 0x29, 0x4, "dec2921726c4875bc6319d2e3cd51c051994e68025367a2d"}], 0x470}, 0x880) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000002f00)=0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000002f40)={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, {0xa, 0x4e20, 0x1, @mcast2, 0x7}, 0xffffffffffffffff, {[0x1000, 0x6, 0x6, 0x4, 0x5, 0x6e, 0x8001, 0xd62]}}, 0x5c) getsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000002fc0)=""/160, &(0x7f0000003080)=0xa0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000003300)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000032c0)={&(0x7f0000003100)={0x1b4, 0x2, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40}, 0x4080) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000003340)={0x5, "60a3ccbf3621aa90a995b5419cae8221bcedaff6a9e9890d9929c1c400dbe515b4352f38bc755511885565d197bcebee4bc1acebe8a601e1ab5ac2b8bb03ca48"}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003400), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x64, r6, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40804) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003540), 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000003580)=0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x70, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x840) write$P9_RATTACH(r7, &(0x7f0000003700)={0x14, 0x69, 0x2, {0x4, 0x0, 0x8}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000004bc0)={'sit0\x00', &(0x7f0000004b00)={'tunl0\x00', 0x0, 0x7, 0x10, 0x98de, 0x8000, {{0x24, 0x4, 0x2, 0x6, 0x90, 0x64, 0x0, 0x9, 0x4, 0x0, @empty, @loopback, {[@lsrr={0x83, 0xf, 0x70, [@rand_addr=0x64010100, @remote, @local]}, @generic={0x86, 0xa, "3680e0ba745404e8"}, @timestamp_addr={0x44, 0x44, 0x99, 0x1, 0xe, [{@private=0xa010102, 0xcf}, {@multicast2, 0x7f}, {@multicast2, 0xc7}, {@multicast2, 0x9}, {@multicast1, 0xfd19}, {@empty}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0x9, [{@broadcast, 0x5}, {@rand_addr=0x64010102, 0x25}, {@multicast1, 0x8}]}]}}}}}) sendmmsg$inet(r1, &(0x7f0000007880)=[{{&(0x7f0000003740)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004a80)=[{&(0x7f0000003780)="f288d60cbe0319487537a5ed29ba44c0d4e54c01948094d0169cb7fbce3cd181bf272260062c7cb80778896b9f59d53f5d5fca1b94b977c75bccaaf711996a465fd5c43010c4f74cc28fd7c2a4574f28c30872d7beb81601d71819c84ab51e16d0423df533893902320bfb7020b4fd8c7f843135a21a79bcc284c69327a1705caec1e0b91db01fe2892a305115b7e71fca9980abdc2eae842c4e1c0b4291c1d196cd6f1101b065f2fb0fc2f013a3fa53fb74175a633459a5f37002", 0xbb}, {&(0x7f0000003840)="d405f80d4dae562dbd32db3e45e1b16f6a294a212417771348edbd8660ecf40520709276eafb3b77274222a027b047bacd4bbc21347b630e25b8acc8901d41eff9238df07e480f7e9948efc68b81c2ec0c0582979ad4c81d0f9f985250c320710512dd6fd58ace41e109bc07546673251b3edc98db195cc1aafbd394f6adb1bcf4a4de6c57005c9108c38959a2d34077704cfa37bb332916044598630c3037e8bceccbc19b650a7453bf1f1495a553ccc576e519d2fdbf90de9768edee9e4447a2420d065ba187e04c249d3b2ab404a98a97862f03aaaf9aabd698b1", 0xdc}, {&(0x7f0000003940)="1592ea706174ed9fe8f95e55ea3783013dfaf24ec07025122627bb61b9ce6899eaf1", 0x22}, {&(0x7f0000003980)="95a6cc4a3e3f6bc39ae220f238dcdd17eedd771e742e34115135b7ea1e6d26a2e40a30914cc874324f01314375ef1cc898208e093e59ba87e6df6a2f79c82374cf98746635d683f66edc49b031c5d48dc58b4954aae0e4e8eeed52c2746a2abf29986980ac5d430ff1445a3b9faa651cbf5e664fb79648c74e2d88641f84b85431a1b30dfb35ca0267b66b6c72fd58de31598c1f579555850b015ad13262d4d1437a36435f7a7d3d5136eb7ca891d117c230e69e456a5cd71064e1254e849d077ad92a3b48e510f2598ef81a87ffa2d721ef5bfea8a7f047323b4d6ff0ea6d4a5f146fa7e66d656f732ef2723d55f2e23933", 0xf2}, {&(0x7f0000003a80)="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", 0x1000}], 0x5, &(0x7f0000004c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @dev={0xac, 0x14, 0x14, 0x36}}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @local, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}], 0x80}}, {{&(0x7f0000004c80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000005cc0)=[{&(0x7f0000004cc0)="efdf1ffac801f6f00c58b49a1e0ec804eaa4497e071ffe206400ea84f8db9c35391d15fc5edbfdcb27a700538c13eb3557752efd043d6a5cd2d421c56b3842123f21213c9c9c3d0ddfbd64647c8a7c2991956148fe56b90bd8642027f93849107f3b139f79452e6a3d03e132a90a2ca78b21cd6f932c792f19693e33a9a4cb65a399e6cda3fe945776d852cbf55ed10692e9a4477b7f31428d55f9e1af9d8c7f7d1e260eed9a86c1c5a277f29b95d5aff8e47e51304eae221fdb0f62594c7b24fbe4e0a4354b1c7373118769812f4093d9aebae8fdd3ae59e92c8f67be150648e24e95060d3fec2afba8b169bd721f3b30fe1ab4089c00956f358e76b8923635b82836c92db6635a21ba2595512a49d7a1fc6e72e47e5684157d59bd40c15577571e339fbd78cb03f30e72f4dd933d26d849202f377868390db847f3b09cc197f0c7860d4ee972998c8f50183d23c0c86e8b77b8d9ce659f9c4ac0cb787dad1b67151864da299068c413e95beee9629e2e6ee928ffe33fb39f95e14a4d889f5473d4e133f78515482360dbeb6a298485daf79dcf631f6c6cda66351147e9947dc3feaacd2ef919f05e2725dd3ecf39afc259274d563b4ef1fc77abb6809f7ca94990c53fd3e61a7fc69b6c822ed10ceb85090edac2e2169dc050e711c84a1e6604b6bf1dc1ce22d2432f0d26ca2e7b4d64922f1641d812ccb84778c792e310598ca44e9e97fd15c4887203f94979893ebbf7b317e6cc804feba3b22b8b440eae38470a62f888a10012cfab3b0b29a873d94b4e24694913d44c8c93611035437eef8767250bd39a4cc2432ef35974936cf5871f92a5db0105aeb617a449a805afa88d863fb9cfbe71f751e5ded9418198bfb1942083d849f568af98e2378a1e9cbb446b4703fdae665b9fe86d5e39bef6caa1d1e57062e1e81d45254624ac3cc4a7fb343a6ca12d4c293fcbb19bc41326122546a823e805f2557f4e1e1588e0b8ebd5f9a19284a68bf5dea954c0ac4608ca1600586c4c1634e905cf1627f936b0856cd6b1d9573a8d75121bdc709a51b150a9fe3b9df310b0273c10bcc456aef86b8ba11cb1c899d76e3039145d6892083d0af57fec462034a097d55c46c49e84239c9ce963023ff360730d345bcbd8e75cf3300836a7e18a2da137695012728ac26e525c6456730f7cfef551d42f70737c093b6fc20c680a8151b9e7868fa94b942c514d48083522c0d34c69ce9280a7ab16ff6abe1053d4ef510e259f2fb8d8b7f25051984fdb3d03dba3757574b1f7e6dc74a3c06c36bc1fa393980a1fd0aebd51ae1fcfe2fb6e776d5d626ae474aa501eb30d08d141c997e90a432e49df7a3c2b8920d2b450c9053edb3d0778260f27d4fdf884d2384520d729f7dd5f01b9ddab4af8de81953994c4f1393fab7e10a8223b3ad145c315f3ab2363c6041714affa762c34b7e46fd74d1a4f8cfd06715293d9f858ffb9964e19e7bab3da11db99034ac96607c6e7d00d1a032d52b0238e31765ecb7aa0ff444885d67e7931dc9e1c11f1d6597a25ba3ac80298cb5fd71df185943476222c57f5c58834e489fc17cba8d36dd7d0f07d854a02600fce644348443819c85721c573ffd7aedd41b8eeb579f8f3601066a39a8d1a4f47a392240517ba9bac2328ca973db4aab9f3a07f4e027f765bb8f8ff4e96ec0d9d8cc636dde353fbd0e8a9248f12a70b70931d38d65e6ddcc743391a7cc8e484b0e29f2bd04b0df91ca9b9789d2012c82615e254921c01f5333894e5094588309b56cb5baf90ba5ac06ab27eba0b15e57c70250cdc5da7dcfe91ed54bf5cbf28d92b2a3af6a399143aa939ee256b30d76cb6f1464c356c7dff8aaf75f86ea766fae2dbf2995cb6167c3cafec9f2341fd6403368f64e34fb6060716126025f570cf2a81869c57aee5e709a162cbf78c5947c4cb62be0e365cce4d905d910923f0c6ecc7070d4a951a8e0c708852e290c7ff94f100df31a73a58bcb895d3a75aa287c49eab1ebdaf9fd5eb3d08db04dd2dc1d2650076617b110fbba026bfe811e41a2d70aabbbdc58bde653a4ab8351d7cb6e921f2882a2b5c31f3a87d71f9e03a8b173f3338411c7d309b338a29a168143d8999927c22e35cd55aad951b139686791efcbfc835dc6d2cef583779a24fa8004a141d0acf609d552ee220dc1d75f95a27c044bfe965791dc728d75f028b0908546756c417754e6503af77c96373a9fe7bddc64444ba3eb545ab869eef4b0767b4c0863d913a38acb5d074ded963ed7b75ab59cb9fb495791bfbc136c3ebfa88e4da7cfcc98c65c956e0ef7c1b838a5fb8175f3cb6673516649caa444bbdfd02a285ca51d7b19de075dc7da25610e378222223773efd21db5800011aa925d4d46363babc10940919faa578d0dd9da98d98ef56860a96f1343b1295ec481df56d17453b528f2b9c5ccee2bf94bb962c4a1b2c6936c043f3b453b91b7c48a8bd7b4405f4ac30347c8e973fce1743f0afb7cfad9eaa37be8f80fd2445d2d0bd507a1a9d4ac147ac372625eea6ce65afec34c681f1005ecb3185fe5371328429e58d775f97a22cc62dbd56e2a59f44873beba77f38a1d11092f71e7c4d98db2b99bee0cf70e2463aed76492bb5cb261fe75e33107017f8ebfaa25e348b7ff3bfdf5ea18188b6727bb2276770ba1ef5ecc525b31ed01f96ddc60f0244065badf2f04051ff6395a83366c0c5d99418ecb1b8e0dd941f2708ee2dd990627ca1e45374e6aeb28606c6f40328f16a60261019f5ff56e900126bf57b12bb5c716f5d36e46e59fbae65bd67643fc598a39e0f38e3e2341e5286e8a9b9a9cd5734a2258295c03c1b0c9addfb9cb06de88cc2d7eb2f8219ef23b25cd00967cc9f1ad2f570b2821cd024002548cd4b2023e32ee4b4d77deac4580886d38a9d616fa7dbebe265d555b9091c2cbbfc242d7cc46b13beb4fdccab97d8beaaf7c8f0e10c460758c4c5843afc5a852ee6eca5b498602f62a5b8bb9f98a6beb466ddce81a4581bce203172511a3f78954029847f11a9f5ed1a061ee640711cec987a503ed0bda9fef4198d09e2e795e443cabf7a0e69ce56f06c1d1743a84fe6e9ac6c4c788363f3196ca064d2b061409ae3aa04405504d2cfe992087d25ba5b6e1f24b2a023120aa2dad9d3e6c99ed1bfd2f2aad98cf3e7969c85b83765ccf37dc9db6fddef5c0c3b8568ff6f2a37858a2f854bf98ab208fbb8e35f924a98fed6f4b06f0335e8acbf92e6d4ac344765ea040d446ff86f9ffd4a7273562e97177c085eb50f2b4bda21eec22617e833232f597f20036272172d8002bfefca60206f4fdd49f80d13d13af802c158c80d3b388e07bef84f37b70f937223e4331815aee310ea86681d7fdcbf550560e052f6da8bcb754f0a070703e7b26451790aa91b3f7cf6b195d2db7a9166b5886d3849a9ee5df5dd1444e5ea9c98c5abb4f828db62460c13e9946815d13c8efa89e23c5d33d722189fa34a514d7d107bca9c5ce2f91835843415e430706a1abeefa16c82d590ded19610d72f55f8a9f37ca765e1c217f805867ee327e79be94edf9933b343a37088c9a114ec181a87267818655e1a9102ecdede26efaa6a6965593f9c27c85f1096134fdeab167ce6e61829c378a6607eb4cc2e530e564620d81495fc5641a102541e642fbc560d15acff91edccfdb0b4c328e407d86a9c0e59cdc6fcd0dd38690bd0f8425354e82673b49817a3052d2291eec0e9392c6496240a7ce561ce07f4186a1cf5fdc784ae0de7b3dd933bfb73513aec6ddd59a0bc817e3407cd49bb4161c45487d8473dfd8e47182f1199cf693ce56c09aa6ed6952031e2de148116de6d424c3920d070d434b93e491a2cb47b7a336ec37cc49e9850f45fdd85667829df79212fea4f56ab8cdadb39e6d314609c7b9504f0bd5fdb918860ea2fa13c2561d4dc6f4f44ffdf919dc682df208f1cf3ecbcba808c7dec3888b8b248091ed258f0b0ad1081b2e78f1fb5aebb4b7b0034a81df1b884e963af85eae8956a51390aa7b4c5f0930f7d85a40713c631b17ef1b02ba0b424567d3fe4851c1c5148aa3f7531e0c0bbc92f59f2cb9df1804c3b9ff37cb8d53928955abb1a831bb1499d1a008ebe34ac9fbbc5bb21f8eec084171f64443ee4bfed9b96410ae337135cfed5c3521aeedf188f87e19ea457ab92b44f75958e80db0895c59b8351be1958c8b9739d7c9d1d91bbc9394791c2246b9c468bc228f976d5d1b486af19d5e6a10386813b71aa2f29f0115b9d7b1c025d29bfb1559cc15104df19c524842844c8f274e1607fa089820a9089b13c4c76ae500ef63cf1408cd2fa6973da23b5b642a8bb97360e08fe9df9b6d4e59bab603ea2066dd4e11d7a9c70d7308c38844b2a4c9644804d46b12edcdf56eacbaaac6357c0898bdbac8c7c5d5d1ed7bb566aa1394792c517b8cfac7cf55749e436ae5434891d9c208a2a252f89998ef3655091e24feed128cf521f0fad847e92297c2ffd6a49549c157bcc78cf5bb8783a90c2d93584930194f2d49a9b282fd6e0e8c82027bacb2b848aee725c4ddd6f8190159d8448b7e9e368017c4a5eb22656eb3be9b7795dd7a801b4b6c5451fa860c91884076381bff07d24e3b968644354d059f23e73ef18ca4aecaa6e45626bc4d844beee13382ee3fe4e932632f4361ef8ad04d7e1ea0bee771fa23c7368c5bd62541b935b305dc1b16007b3a7bdf4506a32bcdb295bb3d3a696eded16b16b0223891d1c289dbf307426294bb36a730b98acc7c72c48710aa58cbf6540411a6ce7d1c52b9cf8db20ac6c0dfb23a1b7dbe6869525044d45a436bce405ae0a91ed5580ac243acaaca23c11b54e3e47493ee050c58b6cdf8aadb8b5cf94986d13fd7ab63aa51e0e453025f8511cd66e7ea9ec0fb48a60244826ea6f147e20444b2828930795589a8be74eba486428eacfefcdccb49101008d220bfe5c3764e1cdd7a08955ea4638928348bc7a72e73e0d68e4e138e84ca1657fdd19bb25c34b9b57b1cf2eb6918dddf8e2da738b0deaba16568d943483a2b809eb93142ea983b24f76c16778755d88288033e8db83042ae929ff9ba6568429d39783148e62c092daf26eb83e169b05e2fc96a7488a91ce6d5f4d49cf72c55e1035543fee6f3892b7d38a21a828ace9fb8db01d49167d8d901a38e0bc688e3967f2a6d581d547576d1d8e422d5c135543412f72b8ea49b6f22bf8871af91be8263face9e6db76cb95692de70a0bb9263bdb9595267e6318bf61d276c330f9bbd2ad835670f491c5e84b2657474f78dd17d267646cc8057bf97d5d1c25317924b60d7d43e1f21b501f81b01ba26329d0e0421aace0b5f70b49079ef39f3fe24d0d4fc08bd52a5f789e2bbe17bd7b4e36575378b5e3549a2c831fd1f6e882bc1168e75437c1697c6b4a2cf412dcec6c85210a67de72e1d0da9e8a5f78e0d54c0689dd36f92dfa2b64f402ad07fe271574a7f87b3c7cf2a6156233e4ad2b2d2f6550cfa605edabf656a6b21e3b5c08a0a95c5fc87a71e2a5568a65d8620293349a611a2fec90b1dc3aefe536cc3becc550ebc7fa597d3eca98c1a0da6a6b8810e6fcda2f1c896a554bd97c4914b0b7b94c5d4d68f89c504e82634230f414537dc4cbc79bfbd56799d0009127fd13bc0c19683ebb7e7a11ac6cab6fe14b5b94951c14d3b76c12765af2d17a298256f0dd1c60c8c2cc82283b5a3070463b8782edd7899512ae444dc8f586ff414311ad84127205a1dd6244a80965addf4877e2c47421c768f7", 0x1000}], 0x1, &(0x7f0000005d00)=[@ip_retopts={{0x88, 0x0, 0x7, {[@generic={0x82, 0x5, "222fb8"}, @timestamp_addr={0x44, 0x24, 0x5f, 0x1, 0x7, [{@empty, 0x84}, {@rand_addr=0x64010101, 0xffffffff}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x4d, 0x2, [{0x2, 0xa, "ad334652bfffc0a9"}, {0x5, 0x3, "f4"}, {0xc884814c18eb481b, 0xc, "1b5d1b94020b6f94dcc6"}, {0x6, 0xb, "dc88bc3ed0a58a2f58"}, {0x5, 0x4, "81b1"}, {0x2, 0xa, "ee63d81dc03c7851"}, {0x2, 0xd, "eb3871e366a1f5730c0e13"}, {0x2, 0x3, "b1"}, {0x0, 0x5, 'FoW'}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_tos_int={{0x14}}], 0xd8}}, {{&(0x7f0000005e00)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000006180)=[{&(0x7f0000005e40)="57c0f55c12d2f30a91558b042797f0c0db47882bd4bfdba39a40b2334d98c8a6c4b1dd6610aa7bfc58ede93183ea3dad59d2abcb47543a5ff8af191b8089a166741f0fd12cd240e4a6bf07ecf812a2d6e5e8ca7697f69af5111d99284a1dfbca730f9c62049b8f43b0", 0x69}, {&(0x7f0000005ec0)="223e2c84e2b4fdcee6d8f4cf347f2cc4ad252466a53a518e30069bf9d0c811f67f043733bd9163aa597a635333d86fdc8346b06cdec28a986f239d71de76c9622221271e72", 0x45}, {&(0x7f0000005f40)="fe390d2b6e6a2e51656c515b9e9381687597ee8de40e2104adcf2cf2e03b0668917b1e5a2ab965a41d97b956", 0x2c}, {&(0x7f0000005f80)}, {&(0x7f0000005fc0)="aca706c868deb1fb35be3751c3054efaf57a5713f3536ca3c40574f04e1a019fc67865197e5689c18025d1957b74d6237e60b50137d760bc2c0cd4affef53e4b19cd741569348a3d76e4078c73a9e839e6d62dc93425b906d71436efe45a0f941d30e6f8f15c2c2d0eb4d97ac0ec33717b494a549f4f64dad616f7ac51c14cbf975d4b28440178cd2b9f2a963e55c2b0d4fb7cc7192859ffb8bb15011a9c113b879c4a5b607683c68df3b5eb91fa6e9c0f2f43a603a84a1f92cc857e4505aa2208601b653b0a1b3c50d8b40905bcab4689aa1f12bc1b2121e2d0", 0xda}, {&(0x7f00000060c0)="4150f4cf02f8ba377e29c588ae7633968dd70973b4f2d38ffe266ce5c5da4f178f25cf4cc3e45a127d252425ac397a340508eb1270522d8d816527110040e8de196d22ddfbd04677cc702de03d57f0d5342d5493f0639e8b61bc2bb6f431dfa8b8c8988c98eaefb34680cfa6056a18f66e4c9a7766eb3e16adb0fc167a40153d1d50e12db8998b21846dfaaf00c8551a1d88b7faa5873f6ff5d1389665", 0x9d}], 0x6, &(0x7f0000006280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8d}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@noop, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xde, [@loopback]}, @end, @lsrr={0x83, 0x13, 0x8, [@loopback, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x5, [{@multicast1, 0x4}, {@loopback, 0x8000}]}, @lsrr={0x83, 0x7, 0x5b, [@broadcast]}, @cipso={0x86, 0x54, 0xffffffffffffffff, [{0x0, 0x2}, {0x7, 0x10, "1ce277fe84a23931e91d972f3848"}, {0x0, 0x4, "94d1"}, {0x6, 0x10, "cc031b8c17465c85cc8dde8e2832"}, {0x1, 0x8, "4f2f5fbf0695"}, {0x7, 0x8, "43adf63d8731"}, {0x7, 0xa, "709af4d7470733e6"}, {0x5, 0x8, "e588e713daf6"}, {0xd305388c64457a0f, 0x6, "e301731c"}]}, @ssrr={0x89, 0x7, 0xfe, [@multicast2]}]}}}], 0x188}}, {{&(0x7f0000006440)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000076c0)=[{&(0x7f0000006480)="230611409b92a16343c2b5065253b5325926a72eba2d360701fdeab2df1209bbc69f4d43bfa0e10e5fe29a03aa3241e2197ac22f63a2a246ea81ac132e952b26219d43a39312e93ee5d75d52d214ae450e7380beeab2507c03a238b2d1855dfae6c8cb65d1227d46069d7ec0a2c071ffb2676530543ed1d44b8e82c9a616aff8e747c76d0880abd71064cdb9f503e55f07edfd80b25a6994acbcd482efbae6fb36aa1d88aff4422dcb43594fbb096f5814c74b9d70503f93fd4b6752246e468f47a3a80c4583d57221c21c2c892918cc8858cac2b0e800e0165db4e4e3e68a6691bae101c6b5a0ad6617a1f9ad52", 0xee}, {&(0x7f0000006580)="1c90a495f0b304c0e73391dca5724dd652a77118ac5696a06354824c7243616ffb2c9168fec43f619f544f47c643063a5675a76c675a1f6dfa", 0x39}, {&(0x7f00000065c0)="8c24987c93013e8f5a202d71d6c39a28d83454a7d6398fdee55892917d7d66ff250ce07616793fe8aa2d67f2735d8568dad896977a7dd9f974ec343d5c8292007749e1ab184ce4a995", 0x49}, {&(0x7f0000006640)="8582220ecfee5ac7732ef9a358824fd8149c852846ba0736e0b8d1f62b00482a47fa918f870853231a9126260f4b4fb03c6c770e353d10854b877003fd40a82c63209211448840306d1216ba52c73e17a084983b410576c88fdcdcf3383927c2b693fa65afb6d1c4001f", 0x6a}, {&(0x7f00000066c0)="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", 0x1000}], 0x5, &(0x7f0000007740)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x94, 0xa, "ca7d7bdd304f72aa"}, @timestamp_prespec={0x44, 0xc, 0x2f, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x84}, @lsrr={0x83, 0x13, 0x93, [@remote, @broadcast, @multicast2, @multicast1]}, @ssrr={0x89, 0x7, 0x77, [@private=0xa010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x90}}, {{0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000007800)}], 0x1}}], 0x5, 0x40880) 815.635261ms ago: executing program 0 (id=3023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000200)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000370580020008"], 0x4a) 740.680057ms ago: executing program 9 (id=3024): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) 442.964262ms ago: executing program 9 (id=3025): r0 = syz_clone(0x2090200, &(0x7f0000000000)="0e19ecba517f2fe13d237b75df28ffe2b3f84854095a697c94d6a24c6dc3fd0df08a826f6dc66bf1ec0b1a80eed5ed99afca98056c17c44781ff39163ec401172998e64a67d61fab697627d283b9c3ed57f1ee291e627b1116a2e219bf6c84ddbe9307538ec51793b9e3817c667bd032bd9566663ea3b30033f14c0ffd283283b174b661f10a070d384937a2663678d1b06fa257bf0ef8d85a6294f580bb43a03efbaa838d23b4828004db01d8cc014f5b8ff915b58736b033c64fb6e1d99ab7018abba4c6e6d219b1500630ffb57d37b9e8f3284ec132547f78270c3496", 0xde, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c6e8f50f3aea16389d0afd66ca1744b0df9527027b1e1e623ebc3c7a4f1f3fe9c2b7b99384ad165d21ae7325e29f9038d78862b6cc8a6d31bdbe1db34390a588d21b4fd6a6f1745b758a12f5de03bab1374aed93400ac92cacbd85f20800f38a670fc62a8a6884a52bd19779b27d287cf114604f1b120b3f1df30fe0ca5c09573bb607eaca210f898c8e4c0f6b6b94328aeea48faa23d683bea3b69c5ed34a83527636322799f28422cfde40394aa95d8592de2c89f41459d3c156ead8fa6cd0c36decedff00a85d8a772770603532d45a9e375320c980") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newsa={0x144, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@local, 