last executing test programs: 3m12.457889154s ago: executing program 3 (id=508): r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) tkill(r0, 0x25) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xd}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000200)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, 0x84) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r5 = fcntl$getown(r1, 0x9) sched_rr_get_interval(r5, &(0x7f00000001c0)) 3m10.025717815s ago: executing program 3 (id=511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000b40)}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000c00)=@reply}) syz_usb_connect(0x1, 0x24, &(0x7f0000000d00)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0xa, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xff, &(0x7f0000000e40)=@string={0xff, 0x3, "bc0b2472e85967cc4d41994024120e8782c0dbf2ac1184a3290070e3d5682fe55c0155ed67c899d5b6b8e85e11ec667510f2af3510745c9d26148f5ef141a34e4a6cdb67b149bd27528aa929030b87905da92d3cb4234874217ecd5e058693c45607be686f74987f7aae25bab79fc917233fedfb3531af88912c40ea6528482e552a69ebc7d2d017b9a0f00e428dd4d4094fdad4e8463b295be4b91217269cc076ea3d5833395c2409c102f4433cf793000000759e50953ea7a93b7b15e189bd0f5589bcdb8a1e1c5747928e158e714e685cb409e352a95175293f6e04c5df471cc3689e007b5bd168f036496d2e04bc21f36300"/253}}, {0xdf, &(0x7f0000000540)=@string={0xdf, 0x3, "8c2233664ef91f8f1dd77bcda26093ab9c41bc9ce79fead74fe0a22ed81f1719d2d017503705b51b4b840dd97737d398281a95b3482bef34e9f4db0f512091a2bdf947feb17a352848b2782c6d8042058445b1bcd18c6f0f794f9649705613cb7bd69de4082167733330d983444efb47cfe19730208dbfce4e0af701a0dcd81867a92787a8085b063691b255c2acc37016f3c809dc97647aef818132f10acef40ca5a0306d70babdc610b7247ca11e7e8cf33b700e9ced5002ce4a571ef4753156c140c39ae3818cf2ebe50e2b27d4eefa90a0a053dd5f1b23000369b9"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42b}}, {0x1d, &(0x7f0000000680)=@string={0x1d, 0x3, "2609dcef3711d79a16360a01a6e86dce6456a0b58c3c8c53f761ee"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x422}}, {0xca, &(0x7f0000000d40)=@string={0xca, 0x3, "975687a4b4823edcf122fcdabbc5f5f7e7182bee1e3f3836eeb136ec0107e16c3aa54a6a8987777890a929d1c95a1a59ba4ceaea20d211a9219cb721f95e225f4089b625970074b3c677a3a59bf94acb958fb214778402916cd6d9f878f44e889b33fef1655ae2523d62ff1361b345c10cf9849e8388cf3250e43b30c7a536b236ce6e9f71d672561fc3ef14e5a79ad9b10ae34ec5e94bb9ce4a8558695e5be0734259a218ac7ec5207b00decfe0f77494a7bca2c19776d15abdc4198cd9b0bd5ed4a2b6ae0e0549"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x412}}]}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x4bfa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f0000000340)='./bus\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000180)={0xf0f044}) poll(&(0x7f00000001c0)=[{r1, 0x3003}, {r1, 0xa061}], 0x2, 0xffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='wwnn=0h1000000044001122', 0x17) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x1c2) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0xc, 0x1010, r3, 0x82000000) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2) 3m5.861386312s ago: executing program 3 (id=532): capset(0x0, 