last executing test programs: 8m39.368079975s ago: executing program 2 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000200)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x64) readlink(&(0x7f00000004c0)='./file1/file3/file0\x00', &(0x7f00000005c0)=""/252, 0xfc) chdir(&(0x7f0000000280)='./bus\x00') open(&(0x7f00000002c0)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ext4\x00', 0x8410, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0), 0x4) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x20, 0x1, 0x27, "f83c0f37bb243171ae98b6cc5ca7627f245e8741eff6863e69f8ff9eba589206bde4138b2e0a08"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xfd}, 0x0, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xc}}) 8m36.279285784s ago: executing program 2 (id=320): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xfffffd1d}}, 0x20008080) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./sys\x00', 0x1ed) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./config\x00', 0x108) mount(0x0, &(0x7f0000000980)='./config\x00', &(0x7f00000009c0)='configfs\x00', 0x0, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) mknod$loop(&(0x7f0000000a40)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000000a80)='./file0\x00', 0x0, 0x0) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f0000000ac0)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@mirror={0x0, 0x6800, 0x0, 0x78, 'mirror\x00', {'core 1 64', 0x20, 0x2, [{0x20, {@ram={'/dev/ram', 0x1}, 0x20, '1'}}, {0x20, {@ram={'/dev/ram', 0x1}, 0x20, '8191'}}], ' 1 handle_errors'}}]}) 8m36.183132277s ago: executing program 2 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x4000, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 8m36.088372176s ago: executing program 2 (id=322): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000005c0), 0x6828, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000001780)=""/4096) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/196, 0xc4}], 0x1, 0x0, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./file0\x00', 0x40042, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x2008800, &(0x7f00000028c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000002940)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004980)="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", 0x2000, &(0x7f0000006980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a40)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000006a80)={0x50, 0x0, r6, {0x7, 0x2b, 0xfffffffe, 0x30004506, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000006b00)='./file0\x00', 0x40042, 0x12d) close(r5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) close(0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000006b40)='./file0\x00', 0x40042, 0x188) mount$9p_fd(0x0, &(0x7f0000006b80)='./file0\x00', &(0x7f0000006bc0), 0x400, &(0x7f0000006c00)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000740)={0x569f895429a7e2e5, 0x1000, "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"}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f00000004c0)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r8, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000003c0)=0x0) syz_clone3(&(0x7f0000000440)={0x200, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0xf}, &(0x7f0000000280)=""/14, 0xe, &(0x7f00000002c0)=""/232, &(0x7f0000000400)=[r8, r10], 0x2, {r0}}, 0x58) 8m33.869899315s ago: executing program 2 (id=332): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='2', 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x800) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000002e40)={0x0, 0x1, &(0x7f0000002d80)=[0x9], &(0x7f0000002dc0)=[0x0, 0x8000], &(0x7f0000002e00)=[0x101, 0x589e, 0x5, 0x8, 0xd, 0x2]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00098006000600823b00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) write$UHID_INPUT2(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c0000001d0011ff"], 0x9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250d00000006000800a2aa00de63a5d00006000a00ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x58010}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) unshare(0x62020600) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) write$tun(r7, &(0x7f0000000c80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x50, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a, 0x0, '\x00', [@generic={0xd}]}]}}}}}}, 0x86) 8m33.478998912s ago: executing program 2 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) mkdir(&(0x7f0000000340)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000380)='./my_configfs\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x24, 0x0, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfffe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x5, 0x5}, {0x6, 0x4}, {0x8, 0x6}, {0x3, 0x6}, {0x6c, 0x1}, {0xff}, {0x1, 0x1}, {0x5, 0x6}], "6eb9df11e20abf8a"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6, 0x5}, {0x64, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x80, 0x3}, {0xb9, 0x3}, {0xdc, 0x6}, {0x80, 0x9}, {0x2, 0x2}, {0x98, 0x5}, {0x8, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x8, 0x6}, {0x3, 0x7}, {0xa0, 0x2}, {0x4, 0x6}], "ebc251b261ed79dc"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r1, 0x0, 0x1001) 8m33.282628598s ago: executing program 32 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101040, 0x0) mkdir(&(0x7f0000000340)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000380)='./my_configfs\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x24, 0x0, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfffe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x5, 0x5}, {0x6, 0x4}, {0x8, 0x6}, {0x3, 0x6}, {0x6c, 0x1}, {0xff}, {0x1, 0x1}, {0x5, 0x6}], "6eb9df11e20abf8a"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6, 0x5}, {0x64, 0x6}, {0x4, 0x3}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x80, 0x3}, {0xb9, 0x3}, {0xdc, 0x6}, {0x80, 0x9}, {0x2, 0x2}, {0x98, 0x5}, {0x8, 0x1}, {0x3, 0x6}, {0x4, 0x2}, {0x8, 0x6}, {0x3, 0x7}, {0xa0, 0x2}, {0x4, 0x6}], "ebc251b261ed79dc"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$proc_mixer(r1, 0x0, 0x1001) 5m6.827357954s ago: executing program 0 (id=1029): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) (fail_nth: 10) 5m6.441001524s ago: executing program 0 (id=1031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000001100", @ANYRES64], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) (fail_nth: 12) 5m6.156281456s ago: executing program 0 (id=1033): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sigaltstack(&(0x7f0000000240)={&(0x7f00000001c0)=""/101, 0x2, 0x65}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x2fd, 0x0, 0x1, 0xffffffff, 0x3, 0x0, 0xffffffff}}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000180)=0x1, 0x4) 5m4.933372435s ago: executing program 0 (id=1037): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2486, 0x2000, 0x0, 0x331}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 5m4.391551154s ago: executing program 0 (id=1040): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x541c02, 0x0) write(r0, &(0x7f0000019480)='8', 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000194c0)={'gre0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019500)='./proc\x00', 0x161) mount(0x0, &(0x7f0000019540)='./proc\x00', &(0x7f0000019580)='proc\x00', 0x1000000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000195c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000019600)='100', 0x3) getpid() socket(0x400000000010, 0x3, 0x0) unshare(0x4a000200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000000705810200020007050102000200070582020002000705020200020007058303"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000400)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019400)=0x7) 5m2.593281071s ago: executing program 0 (id=1048): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x9}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='{', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000280)="fa51", 0x2}], 0x1}}], 0x2, 0x5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) 4m47.495540485s ago: executing program 33 (id=1048): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x9}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='{', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000280)="fa51", 0x2}], 0x1}}], 0x2, 0x5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) 4m21.237482545s ago: executing program 4 (id=1511): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 4m20.976660352s ago: executing program 4 (id=1515): r0 = openat$ipvtap(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 4m20.745315989s ago: executing program 4 (id=1518): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)={0x2, 0x0, [{0x50000, 0x5f, &(0x7f0000000140)='\x00'/95}, {0x1ffc, 0x2d, &(0x7f00000001c0)='\x00'/45}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)=0x2) 4m20.620802006s ago: executing program 4 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 4m20.546481374s ago: executing program 4 (id=1523): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000200)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x64) readlink(&(0x7f00000004c0)='./file1/file3/file0\x00', &(0x7f00000005c0)=""/252, 0xfc) chdir(&(0x7f0000000280)='./bus\x00') open(&(0x7f00000002c0)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x1ff) mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ext4\x00', 0x8410, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0), 0x4) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x20, 0x1, 0x14, "f83c0f37bb243171ae98b6cc5ca7627f245e8741"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xfd}, 0x0, &(0x7f0000000540)={0x20, 0x3, 0x1, 0xc}}) 4m20.249289044s ago: executing program 4 (id=1526): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x5e, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa63713") 4m19.743247841s ago: executing program 34 (id=1526): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x5e, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa63713") 4m16.032498189s ago: executing program 1 (id=1542): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8948, &(0x7f0000000040)={'bond0\x00', 0x10001}) 4m15.610016075s ago: executing program 1 (id=1545): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) write$UHID_INPUT2(r1, 0x0, 0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) unshare(0x62020600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', 0x1}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) write$tun(r4, &(0x7f0000000c80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x50, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a, 0x0, '\x00', [@generic={0xd}]}]}}}}}}, 0x86) 4m11.732162048s ago: executing program 1 (id=1552): socket$kcm(0x21, 0x2, 0xa) 4m11.613158323s ago: executing program 1 (id=1553): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) syz_open_dev$sg(0x0, 0x3, 0x1) close(0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xd0) 4m11.500752648s ago: executing program 1 (id=1554): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./rpc_pipefs\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x0, 0x0) acct(&(0x7f0000000380)='./rpc_pipefs/gssd/clntXX/gssd\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x9) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80140, 0x38) prlimit64(0x0, 0xb, 0x0, 0x0) read$watch_queue(r3, &(0x7f0000000200)=""/178, 0xb2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x400c010, &(0x7f0000000400)={0x11, 0x8035, r5, 0x1, 0xe5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) write$tun(r3, &(0x7f0000000440)={@val={0x0, 0x22eb}, @val={0x2, 0x1, 0x2, 0x3, 0x2}, @mpls={[{0x3}], @ipv6=@esp={0xe, 0x6, "70ad46", 0xb52, 0x32, 0x0, @local, @mcast2, {[@routing={0x29, 0x2, 0x2, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}, @routing={0x84, 0x2, 0x2, 0x5, 0x0, [@remote]}, @fragment={0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x65}, @fragment={0x88, 0x0, 0x0, 0x1, 0x0, 0xb, 0x68}, @hopopts={0x0, 0x23, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x20, {0x3, 0x6, 0xa, 0x1ffe, [0x800, 0xd3c, 0x0]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x2, 0xf0, "f9c5cdb6ef0deafdfab94853021942b9b87898b3cbb7d7d1d5c07fdd1a6a15f19b5554a3560410ca26884a9c8fafb22b9cee7d522d8b398014a994d29fe9f8731bfb827b2c26387437f1fe7ed1833682a441ebab9eec680a32947f7b55c16963c06203d43a366b2a028dd390f4ed8e27627437ea5bef8ebdca4d96b4ffa7e265cd92d0d9df31f8e3e528a85c67523abb4d4e7eedf82ed57cc80311376351ed5ad496a8b81c88a7596e8b224aa2ae6f1be3c11d1a39e264821cf5f66f9beef27d0c6610a20098c994f48c2c4cba74719e5e47f039aa294d663d677c0328d8d5a9202532c0c711461431c0b8d60ae5d49a"}]}, @fragment={0x6c, 0x0, 0xd, 0x1, 0x0, 0x3, 0x64}, @hopopts={0x16, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xf}]}], @aggfrag={0x4d6, 0x7, @basic={0x0, 0x0, 0x8, [@runt="bd4a87f39d94e7ff81682ffea44a03d66f2a6e46d1cfc273904454ae91b18eb22cee0f337700ae7d3fa8e2a8fcd00283a88478d2c8bbcd218c3cf558", @ipv4=@igmp={{0x16, 0x4, 0x3, 0x3, 0xa0, 0x68, 0x0, 0xa, 0x2, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0x11, "6ddf1fb6e6257476b23d16db1097bd"}, @ssrr={0x89, 0xb, 0x8, [@empty, @remote]}, @timestamp_addr={0x44, 0x14, 0x1a, 0x1, 0x4, [{@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}]}, @ssrr={0x89, 0x13, 0x11, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @broadcast, @rand_addr=0x64010102]}]}}, {0x12, 0x2, 0x0, @remote, "20c95e5d6853f3ecff37ad25d572c071d71f3b2d1c025165f8c92f853d883e6376005e98ff352980175d4651f6e8763dc2f1814f36d56350b743eade53906959"}}, @ipv4=@generic={{0x7, 0x4, 0x1, 0x2b, 0xe7, 0x67, 0x0, 0x9, 0x89, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x4, 0x87}, @end]}}, "9ab188b4038b7b90bc4371a9d346b29e36ad15794fb174dddba718125625432a595527f71f360ccc88c018baf3f207fe7f3fd1fac07e0b927ec3d945566f2d567a4e7fc12594f439850755751bb79d01b0141e0a943ddbe25d6f73686bb182fd2b3756b355388cf1d0e86e3bc3489cf37f8d4e1e7dc002634ec4a0b6b9b29bd8cde9ed43cf342ff0e30306c76090db0fbbdc6ace6396ed97004219629f0d2c4c90da8b64f28b0f211795c2a505418c4ed508b82467ea4729a35b82b7a14c48a7c51c6bc95c609aa43f2da5"}, @runt="d8e2438c980ee6ba08553208b8993ce299150f94f3b82260f6180944d24579305a2b78dcf279a083870064", @runt="f936ebd5f4621d4793b5840c3ecf", @ipv4=@dccp={{0x5, 0x4, 0x2, 0x31, 0x67, 0x68, 0x0, 0xc, 0x21, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x12}}, {{0x4e22, 0x4e21, 0x4, 0x1, 0xa, 0x0, 0x0, 0x6, 0x1, "e00ec2", 0x69, "e12035"}, "d7f55de5ed015e7704174af7eed8d39b3a06477fef229ec3f51ad796dc192b797b0b890965ba5d8a5f329fcdca13fb792540056f7d4bfea855f4b1d7f9b5867bc84f48"}}, @ipv4=@tipc={{0x24, 0x4, 0x1, 0x15, 0xb4, 0x65, 0x0, 0x8, 0x6, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x2b, 0x44, [@local, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @rand_addr=0x64010101, @local, @rand_addr=0x64010102, @multicast2]}, @ssrr={0x89, 0x13, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0x5, "8fe1ca"}, {0x7, 0xb, "177880e34ced00beff"}, {0x1, 0x5, "743ef3"}, {0x1, 0x7, "d4fa072f1a"}, {0x5, 0xa, "2f06c728bcb6db90"}, {0x0, 0x8, "d98b182c02e0"}, {0x6, 0xa, "ddb7d5110b75fa6b"}]}]}}, @payload_direct={{{{0x24, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x6, 0x0, 0x1, 0x6, 0xa5afb2a962143438, 0x3, 0x5, 0x7, 0x4, 0x4e23, 0x4e24}, 0x3, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}, @runt="c21f94d8f75583dfb125a019fa1572a51eaa478e45d656bdecf85297", @ipv4=@esp={{0xa, 0x4, 0x3, 0x7, 0x675, 0x64, 0x0, 0x4, 0x32, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0x4, [{@local, 0xfffffffb}, {@multicast2, 0x87fb0}]}]}}, @aggfrag={0x4d4, 0x8, @cc={0x1, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x7, [@ipv6=@dccp_packet={0x2, 0x6, "a64b39", 0x20b, 0x21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@routing={0x3b, 0x6, 0x1, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2a}, @private1]}, @routing={0xdcddef7f57b8d2a5, 0x10, 0x0, 0xfb, 0x0, [@rand_addr=' \x01\x00', @private2, @rand_addr=' \x01\x00', @mcast2, @remote, @local, @private0, @loopback]}, @srh={0x2b, 0x6, 0x4, 0x0, 0x2, 0x0, 0x8000, {@empty, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xb}]}}, @dstopts={0x0, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0x200, [0x7, 0x6, 0x2]}}]}], {{0x4e24, 0x4e21, 0x4, 0x1, 0x8, 0x0, 0x0, 0x9, 0x2, '-.+', 0x10, "013062"}, "ce4a3af37c34d3a50d49b8da6b2b658c5738853a0e995b59bd90b014c19da3631edd77944f6a319fc405444d60b51f7bea80e9083765a24987d6a4572c09e2349e7afa298972d64e3a37884fbe7275e11783f165e1ab45e3e25ec8e4afd856a6a86a9367ccf2a1bf21fe74e3d7a5f53f48cd6efc11f46c0d57a8747ca383649da706f4335d6a934956220e6dd55e3a0b96e9a74f4d5f406dc1acbd21f879890369d4630920d60adafedfbe89b13a16614e47d1dc792b52d8ecd0e828cdee65fc62e611f6c4e5ad5e8dc14c9906329bcd598a9c"}}}, @ipv6=@icmpv6={0x4, 0x6, '@g,', 0x2de, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, {[@routing={0x16, 0x10, 0x0, 0x81, 0x0, [@private0, @remote, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x40}, @private1, @private1]}, @srh={0x6c, 0x8, 0x4, 0x1, 0x3, 0x0, 0x7, {@private1={0xfc, 0x1, '\x00', 0x1}, [@loopback, @loopback, @empty]}}, @fragment={0x32, 0x0, 0x3, 0x1, 0x0, 0x2, 0x66}, @dstopts={0x88, 0x4, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x2, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private0}]}, @srh={0x73, 0x2, 0x4, 0x6, 0x0, 0x8, 0x81, {@mcast2}}, @fragment={0x3a, 0x0, 0xf7, 0x1, 0x0, 0x0, 0x64}, @dstopts={0x11, 0xe, '\x00', [@ra={0x5, 0x2, 0x40}, @generic={0x1d, 0x4a, "18c1a33f6bcf2d741d3c6d93043f1d7d7e1b6178bb83625b1ea5a29d316dce5169b06fe71b9c0b8fe737716c3438da76aec1aa58b30cd1e29decf9fdd3490565bd489dc230932537bdf4"}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}], @ndisc_na={0x88, 0x0, 0x0, 0xe, '\x00', @loopback, [{0x2, 0x18, "22f8b59ec60dba03194feb021b5bbe9d80574c18a0ba1dc4ea14f230fc57a56327cb8185a92a2c8334091902c9422f74c456677a5a6abbec9c8dffc8aecedeb846e53193ee9fa7f879ede2db68071d0ea94fa850092d62ec5e19ec03f1472eeaad4e9719e2c194fcececd40b7af69dea13d17c03f600dd79e0058c6edf3dc9aded4c76819b3057ca26f8843f8b2868e001969570ee67e6410d71f2b12461657fd3c81fe8bc4cbfa35e4707616353477aa7b43630b4dad2abfeb92d0a71b84bd8a6fe2c"}, {0x1f, 0x5, "455888d30fb89651d138950a3a306e8e32277d7184d29ec12a795c2adb71d00b0292c6de59f48c"}]}}}, @ipv4=@dccp={{0x5, 0x4, 0x2, 0x17, 0x56, 0x67, 0x0, 0x8, 0x21, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}}, {{0x4e22, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x0, 0x7, "dac66a", 0x6, "d11ab8"}, "d612e3f3342846cfba6b9a37e7aafcc6728531cf091232912e61252d6aee1063fc921ffcde20f9bdc2ac34065040fa2905b9"}}, @ipv6=@tipc_packet={0x0, 0x6, "6b8000", 0x70, 0x6, 0x1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[@routing={0x2c, 0x8, 0x1, 0x0, 0x0, [@loopback, @mcast1, @empty, @private2]}, @fragment={0x3a, 0x0, 0x5, 0x1, 0x0, 0x0, 0x65}], @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x2, 0xd8, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x400, 0x2, 0x4e23, 0x4e21}, 0x1}}}}}]}, "c46f49f1", 0x4}}]}, "70f050d4", 0x4}}}}}, 0xb8c) 4m10.508835919s ago: executing program 1 (id=1559): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x4, 0xef, {0xef, 0x2f, "7b87d50ed7fcc8796695b87242ab8eefe7cf764ab58c4820900c943055979f5cafc6e4281c8078baf133b26f506ed129443563b0005a82e33b6548b665566c3102aa9cb5e65e976c4a556eb116aa284971fb8cedccc3f441331365d5aa6f5b8f4f32b2e7bd188874ea7b00aac2781ec52e3d02ddf2fdc29c23d89a9db69d8748459f4bb212688248f00c6b23520bef51b23151a3d7b8cb51d73e31fdaed8127805d4c351616fd75c02d81b48c6ad1a0043d91a583ec2a045b5491a0aa5a776efadfcdb82f72fe39505ebef6f8297e731247fbf51cd5ef96255e23644bcf5d3f8f3dc4374494c4431b7cf545d68"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, &(0x7f00000005c0)={0x34, &(0x7f00000001c0)={0x40, 0x12, 0x8c, "29782bd305bc34a0886e008a5baef0e50ee8b6a75d3545b8386a6aeb7d184d58b1abb90838043ac035cab3ed164633de8e848e10fdcedc54d1375c9ce2d72c7f5604c3f6485436a9d77d7ccec865d53f1fdb28a54c63b60c3c0223d15cb14a4f33b39a2286d99cae03dee4ce6593e9b07eada8eb639d74af2ffd77bca1987b6da88941d40ac01bf7ee1b1560"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x9b, {0x99, "988280a5ed4c4f22ed8941f09e6236df14bc770aabb34210ddc544e656421c850878c5308123d4653693cba12dfe4d05243728f4b86c3e6ebce0495b72d979333ffccbfe688d7ff887a3908cdeb06cb47a04912089b05aadd1f3cafa7b00ac0cb4ef07c1556ce463ff708b65a990aefdc938b7152e4100b0ad6ef877665161d8b848cbdba5a75bc30bc2be6c60b49076229c4a2f2b2fce5f13"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x81}}) 3m55.416018147s ago: executing program 35 (id=1559): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x4, 0xef, {0xef, 0x2f, "7b87d50ed7fcc8796695b87242ab8eefe7cf764ab58c4820900c943055979f5cafc6e4281c8078baf133b26f506ed129443563b0005a82e33b6548b665566c3102aa9cb5e65e976c4a556eb116aa284971fb8cedccc3f441331365d5aa6f5b8f4f32b2e7bd188874ea7b00aac2781ec52e3d02ddf2fdc29c23d89a9db69d8748459f4bb212688248f00c6b23520bef51b23151a3d7b8cb51d73e31fdaed8127805d4c351616fd75c02d81b48c6ad1a0043d91a583ec2a045b5491a0aa5a776efadfcdb82f72fe39505ebef6f8297e731247fbf51cd5ef96255e23644bcf5d3f8f3dc4374494c4431b7cf545d68"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, &(0x7f00000005c0)={0x34, &(0x7f00000001c0)={0x40, 0x12, 0x8c, "29782bd305bc34a0886e008a5baef0e50ee8b6a75d3545b8386a6aeb7d184d58b1abb90838043ac035cab3ed164633de8e848e10fdcedc54d1375c9ce2d72c7f5604c3f6485436a9d77d7ccec865d53f1fdb28a54c63b60c3c0223d15cb14a4f33b39a2286d99cae03dee4ce6593e9b07eada8eb639d74af2ffd77bca1987b6da88941d40ac01bf7ee1b1560"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000480)={0x20, 