0x3, 0x4004, 0x4e24, 0xc001, 0x0, 0x80, 0x0, 0x0, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_dont_frag={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r2, &(0x7f0000000340)=""/74, 0x28) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000600)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000640)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000002900000032000000330000000000000018"], 0x30}}], 0x2, 0x0) socketpair(0x15, 0x6, 0x1, &(0x7f0000000300)) inotify_init1(0xc0000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000006c0)) 352.591328ms ago: executing program 0 (id=3026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000020000000000000ffffac141419ff02000000000000000000000000000183"], 0xfdef) 352.418574ms ago: executing program 9 (id=3027): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000140)='27', 0x2) r1 = fsopen(&(0x7f0000000180)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000200)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x4000000000000) 34.746201ms ago: executing program 8 (id=3028): r0 = socket(0x15, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040040}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="740100001000130700000000fbdbdf25ff01000000000000000000000000000100000000000000000000000000000001000900000002ffff0000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000ac1e00010000001a0000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40082) getpgid(0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001900010000000000fedbdf250a010900140012800800f8800400438008001e0000000000100009"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x80, @mcast2, 0x1574}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x9, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0203ff030e000000000000000000000004000900a8000000658a287c7753b50d3102372719494a5133d6d9ba2e000000030006000000000002004e270a010101000000000000000102000100000004d30000000101000060030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffe, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@polexpire={0x1a0, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfff9, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000001, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0xc, 0x0, 0x0, 0x0, 0x5, 0x3}, 0x29}, [@iptfs_init_delay={0x8, 0x27, 0x2c}, @sec_ctx={0xd6, 0x8, {0xd2, 0x8, 0x1, 0x5, 0xca, "07870702752e8c35146c375e398a0f40d91b467b64c69b3a95347bc16e2129699ffaac38d800c962a176842fe3dd75203bfb8d5512b67583f55541c7a55290455abb20a48ed423600a60883f67c696a5d2b701eb94ac3486a0ec84fc676a745dea3a516288feacc980e55a5552ec1d08645d14283e8fec248f6c0d1c45e54173a9d22f47c142f59785b005ff142ac2885f31c268f4a1c509dbb52e890982a4684d2d7c71b5acf366b284858c4265f71d4f98f658407f22271fa23beee09d77fba3ce74e139d0d583c9d6"}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe7) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x70201, 0x0) ioctl$FE_GET_INFO(r7, 0x80a86f3d, &(0x7f0000000080)) 0s ago: executing program 0 (id=3029): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r1, r1, 0x18) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x88841, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1b65) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$md(0xffffffffffffff9c, &(0x7f00000017c0)={'/dev/md', @named={'_syz', 0x0, '2'}}, 0x2, 0x0) ioctl$BLKDISCARDZEROES(r6, 0x127c, &(0x7f0000001800)) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f0000000680)={0xa, 0x4e21, 0xf1, @private2, 0x40}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000700)="e4", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r5, 0x1) ioctl$RTC_UIE_ON(r4, 0x7003) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000740)=""/4111, &(0x7f0000001780)=0x100f) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x268, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r2}, [@verity={0x0, 0x40, 0x0, 0x130, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '1024', 0x20, '512', 0x20, 0x61, 0x20, 0xfa, 0x20, 'sha512', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @none, ' 1 check_at_most_once'}}]}) ioctl$DM_DEV_RENAME(r3, 0xc138fd05, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x80800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, @name={'syz', 0x0, '2\x00'}}) kernel console output (not intermixed with test programs): r -101 [ 566.973228][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 567.006491][T14926] FAULT_INJECTION: forcing a failure. [ 567.006491][T14926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.006515][T14926] CPU: 0 UID: 0 PID: 14926 Comm: syz.8.2788 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.006570][T14926] Tainted: [L]=SOFTLOCKUP [ 567.006578][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 567.006595][T14926] Call Trace: [ 567.006604][T14926] [ 567.006614][T14926] dump_stack_lvl+0xe8/0x150 [ 567.006652][T14926] should_fail_ex+0x3eb/0x540 [ 567.006683][T14926] _copy_from_iter+0x1d3/0x1680 [ 567.006725][T14926] ? __might_fault+0xaf/0x130 [ 567.006744][T14926] ? _copy_from_iter+0x21b/0x1680 [ 567.006769][T14926] ? sock_alloc_send_pskb+0xc87/0xd90 [ 567.006792][T14926] ? __pfx__copy_from_iter+0x10/0x10 [ 567.006822][T14926] ? __pfx__copy_from_iter+0x10/0x10 [ 567.006853][T14926] copy_page_from_iter+0x219/0x2d0 [ 567.006882][T14926] skb_copy_datagram_from_iter+0x2f4/0x720 [ 567.006914][T14926] tun_get_user+0x1510/0x4470 [ 567.006951][T14926] ? aa_file_perm+0x18b/0x15f0 [ 567.006971][T14926] ? aa_file_perm+0x4ed/0x15f0 [ 567.006987][T14926] ? __pfx_tun_get_user+0x10/0x10 [ 567.007014][T14926] ? __lock_acquire+0x747/0x2de0 [ 567.007034][T14926] ? kstrtoull+0x137/0x1d0 [ 567.007063][T14926] ? ref_tracker_alloc+0x172/0x530 [ 567.007081][T14926] ? lock_acquire+0x115/0x350 [ 567.007100][T14926] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 567.007120][T14926] ? lock_acquire+0x115/0x350 [ 567.007140][T14926] ? tun_get+0x1c/0x2f0 [ 567.007194][T14926] ? tun_get+0x1c/0x2f0 [ 567.007226][T14926] ? tun_get+0x1c/0x2f0 [ 567.007263][T14926] tun_chr_write_iter+0x113/0x200 [ 567.007300][T14926] vfs_write+0x612/0xba0 [ 567.007337][T14926] ? __pfx_vfs_write+0x10/0x10 [ 567.007371][T14926] ? __fget_files+0x3a2/0x420 [ 567.007435][T14926] ? __fget_files+0x2a/0x420 [ 567.007526][T14926] ? fdget+0x1ac/0x250 [ 567.007625][T14926] ksys_write+0x150/0x270 [ 567.007719][T14926] ? __pfx_ksys_write+0x10/0x10 [ 567.007830][T14926] do_syscall_64+0x16a/0x530 [ 567.007913][T14926] ? trace_irq_disable+0x3b/0x140 [ 567.007980][T14926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.008044][T14926] ? clear_bhb_loop+0x70/0xc0 [ 567.008111][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.008169][T14926] RIP: 0033:0x7fb1d3fa8f19 [ 567.008219][T14926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.008272][T14926] RSP: 002b:00007fb1d4d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 567.008329][T14926] RAX: ffffffffffffffda RBX: 00007fb1d4225fa0 RCX: 00007fb1d3fa8f19 [ 567.008373][T14926] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000003 [ 567.008414][T14926] RBP: 00007fb1d4d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 567.008449][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.008488][T14926] R13: 00007fb1d4226038 R14: 00007fb1d4225fa0 R15: 00007fffffd8ad78 [ 567.008574][T14926] [ 567.368379][ T11] usb 10-1: USB disconnect, device number 48 [ 567.488314][T10874] libceph: connect (1)[c::]:6789 error -101 [ 567.488571][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 567.790218][T14947] FAULT_INJECTION: forcing a failure. [ 567.790218][T14947] name fail_futex, interval 1, probability 0, space 0, times 0 [ 567.790257][T14947] CPU: 1 UID: 0 PID: 14947 Comm: syz.9.2794 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.790290][T14947] Tainted: [L]=SOFTLOCKUP [ 567.790300][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 567.790316][T14947] Call Trace: [ 567.790327][T14947] [ 567.790337][T14947] dump_stack_lvl+0xe8/0x150 [ 567.790378][T14947] should_fail_ex+0x3eb/0x540 [ 567.790406][T14947] get_futex_key+0x1ab/0x1410 [ 567.790451][T14947] ? __pfx_get_futex_key+0x10/0x10 [ 567.790479][T14947] ? reacquire_held_locks+0x117/0x1a0 [ 567.790511][T14947] ? release_sock+0x2f/0x260 [ 567.790542][T14947] futex_wake+0x119/0x5f0 [ 567.790566][T14947] ? tcp_sendmsg+0x39/0x50 [ 567.790605][T14947] ? __pfx_futex_wake+0x10/0x10 [ 567.790638][T14947] ? fput+0xa0/0xd0 [ 567.790663][T14947] ? __sys_sendto+0x4d0/0x5a0 [ 567.790703][T14947] do_futex+0x458/0x4e0 [ 567.790746][T14947] ? __pfx_do_futex+0x10/0x10 [ 567.790792][T14947] __se_sys_futex+0x3a8/0x450 [ 567.790835][T14947] ? __pfx___se_sys_futex+0x10/0x10 [ 567.790871][T14947] ? rcu_is_watching+0x16/0xb0 [ 567.790910][T14947] ? __x64_sys_futex+0x21/0xf0 [ 567.790948][T14947] do_syscall_64+0x16a/0x530 [ 567.790985][T14947] ? trace_irq_disable+0x3b/0x140 [ 567.791015][T14947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.791041][T14947] ? clear_bhb_loop+0x70/0xc0 [ 567.791070][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.791094][T14947] RIP: 0033:0x7fe3051a8f19 [ 567.791117][T14947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.791138][T14947] RSP: 002b:00007fe3033ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 567.791164][T14947] RAX: ffffffffffffffda RBX: 00007fe305425fa8 RCX: 00007fe3051a8f19 [ 567.791182][T14947] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe305425fac [ 567.791198][T14947] RBP: 00007fe305425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 567.791214][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.791229][T14947] R13: 00007fe305426038 R14: 00007ffe23323700 R15: 00007ffe233237e8 [ 567.791266][T14947] [ 568.335595][T14961] netlink: 'syz.8.2797': attribute type 10 has an invalid length. [ 568.647576][ T922] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 568.693054][T14965] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2799'. [ 568.797426][ T922] usb 9-1: Using ep0 maxpacket: 16 [ 568.800062][ T922] usb 9-1: unable to get BOS descriptor or descriptor too short [ 568.800116][ T922] usb 9-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 568.801271][ T922] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.801288][ T922] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 568.801417][ T922] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.804221][ T922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.804244][ T922] usb 9-1: Product: syz [ 568.804259][ T922] usb 9-1: Manufacturer: syz [ 568.804275][ T922] usb 9-1: SerialNumber: syz [ 568.888979][ T53] net_ratelimit: 127 callbacks suppressed [ 568.946202][T14902] ceph: No mds server is up or the cluster is laggy [ 569.033911][T10866] usb_ehset_test 6-1:254.83: probe with driver usb_ehset_test failed with error -32 [ 569.037320][ T5754] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 569.063212][T10866] usb 6-1: USB disconnect, device number 71 [ 569.076783][ T922] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 569.087756][ T922] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 569.138842][ T922] usb 9-1: 1:2 : does not exist [ 569.189121][ T5754] usb 10-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 569.190884][ T5754] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.190908][ T5754] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 569.193646][ T5754] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.193670][ T5754] usb 10-1: Product: syz [ 569.193687][ T5754] usb 10-1: Manufacturer: syz [ 569.193705][ T5754] usb 10-1: SerialNumber: syz [ 569.198057][ T5754] usb 10-1: config 0 descriptor?? [ 569.299130][T14971] loop7: detected capacity change from 0 to 16384 [ 569.581060][T14972] loop7: detected capacity change from 16384 to 0 [ 569.787475][ T922] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 569.905175][T14986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2807'. [ 569.938540][ T922] usb 6-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 569.940157][ T922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 569.940188][ T922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 569.940249][ T922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.011305][T14987] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 570.043965][T14989] tmpfs: Unknown parameter 'õÝI©›—jy' [ 570.053991][ T33] kauditd_printk_skb: 44 callbacks suppressed [ 570.054008][ T33] audit: type=1800 audit(1794315049.659:1457): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2808" name="proto" dev="sysfs" ino=60339 res=0 errno=-22 [ 571.419605][ T5754] usb 9-1: USB disconnect, device number 43 [ 571.590579][T14971] FAULT_INJECTION: forcing a failure. [ 571.590579][T14971] name failslab, interval 1, probability 0, space 0, times 0 [ 571.590642][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.5.2802 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.590676][T14971] Tainted: [L]=SOFTLOCKUP [ 571.590686][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 571.590701][T14971] Call Trace: [ 571.590710][T14971] [ 571.590720][T14971] dump_stack_lvl+0xe8/0x150 [ 571.590765][T14971] should_fail_ex+0x3eb/0x540 [ 571.590796][T14971] should_failslab+0xa8/0x100 [ 571.590834][T14971] __kmalloc_cache_noprof+0x9e/0x600 [ 571.590865][T14971] ? fuse_dev_chan_new+0x65/0x4b0 [ 571.590900][T14971] ? fuse_dev_chan_new+0x65/0x4b0 [ 571.590942][T14971] ? __pfx_cuse_channel_open+0x10/0x10 [ 571.590976][T14971] fuse_dev_chan_new+0x65/0x4b0 [ 571.591019][T14971] ? __pfx_cuse_channel_open+0x10/0x10 [ 571.591051][T14971] cuse_channel_open+0x1f/0x7a0 [ 571.591089][T14971] ? __pfx_cuse_channel_open+0x10/0x10 [ 571.591121][T14971] misc_open+0x2d5/0x350 [ 571.591150][T14971] chrdev_open+0x4d9/0x600 [ 571.591176][T14971] ? __pfx_chrdev_open+0x10/0x10 [ 571.591198][T14971] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 571.591235][T14971] ? devcgroup_check_permission+0x31/0x8f0 [ 571.591269][T14971] ? __pfx_chrdev_open+0x10/0x10 [ 571.591291][T14971] do_dentry_open+0x80e/0x1360 [ 571.591328][T14971] vfs_open_consume+0x4a/0x350 [ 571.591351][T14971] ? path_openat+0x16e1/0x20f0 [ 571.591396][T14971] path_openat+0x16fc/0x20f0 [ 571.591464][T14971] do_file_open+0x23e/0x4a0 [ 571.591501][T14971] ? __pfx_do_file_open+0x10/0x10 [ 571.591555][T14971] ? _raw_spin_unlock+0x28/0x50 [ 571.591582][T14971] ? alloc_fd+0x6af/0x760 [ 571.591620][T14971] do_sys_openat2+0x115/0x200 [ 571.591647][T14971] ? __pfx_do_sys_openat2+0x10/0x10 [ 571.591677][T14971] ? __irq_exit_rcu+0xc6/0x220 [ 571.591706][T14971] ? lockdep_softirqs_on+0x11e/0x190 [ 571.591740][T14971] __x64_sys_openat+0x138/0x170 [ 571.591773][T14971] do_syscall_64+0x16a/0x530 [ 571.591806][T14971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.591831][T14971] ? clear_bhb_loop+0x70/0xc0 [ 571.591860][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.591884][T14971] RIP: 0033:0x7fc6e15a8f19 [ 571.591907][T14971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.591928][T14971] RSP: 002b:00007fc6e2409028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.591954][T14971] RAX: ffffffffffffffda RBX: 00007fc6e1825fa0 RCX: 00007fc6e15a8f19 [ 571.591972][T14971] RDX: 0000000000000002 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 571.591990][T14971] RBP: 00007fc6e1637f6d R08: 0000000000000000 R09: 0000000000000000 [ 571.592005][T14971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.592020][T14971] R13: 00007fc6e1826038 R14: 00007fc6e1825fa0 R15: 00007fff780ab3b8 [ 571.592057][T14971] [ 571.595684][ T922] pegasus 6-1:1.0: can't reset MAC [ 571.595999][ T922] pegasus 6-1:1.0: probe with driver pegasus failed with error -5 [ 571.680140][ T922] usb 6-1: USB disconnect, device number 72 [ 571.975162][ T33] audit: type=1800 audit(1794315051.589:1458): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15848 res=0 errno=-22 [ 572.006592][ T5754] usb 10-1: USB disconnect, device number 49 [ 572.887498][ T11] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 572.917411][ T922] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 573.038518][ T11] usb 9-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 573.039770][ T11] usb 9-1: config 1 has too many interfaces: 241, using maximum allowed: 32 [ 573.039789][ T11] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 241 [ 573.039852][ T11] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 573.042521][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.042537][ T11] usb 9-1: Product: syz [ 573.042548][ T11] usb 9-1: Manufacturer: syz [ 573.042559][ T11] usb 9-1: SerialNumber: syz [ 573.046070][ T33] audit: type=1800 audit(1794315052.659:1459): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301673 res=0 errno=-22 [ 573.076323][ T33] audit: type=1800 audit(1794315052.689:1460): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=301705 res=0 errno=-22 [ 573.112922][ T33] audit: type=1800 audit(1794315052.729:1461): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=301680 res=0 errno=-22 [ 573.118519][ T33] audit: type=1800 audit(1794315052.729:1462): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=301681 res=0 errno=-22 [ 573.194852][ T922] usb 10-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 573.207077][ T922] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.207101][ T922] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.229738][ T922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.229760][ T922] usb 10-1: Product: syz [ 573.229776][ T922] usb 10-1: Manufacturer: syz [ 573.229792][ T922] usb 10-1: SerialNumber: syz [ 573.235015][ T922] usb 10-1: config 0 descriptor?? [ 573.236415][ T33] audit: type=1800 audit(1794315052.849:1463): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301741 res=0 errno=-22 [ 573.276333][T15018] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 573.301725][ T33] audit: type=1800 audit(1794315052.919:1464): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=301773 res=0 errno=-22 [ 573.301775][ T33] audit: type=1800 audit(1794315052.919:1465): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=301748 res=0 errno=-22 [ 573.301823][ T33] audit: type=1800 audit(1794315052.919:1466): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=301749 res=0 errno=-22 [ 573.382613][T15029] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 573.401512][ T11] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 573.401537][ T11] cdc_ncm 9-1:1.0: setting rx_max = 16384 [ 573.603162][ T11] cdc_ncm 9-1:1.0: setting tx_max = 16384 [ 573.642188][ T11] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 573.681444][ T11] usb 9-1: USB disconnect, device number 44 [ 573.685824][ T11] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 573.791879][T15042] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 573.791929][T15042] overlayfs: failed to set xattr on upper [ 573.791938][T15042] overlayfs: ...falling back to redirect_dir=nofollow. [ 573.791948][T15042] overlayfs: ...falling back to index=off. [ 573.791957][T15042] overlayfs: ...falling back to uuid=null. [ 573.791966][T15042] overlayfs: ...falling back to xino=off. [ 573.927402][ C0] net_ratelimit: 77 callbacks suppressed [ 574.465678][T15061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input65 [ 574.982086][T15070] FAULT_INJECTION: forcing a failure. [ 574.982086][T15070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.982119][T15070] CPU: 0 UID: 0 PID: 15070 Comm: syz.8.