last executing test programs: 21m19.405206171s ago: executing program 32 (id=7): fcntl$getflags(0xffffffffffffffff, 0x401) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x40, 0x6, 0x4, "209c8c53"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000140)={0x20, 0xa, 0x15, "1e5c1cd945208d691c27c8696013140000adb7aed8"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="4007fb00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) r2 = add_key$fscrypt_v1(&(0x7f00000015c0), &(0x7f0000001600)={'fscrypt:', @desc4}, &(0x7f0000001640)={0x0, "9dcfc4582269e1adb4e779df6cafc3e8f09989cb8940322b36e44f5fab84cec88ce91365707c8fbee2ab245314fb84bbc0bd047fcb1ffc5b5cafb8c198e76617", 0x1}, 0x48, 0xfffffffffffffffd) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)=@keyring={'key_or_keyring:', r3}) syz_usb_control_io(r1, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r2, 0x1) syz_usb_control_io(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x4801}, 0x0) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m13.858130109s ago: executing program 33 (id=1330): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_open_dev$hiddev(0x0, 0x1b, 0x1) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r1) 11m10.715098689s ago: executing program 1 (id=1974): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}}, 0x14}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[]) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xe803, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0xfd78) getsockopt$inet6_mreq(r1, 0x29, 0x12, 0x0, &(0x7f0000000080)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0x7) 11m10.572853153s ago: executing program 34 (id=1974): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}}, 0x14}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[]) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xe803, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0xffffffff}}}}}}, 0xfd78) getsockopt$inet6_mreq(r1, 0x29, 0x12, 0x0, &(0x7f0000000080)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[], 0x7) 7m21.298572382s ago: executing program 3 (id=3098): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f000023f000/0x3000)=nil) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'io+mem'}, 0xf) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x6) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 7m21.266687625s ago: executing program 3 (id=3099): r0 = memfd_create(&(0x7f0000000040)='\\\xcb6@\x00L\xa4\xa6@U\xd7\x96\xf11l\x04\x00\xef\xecx', 0x0) fallocate(r0, 0x0, 0x10065b, 0xa) 7m21.187848419s ago: executing program 3 (id=3100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="040800766572736928b52ffd0500000004080070726f66696c65000705040066226f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 7m21.058632173s ago: executing program 3 (id=3102): r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup3(r0, r0, 0x80000) r2 = accept$nfc_llcp(r1, 0x0, &(0x7f0000000040)) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x4, &(0x7f0000000100)={&(0x7f0000000200)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x2, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6d", 0x8}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 7m20.947619067s ago: executing program 3 (id=3103): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=""/38, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) write(r0, &(0x7f0000000180)='tes', 0x3) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x44, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x4}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) 7m20.762378559s ago: executing program 3 (id=3104): openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0xffff80fe, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 7m5.658798251s ago: executing program 35 (id=3104): openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x68, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e3de3d7b4cd07ec3ee777de774fc7987cca41989ec53f953f615edc21c4335093450b134"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0xffff80fe, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 6m57.997255271s ago: executing program 7 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210025bd7200000400003900000008000300", @ANYRES32=r1, @ANYBLOB="0c005a800800008004000100"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x800000, 0x0) syz_clone(0x4000, &(0x7f0000000300)="64203f2b8f28cd777d6b8ac8cd087259795a287aec9fc22a8ab795bbf92cd9696a890f0146b6f0672e59dbcf91e96059e347aa8849cab8fe234ce0ada495b8f634a2c2953f19c68de410e0f0fb83407e0d9519d7b174e6097bff617ebcd67ae5", 0x60, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000880)="eec3a786ea7f0659856f0a556ea46ab10ad4c59fc5f8356edca1b162d160288bc0796853820ac4483bf0f97a8fd64186ff33c4b9cc3ea178161d2dedc08e7cd775a33dbfbeb2bb41cb333cbeda79dddacef6a1b84671") r5 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000240)=""/146, 0x92}], 0x1, 0x8000, 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) ioctl$TCSETSF2(r4, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r8 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c"], 0x120}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x3, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x5, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x100, 0x3, 0x0, 0xc, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x206, 0x80000001, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x5, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c5, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x0, 0x7, 0x7ffb, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x7fff, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8006, 0x5, 0xfffffffe, 0x9, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xfffe, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20200008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x40007, 0xa9, 0x9, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x6, 0x12b, 0x4, 0x620bb16b, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x1, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0x80000001, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x0, 0xc}, &(0x7f0000000900)='R\x10rust\xe3c*sgrVid:De\x05\x1f\xba\x93\x14;\xf7D\x1b+u\xb3\x8b/e\x9d\x95Us\xc6\xfb\x1e\xa4ra\x0e\xa8\x8c\a\xe2\x8d\x93)\xa6\xc6\x8c[\x97\xdeR\xf8\x11V\\\xad\x03{\xe0(\xa3\xf3G\x8av\xc3\xecc/M\xce\xb3P4F#\xfc\x1c\x11\xce^\x19\xcb\xcb\xfcV~>d\xd7\xd1Jvy', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f0000000080)={0x7, 'macsec0\x00', {0x30b}, 0x2}) 6m56.999090596s ago: executing program 7 (id=3167): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = socket(0x11, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000400000001000000090000004c0003800800030000000000140002007663616e300000000000000000000000080001000200000014000600ff"], 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0xb00, 0x24}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1f, 0x0, &(0x7f0000000140)) (async) getsockopt$inet6_buf(r0, 0x29, 0x1f, 0x0, &(0x7f0000000140)) 6m41.804307032s ago: executing program 36 (id=3167): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = socket(0x11, 0xa, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000400000001000000090000004c0003800800030000000000140002007663616e300000000000000000000000080001000200000014000600ff"], 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0xb00, 0x24}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x1f, 0x0, &(0x7f0000000140)) (async) getsockopt$inet6_buf(r0, 0x29, 0x1f, 0x0, &(0x7f0000000140)) 5m16.911535984s ago: executing program 6 (id=3532): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000300)=@filename='mtd0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x2000000, 0x0) (async) listxattr(&(0x7f0000000200)='./mnt\x00', 0x0, 0x100000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2038) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x1, 0x3, 0x8000009, 0xfffffffc, 0x80, {0x0, 0xbb3, 0x1, 0xb, 0x0, 0xdbf, 0x10, 0x0, 0x80, 0x8000, 0x2, r1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2052040, &(0x7f0000000240)={[{}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'jffs2\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r1}}, {@fowner_gt={'fowner>', r2}}]}) 5m16.707127104s ago: executing program 6 (id=3533): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r0, &(0x7f00000000c0)=""/44, 0x2c) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x33) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='test2\x00', &(0x7f0000000040)='jffs2\x00', 0x8c0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000058) openat(r1, &(0x7f0000000600)='test2\x00', 0x42, 0x1ff) 5m15.999042393s ago: executing program 6 (id=3538): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(0x3) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x1fd, 0x0, 0x2, 0xb}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x1000000, 0xffffffffffffffff, 0x1}) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r6, 0x0) setpriority(0x2, 0xff, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000001d002100"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x50) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x220500, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x7d) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r9, 0x80045439, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRESHEX=r2, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r10, @ANYBLOB="0a00060008021100000000000c00430002"], 0x34}}, 0x0) 5m12.873012083s ago: executing program 6 (id=3546): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) syz_usb_connect$cdc_ncm(0x6, 0x9d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x2, 0x1, 0xff, 0x10, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xb8, 0x10, 0x2a}, {0x6, 0x24, 0x1a, 0x2, 0x10}, [@obex={0x5}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x800, [0x9, 0x4c19, 0xad61, 0x9, 0x80, 0x2]}, @acm={0x4, 0x24, 0x2, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x7e, 0x1}, @dmm={0x7, 0x24, 0x14, 0x7, 0x10}, @obex={0x5, 0x24, 0x15, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0xf, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0x4, 0xd9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x14}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x8, 0x1, 0xff, 0xff, 0x2}, 0x5f, &(0x7f0000000280)={0x5, 0xf, 0x5f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xb2, 0x8, 0xd, 0x8001, 0x80}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x8, 0x0, 0xa0, [0x30, 0x30, 0x0, 0xffc0c0, 0xff00f0, 0xff0030]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "759e54447f6eb8fd2da8c7f869f775ea"}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0xe99, 0xf, 0x2, [0x30, 0x1fec0ff]}]}, 0x2, [{0xb3, &(0x7f0000000300)=@string={0xb3, 0x3, "47e5c8e10dce06946d1ceded0bb2e4eda46b7b90c89d7fd432a36c3d4d8287d6588b86496540ef682a1aeea42a8d5594e7fa4f84ef200a3df9a264e4232986fa3007ba283b50cd2fafd69489c8679acf21df8d9dab89b31d38cad59da5773bd9ca7027f415521ec5c7201913856edc74ccd01a0e3384b4b15575ccf445d591372f0a3174f5efea981a6122dc8fc4158ded07b77391bff861a89533d274cbeaff261b5c25a8f75e6854ad3d29dd342ed902"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1040}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) creat(&(0x7f00000000c0)='./file0\x00', 0x80) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000010c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000001700)={0x1c, &(0x7f0000001140)={0x40, 0x3, 0x7, "e84134f4aa302d"}, &(0x7f0000001280)={0xa1, 0x1, 0x400, "4078a46769264bce6d653299b43ebfff0532e97fe931012808665371d945e72a504afcd20d38267d9f4f0fa089eaf4f382d7264fd7ef19cebeac33a4aa67c140bd6d9716dc93e757b6f53c54ea69a36b3617c5f4c596d9f3b1d352bd2cf61ca9eb6d4b288f0043aed78a46d984ee579e2595011f26b66460312ede3d7739533a7a063716abd8f865aca92dd085cd9a7598d08a74d42e039167c47f8824c07d9b478c5e9339a708e1065bd1b3ded11c7fb4f2b477fa5a5d9bcf052e062bf3c764e106c0ae2ec4e0fe2d8522a1d2b467a17c78b569a307232147ff85546883ca499f5481831d049cb60704dca60beeac6af72d486c788b60f25f8c0a753515f69d364a49135f4d99548eb99021c56e5be77d8c4639a7691b920598a80e05741e3905585abbad8ef306a8e3bbf684e3e60c6aeb86eea59bc8dcf24201bdfe7f01d5852e667a991723b1b7b43690a3aa85d7df87f96d06916bed921d7bca46d3aad75fe048f3cd85fdcbca97b3ce3ecadfb7e7e92ed261a2776ab64d6351a889d6395e0e3734df67c8f9f3d063f946169259e3da19dd99010424cfb38e99f104768e503d9081c6863a6d90c9c731db79f8d15f7cae7322b9af92fbc220e5f83353e0d48296beec3d22bda7493df9a801c40ecdb79c05acfac6db22cec2fc930845999fd04dbba29ea772caa5e59e4896cfdc7c7f5e7f1f753777446146e3b29f01e38410d4c768f8ec50215d7725937dde34271fe28b18dfa6e7fee626feff4a50ecd892169fb2e110411d83d3c8a2e0f8010fd182268018a27e9f2d583afd76a55c60833402f6d56c9672b76fb06455fa2ccff8e7d9ff226eea6a2365924f0f42c54f83ee62945160d852c4b6300906d3b00a49603225cead05321d088d1425f52f02e3bc3b0a881f17bac5eded3c9d7c5910855e0f23f93687a527740d60075650c67af1f5718159bb1a0b077903956faca6163155179f7aeb40e286f427f723e43faaa53d736568871c419ba4d350d27876d6a2bc75509e53eb8586b533fc3c3f1404ce48dea45f7384509e48ca2d7ddd692a4521e9a52f0f37492e0a5ec5321669db12982627573ed2161524b4ce1eb5d63888ce22c693bc565063a3195be2bf3ae8cd1150f9ddd46c2087f9b267ebcd658efcb9a6d5035841a3d83b4c6c2997559155a02a1ccfaa827cd46429a9e19c89a8f0ad8e57c8cc237c2ca4c55bf23176180b47279976fca3fb452b01abf6bf5196bd95cbb0e36571fbd2bba4273fd80864040dc018d555e8ed148d70fb325f1b89d262d7d364125abc83ec6c3e7201887700f72746aaee3cdcb718b8e5df35d7c0e8f787dc6eebd896d54d4cad6ccf8cef09fedb156b4483f4b0c5be07af0ace6d7d06e0ebd01fd47f93442daa893087ae0b81243d4a91234f7fcdcbc55520192ee2674ae3c92f2613ea904c40bcce"}, 0x0}) 5m9.933936718s ago: executing program 6 (id=3556): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='oom_score_adj & 1', 0x11) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9, 0x6}}, 0x30) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) mkdirat(r0, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030304000000fbac1c952f"], 0x14}}, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000000, 0x37e9, 0x2f92) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x30, 0x30, 0x0, @ib={0x1b, 0x6, 0x3ff, {"557f7f5f849d81b9f4518fa9e52be7ae"}, 0xa8, 0x8c, 0x3}, @ib={0x1b, 0x7, 0x6, {"50916300000000000000000700"}, 0x6, 0x8, 0x3ff}}}, 0x118) syz_clone(0x0, 0x0, 0x30, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r6, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001a00)={r9, 0xb, 0x7e, 0x22f62674}, &(0x7f0000001a40)=0x10) 5m9.639190527s ago: executing program 6 (id=3557): socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x700) 4m54.53455135s ago: executing program 37 (id=3557): socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x700) 4m46.326495016s ago: executing program 9 (id=3635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x12d, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x10001, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1"}}}}, 0x7ff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f8027b5fb2bf49311f000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80042, 0x0) write$binfmt_misc(r10, &(0x7f0000000400)="e8d888543cd17997ace81613c32994ac7c38b40c695d1d379f869d7522f1baaa2e85c3800795af2e030c7a5a07214c3fb23cc474107056eaba69e6084d0f1df64af4dcc0aba965f935ab03aef47a28a11dc08f4acf0163e977b0a4f94cfefda5ad6db5589ee0c5cb8b1fa9c16d57b5415e8a9f10b7c5f13c16d417b27d59eced0694e76478c2e9f86a0e6fdedd06821be59cb7ceb1dd7677fd8256221f9a02e834227c50f1a0dca54d3d5d67698b51c5423df5d4f07b6e517096e75b1553bbbe98b43645b035645950f3f0a5c734a582da3b89d73ebe16ff71eba274abacd460", 0xe0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl(r2, 0x890b, &(0x7f0000000140)="00000000000000000000000000000000020000006c61706230") 4m44.775015264s ago: executing program 9 (id=3643): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{}, 0x2a6, 0xb, 0x7a}) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000003c40)) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = dup(r0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x500, 0xfe, 0x400, 0x1}}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r5 = syz_usb_connect(0x2, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r10, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f00000086c0)=@vmx={0x100, 0x0, 0x2080, {0x10000, 0x30000, {}, 0x0, 0x20000009a7}, {"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", "d07ee59115bfee5345dc58b23cffc5c643e81123cf65a8d185a9e53e7f9d20a2020cabd00e6cd5420c4fc8fe61efbb8012fec281c1550aa7087060b41a484b5b682068eca9d6936960d6477a239fe120e7433936c058ffa20f15e2ed6c32ae4bd9de18fd5fe31f20ab85f2fb01b792873e66a5cf610bb34322c830d921ca201a82c1557b5a2d7ba0c22555f03c65cc8d2df42064f60eef20d09c493c84c11857ffa5eb8130764e6e21b41a0fb263aedfc3c9be3390087ef0222481b049f72a52ad49e908223a367b40d567a52fde9fc9cc245e733edfdd1b4442a55ed7fe18226e3f7fd28b8d5fd88907fca2350c968c2918f0fe093c91cba0b87bb954b3280a000023025602d77ef2605b9d2720c269744d29ef36a79f700c0eab33eec64c5b8341d3143cc0d382133e6961216b5802820929b94a7bcb1f581110df1b4c52293b478694f8d147476bb3bc5e5a5018481950c395d42b423899a7c4e06b6befa46e2a67a70194a2d2e80234385db03c4ba693c61b84ff80571643f204ae1c7d42f5461f209f7b559bbb5a0c45d5ead100f30f615dbbccb6139a4afe8fa59496b1aaed900299f1c335ab35ee56a333fa22455c05b1ebb1b9bc3b0ca1e02abe0732b24a4ef6f9310db4dcaf37382f4a69e02829eb46bcf9a8132906f7e5c46afbac699a9618130cb39489d3ae793d8fcc43213198bc2cbe8a0fcffd1b69450d61e9c8e9ce80c19218335c48788ddde3d97c694611c783125d96392ad0295bd9600076978c64ec511106f9422e019b08041a43ef0b8abaec4cef8b8041b773f57068a38690056837008cfe86c143b821ddd9e4d517a2f6ca2e21bbbc3b1f0ea5f6d855c37f8814f15a00df3031328c804e360ca966287cce40b4d57e533e575263d48759428ca6df4154f4699d8f41b8c8e076aa225e0c1c0f278e21463a205bfc0a334f3516eae2c5222f87b57ef5e424505b9993d24a8d225b89517ed3015d5a64950bd265412d07a397bd454698571ab002ac752f7d0c8959025065eba27ea44574379a6a387ef7344a90f828a08afe8c27032c8431d30f323b56e7cbe9edb3c9327a2cabc3ea0dceccf4ec25b2861d5f8940823b57def9c184083586c6534f3402ba8d9d6ba1cfff07fba22d24d40bca43c96c56489ea10500b32b7359c2c296181ac4d5f7872377c40a819a8093859a42fa02a0a4f4b2ce4f44d87cabdb2433dcbc530a03516856417d25b06c38952c80f5348c96bf2549c72c8bb4735f958bf7e02c7a67e530611f2d80d547810bae4f52799a9eb6be5da14693d9d7c84dc0b2bef18e11c87a6977a669608ae4f1d1367687cfbeaec2308d1f2b24a95d8b25e4fe6c7cd47fc5800cc59c2467c778de641662e9a83431b5c014ff3a8cb777b92b5847318a8a525e44d45058fb03db60112a4b35b4370e9cc8e142a216308d987eea38d7b91f29b26535792c28ee9e9f7beb3668b765ca388cd3269f6f017d169196f55eea8f16280ceee95eafb1990b2eaacdb6a36386936a02a70cc8baed1ed7f75df629f618de95ccf62ca5f27fef54a22a94d313f1688526f34a834f14472c5a2d5fe91d828fb228c142c3bda3a7463a528d34d37ac32fa27e9b47fc9d817d91fb2dcec4c5c051cc46cfa47ee94f7843cfb8faa99da3569095245cd88674e5503ff2921852bde363894bfab4a13195c960e75940ea3625b3c6780580bc4694b5fe9bc118afa261bf51b8a5f79397cf4b27e84a15339bfe5f04f477ca9b0038a6a309c9ea89261e5da441f35598ee644eb7544d99b1e07f8a0e71b4f70e0faf47413518795a3d247e5f37863a80e83111bc8265dc7ab304e3097a8a825334ab4e507895be0862f5d219bff68ab180c307c6726b74e9197972da8bdc53f70e43c91406349b97d124622b4896c7471421047c8eca382953347c98df1959bcb269814ded7ee1e1bd5d724ba5d0a1af9d87ae96853de2de0798e7ae879513f2a561d3d7be2e04d382bfd2d0a27052c3e14aeae844cb6fcac2737d3f9f916715026a3d19c7401d2162add82a16b8e172c96ee8f0e4e645e7a201bcdf34271ee87eede9d36439c1962bb44b6433b19bad3c3bc841955be66176ceec74c5173a838a77fcc58ece7a7653c87f344c758278eb53b24142bf87472a6cb1367b0940154aac55dcc81dc8032987e9ea9856a5c844853616ffe3daaae85d50a20994126065e79e8e91022a5c8678a10870410361b74a0e37f9acc773c876f50da6776d43dcd80b3850fcbdd22d03cacad58fb8b408388efec93d42385fb266044178235fc5fe59dc35aef3eb8e89ada9c0ceb8f9379d9fe9045248196e918411bba64eb740337c0c8015540bebf581465d382f1e214f2f8a7b21b4983d8567de985d5e709ad9a8e0113be44e5f8f6aa9e592115669a494d1eddb3186a688a122ad66cc289e249c47d90168d499cac3fea3f2cac52eb840760837b485c6ce32e6ab2c4e1d2bce37f5105a1da6b34215bc19440189fbce47b4bf386c1ecde35ea39024fcf75e3b92a4d45a12452b8df5fd302faa71ab130d3d350907ff28dc4d62f01912eb5cfa84d2d818937d0ba7af08470128a92fb10e86d8a636c65be67c967f3bdd039a5eed1700e335ed92261b3600fb0f5ba72a8f5f86eaad9d51b8fc3c7fcc9ec7645079c4164398805cde129e8b7bf90c91d7bbdc411228a7f072920f40ab43074558ce7b48f9ef77f5fe6e845dcf0d23b12f3d61ea6435bf16b886bc9fb0af755fa472929f5536aa4a643783dc2749c33e4ec3c0ebf1824fcebceee319d346f34f1569b04dba2284bbe06f6c81794a94b6e470260290fea50c0a3645989ed557feef306815b67bc18025df1a3182b44d805903f438e70ff4dd59cecca60e755b7297c665462c768a1942b447e76d2a244e17295e94e77176f79f32b4734081138cc64f27243c1a2ebe7a094bf81b74208184b3212b769d55531d898eda1ac80c02b4c9564c9f2fd7882b605a445c963f40115908fd07587c4feed6253ba295922495e24d9a6779a8f1ed80ddac801b329ddb5ff32f654cde6c6faf1f917a036937a5d936b2bde8c547362322044d51ba758834a786814aec35c72c5c4f28a49cdb663876f0e82e73024f183823a4f12898bf6a71ec7bbe599e36f2c03186e8187b37856060d4f5d598e72b80672b8eed4206569c2d593b37d9c6cb64eec7d783c3d506c0568c0b205aa548bcac773732b56f8a0910f6c8b6a5cf846e84db67465ed7c3a88909d5ea256300566dc8bcdb279a36eb028e0577f3eedc7f0ae6111cef1445e29f0bf0a92b7c6601e75aecad62a9f21e5e1a4d744b652d4c60b434b9220b7f8169df36d5c172ea6ded7eabed08f91305e9f0748ae9cd56ed50418dc6eab2bc6d153a3d61834f16b3739d93afa510f2ddd26d3f913b6ef9278cb4c81c5b470b1002b63ef31432ca969c27fa3f463b3f3824cabeccfb35c8493d3b4d4dcad1305f37e607359ad219e4598ba7713aa3ca89f0b4ff710b83acf64ac1306d21a450422cc8bc9d0e4526655359ba2c3967dc0b4f7853b83043f66b2bab33d34510829e951cd13036474b2934fbea89b30137f0258b4c22d9e061e76c5cec96d72801295e47a1121bdd526196ce9ea6942197ae990c59a3a71447192ab4bc0bf0904b83a52413c157625a5df9547bc7015f3b48729eb1fcb462c1fe9fbcb2ea9d921107d5dadbce9a2a7f5fce1502b5132500b86978d4132e903f907c62d91d85cf5f5a315f7b8dcd9e143e5b7a66dcdd1411515586b13401b6038af4f4b01f76f438171aec9bfd0b45baf14301d54aa00e6936869f0c92109ec1a509000000000000008f0da6d47a8e5e24d92e678f63572371f85486ee1dcc071df165f0695df15f8b60587765f4cd49819880a779a7290cbd65b8df57c3f2d1139e8fc8383d9aee5466fbb97d66a85c7ab7091fe00806f862a39a51d998c6efec7727d953fe4e72f218858c5e848456429aeda5e92c40480d9e84e87ee61ade1a82f8838fe1f28bd294af45b9a2fe12462c78dde15bec8723c74825d0d83e9d071f91d57ebe0ba2fc1e6e75d6ef6859289b22fe9d90819d1e99043a365c608dd6ce89c23f62f9772fe6ad59383e01b8bbba61e836d66e7ba91e1e246c9755f023f6b05c452fdcb167b7ebe5e0a113c8681397316761e66239911ba677baf7552090d316bd75cd05fb0caf235c523cf607157b7d4cde8b144d49df4f339a65411a92ee68a4f1c2ddf9fbc3d22ffb986059b3ed0d3f82501554919b37e66cbb5bd75401dfda96092d114bc259860438cfb79ea33607ca30798ddaefef2715a3d91946fc26f94bd269ba7567dcd9c50ad11ee96347bccba629a784c7b662873a866f73f1dda2aa2082ba26d270d6471236823dc05b788de80f94e5c294af129128d34cfb44105a8b40d4f8441c21a098eb04e48bca616dc6915b52fa6a9fb0ab5eef802fd3d8dcf182258567951be20a0ebf49116216432e91033f6085fbf72ed1d60717739f3499b52b6b684e0d42e33f736657a898cb3fa5da70e8710d35fb11e2996031a82cce1d55d8fa4bead1a35e458b8811fd7ad70c566146daf8d9ac29288ca45ab50f7779526be7741ad9f39daac4195fa13914b7151115b06d2d07dd1a4af6efe38a225f7f8b183a43797d5a1d7c046613d78b19bf9d2316fbcdfc935fc54477b095295553bb417e527e3814d165cdeb43c552f05b1f66d13aca2496327760c93b8a1427c2272c405d8b94f8eb275249a0947c332049ee0bad7136669c7df63dc120ea62c79d04a39db50af4d76e9dd5dcd74a77b8fcd1981b6f138a048970e94fe6c4082b49f7e397e0f9b9fc7368aebaf3ba0c051d08f6770e6ddca26f8eca0415552bbe7b1c41e1e87f52981f2de74bded1a1d5bc41e60d19e4e05de1db2e9700256741fd6e86028fd21aaae7d3978d09baa4ebdf9a39aee448d344f2e5c050fe3293c6c74a7cb16755554747b010f10bff9b6f02c82da4f78b5b5596aafa01b5027ccaad437c125390416f36f1df42ef52a1d5af117e7866cc9f61b950ce922e3a1a6ff586e14add3e14781116d643e74124e570392572393c56e78906a24cec1ef196ccd22a7e492084a04b8ca069b95d5e12ad19e76b4ced072ce0bff78d7fe3a3750fe541ed053fb3fe08f29a773cb68d2cb8418f1b3bd4949720ae4104ed20d9aa5d2541317367d02db5f60f6b8df2ff596bd166692cee510b59da757532d88ddf3e8944f01a63ca0657ed24ea5b8110cb53731c539e94633e41d71fa59919d96287a505e8c4e9ac3d9b5e9180b93b670e37aeeec29bdabaac747f8bdf2a5275b61cb8f2081c5655fb047e9036d2273d4674e0382c5d5ebb50448ac02b07d851d66f8836fec1ac3e42c5405adcecb31f50b20e6573dad067999b78f7351bea9e8ca6536fc304eede9cdb905c24f475141349a1b00ad68198ca88898f29afcfb63ebf63d7d037529cf8219dbdb85d01cf5fc3d4b045c9400f672a6deb1ff4d197a28b2a7304e751541a046bc4812ba2fa9e430c79a0b34ab764933148ed337d34dfabf055608109bfd85c739f9c2353f1137582bc73a8d4310cb8ca1dd192b9335ce4ffca52907f37f29fd50e96be21e33b5074f0e16d11a08b274150eb876024ae815e67f3c13c6a3f158c4fd7a26bb2f5d19a2f097235d2fc235f67bdc9b11ffeef3168eb360388749f2f8b91fc3249edc58a959577aa205a105af400"}}) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000000e40)=@svm={0x8, 