0x0, 0x9b, {0x99, "988280a5ed4c4f22ed8941f09e6236df14bc770aabb34210ddc544e656421c850878c5308123d4653693cba12dfe4d05243728f4b86c3e6ebce0495b72d979333ffccbfe688d7ff887a3908cdeb06cb47a04912089b05aadd1f3cafa7b00ac0cb4ef07c1556ce463ff708b65a990aefdc938b7152e4100b0ad6ef877665161d8b848cbdba5a75bc30bc2be6c60b49076229c4a2f2b2fce5f13"}}, &(0x7f0000000540)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x81}}) 1m49.962026222s ago: executing program 7 (id=2304): syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73d, 0x1f, 0x1, 0x13a}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01040000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000408000340fffffffc08000440000000220500020007000000300001800c00010062697477697365002000028008000340ffffffff080001400000000c0800024000000012040007800900010073797a30"], 0x104}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000023c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002400)='./dev\x00', &(0x7f0000002440)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002480)='./mnt\x00', 0x1ff) mount(&(0x7f00000024c0)=@filename='./dev/sda1\x00', &(0x7f0000002500)='./mnt\x00', &(0x7f0000002540)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000002580)='./mnt\x00') r2 = open(0x0, 0x14927e, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f00000025c0)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x4000, 0x10000) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'team0\x00', 0x400}) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000002240)={&(0x7f0000fe9000/0x14000)=nil, &(0x7f0000fed000/0x3000)=nil, 0x14000, 0x2}) 1m49.872802251s ago: executing program 7 (id=2305): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x169a82, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0xc) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_gfeatures={0x17}}) sendfile(r3, r0, 0x0, 0x7) 1m49.66470731s ago: executing program 7 (id=2306): r0 = openat$kvm(0x0, &(0x7f0000000140), 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x0, 0xc0000100}}, @nested_vmlaunch={0x12f, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x1, 0xc0000100}}, @nested_vmlaunch={0x12f, 0x18, 0x1}], 0xf1}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x2010, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m49.202020344s ago: executing program 7 (id=2308): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f00000025c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./proc/net/ip_vs_app\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8", 0x1}], 0x1}, 0x0) write$cgroup_devices(r3, 0x0, 0xfffffeff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="1800000068000106e728c6700000000021"], 0x18}], 0x1}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251b00000008000100", @ANYRES32=r7, @ANYBLOB="0800150001000003050019"], 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) read(r0, &(0x7f0000006e40)=""/1024, 0x400) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000000)={0xde, "cf85630688304868ee75b6fea110c85a24101f6ba825b84045b432b0593dbe592db7c3c12866559662b8438a4047fdfc6b3bc6a07e8ff3ef01e109b772b92679e75b5fa95179c2d7e2fc6db999910a1254f656389f32531711b830fa093c486fe61644059daf07ec6044a13461461656695b1fd8c0be4c8d17910ef4d38b7965f2e0d37528b5c7fcfb92e96c2a80c120559d62e5bc4d5eb5b455d82495473dff9c902f4b0bc17d1d8ab0c6b59506cfb7381f5d5186b850b750988099515085f055d4eaf2db878bacab9f49343fa5ebc9d033fc120610a1d50473a90b1b7e"}) 1m48.948697292s ago: executing program 7 (id=2311): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='proc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) read$FUSE(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b003f000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) pwrite64(0xffffffffffffffff, &(0x7f0000000280)='\x00\x00', 0x2, 0x1be) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1fe) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) execve(&(0x7f0000000540)='./proc\x00', &(0x7f0000000800)={[&(0x7f0000000580)='proc\x00', &(0x7f00000005c0)='(\x00', &(0x7f0000000600)='NLBL_CIPSOv4\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='\\%,,-/\x00', &(0x7f00000006c0)='NLBL_CIPSOv4\x00', &(0x7f0000000700)=',:)\x00', &(0x7f0000000740)='NLBL_CIPSOv4\x00', &(0x7f0000000780)=':/}\x00', &(0x7f00000007c0)='NLBL_CIPSOv4\x00']}, &(0x7f0000000a80)={[&(0x7f0000000880)='NLBL_CIPSOv4\x00', &(0x7f00000008c0)='NLBL_CIPSOv4\x00', &(0x7f0000000900)='%%\x00', &(0x7f0000000940)='\x00', &(0x7f0000000980)='\',$-^\xeb-\x00', &(0x7f00000009c0)='7/@/(\x00', &(0x7f0000000a00)='NLBL_CIPSOv4\x00', &(0x7f0000000a40)='\'\x00']}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc0c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd2b) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1e8000) syz_open_dev$loop(0x0, 0x0, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x5c, r4, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x5c}}, 0x0) write(r2, &(0x7f0000000200)='27', 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m48.710494715s ago: executing program 7 (id=2313): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='2', 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x5, 0x4}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x800) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000002e40)={0x0, 0x1, &(0x7f0000002d80)=[0x9], &(0x7f0000002dc0)=[0x0, 0x8000], &(0x7f0000002e00)=[0x101, 0x589e, 0x5, 0x8, 0xd, 0x2]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100"}}, 0x14a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00098006000600823b00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) write$UHID_INPUT2(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c0000001d0011ff"], 0x9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250d00000006000800a2aa00de63a5d00006000a00ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x58010}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) unshare(0x62020600) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) write$tun(r7, &(0x7f0000000c80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x50, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a, 0x0, '\x00', [@generic={0xd}]}]}}}}}}, 0x86) 1m33.645906197s ago: executing program 36 (id=2313): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='2', 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4a23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xe73c}, 0x70bd2a, 0x40003504, 0x2, 0x1, 0xa, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x1000000000000192, 0x1000000000000192, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x5, 0x4}, {0xfffffffe, 0x9}, 0x8070bd2d, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x800) read$FUSE(r0, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000002e40)={0x0, 0x1, &(0x7f0000002d80)=[0x9], &(0x7f0000002dc0)=[0x0, 0x8000], &(0x7f0000002e00)=[0x101, 0x589e, 0x5, 0x8, 0xd, 0x2]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x32, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100"}}, 0x14a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00098006000600823b00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) write$UHID_INPUT2(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0c0000001d0011ff"], 0x9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250d00000006000800a2aa00de63a5d00006000a00ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x58010}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) unshare(0x62020600) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', 0x1}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r9) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) write$tun(r7, &(0x7f0000000c80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x50, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a, 0x0, '\x00', [@generic={0xd}]}]}}}}}}, 0x86) 1m17.640639887s ago: executing program 3 (id=2435): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}], 0x90}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a000000070581"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (fail_nth: 3) 1m15.798344391s ago: executing program 3 (id=2442): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x48d0) r1 = socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x80) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f00000000c0)='o', 0x1, 0x0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000180)="ab", 0x34000, 0x0, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000003c0)="d5", 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x4000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x400, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x20000, 0x1, 0x271, 0x0, r8}}], 0x1, 0x0, 0x0) 1m14.68564806s ago: executing program 3 (id=2451): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m13.598669645s ago: executing program 3 (id=2454): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_sec/tomoyo/domain_policy\x00', 0x83001, 0x80) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x9801) close(0x3) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x44) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02221c000000a70fc1cd7981207e26e133c9f7e0ee3f5f639b6858f6cb31932eeaf0ce315faff91426aa99515ae5d36644ecbc72a9c7d8d917bf500068dbad14a692d33e36ac4fb1594934fe210d9fe9cf769062073bcfc72837137b97f5a1d3f884df8b0fd0b8eebc7cd4224693aa205294dcd47411"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x44, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459d") 1m10.49220265s ago: executing program 3 (id=2470): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000004480)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000004500)=@delsa={0x28, 0x12, 0x1, 0x70bd28, 0x0, {@in=@remote, 0x4d6, 0xd, 0xff}}, 0x28}}, 0x0) read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f0000002140)={0x130, 0x0, r2, {0xffffffffffffffff, 0x80000333, 0x0, '\x00', {0x10, 0x800, 0xd, 0x7fff, 0x0, r3, 0x4000, '\x00', 0x2, 0x9, 0x9, 0x101, {0xffffffffffff800d, 0x5}, {0x5, 0x4}, {0x1, 0x9}, {0xa, 0x6}, 0x9, 0xdc44, 0x80000001, 0x1}}}, 0x130) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) dup3(r0, r4, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000002400)={'veth0_vlan\x00', @random="010000201000"}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x140f, 0x1, 0xc, 0x25dfdbf8, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000441}, 0x4008084) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004580)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000045c0)={'wlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000004600)) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x60, 0x140e, 0x300, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x40) mkdir(&(0x7f0000004600)='./file0\x00', 0x0) mount(&(0x7f0000004640)=@filename='./file0\x00', &(0x7f0000004680)='./file0\x00', &(0x7f00000046c0)='pvfs2\x00', 0x800004, 0x0) write(r4, 0x0, 0x0) 1m10.151851433s ago: executing program 3 (id=2473): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) 1m9.711890088s ago: executing program 37 (id=2473): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) 7.749346241s ago: executing program 5 (id=2837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0xfffffffffffffde8, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x1}, [@NFTA_RULE_USERDATA={0x8a, 0x7, 0x1, 0x0, "e27fb781229d06ff572f2ef052c6c3a4ba2c8006afbb673aa6bcc7c382c90aaedc198b44a7629060a0476df20122e7432b6d20b404106eb095b02e284e64dd8a3b1061bbb2af30996b49026b2b9d152c0534e393c4d03e91b956d02afe000af0aa675023006cd25cbb75be967da757cdab9742ceb4e81e60c26708a88b27775eb3cbb071ae00"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x12c}}, 0x4001) 7.532521326s ago: executing program 5 (id=2840): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2486, 0x2000, 0x0, 0x331}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) (fail_nth: 3) 7.419439964s ago: executing program 9 (id=2841): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000200)={0x1, 0x8}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async, rerun: 32) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') (rerun: 32) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x8000000a, 0x7, 0xcb, 0x4f, 0x7b, 0x8f, 0x80, 0x10, 0x3, 0x44, 0x8, 0x2, 0x1000000000004e}, {0x42d, 0x1, 0x40, 0x8, 0x9, 0xff, 0x0, 0x4, 0xa, 0x14, 0x6, 0x40, 0x8000000000000001}, {0x1ff, 0x8, 0x9b, 0xff, 0x2d, 0x1, 0x81, 0xfb, 0x4, 0x4, 0xfe, 0x22, 0x6}], 0xb}) (async, rerun: 64) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000909000/0x400000)=nil) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 32) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) (rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r8, &(0x7f0000000480)='27', 0x2) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000040)={0x2}) 6.817284792s ago: executing program 5 (id=2845): syz_clone(0x16041000, 0x0, 0x64, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./tracefs\x00', &(0x7f0000000280)='fuse\x00', 0x2080000, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) open(&(0x7f00000003c0)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) syz_clone(0x16041000, 0x0, 0x64, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000240)='./tracefs\x00', &(0x7f0000000280)='fuse\x00', 0x2080000, 0x0) (async) ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) (async) open(&(0x7f00000003c0)='./tracefs/dynamic_events\x00', 0x14927e, 0x0) (async) 6.700543371s ago: executing program 9 (id=2846): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) write$UHID_INPUT2(r1, 0x0, 0x9) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r3) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) unshare(0x62020600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000a80)={'syzkaller1\x00', 0x1}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) write$tun(r4, &(0x7f0000000c80)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x50, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a, 0x0, '\x00', [@generic={0xd}]}]}}}}}}, 0x86) (fail_nth: 2) 6.650670168s ago: executing program 5 (id=2848): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='my_tracefs\x00', &(0x7f00000001c0)='tracefs\x00', 0x1, 0x0) truncate(&(0x7f0000000480)='my_tracefs/events/task/task_rename/filter\x00', 0x100000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000002740)='./proc\x00', &(0x7f0000002780)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000027c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r1, &(0x7f0000002800)='27', 0x2) sigaltstack(&(0x7f0000002840)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000002880)={&(0x7f00000028c0)}) sigaltstack(0x0, &(0x7f0000002900)={0x0}) r2 = add_key$keyring(&(0x7f0000002940), &(0x7f0000002980)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000029c0), &(0x7f0000002a00)={'syz', 0x3}, 0x0, 0x0, r2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000540)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc}, {0x40000001, 0x0, 0x0, 0xe, 0x0, 0x9, 0x1}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r10, 0x4068aea3, &(0x7f00000005c0)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000640)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000680)=@svm={0x0, 0x1, 0x1080, {0x0, 0x1}, {"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"}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000440)={0x20, r7, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r7}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r6}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r5, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r4}) 6.211144525s ago: executing program 5 (id=2850): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='mtd0\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='jffs2\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000084, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt/fillfile\x00', 0x42, 0x9f) write(r3, &(0x7f0000000680)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5b4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x3, 0xe3a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_queues(r7, r5, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) 5.709799021s ago: executing program 5 (id=2851): r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/sys/kernel/watchdog_thresh\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x84) read$FUSE(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048010}, 0x44000) write$UHID_INPUT2(r2, 0x0, 0xffffffffffffff31) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x30, 0x0, &(0x7f0000000180)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f00000005c0)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000600)={0x581, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r7) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x6f8, 0xb000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x10, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x26, 0x30, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb1, 0x8, 0x0, {0xa, 0x25, 0x25, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xa, 0x4, {0xa, 0x25, 0x25, 0xe, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000000480)={0xfffffeb8, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) unshare(0x62020600) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000a00)={'syzkaller1\x00', 0xc201}) 3.727182165s ago: executing program 8 (id=2856): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = socket$inet6(0xa, 0x80003, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4000, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x280, 0x20000000007fff}}, @nested_vmlaunch={0x12f, 0x18}], 0xb8}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.597400646s ago: executing program 9 (id=2857): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, 0x0, 0x0, 0x20040804) setsockopt$sock_int(r2, 0x1, 0x12, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x210000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0xfc7f, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) 3.360682138s ago: executing program 6 (id=2858): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setstatus(r0, 0x4, 0x800) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_mptcp_MPTCP_INFO(r0, 0x11c, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x40, r3, 0x5, 0x300, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x40}}, 0x0) 3.334440612s ago: executing program 8 (id=2859): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x602, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000080)={r1, 0x1, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f00000000c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000100)={r1, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000140)={0x0, 0x0, r4}) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000180)) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f0000000280)={0x0, 0x22, &(0x7f0000000240)="59c07fdf7e", {0x1, 0x7f, 0x3147504d, 0x4, 0x9, 0x783, 0x5, 0x2}}) ioctl$KDDELIO(r5, 0x4b35, 0x8) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f00000002c0)={{r0}, "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"}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000012c0)) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000001300)={@in6={{0xa, 0x4e24, 0x7, @empty, 0x6}}, 0x0, 0x0, 0x29, 0x0, "12e0dc14fe2fe8691c331684ea62d419e49728c1d9e74092f8744cfa9039d18a8fc690ad61125d08eb05bc19c1ba23a304cc5d8cc1b6f1981c3ca02019bd5ab391af44727df47f2a46fb11c6b990cb6b"}, 0xd8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r2, 0x37c3a000) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000001400)) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001440), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001480)={'wlan1\x00'}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r6, 0x4068aea3, &(0x7f0000001500)={0xa3, 0x0, &(0x7f00000014c0)}) r7 = syz_open_procfs(0x0, &(0x7f0000001580)='net/nfsfs\x00') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000016c0)={&(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000001700)={0x2, r8, 0x1, 0xd, 0x80000000, 0x1, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000001740)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000001780)={0x3, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r9, 0x40206435, &(0x7f00000017c0)={0x0, r10}) ioctl$PTP_SYS_OFFSET_EXTENDED(r6, 0xc4c03d09, &(0x7f0000001800)={0x19}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r6, 0xc0386447, &(0x7f0000001d00)={{0x8, 0x7, &(0x7f0000001cc0)=[{0x80, 0x0, 0x5}, {0x6, 0x0, 0x3a2}, {0x55, 0x0, 0x1}, {0x8, 0x0, 0xd}, {0x4, 0x0, 0x3}, {0x5, 0x0, 0xeed}, {0x5, 0x0, 0x4}]}, 0x4b, 0x9, 0x2, 0x3, 0x0, 0x4, 0x6, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r5, 0xc010644a, &(0x7f0000001d40)={r11}) getdents64(r5, &(0x7f0000001d80)=""/10, 0xa) 3.213877679s ago: executing program 9 (id=2860): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x1, 0x0, r1, 0x9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000240)={0x28, 0x1, r2, r3, 0x0, 0x0, 0x0, 0x45, &(0x7f00000001c0)="c512cdb938387544cee4a73d35a53f51450b041fb13707fa0c579a793588d8a037e1821735cb2f375066179779fa30f6e4707d4b076914b0cf9c46cfd8c0fed6a8a60b7b72"}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000002c0)={0x28, 0x0, r2, 0xc, &(0x7f0000000280)=""/12}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x7, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r4, 0x0, 