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.982150][T15070] Tainted: [L]=SOFTLOCKUP [ 574.982159][T15070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 574.982172][T15070] Call Trace: [ 574.982181][T15070] [ 574.982191][T15070] dump_stack_lvl+0xe8/0x150 [ 574.982229][T15070] should_fail_ex+0x3eb/0x540 [ 574.982259][T15070] _copy_from_iter+0x1d3/0x1680 [ 574.982294][T15070] ? __might_fault+0xaf/0x130 [ 574.982321][T15070] ? _copy_from_iter+0x21b/0x1680 [ 574.982355][T15070] ? sock_alloc_send_pskb+0xc87/0xd90 [ 574.982397][T15070] ? __pfx__copy_from_iter+0x10/0x10 [ 574.982435][T15070] ? __pfx__copy_from_iter+0x10/0x10 [ 574.982475][T15070] copy_page_from_iter+0x219/0x2d0 [ 574.982514][T15070] skb_copy_datagram_from_iter+0x2f4/0x720 [ 574.982558][T15070] tun_get_user+0x1510/0x4470 [ 574.982608][T15070] ? aa_file_perm+0x18b/0x15f0 [ 574.982643][T15070] ? aa_file_perm+0x4ed/0x15f0 [ 574.982664][T15070] ? __pfx_tun_get_user+0x10/0x10 [ 574.982703][T15070] ? __lock_acquire+0x747/0x2de0 [ 574.982731][T15070] ? kstrtoull+0x137/0x1d0 [ 574.982770][T15070] ? ref_tracker_alloc+0x172/0x530 [ 574.982796][T15070] ? lock_acquire+0x115/0x350 [ 574.982822][T15070] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 574.982850][T15070] ? lock_acquire+0x115/0x350 [ 574.982875][T15070] ? tun_get+0x1c/0x2f0 [ 574.982913][T15070] ? tun_get+0x1c/0x2f0 [ 574.982945][T15070] ? tun_get+0x1c/0x2f0 [ 574.982982][T15070] tun_chr_write_iter+0x113/0x200 [ 574.983018][T15070] vfs_write+0x612/0xba0 [ 574.983055][T15070] ? __pfx_vfs_write+0x10/0x10 [ 574.983087][T15070] ? __fget_files+0x3a2/0x420 [ 574.983114][T15070] ? __fget_files+0x2a/0x420 [ 574.983144][T15070] ? fdget+0x1ac/0x250 [ 574.983177][T15070] ksys_write+0x150/0x270 [ 574.983210][T15070] ? __pfx_ksys_write+0x10/0x10 [ 574.983252][T15070] do_syscall_64+0x16a/0x530 [ 574.983284][T15070] ? trace_irq_disable+0x3b/0x140 [ 574.983312][T15070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.983335][T15070] ? clear_bhb_loop+0x70/0xc0 [ 574.983362][T15070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.983384][T15070] RIP: 0033:0x7fb1d3fa8f19 [ 574.983405][T15070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.983424][T15070] RSP: 002b:00007fb1d4d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.983449][T15070] RAX: ffffffffffffffda RBX: 00007fb1d4225fa0 RCX: 00007fb1d3fa8f19 [ 574.983465][T15070] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000003 [ 574.983479][T15070] RBP: 00007fb1d4d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 574.983494][T15070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 574.983509][T15070] R13: 00007fb1d4226038 R14: 00007fb1d4225fa0 R15: 00007fffffd8ad78 [ 574.983543][T15070] [ 575.258853][ T922] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 575.417318][ T922] usb 6-1: Using ep0 maxpacket: 32 [ 575.418673][ T922] usb 6-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 575.422368][ T922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.422383][ T922] usb 6-1: Product: syz [ 575.422394][ T922] usb 6-1: Manufacturer: syz [ 575.422405][ T922] usb 6-1: SerialNumber: syz [ 575.425301][ T922] usb 6-1: config 0 descriptor?? [ 575.425740][ T33] kauditd_printk_skb: 23 callbacks suppressed [ 575.425756][ T33] audit: type=1800 audit(1794315055.039:1490): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302375 res=0 errno=-22 [ 575.501836][ T33] audit: type=1800 audit(1794315055.119:1491): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=302407 res=0 errno=-22 [ 575.502859][ T33] audit: type=1800 audit(1794315055.119:1492): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=302382 res=0 errno=-22 [ 575.505409][ T33] audit: type=1800 audit(1794315055.119:1493): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=302383 res=0 errno=-22 [ 575.706298][ T5726] usb 10-1: USB disconnect, device number 50 [ 575.772979][T15074] netlink: 'syz.9.2836': attribute type 10 has an invalid length. [ 575.836639][ T922] airspy 6-1:0.0: Board ID: 00 [ 575.836649][ T922] airspy 6-1:0.0: Firmware version: [ 576.026875][T15081] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2839'. [ 576.857580][ T922] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 576.878946][ T922] airspy 6-1:0.0: Registered as swradio24 [ 576.878963][ T922] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 576.880765][ T33] audit: type=1800 audit(1794315056.499:1494): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=302404 res=0 errno=-22 [ 576.882513][ T33] audit: type=1800 audit(1794315056.499:1495): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=302405 res=0 errno=-22 [ 576.882961][ T922] usb 6-1: USB disconnect, device number 73 [ 576.884881][ T33] audit: type=1800 audit(1794315056.499:1496): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=302384 res=0 errno=-22 [ 576.986070][ T33] audit: type=1800 audit(1794315056.599:1497): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=302406 res=0 errno=-22 [ 577.108089][ T5726] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 577.257292][ T5726] usb 10-1: Using ep0 maxpacket: 8 [ 577.258897][ T5726] usb 10-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 577.262269][ T5726] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 577.262454][ T5726] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.262511][ T5726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.262583][ T5726] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.262648][ T5726] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.262821][ T5726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.346878][ T33] audit: type=1800 audit(1794315056.959:1498): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302496 res=0 errno=-22 [ 577.368684][ T33] audit: type=1800 audit(1794315056.989:1499): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=302525 res=0 errno=-22 [ 577.500571][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2846'. [ 577.632592][T15096] trusted_key: encrypted_key: insufficient parameters specified [ 577.649950][T15096] FAULT_INJECTION: forcing a failure. [ 577.649950][T15096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.649990][T15096] CPU: 0 UID: 0 PID: 15096 Comm: syz.8.2845 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.650022][T15096] Tainted: [L]=SOFTLOCKUP [ 577.650032][T15096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 577.650048][T15096] Call Trace: [ 577.650057][T15096] [ 577.650067][T15096] dump_stack_lvl+0xe8/0x150 [ 577.650108][T15096] should_fail_ex+0x3eb/0x540 [ 577.650140][T15096] _copy_from_user+0x2d/0xb0 [ 577.650169][T15096] __se_sys_mbind+0x652/0x10e0 [ 577.650213][T15096] ? __pfx___se_sys_mbind+0x10/0x10 [ 577.650257][T15096] ? __se_sys_futex+0x3a8/0x450 [ 577.650302][T15096] ? rcu_is_watching+0x16/0xb0 [ 577.650342][T15096] ? __x64_sys_mbind+0x21/0xf0 [ 577.650388][T15096] do_syscall_64+0x16a/0x530 [ 577.650420][T15096] ? trace_irq_disable+0x3b/0x140 [ 577.650450][T15096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.650474][T15096] ? clear_bhb_loop+0x70/0xc0 [ 577.650502][T15096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.650526][T15096] RIP: 0033:0x7fb1d3fa8f19 [ 577.650546][T15096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.650567][T15096] RSP: 002b:00007fb1d4d9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 577.650592][T15096] RAX: ffffffffffffffda RBX: 00007fb1d4225fa0 RCX: 00007fb1d3fa8f19 [ 577.650610][T15096] RDX: 0000000000008003 RSI: 0000000000600000 RDI: 0000200000000000 [ 577.650625][T15096] RBP: 00007fb1d4037f6d R08: 0000000000000008 R09: 0000000000000002 [ 577.650640][T15096] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 577.650656][T15096] R13: 00007fb1d4226038 R14: 00007fb1d4225fa0 R15: 00007fffffd8ad78 [ 577.650693][T15096] [ 577.919308][T15104] FAULT_INJECTION: forcing a failure. [ 577.919308][T15104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.919374][T15104] CPU: 0 UID: 0 PID: 15104 Comm: syz.5.2848 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.919405][T15104] Tainted: [L]=SOFTLOCKUP [ 577.919413][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 577.919428][T15104] Call Trace: [ 577.919438][T15104] [ 577.919447][T15104] dump_stack_lvl+0xe8/0x150 [ 577.919486][T15104] should_fail_ex+0x3eb/0x540 [ 577.919516][T15104] _copy_from_iter+0x1d3/0x1680 [ 577.919551][T15104] ? sctp_chunkify+0x5a/0x260 [ 577.919589][T15104] ? sctp_addto_chunk+0xf8/0x220 [ 577.919621][T15104] ? __asan_memcpy+0x40/0x70 [ 577.919649][T15104] ? __pfx__copy_from_iter+0x10/0x10 [ 577.919685][T15104] ? __asan_memcpy+0x40/0x70 [ 577.919713][T15104] ? sctp_make_datafrag_empty+0x184/0x240 [ 577.919746][T15104] ? __kasan_kmalloc+0x93/0xb0 [ 577.919778][T15104] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 577.919811][T15104] ? skb_put+0x112/0x210 [ 577.919840][T15104] sctp_user_addto_chunk+0x7c/0x230 [ 577.919880][T15104] sctp_datamsg_from_user+0x754/0xef0 [ 577.919920][T15104] ? sctp_datamsg_put+0x4c4/0x520 [ 577.919965][T15104] sctp_sendmsg_to_asoc+0x106b/0x1a40 [ 577.919989][T15104] ? __asan_memcpy+0x40/0x70 [ 577.920024][T15104] ? __pfx_sctp_transport_hold+0x10/0x10 [ 577.920050][T15104] ? sctp_assoc_add_peer+0xd57/0x1430 [ 577.920083][T15104] ? sctp_transport_put+0xd2/0x150 [ 577.920116][T15104] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 577.920145][T15104] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 577.920169][T15104] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 577.920192][T15104] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 577.920214][T15104] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 577.920244][T15104] sctp_sendmsg+0x1bb5/0x2d00 [ 577.920283][T15104] ? __pfx_sctp_sendmsg+0x10/0x10 [ 577.920313][T15104] ? __lock_acquire+0x747/0x2de0 [ 577.920361][T15104] ? aa_sock_msg_perm+0xfc/0x210 [ 577.920396][T15104] ? sock_rps_record_flow+0x19/0x350 [ 577.920427][T15104] ? inet_sendmsg+0x298/0x320 [ 577.920453][T15104] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.920488][T15104] ? __pfx_inet_sendmsg+0x10/0x10 [ 577.920515][T15104] sock_sendmsg_nosec+0x10f/0x190 [ 577.920553][T15104] ____sys_sendmsg+0x54e/0x850 [ 577.920587][T15104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.920626][T15104] ? import_iovec+0x73/0xa0 [ 577.920655][T15104] ___sys_sendmsg+0x2a6/0x360 [ 577.920681][T15104] ? __lock_acquire+0x747/0x2de0 [ 577.920713][T15104] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.920745][T15104] ? futex_wait+0x2a2/0x390 [ 577.920804][T15104] ? __fget_files+0x3a2/0x420 [ 577.920831][T15104] ? __fget_files+0x2a/0x420 [ 577.920870][T15104] __x64_sys_sendmsg+0x1b1/0x290 [ 577.920901][T15104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.920953][T15104] do_syscall_64+0x16a/0x530 [ 577.920984][T15104] ? trace_irq_disable+0x3b/0x140 [ 577.921014][T15104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.921038][T15104] ? clear_bhb_loop+0x70/0xc0 [ 577.921066][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.921089][T15104] RIP: 0033:0x7fc6e15a8f19 [ 577.921111][T15104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.921132][T15104] RSP: 002b:00007fc6e23e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.921157][T15104] RAX: ffffffffffffffda RBX: 00007fc6e1826090 RCX: 00007fc6e15a8f19 [ 577.921174][T15104] RDX: 0000000000008040 RSI: 0000200000000080 RDI: 0000000000000003 [ 577.921190][T15104] RBP: 00007fc6e1637f6d R08: 0000000000000000 R09: 0000000000000000 [ 577.921206][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.921220][T15104] R13: 00007fc6e1826128 R14: 00007fc6e1826090 R15: 00007fff780ab3b8 [ 577.921257][T15104] [ 578.325175][T15108] usbtmc 10-1:16.0: simple usb_control_msg returned 0 [ 578.544974][ T5726] usb 10-1: USB disconnect, device number 51 [ 579.048455][ T324] net_ratelimit: 92 callbacks suppressed [ 579.108013][ T5726] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 579.208249][ T11] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 579.258148][ T5726] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 579.258176][ T5726] usb 9-1: too many configurations: 87, using maximum allowed: 8 [ 579.275108][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.275157][ T5726] usb 9-1: Product: syz [ 579.275193][ T5726] usb 9-1: Manufacturer: syz [ 579.275230][ T5726] usb 9-1: SerialNumber: syz [ 579.389907][ T11] usb 6-1: unable to get BOS descriptor or descriptor too short [ 579.390525][ T11] usb 6-1: not running at top speed; connect to a high speed hub [ 579.390556][ T11] usb 6-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=7c.26 [ 579.391956][ T11] usb 6-1: config 254 has an invalid interface number: 83 but max is 0 [ 579.391980][ T11] usb 6-1: config 254 has no interface number 0 [ 579.392021][ T11] usb 6-1: config 254 interface 83 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 579.392091][ T11] usb 6-1: config 254 interface 83 has no altsetting 0 [ 579.395136][ T11] usb 6-1: Dual-Role OTG device on HNP port [ 579.395528][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.395555][ T11] usb 6-1: Product: syz [ 579.395567][ T11] usb 6-1: Manufacturer: syz [ 579.395578][ T11] usb 6-1: SerialNumber: syz [ 579.655789][T15119] FAULT_INJECTION: forcing a failure. [ 579.655789][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 579.655819][T15119] CPU: 1 UID: 0 PID: 15119 Comm: syz.5.2852 Tainted: G L syzkaller #0 PREEMPT(full) [ 579.655854][T15119] Tainted: [L]=SOFTLOCKUP [ 579.655860][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 579.655871][T15119] Call Trace: [ 579.655877][T15119] [ 579.655884][T15119] dump_stack_lvl+0xe8/0x150 [ 579.655936][T15119] should_fail_ex+0x3eb/0x540 [ 579.655967][T15119] should_failslab+0xa8/0x100 [ 579.656007][T15119] ? ceph_msg_new2+0x3b/0x4d0 [ 579.656035][T15119] kmem_cache_alloc_noprof+0x9c/0x600 [ 579.656055][T15119] ? ceph_msg_new2+0x3b/0x4d0 [ 579.656105][T15119] ? mutex_init_lockdep+0xdf/0x110 [ 579.656140][T15119] ceph_msg_new2+0x3b/0x4d0 [ 579.656181][T15119] ceph_monc_init+0x57d/0xae0 [ 579.656224][T15119] ceph_create_client+0x225/0x310 [ 579.656279][T15119] ceph_get_tree+0x1ca/0x1a90 [ 579.656311][T15119] ? apparmor_capable+0x126/0x170 [ 579.656349][T15119] vfs_get_tree+0x92/0x2a0 [ 579.656376][T15119] vfs_cmd_create+0xa2/0x200 [ 579.656396][T15119] __se_sys_fsconfig+0x6b9/0x810 [ 579.656441][T15119] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 579.656477][T15119] ? __x64_sys_fsconfig+0x20/0xc0 [ 579.656507][T15119] do_syscall_64+0x16a/0x530 [ 579.656530][T15119] ? trace_irq_disable+0x3b/0x140 [ 579.656552][T15119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.656590][T15119] ? clear_bhb_loop+0x70/0xc0 [ 579.656619][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.656641][T15119] RIP: 0033:0x7fc6e15a8f19 [ 579.656667][T15119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.656682][T15119] RSP: 002b:00007fc6e2409028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 579.656699][T15119] RAX: ffffffffffffffda RBX: 00007fc6e1825fa0 RCX: 00007fc6e15a8f19 [ 579.656713][T15119] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 579.656741][T15119] RBP: 00007fc6e1637f6d R08: 0004000000000000 R09: 0000000000000000 [ 579.656758][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.656771][T15119] R13: 00007fc6e1826038 R14: 00007fc6e1825fa0 R15: 00007fff780ab3b8 [ 579.656806][T15119] [ 579.734632][ T5726] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 579.734692][ T5726] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 579.929216][ T11] usb_ehset_test 6-1:254.83: probe with driver usb_ehset_test failed with error -32 [ 579.945995][ T11] usb 6-1: USB disconnect, device number 74 [ 580.192683][T15117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.196778][T15117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.232972][T15117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.233866][T15117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.294285][T15136] netlink: 'syz.0.2859': attribute type 10 has an invalid length. [ 580.294307][T15136] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2859'. [ 580.500578][T15136] bond0: (slave macvlan1): Releasing backup interface [ 580.517847][ T922] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 580.667449][ T922] usb 10-1: Using ep0 maxpacket: 16 [ 580.672658][ T922] usb 10-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 580.692322][ T922] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 580.692378][ T922] usb 10-1: config 0 has no interface number 0 [ 580.692424][ T922] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 580.692453][ T922] usb 10-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 19280, setting to 1024 [ 580.692483][ T922] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 580.753392][ T922] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.753434][ T922] usb 10-1: Product: syz [ 580.753449][ T922] usb 10-1: Manufacturer: syz [ 580.753494][ T922] usb 10-1: SerialNumber: syz [ 580.784863][ T922] usb 10-1: config 0 descriptor?? [ 580.785629][T15134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 580.785776][T15134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 580.809704][ T33] kauditd_printk_skb: 17 callbacks suppressed [ 580.809719][ T33] audit: type=1800 audit(1794315060.429:1517): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302952 res=0 errno=-22 [ 580.847084][ T33] audit: type=1800 audit(1794315060.459:1518): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=302984 res=0 errno=-22 [ 580.873035][ T33] audit: type=1800 audit(1794315060.489:1519): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=302959 res=0 errno=-22 [ 580.900390][ T33] audit: type=1800 audit(1794315060.519:1520): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=302960 res=0 errno=-22 [ 580.995022][T15134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 580.995173][T15134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 581.207216][ T922] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 581.207991][ T922] asix 10-1:0.34: probe with driver asix failed with error -61 [ 581.233449][ T33] audit: type=1800 audit(1794315060.849:1521): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=302981 res=0 errno=-22 [ 581.234561][ T33] audit: type=1800 audit(1794315060.849:1522): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=302982 res=0 errno=-22 [ 581.235792][ T33] audit: type=1800 audit(1794315060.849:1523): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=302961 res=0 errno=-22 [ 581.236702][ T33] audit: type=1800 audit(1794315060.849:1524): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=302983 res=0 errno=-22 [ 581.331511][ T33] audit: type=1800 audit(1794315060.949:1525): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303004 res=0 errno=-22 [ 581.510154][ T33] audit: type=1800 audit(1794315061.129:1526): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2861" name="file2" dev="tmpfs" ino=2825 res=0 errno=-22 [ 581.541013][ T5726] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 581.542077][ T5726] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 581.581548][ T5726] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 581.625053][ T5726] usb 9-1: USB disconnect, device number 45 [ 582.267335][ T5754] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 582.327738][ T1971] block nbd0: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 240 seconds [ 582.327779][ T1971] block nbd0: Possible stuck request ffff888027f301c0: control (read@1024,3072B). Runtime 240 seconds [ 582.377309][ T5726] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 582.428407][ T5754] usb 6-1: New USB device found: idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 582.429862][ T5754] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 582.432369][ T5754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.432385][ T5754] usb 6-1: Product: syz [ 582.432396][ T5754] usb 6-1: Manufacturer: syz [ 582.432407][ T5754] usb 6-1: SerialNumber: syz [ 582.484129][ T5754] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 582.530659][ T5726] usb 9-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 582.532181][ T5726] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 582.534605][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.534620][ T5726] usb 9-1: Product: syz [ 582.534631][ T5726] usb 9-1: Manufacturer: syz [ 582.534643][ T5726] usb 9-1: SerialNumber: syz [ 582.545475][ T5726] usb 9-1: config 0 descriptor?? [ 582.855397][ T5754] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 582.891817][ T5754] usb 6-1: USB disconnect, device number 75 [ 583.245889][T10868] usb 10-1: USB disconnect, device number 52 [ 583.611017][T10868] usb 10-1: new full-speed USB device number 53 using dummy_hcd [ 583.697374][ T922] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 583.760354][T10868] usb 10-1: unable to get BOS descriptor or descriptor too short [ 583.760936][T10868] usb 10-1: not running at top speed; connect to a high speed hub [ 583.760969][T10868] usb 10-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=7c.26 [ 583.762190][T10868] usb 10-1: config 254 has an invalid interface number: 83 but max is 0 [ 583.762214][T10868] usb 10-1: config 254 has no interface number 0 [ 583.762253][T10868] usb 10-1: config 254 interface 83 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 583.762338][T10868] usb 10-1: config 254 interface 83 has no altsetting 0 [ 583.764811][T10868] usb 10-1: Dual-Role OTG device on HNP port [ 583.765150][T10868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.765165][T10868] usb 10-1: Product: syz [ 583.765176][T10868] usb 10-1: Manufacturer: syz [ 583.765187][T10868] usb 10-1: SerialNumber: syz [ 583.827776][ T922] usb 6-1: device descriptor read/64, error -71 [ 583.989602][T15163] FAULT_INJECTION: forcing a failure. [ 583.989602][T15163] name failslab, interval 1, probability 0, space 0, times 0 [ 583.989623][T15163] CPU: 1 UID: 0 PID: 15163 Comm: syz.9.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.989644][T15163] Tainted: [L]=SOFTLOCKUP [ 583.989650][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 583.989661][T15163] Call Trace: [ 583.989667][T15163] [ 583.989674][T15163] dump_stack_lvl+0xe8/0x150 [ 583.989708][T15163] should_fail_ex+0x3eb/0x540 [ 583.989729][T15163] should_failslab+0xa8/0x100 [ 583.989756][T15163] ? ceph_msg_new2+0x3b/0x4d0 [ 583.989782][T15163] kmem_cache_alloc_noprof+0x9c/0x600 [ 583.989803][T15163] ? ceph_msg_new2+0x3b/0x4d0 [ 583.989829][T15163] ? mutex_init_lockdep+0xdf/0x110 [ 583.989854][T15163] ceph_msg_new2+0x3b/0x4d0 [ 583.989883][T15163] ceph_monc_init+0x57d/0xae0 [ 583.989909][T15163] ceph_create_client+0x225/0x310 [ 583.989933][T15163] ceph_get_tree+0x1ca/0x1a90 [ 583.989956][T15163] ? apparmor_capable+0x126/0x170 [ 583.990006][T15163] vfs_get_tree+0x92/0x2a0 [ 583.990044][T15163] vfs_cmd_create+0xa2/0x200 [ 583.990078][T15163] __se_sys_fsconfig+0x6b9/0x810 [ 583.990101][T15163] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 583.990127][T15163] ? __x64_sys_fsconfig+0x20/0xc0 [ 583.990145][T15163] do_syscall_64+0x16a/0x530 [ 583.990168][T15163] ? trace_irq_disable+0x3b/0x140 [ 583.990190][T15163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.990206][T15163] ? clear_bhb_loop+0x70/0xc0 [ 583.990226][T15163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.990243][T15163] RIP: 0033:0x7fe3051a8f19 [ 583.990258][T15163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.990272][T15163] RSP: 002b:00007fe3033ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 583.990290][T15163] RAX: ffffffffffffffda RBX: 00007fe305425fa0 RCX: 00007fe3051a8f19 [ 583.990303][T15163] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 583.990312][T15163] RBP: 00007fe305237f6d R08: 0004000000000000 R09: 0000000000000000 [ 583.990323][T15163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.990333][T15163] R13: 00007fe305426038 R14: 00007fe305425fa0 R15: 00007ffe233237e8 [ 583.990358][T15163] [ 584.024390][T10868] usb_ehset_test 10-1:254.83: probe with driver usb_ehset_test failed with error -32 [ 584.079852][ T922] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 584.089337][ C0] net_ratelimit: 58 callbacks suppressed [ 584.111535][T10868] usb 10-1: USB disconnect, device number 53 [ 584.217052][T11693] udevd[11693]: setting owner of /dev/bus/usb/010/053 to uid=0, gid=0 failed: No such file or directory [ 584.231837][ T922] usb 6-1: device descriptor read/64, error -71 [ 584.337764][ T922] usb usb6-port1: attempt power cycle [ 584.679054][ T922] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 584.700313][ T922] usb 6-1: device descriptor read/8, error -71 [ 584.937610][ T922] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 584.961581][ T922] usb 6-1: device descriptor read/8, error -71 [ 585.067790][ T922] usb usb6-port1: unable to enumerate USB device [ 585.069851][T15174] kvm: pic: non byte write [ 585.075070][T15174] x_tables: duplicate underflow at hook 2 [ 585.098777][T15177] netlink: 'syz.0.2873': attribute type 10 has an invalid length. [ 585.177422][ T922] usb 9-1: USB disconnect, device number 46 [ 585.295797][T15183] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2876'. [ 585.424008][T15179] FAULT_INJECTION: forcing a failure. [ 585.424008][T15179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.424033][T15179] CPU: 0 UID: 0 PID: 15179 Comm: syz.0.2874 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.424054][T15179] Tainted: [L]=SOFTLOCKUP [ 585.424061][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 585.424071][T15179] Call Trace: [ 585.424077][T15179] [ 585.424085][T15179] dump_stack_lvl+0xe8/0x150 [ 585.424114][T15179] should_fail_ex+0x3eb/0x540 [ 585.424135][T15179] _copy_from_iter+0x1d3/0x1680 [ 585.424162][T15179] ? __might_fault+0xaf/0x130 [ 585.424182][T15179] ? _copy_from_iter+0x21b/0x1680 [ 585.424207][T15179] ? sock_alloc_send_pskb+0xc87/0xd90 [ 585.424231][T15179] ? __pfx__copy_from_iter+0x10/0x10 [ 585.424261][T15179] ? __pfx__copy_from_iter+0x10/0x10 [ 585.424292][T15179] copy_page_from_iter+0x219/0x2d0 [ 585.424321][T15179] skb_copy_datagram_from_iter+0x2f4/0x720 [ 585.424354][T15179] tun_get_user+0x1510/0x4470 [ 585.424391][T15179] ? aa_file_perm+0x18b/0x15f0 [ 585.424411][T15179] ? aa_file_perm+0x4ed/0x15f0 [ 585.424427][T15179] ? __pfx_tun_get_user+0x10/0x10 [ 585.424454][T15179] ? __lock_acquire+0x747/0x2de0 [ 585.424475][T15179] ? kstrtoull+0x137/0x1d0 [ 585.424504][T15179] ? ref_tracker_alloc+0x172/0x530 [ 585.424522][T15179] ? lock_acquire+0x115/0x350 [ 585.424541][T15179] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 585.424562][T15179] ? lock_acquire+0x115/0x350 [ 585.424581][T15179] ? tun_get+0x1c/0x2f0 [ 585.424609][T15179] ? tun_get+0x1c/0x2f0 [ 585.424633][T15179] ? tun_get+0x1c/0x2f0 [ 585.424661][T15179] tun_chr_write_iter+0x113/0x200 [ 585.424688][T15179] vfs_write+0x612/0xba0 [ 585.424716][T15179] ? __pfx_vfs_write+0x10/0x10 [ 585.424741][T15179] ? __fget_files+0x3a2/0x420 [ 585.424761][T15179] ? __fget_files+0x2a/0x420 [ 585.424783][T15179] ? fdget+0x1ac/0x250 [ 585.424812][T15179] ksys_write+0x150/0x270 [ 585.424836][T15179] ? __pfx_ksys_write+0x10/0x10 [ 585.424867][T15179] do_syscall_64+0x16a/0x530 [ 585.424895][T15179] ? trace_irq_disable+0x3b/0x140 [ 585.424917][T15179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.424933][T15179] ? clear_bhb_loop+0x70/0xc0 [ 585.424953][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.424970][T15179] RIP: 0033:0x7f6c045a8f19 [ 585.424985][T15179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.424999][T15179] RSP: 002b:00007f6c05470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 585.425016][T15179] RAX: ffffffffffffffda RBX: 00007f6c04825fa0 RCX: 00007f6c045a8f19 [ 585.425028][T15179] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000003 [ 585.425038][T15179] RBP: 00007f6c05470090 R08: 0000000000000000 R09: 0000000000000000 [ 585.425048][T15179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.425058][T15179] R13: 00007f6c04826038 R14: 00007f6c04825fa0 R15: 00007ffe7bb25348 [ 585.425082][T15179] [ 585.687644][ T11] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 585.840858][ T11] usb 10-1: unable to get BOS descriptor or descriptor too short [ 585.841436][ T11] usb 10-1: not running at top speed; connect to a high speed hub [ 585.841473][ T11] usb 10-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=7c.26 [ 585.842626][ T11] usb 10-1: config 254 has an invalid interface number: 83 but max is 0 [ 585.842644][ T11] usb 10-1: config 254 has no interface number 0 [ 585.842674][ T11] usb 10-1: config 254 interface 83 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 585.842709][ T11] usb 10-1: config 254 interface 83 has no altsetting 0 [ 585.845133][ T11] usb 10-1: Dual-Role OTG device on HNP port [ 585.845429][ T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.845444][ T11] usb 10-1: Product: syz [ 585.845463][ T11] usb 10-1: Manufacturer: syz [ 585.845474][ T11] usb 10-1: SerialNumber: syz [ 585.874211][ T33] kauditd_printk_skb: 31 callbacks suppressed [ 585.874229][ T33] audit: type=1800 audit(1794315065.479:1558): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303810 res=0 errno=-22 [ 585.890436][ T33] audit: type=1800 audit(1794315065.499:1559): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=303842 res=0 errno=-22 [ 585.902145][ T33] audit: type=1800 audit(1794315065.509:1560): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=303817 res=0 errno=-22 [ 585.902198][ T33] audit: type=1800 audit(1794315065.509:1561): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=303818 res=0 errno=-22 [ 586.079124][T15191] FAULT_INJECTION: forcing a failure. [ 586.079124][T15191] name failslab, interval 1, probability 0, space 0, times 0 [ 586.079157][T15191] CPU: 1 UID: 0 PID: 15191 Comm: syz.8.2880 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.079189][T15191] Tainted: [L]=SOFTLOCKUP [ 586.079199][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 586.079214][T15191] Call Trace: [ 586.079224][T15191] [ 586.079235][T15191] dump_stack_lvl+0xe8/0x150 [ 586.079276][T15191] should_fail_ex+0x3eb/0x540 [ 586.079309][T15191] should_failslab+0xa8/0x100 [ 586.079345][T15191] ? skb_clone+0x212/0x3a0 [ 586.079375][T15191] kmem_cache_alloc_noprof+0x9c/0x600 [ 586.079407][T15191] ? skb_clone+0x212/0x3a0 [ 586.079444][T15191] skb_clone+0x212/0x3a0 [ 586.079473][T15191] ? __tcp_transmit_skb+0x295/0x47b0 [ 586.079506][T15191] __tcp_transmit_skb+0x372/0x47b0 [ 586.079534][T15191] ? __alloc_skb+0x27a/0x7a0 [ 586.079563][T15191] ? skb_copy_bits+0x100/0x8e0 [ 586.079591][T15191] ? __asan_memcpy+0x40/0x70 [ 586.079621][T15191] ? __copy_skb_header+0xa3/0x4a0 [ 586.079652][T15191] ? __asan_memcpy+0x40/0x70 [ 586.079683][T15191] ? skb_release_data+0x307/0xa30 [ 586.079716][T15191] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 586.079754][T15191] ? tcp_send_synack+0x545/0xe80 [ 586.079795][T15191] tcp_rcv_state_process+0x1773/0x48d0 [ 586.079841][T15191] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 586.079871][T15191] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 586.079925][T15191] tcp_v4_do_rcv+0x9fd/0x13b0 [ 586.079972][T15191] ? __local_bh_enable_ip+0xd6/0x140 [ 586.080009][T15191] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 586.080047][T15191] __release_sock+0x256/0x390 [ 586.080091][T15191] release_sock+0x190/0x260 [ 586.080119][T15191] __inet_stream_connect+0x8e7/0xf50 [ 586.080165][T15191] ? __pfx___inet_stream_connect+0x10/0x10 [ 586.080196][T15191] ? __pfx_woken_wake_function+0x10/0x10 [ 586.080234][T15191] ? __kmalloc_cache_noprof+0x31c/0x600 [ 586.080264][T15191] ? __kmalloc_cache_noprof+0x148/0x600 [ 586.080292][T15191] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 586.080334][T15191] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 586.080374][T15191] tcp_sendmsg_locked+0x4d2b/0x53c0 [ 586.080408][T15191] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 586.080467][T15191] ? __lock_acquire+0x747/0x2de0 [ 586.080500][T15191] ? __lock_acquire+0x747/0x2de0 [ 586.080534][T15191] ? __pfx_futex_wake_mark+0x10/0x10 [ 586.080576][T15191] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 586.080618][T15191] ? tcp_sendmsg+0x21/0x50 [ 586.080653][T15191] ? __local_bh_enable_ip+0xd6/0x140 [ 586.080688][T15191] tcp_sendmsg+0x2f/0x50 [ 586.080721][T15191] ? __pfx_inet_sendmsg+0x10/0x10 [ 586.080748][T15191] sock_sendmsg_nosec+0x10f/0x190 [ 586.080786][T15191] __sys_sendto+0x408/0x5a0 [ 586.080819][T15191] ? __pfx___sys_sendto+0x10/0x10 [ 586.080875][T15191] ? rcu_is_watching+0x16/0xb0 [ 586.080915][T15191] __x64_sys_sendto+0xde/0x100 [ 586.080954][T15191] do_syscall_64+0x16a/0x530 [ 586.080989][T15191] ? trace_irq_disable+0x3b/0x140 [ 586.081021][T15191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.081046][T15191] ? clear_bhb_loop+0x70/0xc0 [ 586.081075][T15191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.081100][T15191] RIP: 0033:0x7fb1d3fa8f19 [ 586.081123][T15191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.081145][T15191] RSP: 002b:00007fb1d4d9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 586.081171][T15191] RAX: ffffffffffffffda RBX: 00007fb1d4225fa0 RCX: 00007fb1d3fa8f19 [ 586.081190][T15191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 586.081205][T15191] RBP: 00007fb1d4037f6d R08: 00002000000000c0 R09: 0000000000000010 [ 586.081221][T15191] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000000 [ 586.081237][T15191] R13: 00007fb1d4226038 R14: 00007fb1d4225fa0 R15: 00007fffffd8ad78 [ 586.081276][T15191] [ 586.152185][ T33] audit: type=1800 audit(1794315065.749:1562): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303862 res=0 errno=-22 [ 586.352053][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 586.371031][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 586.701815][T10866] libceph: connect (1)[c::]:6789 error -101 [ 586.702092][T10866] libceph: mon0 (1)[c::]:6789 connect error [ 586.957997][ T5726] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 587.023598][T15205] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2884'. [ 587.119223][ T5726] usb 6-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 587.122519][ T5726] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.126371][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.126395][ T5726] usb 6-1: Product: syz [ 587.126412][ T5726] usb 6-1: Manufacturer: syz [ 587.126429][ T5726] usb 6-1: SerialNumber: syz [ 587.172596][ T33] audit: type=1800 audit(1794315066.789:1563): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303897 res=0 errno=-22 [ 587.173408][ T5726] usb 6-1: config 0 descriptor?? [ 587.209573][ T33] audit: type=1800 audit(1794315066.829:1564): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=303929 res=0 errno=-22 [ 587.210994][ T33] audit: type=1800 audit(1794315066.829:1565): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=303904 