0x1, 0x1080, {0x40000}, {"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"}}) vmsplice(r6, 0x0, 0x0, 0x8) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 4m42.038507132s ago: executing program 9 (id=3651): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test/cgroup.procs\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket(0xa, 0xa, 0x38) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0xc) 4m41.746383139s ago: executing program 9 (id=3654): ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000240)={0x2, 0x2, 0xffffffffffffffff, 0x7fffffff, 0x4, 0x3}) r0 = syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="875eb7387412b04f5e9265f95de81789d27f9988e94c88d9da741d30bc674500"/46], &(0x7f0000000180)={0x0, 0x3, 0x63, @string={0x63, 0x3, "ea09760b2d0c94ec51c51e66c74b68fb8e3078220113edc96b8844b4e9e0f6c9956f1943fd12626472639cc7dc7991c2c067cd7d32516cbeb801e3ce7c0294a30086c3ce387fd93883b4f9fdf134668558e7eff63d18b602ea9e47a64d04d98fcf"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000440)={0x0, 0x15, 0xce, "f7f4ab2c6bdc3a195488a330b2a527a56de3b7394b2ef8b165fe1d2cff1ae550d912281e1282046849400c0b5b1920b2b0efc2daa4d18ceb49ebd82abeca29107cf1051ca78c120683d25655ecebb854a7ba9ccb22c6e008569445ade330762649d02cae03704b9bdcd1b5571597aff2b9b3492601d1240265e502940d282153018b26f779c11e43806432bd1524c2c27de3198cb5ed6547f6d25a0a68fe12f17ad61e49db567cb537240bab4238bdb0f8830424a8f85c62126b2b95898ea4d6dc7080ef4d314a1d3c73b5174aa9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000640)={0x20, 0x0, 0xa4, {0xa2, "c74237309b5a624c57fb1f17c271d3b87baf26f7ba028c51e8d0abc7d984ce7129f2c4ba9deff40a0aac04215025311d82d6f8581d51383f7067e6bbaae624f82cdda1298f7ed849566d18717196b8f94bac734fb2ca0dc7fa3b5f2eccd17c04d4b7bab0cbc5b8d5511f2da37ad63534a45ec854446631df6d4db6785dc52e3d419f85849990fe41e2b0ab32c598f087432d81864ae5ae502e4d98457141a134eafb"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x8b}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x81}}) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff00000007058102400000070501024000000705840240000007050202"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x36f0, 0xc, 0x8, 0x2, 0x800, 0x2, 0x1}, &(0x7f0000000140)=0x20) write$P9_RREADLINK(r3, &(0x7f0000000080)={0x16, 0x17, 0x1, {0xd, './dev/ttyUSB0'}}, 0x16) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r7, 0x0) 4m40.389663146s ago: executing program 9 (id=3659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x304}}, 0x28) r3 = socket(0x2, 0x80805, 0x8000000) setsockopt$MRT_TABLE(r3, 0x0, 0xcf, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}, '\x00', '\x00', '\x00', "010000000100"}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="68c99bec193e4a", 0x7}, {&(0x7f0000000200)="b716691038cbf09904b88ae8a9bac9f2c415745a3df903f3ed6d71ac0ea49244297ab7b9c56bd5aaadac1bb5b71cb30cf703c0c85980a9be4af094ee0253dd1fe59834dafebbc4b9c778df91f8a59dc5498ffc49bb70ed2b81fe6569375f9556b372afc1b3a44bcd881cabd8cc0043bb5774c0840d7e7fae359e801206cd3c587c709900cfe637a93cd9f32390305a3ad1a3d0f12221bd17b5603582ae19554cc2babcd03c3303e7ffc29fe6fd00cdad34f6", 0xb2}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x8, @loopback, 0x4e23, 0x2, 'wlc\x00', 0x3c, 0xfffffffa, 0x39}, 0x2c) 4m40.064794258s ago: executing program 9 (id=3661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000010) 4m39.856502394s ago: executing program 38 (id=3661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x20000010) 2m28.213871126s ago: executing program 5 (id=4334): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='vfat\x00', 0x0, &(0x7f0000000080)='usr\xc9\x9f3\xbbF\xaf\x98\xc7\xf9aK\x16D\v\x97\x91\x18\xacj\xd9\xa0i\xb0\x14\xa3\xe7\x8e\x00'/42) chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 2m28.14241757s ago: executing program 5 (id=4335): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x121401, 0x30, 0x10}, 0x18) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./my_configfs\x00', 0x81, 0x8) linkat(r0, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', r1, &(0x7f0000000480)='./my_configfs\x00', 0x1000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0xf8d40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9006}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x28, 0xa9, 0x5, 0xfffff034}, {0x6, 0xfa, 0x2, 0x9}]}, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 2m28.031874678s ago: executing program 5 (id=4336): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount$overlay(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, './lower'}}, {@nfs_export_on}]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) 2m27.91901371s ago: executing program 5 (id=4337): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x183002, 0x0) write$sequencer(r1, &(0x7f0000000180)=[@v={0x93, 0x20, 0x80, 0x1b, @MIDI_NOTEON=@special, 0x5, 0x1800}], 0x8) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) 2m27.911994234s ago: executing program 5 (id=4338): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x58, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x20000080) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/125, 0x7d}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x80}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) 2m27.863573164s ago: executing program 5 (id=4339): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x1, 0x80) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfe6d) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x4, 0x4, 0x4}}, 0x14) write$sysctl(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000) socket(0x26, 0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 2m12.57208402s ago: executing program 39 (id=4339): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x1, 0x80) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfe6d) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x4, 0x4, 0x4}}, 0x14) write$sysctl(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000) socket(0x26, 0x5, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 17.6953942s ago: executing program 4 (id=4949): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file3\x00', 0x207) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000800)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_iT=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff81e0edc4, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200010008000000060000000000000009000000000000000200000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000060000009000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file3\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() r7 = getegid() ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000940)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0}, 0x1a21) stat(&(0x7f0000002a00)='./file1\x00', &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002ac0)={0x5, 0xbc, {0x0}, {0xee01}, 0x2, 0x1}) lstat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$netlink(r0, &(0x7f0000004c80)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x28a8a023}, 0xc, &(0x7f00000007c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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"/1104], 0x450}, {&(0x7f0000000780)=ANY=[@ANYBLOB="240000002400000827bd7000fbdb6465762f6e65742f74756e00000000"], 0x24}], 0x2, &(0x7f0000004c00)=[@cred={{0x1c, 0x1, 0x2, {r1, r3, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x80, 0x4008000}, 0x8054) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r14, 0x400454dc, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8924, &(0x7f00000000c0)={'macsec0\x00', 0x1}) 17.430930097s ago: executing program 4 (id=4951): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011002914001100a65704040002000400200000", 0x17) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc8, 0x2}}}, 0x7) 17.34055794s ago: executing program 4 (id=4953): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0xc084}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 17.186902096s ago: executing program 4 (id=4955): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x2, 0xe4, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b75072501020207000905", @ANYBLOB='\"$F'], 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) 15.676481104s ago: executing program 4 (id=4970): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000380)="ec5e48b09972d0694a00a29818946c72779f555f99d41438dce040ee30deacd6b43c0a2e5540a7305446b70b819d3df898f4eaf06b07abc1241361ade91ad9488657c6a09216ba2ab2ec8adb8a552fd14bd01ef46f00fca8f7855c9b192a2724d73d0ef35cabfeef557bedcf76", 0xfffffee6}, {&(0x7f0000000140)="e2b22a2e628734ff832335ee4bb78c628747a08708048f9a99b85da040df8658a56007041b000000000000000000", 0x2e}, {&(0x7f0000000240)="54083d426ef57c1bea988db5f17834a47969971f1b6f380601e75e204b3aadaf22e9c52b003765baaa06d3ffb30ab61f7296481ae4c3023183937b8e91de1bc6e65ed0c67c0b58a654382a4df5", 0x4d}], 0x3) 15.434446079s ago: executing program 4 (id=4971): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x47, 0xc, 0x0, {0x10, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1000, 0x8}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 0x5, 0x200, [0xf2, 0x7]}, @tcp_ip4_spec={@local, @remote, 0x4e23, 0x4e20, 0x1}, {0x0, @remote, 0x4, 0x3, [0x7, 0x401]}, 0x3, 0x7}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01021f40b676ff651c290000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001"], 0xfc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000004000)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff0709050210080007"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TCFLSH(r2, 0x800455c9, 0x4000000) syz_usb_control_io(r1, 0x0, 0x0) 15.063378681s ago: executing program 40 (id=4971): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x47, 0xc, 0x0, {0x10, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1000, 0x8}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 0x5, 0x200, [0xf2, 0x7]}, @tcp_ip4_spec={@local, @remote, 0x4e23, 0x4e20, 0x1}, {0x0, @remote, 0x4, 0x3, [0x7, 0x401]}, 0x3, 0x7}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01021f40b676ff651c290000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c000380080001"], 0xfc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000004000)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff0709050210080007"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TCFLSH(r2, 0x800455c9, 0x4000000) syz_usb_control_io(r1, 0x0, 0x0) 5.334788838s ago: executing program 0 (id=5002): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffd, 0xfffffeff}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000600)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xeffbfffd, 0x7, 0x1}) socket$packet(0x11, 0xa, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r8, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x1}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x25, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x11, 0x0, @opaque="18b824fdc24acf90a5"}}}, 0x33) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r12, 0xae03, 0x81) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x37) r13 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r13, 0xc0945662, &(0x7f0000000080)={0xda, 0x0, '\x00', {0x0, @reserved}}) r14 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xa3, 0xe9, 0xb2, 0x20, 0x2040, 0x7070, 0xd477, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x62, 0x1, 0x0, 0x2, "", [{{0x9, 0x4, 0x8a, 0x2, 0x0, 0x7, 0xa2, 0x77}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r14, &(0x7f0000000e80)={0x24, 0x0, &(0x7f0000000dc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 5.280309594s ago: executing program 1 (id=4972): unshare(0x6020400) umount2(&(0x7f0000000280)='./file0\x00', 0xa) fsopen(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3, 0x0, 0xa, 0x0, 0x1}, 0x21, 0x0) landlock_restrict_self(r4, 0xa) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r5, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x12) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r7, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x88) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpu.weight\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0xa610) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000002640)=ANY=[@ANYRES16=r10, @ANYBLOB="597141a9f6213c43b2d8837b516af335fa7cac576ff5848eb40181be3482", @ANYRES16=0x0, @ANYBLOB="a7efb4aeb7930791651d87e97e979180db35ac4a90913f261f0f69eeeaa12c50aa81f9d80b04dd504bfd5a61c305e95772a407746c145ae056b0a5089f14709a3d9c7219c91597bdf7e58ceaf5172e66f605bb777e27e85342215433084d966451a853256885041f18e2951518cf91bcfc23dcdc0e0f9d9e88e3885f3a80db35d47df3b895315d2f1dee3d544aca5aa5d539d4c6ce6adf14a94a96759dc25a91f7ae5011df3ce72709bea8264d76df0d759ca077", @ANYRES32=r10], 0xfe33) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003700)=""/4080, 0xff0}, {&(0x7f00000005c0)=""/4057, 0xfd9}, {&(0x7f0000001600)=""/4134, 0x1026}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f0000003640)=""/151, 0x97}, {&(0x7f0000000400)=""/193, 0xc1}], 0x6}, 0x20) 4.322759922s ago: executing program 1 (id=5003): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000003000000000000000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f00000007c0)="006394bf10165bedc3a0030abbf75d281f770000000000a007c8dde5559bdcf98bad3f21f668d278252e4eafad30e1ae2104958b61bf0bac89d26dff86717c2927ff603b81d0edb7f65228cb53695078e0f335ceb4d337e494f98613b7f8815819ac7720e2f54159b755ce9169045edfd4fc6cf46690aa4b4827c7f6d3ba40089f81f1efbef4b515b7393465a5685c99d49d6d9761a06bf8e3297008df36e9f8276e1bd11dec8397b3f09085d2cf609ad53431b9a46dc46cd06bfad763f14271fb5def113efc99ef20af70daedba481a2d9229ee64dd", 0xd6, 0xd23) pwrite64(r0, &(0x7f0000000300)="00000014ef", 0x5, 0xd2b) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x37, 0x2, 0x1, "11010000001400000100b64c0000005c4b7c1500", 0x34325241}) syz_open_dev$loop(&(0x7f0000000080), 0xffffffffffffffff, 0x420401) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r4 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffffd, 0x6) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x40000000) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 3.954985481s ago: executing program 1 (id=5004): r0 = syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x9d, 0xdf, 0xcf, 0x40, 0xc45, 0x6011, 0xc51b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x30, 0x5, "", [{{0x9, 0x4, 0x5f, 0x16, 0x0, 0x98, 0x1d, 0x60, 0x10}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1801}}, {0xc5, &(0x7f0000000100)=@string={0xc5, 0x3, "20c636dd865e6eba1254a29530a34ad0266a4b28041d72a65508867ad0138913bd1fac5ca8b375698db2de25f9548e80539a6ab3b53d01bdd87f9e58d490cf7f15c54a5dfc98a0c6412b840c4afaa0ce0787beb0c27ca75a81c646c599e0551af0d32e94db56ffe2fd9c516964f34477a8ebbe526aba0df7b223a785a49e450120c9d860ccd6b533863c62e824569b84feb3514f5e6ce1c1604bba28beedda5731a773c56ee207f5e088391f29db4e25862da3fb711a07317f623e4bc91dec71f24c3f"}}, {0x1a, &(0x7f0000000300)=@string={0x1a, 0x3, "530bb5613ab089d487be816f008d6940c3327f2b018d94b0"}}, {0xda, &(0x7f00000003c0)=@string={0xda, 0x3, "28e5d2162f3ac68fa06cc4111e8943f86ec1a96fa9fba7be53be7f406cd8a0a17e9091b369b18c42ff818821fa320f33af5ab860cce4928ea88cc4e4e763ae538e554eaa5285cdc37aa7644eebb4010aa4350ab01382aaa9abb6aa06d703c60cc3e7a3e0b689ea9627957c7e8ae0b434a1f99d0b41c1450e2503b5617de36c0dda39632a773c8e0747763bfa9137a4998157c54a94ecb6cc34f4e69c452c67e725caacfb023adb06156d8fa990a6b567eb7630ca051b4eddc62899584e05ff6ee3edb0fe0f0aa5b03b808b49f2424f7f4023f5fde33c9d46"}}]}) syz_usb_control_io$lan78xx(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x51, @string={0x51, 0x3, "76071f037485248fd1547dbc002fddefc2ae43eb7988f4d8c10cd33483bd645b0ea4c1deeab82d0a4aefeac6c54be1199ff0366f26acb112c3f547886ded637b848d58e3ea87b2880ae5cc895ac3ac"}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002fc0)={0x2c, &(0x7f0000002dc0)={0x20, 0x0, 0x3, "a9c8f1"}, 0x0, 0x0, 0x0, 0x0}) 3.722832171s ago: executing program 0 (id=5005): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001240)) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) socket$key(0xf, 0x3, 0x2) 3.650144527s ago: executing program 0 (id=5006): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x18, 0x1, 0xf3, "2a9d1bfc", "025074b2"}}, 0x0}, 0x0) syz_usb_connect$uac3(0x2, 0xa6, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x65, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x3, 0x90, 0x2, {0x8, 0xb, 0x0, 0x2, 0x1, 0x26}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x53, 0x3, 0x9, 0xee, "555e9f80a84804"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x9, 0x2, {0xa, 0x25, 0x25, 0x5, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x6a5f, 0xb97, 0x1, 0x8, 0x3, 0x5, 0xf6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x2, 0x6, {0xa, 0x25, 0x25, 0x0, 0x6, 0x6}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0xfb, 0xd, 0x5, 0x40, 0xa9}, 0xe7, &(0x7f0000000500)={0x5, 0xf, 0xe7, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "48f093aa077fad6d481bb3879076eddd"}, @generic={0xbd, 0x10, 0x3, "89bd80129e199ff72e5360affc1be7b36a2300199cb3ae039ecffa18a15810f33e1b2a43cfc21ba7b1a680dc94b6697f635b3944372d6271664bf5ce98c3a7d9d7c304b5260294fb9ccfa66db5db3f6594c90948562921426e1301896d1b7df7a620c5762564ddc1ff0b730a793b1ddc58d8d2df2f59bb0c84e19899c90fa8b99a13007515bc775d67cb259234fbd2574dee0e0236530392c860cf9073e0dacbfa5fb187782401bf10a327863b66558d081acf940d0a48c468ac"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x82, 0x7, 0xc, 0x6, 0x7f}, @ptm_cap={0x3}]}, 0x4, [{0x3b, &(0x7f0000000600)=@string={0x3b, 0x3, "ed160ab261fed017ebb9a1649d0097696302cec68feaad4b6be97d89d72582d174953233a9e0c7c75ba8e7319799fe995159a0842e9911579f"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc0a}}, {0x54, &(0x7f0000000680)=@string={0x54, 0x3, "a61916be4412cab8eab2ac144c068a7c0a513dae3550b7da4eec3fd760aa3eff75e23f734764fdb71c7600f71ccc911953cb4402eb3395eee0fec481060a1736f57e601d41273835fc36591c6443eb63c14f"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.330862361s ago: executing program 1 (id=5007): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x22d4, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x79, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x9, 0xf9}}}}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x129081, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc4c03d16, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x7, 0xc7e0, 0x7ff, 0x10, 0x0, 0x10001, 0x1, 0xc16, 0x7, 0xb01, 0x6, 0x200000000, 0x9, 0x9, 0xfffffffffffffffb], 0x30000, 0x2a4110}) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205000000b748e84f54f00655af"], 0x0}, 0x0) 3.089434479s ago: executing program 2 (id=5009): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="40691700000095e03b0b68a4fd7f4ddce07a0ef431a606a16ee3a67a08"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.421462059s ago: executing program 2 (id=5011): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x13, 0x1, 0xfff7fffc, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x14004800}, 0x400c8c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod$loop(&(0x7f0000000040)='./file0/file0\x00', 0x20, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x80201, 0x1b0) close_range(r1, 0xffffffffffffffff, 0x0) 1.224126468s ago: executing program 2 (id=5012): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x7ffffffff000, &(0x7f0000000c00)={0x11, 0x8848, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) 1.094830677s ago: executing program 2 (id=5013): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xffffffe5, 0x9, 0x0, 0xbdb00000, 0x2, "fec9d3ff72cfd4a0ba3187877ceab9979961d3", 0xa, 0x3}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0x2020) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_create_resource$binfmt(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r4, 0x0, r5, 0x0, 0x80, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000413, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xb2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r6 = inotify_init1(0x800) pread64(r6, &(0x7f0000000180)=""/218, 0xda, 0x3) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x600407ed, &(0x7f0000000000)={0x2, 0x24e23, @multicast2}, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000040)='securityfs\x00', 0x80cc10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x6609, 0x0) 1.085315153s ago: executing program 8 (id=5014): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001240)) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) socket$key(0xf, 0x3, 0x2) 898.741003ms ago: executing program 8 (id=5015): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0xd, 0x4, 0xa, 0xffffffff}]}) close_range(r0, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) 758.966691ms ago: executing program 8 (id=5016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0xff0f000000000000) 723.64894ms ago: executing program 8 (id=5017): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0xc084}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 650.537254ms ago: executing program 8 (id=5018): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r1, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x60, 0x3, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) close(r0) 546.925574ms ago: executing program 8 (id=5019): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c0904002501000001000905010220"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x90, 0xc9, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xfe, {0x9, 0x21, 0xff7f, 0x7a, 0x1, {0x22, 0xfa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x5, 0x44}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x3, 0xa}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x91, &(0x7f0000000100)=@string={0x91, 0x3, "739dcd405b51bbc834e688139dcbf40c50bcdeff0d039cb4688e490c89f537fe933615d288952a704a62656686fe09325d18d66a8fd98c1cc85cefed1c4544991fdd65cdeb98781daf85cada1e261ea1beeff898860263a1b4d5f79c99dec42d75ddec77c9dfd42672ebdaf0b9b4d3e5a3a07bb9353031f0d3af0c0eb4a4d202af6a681b0c3a3da30770555d9bad8a"}}, {0xb9, &(0x7f0000000240)=@string={0xb9, 0x3, "51998cfdb3d86dd536930785151fb850dd0970a66abdfd6a4d4a44ab2fa836091177ea26c3f8c1ba69062fdca0cf215dbd25cdd7fa82422f4de41dadee73bf5f69ee8a3610ef096dd82af35984d7335dac8e41e1604cf92ed7312403d9da68dcfc7a542851e0df8321aaad2615ddf4b716921014f61aee359c8b52d586fb133182f22d5c07c7e10634a0641d81a8e44143bd3a94c02a1e270bd04068ea2286974cf8eef57f26a3ef5355b8bb7bb0c2ec7703b1bc51cc20"}}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usbip_server_init(0x5) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/177, 0xb1}], 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcd", 0x2) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) fcntl$setlease(r4, 0x400, 0x1) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(r3, 0x0, 0x0) 508.84349ms ago: executing program 0 (id=5020): unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_ublk_setup_io_uring(0x5424, &(0x7f0000000280)={0x0, 0xf756, 0x40, 0x1, 0x85, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x2, 0x20, r5, 0x0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2}, 0x0, 0x44}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 374.488397ms ago: executing program 0 (id=5021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0f5ff000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000014000000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 230.751894ms ago: executing program 1 (id=5022): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x6fbd, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)='o', 0x1}], 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x1) connect$bt_l2cap(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0xf6, 0x6, 0xe5, 0x0, 0x7ff, 0xdc, 0xd, 0x9, 0x9e, 0x9, 0x7, 0x9, 0x0, 0x1000, 0x5, 0x3, 0x9, 0x0, 0x6, '\x00', 0x85, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x110, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001], 0x1000, 0x4fb40}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000100)={r11, 0x200, 0x20}, &(0x7f0000000140)=0xc) fremovexattr(r8, &(0x7f0000000a40)=@known='user.incfs.metadata\x00') r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r12, 0x7a9, 0x0) setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f00000000c0)=0xffff1884, 0x4) 230.561335ms ago: executing program 0 (id=5023): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000001240)) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB='\a'], 0x0) 165.182836ms ago: executing program 2 (id=5024): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000003080070726f66696c65000705040066226f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 0s ago: executing program 2 (id=5025): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020cd0cb1004000010203010902690003706e0109900d080b0002010c2008090400000001012000092401ffff040900ff09040100000102200009040101010102200009050109000200220808250100030807000904020000010220000904020101010220000905820910000908a008"], 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a00000000000000000000000000000000000000000008000000000000000000080012000200"], 0xa0}}, 0x40) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="120101020000002082058d0040000102030109026e000301004002080b0200012030000904000000010130000a24010f0a00010000000904010000010230000904010101010230000905010940000303100a252508000000030b00090402000001023000090400010101023000090582"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pidfd_send_signal(r5, 0x14, 0x0, 0x0) userfaultfd(0x801) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): eturn_address+0x4d/0x90 [ 1297.017787][T21436] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1297.017802][T21436] ? arch_stack_walk+0xfb/0x150 [ 1297.017819][T21436] ? stack_trace_save+0xa9/0x100 [ 1297.017833][T21436] ? __pfx_stack_trace_save+0x10/0x10 [ 1297.017849][T21436] ? stack_depot_save_flags+0x33/0x7f0 [ 1297.017865][T21436] ? __lock_acquire+0x670/0x2e50 [ 1297.017882][T21436] ? kasan_save_track+0x4f/0x80 [ 1297.017896][T21436] ? kasan_save_track+0x3e/0x80 [ 1297.017910][T21436] ? kasan_save_free_info+0x40/0x50 [ 1297.017922][T21436] ? __kasan_slab_free+0x5c/0x80 [ 1297.017931][T21436] ? kmem_cache_free+0x182/0x650 [ 1297.017946][T21436] ? get_signal+0x9e7/0x12c0 [ 1297.017957][T21436] ? arch_do_signal_or_restart+0xbb/0x860 [ 1297.017969][T21436] ? irqentry_exit+0x2ba/0x910 [ 1297.017980][T21436] ? asm_exc_page_fault+0x26/0x30 [ 1297.018012][T21436] ? proc_coredump_connector+0x187/0x4e0 [ 1297.018035][T21436] ? _raw_spin_unlock_irq+0x23/0x50 [ 1297.018048][T21436] get_signal+0x1094/0x12c0 [ 1297.018075][T21436] arch_do_signal_or_restart+0xbb/0x860 [ 1297.018091][T21436] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1297.018117][T21436] irqentry_exit+0x2ba/0x910 [ 1297.018128][T21436] ? trace_irq_disable+0x3b/0x140 [ 1297.018147][T21436] asm_exc_page_fault+0x26/0x30 [ 1297.018157][T21436] RIP: 0033:0x7f1ca5053bd7 [ 1297.018168][T21436] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1297.018178][T21436] RSP: 002b:00007f1ca5faf120 EFLAGS: 00010202 [ 1297.018188][T21436] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1ca519e159 [ 1297.018196][T21436] RDX: 00007f1ca5faf140 RSI: 00007f1ca5faf270 RDI: 000000000000000b [ 1297.018203][T21436] RBP: 00007f1ca5235024 R08: 0000000000000000 R09: 0000000000000000 [ 1297.018210][T21436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1297.018217][T21436] R13: 00007f1ca5426038 R14: 00007f1ca5425fa0 R15: 00007fffb6e1fd48 [ 1297.018234][T21436] [ 1297.037875][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 1297.180205][ T5689] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1297.180234][ T5689] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1297.202608][ T5689] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.202648][ T5689] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1297.202670][ T5689] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1297.229580][T21436] memory: usage 307200kB, limit 307200kB, failcnt 22880 [ 1297.229592][T21436] memory+swap: usage 413320kB, limit 9007199254740988kB, failcnt 0 [ 1297.229601][T21436] kmem: usage 2436kB, limit 9007199254740988kB, failcnt 0 [ 1297.229607][T21436] Memory cgroup stats for /syz4: [ 1297.229785][T21436] cache 311717888 [ 1297.229790][T21436] rss 360448 [ 1297.229794][T21436] rss_huge 0 [ 1297.229798][T21436] shmem 311717888 [ 1297.229802][T21436] mapped_file 119865344 [ 1297.229806][T21436] dirty 0 [ 1297.229810][T21436] writeback 0 [ 1297.229814][T21436] workingset_refault_anon 707 [ 1297.229818][T21436] workingset_refault_file 193 [ 1297.229822][T21436] swap 108666880 [ 1297.229826][T21436] swapcached 117202944 [ 1297.229829][T21436] pgpgin 191911 [ 1297.229833][T21436] pgpgout 115720 [ 1297.229837][T21436] pgfault 131318 [ 1297.229841][T21436] pgmajfault 104 [ 1297.229858][T21436] inactive_anon 280707072 [ 1297.229863][T21436] active_anon 31371264 [ 1297.229867][T21436] inactive_file 0 [ 1297.229871][T21436] active_file 0 [ 1297.229875][T21436] unevictable 0 [ 1297.229879][T21436] hierarchical_memory_limit 314572800 [ 1297.229883][T21436] hierarchical_memsw_limit 9223372036854771712 [ 1297.229888][T21436] total_cache 311717888 [ 1297.229891][T21436] total_rss 360448 [ 1297.229895][T21436] total_rss_huge 0 [ 1297.229899][T21436] total_shmem 311717888 [ 1297.229903][T21436] total_mapped_file 119865344 [ 1297.229907][T21436] total_dirty 0 [ 1297.229911][T21436] total_writeback 0 [ 1297.229915][T21436] total_workingset_refault_anon 707 [ 1297.229919][T21436] total_workingset_refault_file 193 [ 1297.229924][T21436] total_swap 108666880 [ 1297.229928][T21436] total_swapcached 117202944 [ 1297.229932][T21436] total_pgpgin 191911 [ 1297.229936][T21436] total_pgpgout 115720 [ 1297.229940][T21436] total_pgfault 131318 [ 1297.229944][T21436] total_pgmajfault 104 [ 1297.229948][T21436] total_inactive_anon 280707072 [ 1297.229952][T21436] total_active_anon 31371264 [ 1297.229956][T21436] total_inactive_file 0 [ 1297.229960][T21436] total_active_file 0 [ 1297.229964][T21436] total_unevictable 0 [ 1297.229968][T21436] anon_cost 0 [ 1297.229971][T21436] file_cost 0 [ 1297.229976][T21436] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4638,pid=21436,uid=0 [ 1297.230252][T21436] Memory cgroup out of memory: Killed process 21436 (syz.4.4638) total-vm:200560kB, anon-rss:1376kB, file-rss:20612kB, shmem-rss:95412kB, UID:0 pgtables:288kB oom_score_adj:1000 [ 1297.299848][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.299864][ T5689] usb 3-1: Product: syz [ 1297.299872][ T5689] usb 3-1: Manufacturer: syz [ 1297.299880][ T5689] usb 3-1: SerialNumber: syz [ 1297.998129][ T5689] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1297.998365][ T5689] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1298.025859][T21757] openvswitch: netlink: IP tunnel dst address not specified [ 1298.100685][ T33] oom_reaper: reaped process 21423 (syz.4.4634), now anon-rss:0kB, file-rss:20480kB, shmem-rss:10180kB [ 1298.371344][ T5689] usb 3-1: USB disconnect, device number 4 [ 1298.467625][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.539565][T13999] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1298.691342][T13999] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1298.702637][T13999] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.702674][T13999] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1298.702694][T13999] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1298.702708][T13999] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1298.702733][T13999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.801222][ T2106] block nbd2: Possible stuck request ffff888027ca7000: control (read@0,1024B). Runtime 480 seconds [ 1298.801257][ T2106] block nbd2: Possible stuck request ffff888027ca71c0: control (read@1024,1024B). Runtime 480 seconds [ 1298.801299][ T2106] block nbd2: Possible stuck request ffff888027ca7380: control (read@2048,1024B). Runtime 480 seconds [ 1298.801316][ T2106] block nbd2: Possible stuck request ffff888027ca7540: control (read@3072,1024B). Runtime 480 seconds [ 1299.232120][ T5689] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1299.259713][ T9321] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1299.397882][ T5689] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1299.407820][ T9321] usb 3-1: device descriptor read/64, error -71 [ 1299.416518][ T5689] usb 5-1: config index 0 descriptor too short (expected 441, got 18) [ 1299.424947][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.445193][ T5689] usb 5-1: config 0 descriptor?? [ 1299.456352][ T5689] pwc: Askey VC010 type 2 USB webcam detected. [ 1299.640277][ T9321] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1299.682452][ T5689] pwc: send_video_command error -71 [ 1299.682476][ T5689] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1299.682544][ T5689] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1299.711997][ T5689] usb 5-1: USB disconnect, device number 17 [ 1299.769490][ T9321] usb 3-1: device descriptor read/64, error -71 [ 1299.881574][ T9321] usb usb3-port1: attempt power cycle [ 1300.022718][T21805] FAULT_INJECTION: forcing a failure. [ 1300.022718][T21805] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.022750][T21805] CPU: 0 UID: 0 PID: 21805 Comm: syz.8.4767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.022773][T21805] Tainted: [L]=SOFTLOCKUP [ 1300.022778][T21805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1300.022785][T21805] Call Trace: [ 1300.022790][T21805] [ 1300.022796][T21805] dump_stack_lvl+0xe8/0x150 [ 1300.022816][T21805] should_fail_ex+0x3eb/0x540 [ 1300.022835][T21805] should_failslab+0xa8/0x100 [ 1300.022849][T21805] __kmalloc_noprof+0xfe/0x720 [ 1300.022865][T21805] ? prepare_creds+0x30/0x820 [ 1300.022876][T21805] ? security_prepare_creds+0x52/0x360 [ 1300.022891][T21805] ? security_prepare_creds+0x52/0x360 [ 1300.022906][T21805] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1300.022922][T21805] security_prepare_creds+0x52/0x360 [ 1300.022938][T21805] prepare_creds+0x57d/0x820 [ 1300.022951][T21805] lookup_user_key+0x1f2/0x1150 [ 1300.022970][T21805] ? __pfx_lookup_user_key+0x10/0x10 [ 1300.022987][T21805] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1300.023006][T21805] ? _copy_from_user+0x94/0xb0 [ 1300.023018][T21805] ? memdup_user+0x99/0xd0 [ 1300.023036][T21805] __se_sys_add_key+0x315/0x420 [ 1300.023050][T21805] ? __pfx___se_sys_add_key+0x10/0x10 [ 1300.023067][T21805] ? __x64_sys_add_key+0x20/0xc0 [ 1300.023081][T21805] do_syscall_64+0x166/0x520 [ 1300.023094][T21805] ? trace_irq_disable+0x3b/0x140 [ 1300.023110][T21805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.023121][T21805] ? clear_bhb_loop+0x70/0xc0 [ 1300.023135][T21805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.023145][T21805] RIP: 0033:0x7fc81619e159 [ 1300.023157][T21805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.023167][T21805] RSP: 002b:00007fc8170af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1300.023180][T21805] RAX: ffffffffffffffda RBX: 00007fc816425fa0 RCX: 00007fc81619e159 [ 1300.023188][T21805] RDX: 0200000000000000 RSI: 0000200000000180 RDI: 0000200000000540 [ 1300.023196][T21805] RBP: 00007fc816235024 R08: ffffffffffffffff R09: 0000000000000000 [ 1300.023204][T21805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.023211][T21805] R13: 00007fc816426038 R14: 00007fc816425fa0 R15: 00007ffefa027308 [ 1300.023227][T21805] [ 1300.086712][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.270397][ T9321] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1300.317464][ T9321] usb 3-1: device descriptor read/8, error -71 [ 1300.549910][ T9321] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1300.577433][ T9321] usb 3-1: device descriptor read/8, error -71 [ 1300.680921][ T9321] usb usb3-port1: unable to enumerate USB device [ 1300.819140][T21820] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4769'. [ 1301.100312][ T9321] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1301.250466][ T9321] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1301.261635][ T9321] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1301.261680][ T9321] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.282729][ T9321] usb 9-1: config 0 descriptor?? [ 1301.503761][ T9321] usbhid 9-1:0.0: can't add hid device: -71 [ 1301.509929][ T9321] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1301.528574][ T9321] usb 9-1: USB disconnect, device number 2 [ 1301.700847][T13999] usb 1-1: USB disconnect, device number 95 [ 1301.966473][ T5689] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1302.129824][T13999] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1302.139315][ T5689] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1302.156841][ T5689] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.156879][ T5689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.188803][ T5689] usb 9-1: config 0 descriptor?? [ 1302.255923][T21836] X25: diagnostic #0 - 00 00 00 [ 1302.279873][T13999] usb 1-1: Using ep0 maxpacket: 8 [ 1302.285420][T13999] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1302.300549][T13999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.300573][T13999] usb 1-1: Product: syz [ 1302.300590][T13999] usb 1-1: Manufacturer: syz [ 1302.300600][T13999] usb 1-1: SerialNumber: syz [ 1302.325239][T13999] usb 1-1: config 0 descriptor?? [ 1302.338047][T13999] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1302.979741][ T9321] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1303.020699][ T5689] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 1303.031157][T21821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.041789][T21821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.052715][ T5689] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input280 [ 1303.141814][ T9321] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 1303.154103][ T9321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.154129][ T9321] usb 3-1: config 0 has no interfaces? [ 1303.154200][ T9321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.194777][ T9321] usb 3-1: config 0 descriptor?? [ 1303.252784][T13999] gspca_sonixj: reg_w1 err -110 [ 1303.252862][T13999] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1303.412395][T13999] usb 9-1: USB disconnect, device number 3 [ 1303.412509][ C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1303.676197][T21849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.686949][T21849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.705132][ T5689] usb 3-1: USB disconnect, device number 9 [ 1303.873336][T21874] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1303.896411][T21874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.916023][T21874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.931846][T21874] bond0 (unregistering): Released all slaves [ 1304.313269][T21893] FAULT_INJECTION: forcing a failure. [ 1304.313269][T21893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.313301][T21893] CPU: 0 UID: 0 PID: 21893 Comm: syz.2.4785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.313317][T21893] Tainted: [L]=SOFTLOCKUP [ 1304.313321][T21893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1304.313328][T21893] Call Trace: [ 1304.313333][T21893] [ 1304.313339][T21893] dump_stack_lvl+0xe8/0x150 [ 