0x19, 0x0, &(0x7f00000003c0), 0x5}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}]}}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x20800, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000540)={0x18, 0x1, 0x1, 0x0, r1, 0xfffffffffffffff8}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x410000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f00000006c0)={0x28, 0x1, r7, r1, 0x0, 0x0, 0x0, 0x57, &(0x7f0000000640)="971aa21114274168f6d3243d84230b0c33dc6790bf1c1c93c9ca7dbd57452969baa2b28b4f3e62e9cad50193eca4813355b53175240701938a6313d68f29feafbe7a6be8f45231124a2b011d35a3e488aaccd6b9c63aae"}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000700)={0x18, 0x1, 0x0, 0x0, r3, 0xe}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x7, r4, 0x0, 0x1, 0x0, 0x8, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x6, r3, 0x0, r8}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) mkdirat(r9, &(0x7f0000000880)='./file0\x00', 0x204) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), r9) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000900)={0x48, 0x6, r3, 0x0, r8}) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000000980)={0x8, r1}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f00000009c0)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000a80)=0x0) sendmsg$nl_generic(r9, &(0x7f0000000fc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xa2006}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ac0)={0x4bc, 0x19, 0x400, 0x70bd25, 0x25dfdbfe, {0xe}, [@generic="91619ccae4f3bebed8cafce9bc4864e79830516fcd7f385064991d605080415229f87bd743e2f7d507df0582f8d1747f7f1a0051284d58ba77661e91acaaaa4d8a4174d91a2a6d4589d4278705b469ba57ce59e62d1d2be406e2bb82c31c318107a17fb47b77e64a4fab0b72b96cf44f0ba83c88bc2cfd41d000bdf607916450bc47ad249a03ab2699771800d0955fb365b863efd975d789300d476e671332b9103c6425878b1888ea3e5b3f5ed3a4dd6810152d05674e0f1a3d4df918b50e9d95fd2c733564287b5edfcc04186818d8f2a521897d677d343e47e3ea95ff6f9e7226e4640c20bbe43e62c5a219ddf78786cdcf", @typed={0x8, 0x3f, 0x0, 0x0, @u32=0x3}, @generic="27568b27cf1bf57a5abaebdf35e3cf20992434e3e0cb8f741f5c3b77c12e002e47eb2044b7ca30ab7b815f87ccdc048110b9b09b418e48fc5689712eb17415dcf4fa8da5498a416431e610525c7f34da862e2c", @nested={0x7f, 0x10c, 0x0, 0x1, [@generic="50ad29fa651734de0ac64f75e19542e74e43c5b081a8e66a2a233889037aab81e3b00e031875e8f1b5dd3437051852d17734258e7018861b3ca3900831991963e8f47ecb118d450e2c3ffaca00626ee0c903af8bc621db242f8ae33a3f3d7223e093ec71002a153f328601dcf852d50c70081ba2c34efd", @nested={0x4, 0x9}]}, @generic="55a97c0bf72ba4f613c551525f6b575eb182828df5e2d7d7ab1392fa54915d9ef17c51d77f2de7b6aee49614c5156e1287b3671dd0f3614df19acea587a6101f7e451c2f79558284363519017225a57fd9d403f47d2b24c8eb33f8d98834be204526345e588c50b94af9b9dccc8b46b1f90ffabc247771ef276327984507f69b2e06edb11860b2729845d0e57a5efe35952e8b08a29fda1119", @nested={0xf8, 0x2b, 0x0, 0x1, [@typed={0xcd, 0x157, 0x0, 0x0, @binary="7a7e94799d5f8781c2478c2beba2a26a1744400e21f10c4b60fff30091061f62d1f349c7d148717bd2a2e2225b41eaf9da722c4dde9c7e3345e77afae00d902e4201e80b47c4eb51984000faa673b3423c3b67fed532482f43e034e8290e62e7e628f607bdbdafc40768081b9b5169da4aa9b39d1056276a5ef2ed04b07ae10a6fceab9809326075152a132ae349be9023f53a16a01c7ff6c39982d76e014bd9c6eef30a13458bcdec7b66e94355d4e5b0886a22f2b1fa7c03f8f4153e6653c2bfccea3813899e7cb2"}, @generic="68f45b61a67469b5a804ad55bf47fd4c", @typed={0x8, 0xd2, 0x0, 0x0, @pid=r11}, @typed={0xc, 0x47, 0x0, 0x0, @u64}]}, @generic="c408d5ddcf4697d31fc6c10572d0cf095c8ee45b52b98e6b8a7744adba00857a06d1538d21be53111489316621f16ba2c1dc5771162582adf1685eaaee10a9a32bf29de87bfcf069eb11782ecc02235ac357a4a1653b7ac85d441cdda8d974752b372247b787b0277548d21f4add", @generic="cee328f49066a8d015ce979dece134840dde1f0b0f59c7eb368432feec82df21fad7ff1cfa", @nested={0xb4, 0x12b, 0x0, 0x1, [@generic="861f3cb771e28f2c3a96b53f3d0f3aeda480a7dd54dba307a738bbe4205ebe668aea09cb6369833e44b2e626d607e3150d923aa809519eef8ded84f2dc47660747d2a09f701459168cc8ffe1ac3eef9d693427388cf257e90e75c41ea9563f152ac311135a9f058c4ab76ab8dc20be18d099f3be09c2462ae99eb7d8c5a48a94d20d6a1941dd22bd1493345f84b09bffde96c45d2d222eb562a1bcaa", @typed={0x8, 0x6e, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x13}, @typed={0x8, 0x64, 0x0, 0x0, @uid=0xee00}]}]}, 0x4bc}}, 0x2800) fcntl$setownex(r10, 0xf, &(0x7f0000001000)={0x1, r11}) 3.081468089s ago: executing program 6 (id=2861): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0x7}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0xb8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0x7}, {0xa, 0x4e24, 0xf107, @empty, 0x8000}, r3, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000480)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) getsockname$tipc(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x44000000053cf) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x8010, r0, 0x6baca000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r4, 0x301, 0x70bd2b, 0x25dfdbfe, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 3.081229826s ago: executing program 8 (id=2862): socket$inet_sctp(0x2, 0x5, 0x84) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0x7}, @ext={0x0, 0x0}}, {0xfd, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @tick=0xa00000, {}, {0x0, 0xc0}, @control={0x1, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {0xff}, {}, @time=@time={0x8, 0xa}}], 0x70) 2.958976002s ago: executing program 8 (id=2863): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c000240010000000000000008000440000000010c0001400000000000000003"], 0xf8}}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000005c0)=""/90) r3 = syz_open_pts(r0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r5, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r6, @ANYBLOB="05003400100000000a0006"], 0x1e4}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001f00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000800)={0x16b8, 0x0, 0xe10e1f64017dd4e7, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x10c, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9f169ad914d771c2239f2ad3d249196d2436eef67dfbba4e39534d05f2208f07"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @loopback}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x200, @remote, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7991ada6f2c111436eee069416a5ce6abd08ed028c064ded3510db3574539af4"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x1574, 0x8, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @mcast1, 0xa}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d8afee14f7dce705ee2ee117eb842dfd110e3dbe39d61572c87a4357d6b75133"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe, @private1, 0x6}}]}, {0x620, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x20, @empty, 0x101}}, @WGPEER_A_ALLOWEDIPS={0x340, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10001, @remote, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x634, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x4b4, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x10001, @empty, 0xe}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "af2daf6a990ffb5aa3eaf3ac33071606c3d8234c70cda23945da1450d8380e3d"}]}, {0x7a4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e404914e7d0b30a7218896a438d6e702cd1fd32844bb2b7bd6b9a0d1de794a00"}, @WGPEER_A_ALLOWEDIPS={0x734, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x5}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x16b8}, 0x1, 0x0, 0x0, 0x10}, 0x4080) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x2) ioctl$TCXONC(r3, 0x540a, 0x0) r7 = socket(0x10, 0x3, 0x0) close(0x3) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000001f40)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)={0x5dc, 0x0, 0x1, 0x70bd29, 0x101, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x350, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x31, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0x2b4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ALLOWEDIPS={0x28c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6090}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x240, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dd7f3375e7f34ea3f919e91976338bb1f931c549b1c3fada1cabcf625e83d7f3"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}, {0x1fc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_ALLOWEDIPS={0x98, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010101}}]}]}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x20040844}, 0x4c0c1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x30) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0xcf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0xff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r10, 0x89e0, &(0x7f0000000640)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000580)=0x9c) 2.697766294s ago: executing program 9 (id=2864): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (fail_nth: 1) 2.532818076s ago: executing program 8 (id=2865): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.365586944s ago: executing program 6 (id=2866): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write(r0, &(0x7f0000000580)='transport=fc,traddr=nn-33333333333333:pnpnx4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2232222222222222,nqn=n', 0x79) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x9, 0x141500) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket(0x2d, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000600)={0xa, 0x4e22, 0x40009, @loopback, 0x6}, 0x1c) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x188, 0x8, 0xa, 0xe16bf8fe2cf78951, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x160, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4c20}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_TTL={0x5, 0x2, 0xd}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}]}}}, {0x1c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0xfffffffb}]}}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b0}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000004800000000000100000a88000000090a051100000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000180)=r4) r7 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x6, 0x100) ioctl$DVB_DVR_DMX_EXPBUF(r7, 0xc00c6f3e, &(0x7f0000000040)={0x7, 0x80000, r2}) 1.331160817s ago: executing program 9 (id=2867): syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) write(r0, &(0x7f0000000240), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f00000005c0)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640), 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0xd) (async) fallocate(r2, 0x0, 0x0, 0xd) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000002c0)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000002c0)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x36}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) open(&(0x7f00000006c0)='./file1\x00', 0x4080, 0x118) (async) open(&(0x7f00000006c0)='./file1\x00', 0x4080, 0x118) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000340)={{0x84, @empty, 0x4e24, 0x3, 'lc\x00', 0xe, 0x323b, 0x55}, {@loopback, 0x4e23, 0x2, 0x244, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f00000003c0)={&(0x7f0000000400)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f046}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000700)={0x2, 0x4e22, @multicast2}, 0x10) (async) bind$inet(r6, &(0x7f0000000700)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x800000000f, &(0x7f0000000740)=0xa, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r7, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bind$inet6(r7, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYBLOB="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"], 0x0) 1.268424394s ago: executing program 8 (id=2868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='io.stat\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f00000004c0)='./md0\x00', 0x6180, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000007c0)={&(0x7f0000000800)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r6 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000500)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r6, 0x40480923, &(0x7f0000000540)={0xffffffff, 0x0, 0x0, 0x800, 0xffffffffffffffff, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000}) ioctl$ADD_NEW_DISK(r6, 0x40140921, &(0x7f00000005c0)={0x1b, {0x1, 0x1}, 0x1, 0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000070a01090900020073797a32000000000900010073797a3100"/44], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) add_key(&(0x7f0000000300)='pkcs7_test\x00', 0x0, &(0x7f0000000340)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) 1.048166104s ago: executing program 6 (id=2869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc81}, 0x40000) 1.012451209s ago: executing program 6 (id=2870): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3bf5, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=2871): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sched_setscheduler(0x0, 0x5, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x129a82, 0x119) sendfile(r2, r2, 0x0, 0xb) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x206041, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x3}, 0x18) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r7, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x2000011) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x7, 0x56b, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x13, 0x15, 0xd2, 0x40, 0x91ab, 0xd1e4, 0xad59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x559, 0x3, 0x0, 0x2, 0x60, 0xe, "", [{{0x9, 0x4, 0xd5, 0x7, 0x8, 0x7, 0x1, 0x2, 0x5d, [], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x1, 0x5, [@generic={0xc4, 0xc, "3975cf3360101a067949ed900e6d92553b415b1d8b5dd2c40ea809f0640daa23f3f8926d30bd7f6947af5ea4d69b31e71d7b11b6d31f8df571718cb06bacab51405df3c90d6ec4d598b3cc6245b91a9cb51c884c319672662c905014267e856d4d78b6753003f48ed31a7cd6b1e0c5256ef26976734036229163596194d85a933a5d923dfb8c69391a19533ea87417e7428c8095cc5210dc79c01ba8c0e26c57bd84c9bf6fe634d9f34411dad7cc4c9fe4673385a207aa9e351ee2ad33a861e5241b"}, @generic={0x8, 0x4, "5a84f54ff014"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x3, 0x1, 0x7f}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0xff, 0x7, 0x6}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x3, 0x1, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0xc, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x86}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xf800}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xb, 0x1, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x5}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x5, 0x8, 0x9d, [@generic={0xe4, 0x23, "43ed015105829cebb492076bf3a28a7a8631e765449d407b7bf9251d5a4ba9e2c065d9724005156d308c7842693e582aff0cde5d0b1ae61c8a3acde9c2b5fbbc000bae67874be0ba1eaa8d83cd44515a0b39401e10ddf4b4a0a7836ed276a37edbfe36c98c59117e3feaa78547435b2d098d68bab61646f024eea6d8f577f7e9b9fafed267c7e8e5c46be126011fee9e06f15ee33d3fec66d7b2fda666bb97d34170c72ea02e296664d7abe74c758fee18da54e66499f599e4bdf226d248b490a24b2b82c79950eef26b958740e02991c9149dcf3b944210f77323f71c7763c2a3ce"}]}}]}}, {{0x9, 0x4, 0x5e, 0x2, 0x1, 0xf5, 0x7b, 0x18, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "a937f21268"}, {0x5, 0x24, 0x0, 0xfff0}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x8, 0xfc}, {0x6, 0x24, 0x1a, 0x9, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0xa}, @mdlm={0x15, 0x24, 0x12, 0xf3}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "fcddee"}, {0x5, 0x24, 0x0, 0x48b4}, {0xd, 0x24, 0xf, 0x1, 0xbdd, 0x400, 0xa, 0xfa}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x7, 0x5, 0x6, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0xfe, 0x4, 0x6, 0x90}]}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0x81, 0x5}}]}}, {{0x9, 0x4, 0x1, 0x2, 0x3, 0xbc, 0x4d, 0x51, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x40}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0x3, 0x57, "3bd10b636dc2"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x6, "e4bf42d9"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x1, 0x4, [0x2, 0x5, 0x4, 0x7], 0x3}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x2, 0x2, [0x7, 0x9], 0x9}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x6, "82"}]}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x0, 0x6, '{'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x6, 0x4, "e6", "b6eb"}, @as_header={0x7, 0x24, 0x1, 0xbd, 0xf7, 0x4}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xb2, 0x4, 0xfc, 0xfa, '@'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa394, 0x40, 0x76, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x90, 0x2, 0x89, 0xeb, "", "231f"}]}], [{{0x9, 0x5, 0x7, 0x19, 0x400, 0x3, 0x1, 0x4, [@generic={0xcb, 0x6, "e4ea15fa9b3cd6d42ded70d80f57ce01cd333946c0598fdb53ce0d8d5553340c1e8a8755ae5544307b40d8748c125769ae84ee73db2a2d1c0c2f6c80711a9859ff172922aaf23c8468ea54ac980113870e912948d122cd6478fd2374f82aa10db607a2392cdf05ee7bacd0aca4f8a3a240f1cb8b29dc5cc16e58050f1149335685b3587923096dd5711ed253ef5deac3d798e11e4c0f53bcef5fa4f902dded8d3ebef8f0ac848da81bfd8f6a583789f7046a7bf09e524b25348f8b341c688762244a5287698fdae3c9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5e78}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x9, 0x8, 0x2, [@generic={0x5b, 0x10, "9aa91027195eaa7f87cd6d79f9263966f1df094758d75dd0bdc925102bfedf33456d949518f8899a2cbf64ac09098e9918de98cffdd082edd5483970f6692668376987e2dd63079d572ed31d1a5bf51e109002642c2417568e"}, @generic={0x6, 0xd0f17ba311065045, "bf4e4e32"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x6, 0x0, 0x5, [@generic={0xbc, 0xf, "d0f0dcb549cce4e56bfea0e4c823d95ade3e1d0dcfe5c235b49712a7e3aaa2375b7e644709e4c75e8322447b91456b397ce9b37a9e010cca6a5357953d2a9a063bca4f7e38c5e9613556cc0aa47820facca6746c7f7b9d1cb7cfb51f7d4865eb44465a402189d2d2cbbd8f96fc794be94f60d995da31db09389b244c913753c484b92400bf63ae302d3d3714d5a577b0785f3220b3ff491274808cec9bdff4dcc368524cca26439ae4d95aa31e860bd2305ccc71a6be0744ecfc"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x37}]}}]}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x110, 0x3, 0xf2, 0x9, 0x8, 0xa0}, 0xb3, &(0x7f0000000ac0)={0x5, 0xf, 0xb3, 0x4, [@generic={0x79, 0x10, 0x0, "2d901d809d123d714dd0e125e3fd95204bd604a8414433ebb50fe26dd1c7dddfe3c9b00f1a347ff35d71abf27e65255c705a9634e7e54d96587242a34cbb35de80719aec095f41da61c76b1c6e148ecfef14124d91189efa63c96a3e75b599ed012fd104544ae8405d1e0e161090c3ad3b1a892266e7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xfa, 0xfe, 0xffff}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x7, 0x2, 0xb}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x25, 0xf, 0x41b, [0xf, 0x3f00, 0xffff0f, 0xff000f, 0xc030, 0xffc000]}]}, 0x2, [{0xc8, &(0x7f0000000b80)=@string={0xc8, 0x3, "7128482aba38a1656589e56fa4d20dce31bb0422443f2d7da9b4e63f0705988ecd05641d123629e409da30668cf02e2757cb900d9bcee5027dbdfa3bf6232dac51886db5729813ed6d2ccf35acc9498c9ff20cc740d1acd1085fd3af2f4a41e66c9933d53f3f8186c29f509a586832d82f9432ca49c9ed39e39853a28e270752a7fb28468a6a19c4aa55e71bbcd4a3b0c7e69cecad917825310153d412b3529e122a135aca0db788d00e55d0e35a7ae6c38a333d23648b544139f40096d468c12a4988548d97"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x861}}]}) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r10}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): bmit+0x10/0x10 [ 664.283994][T14919] ? ksys_write+0x242/0x270 [ 664.284021][T14919] do_syscall_64+0x171/0x540 [ 664.284040][T14919] ? trace_irq_disable+0x3b/0x140 [ 664.284057][T14919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.284071][T14919] ? clear_bhb_loop+0x70/0xc0 [ 664.284086][T14919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.284099][T14919] RIP: 0033:0x00007f637e1a8f19 [ 664.284113][T14919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.284124][T14919] RSP: 002b:00007f637f021028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 664.284138][T14919] RAX: ffffffffffffffda RBX: 00007f637e425fa0 RCX: 00007f637e1a8f19 [ 664.284147][T14919] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 00007f637f000000 [ 664.284156][T14919] RBP: 00007f637f021090 R08: 0000000000000000 R09: 0000000000000000 [ 664.284164][T14919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.284172][T14919] R13: 00007f637e426038 R14: 00007f637e425fa0 R15: 00007ffc8445d7d8 [ 664.284196][T14919] [ 664.544824][ T5741] legousbtower 6-1:14.57: interrupt endpoints not found [ 664.922646][T14929] netlink: 'syz.6.2509': attribute type 1 has an invalid length. [ 664.946139][ T5741] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 664.961717][ T5741] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 665.151951][ T5727] usb 6-1: USB disconnect, device number 69 [ 665.165873][ T5727] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 665.629993][ T5727] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 665.768740][T14939] ublk3: read batch cmd buffer failed [ 665.768879][T14939] ublk3: read batch cmd buffer failed [ 665.778721][ T5727] usb 10-1: Using ep0 maxpacket: 16 [ 665.782540][ T5727] usb 10-1: New USB device found: idVendor=5543, idProduct=0003, bcdDevice=0.00 [ 665.783659][ T5727] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 665.783685][ T5727] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.783723][ T5727] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.790080][ T5727] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 665.790105][ T5727] usb 10-1: no configuration chosen from 1 choice [ 665.865253][T14939] ublk3: read batch cmd buffer failed [ 665.865387][T14939] ublk3: read batch cmd buffer failed [ 665.899084][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2514'. [ 665.899113][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2514'. [ 666.019455][T14949] ieee802154 phy0 wpan0: encryption failed: -22 [ 666.021779][T14949] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2516'. [ 666.044491][T14949] FAULT_INJECTION: forcing a failure. [ 666.044491][T14949] name failslab, interval 1, probability 0, space 10, times 0 [ 666.044530][T14949] CPU: 0 UID: 0 PID: 14949 Comm: syz.5.2516 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.044561][T14949] Tainted: [L]=SOFTLOCKUP [ 666.044570][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 666.044584][T14949] Call Trace: [ 666.044594][T14949] [ 666.044603][T14949] dump_stack_lvl+0xe8/0x150 [ 666.044644][T14949] should_fail_ex+0x3eb/0x540 [ 666.044689][T14949] should_failslab+0xa8/0x100 [ 666.044726][T14949] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 666.044755][T14949] ? snd_pcm_hw_rule_add+0x196/0x800 [ 666.044782][T14949] ? snd_pcm_hw_rule_add+0x196/0x800 [ 666.044806][T14949] ? kfree+0x4d/0x650 [ 666.044826][T14949] ? snd_pcm_hw_rule_add+0x196/0x800 [ 666.044852][T14949] krealloc_node_align_noprof+0x19a/0x390 [ 666.044888][T14949] snd_pcm_hw_rule_add+0x196/0x800 [ 666.044913][T14949] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 666.044943][T14949] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 666.044973][T14949] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 666.045021][T14949] snd_pcm_open_substream+0xebf/0x24f0 [ 666.045061][T14949] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 666.045092][T14949] ? mutex_init_lockdep+0xdf/0x110 [ 666.045126][T14949] snd_pcm_oss_open+0xf0b/0x1c00 [ 666.045178][T14949] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 666.045204][T14949] ? irqentry_exit+0x2a0/0x9b0 [ 666.045243][T14949] ? do_raw_spin_lock+0x12b/0x2f0 [ 666.045276][T14949] ? __pfx_default_wake_function+0x10/0x10 [ 666.045324][T14949] chrdev_open+0x4d9/0x600 [ 666.045363][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 666.045396][T14949] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 666.045430][T14949] ? devcgroup_check_permission+0x31/0x8f0 [ 666.045470][T14949] ? __pfx_chrdev_open+0x10/0x10 [ 666.045503][T14949] do_dentry_open+0x80e/0x1360 [ 666.045539][T14949] vfs_open_consume+0x4a/0x350 [ 666.045561][T14949] ? path_openat+0x16e1/0x20f0 [ 666.045594][T14949] path_openat+0x16fc/0x20f0 [ 666.045656][T14949] do_file_open+0x23e/0x4a0 [ 666.045693][T14949] ? __pfx_do_file_open+0x10/0x10 [ 666.045747][T14949] ? _raw_spin_unlock+0x28/0x50 [ 666.045777][T14949] ? alloc_fd+0x6af/0x760 [ 666.045816][T14949] do_sys_openat2+0x115/0x200 [ 666.045841][T14949] ? __se_sys_futex+0x3a8/0x450 [ 666.045865][T14949] ? __pfx_do_sys_openat2+0x10/0x10 [ 666.045896][T14949] ? rcu_is_watching+0x16/0xb0 [ 666.045936][T14949] __x64_sys_openat+0x138/0x170 [ 666.045967][T14949] do_syscall_64+0x171/0x540 [ 666.045999][T14949] ? trace_irq_disable+0x3b/0x140 [ 666.046029][T14949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.046051][T14949] ? clear_bhb_loop+0x70/0xc0 [ 666.046080][T14949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.046102][T14949] RIP: 0033:0x00007fa2fb7a8f19 [ 666.046126][T14949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.046145][T14949] RSP: 002b:00007fa2fc5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 666.046169][T14949] RAX: ffffffffffffffda RBX: 00007fa2fba25fa0 RCX: 00007fa2fb7a8f19 [ 666.046187][T14949] RDX: 0000000000109002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 666.046202][T14949] RBP: 00007fa2fb837f6d R08: 0000000000000000 R09: 0000000000000000 [ 666.046217][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.046231][T14949] R13: 00007fa2fba26038 R14: 00007fa2fba25fa0 R15: 00007ffd9d1924b8 [ 666.046269][T14949] [ 666.935395][T14977] FAULT_INJECTION: forcing a failure. [ 666.935395][T14977] name failslab, interval 1, probability 0, space 10, times 0 [ 666.935434][T14977] CPU: 0 UID: 0 PID: 14977 Comm: syz.5.2524 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.935464][T14977] Tainted: [L]=SOFTLOCKUP [ 666.935473][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 666.935486][T14977] Call Trace: [ 666.935495][T14977] [ 666.935505][T14977] dump_stack_lvl+0xe8/0x150 [ 666.935545][T14977] should_fail_ex+0x3eb/0x540 [ 666.935578][T14977] should_failslab+0xa8/0x100 [ 666.935611][T14977] __kmalloc_noprof+0xf9/0x710 [ 666.935635][T14977] ? rcu_is_watching+0x16/0xb0 [ 666.935673][T14977] ? tomoyo_realpath_from_path+0xf2/0x640 [ 666.935701][T14977] ? tomoyo_realpath_from_path+0xf2/0x640 [ 666.935737][T14977] tomoyo_realpath_from_path+0xf2/0x640 [ 666.935775][T14977] ? tomoyo_path_number_perm+0x219/0x5f0 [ 666.935799][T14977] tomoyo_path_number_perm+0x246/0x5f0 [ 666.935826][T14977] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 666.935848][T14977] ? __lock_acquire+0x747/0x2de0 [ 666.935914][T14977] ? __fget_files+0x2a/0x420 [ 666.935942][T14977] ? __fget_files+0x2a/0x420 [ 666.935967][T14977] ? __fget_files+0x2a/0x420 [ 666.935997][T14977] security_file_ioctl+0xc3/0x2a0 [ 666.936021][T14977] __se_sys_ioctl+0x47/0x170 [ 666.936054][T14977] do_syscall_64+0x171/0x540 [ 666.936084][T14977] ? trace_irq_disable+0x3b/0x140 [ 666.936111][T14977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.936132][T14977] ? clear_bhb_loop+0x70/0xc0 [ 666.936157][T14977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.936177][T14977] RIP: 0033:0x00007fa2fb7a8f19 [ 666.936199][T14977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.936216][T14977] RSP: 002b:00007fa2fc5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.936240][T14977] RAX: ffffffffffffffda RBX: 00007fa2fba25fa0 RCX: 00007fa2fb7a8f19 [ 666.936256][T14977] RDX: 0000200000000040 RSI: 00000000c02c564a RDI: 0000000000000003 [ 666.936269][T14977] RBP: 00007fa2fc5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 666.936283][T14977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.936295][T14977] R13: 00007fa2fba26038 R14: 00007fa2fba25fa0 R15: 00007ffd9d1924b8 [ 666.936330][T14977] [ 666.936339][T14977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 667.035515][ T5905] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 667.226798][ T5905] usb 9-1: Using ep0 maxpacket: 32 [ 667.231354][ T5905] usb 9-1: unable to get BOS descriptor or descriptor too short [ 667.231410][ T5905] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 667.232869][ T5905] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 667.232895][ T5905] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 667.232916][ T5905] usb 9-1: config 14 has no interface number 0 [ 667.232933][ T5905] usb 9-1: config 14 has no interface number 1 [ 667.233003][ T5905] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 667.233030][ T5905] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 667.233057][ T5905] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 667.233085][ T5905] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 667.233115][ T5905] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 667.233143][ T5905] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.233171][ T5905] usb 9-1: config 14 interface 57 has no altsetting 0 [ 667.233190][ T5905] usb 9-1: config 14 interface 228 has no altsetting 0 [ 667.236536][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.236558][ T5905] usb 9-1: Product: syz [ 667.236574][ T5905] usb 9-1: Manufacturer: syz [ 667.236590][ T5905] usb 9-1: SerialNumber: syz [ 667.544034][T14986] CIFS: VFS: UNC: path must begin with // or \\ [ 667.544053][T14986] Malformed UNC in devname [ 667.544053][T14986] [ 667.544069][T14986] CIFS: VFS: Malformed UNC in devname [ 667.813531][ T5905] legousbtower 9-1:14.57: interrupt endpoints not found [ 667.847000][ T5741] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 668.000481][ T5741] usb 6-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 668.001876][ T5741] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 668.007118][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 668.007163][ T5741] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.007188][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 668.007212][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 668.011481][ T5741] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 668.011528][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 668.011553][ T5741] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.011577][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 668.011627][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 668.013072][ T5741] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 668.013116][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 668.013140][ T5741] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.013190][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 668.013215][ T5741] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 668.024003][ T5741] usb 6-1: string descriptor 0 read error: -22 [ 668.024188][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.077967][ T5741] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 668.261098][ T5905] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 668.266419][ T5905] legousbtower 9-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 668.376865][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2530'. [ 668.376932][T14996] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 668.424346][ T5727] usb 10-1: USB disconnect, device number 2 [ 668.471193][ T5802] usb 9-1: USB disconnect, device number 11 [ 668.497511][ T5802] legousbtower 9-1:14.228: LEGO USB Tower #-159 now disconnected [ 669.057046][ T5802] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 669.209130][ T5802] usb 10-1: Using ep0 maxpacket: 8 [ 669.216671][ T5802] usb 10-1: unable to get BOS descriptor or descriptor too short [ 669.222548][ T5802] usb 10-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=0.40 [ 669.245627][ T5802] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 177, changing to 7 [ 669.259902][ T5802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.259935][ T5802] usb 10-1: Product: syz [ 669.259952][ T5802] usb 10-1: Manufacturer: syz [ 669.259967][ T5802] usb 10-1: SerialNumber: syz [ 669.548177][T14998] rxe_eth0 speed is unknown, defaulting to 1000 [ 670.076835][ T5905] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 670.247218][ T5905] usb 9-1: Using ep0 maxpacket: 8 [ 670.250524][ T5905] usb 9-1: unable to get BOS descriptor or descriptor too short [ 670.250581][ T5905] usb 9-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=0.40 [ 670.253239][ T5905] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 177, changing to 7 [ 670.297692][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.297725][ T5905] usb 9-1: Product: syz [ 670.297742][ T5905] usb 9-1: Manufacturer: syz [ 670.297758][ T5905] usb 9-1: SerialNumber: syz [ 670.406997][T14986] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.541873][ T5722] usb 6-1: USB disconnect, device number 70 [ 670.695797][T15007] rxe_eth0 speed is unknown, defaulting to 1000 [ 670.935020][T15017] netlink: 'syz.6.2538': attribute type 2 has an invalid length. [ 671.043619][ T5802] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 671.087865][ T33] logitech-hidpp-device 0005:046D:B012.00AF: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 671.171819][ T5802] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 671.199323][ T5802] usb 10-1: USB disconnect, device number 3 [ 671.537363][ T5722] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 671.692532][ T5722] usb 6-1: Using ep0 maxpacket: 16 [ 671.695598][ T5722] usb 6-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 671.695674][ T5722] usb 6-1: too many configurations: 112, using maximum allowed: 8 [ 671.749197][ T5722] usb 6-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 671.749230][ T5722] usb 6-1: Product: syz [ 671.749246][ T5722] usb 6-1: Manufacturer: syz [ 671.806947][ T5722] r8152-cfgselector 6-1: Unknown version 0x0000 [ 671.807008][ T5722] r8152-cfgselector 6-1: config 0 descriptor?? [ 671.819651][ T5722] cdc_acm 6-1:0.0: Zero length descriptor references [ 671.819708][ T5722] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 672.472299][ T5741] logitech-hidpp-device 0005:046D:B012.00B0: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 672.476043][ T5905] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 672.734244][ T5905] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 672.772891][ T5905] usb 9-1: USB disconnect, device number 12 [ 672.795344][T15044] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 673.514861][T15051] CIFS: VFS: UNC: path must begin with // or \\ [ 673.514881][T15051] Malformed UNC in devname [ 673.514881][T15051] [ 673.514895][T15051] CIFS: VFS: Malformed UNC in devname [ 673.624091][T15051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.836812][ T5802] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 673.987750][ T5802] usb 10-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 673.990322][ T5802] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 673.990389][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 673.990419][ T5802] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.990445][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 673.990474][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 673.991808][ T5802] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 673.991856][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 673.991884][ T5802] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.991910][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 673.991937][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 674.065983][ T5802] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 674.066041][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 674.066071][ T5802] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 674.066098][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 674.066125][ T5802] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 674.169271][ T5802] usb 10-1: string descriptor 0 read error: -22 [ 674.169433][ T5802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.199961][ T5802] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 674.285365][ T5741] r8152-cfgselector 6-1: USB disconnect, device number 71 [ 674.401893][ T5905] usb 10-1: USB disconnect, device number 4 [ 674.707046][ T5741] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 674.837060][ T5741] usb 6-1: device descriptor read/64, error -71 [ 675.080837][ T5741] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 675.206828][ T5741] usb 6-1: device descriptor read/64, error -71 [ 675.317455][ T5741] usb usb6-port1: attempt power cycle [ 675.626915][ T5905] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 675.656860][ T5741] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 675.677827][ T5741] usb 6-1: device descriptor read/8, error -71 [ 675.792370][ T5905] usb 9-1: Using ep0 maxpacket: 32 [ 675.804117][ T5905] usb 9-1: unable to get BOS descriptor or descriptor too short [ 675.804177][ T5905] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 675.810953][ T5905] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 675.810981][ T5905] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 675.811001][ T5905] usb 9-1: config 14 has no interface number 0 [ 675.811016][ T5905] usb 9-1: config 14 has no interface number 1 [ 675.811080][ T5905] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 675.811111][ T5905] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 675.811134][ T5905] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 675.811159][ T5905] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 675.811183][ T5905] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 675.811208][ T5905] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.811233][ T5905] usb 9-1: config 14 interface 57 has no altsetting 0 [ 675.811250][ T5905] usb 9-1: config 14 interface 228 has no altsetting 0 [ 675.820460][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.820487][ T5905] usb 9-1: Product: syz [ 675.820500][ T5905] usb 9-1: Manufacturer: syz [ 675.820515][ T5905] usb 9-1: SerialNumber: syz [ 675.939061][ T5741] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 675.958930][ T5741] usb 6-1: device descriptor read/8, error -71 [ 676.067780][ T5741] usb usb6-port1: unable to enumerate USB device [ 676.259495][ T5905] legousbtower 9-1:14.57: interrupt endpoints not found [ 676.471909][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2570'. [ 676.471940][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2570'. [ 676.507342][T15117] UBIFS error (pid: 15117): cannot open "ubi:0", error -19 [ 676.510328][T15115] UBIFS error (pid: 15115): cannot open "ubi:0", error -19 [ 676.657500][ T5905] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 676.661515][ T5905] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 677.221897][T15135] fuse: fd is not a fuse device [ 677.267099][ T5741] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 677.427952][ T5741] usb 10-1: Using ep0 maxpacket: 32 [ 677.435367][ T5741] usb 10-1: unable to get BOS descriptor or descriptor too short [ 677.435458][ T5741] usb 10-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 677.438817][ T5741] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 677.438843][ T5741] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 677.438862][ T5741] usb 10-1: config 14 has no interface number 0 [ 677.438877][ T5741] usb 10-1: config 14 has no interface number 1 [ 677.438967][ T5741] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 677.438991][ T5741] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 677.439016][ T5741] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 677.439041][ T5741] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 677.439068][ T5741] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 677.439092][ T5741] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.439117][ T5741] usb 10-1: config 14 interface 57 has no altsetting 0 [ 677.439134][ T5741] usb 10-1: config 14 interface 228 has no altsetting 0 [ 677.446525][ T5741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.446550][ T5741] usb 10-1: Product: syz [ 677.446564][ T5741] usb 10-1: Manufacturer: syz [ 677.446578][ T5741] usb 10-1: SerialNumber: syz [ 677.873694][ T5741] legousbtower 10-1:14.57: interrupt endpoints not found [ 678.279479][ T5741] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 678.281542][ T5741] legousbtower 10-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 678.470178][ T5741] usb 9-1: USB disconnect, device number 13 [ 678.506512][ T5905] usb 10-1: USB disconnect, device number 5 [ 678.530328][ T5741] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 678.576361][ T5905] legousbtower 10-1:14.228: LEGO USB Tower #-159 now disconnected [ 678.844092][T15161] netlink: 'syz.5.2587': attribute type 2 has an invalid length. [ 678.942619][T15167] jffs2: notice: (15167) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 679.130226][T15172] Bluetooth: (null): Non-link packet received in non-active state [ 679.664158][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2595'. [ 679.664208][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2595'. [ 679.676137][ T5802] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 679.837137][ T5802] usb 10-1: Using ep0 maxpacket: 32 [ 679.855759][ T5802] usb 10-1: unable to get BOS descriptor or descriptor too short [ 679.855816][ T5802] usb 10-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 679.877412][ T5802] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 679.877446][ T5802] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 679.877468][ T5802] usb 10-1: config 14 has no interface number 0 [ 679.877485][ T5802] usb 10-1: config 14 has no interface number 1 [ 679.877553][ T5802] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 679.877580][ T5802] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 679.877608][ T5802] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 679.877645][ T5802] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 679.877675][ T5802] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 679.877703][ T5802] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.877730][ T5802] usb 10-1: config 14 interface 57 has no altsetting 0 [ 679.877749][ T5802] usb 10-1: config 14 interface 228 has no altsetting 0 [ 679.883782][ T5802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.883813][ T5802] usb 10-1: Product: syz [ 679.883829][ T5802] usb 10-1: Manufacturer: syz [ 679.883843][ T5802] usb 10-1: SerialNumber: syz [ 680.268544][T15200] overlayfs: unescaped trailing colons in lowerdir mount option. [ 680.443874][ T5802] legousbtower 10-1:14.57: interrupt endpoints not found [ 680.845655][ T5802] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 680.859613][ T5802] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 681.123103][T15215] FAULT_INJECTION: forcing a failure. [ 681.123103][T15215] name failslab, interval 1, probability 0, space 10, times 0 [ 681.123143][T15215] CPU: 0 UID: 0 PID: 15215 Comm: syz.5.