res=0 errno=-22 [ 587.212194][ T33] audit: type=1800 audit(1794315066.829:1566): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=303905 res=0 errno=-22 [ 587.212556][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 587.212825][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 587.213328][ T33] audit: type=1800 audit(1794315066.829:1567): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=303926 res=0 errno=-22 [ 587.334436][T15209] program syz.8.2886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.088293][T10866] libceph: connect (1)[c::]:6789 error -101 [ 588.088568][T10866] libceph: mon0 (1)[c::]:6789 connect error [ 588.383338][T15187] ceph: No mds server is up or the cluster is laggy [ 588.565883][ T11] usb_ehset_test 10-1:254.83: probe with driver usb_ehset_test failed with error -32 [ 588.611842][ T11] usb 10-1: USB disconnect, device number 54 [ 589.197632][ T5726] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 589.348897][ T5726] usb 9-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00 [ 589.351964][ T5726] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.352096][ T5726] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 589.368171][ C1] net_ratelimit: 151 callbacks suppressed [ 589.404054][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.404070][ T5726] usb 9-1: Product: syz [ 589.404081][ T5726] usb 9-1: Manufacturer: syz [ 589.404092][ T5726] usb 9-1: SerialNumber: syz [ 589.450449][ T5726] sisusb 9-1:1.0: Invalid USB2VGA device [ 589.450471][ T5726] sisusb 9-1:1.0: probe with driver sisusb failed with error -22 [ 589.566784][T15241] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2898'. [ 589.579193][T15242] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2898'. [ 589.736744][ T5726] usb 6-1: USB disconnect, device number 80 [ 589.887292][ T11] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 589.945475][T15248] < [ 590.052035][ T11] usb 10-1: unable to get BOS descriptor or descriptor too short [ 590.052632][ T11] usb 10-1: not running at top speed; connect to a high speed hub [ 590.052663][ T11] usb 10-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=7c.26 [ 590.053904][ T11] usb 10-1: config 254 has an invalid interface number: 83 but max is 0 [ 590.053928][ T11] usb 10-1: config 254 has no interface number 0 [ 590.053972][ T11] usb 10-1: config 254 interface 83 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 590.054023][ T11] usb 10-1: config 254 interface 83 has no altsetting 0 [ 590.074053][ T11] usb 10-1: Dual-Role OTG device on HNP port [ 590.094212][ T11] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.094235][ T11] usb 10-1: Product: syz [ 590.094251][ T11] usb 10-1: Manufacturer: syz [ 590.094268][ T11] usb 10-1: SerialNumber: syz [ 590.373857][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 590.374141][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 590.397377][ T5726] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 590.547342][ T5726] usb 6-1: Using ep0 maxpacket: 32 [ 590.549559][ T5726] usb 6-1: New USB device found: idVendor=09e1, idProduct=5121, bcdDevice=3e.64 [ 590.550994][ T5726] usb 6-1: config 4 has an invalid interface number: 40 but max is 0 [ 590.551011][ T5726] usb 6-1: config 4 has no interface number 0 [ 590.551064][ T5726] usb 6-1: config 4 interface 40 has no altsetting 0 [ 590.553706][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.553722][ T5726] usb 6-1: Product: syz [ 590.553733][ T5726] usb 6-1: Manufacturer: syz [ 590.553744][ T5726] usb 6-1: SerialNumber: syz [ 590.629195][T10874] libceph: connect (1)[c::]:6789 error -101 [ 590.629443][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 590.773848][ T5726] int51x1 6-1:4.40: probe with driver int51x1 failed with error -71 [ 590.804869][ T5726] usb 6-1: USB disconnect, device number 81 [ 591.148182][T10874] libceph: connect (1)[c::]:6789 error -101 [ 591.148358][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 591.197740][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.198722][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.199938][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.200749][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.201877][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.205748][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.206845][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.230642][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.251746][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.260542][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.620956][ T5726] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 591.770116][ T5726] usb 6-1: unable to get BOS descriptor or descriptor too short [ 591.770166][ T5726] usb 6-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 591.771360][ T5726] usb 6-1: config 8 has an invalid interface number: 109 but max is 0 [ 591.771385][ T5726] usb 6-1: config 8 has no interface number 0 [ 591.771454][ T5726] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 591.771486][ T5726] usb 6-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 591.771515][ T5726] usb 6-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 591.775365][ T5726] usb 6-1: string descriptor 0 read error: -22 [ 591.775516][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.828251][ T33] kauditd_printk_skb: 29 callbacks suppressed [ 591.828301][ T33] audit: type=1800 audit(1794315071.439:1597): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=304521 res=0 errno=-22 [ 591.853451][T15267] raw-gadget.8 gadget.5: fail, usb_ep_enable returned -22 [ 591.896433][ T5726] metro_usb 6-1:8.109: Metrologic USB to Serial converter detected [ 591.909925][ T33] audit: type=1800 audit(1794315071.529:1598): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=304550 res=0 errno=-22 [ 591.909975][ T33] audit: type=1800 audit(1794315071.529:1599): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=304528 res=0 errno=-22 [ 591.914840][ T33] audit: type=1800 audit(1794315071.529:1600): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=304529 res=0 errno=-22 [ 591.958184][ T33] audit: type=1800 audit(1794315071.549:1601): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=304530 res=0 errno=-22 [ 592.002305][ T5726] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 592.016811][ T33] audit: type=1800 audit(1794315071.629:1602): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=304570 res=0 errno=-22 [ 592.047520][ T33] audit: type=1800 audit(1794315071.659:1603): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=304586 res=0 errno=-22 [ 592.056745][ T33] audit: type=1800 audit(1794315071.669:1604): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=304600 res=0 errno=-22 [ 592.099643][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 592.099908][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 592.129872][ T33] audit: type=1800 audit(1794315071.749:1605): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=304571 res=0 errno=-22 [ 592.131719][ T33] audit: type=1800 audit(1794315071.749:1606): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=304574 res=0 errno=-22 [ 592.183951][ T5754] usb 9-1: USB disconnect, device number 47 [ 592.631343][T15244] ceph: No mds server is up or the cluster is laggy [ 592.722594][ T11] usb_ehset_test 10-1:254.83: probe with driver usb_ehset_test failed with error -32 [ 592.745737][ T11] usb 10-1: USB disconnect, device number 55 [ 592.758729][ T5726] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 592.838863][T15275] FAULT_INJECTION: forcing a failure. [ 592.838863][T15275] name failslab, interval 1, probability 0, space 0, times 0 [ 592.838900][T15275] CPU: 0 UID: 0 PID: 15275 Comm: syz.9.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.838930][T15275] Tainted: [L]=SOFTLOCKUP [ 592.838939][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 592.838959][T15275] Call Trace: [ 592.838966][T15275] [ 592.838992][T15275] dump_stack_lvl+0xe8/0x150 [ 592.839034][T15275] should_fail_ex+0x3eb/0x540 [ 592.839066][T15275] should_failslab+0xa8/0x100 [ 592.839103][T15275] __kmalloc_noprof+0xf9/0x710 [ 592.839133][T15275] ? __kmalloc_cache_noprof+0x148/0x600 [ 592.839151][T15275] ? alloc_pipe_info+0x1f4/0x4c0 [ 592.839175][T15275] ? alloc_pipe_info+0x1f4/0x4c0 [ 592.839203][T15275] alloc_pipe_info+0x1f4/0x4c0 [ 592.839230][T15275] create_pipe_files+0x87/0x7a0 [ 592.839258][T15275] __do_pipe_flags+0x46/0x1f0 [ 592.839284][T15275] do_pipe2+0xaa/0x190 [ 592.839301][T15275] ? __pfx_do_pipe2+0x10/0x10 [ 592.839317][T15275] ? __pfx___se_sys_futex+0x10/0x10 [ 592.839357][T15275] __x64_sys_pipe2+0x5a/0x70 [ 592.839384][T15275] do_syscall_64+0x16a/0x530 [ 592.839408][T15275] ? trace_irq_disable+0x3b/0x140 [ 592.839429][T15275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.839447][T15275] ? clear_bhb_loop+0x70/0xc0 [ 592.839468][T15275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.839485][T15275] RIP: 0033:0x7fe3051a8f19 [ 592.839501][T15275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.839514][T15275] RSP: 002b:00007fe3033ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 592.839532][T15275] RAX: ffffffffffffffda RBX: 00007fe305425fa0 RCX: 00007fe3051a8f19 [ 592.839544][T15275] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00002000000002c0 [ 592.839555][T15275] RBP: 00007fe305237f6d R08: 0000000000000000 R09: 0000000000000000 [ 592.839565][T15275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.839575][T15275] R13: 00007fe305426038 R14: 00007fe305425fa0 R15: 00007ffe233237e8 [ 592.839599][T15275] [ 592.921497][ T5726] usb 9-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 593.002379][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.002401][ T5726] usb 9-1: Product: syz [ 593.002417][ T5726] usb 9-1: Manufacturer: syz [ 593.002433][ T5726] usb 9-1: SerialNumber: syz [ 593.071114][T15277] FAULT_INJECTION: forcing a failure. [ 593.071114][T15277] name failslab, interval 1, probability 0, space 0, times 0 [ 593.071261][T15277] CPU: 0 UID: 0 PID: 15277 Comm: syz.9.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.071344][T15277] Tainted: [L]=SOFTLOCKUP [ 593.071366][T15277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 593.071406][T15277] Call Trace: [ 593.071429][T15277] [ 593.071460][T15277] dump_stack_lvl+0xe8/0x150 [ 593.071558][T15277] should_fail_ex+0x3eb/0x540 [ 593.071642][T15277] should_failslab+0xa8/0x100 [ 593.071739][T15277] __kmalloc_cache_noprof+0x9e/0x600 [ 593.071831][T15277] ? dm_table_create+0x85/0x340 [ 593.071908][T15277] ? dm_table_create+0x85/0x340 [ 593.072009][T15277] dm_table_create+0x85/0x340 [ 593.072111][T15277] table_load+0x18e/0x8a0 [ 593.072209][T15277] ? __pfx_table_load+0x10/0x10 [ 593.072321][T15277] ? __might_fault+0xaf/0x130 [ 593.072387][T15277] dm_ctl_ioctl+0x9ec/0xe10 [ 593.072491][T15277] ? __pfx_table_load+0x10/0x10 [ 593.072584][T15277] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 593.072756][T15277] ? __fget_files+0x2a/0x420 [ 593.072843][T15277] ? bpf_lsm_file_ioctl+0x9/0x20 [ 593.072927][T15277] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 593.073003][T15277] __se_sys_ioctl+0xfc/0x170 [ 593.073097][T15277] do_syscall_64+0x16a/0x530 [ 593.073180][T15277] ? trace_irq_disable+0x3b/0x140 [ 593.073254][T15277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.073307][T15277] ? clear_bhb_loop+0x70/0xc0 [ 593.073380][T15277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.073436][T15277] RIP: 0033:0x7fe3051a8f19 [ 593.073496][T15277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.073549][T15277] RSP: 002b:00007fe3033cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.073614][T15277] RAX: ffffffffffffffda RBX: 00007fe305426090 RCX: 00007fe3051a8f19 [ 593.073657][T15277] RDX: 0000200000000500 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 593.073700][T15277] RBP: 00007fe305237f6d R08: 0000000000000000 R09: 0000000000000000 [ 593.073735][T15277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.073768][T15277] R13: 00007fe305426128 R14: 00007fe305426090 R15: 00007ffe233237e8 [ 593.073866][T15277] [ 593.089930][ T5726] usb 9-1: config 0 descriptor?? [ 593.102559][ T5726] hub 9-1:0.0: bad descriptor, ignoring hub [ 593.102613][ T5726] hub 9-1:0.0: probe with driver hub failed with error -5 [ 593.394313][ T5726] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 593.463599][ T5726] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 593.463640][ T5726] dib0700: firmware download failed at 7 with -22 [ 593.520625][ T5726] usb 9-1: USB disconnect, device number 48 [ 593.722626][T15283] netlink: 'syz.9.2911': attribute type 10 has an invalid length. [ 593.844340][T15287] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2913'. [ 594.337901][T15295] FAULT_INJECTION: forcing a failure. [ 594.337901][T15295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.337934][T15295] CPU: 0 UID: 0 PID: 15295 Comm: syz.0.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.337963][T15295] Tainted: [L]=SOFTLOCKUP [ 594.337971][T15295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 594.337984][T15295] Call Trace: [ 594.337993][T15295] [ 594.338003][T15295] dump_stack_lvl+0xe8/0x150 [ 594.338044][T15295] should_fail_ex+0x3eb/0x540 [ 594.338074][T15295] _copy_from_iter+0x1d3/0x1680 [ 594.338109][T15295] ? __might_fault+0xaf/0x130 [ 594.338135][T15295] ? _copy_from_iter+0x21b/0x1680 [ 594.338180][T15295] ? sock_alloc_send_pskb+0xc87/0xd90 [ 594.338209][T15295] ? __pfx__copy_from_iter+0x10/0x10 [ 594.338250][T15295] ? __pfx__copy_from_iter+0x10/0x10 [ 594.338291][T15295] copy_page_from_iter+0x219/0x2d0 [ 594.338329][T15295] skb_copy_datagram_from_iter+0x2f4/0x720 [ 594.338373][T15295] tun_get_user+0x1510/0x4470 [ 594.338424][T15295] ? aa_file_perm+0x18b/0x15f0 [ 594.338454][T15295] ? aa_file_perm+0x4ed/0x15f0 [ 594.338476][T15295] ? __pfx_tun_get_user+0x10/0x10 [ 594.338512][T15295] ? __lock_acquire+0x747/0x2de0 [ 594.338541][T15295] ? kstrtoull+0x137/0x1d0 [ 594.338579][T15295] ? ref_tracker_alloc+0x172/0x530 [ 594.338605][T15295] ? lock_acquire+0x115/0x350 [ 594.338632][T15295] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 594.338660][T15295] ? lock_acquire+0x115/0x350 [ 594.338685][T15295] ? tun_get+0x1c/0x2f0 [ 594.338722][T15295] ? tun_get+0x1c/0x2f0 [ 594.338753][T15295] ? tun_get+0x1c/0x2f0 [ 594.338789][T15295] tun_chr_write_iter+0x113/0x200 [ 594.338825][T15295] vfs_write+0x612/0xba0 [ 594.338865][T15295] ? __pfx_vfs_write+0x10/0x10 [ 594.338898][T15295] ? __fget_files+0x3a2/0x420 [ 594.338925][T15295] ? __fget_files+0x2a/0x420 [ 594.338953][T15295] ? fdget+0x1ac/0x250 [ 594.338987][T15295] ksys_write+0x150/0x270 [ 594.339020][T15295] ? __pfx_ksys_write+0x10/0x10 [ 594.339063][T15295] do_syscall_64+0x16a/0x530 [ 594.339095][T15295] ? trace_irq_disable+0x3b/0x140 [ 594.339123][T15295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.339146][T15295] ? clear_bhb_loop+0x70/0xc0 [ 594.339184][T15295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.339207][T15295] RIP: 0033:0x7f6c045a8f19 [ 594.339228][T15295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.339248][T15295] RSP: 002b:00007f6c05470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.339271][T15295] RAX: ffffffffffffffda RBX: 00007f6c04825fa0 RCX: 00007f6c045a8f19 [ 594.339288][T15295] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000003 [ 594.339302][T15295] RBP: 00007f6c05470090 R08: 0000000000000000 R09: 0000000000000000 [ 594.339317][T15295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.339330][T15295] R13: 00007f6c04826038 R14: 00007f6c04825fa0 R15: 00007ffe7bb25348 [ 594.339364][T15295] [ 594.489808][T10168] net_ratelimit: 181 callbacks suppressed [ 594.514043][ T11] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 594.681578][ T922] usb 6-1: USB disconnect, device number 82 [ 594.739521][ T922] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 594.745290][ T922] metro_usb 6-1:8.109: device disconnected [ 594.778439][ T11] usb 9-1: unable to get BOS descriptor or descriptor too short [ 594.779047][ T11] usb 9-1: not running at top speed; connect to a high speed hub [ 594.779085][ T11] usb 9-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=7c.26 [ 594.780524][ T11] usb 9-1: config 254 has an invalid interface number: 83 but max is 0 [ 594.780549][ T11] usb 9-1: config 254 has no interface number 0 [ 594.780593][ T11] usb 9-1: config 254 interface 83 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 594.780645][ T11] usb 9-1: config 254 interface 83 has no altsetting 0 [ 594.784780][ T11] usb 9-1: Dual-Role OTG device on HNP port [ 594.785215][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.785237][ T11] usb 9-1: Product: syz [ 594.785260][ T11] usb 9-1: Manufacturer: syz [ 594.785277][ T11] usb 9-1: SerialNumber: syz [ 595.039086][T15305] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 595.039112][T15305] syzkaller0: group set to 0 [ 595.096614][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 595.096881][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 595.103542][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 595.103814][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 595.333333][T15312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2921'. [ 595.357998][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 595.358280][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 595.868024][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 595.868289][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 595.991654][T15327] ceph: No source [ 595.995849][T15326] netlink: 'syz.0.2926': attribute type 1 has an invalid length. [ 595.995872][T15326] netlink: 'syz.0.2926': attribute type 3 has an invalid length. [ 595.995886][T15326] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2926'. [ 596.079854][T15331] device-mapper: table: 248:10: crypt: Device lookup failed (-EBUSY) [ 596.079885][T15331] device-mapper: ioctl: error adding target to table [ 596.187318][ T5754] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 