0x0) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_io_uring_setup(0xaa, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x4001, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f00000002c0)={0x8, {0xf8000002, 0x8b5, 0x5}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0xd3e, &(0x7f0000000000)={0x0, 0x6, 0x2, 0x3, 0x2, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd=r3, 0x0, 0x0, 0x1, {0x200}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, 0x0) write$cgroup_int(r1, 0x0, 0x0) 3m4.889942578s ago: executing program 3 (id=535): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f00000011c0)='./file0\x00', 0x0) capset(&(0x7f0000001200)={0x20071026}, &(0x7f0000001240)={0x200002, 0x200003, 0x801, 0x4, 0xbe67}) mkdir(&(0x7f0000001280)='./bus\x00', 0x0) r2 = syz_open_dev$loop(&(0x7f00000013c0), 0x8001, 0x101a00) ioctl$BLKFLSBUF(r2, 0xc010128e, 0x0) mount$overlay(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x8, &(0x7f0000001340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mkdir(&(0x7f0000001380)='./file0/file2\x00', 0x4) futex(0x0, 0x9, 0x2, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x1}) r3 = eventfd2(0x80, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r3, 0x4}) eventfd2(0xfffffe00, 0x80000) write$eventfd(r3, &(0x7f0000000140)=0xa1cb, 0x8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x101000, 0x108) r5 = open$dir(&(0x7f0000001180)='./file0\x00', 0x201, 0x100) getdents64(r5, &(0x7f0000000180)=""/4064, 0xfe0) tee(r0, r4, 0x0, 0x2) 3m4.623252165s ago: executing program 3 (id=537): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='27', 0x2) renameat2(r1, 0x0, r1, 0x0, 0x5) mount$tmpfs(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000300), 0x1000000, &(0x7f0000000340)=ANY=[@ANYBLOB="6e727f696e6f6488733d302c00"]) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x0, 0x24, 0x9f, {0x9f, 0x8, "83e6243641655a43c102a3cf3857ae04b88928d17ab71b9a550b93d64f8b1adcca3cd79cae4613fefa0a10290dd564340454420f0f549b17bd4e58a50d3479a49207804b6d2cf711218482e67a3f40303ca4689e22aa7a82748234919b7fe216b2f29195b2e8fdb27a4be2bcb6687ca47736a9fa8511736d290532d0ab9dbdb0e13f7f82a7f5fe089bbfd07a817b131836a74846e7c76b4a1660a42b43"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000005c0)={0x20, 0x35, 0x57, "3ce30675dfc6840c96fd148ab3bfa937a59a2ae5fcbf96f55adce2baeb006367c8ddd5dc31e320ce660c44b12a2a98790c4aa856eed1e10e6f531b4ab2c406c84f13fe21a4b93728cdffbfa91bd111c34270b801dc66ac"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x5}}) syz_clone(0x80200, &(0x7f0000000000)="77fa670664c92f002c5a42553538ea704a01204acdfe1a677f51a2eefd8781961d122288e73895e223a9362adbd9b1f61b0e4e2773089cc3b7f7829ebe9f43924babced86a81b909f107f5db6aad861355f52c4be8dbff08bd87c5293391529fdeb18ed5cf9e4d440cf34ecda732a31068d180eb0b5ad27fc2ddb1d70f", 0x7d, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="9b89235e6e408f2bfc7d4904754fe14bcbef1f5fa1c40d7da7b80ee90bb1e577ecfb1b7f81f4196d56d2a20d4ba701231af77b6ae52f9bf28fbbddc472958be1f641b06f611c605dcec2cd5e080b6370705204ffce7acb6eb0c1af05b4390b1b") syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000380)={0x40, 0x13, 0x3, "917452"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x40}, 0x0}) 3m1.249838568s ago: executing program 3 (id=554): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x2) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b40)={0x44, 0x0, &(0x7f0000000b80)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffd2c, 0xffffffffffffff92, 0x0}}]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f00000007c0)=[@enter_looper], 0x100, 0x0, &(0x7f0000000800)}) r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x8, 0x400002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x100000, 0x90, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000c00)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=[r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x14}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=[r2, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2], 0x1c}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000a80)={0x0, 0x28, 0x50}}}]}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x52e2056b, "a64070f78f2985f5830df55279e17af37311e284022954cccda69b55c61bb692", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000380)={"eaa2b45896aee7cb44975ba07876cd6d3701356fd2b8409bfa8ca4bcfa3222df", r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ad734ec633d5d7536d7354d8a15f2169ac75794966462c595d", @ANYRES16=r6, @ANYBLOB="200029bd7000fddbdf256a00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff00000500d200060000000a00060008021100000000000a00060008021100000100000a00060008021100000100000500d20009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000001c0)=0xa5) r8 = socket(0xa, 0x3, 0xff) (async) r9 = syz_open_dev$evdev(&(0x7f0000000b00), 0x3, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, 0x0) (async) setsockopt$inet6_int(r8, 0x29, 0x3e, &(0x7f0000000180)=0x7f, 0x4) sendto$inet6(r8, &(0x7f0000000580)="c4123e2d4c075c61d6b08650283717fd750060a60bfb41483c92af8c8c46b81db5ef3a138ab2f9d17c519f6715bc250a4333ae535daa56f2c381a44644c644ac416eec6cde9b3b34d12670b787519f741efe92208762305f492c84f25fcd71f32db5a8a8c008fe6b36396dfb1c580280586660f58e4395bd8648aa768708d9fc6e54b0b196a041aeae8786e82e201f26a0e958515109024ca23e55c8b840fc04fcf9d59cba5c350cf126b5348e56520f84f054b75b4ef64f33891b1e68d0e83036d509b9ea2b2a9ffc1f21aac034a2b45731eae8bfdea45056af2226b7d2826a8cf4379f5d10", 0xe6, 0x40, &(0x7f0000000200)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) (async) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000040)={0x0, "abacd2119346a9814a6e9863aeb5ab2c7b8da5fa07558139ede6cc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) (async, rerun: 64) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f00000004c0)={"fc7fbced01eb1b00000000000000000700", r4, 0xffffffffffffffff}) (async, rerun: 64) ioctl$SW_SYNC_IOC_INC(r10, 0x40045701, &(0x7f00000000c0)=0x402) ppoll(&(0x7f0000000500)=[{r12, 0x1690}], 0x1, 0x0, 0x0, 0x0) 2m46.098726677s ago: executing program 32 (id=554): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x2) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b40)={0x44, 0x0, &(0x7f0000000b80)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffd2c, 0xffffffffffffff92, 0x0}}]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4, 0x0, &(0x7f00000007c0)=[@enter_looper], 0x100, 0x0, &(0x7f0000000800)}) r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x8, 