1304.313359][T21893] should_fail_ex+0x3eb/0x540 [ 1304.313386][T21893] _copy_to_user+0x31/0xb0 [ 1304.313400][T21893] simple_read_from_buffer+0xe1/0x170 [ 1304.313419][T21893] proc_fail_nth_read+0x1bb/0x230 [ 1304.313435][T21893] ? common_file_perm+0x20e/0x2b0 [ 1304.313453][T21893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1304.313469][T21893] ? rw_verify_area+0x24a/0x4c0 [ 1304.313484][T21893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1304.313498][T21893] vfs_read+0x213/0xa80 [ 1304.313514][T21893] ? __pfx___mutex_lock+0x10/0x10 [ 1304.313528][T21893] ? __pfx_vfs_read+0x10/0x10 [ 1304.313542][T21893] ? __fget_files+0x2a/0x420 [ 1304.313557][T21893] ? __fget_files+0x3a2/0x420 [ 1304.313568][T21893] ? __fget_files+0x2a/0x420 [ 1304.313584][T21893] ksys_read+0x150/0x270 [ 1304.313599][T21893] ? __pfx_ksys_read+0x10/0x10 [ 1304.313618][T21893] do_syscall_64+0x166/0x520 [ 1304.313631][T21893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.313641][T21893] ? clear_bhb_loop+0x70/0xc0 [ 1304.313654][T21893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.313664][T21893] RIP: 0033:0x7f43bab5e98e [ 1304.313676][T21893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1304.313685][T21893] RSP: 002b:00007f43bba62fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1304.313698][T21893] RAX: ffffffffffffffda RBX: 00007f43bba636c0 RCX: 00007f43bab5e98e [ 1304.313706][T21893] RDX: 000000000000000f RSI: 00007f43bba630a0 RDI: 0000000000000004 [ 1304.313713][T21893] RBP: 00007f43bba63090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.313720][T21893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.313726][T21893] R13: 00007f43bae26038 R14: 00007f43bae25fa0 R15: 00007ffcaafa6838 [ 1304.313743][T21893] [ 1304.403281][ T9321] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1304.578578][ T9321] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1304.578618][ T9321] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1304.598844][ T9321] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 1304.618257][ T9321] usb 9-1: string descriptor 0 read error: -22 [ 1304.618341][ T9321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.881258][T21900] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1305.001864][T13999] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1305.061654][ T9] usb 1-1: USB disconnect, device number 96 [ 1305.150530][T13999] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1305.161885][T13999] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.176966][T13999] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1305.176991][T13999] usb 3-1: Product: syz [ 1305.177008][T13999] usb 3-1: Manufacturer: syz [ 1305.177018][T13999] usb 3-1: SerialNumber: syz [ 1305.211299][T13999] usb 3-1: config 0 descriptor?? [ 1305.236243][T13999] gspca_main: conex-2.14.0 probing 0572:0041 [ 1305.248463][T21887] mmap: syz.8.4784 (21887): VmData 37597184 exceed data ulimit 262144. Update limits or use boot option ignore_rlimit_data. [ 1305.283588][ T9321] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1305.315867][ T9321] usb 9-1: USB disconnect, device number 4 [ 1305.366253][T21912] jffs2: notice: (21912) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1305.383761][T21912] jffs2 filesystem being mounted at /103/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1305.438102][T21896] openvswitch: netlink: IP tunnel dst address not specified [ 1305.727832][T13999] usb 3-1: USB disconnect, device number 10 [ 1306.269991][T13999] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1306.425947][T13999] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1306.439783][T13999] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.439822][T13999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.463140][T13999] usb 9-1: config 0 descriptor?? [ 1306.700115][T13999] usbhid 9-1:0.0: can't add hid device: -71 [ 1306.706222][T13999] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1306.733316][T13999] usb 9-1: USB disconnect, device number 5 [ 1307.000967][ T9321] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1307.153631][ T9321] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1307.153677][ T9321] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1307.177924][ T9321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1307.177950][ T9321] usb 1-1: Product: syz [ 1307.177967][ T9321] usb 1-1: Manufacturer: syz [ 1307.209545][T13999] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1307.221080][ T9321] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1307.372768][T13999] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1307.384991][T13999] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.385029][T13999] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.415035][T13999] usb 9-1: config 0 descriptor?? [ 1307.468281][T21960] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4796'. [ 1307.652392][T21968] program syz.2.4798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1307.700178][T21968] loop0: detected capacity change from 0 to 1 [ 1307.741420][T21968] ldm_validate_privheads(): Disk read failed. [ 1307.741540][T21968] loop0: [ 1307.741565][T21968] loop0: partition table partially beyond EOD, truncated [ 1307.845012][T21948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.845316][T21948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.970439][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1308.130814][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1308.143580][ T9] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 1308.143605][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1308.143645][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 199, changing to 7 [ 1308.183812][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.183837][ T9] usb 5-1: Product: syz [ 1308.183855][ T9] usb 5-1: Manufacturer: syz [ 1308.183865][ T9] usb 5-1: SerialNumber: syz [ 1308.282183][T13999] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 1308.294486][T21925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.294795][T21925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.315845][T13999] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input281 [ 1308.445306][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1308.534314][ T9] usb 5-1: USB disconnect, device number 18 [ 1308.602523][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.629078][ C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1308.629122][T13999] usb 9-1: USB disconnect, device number 6 [ 1308.875223][ T9321] uvcvideo 1-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 1308.886467][ T9321] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1308.886511][ T9321] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 1308.896266][ T9321] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71 [ 1308.938073][ T9321] usb 1-1: USB disconnect, device number 97 [ 1309.039134][T21996] syzkaller0: entered promiscuous mode [ 1309.039160][T21996] syzkaller0: entered allmulticast mode [ 1309.256506][T22011] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.4805'. [ 1309.590020][ T9321] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1309.734034][ T9321] usb 5-1: device descriptor read/64, error -71 [ 1309.760258][T13999] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1309.890024][T13999] usb 1-1: device descriptor read/64, error -71 [ 1309.971836][ T9321] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1310.044274][ T834] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1310.112262][ T9321] usb 5-1: device descriptor read/64, error -71 [ 1310.131747][T13999] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1310.158302][T22048] syzkaller1: entered promiscuous mode [ 1310.164482][T22048] syzkaller1: entered allmulticast mode [ 1310.219652][ T834] usb 3-1: Using ep0 maxpacket: 8 [ 1310.225110][ T9321] usb usb5-port1: attempt power cycle [ 1310.231388][ T834] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1310.244731][ T834] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1310.244754][ T834] usb 3-1: config 2 has no interface number 0 [ 1310.244785][ T834] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1310.269621][T13999] usb 1-1: device descriptor read/64, error -71 [ 1310.277496][ T834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.277518][ T834] usb 3-1: Product: syz [ 1310.277535][ T834] usb 3-1: Manufacturer: syz [ 1310.277545][ T834] usb 3-1: SerialNumber: syz [ 1310.357950][T22051] netlink: 'syz.8.4812': attribute type 2 has an invalid length. [ 1310.366074][T22051] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4812'. [ 1310.379738][T13999] usb usb1-port1: attempt power cycle [ 1310.569491][ T9321] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1310.590906][ T9321] usb 5-1: device descriptor read/8, error -71 [ 1310.719559][T13999] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1310.728209][ T834] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1310.740102][T13999] usb 1-1: device descriptor read/8, error -71 [ 1310.756604][ T834] usb 3-1: USB disconnect, device number 11 [ 1310.829444][ T9321] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1310.850519][ T9321] usb 5-1: device descriptor read/8, error -71 [ 1310.960543][ T9321] usb usb5-port1: unable to enumerate USB device [ 1310.979429][T13999] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1310.999917][T13999] usb 1-1: device descriptor read/8, error -71 [ 1311.109963][T13999] usb usb1-port1: unable to enumerate USB device [ 1311.179453][ T834] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1311.329928][ T834] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1311.341412][ T834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.352387][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.365179][ T834] usb 9-1: config 0 descriptor?? [ 1311.499438][T13999] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1311.578650][ T834] usbhid 9-1:0.0: can't add hid device: -71 [ 1311.578733][ T834] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1311.599136][ T834] usb 9-1: USB disconnect, device number 7 [ 1311.650242][T13999] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1311.660403][T13999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.673924][T13999] usb 3-1: config 0 descriptor?? [ 1311.887344][T13999] usb 3-1: Cannot read MAC address [ 1311.887484][T13999] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1311.911244][T13999] usb 3-1: USB disconnect, device number 12 [ 1312.040087][ T834] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1312.190905][ T834] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1312.201090][ T834] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.201135][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.224213][ T834] usb 9-1: config 0 descriptor?? [ 1312.375200][T22059] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1312.456749][T22065] FAULT_INJECTION: forcing a failure. [ 1312.456749][T22065] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1312.477089][T22065] CPU: 0 UID: 0 PID: 22065 Comm: syz.2.4818 Tainted: G L syzkaller #0 PREEMPT(full) [ 1312.477109][T22065] Tainted: [L]=SOFTLOCKUP [ 1312.477115][T22065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1312.477122][T22065] Call Trace: [ 1312.477127][T22065] [ 1312.477132][T22065] dump_stack_lvl+0xe8/0x150 [ 1312.477152][T22065] should_fail_ex+0x3eb/0x540 [ 1312.477172][T22065] prepare_alloc_pages+0x223/0x600 [ 1312.477195][T22065] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1312.477216][T22065] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1312.477234][T22065] ? __pfx_policy_nodemask+0x10/0x10 [ 1312.477253][T22065] alloc_pages_mpol+0x21e/0x390 [ 1312.477267][T22065] alloc_pages_noprof+0xb1/0x2b0 [ 1312.477280][T22065] folio_alloc_noprof+0x1e/0x30 [ 1312.477292][T22065] filemap_alloc_folio_noprof+0x111/0x460 [ 1312.477307][T22065] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1312.477324][T22065] __filemap_get_folio_mpol+0x402/0x1000 [ 1312.477342][T22065] bdev_getblk+0x1f4/0x6e0 [ 1312.477434][T22065] __ext4_sb_bread_gfp+0x6e/0x210 [ 1312.477509][T22065] ext4_xattr_set_credits+0x12f/0x310 [ 1312.477572][T22065] ext4_set_acl+0x224/0x550 [ 1312.477587][T22065] ? __pfx_ext4_set_acl+0x10/0x10 [ 1312.477598][T22065] ? down_write+0x16b/0x200 [ 1312.477614][T22065] ? evm_revalidate_status+0x4f/0xb0 [ 1312.477653][T22065] ? inode_owner_or_capable+0xf0/0x1c0 [ 1312.477672][T22065] vfs_set_acl+0x8a0/0xb50 [ 1312.477695][T22065] filename_setxattr+0x305/0x630 [ 1312.477714][T22065] ? __pfx_filename_setxattr+0x10/0x10 [ 1312.477729][T22065] ? do_getname+0x151/0x250 [ 1312.477742][T22065] path_setxattrat+0x408/0x450 [ 1312.477763][T22065] ? __pfx_path_setxattrat+0x10/0x10 [ 1312.477792][T22065] ? ksys_write+0x242/0x270 [ 1312.477807][T22065] ? __pfx_ksys_write+0x10/0x10 [ 1312.477823][T22065] __x64_sys_setxattr+0xbc/0xe0 [ 1312.477839][T22065] do_syscall_64+0x166/0x520 [ 1312.477851][T22065] ? trace_irq_disable+0x3b/0x140 [ 1312.477867][T22065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.477878][T22065] ? clear_bhb_loop+0x70/0xc0 [ 1312.477891][T22065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.477901][T22065] RIP: 0033:0x7f43bab9e159 [ 1312.477913][T22065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.477922][T22065] RSP: 002b:00007f43bba63028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1312.477935][T22065] RAX: ffffffffffffffda RBX: 00007f43bae25fa0 RCX: 00007f43bab9e159 [ 1312.477943][T22065] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000200000000040 [ 1312.477951][T22065] RBP: 00007f43bba63090 R08: 0000000000000002 R09: 0000000000000000 [ 1312.477958][T22065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.477965][T22065] R13: 00007f43bae26038 R14: 00007f43bae25fa0 R15: 00007ffcaafa6838 [ 1312.477983][T22065] [ 1312.909901][T22070] FAULT_INJECTION: forcing a failure. [ 1312.909901][T22070] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.922904][T22070] CPU: 0 UID: 0 PID: 22070 Comm: syz.0.4819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1312.922922][T22070] Tainted: [L]=SOFTLOCKUP [ 1312.922926][T22070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1312.922933][T22070] Call Trace: [ 1312.922938][T22070] [ 1312.922943][T22070] dump_stack_lvl+0xe8/0x150 [ 1312.922963][T22070] should_fail_ex+0x3eb/0x540 [ 1312.922983][T22070] should_failslab+0xa8/0x100 [ 1312.922996][T22070] __kmalloc_cache_noprof+0xa3/0x600 [ 1312.923013][T22070] ? sctp_auth_shkey_create+0x7a/0x1b0 [ 1312.923031][T22070] ? sctp_auth_shkey_create+0x7a/0x1b0 [ 1312.923049][T22070] sctp_auth_shkey_create+0x7a/0x1b0 [ 1312.923067][T22070] sctp_endpoint_new+0x457/0xa70 [ 1312.923084][T22070] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1312.923099][T22070] ? __raw_spin_lock_init+0x45/0x100 [ 1312.923115][T22070] sctp_clone_sock+0x533/0x1680 [ 1312.923132][T22070] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1312.923146][T22070] sctp_accept+0x564/0x720 [ 1312.923156][T22070] ? file_init_path+0x3b/0x5a0 [ 1312.923174][T22070] ? __pfx_sctp_accept+0x10/0x10 [ 1312.923184][T22070] ? alloc_file_pseudo+0x156/0x1e0 [ 1312.923195][T22070] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1312.923208][T22070] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1312.923218][T22070] ? security_inode_alloc+0xd5/0x310 [ 1312.923230][T22070] ? inode_init_always_gfp+0x994/0xd30 [ 1312.923245][T22070] inet_accept+0xb2/0x150 [ 1312.923260][T22070] do_accept+0x521/0x750 [ 1312.923276][T22070] ? __pfx_do_accept+0x10/0x10 [ 1312.923299][T22070] __sys_accept4+0x139/0x230 [ 1312.923313][T22070] ? __pfx___sys_accept4+0x10/0x10 [ 1312.923325][T22070] ? __pfx_ksys_write+0x10/0x10 [ 1312.923342][T22070] __x64_sys_accept4+0x9a/0xb0 [ 1312.923355][T22070] do_syscall_64+0x166/0x520 [ 1312.923367][T22070] ? trace_irq_disable+0x3b/0x140 [ 1312.923383][T22070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.923394][T22070] ? clear_bhb_loop+0x70/0xc0 [ 1312.923407][T22070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.923418][T22070] RIP: 0033:0x7ff04c99e159 [ 1312.923428][T22070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.923438][T22070] RSP: 002b:00007ff04d92f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1312.923451][T22070] RAX: ffffffffffffffda RBX: 00007ff04cc25fa0 RCX: 00007ff04c99e159 [ 1312.923459][T22070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1312.923466][T22070] RBP: 00007ff04d92f090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.923472][T22070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.923479][T22070] R13: 00007ff04cc26038 R14: 00007ff04cc25fa0 R15: 00007fff1869ceb8 [ 1312.923496][T22070] [ 1312.968460][T22070] IPv4: Attempt to release TCP socket in state 10 ffff888071be8940 [ 1313.206729][ T834] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 1313.252864][ T834] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input282 [ 1313.264906][T22055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.265186][T22055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.622095][ C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1313.622131][T13999] usb 9-1: USB disconnect, device number 8 [ 1313.664319][T22090] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4825'. [ 1313.767636][T22096] fuse: Unknown parameter '0x0000000000000003' [ 1313.798451][T22097] netlink: 'syz.0.4828': attribute type 2 has an invalid length. [ 1313.813607][T22097] MTDSB: Device #1 doesn't appear to exist [ 1313.813607][T22097] [ 1313.854006][T22091] tmpfs: Cannot change global quota limit on remount [ 1314.041543][T22103] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1314.060529][T22106] rust_binder: Write failure EFAULT in pid:308 [ 1314.200330][T13999] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1314.361551][T13999] usb 3-1: Using ep0 maxpacket: 16 [ 1314.367931][T13999] usb 3-1: New USB device found, idVendor=0853, idProduct=0313, bcdDevice= 0.00 [ 1314.380978][T13999] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1314.381011][T13999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.401398][T13999] usb 3-1: config 0 descriptor?? [ 1314.502256][ T5689] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1314.680300][ T5689] usb 9-1: Using ep0 maxpacket: 16 [ 1314.694271][ T5689] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1314.694310][ T5689] usb 9-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1314.713283][ T5689] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 1314.734619][ T5689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.734644][ T5689] usb 9-1: Product: syz [ 1314.734661][ T5689] usb 9-1: Manufacturer: syz [ 1314.734687][ T5689] usb 9-1: SerialNumber: syz [ 1314.777649][ T5689] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1314.855259][T13999] input: HID 0853:0313 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0853:0313.0095/input/input283 [ 1314.951675][T13999] topre 0003:0853:0313.0095: input,hidraw0: USB HID v0.00 Joystick [HID 0853:0313] on usb-dummy_hcd.2-1/input0 [ 1315.007404][T22114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.007701][T22114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.040447][ T5689] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 1315.040491][ T5689] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1315.175988][T13999] usb 3-1: USB disconnect, device number 13 [ 1315.209039][ T5689] usb 9-1: USB disconnect, device number 9 [ 1315.246041][T22131] fido_id[22131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1315.364152][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1315.409944][ T9321] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1315.571845][ T9321] usb 1-1: New USB device found, idVendor=056a, idProduct=0021, bcdDevice= 0.00 [ 1315.582039][ T9321] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1315.582066][ T9321] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1315.582088][ T9321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1315.582108][ T9321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.639626][ T9321] usb 1-1: config 0 descriptor?? [ 1315.797595][T22143] FAULT_INJECTION: forcing a failure. [ 1315.797595][T22143] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.797629][T22143] CPU: 0 UID: 0 PID: 22143 Comm: syz.2.4838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.797647][T22143] Tainted: [L]=SOFTLOCKUP [ 1315.797652][T22143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1315.797659][T22143] Call Trace: [ 1315.797664][T22143] [ 1315.797669][T22143] dump_stack_lvl+0xe8/0x150 [ 1315.797689][T22143] should_fail_ex+0x3eb/0x540 [ 1315.797709][T22143] should_failslab+0xa8/0x100 [ 1315.797722][T22143] __kmalloc_cache_noprof+0xa3/0x600 [ 1315.797738][T22143] ? __pollwait+0x27f/0x430 [ 1315.797748][T22143] ? __pollwait+0x27f/0x430 [ 1315.797761][T22143] __pollwait+0x27f/0x430 [ 1315.797772][T22143] ? __pfx___pollwait+0x10/0x10 [ 1315.797782][T22143] pipe_poll+0x20f/0x570 [ 1315.797799][T22143] ? __pfx_pipe_poll+0x10/0x10 [ 1315.797815][T22143] do_sys_poll+0x990/0x1110 [ 1315.797829][T22143] ? do_sys_poll+0x401/0x1110 [ 1315.797844][T22143] ? __pfx_do_sys_poll+0x10/0x10 [ 1315.797858][T22143] ? lock_acquire+0x115/0x350 [ 1315.797874][T22143] ? __pfx___pollwait+0x10/0x10 [ 1315.797886][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797899][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797911][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797924][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797936][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797948][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797961][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797973][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.797985][T22143] ? __pfx_pollwake+0x10/0x10 [ 1315.798014][T22143] ? set_user_sigmask+0xcd/0x1c0 [ 1315.798027][T22143] ? __pfx_set_user_sigmask+0x10/0x10 [ 1315.798039][T22143] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1315.798056][T22143] __se_sys_ppoll+0x209/0x2b0 [ 1315.798067][T22143] ? fput+0xa0/0xd0 [ 1315.798079][T22143] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1315.798090][T22143] ? __pfx_ksys_write+0x10/0x10 [ 1315.798106][T22143] ? __x64_sys_ppoll+0x20/0xc0 [ 1315.798118][T22143] do_syscall_64+0x166/0x520 [ 1315.798130][T22143] ? trace_irq_disable+0x3b/0x140 [ 1315.798146][T22143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.798157][T22143] ? clear_bhb_loop+0x70/0xc0 [ 1315.798170][T22143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.798181][T22143] RIP: 0033:0x7f43bab9e159 [ 1315.798192][T22143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.798201][T22143] RSP: 002b:00007f43bba63028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1315.798213][T22143] RAX: ffffffffffffffda RBX: 00007f43bae25fa0 RCX: 00007f43bab9e159 [ 1315.798221][T22143] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1315.798229][T22143] RBP: 00007f43bba63090 R08: 0000000000000000 R09: 0000000000000000 [ 1315.798236][T22143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.798242][T22143] R13: 00007f43bae26038 R14: 00007f43bae25fa0 R15: 00007ffcaafa6838 [ 1315.798258][T22143] [ 1316.045449][T22142] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.4837'. [ 1316.188499][ T9321] wacom 0003:056A:0021.0096: Unknown device_type for 'HID 056a:0021'. Assuming pen. [ 1316.212437][ T9321] wacom 0003:056A:0021.0096: hidraw0: USB HID v80.00 Joystick [HID 056a:0021] on usb-dummy_hcd.0-1/input0 [ 1316.246792][ T9321] input: Wacom Intuos 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0021.0096/input/input284 [ 1316.375619][T22132] netlink: zone id is out of range [ 1316.375641][T22132] netlink: zone id is out of range [ 1316.375656][T22132] netlink: zone id is out of range [ 1316.375662][T22132] netlink: zone id is out of range [ 1316.375684][T22132] netlink: zone id is out of range [ 1316.375690][T22132] netlink: zone id is out of range [ 1316.375696][T22132] netlink: zone id is out of range [ 1316.375702][T22132] netlink: zone id is out of range [ 1316.375708][T22132] netlink: zone id is out of range [ 1316.375715][T22132] netlink: zone id is out of range [ 1316.485812][T22132] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1316.740268][ T9321] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1316.900699][ T9321] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1316.911372][ T9321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.911411][ T9321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.936668][ T9321] usb 5-1: config 0 descriptor?? [ 1317.061636][ T9] usb 1-1: USB disconnect, device number 102 [ 1317.090814][T13999] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1317.154833][ T9321] usbhid 5-1:0.0: can't add hid device: -71 [ 1317.154905][ T9321] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1317.176485][ T9321] usb 5-1: USB disconnect, device number 23 [ 1317.251962][T13999] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1317.260384][T13999] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1317.274636][T13999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.274666][T13999] usb 3-1: Product: syz [ 1317.274677][T13999] usb 3-1: Manufacturer: syz [ 1317.274687][T13999] usb 3-1: SerialNumber: syz [ 1317.522598][T13999] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1317.555516][T13999] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1317.568447][T13999] usb 3-1: USB disconnect, device number 14 [ 1317.590737][ T9321] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1317.601365][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.741708][ T9321] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1317.752429][ T9321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.764335][ T9321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.776583][ T9321] usb 5-1: config 0 descriptor?? [ 1317.960839][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1318.086090][T22181] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4848'. [ 1318.101323][T22181] jffs2: notice: (22181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1318.119897][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1318.131902][T22181] jffs2 filesystem being mounted at /64/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1318.148334][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.148359][ T9] usb 1-1: Product: syz [ 1318.148375][ T9] usb 1-1: Manufacturer: syz [ 1318.148386][ T9] usb 1-1: SerialNumber: syz [ 1318.574385][T22195] tmpfs: Bad value for 'mpol' [ 1318.583984][T22195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4854'. [ 1318.593856][T22195] tmpfs: Bad value for 'mpol' [ 1318.599221][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1318.611983][ T9321] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1318.632519][ T9321] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input287 [ 1318.653823][T22195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.654196][T22195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.879912][T13999] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1318.939645][ T834] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1318.956022][ T5689] usb 5-1: USB disconnect, device number 24 [ 1318.956147][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1319.029650][T13999] usb 9-1: Invalid ep0 maxpacket: 64 [ 1319.081044][T12112] Bluetooth: Error in BCSP hdr checksum [ 1319.100569][ T834] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1319.110760][ T834] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1319.110787][ T834] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.110831][ T834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.151587][ T834] hub 3-1:4.0: USB hub found [ 1319.161122][T13999] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1319.319482][T13999] usb 9-1: Invalid ep0 maxpacket: 64 [ 1319.319689][T13999] usb usb9-port1: attempt power cycle [ 1319.343531][ T13] Bluetooth: Error in BCSP hdr checksum [ 1319.352191][ T834] hub 3-1:4.0: 2 ports detected [ 1319.352246][ T834] usb 3-1: selecting invalid altsetting 1 [ 1319.352261][ T834] hub 3-1:4.0: Using single TT (err -22) [ 1319.570528][ T834] hub 3-1:4.0: config failed, can't get hub status (err -5) [ 1319.602452][ T13] Bluetooth: Error in BCSP hdr checksum [ 1319.626050][ T5624] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 1319.670482][T13999] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 1319.689896][T13999] usb 9-1: Invalid ep0 maxpacket: 64 [ 1319.773910][T22201] FAULT_INJECTION: forcing a failure. [ 1319.773910][T22201] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.787786][T22201] CPU: 0 UID: 0 PID: 22201 Comm: syz.2.4856 Tainted: G L syzkaller #0 PREEMPT(full) [ 1319.787805][T22201] Tainted: [L]=SOFTLOCKUP [ 1319.787810][T22201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1319.787818][T22201] Call Trace: [ 1319.787823][T22201] [ 1319.787831][T22201] dump_stack_lvl+0xe8/0x150 [ 1319.787852][T22201] should_fail_ex+0x3eb/0x540 [ 1319.787872][T22201] should_failslab+0xa8/0x100 [ 1319.787891][T22201] ? security_file_alloc+0x34/0x310 [ 1319.787907][T22201] kmem_cache_alloc_noprof+0xa1/0x600 [ 1319.787922][T22201] ? rcu_is_watching+0x16/0xb0 [ 1319.787935][T22201] ? security_file_alloc+0x34/0x310 [ 1319.787952][T22201] security_file_alloc+0x34/0x310 [ 1319.787967][T22201] init_file+0x90/0x2b0 [ 1319.787979][T22201] alloc_empty_file+0x74/0x1d0 [ 1319.787991][T22201] alloc_file_pseudo+0x115/0x1e0 [ 1319.788004][T22201] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1319.788020][T22201] __se_sys_memfd_secret+0x124/0x300 [ 1319.788034][T22201] do_syscall_64+0x166/0x520 [ 1319.788047][T22201] ? trace_irq_disable+0x3b/0x140 [ 1319.788063][T22201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.788075][T22201] ? clear_bhb_loop+0x70/0xc0 [ 1319.788088][T22201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.788099][T22201] RIP: 0033:0x7f43bab9e159 [ 1319.788111][T22201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.788121][T22201] RSP: 002b:00007f43bba63028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 1319.788134][T22201] RAX: ffffffffffffffda RBX: 00007f43bae25fa0 RCX: 00007f43bab9e159 [ 1319.788142][T22201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1319.788149][T22201] RBP: 00007f43bac35024 R08: 0000000000000000 R09: 0000000000000000 [ 1319.788157][T22201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1319.788164][T22201] R13: 00007f43bae26038 R14: 00007f43bae25fa0 R15: 00007ffcaafa6838 [ 1319.788180][T22201] [ 1319.826251][T13999] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 1319.907845][ T834] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1319.914507][T13999] usb 9-1: Invalid ep0 maxpacket: 64 [ 1319.927655][T13999] usb usb9-port1: unable to enumerate USB device [ 1320.050957][ T9038] Bluetooth: Error in BCSP hdr checksum [ 1320.099945][ T834] usb 5-1: device descriptor read/64, error -71 [ 1320.120205][T16951] Bluetooth: Error in BCSP hdr checksum [ 1320.150822][T13999] usb 3-1: USB disconnect, device number 15 [ 1320.340473][ T834] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 1320.379624][ T1473] Bluetooth: Error in BCSP hdr checksum [ 1320.452502][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1320.452905][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1320.472209][ T834] usb 5-1: device descriptor read/64, error -71 [ 1320.484737][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1320.499646][ T9] usb 1-1: USB disconnect, device number 103 [ 1320.579741][ T834] usb usb5-port1: attempt power cycle [ 1320.639831][ T5624] Bluetooth: hci5: command 0x1003 tx timeout [ 1320.651693][T18838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1320.666693][ T1473] Bluetooth: Error in BCSP hdr checksum [ 1320.913287][ T1502] Bluetooth: Error in BCSP hdr checksum [ 1320.929825][ T834] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 1320.951038][ T834] usb 5-1: device descriptor read/8, error -71 [ 1320.997233][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1321.160133][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1321.165886][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1321.176494][ T9038] Bluetooth: Error in BCSP hdr checksum [ 1321.184063][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.195190][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1321.195207][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.195221][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.195319][ T834] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 1321.241949][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.250164][ T9] usb 3-1: Product: syz [ 1321.250190][ T9] usb 3-1: Manufacturer: syz [ 1321.250200][ T9] usb 3-1: SerialNumber: syz [ 1321.260843][ T834] usb 5-1: device descriptor read/8, error -71 [ 1321.273836][ T9] usb 3-1: config 0 descriptor?? [ 1321.284906][ T9] appledisplay 3-1:0.0: Submitting URB failed [ 1321.293680][ T9] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -5 [ 1321.303477][T13999] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1321.369942][ T834] usb usb5-port1: unable to enumerate USB device [ 1321.429756][ T1502] Bluetooth: Error in BCSP hdr checksum [ 1321.461471][T13999] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1321.471740][T13999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.471792][T13999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.503242][T13999] usb 1-1: config 0 descriptor?? [ 1321.532319][ T9] usb 3-1: USB disconnect, device number 16 [ 1321.640192][T22224] FAULT_INJECTION: forcing a failure. [ 1321.640192][T22224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1321.640223][T22224] CPU: 0 UID: 0 PID: 22224 Comm: syz.8.4867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1321.640238][T22224] Tainted: [L]=SOFTLOCKUP [ 1321.640243][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1321.640250][T22224] Call Trace: [ 1321.640258][T22224] [ 1321.640263][T22224] dump_stack_lvl+0xe8/0x150 [ 1321.640283][T22224] should_fail_ex+0x3eb/0x540 [ 1321.640303][T22224] _copy_to_user+0x31/0xb0 [ 1321.640316][T22224] simple_read_from_buffer+0xe1/0x170 [ 1321.640333][T22224] proc_fail_nth_read+0x1bb/0x230 [ 1321.640348][T22224] ? common_file_perm+0x20e/0x2b0 [ 1321.640366][T22224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.640382][T22224] ? rw_verify_area+0x24a/0x4c0 [ 1321.640397][T22224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1321.640411][T22224] vfs_read+0x213/0xa80 [ 1321.640427][T22224] ? __pfx___mutex_lock+0x10/0x10 [ 1321.640441][T22224] ? __pfx_vfs_read+0x10/0x10 [ 1321.640454][T22224] ? __fget_files+0x2a/0x420 [ 1321.640469][T22224] ? __fget_files+0x3a2/0x420 [ 1321.640481][T22224] ? __fget_files+0x2a/0x420 [ 1321.640498][T22224] ksys_read+0x150/0x270 [ 1321.640513][T22224] ? __pfx_ksys_read+0x10/0x10 [ 1321.640532][T22224] do_syscall_64+0x166/0x520 [ 1321.640543][T22224] ? trace_irq_disable+0x3b/0x140 [ 1321.640559][T22224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.640570][T22224] ? clear_bhb_loop+0x70/0xc0 [ 1321.640584][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.640594][T22224] RIP: 0033:0x7fc81615e98e [ 1321.640605][T22224] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1321.640615][T22224] RSP: 002b:00007fc8170aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1321.640627][T22224] RAX: ffffffffffffffda RBX: 00007fc8170af6c0 RCX: 00007fc81615e98e [ 1321.640635][T22224] RDX: 000000000000000f RSI: 00007fc8170af0a0 RDI: 0000000000000005 [ 1321.640642][T22224] RBP: 00007fc8170af090 R08: 0000000000000000 R09: 0000000000000000 [ 1321.640649][T22224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1321.640656][T22224] R13: 00007fc816426038 R14: 00007fc816425fa0 R15: 00007ffefa027308 [ 1321.640672][T22224] [ 1321.905702][T13999] usbhid 1-1:0.0: can't add hid device: -71 [ 1321.905776][T13999] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1321.926611][T13999] usb 1-1: USB disconnect, device number 104 [ 1322.209498][ T834] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1322.341279][T13999] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1322.360431][ T834] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1322.372674][ T834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.381511][ T834] usb 9-1: Product: syz [ 1322.385717][ T834] usb 9-1: Manufacturer: syz [ 1322.390459][ T834] usb 9-1: SerialNumber: syz [ 1322.401956][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1322.500374][T13999] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1322.510551][T13999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.521742][T13999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.536157][T13999] usb 1-1: config 0 descriptor?? [ 1322.563373][ T9] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1322.573747][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.573772][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1322.597672][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.597697][ T9] usb 3-1: Product: syz [ 1322.597713][ T9] usb 3-1: Manufacturer: syz [ 1322.597724][ T9] usb 3-1: SerialNumber: syz [ 1322.626097][ T9] usb 3-1: config 0 descriptor?? [ 1322.718586][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4872'. [ 1322.756422][T22234] fuse: Unknown parameter 'uºî„' [ 1322.790923][T22234] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4872'. [ 1322.835838][ T834] net_ratelimit: 1703 callbacks suppressed [ 1322.844152][ T834] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1322.844222][ T834] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1322.943319][ T9321] usb 3-1: USB disconnect, device number 17 [ 1323.259455][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1323.361365][T13999] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1323.362762][T13999] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input288 [ 1323.411422][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1323.426827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.426852][ T9] usb 5-1: Product: syz [ 1323.426869][ T9] usb 5-1: Manufacturer: syz [ 1323.426878][ T9] usb 5-1: SerialNumber: syz [ 1323.571153][T22253] jffs2: notice: (22253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1323.589454][T22253] jffs2 filesystem being mounted at /262/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1323.734650][T13999] usb 1-1: USB disconnect, device number 105 [ 1323.734764][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1323.776692][T22260] tipc: Started in network mode [ 1323.776724][T22260] tipc: Node identity ac1414aa, cluster identity 4711 [ 1323.776900][T22260] tipc: New replicast peer: 172.20.20.187 [ 1323.813941][T22260] tipc: Enabled bearer , priority 10 [ 1323.873305][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1323.887581][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1324.089552][ T5689] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1324.239792][ T5689] usb 3-1: Using ep0 maxpacket: 32 [ 1324.246339][ T5689] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1324.258437][ T5689] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.270718][ T5689] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1324.282949][ T5689] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1324.294226][ T5689] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1324.312486][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.312527][ T5689] usb 3-1: Product: syz [ 1324.312545][ T5689] usb 3-1: Manufacturer: syz [ 1324.312555][ T5689] usb 3-1: SerialNumber: syz [ 1324.344779][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1324.360320][ T5689] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input289 [ 1324.545560][T22226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.554378][T22226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.566980][T22226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.567332][T22226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.593930][T22226] netlink: 'syz.8.4868': attribute type 1 has an invalid length. [ 1324.602149][T22226] netlink: 5120 bytes leftover after parsing attributes in process `syz.8.4868'. [ 1324.614686][T22226] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1324.626320][ T834] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 1324.639832][ T834] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1324.654646][ T834] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1324.654677][ T834] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1324.655135][ T834] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1324.693887][ T834] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1324.715834][ T834] usb 9-1: USB disconnect, device number 14 [ 1324.889552][ T9321] tipc: Node number set to 2886997162 [ 1324.939783][ T5689] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1324.949807][ T5689] (id 0x00) [ 1324.999507][ T5689] rc_core: IR keymap rc-imon-pad not found [ 1325.005401][ T5689] Registered IR keymap rc-empty [ 1325.011036][ T5689] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1325.022156][ T5689] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1325.151466][ T5689] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1325.162684][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1325.178725][ T5689] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input290 [ 1325.195685][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1325.208801][ T5689] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:18> initialized [ 1325.384593][T22267] tipc: Enabling of bearer rejected, failed to enable media [ 1325.403758][T22267] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4881'. [ 1325.518909][T22275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4885'. [ 1325.659703][ T5689] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1325.810763][ T5689] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1325.819960][ T834] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1325.829114][ T5689] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.839655][ T5689] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1325.852931][ T5689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.861103][ T5689] usb 9-1: Product: syz [ 1325.861114][ T5689] usb 9-1: Manufacturer: syz [ 1325.861122][ T5689] usb 9-1: SerialNumber: syz [ 1325.877945][ T5689] usb 9-1: config 0 descriptor?? [ 