596.338286][ T5754] usb 10-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 596.358110][ T5754] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.358131][ T5754] usb 10-1: Product: syz [ 596.358147][ T5754] usb 10-1: Manufacturer: syz [ 596.358164][ T5754] usb 10-1: SerialNumber: syz [ 596.392867][ T5754] usb 10-1: config 0 descriptor?? [ 596.396198][ T5754] hub 10-1:0.0: bad descriptor, ignoring hub [ 596.396247][ T5754] hub 10-1:0.0: probe with driver hub failed with error -5 [ 596.608254][ T5754] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 596.611571][ T5754] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 596.611614][ T5754] dib0700: firmware download failed at 7 with -22 [ 596.648888][ T5754] usb 10-1: USB disconnect, device number 56 [ 596.979253][T15350] nfs4: Unknown parameter 'a“…mÅj‹Íd~r' [ 597.128315][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 597.128586][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 597.154631][T15300] ceph: No mds server is up or the cluster is laggy [ 597.299106][ T11] usb_ehset_test 9-1:254.83: probe with driver usb_ehset_test failed with error -32 [ 597.304106][ T11] usb 9-1: USB disconnect, device number 49 [ 597.330588][ T33] kauditd_printk_skb: 29 callbacks suppressed [ 597.330603][ T33] audit: type=1800 audit(1794315076.949:1636): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=305187 res=0 errno=-22 [ 597.332816][ T33] audit: type=1800 audit(1794315076.949:1637): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=305188 res=0 errno=-22 [ 597.406872][ T33] audit: type=1800 audit(1794315077.019:1638): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=305167 res=0 errno=-22 [ 597.433380][ T33] audit: type=1800 audit(1794315077.049:1639): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=305189 res=0 errno=-22 [ 597.707568][ T5726] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 597.870136][ T5726] usb 10-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 597.875510][ T5726] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.875589][ T5726] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.877674][ T11] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 597.887672][ T5726] usb 10-1: config 0 descriptor?? [ 597.892667][ T33] audit: type=1800 audit(1794315077.509:1640): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305809 res=0 errno=-22 [ 597.898723][ T33] audit: type=1800 audit(1794315077.519:1641): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=305838 res=0 errno=-22 [ 597.899960][ T33] audit: type=1800 audit(1794315077.519:1642): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=305816 res=0 errno=-22 [ 597.901044][ T33] audit: type=1800 audit(1794315077.519:1643): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=305817 res=0 errno=-22 [ 597.902492][ T33] audit: type=1800 audit(1794315077.519:1644): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=305818 res=0 errno=-22 [ 597.934087][ T33] audit: type=1800 audit(1794315077.549:1645): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305858 res=0 errno=-22 [ 598.037998][ T11] usb 9-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 598.048218][ T5726] pwc: Askey VC010 type 2 USB webcam detected. [ 598.050433][ T11] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.050506][ T11] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 598.050698][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.144138][ T11] idmouse 9-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 598.305474][ T5726] pwc: recv_control_msg error -32 req 02 val 2b00 [ 598.505328][T15380] FAULT_INJECTION: forcing a failure. [ 598.505328][T15380] name failslab, interval 1, probability 0, space 0, times 0 [ 598.505359][T15380] CPU: 0 UID: 0 PID: 15380 Comm: syz.0.2947 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.505383][T15380] Tainted: [L]=SOFTLOCKUP [ 598.505392][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 598.505422][T15380] Call Trace: [ 598.505431][T15380] [ 598.505442][T15380] dump_stack_lvl+0xe8/0x150 [ 598.505481][T15380] should_fail_ex+0x3eb/0x540 [ 598.505514][T15380] should_failslab+0xa8/0x100 [ 598.505540][T15380] ? ceph_msg_new2+0x3b/0x4d0 [ 598.505586][T15380] kmem_cache_alloc_noprof+0x9c/0x600 [ 598.505618][T15380] ? ceph_msg_new2+0x3b/0x4d0 [ 598.505651][T15380] ? mutex_init_lockdep+0xdf/0x110 [ 598.505686][T15380] ceph_msg_new2+0x3b/0x4d0 [ 598.505714][T15380] ceph_monc_init+0x57d/0xae0 [ 598.505768][T15380] ceph_create_client+0x225/0x310 [ 598.505800][T15380] ceph_get_tree+0x1ca/0x1a90 [ 598.505833][T15380] ? apparmor_capable+0x126/0x170 [ 598.505858][T15380] vfs_get_tree+0x92/0x2a0 [ 598.505910][T15380] vfs_cmd_create+0xa2/0x200 [ 598.505937][T15380] __se_sys_fsconfig+0x6b9/0x810 [ 598.505966][T15380] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 598.506002][T15380] ? __x64_sys_fsconfig+0x20/0xc0 [ 598.506020][T15380] do_syscall_64+0x16a/0x530 [ 598.506064][T15380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.506089][T15380] ? clear_bhb_loop+0x70/0xc0 [ 598.506116][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.506144][T15380] RIP: 0033:0x7f6c045a8f19 [ 598.506160][T15380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.506174][T15380] RSP: 002b:00007f6c05470028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 598.506191][T15380] RAX: ffffffffffffffda RBX: 00007f6c04825fa0 RCX: 00007f6c045a8f19 [ 598.506225][T15380] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 598.506240][T15380] RBP: 00007f6c04637f6d R08: 0004000000000000 R09: 0000000000000000 [ 598.506255][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.506269][T15380] R13: 00007f6c04826038 R14: 00007f6c04825fa0 R15: 00007ffe7bb25348 [ 598.506309][T15380] [ 598.584244][ T5754] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 598.760875][ T5754] usb 6-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 598.766934][ T5754] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.767000][ T5754] usb 6-1: Product: syz [ 598.767015][ T5754] usb 6-1: Manufacturer: syz [ 598.767030][ T5754] usb 6-1: SerialNumber: syz [ 598.811810][ T5754] usb 6-1: config 0 descriptor?? [ 598.824679][ T5754] hub 6-1:0.0: bad descriptor, ignoring hub [ 598.824701][ T5754] hub 6-1:0.0: probe with driver hub failed with error -5 [ 598.889538][ T5726] pwc: recv_control_msg error -71 req 02 val 2c00 [ 598.890169][ T5726] pwc: recv_control_msg error -71 req 04 val 1000 [ 598.890787][ T5726] pwc: recv_control_msg error -71 req 04 val 1300 [ 598.892478][ T5726] pwc: recv_control_msg error -71 req 04 val 1400 [ 598.894423][ T5726] pwc: recv_control_msg error -71 req 02 val 2000 [ 598.894971][ T5726] pwc: recv_control_msg error -71 req 02 val 2100 [ 598.897224][ T5726] pwc: recv_control_msg error -71 req 04 val 1500 [ 598.904238][ T5726] pwc: recv_control_msg error -71 req 02 val 2500 [ 598.918643][ T5726] pwc: recv_control_msg error -71 req 02 val 2400 [ 598.954686][ T5726] pwc: recv_control_msg error -71 req 02 val 2600 [ 598.971939][ T5726] pwc: recv_control_msg error -71 req 02 val 2900 [ 598.972779][ T5726] pwc: recv_control_msg error -71 req 02 val 2800 [ 598.974829][ T5726] pwc: recv_control_msg error -71 req 04 val 1100 [ 598.976428][ T5726] pwc: recv_control_msg error -71 req 04 val 1200 [ 599.029012][ T5726] pwc: Registered as video103. [ 599.031560][ T5726] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input66 [ 599.054780][ T5726] usb 10-1: USB disconnect, device number 57 [ 599.074965][ T5754] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 599.097673][T15383] netlink: 'syz.0.2948': attribute type 10 has an invalid length. [ 599.145748][ T5754] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 599.145785][ T5754] dib0700: firmware download failed at 7 with -22 [ 599.244834][ T5754] usb 6-1: USB disconnect, device number 83 [ 599.332751][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.332983][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.333237][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.333483][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.333724][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.333975][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.342738][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.343653][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.359757][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.360895][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2949'. [ 599.479191][T15390] device-mapper: table: 248:7: cache: Error opening metadata device (-ENOENT) [ 599.479216][T15390] device-mapper: ioctl: error adding target to table [ 599.607459][ C0] net_ratelimit: 204 callbacks suppressed [ 599.797504][T15398] nfs4: Unknown parameter 'noz' [ 600.236764][T15405] FAULT_INJECTION: forcing a failure. [ 600.236764][T15405] name failslab, interval 1, probability 0, space 0, times 0 [ 600.236794][T15405] CPU: 1 UID: 0 PID: 15405 Comm: syz.9.2956 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.236824][T15405] Tainted: [L]=SOFTLOCKUP [ 600.236832][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 600.236845][T15405] Call Trace: [ 600.236861][T15405] [ 600.236868][T15405] dump_stack_lvl+0xe8/0x150 [ 600.236898][T15405] should_fail_ex+0x3eb/0x540 [ 600.236938][T15405] should_failslab+0xa8/0x100 [ 600.236975][T15405] ? ceph_msg_new2+0x3b/0x4d0 [ 600.237008][T15405] kmem_cache_alloc_noprof+0x9c/0x600 [ 600.237038][T15405] ? ceph_msg_new2+0x3b/0x4d0 [ 600.237063][T15405] ? mutex_init_lockdep+0xdf/0x110 [ 600.237112][T15405] ceph_msg_new2+0x3b/0x4d0 [ 600.237153][T15405] ceph_monc_init+0x57d/0xae0 [ 600.237189][T15405] ceph_create_client+0x225/0x310 [ 600.237222][T15405] ceph_get_tree+0x1ca/0x1a90 [ 600.237254][T15405] ? apparmor_capable+0x126/0x170 [ 600.237287][T15405] vfs_get_tree+0x92/0x2a0 [ 600.237328][T15405] vfs_cmd_create+0xa2/0x200 [ 600.237353][T15405] __se_sys_fsconfig+0x6b9/0x810 [ 600.237374][T15405] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 600.237416][T15405] ? rcu_is_watching+0x16/0xb0 [ 600.237457][T15405] ? __x64_sys_fsconfig+0x20/0xc0 [ 600.237484][T15405] do_syscall_64+0x16a/0x530 [ 600.237513][T15405] ? trace_irq_disable+0x3b/0x140 [ 600.237547][T15405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.237588][T15405] ? clear_bhb_loop+0x70/0xc0 [ 600.237617][T15405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.237639][T15405] RIP: 0033:0x7fe3051a8f19 [ 600.237665][T15405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.237679][T15405] RSP: 002b:00007fe3033ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 600.237696][T15405] RAX: ffffffffffffffda RBX: 00007fe305425fa0 RCX: 00007fe3051a8f19 [ 600.237709][T15405] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 600.237737][T15405] RBP: 00007fe305237f6d R08: 0004000000000000 R09: 0000000000000000 [ 600.237754][T15405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.237767][T15405] R13: 00007fe305426038 R14: 00007fe305425fa0 R15: 00007ffe233237e8 [ 600.237803][T15405] [ 600.287512][ T5726] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 600.470529][ T5726] usb 6-1: Using ep0 maxpacket: 8 [ 600.483807][ T5726] usb 6-1: New USB device found: idVendor=056a, idProduct=037a, bcdDevice=0.00 [ 600.504538][ T922] usb 9-1: USB disconnect, device number 50 [ 600.515920][ T5726] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 600.515951][ T5726] usb 6-1: config 0 interface 0 has no altsetting 0 [ 600.516008][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.550839][ T5726] usb 6-1: config 0 descriptor?? [ 600.565483][ T922] idmouse 9-1:1.0: disconnected [ 600.874902][T15407] FAULT_INJECTION: forcing a failure. [ 600.874902][T15407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.874927][T15407] CPU: 1 UID: 0 PID: 15407 Comm: syz.9.2957 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.874950][T15407] Tainted: [L]=SOFTLOCKUP [ 600.874956][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 600.874967][T15407] Call Trace: [ 600.874973][T15407] [ 600.874984][T15407] dump_stack_lvl+0xe8/0x150 [ 600.875013][T15407] should_fail_ex+0x3eb/0x540 [ 600.875035][T15407] _copy_from_iter+0x1d3/0x1680 [ 600.875061][T15407] ? __might_fault+0xaf/0x130 [ 600.875081][T15407] ? _copy_from_iter+0x21b/0x1680 [ 600.875106][T15407] ? sock_alloc_send_pskb+0xc87/0xd90 [ 600.875136][T15407] ? __pfx__copy_from_iter+0x10/0x10 [ 600.875165][T15407] ? __pfx__copy_from_iter+0x10/0x10 [ 600.875197][T15407] copy_page_from_iter+0x219/0x2d0 [ 600.875226][T15407] skb_copy_datagram_from_iter+0x2f4/0x720 [ 600.875258][T15407] tun_get_user+0x1510/0x4470 [ 600.875295][T15407] ? aa_file_perm+0x18b/0x15f0 [ 600.875316][T15407] ? aa_file_perm+0x4ed/0x15f0 [ 600.875332][T15407] ? __pfx_tun_get_user+0x10/0x10 [ 600.875359][T15407] ? __lock_acquire+0x747/0x2de0 [ 600.875401][T15407] ? kstrtoull+0x137/0x1d0 [ 600.875430][T15407] ? ref_tracker_alloc+0x172/0x530 [ 600.875448][T15407] ? lock_acquire+0x115/0x350 [ 600.875466][T15407] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 600.875487][T15407] ? lock_acquire+0x115/0x350 [ 600.875505][T15407] ? tun_get+0x1c/0x2f0 [ 600.875539][T15407] ? tun_get+0x1c/0x2f0 [ 600.875571][T15407] ? tun_get+0x1c/0x2f0 [ 600.875599][T15407] tun_chr_write_iter+0x113/0x200 [ 600.875626][T15407] vfs_write+0x612/0xba0 [ 600.875656][T15407] ? __pfx_vfs_write+0x10/0x10 [ 600.875680][T15407] ? __fget_files+0x3a2/0x420 [ 600.875700][T15407] ? __fget_files+0x2a/0x420 [ 600.875722][T15407] ? fdget+0x1ac/0x250 [ 600.875747][T15407] ksys_write+0x150/0x270 [ 600.875770][T15407] ? __pfx_ksys_write+0x10/0x10 [ 600.875800][T15407] do_syscall_64+0x16a/0x530 [ 600.875823][T15407] ? trace_irq_disable+0x3b/0x140 [ 600.875844][T15407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.875860][T15407] ? clear_bhb_loop+0x70/0xc0 [ 600.875879][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.875896][T15407] RIP: 0033:0x7fe3051a8f19 [ 600.875910][T15407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.875924][T15407] RSP: 002b:00007fe3033ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.875941][T15407] RAX: ffffffffffffffda RBX: 00007fe305425fa0 RCX: 00007fe3051a8f19 [ 600.875953][T15407] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000003 [ 600.875964][T15407] RBP: 00007fe3033ee090 R08: 0000000000000000 R09: 0000000000000000 [ 600.875974][T15407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.875983][T15407] R13: 00007fe305426038 R14: 00007fe305425fa0 R15: 00007ffe233237e8 [ 600.876038][T15407] [ 601.153229][ T5726] wacom 0003:056A:037A.001B: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 601.208369][ T5726] wacom 0003:056A:037A.001B: hidraw0: USB HID v0.02 Device [HID 056a:037a] on usb-dummy_hcd.5-1/input0 [ 601.227721][ T5726] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:037A.001B/input/input67 [ 601.258040][T15402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.262184][T15402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.267968][T15402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.306152][T15402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.350944][ T5726] usb 6-1: USB disconnect, device number 84 [ 601.511587][T15408] fido_id[15408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 602.186601][T15424] loop9: detected capacity change from 0 to 7 [ 602.197330][ T5754] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 602.216827][T15424] Dev loop9: unable to read RDB block 7 [ 602.216862][T15424] loop9: unable to read partition table [ 602.217007][T15424] loop9: partition table beyond EOD, truncated [ 602.217070][T15424] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 602.348239][ T5754] usb 10-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 602.352163][ T5754] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.352178][ T5754] usb 10-1: Product: syz [ 602.352189][ T5754] usb 10-1: Manufacturer: syz [ 602.352200][ T5754] usb 10-1: SerialNumber: syz [ 602.355023][ T5754] usb 10-1: config 0 descriptor?? [ 602.397284][ T33] kauditd_printk_skb: 51 callbacks suppressed [ 602.397299][ T33] audit: type=1800 audit(1794315082.009:1697): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=306596 res=0 errno=-22 [ 602.397436][ T5754] hub 10-1:0.0: bad descriptor, ignoring hub [ 602.397460][ T5754] hub 10-1:0.0: probe with driver hub failed with error -5 [ 602.400961][ T33] audit: type=1800 audit(1794315082.019:1698): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=306628 res=0 errno=-22 [ 602.403354][ T33] audit: type=1800 audit(1794315082.019:1699): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=306603 res=0 errno=-22 [ 602.404904][ T33] audit: type=1800 audit(1794315082.019:1700): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=306604 res=0 errno=-22 [ 602.564425][ T5754] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 602.566942][ T5754] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 602.566971][ T5754] dib0700: firmware download failed at 7 with -22 [ 602.595830][ T33] audit: type=1800 audit(1794315082.209:1701): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=306625 res=0 errno=-22 [ 602.596814][ T33] audit: type=1800 audit(1794315082.209:1702): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=306626 res=0 errno=-22 [ 602.642423][ T33] audit: type=1800 audit(1794315082.259:1703): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=306605 res=0 errno=-22 [ 602.645945][ T33] audit: type=1800 audit(1794315082.259:1704): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=306627 res=0 errno=-22 [ 602.691236][ T5754] usb 10-1: USB disconnect, device number 58 [ 602.803928][T15432] FAULT_INJECTION: forcing a failure. [ 602.803928][T15432] name failslab, interval 1, probability 0, space 0, times 0 [ 602.803949][T15432] CPU: 1 UID: 0 PID: 15432 Comm: syz.0.2965 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.803974][T15432] Tainted: [L]=SOFTLOCKUP [ 602.803980][T15432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.803991][T15432] Call Trace: [ 602.803998][T15432] [ 602.804006][T15432] dump_stack_lvl+0xe8/0x150 [ 602.804036][T15432] should_fail_ex+0x3eb/0x540 [ 