0x400002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000940)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x100000, 0x90, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000c00)={@ptr={0x70742a85, 0x0, &(0x7f0000000a40)=[r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x14}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=[r2, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2], 0x1c}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f0000000a80)={0x0, 0x28, 0x50}}}]}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x52e2056b, "a64070f78f2985f5830df55279e17af37311e284022954cccda69b55c61bb692", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000380)={"eaa2b45896aee7cb44975ba07876cd6d3701356fd2b8409bfa8ca4bcfa3222df", r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ad734ec633d5d7536d7354d8a15f2169ac75794966462c595d", @ANYRES16=r6, @ANYBLOB="200029bd7000fddbdf256a00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff00000500d200060000000a00060008021100000000000a00060008021100000100000a00060008021100000100000500d20009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000001c0)=0xa5) r8 = socket(0xa, 0x3, 0xff) (async) r9 = syz_open_dev$evdev(&(0x7f0000000b00), 0x3, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, 0x0) (async) setsockopt$inet6_int(r8, 0x29, 0x3e, &(0x7f0000000180)=0x7f, 0x4) sendto$inet6(r8, &(0x7f0000000580)="c4123e2d4c075c61d6b08650283717fd750060a60bfb41483c92af8c8c46b81db5ef3a138ab2f9d17c519f6715bc250a4333ae535daa56f2c381a44644c644ac416eec6cde9b3b34d12670b787519f741efe92208762305f492c84f25fcd71f32db5a8a8c008fe6b36396dfb1c580280586660f58e4395bd8648aa768708d9fc6e54b0b196a041aeae8786e82e201f26a0e958515109024ca23e55c8b840fc04fcf9d59cba5c350cf126b5348e56520f84f054b75b4ef64f33891b1e68d0e83036d509b9ea2b2a9ffc1f21aac034a2b45731eae8bfdea45056af2226b7d2826a8cf4379f5d10", 0xe6, 0x40, &(0x7f0000000200)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) (async) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000040)={0x0, "abacd2119346a9814a6e9863aeb5ab2c7b8da5fa07558139ede6cc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) (async, rerun: 64) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f00000004c0)={"fc7fbced01eb1b00000000000000000700", r4, 0xffffffffffffffff}) (async, rerun: 64) ioctl$SW_SYNC_IOC_INC(r10, 0x40045701, &(0x7f00000000c0)=0x402) ppoll(&(0x7f0000000500)=[{r12, 0x1690}], 0x1, 0x0, 0x0, 0x0) 1m47.626791639s ago: executing program 2 (id=943): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async) mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil) (async) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000003000/0x3000)=nil) (async, rerun: 64) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ff6000/0x1000)=nil) (async, rerun: 64) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x800001c) 1m47.249348462s ago: executing program 2 (id=948): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001640), 0x4000, 0x0) recvfrom(r0, &(0x7f0000001680)=""/60, 0x3c, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000240), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r1, r1}, &(0x7f00000002c0)=""/64, 0x40, &(0x7f0000000300)={&(0x7f0000000340)={'wp384\x00'}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000400)={0x0, 