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.123177][T15215] Tainted: [L]=SOFTLOCKUP [ 681.123185][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 681.123199][T15215] Call Trace: [ 681.123209][T15215] [ 681.123220][T15215] dump_stack_lvl+0xe8/0x150 [ 681.123260][T15215] should_fail_ex+0x3eb/0x540 [ 681.123307][T15215] should_failslab+0xa8/0x100 [ 681.123343][T15215] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 681.123375][T15215] ? key_alloc+0x38c/0xd20 [ 681.123401][T15215] ? key_alloc+0x38c/0xd20 [ 681.123435][T15215] kmemdup_noprof+0x2b/0x70 [ 681.123461][T15215] key_alloc+0x38c/0xd20 [ 681.123504][T15215] keyring_alloc+0x45/0xb0 [ 681.123538][T15215] call_sbin_request_key+0x32f/0xbf0 [ 681.123569][T15215] ? request_key_auth_free_preparse+0x9/0x10 [ 681.123605][T15215] ? __pfx_call_sbin_request_key+0x10/0x10 [ 681.123631][T15215] ? do_raw_spin_unlock+0xf5/0x200 [ 681.123692][T15215] ? __pfx_request_key_auth_new+0x10/0x10 [ 681.123738][T15215] request_key_and_link+0xf31/0x15c0 [ 681.123776][T15215] ? __pfx_request_key_and_link+0x10/0x10 [ 681.123816][T15215] ? __pfx_key_default_cmp+0x10/0x10 [ 681.123848][T15215] ? __pfx_keyring_search_iterator+0x10/0x10 [ 681.123890][T15215] ? down_read+0x2b9/0x320 [ 681.123918][T15215] ? _copy_from_user+0x94/0xb0 [ 681.123955][T15215] __se_sys_request_key+0x29a/0x350 [ 681.123994][T15215] ? __pfx___se_sys_request_key+0x10/0x10 [ 681.124045][T15215] do_syscall_64+0x171/0x540 [ 681.124079][T15215] ? trace_irq_disable+0x3b/0x140 [ 681.124107][T15215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.124129][T15215] ? clear_bhb_loop+0x70/0xc0 [ 681.124158][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.124182][T15215] RIP: 0033:0x00007fa2fb7a8f19 [ 681.124205][T15215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.124225][T15215] RSP: 002b:00007fa2fc5a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 681.124252][T15215] RAX: ffffffffffffffda RBX: 00007fa2fba25fa0 RCX: 00007fa2fb7a8f19 [ 681.124277][T15215] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000200000000100 [ 681.124293][T15215] RBP: 00007fa2fb837f6d R08: 0000000000000000 R09: 0000000000000000 [ 681.124308][T15215] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 681.124323][T15215] R13: 00007fa2fba26038 R14: 00007fa2fba25fa0 R15: 00007ffd9d1924b8 [ 681.124360][T15215] [ 681.383677][T15217] CacheFiles: Empty tag specified [ 681.383729][T15217] CacheFiles: Empty tag specified [ 681.383761][T15217] CacheFiles: Empty tag specified [ 681.383794][T15217] CacheFiles: Empty tag specified [ 681.383826][T15217] CacheFiles: Empty tag specified [ 681.383857][T15217] CacheFiles: Empty tag specified [ 681.383889][T15217] CacheFiles: Empty tag specified [ 681.383921][T15217] CacheFiles: Empty tag specified [ 681.383954][T15217] CacheFiles: Empty tag specified [ 681.383985][T15217] CacheFiles: Empty tag specified [ 681.384017][T15217] CacheFiles: Empty tag specified [ 681.384049][T15217] CacheFiles: Empty tag specified [ 681.384081][T15217] CacheFiles: Empty tag specified [ 681.384113][T15217] CacheFiles: Empty tag specified [ 681.384145][T15217] CacheFiles: Empty tag specified [ 681.384177][T15217] CacheFiles: Empty tag specified [ 681.385901][T15217] CacheFiles: Empty tag specified [ 681.385937][T15217] CacheFiles: Empty tag specified [ 681.385969][T15217] CacheFiles: Empty tag specified [ 681.386001][T15217] CacheFiles: Empty tag specified [ 681.386032][T15217] CacheFiles: Empty tag specified [ 681.386064][T15217] CacheFiles: Empty tag specified [ 681.386096][T15217] CacheFiles: Empty tag specified [ 681.386129][T15217] CacheFiles: Empty tag specified [ 681.386161][T15217] CacheFiles: Empty tag specified [ 681.386193][T15217] CacheFiles: Empty tag specified [ 681.386225][T15217] CacheFiles: Empty tag specified [ 681.386257][T15217] CacheFiles: Empty tag specified [ 681.386409][T15217] CacheFiles: Empty tag specified [ 681.386444][T15217] CacheFiles: Empty tag specified [ 681.386477][T15217] CacheFiles: Empty tag specified [ 681.386582][T15217] CacheFiles: Empty tag specified [ 681.386616][T15217] CacheFiles: Empty tag specified [ 681.896838][ T5905] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 682.005347][T15236] fuse: fd is not a fuse device [ 682.048960][ T5905] usb 9-1: Using ep0 maxpacket: 32 [ 682.051081][ T5905] usb 9-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 682.054205][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.054240][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.054284][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.062123][ T5905] usb 9-1: config 0 descriptor?? [ 682.068232][ T5905] hub 9-1:0.0: USB hub found [ 682.275968][ T5905] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 682.484242][T15221] FAULT_INJECTION: forcing a failure. [ 682.484242][T15221] name failslab, interval 1, probability 0, space 10, times 0 [ 682.484311][T15221] CPU: 0 UID: 0 PID: 15221 Comm: syz.8.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.484343][T15221] Tainted: [L]=SOFTLOCKUP [ 682.484352][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 682.484365][T15221] Call Trace: [ 682.484375][T15221] [ 682.484386][T15221] dump_stack_lvl+0xe8/0x150 [ 682.484432][T15221] should_fail_ex+0x3eb/0x540 [ 682.484468][T15221] should_failslab+0xa8/0x100 [ 682.484505][T15221] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 682.484535][T15221] ? key_alloc+0x38c/0xd20 [ 682.484561][T15221] ? key_alloc+0x38c/0xd20 [ 682.484592][T15221] kmemdup_noprof+0x2b/0x70 [ 682.484618][T15221] key_alloc+0x38c/0xd20 [ 682.484660][T15221] keyring_alloc+0x45/0xb0 [ 682.484694][T15221] call_sbin_request_key+0x32f/0xbf0 [ 682.484723][T15221] ? request_key_auth_free_preparse+0x9/0x10 [ 682.484758][T15221] ? __pfx_call_sbin_request_key+0x10/0x10 [ 682.484783][T15221] ? do_raw_spin_unlock+0xf5/0x200 [ 682.484846][T15221] ? __pfx_request_key_auth_new+0x10/0x10 [ 682.484891][T15221] request_key_and_link+0xf31/0x15c0 [ 682.484929][T15221] ? __pfx_request_key_and_link+0x10/0x10 [ 682.484969][T15221] ? __pfx_key_default_cmp+0x10/0x10 [ 682.484998][T15221] ? __pfx_keyring_search_iterator+0x10/0x10 [ 682.485041][T15221] ? down_read+0x2b9/0x320 [ 682.485063][T15221] ? _copy_from_user+0x94/0xb0 [ 682.485097][T15221] __se_sys_request_key+0x29a/0x350 [ 682.485145][T15221] ? __pfx___se_sys_request_key+0x10/0x10 [ 682.485198][T15221] do_syscall_64+0x171/0x540 [ 682.485229][T15221] ? trace_irq_disable+0x3b/0x140 [ 682.485259][T15221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.485281][T15221] ? clear_bhb_loop+0x70/0xc0 [ 682.485308][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.485332][T15221] RIP: 0033:0x00007fef40fa8f19 [ 682.485356][T15221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.485373][T15221] RSP: 002b:00007fef41e69028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 682.485398][T15221] RAX: ffffffffffffffda RBX: 00007fef41225fa0 RCX: 00007fef40fa8f19 [ 682.485415][T15221] RDX: 0000200000000280 RSI: 0000200000000140 RDI: 0000200000000100 [ 682.485431][T15221] RBP: 00007fef41037f6d R08: 0000000000000000 R09: 0000000000000000 [ 682.485446][T15221] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 682.485461][T15221] R13: 00007fef41226038 R14: 00007fef41225fa0 R15: 00007fffbd396598 [ 682.485498][T15221] [ 682.519250][ T5905] usbhid 9-1:0.0: can't add hid device: -71 [ 682.519363][ T5905] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 682.563797][ T5905] usb 9-1: USB disconnect, device number 14 [ 682.585452][ T5741] usb 10-1: USB disconnect, device number 6 [ 682.636449][ T5741] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 683.098077][ T5741] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 683.247834][ T5741] usb 10-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 683.249208][ T5741] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 683.249236][ T5741] usb 10-1: config 0 has no interface number 0 [ 683.249284][ T5741] usb 10-1: config 0 interface 41 has no altsetting 0 [ 683.254788][ T5741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.254818][ T5741] usb 10-1: Product: syz [ 683.254834][ T5741] usb 10-1: Manufacturer: syz [ 683.254850][ T5741] usb 10-1: SerialNumber: syz [ 683.269801][ T5741] usb 10-1: config 0 descriptor?? [ 683.679062][ T5722] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 683.831322][ T5722] usb 6-1: New USB device found: idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 683.834641][ T5722] usb 6-1: config 8 has an invalid interface number: 188 but max is 0 [ 683.834671][ T5722] usb 6-1: config 8 has no interface number 0 [ 683.834750][ T5722] usb 6-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 683.834779][ T5722] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 683.834806][ T5722] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 683.844239][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.844267][ T5722] usb 6-1: Product: syz [ 683.844281][ T5722] usb 6-1: Manufacturer: syz [ 683.844322][ T5722] usb 6-1: SerialNumber: syz [ 683.988413][ T5734] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 684.074443][T15266] device-mapper: ioctl: Unable to rename non-existent device, syzf1 to uuid syzf1 [ 684.102859][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 684.115456][ T5722] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 684.126365][ T5722] vmk80xx 6-1:8.188: probe with driver vmk80xx failed with error -22 [ 684.142222][ T5722] usb 6-1: USB disconnect, device number 76 [ 684.147375][ T5734] usb 9-1: Using ep0 maxpacket: 32 [ 684.159949][ T5734] usb 9-1: unable to get BOS descriptor or descriptor too short [ 684.160007][ T5734] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 684.177660][ T5734] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 684.177688][ T5734] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 684.177708][ T5734] usb 9-1: config 14 has no interface number 0 [ 684.177724][ T5734] usb 9-1: config 14 has no interface number 1 [ 684.177814][ T5734] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 684.177838][ T5734] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 684.177862][ T5734] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 684.177913][ T5734] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 684.177940][ T5734] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 684.177964][ T5734] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.177988][ T5734] usb 9-1: config 14 interface 57 has no altsetting 0 [ 684.178005][ T5734] usb 9-1: config 14 interface 228 has no altsetting 0 [ 684.197830][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.197869][ T5734] usb 9-1: Product: syz [ 684.197910][ T5734] usb 9-1: Manufacturer: syz [ 684.197924][ T5734] usb 9-1: SerialNumber: syz [ 684.629980][ T5734] legousbtower 9-1:14.57: interrupt endpoints not found [ 684.784433][T15286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.032159][ T5734] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 685.037220][ T5734] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 685.349937][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 685.457183][ T5734] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 685.552829][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 685.619386][ T5734] usb 6-1: Using ep0 maxpacket: 8 [ 685.633472][ T5734] usb 6-1: unable to get BOS descriptor or descriptor too short [ 685.633760][ T5734] usb 6-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 685.636229][ T5734] usb 6-1: config 4 interface 0 has no altsetting 0 [ 685.642680][ T5734] usb 6-1: string descriptor 0 read error: -22 [ 685.642776][ T5734] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 685.664206][ T5734] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 685.694599][ T5734] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 685.695696][ T5734] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 685.697194][ T5734] usb 6-1: media controller created [ 685.762321][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 686.032415][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.032498][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.165154][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.175137][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.177732][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.178751][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.181490][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.182945][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.184916][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.185928][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.188127][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.190039][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.193481][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.198200][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.208866][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.211416][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.213397][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.216011][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.220205][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.221234][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.224187][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.225247][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.233983][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.236462][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.240751][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.241931][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.243951][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.245768][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.248044][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.249400][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.251139][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.252621][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.254748][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.256585][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.265624][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.277114][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.279680][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.280712][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.282997][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.285839][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.291628][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.293420][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.298865][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.309025][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.314134][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.315073][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.320427][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.335722][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.342813][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.347747][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.354170][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.357341][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.361462][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.364749][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.368972][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.369905][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.371641][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.373825][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.376469][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.381562][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.383988][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.385019][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.391025][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.391980][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.393747][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.395179][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.403270][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.404804][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.406241][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.413070][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.414615][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.415753][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.421784][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.423198][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.426190][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.429975][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.436561][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.440590][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.444482][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.445821][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.449567][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.451985][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.455909][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.460637][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.464330][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.466109][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.470330][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.473565][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.475824][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.477713][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.479459][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.481058][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.483888][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.489843][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.491754][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.509743][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.513514][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.516963][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.522052][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.525460][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.532987][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.534969][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.541735][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.544010][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.554238][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.557638][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.561779][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.596392][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.601821][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.604832][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.613537][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.617846][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.619741][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.620894][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.623464][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.624362][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.626373][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.628879][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.634537][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.644072][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.649972][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.653883][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.658468][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.661710][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.664852][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.669621][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.674233][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.676075][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.680392][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.681792][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.686235][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.698448][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.709886][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.715027][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.722668][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.728171][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.735625][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.744036][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.751843][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.753741][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.755798][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.766058][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.768026][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.770562][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.773150][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.780111][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.786947][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.790117][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.791868][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.793738][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.801726][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.804437][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.808832][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.809757][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.815675][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.818341][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.830999][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.834580][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.837379][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.843074][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.848569][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.853118][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.856387][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.860102][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.863262][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.866634][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.871176][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.878002][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.888610][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.900327][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.907196][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.910910][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.913782][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.919614][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.923398][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.929624][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.934828][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.939741][ T5734] zl10353_read_register: readreg error (reg=127, ret==0) [ 686.956013][ T10] usb 9-1: USB disconnect, device number 15 [ 686.968636][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.976363][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.982794][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.991248][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 686.994243][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 686.999502][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.012784][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.020703][ T10] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 687.021109][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.025530][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.033638][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.042292][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.046353][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.060751][T15297] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 687.061230][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.067879][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.085761][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.095375][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.101441][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.104925][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.111596][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.114694][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.121944][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.125257][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.131977][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.138725][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.141800][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.143672][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.147380][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.149637][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 687.154748][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 687.156613][ T5741] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 687.157227][ T5741] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 687.188146][ T5741] usb 10-1: USB disconnect, device number 7 [ 687.273729][ T5734] usb 6-1: USB disconnect, device number 77 [ 688.188321][T15333] netlink: 'syz.6.2654': attribute type 2 has an invalid length. [ 688.259407][ T34] kauditd_printk_skb: 25 callbacks suppressed [ 688.259428][ T34] audit: type=1800 audit(1794376341.336:289): pid=15330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2652" name="file0" dev="overlay" ino=1747 res=0 errno=-22 [ 688.516921][ T5734] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 688.638250][ T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 688.643860][T15344] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2658'. [ 688.645883][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2658'. [ 688.645907][T15344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2658'. [ 688.693105][ T5734] usb 6-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 688.699966][ T5734] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 688.700022][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.701057][ T5734] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 688.701078][ T5734] usb 6-1: Manufacturer: syz [ 688.707425][ T5734] usb 6-1: config 0 descriptor?? [ 688.787333][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 688.792826][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 688.792884][ T10] usb 10-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 688.816417][ T10] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 688.816446][ T10] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 688.816466][ T10] usb 10-1: config 14 has no interface number 0 [ 688.816482][ T10] usb 10-1: config 14 has no interface number 1 [ 688.816548][ T10] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 688.816572][ T10] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 688.816597][ T10] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 688.816629][ T10] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 688.816655][ T10] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 688.816680][ T10] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.816831][ T10] usb 10-1: config 14 interface 57 has no altsetting 0 [ 688.816851][ T10] usb 10-1: config 14 interface 228 has no altsetting 0 [ 688.830646][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.830675][ T10] usb 10-1: Product: syz [ 688.830689][ T10] usb 10-1: Manufacturer: syz [ 688.830703][ T10] usb 10-1: SerialNumber: syz [ 688.956840][ T5734] rc_core: IR keymap rc-hauppauge not found [ 688.956860][ T5734] Registered IR keymap rc-empty [ 688.961129][ T5734] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 688.970720][ T5734] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input125 [ 689.215177][ C0] igorplugusb 6-1:0.0: receive overflow, at least 15 lost [ 689.253283][ T10] legousbtower 10-1:14.57: interrupt endpoints not found [ 689.420505][ T5734] usb 6-1: USB disconnect, device number 78 [ 689.656509][ T10] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 689.663968][ T10] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 689.708790][T15360] FAULT_INJECTION: forcing a failure. [ 689.708790][T15360] name failslab, interval 1, probability 0, space 10, times 0 [ 689.708828][T15360] CPU: 1 UID: 0 PID: 15360 Comm: syz.8.2662 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.708859][T15360] Tainted: [L]=SOFTLOCKUP [ 689.708867][T15360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 689.708880][T15360] Call Trace: [ 689.708890][T15360] [ 689.708900][T15360] dump_stack_lvl+0xe8/0x150 [ 689.708938][T15360] should_fail_ex+0x3eb/0x540 [ 689.708972][T15360] should_failslab+0xa8/0x100 [ 689.709007][T15360] __kmalloc_noprof+0xf9/0x710 [ 689.709030][T15360] ? rcu_is_watching+0x16/0xb0 [ 689.709061][T15360] ? tomoyo_realpath_from_path+0xf2/0x640 [ 689.709090][T15360] ? tomoyo_realpath_from_path+0xf2/0x640 [ 689.709125][T15360] tomoyo_realpath_from_path+0xf2/0x640 [ 689.709166][T15360] ? tomoyo_path_number_perm+0x219/0x5f0 [ 689.709190][T15360] tomoyo_path_number_perm+0x246/0x5f0 [ 689.709219][T15360] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 689.709242][T15360] ? __lock_acquire+0x747/0x2de0 [ 689.709310][T15360] ? __fget_files+0x2a/0x420 [ 689.709341][T15360] ? __fget_files+0x2a/0x420 [ 689.709367][T15360] ? __fget_files+0x2a/0x420 [ 689.709399][T15360] security_file_ioctl+0xc3/0x2a0 [ 689.709429][T15360] __se_sys_ioctl+0x47/0x170 [ 689.709465][T15360] do_syscall_64+0x171/0x540 [ 689.709496][T15360] ? trace_irq_disable+0x3b/0x140 [ 689.709524][T15360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.709547][T15360] ? clear_bhb_loop+0x70/0xc0 [ 689.709574][T15360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.709604][T15360] RIP: 0033:0x00007fef40fa8f19 [ 689.709628][T15360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.709645][T15360] RSP: 002b:00007fef41e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.709670][T15360] RAX: ffffffffffffffda RBX: 00007fef41225fa0 RCX: 00007fef40fa8f19 [ 689.709687][T15360] RDX: 0000200000000740 RSI: 00000000c0046686 RDI: 0000000000000003 [ 689.709701][T15360] RBP: 00007fef41e69090 R08: 0000000000000000 R09: 0000000000000000 [ 689.709715][T15360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.709729][T15360] R13: 00007fef41226038 R14: 00007fef41225fa0 R15: 00007fffbd396598 [ 689.709765][T15360] [ 689.709847][T15360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 690.266886][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 690.350988][T15373] 9p: Bad value for 'wfdno' [ 690.418925][ T10] usb 9-1: New USB device found: idVendor=1e7d, idProduct=2c2e, bcdDevice=0.40 [ 690.420586][ T10] usb 9-1: config 1 interface 0 has no altsetting 0 [ 690.430723][ T10] usb 9-1: string descriptor 0 read error: -22 [ 690.430928][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.665175][T15379] rxe_eth0 speed is unknown, defaulting to 1000 [ 690.859310][ T10] usbhid 9-1:1.0: can't add hid device: -32 [ 690.859436][ T10] usbhid 9-1:1.0: probe with driver usbhid failed with error -32 [ 691.417375][ T33] usb 10-1: USB disconnect, device number 8 [ 691.473915][ T33] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 691.527989][ T5802] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 691.680348][ T5802] usb 6-1: Using ep0 maxpacket: 32 [ 691.688644][ T5802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 691.688695][ T5802] usb 6-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 691.689691][ T5802] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 691.689713][ T5802] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 691.689732][ T5802] usb 6-1: config 14 has no interface number 0 [ 691.689747][ T5802] usb 6-1: config 14 has no interface number 1 [ 691.689809][ T5802] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 691.689831][ T5802] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 691.689855][ T5802] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 691.689880][ T5802] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 691.689905][ T5802] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 691.689930][ T5802] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.689954][ T5802] usb 6-1: config 14 interface 57 has no altsetting 0 [ 691.689971][ T5802] usb 6-1: config 14 interface 228 has no altsetting 0 [ 691.693623][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.693652][ T5802] usb 6-1: Product: syz [ 691.693666][ T5802] usb 6-1: Manufacturer: syz [ 691.693680][ T5802] usb 6-1: SerialNumber: syz [ 692.123917][ T5802] legousbtower 6-1:14.57: interrupt endpoints not found [ 692.525702][ T5802] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 692.530995][ T5802] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 692.730956][ T5802] usb 6-1: USB disconnect, device number 79 [ 692.743125][ T5802] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 693.034499][ T5790] usb 9-1: USB disconnect, device number 16 [ 693.206827][ T5802] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 693.362220][ T5802] usb 10-1: Using ep0 maxpacket: 32 [ 693.369986][ T5802] usb 10-1: unable to get BOS descriptor or descriptor too short [ 693.370038][ T5802] usb 10-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 693.374063][ T5802] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 693.374088][ T5802] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 693.374107][ T5802] usb 10-1: config 14 has no interface number 0 [ 693.374131][ T5802] usb 10-1: config 14 has no interface number 1 [ 693.374195][ T5802] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 693.374218][ T5802] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 693.374241][ T5802] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 693.374265][ T5802] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 693.374291][ T5802] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 693.374315][ T5802] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.374340][ T5802] usb 10-1: config 14 interface 57 has no altsetting 0 [ 693.374357][ T5802] usb 10-1: config 14 interface 228 has no altsetting 0 [ 693.376873][ T5802] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.376895][ T5802] usb 10-1: Product: syz [ 693.376909][ T5802] usb 10-1: Manufacturer: syz [ 693.376923][ T5802] usb 10-1: SerialNumber: syz [ 693.631348][ T56] Bluetooth: Unexpected continuation frame (len 42) [ 693.812104][ T5802] legousbtower 10-1:14.57: interrupt endpoints not found [ 694.214668][ T5802] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 694.222775][ T5802] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 694.394670][T15445] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2696'. [ 694.736855][ T5802] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 694.896880][ T5802] usb 9-1: Using ep0 maxpacket: 32 [ 694.900493][ T5802] usb 9-1: unable to get BOS descriptor or descriptor too short [ 694.900550][ T5802] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 694.901969][ T5802] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 694.901995][ T5802] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 694.902016][ T5802] usb 9-1: config 14 has no interface number 0 [ 694.902033][ T5802] usb 9-1: config 14 has no interface number 1 [ 694.902103][ T5802] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 694.902129][ T5802] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 694.902157][ T5802] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 694.902185][ T5802] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 694.902214][ T5802] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 694.902243][ T5802] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.902270][ T5802] usb 9-1: config 14 interface 57 has no altsetting 0 [ 694.902291][ T5802] usb 9-1: config 14 interface 228 has no altsetting 0 [ 694.905039][ T5802] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.905065][ T5802] usb 9-1: Product: syz [ 694.905081][ T5802] usb 9-1: Manufacturer: syz [ 694.905097][ T5802] usb 9-1: SerialNumber: syz [ 694.920511][ T5722] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 695.216946][ T5722] usb 6-1: device descriptor read/64, error -71 [ 695.321836][ T5802] legousbtower 9-1:14.57: interrupt endpoints not found [ 695.476978][ T5722] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 695.616970][ T5722] usb 6-1: device descriptor read/64, error -71 [ 695.721771][ T5802] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 695.723991][ T5802] legousbtower 9-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 695.746229][ T5722] usb usb6-port1: attempt power cycle [ 695.927091][ T5802] usb 9-1: USB disconnect, device number 17 [ 695.944937][ T5802] legousbtower 9-1:14.228: LEGO USB Tower #-159 now disconnected [ 695.987863][ T33] usb 10-1: USB disconnect, device number 9 [ 696.009718][ T33] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 696.086864][ T5722] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 696.113218][ T5722] usb 6-1: device descriptor read/8, error -71 [ 696.347259][ T5722] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 696.371073][ T5722] usb 6-1: device descriptor read/8, error -71 [ 696.477082][ T5722] usb usb6-port1: unable to enumerate USB device [ 696.642413][T15470] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2703'. [ 696.642449][T15470] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2703'. [ 696.846792][ T5802] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 696.976962][ T5802] usb 10-1: device descriptor read/64, error -71 [ 697.150399][ T5727] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 697.220343][ T5802] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 697.297726][ T5727] usb 9-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 697.299317][ T5727] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.299350][ T5727] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 697.299379][ T5727] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.299408][ T5727] usb 9-1: config 0 interface 0 has no altsetting 0 [ 697.299444][ T5727] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.304426][ T5727] usb 9-1: config 0 descriptor?? [ 697.306976][T15481] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 697.359946][ T5802] usb 10-1: device descriptor read/64, error -71 [ 697.473108][ T5802] usb usb10-port1: attempt power cycle [ 697.590746][T15483] CIFS mount error: No usable UNC path provided in device string! [ 697.590746][T15483] [ 697.590772][T15483] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 697.761714][ T5727] dragonrise 0003:0079:0006.00B1: implement() called with too large value 243 (n: 1)! (kworker/1:4) [ 697.769730][ T5727] dragonrise 0003:0079:0006.00B1: Force Feedback for DragonRise Inc. game controllers by Richard Walmsley [ 697.778722][ T5727] input: HID 0079:0006 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0079:0006.00B1/input/input126 [ 697.817890][ T5802] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 697.838332][ T5802] usb 10-1: device descriptor read/8, error -71 [ 697.955861][T15494] netlink: 'syz.5.2710': attribute type 5 has an invalid length. [ 697.971077][ T5727] dragonrise 0003:0079:0006.00B1: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.8-1/input0 [ 697.983770][ T5727] usb 9-1: USB disconnect, device number 18 [ 698.042099][ T56] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 698.076793][ T5802] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 698.098902][ T5802] usb 10-1: device descriptor read/8, error -71 [ 698.207308][ T5802] usb usb10-port1: unable to enumerate USB device [ 698.579091][T15507] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2714'. [ 698.913472][T15518] FAULT_INJECTION: forcing a failure. [ 698.913472][T15518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.913514][T15518] CPU: 0 UID: 0 PID: 15518 Comm: syz.8.2718 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.913545][T15518] Tainted: [L]=SOFTLOCKUP [ 698.913554][T15518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 698.913568][T15518] Call Trace: [ 698.913578][T15518] [ 698.913588][T15518] dump_stack_lvl+0xe8/0x150 [ 698.913625][T15518] should_fail_ex+0x3eb/0x540 [ 698.913661][T15518] _copy_from_user+0x2d/0xb0 [ 698.913690][T15518] memdup_user+0x5e/0xd0 [ 698.913714][T15518] strndup_user+0x68/0xd0 [ 698.913737][T15518] __se_sys_fsopen+0x3d/0x370 [ 698.913763][T15518] do_syscall_64+0x171/0x540 [ 698.913794][T15518] ? trace_irq_disable+0x3b/0x140 [ 698.913823][T15518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.913845][T15518] ? clear_bhb_loop+0x70/0xc0 [ 698.913871][T15518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.913894][T15518] RIP: 0033:0x00007fef40fa8f19 [ 698.913916][T15518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.913934][T15518] RSP: 002b:00007fef41e69028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 698.913959][T15518] RAX: ffffffffffffffda RBX: 00007fef41225fa0 RCX: 00007fef40fa8f19 [ 698.913976][T15518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000500 [ 698.913990][T15518] RBP: 00007fef41e69090 R08: 0000000000000000 R09: 0000000000000000 [ 698.914003][T15518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.914017][T15518] R13: 00007fef41226038 R14: 00007fef41225fa0 R15: 00007fffbd396598 [ 698.914062][T15518] [ 699.138008][ T5802] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 699.288709][ T5802] usb 6-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 699.289917][ T5802] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.289970][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.289994][ T5802] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 699.290019][ T5802] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 699.298219][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.298245][ T5802] usb 6-1: Product: syz [ 699.298259][ T5802] usb 6-1: Manufacturer: syz [ 699.298273][ T5802] usb 6-1: SerialNumber: syz [ 699.309233][ T5802] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 699.309257][ T5802] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 699.309305][ T5802] usbserial_generic 6-1:1.0: generic converter detected [ 699.325149][ T5802] usb 6-1: generic converter now attached to ttyUSB0 [ 699.534684][ T5802] usb 6-1: USB disconnect, device number 84 [ 699.559620][ T5802] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 699.563173][ T5802] usbserial_generic 6-1:1.0: device disconnected [ 700.166808][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 700.187179][ T5722] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 700.318726][ T10] usb 10-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 700.320479][ T10] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.320513][ T10] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 700.320540][ T10] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 700.320566][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 700.320602][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.325632][ T10] usb 10-1: config 0 descriptor?? [ 700.326426][T15535] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 700.338000][ T5722] usb 9-1: Using ep0 maxpacket: 32 [ 700.385840][ T5722] usb 9-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 700.423359][ T5722] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 700.423391][ T5722] usb 9-1: config 0 has no interface number 0 [ 700.423438][ T5722] usb 9-1: config 0 interface 184 has no altsetting 0 [ 700.441718][ T5722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.441758][ T5722] usb 9-1: Product: syz [ 700.441775][ T5722] usb 9-1: Manufacturer: syz [ 700.441790][ T5722] usb 9-1: SerialNumber: syz [ 700.476505][ T5722] usb 9-1: config 0 descriptor?? [ 700.806445][ T10] dragonrise 0003:0079:0006.00B2: implement() called with too large value 243 (n: 1)! (kworker/0:0) [ 700.807697][ T10] dragonrise 0003:0079:0006.00B2: Force Feedback for DragonRise Inc. game controllers by Richard Walmsley [ 700.811810][ T10] input: HID 0079:0006 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0079:0006.00B2/input/input127 [ 700.930652][ T10] dragonrise 0003:0079:0006.00B2: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.9-1/input0 [ 701.043844][ T5734] usb 10-1: USB disconnect, device number 14 [ 701.107287][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 701.107323][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 701.267093][ T10] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 701.416942][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 701.419279][ T10] usb 6-1: New USB device found: idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 701.424363][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.424392][ T10] usb 6-1: Product: syz [ 701.424409][ T10] usb 6-1: Manufacturer: syz [ 701.424424][ T10] usb 6-1: SerialNumber: syz [ 701.452451][ T10] usb 6-1: config 0 descriptor?? [ 701.462397][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 701.518738][T15537] FAULT_INJECTION: forcing a failure. [ 701.518738][T15537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.518816][T15537] CPU: 0 UID: 0 PID: 15537 Comm: syz.8.2724 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.518849][T15537] Tainted: [L]=SOFTLOCKUP [ 701.518857][T15537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 701.518872][T15537] Call Trace: [ 701.518881][T15537] [ 701.518891][T15537] dump_stack_lvl+0xe8/0x150 [ 701.518937][T15537] should_fail_ex+0x3eb/0x540 [ 701.518973][T15537] strncpy_from_user+0x36/0x2c0 [ 701.519007][T15537] do_getname+0x77/0x250 [ 701.519035][T15537] __se_sys_mkdirat+0x24/0x150 [ 701.519072][T15537] do_syscall_64+0x171/0x540 [ 701.519105][T15537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.519128][T15537] ? clear_bhb_loop+0x70/0xc0 [ 701.519165][T15537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.519187][T15537] RIP: 0033:0x00007fef40fa8f19 [ 701.519211][T15537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.519231][T15537] RSP: 002b:00007fef41e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 701.519255][T15537] RAX: ffffffffffffffda RBX: 00007fef41225fa0 RCX: 00007fef40fa8f19 [ 701.519272][T15537] RDX: 00000000000001ff RSI: 0000200000000640 RDI: ffffffffffffff9c [ 701.519289][T15537] RBP: 00007fef41037f6d R08: 0000000000000000 R09: 0000000000000000 [ 701.519303][T15537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.519318][T15537] R13: 00007fef41226038 R14: 00007fef41225fa0 R15: 00007fffbd396598 [ 701.519352][T15537] [ 701.892007][T15551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.892754][T15551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.902997][T15551] xt_nfacct: accounting object `' does not exist [ 701.906488][T15551] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2729'. [ 701.924866][ T10] gspca_sq930x: ucbus_write failed -71 [ 702.136823][ T10] gspca_sq930x: Sensor ov9630 not yet treated [ 702.136930][ T10] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 702.139789][ T10] usb 6-1: USB disconnect, device number 85 [ 703.029066][ T5790] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 703.142212][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 703.142249][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 703.142270][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 703.142287][ T5722] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 703.142617][ T5722] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 703.202073][ T5790] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 703.203445][ T5790] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 703.203473][ T5790] usb 6-1: config 1 has no interface number 0 [ 703.205031][ T5722] usb 9-1: USB disconnect, device number 19 [ 703.212012][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.212039][ T5790] usb 6-1: Product: syz [ 703.212054][ T5790] usb 6-1: Manufacturer: syz [ 703.212068][ T5790] usb 6-1: SerialNumber: syz [ 703.294701][ T5790] usb 6-1: 3:0 : does not exist [ 703.294729][ T5790] usb 6-1: 3:0 : does not exist [ 703.550464][ T5722] usb 6-1: USB disconnect, device number 86 [ 704.566793][ T5790] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 704.719833][ T5790] usb 6-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 704.721453][ T5790] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.721503][ T5790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.734156][ T5790] idmouse 6-1:1.0: Unable to find bulk-in endpoint. [ 705.141542][ T5722] usb 6-1: USB disconnect, device number 87 [ 706.024552][T15636] FAULT_INJECTION: forcing a failure. [ 706.024552][T15636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.024590][T15636] CPU: 0 UID: 0 PID: 15636 Comm: syz.8.2763 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.024619][T15636] Tainted: [L]=SOFTLOCKUP [ 706.024627][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 706.024640][T15636] Call Trace: [ 706.024649][T15636] [ 706.024659][T15636] dump_stack_lvl+0xe8/0x150 [ 706.024696][T15636] should_fail_ex+0x3eb/0x540 [ 706.024731][T15636] _copy_to_user+0x31/0xb0 [ 706.024775][T15636] simple_read_from_buffer+0xe1/0x170 [ 706.024808][T15636] proc_fail_nth_read+0x1bb/0x230 [ 706.024839][T15636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 706.024866][T15636] ? rw_verify_area+0x24a/0x4c0 [ 706.024902][T15636] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 706.024924][T15636] vfs_read+0x213/0xa80 [ 706.024958][T15636] ? __pfx___mutex_lock+0x10/0x10 [ 706.024999][T15636] ? __pfx_vfs_read+0x10/0x10 [ 706.025028][T15636] ? __fget_files+0x2a/0x420 [ 706.025053][T15636] ? __fget_files+0x3a2/0x420 [ 706.025078][T15636] ? __fget_files+0x2a/0x420 [ 706.025108][T15636] ? fdget+0x1ac/0x250 [ 706.025142][T15636] ksys_read+0x150/0x270 [ 706.025173][T15636] ? __pfx_ksys_read+0x10/0x10 [ 706.025214][T15636] do_syscall_64+0x171/0x540 [ 706.025244][T15636] ? trace_irq_disable+0x3b/0x140 [ 706.025271][T15636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.025294][T15636] ? clear_bhb_loop+0x70/0xc0 [ 706.025321][T15636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.025343][T15636] RIP: 0033:0x00007fef40f6974e [ 706.025367][T15636] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 706.025385][T15636] RSP: 002b:00007fef41e68fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 706.025409][T15636] RAX: ffffffffffffffda RBX: 00007fef41e696c0 RCX: 00007fef40f6974e [ 706.025425][T15636] RDX: 000000000000000f RSI: 00007fef41e690a0 RDI: 0000000000000004 [ 706.025440][T15636] RBP: 00007fef41e69090 R08: 0000000000000000 R09: 0000000000000000 [ 706.025454][T15636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.025467][T15636] R13: 00007fef41226038 R14: 00007fef41225fa0 R15: 00007fffbd396598 [ 706.025503][T15636] [ 706.355137][T15641] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2765'. [ 706.361617][T15641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2765'. [ 706.907464][ T5905] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 707.059411][ T5905] usb 9-1: not running at top speed; connect to a high speed hub [ 707.059452][ T5905] usb 9-1: New USB device found: idVendor=1430, idProduct=474b, bcdDevice=0.40 [ 707.065754][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.065784][ T5905] usb 9-1: Product: syz [ 707.065799][ T5905] usb 9-1: Manufacturer: syz [ 707.065814][ T5905] usb 9-1: SerialNumber: syz [ 707.326504][ T5905] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 707.326571][ T5905] usb 9-1: MIDIStreaming interface descriptor not found [ 707.512143][ T5905] usb 9-1: USB disconnect, device number 20 [ 708.007304][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 708.159886][ T10] usb 10-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 708.162550][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.162603][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.198984][ T10] usb 10-1: config 0 descriptor?? [ 708.636813][ T5727] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 708.796888][ T5727] usb 9-1: Using ep0 maxpacket: 8 [ 708.799830][ T5727] usb 9-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 708.802467][ T5727] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.802490][ T5727] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.806487][ T5727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.806513][ T5727] usb 9-1: Product: syz [ 708.806529][ T5727] usb 9-1: Manufacturer: syz [ 708.806544][ T5727] usb 9-1: SerialNumber: syz [ 708.810436][ T5727] usb 9-1: config 0 descriptor?? [ 708.826875][ T5790] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 708.967673][ T5790] usb 6-1: New USB device found: idVendor=2a39, idProduct=3fd2, bcdDevice=0.40 [ 708.969060][ T5790] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7 [ 708.969106][ T5790] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 78, changing to 7 [ 708.973805][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.973834][ T5790] usb 6-1: Product: syz [ 708.973849][ T5790] usb 6-1: Manufacturer: syz [ 708.973864][ T5790] usb 6-1: SerialNumber: syz [ 709.079324][ T5727] usb 9-1: USB disconnect, device number 21 [ 709.205306][ T5790] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 709.214953][ T5790] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 709.322859][ T5790] usb 6-1: USB disconnect, device number 88 [ 709.837201][T15709] input: syz0 as /devices/virtual/input/input128 [ 710.356894][ T5727] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 710.387014][ T5905] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 710.507212][ T5727] usb 9-1: Using ep0 maxpacket: 32 [ 710.510505][ T5727] usb 9-1: unable to get BOS descriptor or descriptor too short [ 710.510561][ T5727] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 710.511990][ T5727] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 710.512017][ T5727] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 710.512039][ T5727] usb 9-1: config 14 has no interface number 0 [ 710.512056][ T5727] usb 9-1: config 14 has no interface number 1 [ 710.512135][ T5727] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 710.513854][ T5727] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 710.513885][ T5727] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 710.513955][ T5727] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 710.513985][ T5727] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 710.514013][ T5727] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.514041][ T5727] usb 9-1: config 14 interface 57 has no altsetting 0 [ 710.514061][ T5727] usb 9-1: config 14 interface 228 has no altsetting 0 [ 710.517757][ T5727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.517781][ T5727] usb 9-1: Product: syz [ 710.517795][ T5727] usb 9-1: Manufacturer: syz [ 710.517809][ T5727] usb 9-1: SerialNumber: syz [ 710.652613][ T5905] usb 6-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=8.00 [ 710.685801][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 710.685838][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 710.685908][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.744025][ T5905] pl2303 6-1:1.0: pl2303 converter detected [ 710.746203][ T5905] pl2303 6-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 710.813273][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 710.813396][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 710.832861][ T10] usb 10-1: USB disconnect, device number 15 [ 710.959406][ T5727] legousbtower 9-1:14.57: interrupt endpoints not found [ 711.353897][ T5727] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 711.356514][ T5727] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 711.560544][ T5727] usb 9-1: USB disconnect, device number 22 [ 711.570817][ T5727] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 711.913928][T15741] FAULT_INJECTION: forcing a failure. [ 711.913928][T15741] name failslab, interval 1, probability 0, space 10, times 0 [ 711.913972][T15741] CPU: 1 UID: 0 PID: 15741 Comm: syz.9.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.914005][T15741] Tainted: [L]=SOFTLOCKUP [ 711.914025][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 711.914040][T15741] Call Trace: [ 711.914050][T15741] [ 711.914062][T15741] dump_stack_lvl+0xe8/0x150 [ 711.914103][T15741] should_fail_ex+0x3eb/0x540 [ 711.914140][T15741] should_failslab+0xa8/0x100 [ 711.914173][T15741] ? locks_get_lock_context+0x95/0x5c0 [ 711.914272][T15741] kmem_cache_alloc_noprof+0x9c/0x600 [ 711.914303][T15741] ? locks_get_lock_context+0x95/0x5c0 [ 711.914335][T15741] locks_get_lock_context+0x95/0x5c0 [ 711.914358][T15741] ? aa_file_perm+0x18b/0x15f0 [ 711.914403][T15741] flock_lock_inode+0xfe/0x1310 [ 711.914432][T15741] ? __pfx_futex_wake_mark+0x10/0x10 [ 711.914467][T15741] ? __pfx_flock_lock_inode+0x10/0x10 [ 711.914503][T15741] locks_lock_inode_wait+0x10f/0x450 [ 711.914565][T15741] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 711.914613][T15741] ? apparmor_file_lock+0x21c/0x2d0 [ 711.914646][T15741] __se_sys_flock+0x4c9/0x650 [ 711.914682][T15741] ? __pfx___se_sys_flock+0x10/0x10 [ 711.914743][T15741] ? rcu_is_watching+0x16/0xb0 [ 711.914790][T15741] do_syscall_64+0x171/0x540 [ 711.914823][T15741] ? trace_irq_disable+0x3b/0x140 [ 711.914853][T15741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.914876][T15741] ? clear_bhb_loop+0x70/0xc0 [ 711.914905][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.914928][T15741] RIP: 0033:0x00007f637e1a8f19 [ 711.914951][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.914971][T15741] RSP: 002b:00007f637f021028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 711.915005][T15741] RAX: ffffffffffffffda RBX: 00007f637e425fa0 RCX: 00007f637e1a8f19 [ 711.915032][T15741] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000c [ 711.915046][T15741] RBP: 00007f637e237f6d R08: 0000000000000000 R09: 0000000000000000 [ 711.915062][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.915076][T15741] R13: 00007f637e426038 R14: 00007f637e425fa0 R15: 00007ffc8445d7d8 [ 711.915118][T15741] [ 712.609840][ T33] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 712.710229][T15759] 9p: Could not find request transport: v [ 712.767603][ T33] usb 9-1: Using ep0 maxpacket: 16 [ 712.768398][ T33] usb 9-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 712.776857][ T33] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.776884][ T33] usb 9-1: Product: syz [ 712.776898][ T33] usb 9-1: Manufacturer: syz [ 712.776913][ T33] usb 9-1: SerialNumber: syz [ 712.788826][ T33] usb 9-1: config 0 descriptor?? [ 712.804145][ T33] ssu100 9-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 713.156156][ T5741] usb 6-1: USB disconnect, device number 89 [ 713.168463][ T5727] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 713.318844][ T5727] usb 10-1: Using ep0 maxpacket: 32 [ 713.324209][ T5727] usb 10-1: unable to get BOS descriptor or descriptor too short [ 713.324266][ T5727] usb 10-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 713.326935][ T5727] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 713.326961][ T5727] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 713.326980][ T5727] usb 10-1: config 14 has no interface number 0 [ 713.326996][ T5727] usb 10-1: config 14 has no interface number 1 [ 713.327058][ T5727] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 713.327080][ T5727] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 713.327142][ T5727] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 713.327168][ T5727] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 713.327194][ T5727] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 713.327218][ T5727] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 713.327243][ T5727] usb 10-1: config 14 interface 57 has no altsetting 0 [ 713.327261][ T5727] usb 10-1: config 14 interface 228 has no altsetting 0 [ 713.333551][ T5727] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.333579][ T5727] usb 10-1: Product: syz [ 713.333625][ T5727] usb 10-1: Manufacturer: syz [ 713.333641][ T5727] usb 10-1: SerialNumber: syz [ 713.506449][T15783] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2819'. [ 713.737276][ T33] ssu100 9-1:0.0: probe with driver ssu100 failed with error -110 [ 713.760064][ T5727] legousbtower 10-1:14.57: interrupt endpoints not found [ 713.897456][ T5741] usb 9-1: USB disconnect, device number 23 [ 714.146779][ T34] audit: type=1800 audit(1794376367.226:290): pid=15786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2820" name="nullb0" dev="tmpfs" ino=2400 res=0 errno=-22 [ 714.151766][ T5727] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 714.155770][ T5727] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 714.169664][ T34] audit: type=1800 audit(1794376367.256:291): pid=15786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2820" name="nullb0" dev="tmpfs" ino=2400 res=0 errno=-22 [ 714.372685][ T5741] usb 10-1: USB disconnect, device number 16 [ 714.397849][ T5741] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 714.598145][ T5727] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 714.657141][ T33] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 714.767018][ T5727] usb 6-1: Using ep0 maxpacket: 16 [ 714.768086][ T5727] usb 6-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 714.775455][ T5727] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.775499][ T5727] usb 6-1: config 0 interface 0 has no altsetting 0 [ 714.816006][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.816038][ T5727] usb 6-1: Product: syz [ 714.816063][ T5727] usb 6-1: Manufacturer: syz [ 714.816080][ T5727] usb 6-1: SerialNumber: syz [ 714.843842][ T33] usb 9-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01 [ 714.845137][ T5727] usb 6-1: config 0 descriptor?? [ 714.856008][ T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.858443][ T5727] hub 6-1:0.0: bad descriptor, ignoring hub [ 714.858469][ T5727] hub 6-1:0.0: probe with driver hub failed with error -5 [ 714.892263][ T5727] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 714.922915][ T14] usb 6-1: Failed to submit usb control message: -71 [ 714.922958][ T14] usb 6-1: unable to send the bmi data to the device: -71 [ 714.922977][ T14] usb 6-1: unable to get target info from device [ 714.922993][ T14] usb 6-1: could not get target info (-71) [ 714.923067][ T14] usb 6-1: could not probe fw (-71) [ 715.066628][ C1] dln2 9-1:1.0: short response: 0 [ 715.079147][ T33] dln2 9-1:1.0: USB write failed: -110 [ 715.079432][ T33] dln2 9-1:1.0: failed to initialize hardware [ 715.084686][ T33] dln2 9-1:1.0: probe with driver dln2 failed with error -110 [ 715.117912][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.118458][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.277752][ T33] usb 9-1: USB disconnect, device number 24 [ 715.541012][ T5905] usb 6-1: USB disconnect, device number 90 [ 715.655904][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2826'. [ 715.655933][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2826'. [ 715.746363][T15808] netlink: 'syz.6.2827': attribute type 1 has an invalid length. [ 715.746390][T15808] netlink: 'syz.6.2827': attribute type 4 has an invalid length. [ 715.746632][T15808] netlink: 'syz.6.2827': attribute type 1 has an invalid length. [ 715.746648][T15808] netlink: 'syz.6.2827': attribute type 4 has an invalid length. [ 715.751729][T15808] netlink: 'syz.6.2827': attribute type 1 has an invalid length. [ 715.751749][T15808] netlink: 'syz.6.2827': attribute type 4 has an invalid length. [ 715.751958][T15808] netlink: 'syz.6.2827': attribute type 1 has an invalid length. [ 715.751972][T15808] netlink: 'syz.6.2827': attribute type 4 has an invalid length. [ 715.753781][T15808] netlink: 'syz.6.2827': attribute type 1 has an invalid length. [ 715.753796][T15808] netlink: 'syz.6.2827': attribute type 4 has an invalid length. [ 716.456851][ T5905] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 