602.804058][T15432] should_failslab+0xa8/0x100 [ 602.804085][T15432] ? ceph_msg_new2+0x3b/0x4d0 [ 602.804128][T15432] kmem_cache_alloc_noprof+0x9c/0x600 [ 602.804152][T15432] ? ceph_msg_new2+0x3b/0x4d0 [ 602.804178][T15432] ? mutex_init_lockdep+0xdf/0x110 [ 602.804206][T15432] ceph_msg_new2+0x3b/0x4d0 [ 602.804236][T15432] ceph_monc_init+0x57d/0xae0 [ 602.804265][T15432] ceph_create_client+0x225/0x310 [ 602.804292][T15432] ceph_get_tree+0x1ca/0x1a90 [ 602.804317][T15432] ? apparmor_capable+0x126/0x170 [ 602.804344][T15432] vfs_get_tree+0x92/0x2a0 [ 602.804390][T15432] vfs_cmd_create+0xa2/0x200 [ 602.804409][T15432] __se_sys_fsconfig+0x6b9/0x810 [ 602.804430][T15432] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 602.804448][T15432] ? rcu_is_watching+0x16/0xb0 [ 602.804477][T15432] ? __x64_sys_fsconfig+0x20/0xc0 [ 602.804495][T15432] do_syscall_64+0x16a/0x530 [ 602.804519][T15432] ? trace_irq_disable+0x3b/0x140 [ 602.804540][T15432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.804558][T15432] ? clear_bhb_loop+0x70/0xc0 [ 602.804578][T15432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.804595][T15432] RIP: 0033:0x7f6c045a8f19 [ 602.804610][T15432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.804627][T15432] RSP: 002b:00007f6c05470028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 602.804651][T15432] RAX: ffffffffffffffda RBX: 00007f6c04825fa0 RCX: 00007f6c045a8f19 [ 602.804663][T15432] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 602.804673][T15432] RBP: 00007f6c04637f6d R08: 0004000000000000 R09: 0000000000000000 [ 602.804686][T15432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.804697][T15432] R13: 00007f6c04826038 R14: 00007f6c04825fa0 R15: 00007ffe7bb25348 [ 602.804724][T15432] [ 602.939323][T15427] FAULT_INJECTION: forcing a failure. [ 602.939323][T15427] name fail_futex, interval 1, probability 0, space 0, times 0 [ 602.939413][T15427] CPU: 1 UID: 0 PID: 15427 Comm: syz.5.2964 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.939505][T15427] Tainted: [L]=SOFTLOCKUP [ 602.939528][T15427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 602.939570][T15427] Call Trace: [ 602.939593][T15427] [ 602.939616][T15427] dump_stack_lvl+0xe8/0x150 [ 602.939731][T15427] should_fail_ex+0x3eb/0x540 [ 602.939820][T15427] get_futex_key+0x1ab/0x1410 [ 602.939931][T15427] ? __pfx_get_futex_key+0x10/0x10 [ 602.940042][T15427] futex_wake+0x119/0x5f0 [ 602.940121][T15427] ? __pfx_futex_wake+0x10/0x10 [ 602.940221][T15427] ? mm_exit_exec_release+0x20/0x290 [ 602.940308][T15427] do_futex+0x458/0x4e0 [ 602.940407][T15427] ? __pfx_do_futex+0x10/0x10 [ 602.940506][T15427] ? __might_fault+0xaf/0x130 [ 602.940572][T15427] mm_exit_exec_release+0x10d/0x290 [ 602.940668][T15427] exit_mm+0x50/0x240 [ 602.940779][T15427] do_exit+0x6a8/0x2360 [ 602.940896][T15427] ? __pfx_do_exit+0x10/0x10 [ 602.940993][T15427] ? cgroup1_freezing+0x20/0x350 [ 602.941048][T15427] ? cgroup1_freezing+0x20/0x350 [ 602.941127][T15427] do_group_exit+0x22d/0x2f0 [ 602.941181][T15427] ? _raw_spin_unlock_irq+0x23/0x50 [ 602.941267][T15427] get_signal+0x136a/0x1430 [ 602.941388][T15427] arch_do_signal_or_restart+0xbb/0x860 [ 602.941487][T15427] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 602.941636][T15427] exit_to_user_mode_loop+0x10e/0x770 [ 602.941712][T15427] ? rcu_is_watching+0x16/0xb0 [ 602.941801][T15427] do_syscall_64+0x32c/0x530 [ 602.941879][T15427] ? trace_irq_disable+0x3b/0x140 [ 602.941945][T15427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.941966][T15427] ? clear_bhb_loop+0x70/0xc0 [ 602.941993][T15427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.942015][T15427] RIP: 0033:0x7fc6e15a8f19 [ 602.942036][T15427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.942055][T15427] RSP: 002b:00007fc6e2409028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 602.942078][T15427] RAX: 0000000000000002 RBX: 00007fc6e1825fa0 RCX: 00007fc6e15a8f19 [ 602.942093][T15427] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 602.942108][T15427] RBP: 00007fc6e1637f6d R08: 0000000000000000 R09: 0000000000000000 [ 602.942122][T15427] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 602.942137][T15427] R13: 00007fc6e1826038 R14: 00007fc6e1825fa0 R15: 00007fff780ab3b8 [ 602.942170][T15427] [ 603.988262][ T33] audit: type=1800 audit(1794315083.609:1705): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=306792 res=0 errno=-22 [ 603.990185][ T922] libceph: connect (1)[c::]:6789 error -101 [ 603.990410][ T922] libceph: mon0 (1)[c::]:6789 connect error [ 603.992942][ T922] libceph: connect (1)[c::]:6789 error -101 [ 603.993160][ T922] libceph: mon0 (1)[c::]:6789 connect error [ 604.248015][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 604.248223][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 604.500502][ T11] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 604.648630][ T11] usb 10-1: Using ep0 maxpacket: 16 [ 604.650948][ T11] usb 10-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00 [ 604.655355][ T11] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.655386][ T11] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 604.655416][ T11] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 604.655518][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.702743][ T11] usb 10-1: config 0 descriptor?? [ 604.709609][ T33] audit: type=1800 audit(1794315084.309:1706): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=306827 res=0 errno=-22 [ 604.747522][ T53] net_ratelimit: 145 callbacks suppressed [ 604.758020][ T5726] libceph: connect (1)[c::]:6789 error -101 [ 604.758247][ T5726] libceph: mon0 (1)[c::]:6789 connect error [ 604.781995][T15457] ceph: No mds server is up or the cluster is laggy [ 605.105021][ T11] nintendo 0003:057E:2019.001C: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.9-1/input0 [ 605.412736][T15478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=892417585 (1784835170 ns) > initial count (1751674978 ns). Using initial count to start timer. [ 605.648832][T10870] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 605.798107][T10870] usb 6-1: New USB device found: idVendor=04f2, idProduct=1421, bcdDevice=0.00 [ 605.799349][T10870] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.799389][T10870] usb 6-1: config 0 interface 0 has no altsetting 0 [ 605.799448][T10870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.804279][T10870] usb 6-1: config 0 descriptor?? [ 605.929752][T15485] netlink: 'syz.8.2984': attribute type 4 has an invalid length. [ 606.036023][T15485] trusted_key: encrypted_key: insufficient parameters specified [ 606.280160][T10870] input: HID 04f2:1421 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04F2:1421.001D/input/input70 [ 606.401927][T10870] chicony 0003:04F2:1421.001D: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0 [ 606.470275][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.473217][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.509503][T10870] usb 6-1: USB disconnect, device number 85 [ 606.731418][T15488] fido_id[15488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 606.920178][ T11] nintendo 0003:057E:2019.001C: Failed to set baudrate (ret=-71), continuing anyway [ 606.939978][ T11] nintendo 0003:057E:2019.001C: Failed handshake; ret=-71 [ 606.939991][ T11] nintendo 0003:057E:2019.001C: Failed to initialize controller; ret=-71 [ 606.999172][ T11] nintendo 0003:057E:2019.001C: probe - fail = -71 [ 606.999484][ T11] nintendo 0003:057E:2019.001C: probe with driver nintendo failed with error -71 [ 607.013550][ T11] usb 10-1: USB disconnect, device number 59 [ 607.042291][T15493] netlink: 'syz.9.2986': attribute type 10 has an invalid length. [ 607.204196][T10873] libceph: connect (1)[c::]:6789 error -101 [ 607.204402][T10873] libceph: mon0 (1)[c::]:6789 connect error [ 607.206040][T10873] libceph: connect (1)[c::]:6789 error -101 [ 607.206236][T10873] libceph: mon0 (1)[c::]:6789 connect error [ 607.315463][T15501] __nla_validate_parse: 57 callbacks suppressed [ 607.315483][T15501] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2989'. [ 607.457754][T10873] libceph: connect (1)[c::]:6789 error -101 [ 607.457908][T10873] libceph: mon0 (1)[c::]:6789 connect error [ 607.567310][ T11] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 607.647397][ T5726] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 607.719817][ T11] usb 10-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 607.721102][ T11] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.721161][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.725133][ T33] kauditd_printk_skb: 31 callbacks suppressed [ 607.725148][ T33] audit: type=1800 audit(1794315087.339:1738): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307465 res=0 errno=-22 [ 607.734951][ T11] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 607.735901][ T11] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 607.736124][ T11] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 607.736969][ T33] audit: type=1800 audit(1794315087.349:1739): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=307494 res=0 errno=-22 [ 607.746471][ T11] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 607.746769][ T11] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 607.764317][ T11] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 607.818248][ T33] audit: type=1800 audit(1794315087.429:1740): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=307472 res=0 errno=-22 [ 607.832772][ T11] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 607.839295][ T11] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 607.897044][ T33] audit: type=1800 audit(1794315087.509:1741): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=307473 res=0 errno=-22 [ 607.897245][ T5726] usb 9-1: Using ep0 maxpacket: 8 [ 607.907945][ T11] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 607.908539][ T33] audit: type=1800 audit(1794315087.519:1742): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=307474 res=0 errno=-22 [ 607.931758][ T5726] usb 9-1: New USB device found: idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 607.966039][ T33] audit: type=1800 audit(1794315087.579:1743): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307514 res=0 errno=-22 [ 607.969129][ T11] libceph: connect (1)[c::]:6789 error -101 [ 607.999978][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 608.003387][T15495] ceph: No mds server is up or the cluster is laggy [ 608.015040][ T33] audit: type=1800 audit(1794315087.629:1744): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307530 res=0 errno=-22 [ 608.041434][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.041457][ T5726] usb 9-1: Product: syz [ 608.041473][ T5726] usb 9-1: Manufacturer: syz [ 608.041490][ T5726] usb 9-1: SerialNumber: syz [ 608.042685][ T33] audit: type=1800 audit(1794315087.639:1745): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307557 res=0 errno=-22 [ 608.094308][ T33] audit: type=1800 audit(1794315087.709:1746): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307544 res=0 errno=-22 [ 608.094359][ T33] audit: type=1800 audit(1794315087.709:1747): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=307571 res=0 errno=-22 [ 608.095349][ T5726] usb 9-1: config 0 descriptor?? [ 608.332457][ T5726] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 608.345359][ T5726] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 608.360933][ T5726] usb 9-1: USB disconnect, device number 51 [ 608.420914][T10873] usb 10-1: USB disconnect, device number 60 [ 608.486749][T10873] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 608.506565][T10873] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 608.515702][T10873] keyspan 10-1:1.0: device disconnected [ 608.910827][T15516] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2996'. [ 608.958771][T15518] 9p: Bad value for 'wfdno' [ 609.260327][T15520] FAULT_INJECTION: forcing a failure. [ 609.260327][T15520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.260362][T15520] CPU: 1 UID: 0 PID: 15520 Comm: syz.8.2998 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.260391][T15520] Tainted: [L]=SOFTLOCKUP [ 609.260404][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 609.260415][T15520] Call Trace: [ 609.260421][T15520] [ 609.260428][T15520] dump_stack_lvl+0xe8/0x150 [ 609.260457][T15520] should_fail_ex+0x3eb/0x540 [ 609.260478][T15520] _copy_from_iter+0x1d3/0x1680 [ 609.260513][T15520] ? __might_fault+0xaf/0x130 [ 609.260532][T15520] ? _copy_from_iter+0x21b/0x1680 [ 609.260557][T15520] ? sock_alloc_send_pskb+0xc87/0xd90 [ 609.260581][T15520] ? __pfx__copy_from_iter+0x10/0x10 [ 609.260610][T15520] ? __pfx__copy_from_iter+0x10/0x10 [ 609.260642][T15520] copy_page_from_iter+0x219/0x2d0 [ 609.260671][T15520] skb_copy_datagram_from_iter+0x2f4/0x720 [ 609.260703][T15520] tun_get_user+0x1510/0x4470 [ 609.260740][T15520] ? aa_file_perm+0x18b/0x15f0 [ 609.260760][T15520] ? aa_file_perm+0x4ed/0x15f0 [ 609.260776][T15520] ? __pfx_tun_get_user+0x10/0x10 [ 609.260807][T15520] ? __lock_acquire+0x747/0x2de0 [ 609.260827][T15520] ? kstrtoull+0x137/0x1d0 [ 609.260854][T15520] ? ref_tracker_alloc+0x172/0x530 [ 609.260873][T15520] ? lock_acquire+0x115/0x350 [ 609.260893][T15520] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 609.260915][T15520] ? lock_acquire+0x115/0x350 [ 609.260933][T15520] ? tun_get+0x1c/0x2f0 [ 609.260966][T15520] ? tun_get+0x1c/0x2f0 [ 609.260992][T15520] ? tun_get+0x1c/0x2f0 [ 609.261020][T15520] tun_chr_write_iter+0x113/0x200 [ 609.261046][T15520] vfs_write+0x612/0xba0 [ 609.261075][T15520] ? __pfx_vfs_write+0x10/0x10 [ 609.261099][T15520] ? __fget_files+0x3a2/0x420 [ 609.261119][T15520] ? __fget_files+0x2a/0x420 [ 609.261141][T15520] ? fdget+0x1ac/0x250 [ 609.261171][T15520] ksys_write+0x150/0x270 [ 609.261195][T15520] ? __pfx_ksys_write+0x10/0x10 [ 609.261226][T15520] do_syscall_64+0x16a/0x530 [ 609.261249][T15520] ? trace_irq_disable+0x3b/0x140 [ 609.261293][T15520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.261317][T15520] ? clear_bhb_loop+0x70/0xc0 [ 609.261343][T15520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.261366][T15520] RIP: 0033:0x7fb1d3fa8f19 [ 609.261387][T15520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.261406][T15520] RSP: 002b:00007fb1d4d9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.261434][T15520] RAX: ffffffffffffffda RBX: 00007fb1d4225fa0 RCX: 00007fb1d3fa8f19 [ 609.261446][T15520] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 0000000000000003 [ 609.261457][T15520] RBP: 00007fb1d4d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 609.261467][T15520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.261477][T15520] R13: 00007fb1d4226038 R14: 00007fb1d4225fa0 R15: 00007fffffd8ad78 [ 609.261507][T15520] [ 609.339295][T10873] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 609.598105][T10873] usb 10-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 609.608963][T10873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.608987][T10873] usb 10-1: Product: syz [ 609.609004][T10873] usb 10-1: Manufacturer: syz [ 609.609021][T10873] usb 10-1: SerialNumber: syz [ 609.640404][T10873] usb 10-1: config 0 descriptor?? [ 609.651649][T10873] hub 10-1:0.0: bad descriptor, ignoring hub [ 609.651672][T10873] hub 10-1:0.0: probe with driver hub failed with error -5 [ 609.756163][T10874] libceph: connect (1)[c::]:6789 error -101 [ 609.756429][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 609.776942][T10874] net_ratelimit: 214 callbacks suppressed [ 609.778122][T10874] libceph: connect (1)[c::]:6789 error -101 [ 609.782978][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 609.853425][T10873] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 609.854706][T10873] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 609.854734][T10873] dib0700: firmware download failed at 7 with -22 [ 609.891448][T10873] usb 10-1: USB disconnect, device number 61 [ 610.039042][T10874] libceph: connect (1)[c::]:6789 error -101 [ 610.039207][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 610.210959][T15533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 610.528008][ T5726] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 610.549169][T10874] libceph: connect (1)[c::]:6789 error -101 [ 610.549341][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 610.578098][T15526] ceph: No mds server is up or the cluster is laggy [ 610.659649][ T5726] usb 9-1: device descriptor read/64, error -71 [ 610.662222][T15543] netlink: 'syz.9.3005': attribute type 2 has an invalid length. [ 610.917498][ T5726] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 611.017836][T10874] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 611.058525][ T5726] usb 9-1: device descriptor read/64, error -71 [ 611.149153][T10874] usb 6-1: device descriptor read/64, error -71 [ 611.177808][ T5726] usb usb9-port1: attempt power cycle [ 611.387305][T10874] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 611.517826][T10874] usb 6-1: device descriptor read/64, error -71 [ 611.517833][ T5726] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 611.538774][ T5726] usb 9-1: device descriptor read/8, error -71 [ 611.628493][T10874] usb usb6-port1: attempt power cycle [ 611.777275][ T5726] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 611.798137][ T5726] usb 9-1: device descriptor read/8, error -71 [ 611.907862][ T5726] usb usb9-port1: unable to enumerate USB device [ 611.967299][T10874] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 611.988016][T10874] usb 6-1: device descriptor read/8, error -71 [ 612.057338][ T5754] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 612.187290][ T5754] usb 10-1: device descriptor read/64, error -71 [ 612.227855][T10874] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 612.250522][T10874] usb 6-1: device descriptor read/8, error -71 [ 612.357988][T10874] usb usb6-port1: unable to enumerate USB device [ 612.407550][ T1971] block nbd0: Possible stuck request ffff888027f30000: control (read@0,1024B). Runtime 270 seconds [ 612.407608][ T1971] block nbd0: Possible stuck request ffff888027f301c0: control (read@1024,3072B). Runtime 270 seconds [ 612.427621][ T5754] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 612.577416][ T5754] usb 10-1: device descriptor read/64, error -71 [ 612.700188][ T5754] usb usb10-port1: attempt power cycle [ 613.047603][ T5754] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 613.068425][ T5754] usb 10-1: device descriptor read/8, error -71 [ 613.315902][ T5754] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 613.328976][ T5754] usb 10-1: device descriptor read/8, error -71 [ 613.434353][ T33] kauditd_printk_skb: 22 callbacks suppressed [ 613.434368][ T33] audit: type=1800 audit(1794315093.049:1770): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308022 res=0 errno=-22 [ 613.436667][T10874] libceph: connect (1)[c::]:6789 error -101 [ 613.436826][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 613.438267][ T5754] usb usb10-port1: unable to enumerate USB device [ 613.466357][T10874] libceph: connect (1)[c::]:6789 error -101 [ 613.466506][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 613.717889][T10874] libceph: connect (1)[c::]:6789 error -101 [ 613.718102][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 614.239645][T10874] libceph: connect (1)[c::]:6789 error -101 [ 614.239867][T10874] libceph: mon0 (1)[c::]:6789 connect error [ 614.255636][T15568] ceph: No mds server is up or the cluster is laggy [ 614.739645][T10868] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 614.888194][T10868] usb 6-1: New USB device found: idVendor=1410, idProduct=a012, bcdDevice=c4.5f [ 614.889892][T10868] usb 6-1: config 2 has an invalid interface number: 123 but max is 1 [ 614.889917][T10868] usb 6-1: config 2 has an invalid interface number: 65 but max is 1 [ 614.889939][T10868] usb 6-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 614.889962][T10868] usb 6-1: config 2 has no interface number 1 [ 614.889981][T10868] usb 6-1: config 2 has no interface number 2 [ 614.890058][T10868] usb 6-1: config 2 interface 0 has no altsetting 0 [ 614.890080][T10868] usb 6-1: config 2 interface 123 has no altsetting 0 [ 614.894245][T10868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.894265][T10868] usb 6-1: Product: syz [ 614.894296][T10868] usb 6-1: Manufacturer: syz [ 614.894313][T10868] usb 6-1: SerialNumber: syz [ 614.961808][ T33] audit: type=1800 audit(1794315094.569:1771): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308203 res=0 errno=-22 [ 614.970250][ C1] net_ratelimit: 239 callbacks suppressed [ 615.018677][ T33] audit: type=1800 audit(1794315094.639:1772): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=308235 res=0 errno=-22 [ 615.020074][ T33] audit: type=1800 audit(1794315094.639:1773): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=308210 res=0 errno=-22 [ 615.021381][ T33] audit: type=1800 audit(1794315094.639:1774): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=308211 res=0 errno=-22 [ 615.104233][T15599] netlink: 'syz.9.3024': attribute type 10 has an invalid length. [ 615.300067][ T33] audit: type=1800 audit(1794315094.909:1775): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=308232 res=0 errno=-22 [ 615.305630][ T33] audit: type=1800 audit(1794315094.919:1776): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=308233 res=0 errno=-22 [ 615.306918][T10868] usb 6-1: USB disconnect, device number 90 [ 615.323702][ T33] audit: type=1800 audit(1794315094.929:1777): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=308212 res=0 errno=-22 [ 615.402818][ T33] audit: type=1800 audit(1794315095.019:1778): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=308234 res=0 errno=-22 [ 615.467748][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 615.467963][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 615.483775][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 615.483985][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 615.486440][ T33] audit: type=1800 audit(1794315095.099:1779): pid=5007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308436 res=0 errno=-22 [ 615.604497][T15611] kcov: kcov_start: t = ffff888036c49f40, size = 524288, area = ffffc9000fb67000 [ 615.605959][ T5628] eth0: xmit ffff888062304370 42:01:0a:80:00:01 [ 615.605994][ T5628] Added buffer head 15 to ffff888026d8e000 [ 615.606032][ C1] virtqueue callback for ffff888026d8e000 (ffffffff86de2b60) [ 615.606067][ C1] Sent skb ffff888062304370 [ 615.606085][ C1] No more buffers in queue [ 615.606686][ C1] virtqueue callback for ffff888026d8e200 (ffffffff86de2a20) [ 615.606718][ C1] No more buffers in queue [ 615.607176][ C0] wireguard: wg2: Handshake for peer 52 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 20) [ 615.607583][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 615.607611][ C1] No more buffers in queue [ 615.607980][ C1] eth0: xmit ffff8880623059f0 42:01:0a:80:00:01 [ 615.608013][ C1] Added buffer head 15 to ffff888026d8e000 [ 615.608047][ C1] virtqueue callback for ffff888026d8e000 (ffffffff86de2b60) [ 615.608083][ C1] Sent skb ffff8880623059f0 [ 615.608111][ C1] No more buffers in queue [ 615.608800][ C0] virtqueue callback for ffff888020767000 (ffffffff857c04b0) [ 615.608805][ C1] virtqueue callback for ffff888026d8e200 (ffffffff86de2a20) [ 615.608853][ C0] virtqueue interrupt with no work for ffff888020767200 [ 615.608870][ C0] virtqueue interrupt with no work for ffff888020767400 [ 615.609108][ C1] virtqueue callback for ffff888026d8e200 (ffffffff86de2a20) [ 615.609610][ C1] No more buffers in queue [ 615.609665][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 615.609703][ C1] Receiving skb proto 0x0800 len 1324 type 0 [ 615.609723][ C1] No more buffers in queue [ 615.609861][ T35] INFO: task syz.6.2165:12909 blocked for more than 143 seconds. [ 615.609884][ T35] Tainted: G L syzkaller #0 [ 615.609897][ T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 615.609908][ T35] task:syz.6.2165 state:D [ 615.609918][ C1] No more buffers in queue [ 615.609935][ C1] No more buffers in queue [ 615.609952][ T35] stack:25256 pid:12909 tgid:12905 ppid:10180 task_flags:0 ** replaying previous printk message ** [ 615.609952][ T35] stack:25256 pid:12909 tgid:12905 ppid:10180 task_flags:0x400040 flags:0x00080002 [ 615.609979][ T35] Call Trace: [ 615.609989][ T35] [ 615.610003][ T35] __schedule+0x18a6/0x5c10 [ 615.610055][ T35] ? do_writepages+0x4c1/0x560 [ 615.610103][ T35] ? __pfx___schedule+0x10/0x10 [ 615.610248][ T35] ? schedule+0x90/0x2b0 [ 615.610281][ T35] schedule+0x164/0x2b0 [ 615.610310][ T35] schedule_preempt_disabled+0x13/0x30 [ 615.610340][ T35] __mutex_lock+0x7c4/0x15a0 [ 615.610378][ T35] ? __mutex_lock+0x5cd/0x15a0 [ 615.610417][ T35] ? sync_bdevs+0x294/0x480 [ 615.610456][ T35] ? __pfx___mutex_lock+0x10/0x10 [ 615.610497][ T35] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 615.610528][ T35] ? iput+0x451/0xf00 [ 615.610572][ T35] sync_bdevs+0x294/0x480 [ 615.610615][ T35] __ia32_sys_sync+0xc5/0x120 [ 615.610650][ T35] ? __pfx___ia32_sys_sync+0x10/0x10 [ 615.610690][ T35] ? do_syscall_64+0xc8/0x530 [ 615.610726][ T35] do_syscall_64+0x16a/0x530 [ 615.610757][ T35] ? trace_irq_disable+0x3b/0x140 [ 615.610787][ T35] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.610812][ T35] ? clear_bhb_loop+0x70/0xc0 [ 615.610841][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.610865][ T35] RIP: 0033:0x7f37469a8f19 [ 615.610887][ T35] RSP: 002b:00007f3747890028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 615.610912][ T35] RAX: ffffffffffffffda RBX: 00007f3746c26180 RCX: 00007f37469a8f19 [ 615.610930][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 615.610945][ T35] RBP: 00007f3746c26180 R08: 0000000000000000 R09: 0000000000000000 [ 615.610960][ T35] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.610974][ T35] R13: 00007f3746c26218 R14: 00007f3746c26180 R15: 00007ffcbe3a4ab8 [ 615.611009][ T35] [ 615.611049][ T35] [ 615.611049][ T35] Showing all locks held in the system: [ 615.611069][ T35] locks held by khungtaskd/35: 1, on CPU#0: [ 615.611085][ T35] #0: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 615.620674][ T5754] Added buffer head 0 to ffff888020767000 [ 615.657792][ C1] eth0: xmit ffff88802c99bc80 42:01:0a:80:00:01 [ 615.657886][ C1] Added buffer head 15 to ffff888026d8e000 [ 615.657951][ C1] virtqueue callback for ffff888026d8e000 (ffffffff86de2b60) [ 615.658512][ C1] Sent skb ffff88802c99bc80 [ 615.658674][ C1] No more buffers in queue [ 615.658725][ C1] No more buffers in queue [ 615.673415][ T35] locks held by getty/5396: 2, last CPU#0: [ 615.673439][ T35] #0: ffff888033b410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 615.673506][ T35] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 615.673603][ T35] locks held by udevd/9030: 1, last CPU#0: [ 615.673619][ T35] #0: ffff888027dd7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 615.673684][ T35] locks held by kworker/u8:6/10168: 3, on CPU#1: [ 615.673701][ T35] #0: ffff88813fea4150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 615.673764][ T35] #1: ffffc90003f3fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 615.673833][ T35] #2: ffff8880555b4258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 615.673908][ T35] locks held by kworker/1:8/10868: 2, on CPU#1: [ 615.673924][ T35] #0: ffff88813fe61d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 615.673983][ T35] #1: ffffc90002fffc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 615.674052][ T35] locks held by syz.6.2165/12909: 1, last CPU#1: [ 615.674068][ T35] #0: ffff888027dd7350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x294/0x480 [ 615.674135][ T35] locks held by syz-executor/13188: 2, on CPU#1: [ 615.674151][ T35] #0: ffff88805bc28dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 615.674222][ T35] #1: ffff888023b39ce0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 615.674291][ T35] locks held by syz.9.3027/15605: 3, last CPU#0: [ 615.674307][ T35] #0: ffff88804624e668 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x68d/0x810 [ 615.674359][ T35] #1: ffff888059116100 (&type->s_umount_key#70/1){+.+.}-{4:4}, at: sget_fc+0x9d5/0x1ce0 [ 615.674426][ T35] #2: ffff88807ac30088 (&client->mount_mutex){+.+.}-{4:4}, at: ceph_get_tree+0x888/0x1a90 [ 615.674487][ T35] locks held by syz.8.3028/15610: 4, on CPU#0: [ 615.674503][ T35] #0: ffff88803280f1c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 615.674580][ T35] #1: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x12dc/0x3520 [ 615.674636][ T35] #2: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1e3/0x2180 [ 615.674697][ T35] #3: ffffffff9035aa20 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 615.674764][ T35] [ 615.674770][ T35] ============================================= [ 615.674770][ T35] [ 615.674797][ T35] NMI backtrace for cpu 0 [ 615.674815][ T35] CPU: 0 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 615.674848][ T35] Tainted: [L]=SOFTLOCKUP [ 615.674856][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 615.674870][ T35] Call Trace: [ 615.674880][ T35] [ 615.674889][ T35] dump_stack_lvl+0xe8/0x150 [ 615.674922][ T35] nmi_cpu_backtrace+0x274/0x2d0 [ 615.674950][ T35] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 615.674975][ T35] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 615.675006][ T35] sys_info+0x135/0x170 [ 615.675027][ T35] watchdog+0x1073/0x10f0 [ 615.675063][ T35] ? watchdog+0x209/0x10f0 [ 615.675098][ T35] kthread+0x38b/0x480 [ 615.675121][ T35] ? __pfx_watchdog+0x10/0x10 [ 615.675146][ T35] ? __pfx_kthread+0x10/0x10 [ 615.675170][ T35] ret_from_fork+0x514/0xb70 [ 615.675193][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 615.675215][ T35] ? __switch_to+0xc78/0x1410 [ 615.675248][ T35] ? __pfx_kthread+0x10/0x10 [ 615.675271][ T35] ret_from_fork_asm+0x1a/0x30 [ 615.675321][ T35] [ 615.675352][ T35] Sending NMI from CPU 0 to CPUs 1: [ 615.675388][ C1] NMI backtrace for cpu 1 [ 615.675405][ C1] CPU: 1 UID: 0 PID: 13188 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 615.675432][ C1] Tainted: [L]=SOFTLOCKUP [ 615.675439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 615.675453][ C1] RIP: 0010:rep_stos_alternative+0x6/0x80 [ 615.675479][ C1] Code: 47 30 48 89 47 38 48 8d 7f 40 75 d8 90 e9 42 95 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 3a <83> f9 08 73 13 85 c9 74 0a 88 07 48 ff c7 48 ff c9 75 f6 e9 12 95 [ 615.675496][ C1] RSP: 0018:ffffc9000579f8a8 EFLAGS: 00040283 [ 615.675514][ C1] RAX: 0000000000000000 RBX: 00007ffe7bb25244 RCX: 0000000000000004 [ 615.675527][ C1] RDX: 0000000009f994c5 RSI: ffffffff8ec8194d RDI: 00007ffe7bb25244 [ 615.675542][ C1] RBP: 0000000000000001 R08: ffffffff82277def R09: 0000000000000000 [ 615.675555][ C1] R10: dffffc0000000000 R11: ffffed100860b142 R12: 00007ffffffff000 [ 615.675571][ C1] R13: ffff8880430589f0 R14: 0000000000000004 R15: 00007ffe7bb25248 [ 615.675585][ C1] FS: 0000555591e95500(0000) GS:ffff888123262000(0000) knlGS:0000000000000000 [ 615.675603][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.675616][ C1] CR2: 00007f6c047f6158 CR3: 0000000056f0c000 CR4: 00000000003526f0 [ 615.675635][ C1] Call Trace: [ 615.675642][ C1] [ 615.675649][ C1] xt_data_to_user+0xfe/0x160 [ 615.675680][ C1] xt_target_to_user+0x12a/0x1e0 [ 615.675710][ C1] do_arpt_get_ctl+0xf60/0x1270 [ 615.675740][ C1] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 615.675766][ C1] ? nf_getsockopt+0x224/0x290 [ 615.675796][ C1] ? __mutex_unlock_slowpath+0x731/0x900 [ 615.675829][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.675865][ C1] nf_getsockopt+0x26e/0x290 [ 615.675896][ C1] ip_getsockopt+0x19e/0x230 [ 615.675930][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 615.675961][ C1] ? __might_fault+0xaf/0x130 [ 615.675983][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 615.676018][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 615.676055][ C1] do_sock_getsockopt+0x4aa/0x640 [ 615.676087][ C1] ? file_init_path+0x3b/0x5a0 [ 615.676116][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 615.676154][ C1] ? fd_install+0x95/0x4e0 [ 615.676187][ C1] __x64_sys_getsockopt+0x1a4/0x240 [ 615.676220][ C1] do_syscall_64+0x16a/0x530 [ 615.676252][ C1] ? trace_irq_disable+0x3b/0x140 [ 615.676283][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.676307][ C1] ? clear_bhb_loop+0x70/0xc0 [ 615.676334][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.676358][ C1] RIP: 0033:0x7f6c045aa6ea [ 615.676377][ C1] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 615.676398][ C1] RSP: 002b:00007ffe7bb24fe8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 615.676421][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6c045aa6ea [ 615.676438][ C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 615.676452][ C1] RBP: 00007ffe7bb25050 R08: 00007ffe7bb24ffc R09: 0000000000000000 [ 615.676469][ C1] R10: 00007ffe7bb25050 R11: 0000000000000212 R12: 00007ffe7bb24ffc [ 615.676486][ C1] R13: 00007f6c046389ef R14: 00000000000963b6 R15: 00007ffe7bb25740 [ 615.676515][ C1] [ 615.739705][T15611] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3028'. [ 615.739949][T10873] libceph: ceph_con_workfn: con ffff88807ac30418 PREOPEN [ 615.739972][T10873] libceph: try_read start ffff88807ac30418 state 2 [ 615.739990][T10873] libceph: try_write start ffff88807ac30418 state 2 [ 615.740006][T10873] libceph: prepare_read_banner ffff88807ac30418 [ 615.740020][T10873] libceph: try_write initiating connect on ffff88807ac30418 new state 3 [ 615.740045][T10873] libceph: ceph_tcp_connect con ffff88807ac30418 peer_addr (1)[c::]:6789 [ 615.740178][T10873] libceph: con_sock_state_connecting con ffff88807ac30418 sock 1 -> 2 [ 615.740501][T10873] libceph: connect (1)[c::]:6789 error -101 [ 615.740691][T10873] libceph: try_write done on ffff88807ac30418 ret -101 [ 615.740717][T10873] libceph: fault ffff88807ac30418 state 3 to peer (1)[c::]:6789 [ 615.740741][T10873] libceph: mon0 (1)[c::]:6789 connect error [ 615.740756][T10873] libceph: ceph_con_reset_protocol con ffff88807ac30418 [ 615.740772][T10873] libceph: ceph_con_close_socket con ffff88807ac30418 sock 0000000000000000 [ 615.740791][T10873] libceph: con_sock_state_closed con ffff88807ac30418 sock 2 -> 1 [ 615.740812][T10873] libceph: queue_con_delay ffff88807ac30418 0 [ 615.740847][T10873] libceph: con_fault_finish ffff88807ac30418 [ 615.740865][T10873] libceph: mon_fault mon0 [ 615.740878][T10873] libceph: mon_fault already hunting [ 615.740899][T10873] libceph: queue_con_delay ffff88807ac30418 50 [ 615.740920][T10873] libceph: ceph_con_workfn: con ffff88807ac30418 BACKOFF [ 615.814918][ C1] virtqueue callback for ffff888026d8e200 (ffffffff86de2a20) [ 615.815041][ C1] No more buffers in queue [ 615.817026][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 615.817099][ C1] No more buffers in queue [ 615.823178][ T35] Kernel panic - not syncing: hung_task: blocked tasks [ 616.923607][ T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 616.934310][ T35] Tainted: [L]=SOFTLOCKUP [ 616.938652][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 616.948733][ T35] Call Trace: [ 616.952041][ T35] [ 616.954992][ T35] vpanic+0x26f/0x710 [ 616.959005][ T35] panic+0xc5/0xd0 [ 616.962747][ T35] ? __pfx_panic+0x10/0x10 [ 616.967214][ T35] ? preempt_schedule_common+0x7f/0xd0 [ 616.972710][ T35] ? preempt_schedule_thunk+0x16/0x40 [ 616.978107][ T35] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 616.984293][ T35] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 616.990480][ T35] watchdog+0x10e7/0x10f0 [ 616.994875][ T35] ? watchdog+0x209/0x10f0 [ 616.999320][ T35] kthread+0x38b/0x480 [ 617.003409][ T35] ? __pfx_watchdog+0x10/0x10 [ 617.008117][ T35] ? __pfx_kthread+0x10/0x10 [ 617.012750][ T35] ret_from_fork+0x514/0xb70 [ 617.017374][ T35] ? __pfx_ret_from_fork+0x10/0x10 [ 617.022525][ T35] ? __switch_to+0xc78/0x1410 [ 617.027243][ T35] ? __pfx_kthread+0x10/0x10 [ 617.031866][ T35] ret_from_fork_asm+0x1a/0x30 [ 617.036678][ T35] [ 617.040336][ T35] Kernel Offset: disabled [ 617.044680][ T35] Rebooting in 86400 seconds..