0x0, "d607f8f9951eff0f3f64323723e7eecdf40c23eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f557ff3e24852548deb01efd54f11ed2c41d078b9cf1fc7972566173c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2233f9d5c3b90400000000000000c279f04b81083900666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103e5056e320a68e528329d3658c3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3800bda0178e898540debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c877364776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b2ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ad0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd1d347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dcf1f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c30000d6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1034581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) prctl$PR_SET_NAME(0xf, &(0x7f0000001400)='nl80211\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x777) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mknod(&(0x7f0000001500)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000001540)=@filename='./bus\x00', &(0x7f0000001580)='./bus\x00', &(0x7f00000015c0)='gfs2\x00', 0x400080, &(0x7f0000001600)='discard') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x40000102, 0x0, 0x8001}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001440)={0x1, 0xffffffffffffffff}, &(0x7f0000001480)=0xc) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r5, 0x84, 0x81, &(0x7f00000014c0)={0x2, 0x9}, 0x8) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r6, &(0x7f00000000c0)=@x25, 0x80) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m47.118862416s ago: executing program 2 (id=950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x44015) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x140e, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000040}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2800}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xfc, r1, 0x408, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_SEC_DEVKEY={0xc0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5a}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe64e}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() sendmsg$netlink(r3, &(0x7f0000001f00)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc, &(0x7f0000001e80)=[{&(0x7f00000005c0)={0x13c, 0x32, 0x100, 0x70bd2d, 0x25dfdbfd, "", [@generic="9583e968513859954471d7c3eb5103e9ae35bcda023097f73b68822a5f9fc574df83b41ae6a148212eafcdf211437afde99013", @generic="d98abdfbdac518fde144830ae5b9106af8c5d71ad4a3a80225fa513615a21849851c7b45b70886e7febd96a2ecc5f3e764afb9622713238e9210f9bc9187246738e2fd2185a895b838a4fc3ed35f422ee4178ca9b83b02b18ebfd8fdaeb88f74afdff4765a32a7a529962db24fac6e700b44bed46a63263705a0bc2cc4af031ccf211cd8b673516311f0084f10c0c1988eb8be52822a3c05ebab7786ba5d1a7800d834cc9eaf750d", @typed={0xa, 0xfa, 0x0, 0x0, @str='wpan0\x00'}, @nested={0x44, 0x12, 0x0, 0x1, [@generic="df7c312265dcd48dce6fe665c1cbee4a4e08787bc927b87a2384a641da54abea87e8d6e21bd5b2600e24cb10", @typed={0xc, 0xbb, 0x0, 0x0, @u64=0x400}, @typed={0x5, 0xa1, 0x0, 