1325.970148][ T834] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1325.981053][ T834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.991693][ T834] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1326.004290][ T834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.004315][ T834] usb 1-1: Product: syz [ 1326.004331][ T834] usb 1-1: Manufacturer: syz [ 1326.004342][ T834] usb 1-1: SerialNumber: syz [ 1326.032920][ T834] usb 1-1: config 0 descriptor?? [ 1326.053124][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 1326.053167][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1326.053578][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1326.093455][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1326.113515][ T9] usb 5-1: USB disconnect, device number 29 [ 1326.172541][T22270] FAULT_INJECTION: forcing a failure. [ 1326.172541][T22270] name failslab, interval 1, probability 0, space 0, times 0 [ 1326.185850][T22270] CPU: 0 UID: 0 PID: 22270 Comm: syz.8.4883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.185869][T22270] Tainted: [L]=SOFTLOCKUP [ 1326.185873][T22270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1326.185880][T22270] Call Trace: [ 1326.185885][T22270] [ 1326.185891][T22270] dump_stack_lvl+0xe8/0x150 [ 1326.185910][T22270] should_fail_ex+0x3eb/0x540 [ 1326.185929][T22270] should_failslab+0xa8/0x100 [ 1326.185942][T22270] __kmalloc_noprof+0xfe/0x720 [ 1326.185957][T22270] ? fuse_do_ioctl+0x2a2/0x2050 [ 1326.186057][T22270] ? fuse_do_ioctl+0x2a2/0x2050 [ 1326.186072][T22270] fuse_do_ioctl+0x2a2/0x2050 [ 1326.186086][T22270] ? kasan_quarantine_put+0xbb/0x1f0 [ 1326.186106][T22270] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1326.186122][T22270] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1326.186136][T22270] ? __pfx_fuse_do_ioctl+0x10/0x10 [ 1326.186149][T22270] ? do_vfs_ioctl+0x116f/0x1530 [ 1326.186167][T22270] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1326.186201][T22270] ? __fget_files+0x2a/0x420 [ 1326.186220][T22270] ? __fget_files+0x3a2/0x420 [ 1326.186231][T22270] ? fuse_allow_current_process+0x1f0/0x3c0 [ 1326.186266][T22270] ? fuse_ioctl_common+0xf2/0x150 [ 1326.186279][T22270] ? __pfx_fuse_dir_ioctl+0x10/0x10 [ 1326.186291][T22270] __se_sys_ioctl+0xfc/0x170 [ 1326.186309][T22270] do_syscall_64+0x166/0x520 [ 1326.186325][T22270] ? trace_irq_disable+0x3b/0x140 [ 1326.186341][T22270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.186351][T22270] ? clear_bhb_loop+0x70/0xc0 [ 1326.186364][T22270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.186375][T22270] RIP: 0033:0x7fc81619e159 [ 1326.186388][T22270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.186398][T22270] RSP: 002b:00007fc8170af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1326.186411][T22270] RAX: ffffffffffffffda RBX: 00007fc816425fa0 RCX: 00007fc81619e159 [ 1326.186419][T22270] RDX: 0000200000000000 RSI: 0000000040806685 RDI: 0000000000000005 [ 1326.186426][T22270] RBP: 00007fc8170af090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.186433][T22270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.186440][T22270] R13: 00007fc816426038 R14: 00007fc816425fa0 R15: 00007ffefa027308 [ 1326.186456][T22270] [ 1326.441396][ T9] usb 9-1: USB disconnect, device number 15 [ 1326.509473][ T5689] usb 1-1: USB disconnect, device number 106 [ 1326.874190][ T9] usb 3-1: USB disconnect, device number 18 [ 1327.032022][ T31] audit: type=1400 audit(5363871263.188:564): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=22286 comm="syz.8.4889" name="p" offset=33 [ 1327.204859][T22296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1327.379676][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1327.459457][ T834] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1327.489530][ T5689] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1327.531386][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1327.542030][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.557026][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.567920][ T9] usb 1-1: config 0 descriptor?? [ 1327.610026][ T834] usb 3-1: Using ep0 maxpacket: 32 [ 1327.615532][ T834] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 1327.629216][ T834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.629245][ T834] usb 3-1: Product: syz [ 1327.629255][ T834] usb 3-1: Manufacturer: syz [ 1327.629265][ T834] usb 3-1: SerialNumber: syz [ 1327.660719][ T5689] usb 9-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1327.674931][ T5689] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1327.674960][ T5689] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1327.674986][ T5689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.710635][ T5689] usb 9-1: config 0 descriptor?? [ 1327.718211][T22298] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1327.791274][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1327.791375][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1327.811739][ T9] usb 1-1: USB disconnect, device number 107 [ 1327.863314][T22306] tipc: Can't bind to reserved service type 0 [ 1327.889120][ T834] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 1327.908458][ T834] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1327.923121][ T834] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 1327.933535][ T834] usb 3-1: media controller created [ 1327.958594][T22298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.958891][T22298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.981142][ T834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1328.013667][ T834] usb 3-1: selecting invalid altsetting 2 [ 1328.020370][ T834] set interface failed [ 1328.020857][ T834] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1328.020873][ T834] error writing reg: 0xff, val: 0x00 [ 1328.069252][ T834] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1328.094955][ T834] usb 3-1: USB disconnect, device number 19 [ 1328.192899][ T5689] hid (null): unknown global tag 0xe [ 1328.193555][ T5689] hid (null): usage index exceeded [ 1328.193578][ T5689] hid (null): usage index exceeded [ 1328.218536][ T5689] waterforce 0003:1044:7A4D.0097: unexpected long global item [ 1328.218906][ T5689] waterforce 0003:1044:7A4D.0097: hid parse failed with -22 [ 1328.218973][ T5689] waterforce 0003:1044:7A4D.0097: probe with driver waterforce failed with error -22 [ 1328.309455][ T9] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1328.415151][ T834] usb 9-1: USB disconnect, device number 16 [ 1328.461438][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1328.473901][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.473945][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.499180][ T9] usb 1-1: config 0 descriptor?? [ 1328.536733][T22312] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1328.578362][T22314] rust_binder: 22313:22314 got transaction to invalid handle 1 [ 1328.586816][T22314] rust_binder: 22313:22314 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 1328.597300][T22314] FAULT_INJECTION: forcing a failure. [ 1328.597300][T22314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.611050][T22314] CPU: 0 UID: 0 PID: 22314 Comm: syz.2.4902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1328.611068][T22314] Tainted: [L]=SOFTLOCKUP [ 1328.611073][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1328.611079][T22314] Call Trace: [ 1328.611085][T22314] [ 1328.611090][T22314] dump_stack_lvl+0xe8/0x150 [ 1328.611110][T22314] should_fail_ex+0x3eb/0x540 [ 1328.611132][T22314] _copy_to_user+0x31/0xb0 [ 1328.611145][T22314] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x2979/0x3e10 [ 1328.611173][T22314] ? __pfx_rust_binder_waitlcl+0x10/0x10 [ 1328.611277][T22314] ? kasan_save_track+0x4f/0x80 [ 1328.611293][T22314] ? kasan_save_track+0x3e/0x80 [ 1328.611307][T22314] ? kasan_save_free_info+0x40/0x50 [ 1328.611319][T22314] ? kfree+0x1c5/0x650 [ 1328.611331][T22314] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 1328.611346][T22314] ? security_file_ioctl+0xc3/0x2a0 [ 1328.611360][T22314] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 1328.611396][T22314] ? kasan_quarantine_put+0xbb/0x1f0 [ 1328.611415][T22314] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1328.611429][T22314] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1328.611447][T22314] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1328.611469][T22314] ? hook_file_ioctl+0x1f2/0x600 [ 1328.611495][T22314] ? __fget_files+0x2a/0x420 [ 1328.611508][T22314] ? __fget_files+0x2a/0x420 [ 1328.611519][T22314] ? __fget_files+0x3a2/0x420 [ 1328.611530][T22314] ? __fget_files+0x2a/0x420 [ 1328.611544][T22314] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1328.611558][T22314] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 1328.611574][T22314] __se_sys_ioctl+0xfc/0x170 [ 1328.611591][T22314] do_syscall_64+0x166/0x520 [ 1328.611603][T22314] ? trace_irq_disable+0x3b/0x140 [ 1328.611619][T22314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.611630][T22314] ? clear_bhb_loop+0x70/0xc0 [ 1328.611642][T22314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.611653][T22314] RIP: 0033:0x7f43bab9e159 [ 1328.611665][T22314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.611674][T22314] RSP: 002b:00007f43bba63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.611687][T22314] RAX: ffffffffffffffda RBX: 00007f43bae25fa0 RCX: 00007f43bab9e159 [ 1328.611695][T22314] RDX: 0000200000001900 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1328.611702][T22314] RBP: 00007f43bba63090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.611709][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1328.611715][T22314] R13: 00007f43bae26038 R14: 00007f43bae25fa0 R15: 00007ffcaafa6838 [ 1328.611732][T22314] [ 1328.749634][T22314] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1328.749647][T22314] rust_binder: Read failure Err(EFAULT) in pid:751 [ 1328.918316][ T2106] block nbd2: Possible stuck request ffff888027ca7000: control (read@0,1024B). Runtime 510 seconds [ 1328.925308][ T2106] block nbd2: Possible stuck request ffff888027ca71c0: control (read@1024,1024B). Runtime 510 seconds [ 1328.925327][ T2106] block nbd2: Possible stuck request ffff888027ca7380: control (read@2048,1024B). Runtime 510 seconds [ 1328.925341][ T2106] block nbd2: Possible stuck request ffff888027ca7540: control (read@3072,1024B). Runtime 510 seconds [ 1328.925844][T13999] rust_binder: 22313: undelivered TRANSACTION_ERROR: 29201 [ 1329.162275][T22324] loop9: detected capacity change from 0 to 255852544 [ 1329.440239][ T9] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1329.441514][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input291 [ 1329.637822][T22339] qrtr: Invalid version 0 [ 1329.749264][ T5624] Bluetooth: hci2: unknown advertising packet type: 0x20 [ 1329.766731][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1329.766766][ T5689] usb 1-1: USB disconnect, device number 108 [ 1329.792954][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1329.894237][T22345] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0x0 pfn:0x48000 [ 1329.911222][T22345] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1329.925531][T22345] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1329.934548][T22345] raw: 0000000000000000 0000000000000000 0000000500000003 0000000000000000 [ 1329.934571][T22345] page dumped because: unmovable page [ 1329.934581][T22345] page_owner tracks the page as allocated [ 1329.934588][T22345] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 21029, tgid 21029 (syz-executor), ts 1254565981457 [ 1329.934610][T22345] post_alloc_hook+0x1f9/0x250 [ 1329.934630][T22345] get_page_from_freelist+0x2209/0x2280 [ 1329.934649][T22345] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1329.934666][T22345] alloc_pages_mpol+0x21e/0x390 [ 1329.934680][T22345] alloc_pages_noprof+0xb1/0x2b0 [ 1329.934693][T22345] __vmalloc_node_range_noprof+0x6e5/0x1540 [ 1329.934709][T22345] vmalloc_user_noprof+0xad/0xe0 [ 1329.934725][T22345] kcov_ioctl+0x55/0x630 [ 1329.934741][T22345] __se_sys_ioctl+0xfc/0x170 [ 1329.934757][T22345] do_syscall_64+0x166/0x520 [ 1329.934772][T22345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.934794][T22345] page last free pid 15726 tgid 15726 ts 1254151950140 stack trace: [ 1329.934805][T22345] free_pages_prepare+0x9eb/0xaf0 [ 1329.934820][T22345] __free_contig_range_common+0x174/0x340 [ 1329.934833][T22345] free_pages_bulk+0x48/0x120 [ 1329.934849][T22345] vfree+0x231/0x490 [ 1329.934874][T22345] kcov_close+0x28/0x50 [ 1329.934890][T22345] __fput+0x418/0xa50 [ 1329.934903][T22345] task_work_run+0x1d9/0x270 [ 1329.934922][T22345] do_exit+0x73a/0x2360 [ 1329.934939][T22345] do_group_exit+0x22d/0x2f0 [ 1329.934955][T22345] __x64_sys_exit_group+0x3f/0x40 [ 1329.934972][T22345] x64_sys_call+0x18c6/0x18d0 [ 1329.934989][T22345] do_syscall_64+0x166/0x520 [ 1329.935001][T22345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.978295][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1329.997640][ T9] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 1330.018277][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.018291][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1330.081204][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.081220][ T9] usb 5-1: Product: syz [ 1330.081228][ T9] usb 5-1: Manufacturer: syz [ 1330.081236][ T9] usb 5-1: SerialNumber: syz [ 1330.166701][ T834] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1330.305281][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1330.349532][ T834] usb 9-1: Using ep0 maxpacket: 8 [ 1330.356924][ T834] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1330.367064][ T834] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.367078][ T834] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1330.367103][ T834] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.367128][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.425743][ T834] hub 9-1:1.0: bad descriptor, ignoring hub [ 1330.425769][ T834] hub 9-1:1.0: probe with driver hub failed with error -5 [ 1330.426078][ T834] cdc_wdm 9-1:1.0: skipping garbage [ 1330.426089][ T834] cdc_wdm 9-1:1.0: skipping garbage [ 1330.426135][ T834] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1330.651461][ T9] usb 5-1: USB disconnect, device number 30 [ 1330.696708][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.744008][ T834] usb 9-1: USB disconnect, device number 17 [ 1331.215485][T22369] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1331.499762][ T5689] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1331.650051][ T5689] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1331.659918][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1331.668813][ T5689] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.679152][ T5689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.693897][ T5689] usb 9-1: config 0 descriptor?? [ 1331.703448][ T5689] pwc: Askey VC010 type 2 USB webcam detected. [ 1331.719599][ T9321] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1331.811230][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1331.822269][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.833666][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.846466][ T9] usb 3-1: config 0 descriptor?? [ 1331.870571][ T9321] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1331.881097][ T9321] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1331.891698][ T9321] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 1331.891715][ T9321] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1331.891727][ T9321] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1331.891775][ T9321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.947511][T22371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.947850][T22371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.976967][T22379] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1332.067459][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1332.067559][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1332.089072][ T9] usb 3-1: USB disconnect, device number 20 [ 1332.155418][T22383] Bluetooth: MGMT ver 1.23 [ 1332.162100][T22383] Bluetooth: hci0: unsupported parameter 5161 [ 1332.168985][T22383] Bluetooth: hci0: invalid len left 14, exp >= 169 [ 1332.177430][ T5689] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1332.186086][ T9321] gud 5-1:1.0: Protocol version 5 is not supported [ 1332.192996][T22371] comedi: No check for data length of config insn id 9 is implemented [ 1332.193005][T22371] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1332.193080][T22371] comedi: Assuming n=15 is correct [ 1332.202967][ T5689] pwc: recv_control_msg error -32 req 02 val 2700 [ 1332.227008][ T5689] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1332.235348][ T5689] pwc: recv_control_msg error -32 req 04 val 1000 [ 1332.254507][ T5689] pwc: recv_control_msg error -32 req 04 val 1300 [ 1332.263146][T22371] netlink: 164 bytes leftover after parsing attributes in process `syz.8.4928'. [ 1332.274160][ T5689] pwc: recv_control_msg error -32 req 04 val 1400 [ 1332.282226][ T5689] pwc: recv_control_msg error -32 req 02 val 2000 [ 1332.289595][ T5689] pwc: recv_control_msg error -32 req 02 val 2100 [ 1332.299030][ T5689] pwc: recv_control_msg error -32 req 04 val 1500 [ 1332.314762][ T5689] pwc: recv_control_msg error -32 req 02 val 2500 [ 1332.404864][ T9321] usb 5-1: USB disconnect, device number 31 [ 1332.549649][T17488] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1332.700174][T17488] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1332.712716][T17488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.724165][T17488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.737996][T17488] usb 3-1: config 0 descriptor?? [ 1332.869413][ T9321] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1332.987585][ T5689] pwc: recv_control_msg error -71 req 02 val 2800 [ 1332.997213][ T5689] pwc: recv_control_msg error -71 req 04 val 1100 [ 1333.003920][ T5689] pwc: recv_control_msg error -71 req 04 val 1200 [ 1333.019253][ T5689] pwc: Registered as video103. [ 1333.030725][ T5689] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input293 [ 1333.040605][ T9321] usb 1-1: Using ep0 maxpacket: 16 [ 1333.049144][ T9321] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=d8.68 [ 1333.063154][ T9321] usb 1-1: config 0 has an invalid interface number: 167 but max is 0 [ 1333.063181][ T9321] usb 1-1: config 0 has no interface number 0 [ 1333.063221][ T9321] usb 1-1: config 0 interface 167 has no altsetting 0 [ 1333.091891][ T9321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.091917][ T9321] usb 1-1: Product: syz [ 1333.091935][ T9321] usb 1-1: Manufacturer: syz [ 1333.091946][ T9321] usb 1-1: SerialNumber: syz [ 1333.120110][ T5689] usb 9-1: USB disconnect, device number 18 [ 1333.131132][ T9321] usb 1-1: config 0 descriptor?? [ 1333.346597][T22395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.359005][T22395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.383054][ T9321] flexcop_usb: set interface failed. [ 1333.390144][ T9321] b2c2_flexcop_usb 1-1:0.167: probe with driver b2c2_flexcop_usb failed with error -22 [ 1333.406025][ T9321] usb 1-1: USB disconnect, device number 109 [ 1333.560334][T17488] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1333.561629][T17488] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input292 [ 1333.596265][T22377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.596557][T22377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.862279][T22410] FAULT_INJECTION: forcing a failure. [ 1333.862279][T22410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.875634][T22410] CPU: 0 UID: 0 PID: 22410 Comm: syz.8.4945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.875652][T22410] Tainted: [L]=SOFTLOCKUP [ 1333.875656][T22410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1333.875664][T22410] Call Trace: [ 1333.875671][T22410] [ 1333.875676][T22410] dump_stack_lvl+0xe8/0x150 [ 1333.875696][T22410] should_fail_ex+0x3eb/0x540 [ 1333.875715][T22410] _copy_from_iter+0x1d3/0x1660 [ 1333.875732][T22410] ? __alloc_skb+0x27a/0x7a0 [ 1333.875746][T22410] ? __alloc_skb+0x27a/0x7a0 [ 1333.875759][T22410] ? __alloc_skb+0x27a/0x7a0 [ 1333.875771][T22410] ? __pfx__copy_from_iter+0x10/0x10 [ 1333.875786][T22410] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1333.875801][T22410] ? __alloc_skb+0x27a/0x7a0 [ 1333.875811][T22410] ? __alloc_skb+0x27a/0x7a0 [ 1333.875826][T22410] ? netlink_sendmsg+0x650/0xb40 [ 1333.875844][T22410] ? skb_put+0x112/0x210 [ 1333.875858][T22410] netlink_sendmsg+0x6c0/0xb40 [ 1333.875878][T22410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.875897][T22410] ? apparmor_socket_sendmsg+0x98/0x360 [ 1333.875914][T22410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.875930][T22410] sock_sendmsg_nosec+0x13a/0x180 [ 1333.875942][T22410] ____sys_sendmsg+0x54e/0x850 [ 1333.875960][T22410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.875978][T22410] ? import_iovec+0x73/0xa0 [ 1333.875991][T22410] ___sys_sendmsg+0x2a5/0x360 [ 1333.876004][T22410] ? __lock_acquire+0x6df/0x2e50 [ 1333.876022][T22410] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.876052][T22410] ? __fget_files+0x2a/0x420 [ 1333.876066][T22410] ? __fget_files+0x3a2/0x420 [ 1333.876082][T22410] __x64_sys_sendmsg+0x1b1/0x290 [ 1333.876098][T22410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1333.876122][T22410] do_syscall_64+0x166/0x520 [ 1333.876134][T22410] ? trace_irq_disable+0x3b/0x140 [ 1333.876150][T22410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.876161][T22410] ? clear_bhb_loop+0x70/0xc0 [ 1333.876174][T22410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.876185][T22410] RIP: 0033:0x7fc81619e159 [ 1333.876196][T22410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.876205][T22410] RSP: 002b:00007fc8170af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.876218][T22410] RAX: ffffffffffffffda RBX: 00007fc816425fa0 RCX: 00007fc81619e159 [ 1333.876226][T22410] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 1333.876233][T22410] RBP: 00007fc8170af090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.876240][T22410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.876247][T22410] R13: 00007fc816426038 R14: 00007fc816425fa0 R15: 00007ffefa027308 [ 1333.876263][T22410] [ 1334.003356][ T9321] usb 3-1: USB disconnect, device number 21 [ 1334.003419][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1334.541135][ T5689] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1334.693691][T22435] fuse: Unknown parameter 'group_iT' [ 1334.701847][ T5689] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1334.714767][ T5689] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.725097][ T5689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.741109][ T5689] usb 9-1: config 0 descriptor?? [ 1334.756404][ T5689] pwc: Askey VC010 type 2 USB webcam detected. [ 1334.855233][T22438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4950'. [ 1334.947282][T22441] Bluetooth: hci0: unsupported parameter 5161 [ 1334.955746][T22441] Bluetooth: hci0: invalid len left 14, exp >= 169 [ 1335.204737][ T5689] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1335.212551][ T5689] pwc: recv_control_msg error -32 req 02 val 2700 [ 1335.221240][ T5689] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1335.228660][ T5689] pwc: recv_control_msg error -32 req 04 val 1000 [ 1335.236162][ T5689] pwc: recv_control_msg error -32 req 04 val 1300 [ 1335.243049][ T5689] pwc: recv_control_msg error -32 req 04 val 1400 [ 1335.244647][ T5689] pwc: recv_control_msg error -32 req 02 val 2000 [ 1335.254014][ T5689] pwc: recv_control_msg error -32 req 02 val 2100 [ 1335.275373][ T5689] pwc: recv_control_msg error -32 req 04 val 1500 [ 1335.429872][T22463] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1335.465716][T22462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4957'. [ 1335.493493][ T5689] pwc: recv_control_msg error -71 req 02 val 2400 [ 1335.501583][ T5689] pwc: recv_control_msg error -71 req 02 val 2600 [ 1335.512699][ T5689] pwc: recv_control_msg error -71 req 02 val 2900 [ 1335.521178][ T5689] pwc: recv_control_msg error -71 req 02 val 2800 [ 1335.527885][ T5689] pwc: recv_control_msg error -71 req 04 val 1100 [ 1335.535643][ T5689] pwc: recv_control_msg error -71 req 04 val 1200 [ 1335.542903][ T9321] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1335.555715][ T5689] pwc: Registered as video103. [ 1335.564307][ T5689] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input294 [ 1335.587956][ T5689] usb 9-1: USB disconnect, device number 19 [ 1335.691411][ T9321] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1335.702911][ T9321] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 1335.702937][ T9321] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1335.702956][ T9321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.702969][ T9321] usb 5-1: config 0 has no interface number 0 [ 1335.702993][ T9321] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1335.703007][ T9321] usb 5-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 1335.703022][ T9321] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 1335.703037][ T9321] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1335.703062][ T9321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.802398][ T9321] usb 5-1: config 0 descriptor?? [ 1335.829925][ T9321] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1335.862074][T17488] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1335.909098][T22471] overlayfs: conflicting lowerdir path [ 1336.021840][T17488] usb 3-1: New USB device found, idVendor=0c45, idProduct=624e, bcdDevice= 1.00 [ 1336.032097][T17488] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1336.032132][T17488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.056117][T22465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1336.067487][T17488] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624e [ 1336.108378][ T1473] usb 5-1: Failed to submit usb control message: -71 [ 1336.108410][ T1473] usb 5-1: unable to send the bmi data to the device: -71 [ 1336.108445][ T1473] usb 5-1: unable to get target info from device [ 1336.108456][ T1473] usb 5-1: could not get target info (-71) [ 1336.108477][ T1473] usb 5-1: could not probe fw (-71) [ 1336.147132][ T9321] usb 5-1: USB disconnect, device number 32 [ 1336.346758][T22482] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.4963'. [ 1336.781779][T17488] gspca_sn9c20x: Write register 1001 failed -110 [ 1336.781804][T17488] gspca_sn9c20x: Device initialization failed [ 1336.781858][T17488] gspca_sn9c20x 3-1:1.0: probe with driver gspca_sn9c20x failed with error -110 [ 1336.829601][ T5689] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 1336.977508][T17488] usb 3-1: USB disconnect, device number 22 [ 1336.986669][ T5689] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1336.997502][ T5689] usb 1-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1336.997529][ T5689] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1337.016389][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.016413][ T5689] usb 1-1: Product: syz [ 1337.016429][ T5689] usb 1-1: Manufacturer: syz [ 1337.016439][ T5689] usb 1-1: SerialNumber: syz [ 1337.221435][T16949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.372402][T16949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.467231][T18838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1337.484899][T18838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1337.496639][T18838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1337.504454][T18838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1337.515924][T18838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1337.567301][T22498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.567598][T22498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.590724][T16949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.632683][ T5689] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 1337.778487][T16949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.979671][T22517] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.4975'. [ 1338.416304][T16949] bridge_slave_1: left allmulticast mode [ 1338.416335][T16949] bridge_slave_1: left promiscuous mode [ 1338.429919][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.440972][T16949] bridge_slave_0: left allmulticast mode [ 1338.448688][T16949] bridge_slave_0: left promiscuous mode [ 1338.448860][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.828591][T16949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.844278][T16949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.855962][T16949] bond0 (unregistering): (slave team0): Releasing backup interface [ 1338.867740][T16949] bond0 (unregistering): Released all slaves [ 1339.243893][T16949] hsr_slave_0: left promiscuous mode [ 1339.256889][T16949] hsr_slave_1: left promiscuous mode [ 1339.257426][T16949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.257449][T16949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.285357][T16949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.285379][T16949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.342585][T16949] veth1_macvtap: left promiscuous mode [ 1339.342626][T16949] veth0_macvtap: left promiscuous mode [ 1339.342692][T16949] veth1_vlan: left promiscuous mode [ 1339.342745][T16949] veth0_vlan: left promiscuous mode [ 1339.591560][ T834] usb 1-1: USB disconnect, device number 110 [ 1339.599657][T18838] Bluetooth: hci0: command tx timeout [ 1339.630348][T16949] team0 (unregistering): Port device team_slave_1 removed [ 1339.657450][T16949] team0 (unregistering): Port device team_slave_0 removed [ 1339.674331][T22498] usblp0: removed [ 1339.809000][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1340.226795][ T834] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1340.380756][ T834] usb 9-1: Using ep0 maxpacket: 16 [ 1340.386315][ T834] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1340.403600][ T834] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.403624][ T834] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1340.424968][ T834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.424992][ T834] usb 9-1: Product: syz [ 1340.425010][ T834] usb 9-1: Manufacturer: syz [ 1340.425019][ T834] usb 9-1: SerialNumber: syz [ 1340.461718][ T834] usb 9-1: 0:2 : does not exist [ 1340.468989][T22500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.477783][T22500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.477921][T22500] bridge_slave_0: entered allmulticast mode [ 1340.498920][T22500] bridge_slave_0: entered promiscuous mode [ 1340.509494][ T5689] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 1340.522867][T22500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.531696][T22500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.531819][T22500] bridge_slave_1: entered allmulticast mode [ 1340.548819][T22500] bridge_slave_1: entered promiscuous mode [ 1340.624988][T22500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.639539][ T5689] usb 1-1: device descriptor read/64, error -71 [ 1340.648751][T22500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.676046][ T834] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1340.760809][T22500] team0: Port device team_slave_0 added [ 1340.773329][T22500] team0: Port device team_slave_1 added [ 1340.790478][ T834] usb 9-1: USB disconnect, device number 20 [ 1340.839425][T22575] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.4983'. [ 1340.879063][T22500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.879084][T22500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.879108][T22500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.879729][ T5689] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 1340.945252][T22500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.952392][T22500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.952411][T22500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.014067][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1341.050902][ T5689] usb 1-1: device descriptor read/64, error -71 [ 1341.163149][ T5689] usb usb1-port1: attempt power cycle [ 1341.174366][T22500] hsr_slave_0: entered promiscuous mode [ 1341.175005][T22500] hsr_slave_1: entered promiscuous mode [ 1341.175389][T22500] debugfs: 'hsr0' already exists in 'hsr' [ 1341.198812][T22500] Cannot create hsr debugfs directory [ 1341.350809][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1341.500643][ T5689] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 1341.524955][ T5689] usb 1-1: device descriptor read/8, error -71 [ 1341.681617][T18838] Bluetooth: hci0: command tx timeout [ 1341.760904][ T5689] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1341.780721][ T5689] usb 1-1: device descriptor read/8, error -71 [ 1341.869444][T17488] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1341.889671][ T5689] usb usb1-port1: unable to enumerate USB device [ 1342.020973][T17488] usb 9-1: Using ep0 maxpacket: 32 [ 1342.026674][T17488] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1342.036818][T17488] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.036855][T17488] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1342.036878][T17488] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1342.036895][T17488] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1342.087319][T17488] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.087345][T17488] usb 9-1: Product: syz [ 1342.087362][T17488] usb 9-1: Manufacturer: syz [ 1342.087372][T17488] usb 9-1: SerialNumber: syz [ 1342.115345][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1342.163127][T17488] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input295 [ 1342.334457][T17488] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1342.334480][T17488] (id 0x00) [ 1342.463546][T17488] rc_core: IR keymap rc-imon-pad not found [ 1342.463574][T17488] Registered IR keymap rc-empty [ 1342.463646][T17488] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1342.463667][T17488] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1342.532497][T17488] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1342.544073][T17488] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input296 [ 1342.590963][T17488] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:21> initialized [ 1342.703113][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1343.109767][T17488] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1343.226348][T22500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1343.247015][T22500] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1343.258174][T22500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1343.265072][T17488] usb 3-1: Using ep0 maxpacket: 8 [ 1343.271080][T17488] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1343.281946][T17488] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1343.281977][T17488] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1343.281989][T17488] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1343.282002][T17488] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1343.282015][T17488] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1343.282037][T17488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.371534][T22500] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1343.381569][T22500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1343.393954][T22593] netlink: 656 bytes leftover after parsing attributes in process `syz.8.4988'. [ 1343.393989][T22593] netlink: 656 bytes leftover after parsing attributes in process `syz.8.4988'. [ 1343.433209][T22500] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1343.433802][T22500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1343.469940][T22500] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1343.480858][T22622] imon:send_packet: task interrupted [ 1343.480876][T22622] imon:send_packet: packet tx failed (-512) [ 1343.480925][T22622] imon:vfd_write: send packet #2 failed [ 1343.524055][T22593] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4988'. [ 1343.536898][ T5689] usb 9-1: USB disconnect, device number 21 [ 1343.573058][T17488] usb 3-1: GET_CAPABILITIES returned 0 [ 1343.573098][T17488] usbtmc 3-1:16.0: can't read capabilities [ 1343.759765][T18838] Bluetooth: hci0: command tx timeout [ 1343.811158][T22500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1343.843781][T22500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.861443][T16951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.861510][T16951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1343.882126][T16951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1343.882196][T16951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.969656][T17488] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1344.007934][ T9] usb 3-1: USB disconnect, device number 23 [ 1344.065625][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1344.133406][T17488] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 1344.149012][T17488] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1344.149040][T17488] usb 1-1: config 0 has no interface number 0 [ 1344.149064][T17488] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1344.149080][T17488] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1344.149096][T17488] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1344.203803][T17488] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1344.203827][T17488] usb 1-1: Product: syz [ 1344.203844][T17488] usb 1-1: SerialNumber: syz [ 1344.230901][T17488] usb 1-1: config 0 descriptor?? [ 1344.255113][T17488] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1344.256349][T17488] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input297 [ 1344.459150][T22638] FAULT_INJECTION: forcing a failure. [ 1344.459150][T22638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.459182][T22638] CPU: 0 UID: 0 PID: 22638 Comm: syz.0.4993 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.459198][T22638] Tainted: [L]=SOFTLOCKUP [ 1344.459202][T22638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1344.459209][T22638] Call Trace: [ 1344.459215][T22638] [ 1344.459220][T22638] dump_stack_lvl+0xe8/0x150 [ 1344.459240][T22638] should_fail_ex+0x3eb/0x540 [ 1344.459263][T22638] _copy_to_user+0x31/0xb0 [ 1344.459277][T22638] simple_read_from_buffer+0xe1/0x170 [ 1344.459294][T22638] proc_fail_nth_read+0x1bb/0x230 [ 1344.459309][T22638] ? common_file_perm+0x20e/0x2b0 [ 1344.459327][T22638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1344.459343][T22638] ? rw_verify_area+0x24a/0x4c0 [ 1344.459358][T22638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1344.459372][T22638] vfs_read+0x213/0xa80 [ 1344.459388][T22638] ? __pfx___mutex_lock+0x10/0x10 [ 1344.459401][T22638] ? __pfx_vfs_read+0x10/0x10 [ 1344.459416][T22638] ? __fget_files+0x2a/0x420 [ 1344.459430][T22638] ? __fget_files+0x3a2/0x420 [ 1344.459442][T22638] ? __fget_files+0x2a/0x420 [ 1344.459462][T22638] ksys_read+0x150/0x270 [ 1344.459476][T22638] ? __pfx_ksys_read+0x10/0x10 [ 1344.459489][T22638] ? __pfx_evdev_ioctl+0x10/0x10 [ 1344.459508][T22638] do_syscall_64+0x166/0x520 [ 1344.459520][T22638] ? trace_irq_disable+0x3b/0x140 [ 1344.459536][T22638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.459546][T22638] ? clear_bhb_loop+0x70/0xc0 [ 1344.459559][T22638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.459577][T22638] RIP: 0033:0x7ff04c95e98e [ 1344.459588][T22638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1344.459597][T22638] RSP: 002b:00007ff04d92efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1344.459609][T22638] RAX: ffffffffffffffda RBX: 00007ff04d92f6c0 RCX: 00007ff04c95e98e [ 1344.459618][T22638] RDX: 000000000000000f RSI: 00007ff04d92f0a0 RDI: 0000000000000005 [ 1344.459625][T22638] RBP: 00007ff04d92f090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.459632][T22638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1344.459639][T22638] R13: 00007ff04cc26038 R14: 00007ff04cc25fa0 R15: 00007fff1869ceb8 [ 1344.459656][T22638] [ 1344.582139][T17488] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1344.777443][ C0] cm109_urb_ctl_callback: 39 callbacks suppressed [ 1344.777460][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.784031][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.784355][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.784554][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.784722][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.784930][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.785100][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.785264][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.785597][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.785817][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1344.815340][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1344.815366][ T9] usb 1-1: USB disconnect, device number 115 [ 1344.832704][T17488] usb 9-1: descriptor type invalid, skip [ 1344.906247][T17488] usb 9-1: not running at top speed; connect to a high speed hub [ 1344.906291][T17488] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1344.936269][T17488] usb 9-1: config 0 has no interfaces? [ 1344.954610][T17488] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.954636][T17488] usb 9-1: Product: syz [ 1344.954653][T17488] usb 9-1: Manufacturer: syz [ 1344.954663][T17488] usb 9-1: SerialNumber: syz [ 1344.991401][T17488] usb 9-1: config 0 descriptor?? [ 1344.997792][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1345.317774][T22647] sg_write: data in/out 441308/186 bytes for SCSI command 0x0-- guessing data in; [ 1345.317774][T22647] program syz.8.4994 not setting count and/or reply_len properly [ 1345.354934][T17488] usb 9-1: USB disconnect, device number 22 [ 1345.506739][T22500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.514062][ T5689] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 1345.583399][T22500] veth0_vlan: entered promiscuous mode [ 1345.607682][T22500] veth1_vlan: entered promiscuous mode [ 1345.648524][T22500] veth0_macvtap: entered promiscuous mode [ 1345.662303][T22500] veth1_macvtap: entered promiscuous mode [ 1345.673023][ T5689] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1345.691860][ T5689] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.691884][ T5689] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1345.691918][ T5689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1345.691944][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.741492][T22665] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1345.750984][ T5689] hub 1-1:1.0: bad descriptor, ignoring hub [ 1345.758917][ T5689] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1345.772686][ T5689] cdc_wdm 1-1:1.0: skipping garbage [ 1345.772707][ T5689] cdc_wdm 1-1:1.0: skipping garbage [ 1345.789171][ T5689] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1345.797579][ T5689] cdc_wdm 1-1:1.0: Unknown control protocol [ 1345.822272][T22500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.840106][T18838] Bluetooth: hci0: command tx timeout [ 1345.852351][T22500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.921784][T16951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.931034][T16951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.931415][T16951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.931444][T16951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.979156][T22665] FAULT_INJECTION: forcing a failure. [ 1345.979156][T22665] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.979189][T22665] CPU: 0 UID: 0 PID: 22665 Comm: syz.0.4998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.979205][T22665] Tainted: [L]=SOFTLOCKUP [ 1345.979209][T22665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1345.979216][T22665] Call Trace: [ 1345.979221][T22665] [ 1345.979227][T22665] dump_stack_lvl+0xe8/0x150 [ 1345.979246][T22665] should_fail_ex+0x3eb/0x540 [ 1345.979266][T22665] should_failslab+0xa8/0x100 [ 1345.979278][T22665] ? security_file_alloc+0x34/0x310 [ 1345.979293][T22665] kmem_cache_alloc_noprof+0xa1/0x600 [ 1345.979307][T22665] ? rcu_is_watching+0x16/0xb0 [ 1345.979319][T22665] ? security_file_alloc+0x34/0x310 [ 1345.979336][T22665] security_file_alloc+0x34/0x310 [ 1345.979349][T22665] init_file+0x90/0x2b0 [ 1345.979365][T22665] alloc_empty_file+0x74/0x1d0 [ 1345.979376][T22665] path_openat+0xa2/0x1d60 [ 1345.979395][T22665] ? __lock_acquire+0x6df/0x2e50 [ 1345.979423][T22665] do_file_open+0x23e/0x4a0 [ 1345.979440][T22665] ? __pfx_do_file_open+0x10/0x10 [ 1345.979468][T22665] ? _raw_spin_unlock+0x28/0x50 [ 1345.979479][T22665] ? alloc_fd+0x651/0x6c0 [ 1345.979496][T22665] do_sys_openat2+0x115/0x200 [ 1345.979509][T22665] ? __pfx_do_sys_openat2+0x10/0x10 [ 1345.979521][T22665] ? ksys_write+0x242/0x270 [ 1345.979535][T22665] ? __pfx_ksys_write+0x10/0x10 [ 1345.979550][T22665] __x64_sys_openat+0x138/0x170 [ 1345.979567][T22665] do_syscall_64+0x166/0x520 [ 1345.979580][T22665] ? trace_irq_disable+0x3b/0x140 [ 1345.979595][T22665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.979606][T22665] ? clear_bhb_loop+0x70/0xc0 [ 1345.979619][T22665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.979629][T22665] RIP: 0033:0x7ff04c95e98e [ 1345.979641][T22665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1345.979651][T22665] RSP: 002b:00007ff04d92eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1345.979664][T22665] RAX: ffffffffffffffda RBX: 00007ff04d92f6c0 RCX: 00007ff04c95e98e [ 1345.979672][T22665] RDX: 0000000000000002 RSI: 00007ff04d92ec00 RDI: ffffffffffffff9c [ 1345.979680][T22665] RBP: 00007ff04d92f090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.979687][T22665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.979693][T22665] R13: 00007ff04cc26038 R14: 00007ff04cc25fa0 R15: 00007fff1869ceb8 [ 1345.979709][T22665] [ 1346.341277][ T5689] usb 1-1: USB disconnect, device number 116 [ 1346.496077][T22679] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1346.519055][T22679] FAULT_INJECTION: forcing a failure. [ 1346.519055][T22679] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.519085][T22679] CPU: 0 UID: 0 PID: 22679 Comm: syz.8.4999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.519101][T22679] Tainted: [L]=SOFTLOCKUP [ 1346.519106][T22679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1346.519114][T22679] Call Trace: [ 1346.519119][T22679] [ 1346.519124][T22679] dump_stack_lvl+0xe8/0x150 [ 1346.519145][T22679] should_fail_ex+0x3eb/0x540 [ 1346.519166][T22679] should_failslab+0xa8/0x100 [ 1346.519180][T22679] __kmalloc_noprof+0xfe/0x720 [ 1346.519195][T22679] ? tomoyo_encode+0x2ad/0x570 [ 1346.519208][T22679] ? tomoyo_encode+0x2ad/0x570 [ 1346.519231][T22679] tomoyo_encode+0x2ad/0x570 [ 1346.519245][T22679] tomoyo_realpath_from_path+0x5fa/0x640 [ 1346.519263][T22679] tomoyo_mount_permission+0x3e9/0x9e0 [ 1346.519281][T22679] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1346.519300][T22679] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1346.519317][T22679] ? kasan_save_track+0x4f/0x80 [ 1346.519359][T22679] ? kasan_quarantine_put+0xbb/0x1f0 [ 1346.519377][T22679] security_sb_mount+0xe4/0x320 [ 1346.519390][T22679] path_mount+0xbc/0x1050 [ 1346.519405][T22679] ? user_path_at+0xd4/0x160 [ 1346.519420][T22679] __se_sys_mount+0x31d/0x420 [ 1346.519436][T22679] ? __pfx___se_sys_mount+0x10/0x10 [ 1346.519456][T22679] ? __x64_sys_mount+0x20/0xc0 [ 1346.519469][T22679] do_syscall_64+0x166/0x520 [ 1346.519482][T22679] ? trace_irq_disable+0x3b/0x140 [ 1346.519499][T22679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.519510][T22679] ? clear_bhb_loop+0x70/0xc0 [ 1346.519523][T22679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.519534][T22679] RIP: 0033:0x7fc81619e159 [ 1346.519546][T22679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.519556][T22679] RSP: 002b:00007fc8170af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1346.519569][T22679] RAX: ffffffffffffffda RBX: 00007fc816425fa0 RCX: 00007fc81619e159 [ 1346.519577][T22679] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 1346.519585][T22679] RBP: 00007fc816235024 R08: 0000000000000000 R09: 0000000000000000 [ 1346.519592][T22679] R10: 000000000002cc31 R11: 0000000000000246 R12: 0000000000000000 [ 1346.519599][T22679] R13: 00007fc816426038 R14: 00007fc816425fa0 R15: 00007ffefa027308 [ 1346.519616][T22679] [ 1346.519673][T22679] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1346.794637][T16952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.794650][T16952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.892928][T16949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.892952][T16949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.289710][ T9321] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1347.361190][T13999] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1347.461057][ T9321] usb 3-1: Using ep0 maxpacket: 8 [ 1347.466667][ T9321] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1347.480203][ T9321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.488330][ T9321] usb 3-1: Product: syz [ 1347.488340][ T9321] usb 3-1: Manufacturer: syz [ 1347.488348][ T9321] usb 3-1: SerialNumber: syz [ 1347.509344][ T9321] usb 3-1: config 0 descriptor?? [ 1347.525508][ T9321] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1347.532858][T13999] usb 1-1: Using ep0 maxpacket: 32 [ 1347.541748][T13999] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1347.541800][T13999] usb 1-1: New USB device found, idVendor=2040, idProduct=7070, bcdDevice=d4.77 [ 1347.559675][T13999] usb 1-1: config 98 has an invalid interface number: 138 but max is 0 [ 1347.559761][T13999] usb 1-1: config 98 has no interface number 0 [ 1347.559786][T13999] usb 1-1: config 98 interface 138 has no altsetting 0 [ 1347.585210][T13999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.585232][T13999] usb 1-1: Product: syz [ 1347.585248][T13999] usb 1-1: Manufacturer: syz [ 1347.585258][T13999] usb 1-1: SerialNumber: syz [ 1347.801553][T22715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.812649][T22715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.047774][T13999] dvb-usb: found a 'Hauppauge Nova-T Stick' in cold state, will try to load a firmware [ 1348.132900][T13999] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1348.142988][T13999] dib0700: firmware download failed at 7 with -22 [ 1348.161596][T13999] usb 1-1: USB disconnect, device number 117 [ 1348.186375][T22723] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5003'. [ 1348.218496][T22723] loop3: detected capacity change from 0 to 2049 [ 1348.248220][T22723] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1348.248365][T22723] loop3: p1 size 2934623536 extends beyond EOD, truncated [ 1348.540920][ T9321] gspca_sonixj: reg_r err -71 [ 1348.540985][ T9321] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1348.567792][ T9321] usb 3-1: USB disconnect, device number 24 [ 1349.000308][ T9321] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1349.163230][ T9321] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1349.174663][ T9321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.174701][ T9321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.200227][ T9321] usb 1-1: config 0 descriptor?? [ 1349.430561][ T9321] usbhid 1-1:0.0: can't add hid device: -71 [ 1349.430637][ T9321] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1349.452332][ T9321] usb 1-1: USB disconnect, device number 118 [ 1349.540985][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1349.701332][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1349.714443][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.714480][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1349.714500][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1349.714515][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1349.714539][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.726913][ T5718] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1349.890322][ T5718] usb 9-1: Using ep0 maxpacket: 16 [ 1349.896299][ T5718] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1349.906348][ T5718] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1349.920117][ T5718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.920140][ T5718] usb 9-1: Product: syz [ 1349.920155][ T5718] usb 9-1: Manufacturer: syz [ 1349.920165][ T5718] usb 9-1: SerialNumber: syz [ 1349.929491][ T9321] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1349.956013][ T5718] usb 9-1: config 0 descriptor?? [ 1349.965057][ T5718] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1349.977098][ T5718] usb 9-1: Detected FT232R [ 1350.080644][ T9321] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1350.092374][ T9321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.092410][ T9321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.117422][ T9321] usb 1-1: config 0 descriptor?? [ 1350.168324][T22764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.168621][T22764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.211358][T22764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.221451][T22764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.232851][ T5718] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1350.394745][ T9] gud 3-1:1.0: Failed to add properties (error=-71) [ 1350.394776][ T9] gud 3-1:1.0: probe with driver gud failed with error -71 [ 1350.435424][ T9] usb 3-1: USB disconnect, device number 25 [ 1350.451439][ T5718] ftdi_sio 9-1:0.0: GPIO initialisation failed: -5 [ 1350.462530][ T5718] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1350.658467][ T5689] usb 9-1: USB disconnect, device number 23 [ 1350.672243][ T5689] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1350.672564][ T5689] ftdi_sio 9-1:0.0: device disconnected [ 1350.942537][ T9321] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1350.943865][ T9321] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input298 [ 1350.968065][T22739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.968326][T22739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.307913][ T9321] usb 1-1: USB disconnect, device number 119 [ 1351.308013][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1352.029851][ T9] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1352.182991][ T9] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1352.193115][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1352.208499][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.208526][ T9] usb 9-1: Product: syz [ 1352.208542][ T9] usb 9-1: Manufacturer: syz [ 1352.208553][ T9] usb 9-1: SerialNumber: syz [ 1352.293716][ T31] audit: type=1400 audit(5363871288.448:565): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=22854 comm="syz.2.5024" name="unknown" offset=16 [ 1352.491091][T18047] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1352.560545][ T32] INFO: task syz.5.4339:20159 blocked in I/O wait for more than 143 seconds. [ 1352.562203][ T32] Tainted: G L syzkaller #0 [ 1352.562235][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1352.562244][ T32] task:syz.5.4339 state:D stack:25168 pid:20159 tgid:20158 ppid:18337 task_flags:0x400040 flags:0x00080002 [ 1352.562279][ T32] Call Trace: [ 1352.562286][ T32] [ 1352.562295][ T32] __schedule+0x17db/0x58f0 [ 1352.562327][ T32] ? __pfx___schedule+0x10/0x10 [ 1352.562345][ T32] ? schedule+0x90/0x2b0 [ 1352.562374][ T32] schedule+0x164/0x2b0 [ 1352.562389][ T32] io_schedule+0x7f/0xd0 [ 1352.562403][ T32] folio_wait_bit_common+0x836/0xbc0 [ 1352.562426][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1352.562440][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 1352.562459][ T32] ? migrate_pages_batch+0x1bcb/0x4f50 [ 1352.562477][ T32] migrate_pages_batch+0x23f7/0x4f50 [ 1352.562512][ T32] ? __pfx_compaction_free+0x10/0x10 [ 1352.562533][ T32] ? __pfx_compaction_alloc+0x10/0x10 [ 1352.562548][ T32] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1352.562567][ T32] ? finish_task_switch+0x40e/0xc60 [ 1352.562582][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 1352.562598][ T32] ? __lock_acquire+0x6df/0x2e50 [ 1352.562617][ T32] ? __schedule+0x17f1/0x58f0 [ 1352.562644][ T32] ? __css_rstat_updated+0x237/0x540 [ 1352.562668][ T32] ? __pfx___css_rstat_updated+0x10/0x10 [ 1352.562689][ T32] ? lock_acquire+0x115/0x350 [ 1352.562710][ T32] migrate_pages+0x1fab/0x2920 [ 1352.562737][ T32] ? __pfx_compaction_free+0x10/0x10 [ 1352.562753][ T32] ? __pfx_compaction_alloc+0x10/0x10 [ 1352.562785][ T32] ? __pfx_migrate_pages+0x10/0x10 [ 1352.562800][ T32] ? isolate_migratepages_block+0x577/0x3690 [ 1352.562815][ T32] ? rcu_is_watching+0x16/0xb0 [ 1352.562829][ T32] ? isolate_migratepages_block+0x3106/0x3690 [ 1352.562858][ T32] compact_zone+0x34ba/0x4ca0 [ 1352.562913][ T32] ? __pfx_compact_zone+0x10/0x10 [ 1352.562929][ T32] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1352.562944][ T32] ? flush_work+0xd/0x30 [ 1352.562965][ T32] sysctl_compaction_handler+0x3f3/0x880 [ 1352.562983][ T32] ? __pfx_sysctl_compaction_handler+0x10/0x10 [ 1352.563014][ T32] ? __kvmalloc_node_noprof+0x345/0x820 [ 1352.563045][ T32] ? proc_sys_call_handler+0x3d0/0x830 [ 1352.563141][ T32] ? proc_sys_call_handler+0x3d0/0x830 [ 1352.563162][ T32] proc_sys_call_handler+0x4c6/0x830 [ 1352.563199][ T32] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1352.563223][ T32] vfs_write+0x612/0xba0 [ 1352.563245][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1352.563265][ T32] ? __fget_files+0x2a/0x420 [ 1352.563284][ T32] ksys_write+0x150/0x270 [ 1352.563301][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1352.563335][ T32] do_syscall_64+0x166/0x520 [ 1352.563350][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.563363][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1352.563378][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.563391][ T32] RIP: 0033:0x7f11d799e159 [ 1352.563403][ T32] RSP: 002b:00007f11d88b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1352.563419][ T32] RAX: ffffffffffffffda RBX: 00007f11d7c25fa0 RCX: 00007f11d799e159 [ 1352.563429][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1352.563437][ T32] RBP: 00007f11d7a35024 R08: 0000000000000000 R09: 0000000000000000 [ 1352.563448][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.563468][ T32] R13: 00007f11d7c26038 R14: 00007f11d7c25fa0 R15: 00007ffe930a85e8 [ 1352.563487][ T32] [ 1352.563511][ T32] [ 1352.563511][ T32] Showing all locks held in the system: [ 1352.563520][ T32] locks held by kworker/0:0/9: 5, on CPU#0: [ 1352.563623][ T32] #0: ffff888021ef7140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1352.563720][ T32] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1352.563776][ T32] #2: ffff88802a72b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1352.563841][ T32] #3: ffff888031abb1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1352.563931][ T32] #4: ffff88802b9bd1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1352.563968][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1352.564005][ T32] #0: ffffffff8ef5c720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1352.564079][ T32] locks held by getty/5373: 2, on CPU#0: [ 1352.564088][ T32] #0: ffff888034bdd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1352.564129][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1352.564179][ T32] locks held by udevd/5626: 1, on CPU#0: [ 1352.564188][ T32] #0: ffff888027c11350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1352.564276][ T32] locks held by udevd/6044: 4, on CPU#0: [ 1352.564301][ T32] #0: ffff8880585fc518 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1352.564336][ T32] #1: ffff88805843bc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1352.564420][ T32] #2: ffff8880202c94b8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1352.564475][ T32] #3: ffff888031abb1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1352.564586][ T32] locks held by kworker/0:10/18047: 6, on CPU#0: [ 1352.564596][ T32] #0: ffff888021ef7140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1352.564634][ T32] #1: ffffc90004877c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1352.564670][ T32] #2: ffff88802a0041d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1352.564719][ T32] #3: ffff888029fbf568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1352.564762][ T32] #4: ffff88802a3f2860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1352.564799][ T32] #5: ffffffff8fd10aa8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 1352.564852][ T32] locks held by syz.5.4339/20159: 2, on CPU#0: [ 1352.564862][ T32] #0: ffff888073eadcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1352.564899][ T32] #1: ffff888054c8e460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1352.564942][ T32] locks held by rm/22865: 1, last CPU#0: [ 1352.564951][ T32] #0: ffff88803672e9b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 1352.565006][ T32] [ 1352.565011][ T32] ============================================= [ 1352.565011][ T32] [ 1352.565044][ T32] NMI backtrace for cpu 0 [ 1352.565055][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.565069][ T32] Tainted: [L]=SOFTLOCKUP [ 1352.565073][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.565079][ T32] Call Trace: [ 1352.565084][ T32] [ 1352.565089][ T32] dump_stack_lvl+0xe8/0x150 [ 1352.565105][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1352.565149][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1352.565165][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1352.565182][ T32] sys_info+0x135/0x170 [ 1352.565195][ T32] watchdog+0xfd7/0x1030 [ 1352.565215][ T32] ? watchdog+0x1c7/0x1030 [ 1352.565232][ T32] kthread+0x38b/0x480 [ 1352.565248][ T32] ? __pfx_watchdog+0x10/0x10 [ 1352.565261][ T32] ? __pfx_kthread+0x10/0x10 [ 1352.565276][ T32] ret_from_fork+0x514/0xb70 [ 1352.565293][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1352.565307][ T32] ? __switch_to+0xc89/0x1420 [ 1352.565321][ T32] ? __pfx_kthread+0x10/0x10 [ 1352.565337][ T32] ret_from_fork_asm+0x1a/0x30 [ 1352.565358][ T32] [ 1352.565388][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1353.298050][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1353.308715][ T32] Tainted: [L]=SOFTLOCKUP [ 1353.313015][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1353.323041][ T32] Call Trace: [ 1353.326303][ T32] [ 1353.329226][ T32] vpanic+0x56d/0xa60 [ 1353.333193][ T32] ? __pfx_vpanic+0x10/0x10 [ 1353.337676][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 1353.343236][ T32] panic+0xc5/0xd0 [ 1353.346937][ T32] ? __pfx_panic+0x10/0x10 [ 1353.351335][ T32] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 1353.356429][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1353.362564][ T32] watchdog+0x1030/0x1030 [ 1353.366884][ T32] ? watchdog+0x1c7/0x1030 [ 1353.371281][ T32] kthread+0x38b/0x480 [ 1353.375330][ T32] ? __pfx_watchdog+0x10/0x10 [ 1353.379985][ T32] ? __pfx_kthread+0x10/0x10 [ 1353.384553][ T32] ret_from_fork+0x514/0xb70 [ 1353.389121][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1353.394233][ T32] ? __switch_to+0xc89/0x1420 [ 1353.398893][ T32] ? __pfx_kthread+0x10/0x10 [ 1353.403463][ T32] ret_from_fork_asm+0x1a/0x30 [ 1353.408213][ T32] [ 1353.411264][ T32] Kernel Offset: disabled [ 1353.415568][ T32] Rebooting in 86400 seconds..