716.612042][ T5905] usb 9-1: New USB device found: idVendor=0079, idProduct=0006, bcdDevice=0.00 [ 716.613423][ T5905] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.613456][ T5905] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 716.613485][ T5905] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 716.613513][ T5905] usb 9-1: config 0 interface 0 has no altsetting 0 [ 716.613550][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.673756][ T5905] usb 9-1: config 0 descriptor?? [ 716.676091][T15820] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 716.860786][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2838'. [ 716.860832][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2838'. [ 716.968711][ T5905] usbhid 9-1:0.0: can't add hid device: -71 [ 716.968843][ T5905] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 716.978304][ T5905] usb 9-1: USB disconnect, device number 25 [ 717.170028][T15846] FAULT_INJECTION: forcing a failure. [ 717.170028][T15846] name failslab, interval 1, probability 0, space 10, times 0 [ 717.170075][T15846] CPU: 0 UID: 0 PID: 15846 Comm: syz.5.2840 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.170106][T15846] Tainted: [L]=SOFTLOCKUP [ 717.170114][T15846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 717.170128][T15846] Call Trace: [ 717.170137][T15846] [ 717.170147][T15846] dump_stack_lvl+0xe8/0x150 [ 717.170186][T15846] should_fail_ex+0x3eb/0x540 [ 717.170220][T15846] should_failslab+0xa8/0x100 [ 717.170256][T15846] __kvmalloc_node_noprof+0x171/0x820 [ 717.170286][T15846] ? __kmalloc_cache_noprof+0x31c/0x600 [ 717.170313][T15846] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 717.170337][T15846] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 717.170369][T15846] io_ring_ctx_alloc+0x1ad/0xb80 [ 717.170394][T15846] ? io_prepare_config+0x8c8/0xc70 [ 717.170428][T15846] io_uring_create+0x50/0x980 [ 717.170458][T15846] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 717.170486][T15846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 717.170522][T15846] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 717.170566][T15846] ? __pfx_ksys_write+0x10/0x10 [ 717.170613][T15846] do_syscall_64+0x171/0x540 [ 717.170644][T15846] ? trace_irq_disable+0x3b/0x140 [ 717.170673][T15846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.170696][T15846] ? clear_bhb_loop+0x70/0xc0 [ 717.170724][T15846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.170768][T15846] RIP: 0033:0x00007fa2fb7a8f19 [ 717.170791][T15846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.170810][T15846] RSP: 002b:00007fa2f9930ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 717.170836][T15846] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fa2fb7a8f19 [ 717.170852][T15846] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 717.170867][T15846] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 717.170882][T15846] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 717.170897][T15846] R13: 0000200000000b10 R14: 00007fa2f9930fd8 R15: 0000000000000000 [ 717.170934][T15846] [ 717.421190][T15848] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2842'. [ 717.421227][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2842'. [ 717.426634][T15848] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2842'. [ 717.905808][T15862] FAULT_INJECTION: forcing a failure. [ 717.905808][T15862] name failslab, interval 1, probability 0, space 10, times 0 [ 717.905849][T15862] CPU: 1 UID: 0 PID: 15862 Comm: syz.5.2848 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.905880][T15862] Tainted: [L]=SOFTLOCKUP [ 717.905888][T15862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 717.905903][T15862] Call Trace: [ 717.905912][T15862] [ 717.905923][T15862] dump_stack_lvl+0xe8/0x150 [ 717.905963][T15862] should_fail_ex+0x3eb/0x540 [ 717.906000][T15862] should_failslab+0xa8/0x100 [ 717.906034][T15862] __kmalloc_noprof+0xf9/0x710 [ 717.906060][T15862] ? rcu_is_watching+0x16/0xb0 [ 717.906089][T15862] ? tomoyo_realpath_from_path+0xf2/0x640 [ 717.906120][T15862] ? tomoyo_realpath_from_path+0xf2/0x640 [ 717.906167][T15862] tomoyo_realpath_from_path+0xf2/0x640 [ 717.906209][T15862] ? tomoyo_path_number_perm+0x219/0x5f0 [ 717.906236][T15862] tomoyo_path_number_perm+0x246/0x5f0 [ 717.906266][T15862] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 717.906288][T15862] ? __lock_acquire+0x747/0x2de0 [ 717.906335][T15862] ? do_futex+0x458/0x4e0 [ 717.906379][T15862] ? __fget_files+0x2a/0x420 [ 717.906413][T15862] ? __fget_files+0x2a/0x420 [ 717.906439][T15862] ? __fget_files+0x2a/0x420 [ 717.906475][T15862] security_file_ioctl+0xc3/0x2a0 [ 717.906502][T15862] __se_sys_ioctl+0x47/0x170 [ 717.906535][T15862] do_syscall_64+0x171/0x540 [ 717.906568][T15862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.906592][T15862] ? clear_bhb_loop+0x70/0xc0 [ 717.906620][T15862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.906643][T15862] RIP: 0033:0x00007fa2fb7a8f19 [ 717.906666][T15862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.906685][T15862] RSP: 002b:00007fa2fc5a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.906710][T15862] RAX: ffffffffffffffda RBX: 00007fa2fba25fa0 RCX: 00007fa2fb7a8f19 [ 717.906727][T15862] RDX: 00002000000000c0 RSI: 0000000000003b81 RDI: 0000000000000003 [ 717.906742][T15862] RBP: 00007fa2fb837f6d R08: 0000000000000000 R09: 0000000000000000 [ 717.906756][T15862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.906770][T15862] R13: 00007fa2fba26038 R14: 00007fa2fba25fa0 R15: 00007ffd9d1924b8 [ 717.906807][T15862] [ 717.908946][T15862] ERROR: Out of memory at tomoyo_realpath_from_path. [ 717.913112][T15862] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 718.296845][ T5727] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 718.415342][T15872] jffs2: notice: (15872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 718.457283][ T5727] usb 9-1: Using ep0 maxpacket: 32 [ 718.464127][ T5727] usb 9-1: unable to get BOS descriptor or descriptor too short [ 718.464186][ T5727] usb 9-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 718.493375][ T5727] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 718.493426][ T5727] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 718.493451][ T5727] usb 9-1: config 14 has no interface number 0 [ 718.493469][ T5727] usb 9-1: config 14 has no interface number 1 [ 718.493544][ T5727] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 718.493570][ T5727] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 718.493598][ T5727] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 718.493625][ T5727] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 718.493654][ T5727] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 718.493682][ T5727] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 718.493710][ T5727] usb 9-1: config 14 interface 57 has no altsetting 0 [ 718.493730][ T5727] usb 9-1: config 14 interface 228 has no altsetting 0 [ 718.564393][ T5727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.564425][ T5727] usb 9-1: Product: syz [ 718.564441][ T5727] usb 9-1: Manufacturer: syz [ 718.564456][ T5727] usb 9-1: SerialNumber: syz [ 718.697478][ T33] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 718.846979][ T33] usb 10-1: Using ep0 maxpacket: 8 [ 718.853834][ T33] usb 10-1: unable to get BOS descriptor or descriptor too short [ 718.853940][ T33] usb 10-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=0.40 [ 718.855175][ T33] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 177, changing to 7 [ 718.897684][ T33] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.897751][ T33] usb 10-1: Product: syz [ 718.897767][ T33] usb 10-1: Manufacturer: syz [ 718.897784][ T33] usb 10-1: SerialNumber: syz [ 719.059415][ T5727] legousbtower 9-1:14.57: interrupt endpoints not found [ 719.213256][T15859] rxe_eth0 speed is unknown, defaulting to 1000 [ 719.240123][T15874] FAULT_INJECTION: forcing a failure. [ 719.240123][T15874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.240158][T15874] CPU: 0 UID: 0 PID: 15874 Comm: syz.9.2846 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.240186][T15874] Tainted: [L]=SOFTLOCKUP [ 719.240195][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 719.240208][T15874] Call Trace: [ 719.240217][T15874] [ 719.240228][T15874] dump_stack_lvl+0xe8/0x150 [ 719.240266][T15874] should_fail_ex+0x3eb/0x540 [ 719.240299][T15874] _copy_from_iter+0x1d3/0x1680 [ 719.240329][T15874] ? lock_acquire+0x115/0x350 [ 719.240359][T15874] ? __lock_acquire+0x747/0x2de0 [ 719.240385][T15874] ? __pfx__copy_from_iter+0x10/0x10 [ 719.240428][T15874] tun_get_user+0x51a/0x4430 [ 719.240568][T15874] ? aa_file_perm+0x18b/0x15f0 [ 719.240602][T15874] ? aa_file_perm+0x4ed/0x15f0 [ 719.240630][T15874] ? __pfx_tun_get_user+0x10/0x10 [ 719.240656][T15874] ? __lock_acquire+0x747/0x2de0 [ 719.240684][T15874] ? kstrtoull+0x137/0x1d0 [ 719.240715][T15874] ? ref_tracker_alloc+0x172/0x530 [ 719.240772][T15874] ? lock_acquire+0x115/0x350 [ 719.240798][T15874] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 719.240836][T15874] ? lock_acquire+0x115/0x350 [ 719.240860][T15874] ? tun_get+0x1c/0x2f0 [ 719.240888][T15874] ? tun_get+0x1c/0x2f0 [ 719.240907][T15874] ? tun_get+0x1c/0x2f0 [ 719.240933][T15874] tun_chr_write_iter+0x113/0x200 [ 719.240994][T15874] vfs_write+0x612/0xba0 [ 719.241032][T15874] ? __pfx_vfs_write+0x10/0x10 [ 719.241072][T15874] ? __fget_files+0x3a2/0x420 [ 719.241098][T15874] ? __fget_files+0x2a/0x420 [ 719.241128][T15874] ? fdget+0x1ac/0x250 [ 719.241160][T15874] ksys_write+0x150/0x270 [ 719.241191][T15874] ? __pfx_ksys_write+0x10/0x10 [ 719.241233][T15874] do_syscall_64+0x171/0x540 [ 719.241264][T15874] ? trace_irq_disable+0x3b/0x140 [ 719.241293][T15874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.241316][T15874] ? clear_bhb_loop+0x70/0xc0 [ 719.241343][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.241364][T15874] RIP: 0033:0x00007f637e1a8f19 [ 719.241387][T15874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.241406][T15874] RSP: 002b:00007f637f000028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 719.241430][T15874] RAX: ffffffffffffffda RBX: 00007f637e426090 RCX: 00007f637e1a8f19 [ 719.241446][T15874] RDX: 0000000000000086 RSI: 0000200000000c80 RDI: 0000000000000009 [ 719.241461][T15874] RBP: 00007f637f000090 R08: 0000000000000000 R09: 0000000000000000 [ 719.241474][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.241488][T15874] R13: 00007f637e426128 R14: 00007f637e426090 R15: 00007ffc8445d7d8 [ 719.241523][T15874] [ 719.479218][ T5727] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 719.487452][ T5741] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 719.554997][ T5727] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 719.637588][ T5741] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 719.639142][ T5741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.643764][ T5741] usb 6-1: config 0 descriptor?? [ 719.696454][ T10] usb 9-1: USB disconnect, device number 26 [ 719.725469][ T10] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 719.848646][ T5741] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 719.907985][T15887] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 719.908050][T15887] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 719.908088][T15887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 719.908378][T15888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 719.908404][T15888] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 719.908439][T15888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 720.118793][ T5741] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 720.118823][ T5741] [drm] Initialized udl on minor 1 [ 720.423864][T15882] rxe_eth0 speed is unknown, defaulting to 1000 [ 720.443358][T15895] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.838860800.0), cmd(9) [ 720.645028][ T33] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 720.663358][ T5905] logitech-hidpp-device 0005:046D:B012.00B3: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 720.790633][ T33] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 720.827413][ T33] usb 10-1: USB disconnect, device number 17 [ 721.471979][T15908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 721.571595][T15908] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 721.711553][T15916] netlink: 436 bytes leftover after parsing attributes in process `syz.8.2863'. [ 723.181171][T15923] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2866'. [ 723.367362][T15931] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2868'. [ 723.415402][ T3771] IPVS: starting estimator thread 0... [ 723.501469][T15933] IPVS: using max 28 ests per chain, 67200 per kthread [ 723.726824][ T5734] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 723.860860][ T5734] usb 10-1: device descriptor read/64, error -71 [ 724.097537][ T5734] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 724.226873][ T5734] usb 10-1: device descriptor read/64, error -71 [ 724.293332][T15938] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 724.294182][T15938] block device autoloading is deprecated and will be removed. [ 724.337950][ T5734] usb usb10-port1: attempt power cycle [ 724.678159][ T5734] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 724.697961][ T5734] usb 10-1: device descriptor read/8, error -71 [ 724.893311][T15931] [ 724.895711][T15931] ====================================================== [ 724.902782][T15931] WARNING: possible circular locking dependency detected [ 724.909873][T15931] syzkaller #0 Tainted: G L [ 724.915965][T15931] ------------------------------------------------------ [ 724.923162][T15931] syz.8.2868/15931 is trying to acquire lock: [ 724.929252][T15931] ffffffff90b71780 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 724.937250][ T5734] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 724.947180][T15931] [ 724.947180][T15931] but task is already holding lock: [ 724.954574][T15931] ffff888069214358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 724.959682][ T5734] usb 10-1: device descriptor read/8, error -71 [ 724.971201][T15931] [ 724.971201][T15931] which lock already depends on the new lock. [ 724.971201][T15931] [ 724.981737][T15931] [ 724.981737][T15931] the existing dependency chain (in reverse order) is: [ 724.990798][T15931] [ 724.990798][T15931] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 724.999330][T15931] __mutex_lock+0x197/0x15a0 [ 725.004481][T15931] md_alloc+0x81e/0xf40 [ 725.009228][T15931] md_alloc_and_put+0x1a/0x1f0 [ 725.014582][T15931] blk_request_module+0x27d/0x2a0 [ 725.020148][T15931] blkdev_get_no_open+0x3f/0xe0 [ 725.025589][T15931] blkdev_open+0x1d7/0x600 [ 725.030543][T15931] do_dentry_open+0x80e/0x1360 [ 725.035871][T15931] vfs_open_consume+0x4a/0x350 [ 725.041168][T15931] path_openat+0x16fc/0x20f0 [ 725.046313][T15931] do_file_open+0x23e/0x4a0 [ 725.051356][T15931] do_sys_openat2+0x115/0x200 [ 725.056575][T15931] __x64_sys_openat+0x138/0x170 [ 725.061971][T15931] do_syscall_64+0x171/0x540 [ 725.067126][T15931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.067512][ T5734] usb usb10-port1: unable to enumerate USB device [ 725.079991][T15931] [ 725.079991][T15931] -> #1 (disks_mutex){+.+.}-{4:4}: [ 725.087345][T15931] __mutex_lock+0x197/0x15a0 [ 725.092497][T15931] md_alloc+0x40/0xf40 [ 725.097107][T15931] md_alloc_and_put+0x1a/0x1f0 [ 725.102415][T15931] blk_request_module+0x27d/0x2a0 [ 725.108085][T15931] blkdev_get_no_open+0x3f/0xe0 [ 725.113494][T15931] blkdev_open+0x1d7/0x600 [ 725.118488][T15931] do_dentry_open+0x80e/0x1360 [ 725.123802][T15931] vfs_open_consume+0x4a/0x350 [ 725.129191][T15931] path_openat+0x16fc/0x20f0 [ 725.134326][T15931] do_file_open+0x23e/0x4a0 [ 725.139374][T15931] do_sys_openat2+0x115/0x200 [ 725.144605][T15931] __x64_sys_openat+0x138/0x170 [ 725.148901][ T5741] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 725.149179][ T5741] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 725.150883][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 725.151329][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 725.151441][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 725.186704][T15931] do_syscall_64+0x171/0x540 [ 725.192149][T15931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.198708][T15931] [ 725.198708][T15931] -> #0 (major_names_lock){+.+.}-{4:4}: [ 725.206472][T15931] __lock_acquire+0x164c/0x2de0 [ 725.211954][T15931] lock_acquire+0x115/0x350 [ 725.217016][T15931] __mutex_lock+0x197/0x15a0 [ 725.222157][T15931] blk_request_module+0x35/0x2a0 [ 725.227683][T15931] blkdev_get_no_open+0x3f/0xe0 [ 725.233079][T15931] bdev_file_open_by_dev+0xa0/0x240 [ 725.238816][T15931] md_import_device+0x2e9/0x650 [ 725.244212][T15931] md_add_new_disk+0x3a3/0x1850 [ 725.249623][T15931] md_ioctl+0x2027/0x2630 [ 725.254514][T15931] blkdev_ioctl+0x5e3/0x740 [ 725.259565][T15931] __se_sys_ioctl+0xfc/0x170 [ 725.264695][T15931] do_syscall_64+0x171/0x540 [ 725.269828][T15931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.276355][T15931] [ 725.276355][T15931] other info that might help us debug this: [ 725.276355][T15931] [ 725.286943][T15931] Chain exists of: [ 725.286943][T15931] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 725.286943][T15931] [ 725.300429][T15931] Possible unsafe locking scenario: [ 725.300429][T15931] [ 725.307976][T15931] CPU0 CPU1 [ 725.313401][T15931] ---- ---- [ 725.318792][T15931] lock(&mddev->reconfig_mutex); [ 725.324013][T15931] lock(disks_mutex); [ 725.330623][T15931] lock(&mddev->reconfig_mutex); [ 725.338183][T15931] lock(major_names_lock); [ 725.342822][T15931] [ 725.342822][T15931] *** DEADLOCK *** [ 725.342822][T15931] [ 725.351017][T15931] locks held by syz.8.2868/15931: 1, on CPU#1: [ 725.357703][T15931] #0: ffff888069214358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 725.358523][ T5741] usb 6-1: USB disconnect, device number 91 [ 725.361375][ T5722] logitech-hidpp-device 0005:046D:B012.00B4: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 725.384934][T15931] [ 725.384934][T15931] stack backtrace: [ 725.390866][T15931] CPU: 1 UID: 0 PID: 15931 Comm: syz.8.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.401843][T15931] Tainted: [L]=SOFTLOCKUP [ 725.406199][T15931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 725.416286][T15931] Call Trace: [ 725.419593][T15931] [ 725.422546][T15931] dump_stack_lvl+0xe8/0x150 [ 725.427177][T15931] print_circular_bug+0x2e2/0x300 [ 725.432337][T15931] check_noncircular+0x12f/0x150 [ 725.437320][T15931] __lock_acquire+0x164c/0x2de0 [ 725.442216][T15931] ? prep_new_page+0x22/0xb0 [ 725.446839][T15931] ? get_page_from_freelist+0x22a1/0x22e0 [ 725.452598][T15931] lock_acquire+0x115/0x350 [ 725.457215][T15931] ? blk_request_module+0x35/0x2a0 [ 725.462434][T15931] __mutex_lock+0x197/0x15a0 [ 725.467047][T15931] ? blk_request_module+0x35/0x2a0 [ 725.472199][T15931] ? lock_acquire+0x115/0x350 [ 725.476907][T15931] ? blk_request_module+0x35/0x2a0 [ 725.482046][T15931] ? __pfx___mutex_lock+0x10/0x10 [ 725.487097][T15931] ? find_inode_fast+0x5dc/0x740 [ 725.492076][T15931] ? find_inode_fast+0xd2/0x740 [ 725.496953][T15931] blk_request_module+0x35/0x2a0 [ 725.501943][T15931] blkdev_get_no_open+0x3f/0xe0 [ 725.506839][T15931] bdev_file_open_by_dev+0xa0/0x240 [ 725.512071][T15931] md_import_device+0x2e9/0x650 [ 725.516965][T15931] md_add_new_disk+0x3a3/0x1850 [ 725.521857][T15931] md_ioctl+0x2027/0x2630 [ 725.526224][T15931] ? tomoyo_path_number_perm+0x219/0x5f0 [ 725.531868][T15931] ? __pfx_md_ioctl+0x10/0x10 [ 725.536654][T15931] ? do_vfs_ioctl+0x11a7/0x1570 [ 725.541530][T15931] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 725.546572][T15931] ? do_futex+0x3e7/0x4e0 [ 725.550922][T15931] ? __pfx_md_ioctl+0x10/0x10 [ 725.555630][T15931] blkdev_ioctl+0x5e3/0x740 [ 725.560177][T15931] ? __pfx_blkdev_ioctl+0x10/0x10 [ 725.565213][T15931] ? bpf_lsm_file_ioctl+0x9/0x20 [ 725.570161][T15931] ? __pfx_blkdev_ioctl+0x10/0x10 [ 725.575193][T15931] __se_sys_ioctl+0xfc/0x170 [ 725.579795][T15931] do_syscall_64+0x171/0x540 [ 725.584399][T15931] ? trace_irq_disable+0x3b/0x140 [ 725.589440][T15931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.595539][T15931] ? clear_bhb_loop+0x70/0xc0 [ 725.600235][T15931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.606154][T15931] RIP: 0033:0x00007fef40fa8f19 [ 725.610967][T15931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.630593][T15931] RSP: 002b:00007fef41e69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.639022][T15931] RAX: ffffffffffffffda RBX: 00007fef41225fa0 RCX: 00007fef40fa8f19 [ 725.647003][T15931] RDX: 00002000000005c0 RSI: 0000000040140921 RDI: 0000000000000007 [ 725.654992][T15931] RBP: 00007fef41037f6d R08: 0000000000000000 R09: 0000000000000000 [ 725.662976][T15931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.670955][T15931] R13: 00007fef41226038 R14: 00007fef41225fa0 R15: 00007fffbd396598 [ 725.678957][T15931] [ 725.700944][T15931] block device autoloading is deprecated and will be removed. [ 725.701095][T15931] md: invalid raid superblock magic on ram17 [ 725.701111][T15931] md: ram17 does not have a valid v0.0 superblock, not importing! [ 725.701163][T15931] md: md_import_device returned -22 [ 725.720652][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2868'.