0x0, @str='\x00'}]}]}, 0x13c}, {&(0x7f0000000700)={0x1d4, 0x36, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@generic="871005e1c86a3c032c70a221576b99ea4f0e3cbab072805818d72aa885a5562efec789688a29e47c2d174c3b95ae99fe8c068575a492537cfbb6cadb3283cb25205cfbb432d2b041d2cc62e3d5df961d6ade762d6637ed8d51156440f44efb8ca096dae8191447bb13e7d7d3d8495a1eff1a037a19b67d495e9236dd468089509d26b7c04988cd44b3b0d7596aec0557f4114b6e191e2808c7ba8022bc08fc69e0294190999a28dd8c92e04cf41d1241046f692f2f77a9bac0d065249c1c83a16926c6899115b88aef7bf6e20aa44ef633bdc1ddd79fafa82b77d9", @generic="6ef085be605200c7a4a00585181fee1363d98e58eb5dcecb586aac30c4846f88d4e0bea0b6c7dc9c479613a1af01464bb64505e6afcb56a7eef01e1312ea42851a66dc6052b6b79a0293bc4080033243a131f416c56aac0d34c9363d8244016cc96da13508aa6ff6c8691f14ff4ff7adc9822ea643f972c8759c07c6b4c7928f42bd318d6d093d60f37f14757d9c22f16f8134354e138d15531b1b5515bcea65f3135a01cb9139f2b42c02ed06e5bd3af6e48244cbe157763b1cf02121e39e28c170bb1a48500fd64bedb8cad75043d9e1b3dd318d5381a1e9399d4d2a6e04b36f946c417555da"]}, 0x1d4}, {&(0x7f0000000900)={0x11d0, 0x21, 0x200, 0x70bd29, 0x25dfdbfb, "", [@nested={0x10, 0xc6, 0x0, 0x1, [@nested={0x4, 0x148}, @typed={0x8, 0x161, 0x0, 0x0, @fd}]}, @nested={0x8, 0x34, 0x0, 0x1, [@nested={0x4, 0xf5}]}, @generic="f6c300d9ef26f56edb383379702fe79f1b32b1fa3f2d5113556018c5a70a677fd26628f6bc4a2e66e889630f9dba89509334880c63aecca10da9e70b322c7991cc6d471e7bbeb80b573f1d024279206d49be9dd83c7192", @nested={0x10b2, 0x63, 0x0, 0x1, [@generic="8d6fafe2ccc83869896016407df9feb407b80ee95305f6c334462b4f3248af87fc639d021c0bcb9e3f658149b81aa667c85dfd21742103b85ed16faf6fbb8f0c57f05cf54eb78fe686218647089f7d21327cc25dedcef38efceaf9a498ffc08ae75510fe9c9fc8fef9cb44ca537b33cf08acc31de61345247c7e204bbe86af1c81ac0fd010ab218cf299dad18863087ee075b08e9e95fb97d10b6be9fc73a63f463543fc899b72ee0f0c7316561501a194c6fbf3f358228cd30975f806907fc69897fe4319e5874d7bea2520882e049304e14108988ba95a54008e364200deb3519eeab41f942a914c9255f21e24ffb97e51754cd7435045e3aa15830e294ae6713bc9beb5ac921734f105b5228ae666ecf68ec3e21cc0e6320c8ebd84766bc729a4c0d49d1a988505f278b8bc3b850f7a7c78127fb92dbc0ec19ab798cba7bcbbe4785337310b68ac722c717a00f581c084f249fc3475c9dc6ba3cb13eaf6f45d4f6ce37fd06c1c4f6ca513ede90e96d6d50edbd5ece2a1e0aca87657a7fcd5b9424911475517f89310ea61c11461561ae5c5e91876a8f27513e9b90521c8408d8e8b2617408c8e9c6459fc906832f3888a50c0097e97d553b01f5eb18bf5d0d81fccc244fac35fa8af5dcd78ab687115974386c88a547fbe26acff96f156f0541788f4f98b0fbe937f3b2405e2966bcbd64eb5a42634477fa48919f3f81326afed2cae8050b37f2c83c5473509687838849029d67a549c7fb4c46cdd1847319453df1827f2b97a6f829fc24590da1993cbb16abca84cc4ff97bee500dbb744c886d3b73082fba6dd7b0a58557007194f3b17e0e4e29c8fcc2c8b0be8ea2482f07066bf12359dff29f3ab21c4119efead6b38bfe87593a1627abcd75c9c700bf973d82ae6a08b220761f66090fe0fc533b663be324a0d76c903bf591c5020b94776db14a1a75d2f14fc5bf2598343fbbc4fec78f50bce88799508f2fc50f31a489888ec5fd17d90a0977a73dae55bfd7d9c3cb2d5891e3fddc8fb1c5428c8e91e25675432e916461899f735639f70376505a6278af523e0caff683797ab22dda00fd3d75017154454f3bae02ff499a7edaae02007a2dd8688a27bccd7b4cf001036c7aa0e5ec8cf86a5d44d9ae2ab4b12d65b77a3d04d0e7afeb9e1c224432cb77e80d1fee63999575589dc09ff9436953dd2aafa80c7de51f2ff1981a057795418facd8d76fad180d2e1ad96ce5011797e3449dbd21bd00bb8b02f982fd9c8a26d40d5da80fb9893da337813e1abea87718657e3135d99e3a2188e2b38bbcaa9ac099bef3eb3bae9f6743a5a11d2e13d3ac0d7481771399bb8c76fdc5077a04a28336b4861271df51fa9f6db0ae6caef57735ed942735d3d490dd21ad6ba1440c7ad8308ed81b250c829bd31b67fe3cee30f80cbdbdc8b5a0252fd572cdffdc5f02bbe671683c04523fcf8a0c99eaa67f0cfdc56e8ec68f473526c6c25c572c6b96c251aca028536e670f4784026e59853bc903463dd86f633a46b3ef0d200639bcb5503b28fe08db622bec4598f0f03063324f7332eb93de06f7cd41c254323c2ec52fbadfff462173a3422ea188ffde542d047e1127a85443fbec6ddffe56558975b3b954d8b53ab7af6c072496c9354d7fd7e2645fb2f51c03354cb2573715b28b6dadeba3b15eefa6dff33510a05c18cee7d8bcd80e674015c257f94c351a4f9d20ce6169a2c46d98b817b4e240c82e81ce1db038a98b1f705924c16e03dc7815afe64647bbf34aa9ed1299beecba385e0ce16644bb51021460e526fc659a9f7b128280bf188b5f5ac809a279b4db26820c9359efc554e16f84993e4e743f0dd2eaed4798dff6fe62c51c722430e036c42ae3909df4d3103c51d4029440affa7ee7a4ba9f61fee68080aae28380509c2554a279359e0f6edba69e637301ed6de843b0c7782adf8c19e706ec413ee04e3f3f5d8348896dee412e9f2eb28c6c58f512f10b1991f5991d9a1722912bbc1d03a2c88a3c8890c8d3d1a039e00ea1325d6e3b8bf9c50b82ec933e801bbb143062337a1bd0c2d14077c0e56ada622ff8e1a64785d4d52c722982b76900d4285edd5a528b72252dd7671bb5a43f1924d58c29ddd749664cb2a0ae73e369d52c41f656d5cfe481dd8c3d6d68cf3459ad43e751e82d04d41294a7c57e033ad001a8140c89961a6a94f24d2fcf83b71c4801eb082f053941bff44f2022f5dd43eb74fb6712231b6d60d4101020bdc620abc87743030eb59a776ee357b9c23f8281a8072ca57d604f872ebbf34e9aced2931c7296bcde7d97ddcef8e8408909f20eeb3346c27756cf5ff642dc336e18bcc5a29fdbef75d6a6f07d25c520fd7837c8356c4b40c96a7ccc4c5d0ca74728dad8616d4edbb69317eacca5197aa13a1071e371d091172fd7dbf3503e6592c247e9d9501d037951f2368482a6726e6ab8b64d0d6fc77f2e2929286e9762b5bf566d9e0296bf2b30acdcdd337e404c6d7456a4ad6e9e2d8a3e825fe7ed60db2a7f97b7bf944289714371846c20a2896f90727c3bc01eb02b6c2438670fbeca38551faed8d27df348eed83dba54d4a1c47f4ac9dff8c857aeb461204d63e18109b9bc0114e1bd59df0eb80ab122a9ef9a7068f9d558a947ca069c9bcfd87eb627da120cba89bd5485fb9ee1e6c5a5b85f9a09152905e0aca3d2794d4382268f0d490fe1d6108e5b475dbdc2cb5f5e679f08e399dd836c7d7ab9b72ccef9d7c53e2832472d00f5e03b69535cccf7ef2ac789670db60fb811549286c663438ceda3278e5a3732a81941ff53e5ea671ab6c1a2861918bda04bf2cfd087a311c524fac711bb5ffe6ad10123c246b285b9f3d17b737140cb10fba3c175b0bee3b8305b1ea6b402e8fa97e285c16ee3267d7c863ebff9eb29b0134c5283e945419b7ceb9f9964127355e39557de5dcb1e68cf9e50a3fcf92b5df02876c63f497ff913baf944c6f3adc001cdfb6701dec1575b66260bb257faa1a1ebac9ae56819f1ee4947c4504bbd85ae2becab44514ddbb98639822619342fc7bf1aedec01b6495cd497abe42d481b19ee63c6b86d768803c2f8cdfb48e833a9c8b821ddd2fc1d24984ac16aece0922217e228aa7488cc0747cfc03973c27e662fc2881f400b92be0d6a95e99472ee35a932517faea3dc96dfb202b1a0f9b9fee891f596c21dc52373875525e4f82386f2e34d064cd41f3d6cc2fc7e0690c7d55ddd602f4369cce2ceb9dcd0b01c81a4039e9e2aca3984e250dd022884a4001a6fbe89219d58b94fb460181006fe93121582d7168fb7aff625a1ec96d3d9f2841cbe703ce52dc428160beeb683b8469ead0553f9ad99bc6688119df23591cb5a40404b5eff3f9c71cafdddbb56aa7422e55d30f7060a93517ecbb3f0206a7da11a402502441008140ea5e85b08873768b68748a840d6681ddc1f617becf5afb9de4f94142c4f0791cd8f09d2dcf64212b870c2e3008cebb7950134a6c386285c28b48df882f33ef3e159cc7ac32116f451cea47ed4f5c3e248067fbeff851f9208227fa501d522e9dfdf93e8c23f55014c9664b0f62085642c672132a951759e30ba100c0014995d559f0a197f0c80f34eb12a3d273294946c35b792e0783dd6469a54f17e47172819df27396b3cbd4219c3a46388b81f7ae24a8920cdb74a95d1f60a8a3844ecaacd375d3c953ebb03a7eef532b2af11a593897d2f81a4a3fa6012b612ed55ca17853ec590db3029bde011af3e856cbc22b08af7c8e506bdb07579467638a1878ef1182fc673764e12f8e89de010bcdfa674b2a2d17666776fef7cc6921849fa130720e66529bd076db5455172d5739a7db7c94161cd8e982dcf43662afcf26b24ff5951805449344448c408ef465eacb52d638fd5bee2f8c61f4fbaa6351e42a879f3faad070aaefdf5ceeadd2b99d8f5e29dcadcc105d91db97e7437ad03452daefdc20e134b738d8069549484cc2bd11d25d87ddbed62a0b5c6c07a48b9e0a1ff022f5c05ceade708980a03a55addf6da1c80d833152b95e40f6a66815deb830247607e28e13e3d791efc575e5782496db9a563dd6d1408d1080e38ac8f91e05f706a3d4c0358b788fe4d804c62481ae487675a44eb5a997c69334c973eac7092c89b0eb77828d3434c9fd63de897ad20ddaef3a0660a6ac17925830de4d4f5b253693699bcf514653376743bd4b0723495132bf6f50747bdf0a440b271f5657b9584980c41a18d8af03a6c359053e9e0a35981fad1ea5e946dd64cff5e72bb6b05be986cf64bbf4d67f7fb8c9d2c1eb7db7fd792b6c47d4d99d3072c232b9674ec70a7d30328919e7c5174b488baea2ee39485943ba7ac420e51d787b3b01d3ad9909baef2e1c46f6a45a5600cac28b87ec11ed11560a609784d0bd8c834bdd67e0553078816783c48c0508716b217ea237a19cf9e8f7ee7992b0c6bf7a4e7d867d324605e5052ba0b35257b31240e2617034ab589e99f41ddefbbd7638a51fa1bb0c286f22d645d10cccbf4a6a99ecb1bf958b5f20dfac94dd6c82b1a8364e48e1a44326b69a249c6abe8322f8a688f2f82eadb4db755371b4653ca05fc35a0fa35fe5c20a2e7695d3f29ad6ea4a5f0635e69aeba0216f6d176631dcd2f44f21079cd0838e4e347225de709cef4e76e0de734fee4563b2c040a004576b0333fae309984aa2479b29f0cb88ac6a0d35fb64e4e267b30e7d4f4a75e672fbdaa338073f8cec88fe0704afd98363478ed70cabf5f7e97b8f1141a008ab3a2a5261ca32bc82980135674e45568a5a1ce175ba14ac668e095dff6a0707d53dc346105ac218d55432c0fd84c2dbfc897d8b20da0e5bf01d30f16298a757def5bd31300556319195360e2375bd18506b56a647e8ae3e3d7b2981173c7875e19d029abd63b8a2249f42f8719c5a5251fad53e12e99e1e7a156644aba580f5877c41fe9d8e96cdeee33f5304374ab92b61220d0bd08447ad9a6ca2f40aca9c65859ef376e8b6205e1c79d456386a7a45ba56a4012a1142a330293b66c7cb55bdbdeb4b74ac73480f1f3f8bb7ea27835e505e8e4c852ca378e8be1d27a66dfcf2a803c1c78e45e4a8fc7f8bbe81f60ecfebb09ae5d9d026edab927245e4697ece6a8ffe3f33f631c45ca4706690c158d17efc16d019c8ace7efdfd60f047fb819bc1383303cc492dc98172345c582535060eb65354aa31b5c90cff6e1e3a23b57388a5139bae3c84a1f3976e707f2fd58a9b748b91c164443e7a097a6a8467ba5d4b6330d273edfb7bfe3ad45a44181e64dbe803cf504559b0c963072044c2112cc4853c58f1be524601a92e45ef8d7a899bd245f0ec341268c7c3471e332072f640741afc7ddadb7d071b27401d689e7cf1e8aa5367e41807ffc266933a5ec2cedf1a5ede2ce54685aca4ed7d1864e78b564733e6cdb21fcea9493fd6b506423bd13b99defe41265831735b3fa9808d2dcf262c8fc74e0d0481eeef9d5e827eaa1dfffbcec75a1aa7bfac6e46ac3d91abeb905de1da6451f09bf5731a630c5af3c813010b42260f689377bff00cf086584ca497f9420a7f98fa795728f3a68c54b3b8f9d3d8a2f08e58ed6fa91bc259f9fc6625de4b0dbb2c6ae4bb7870f9e3883fb1913ebd999dc451d07e5ecfed0d5c2b62bed22d3a56dc11de2184dab16bea994cfdbfe0edaaacdcd94b435df49aa8f57692dd4eb0c0254517d2b8cb6d6cc66cbed29b63f54d75c9ba0a92ffc8372850b4e295e061a28e15189eeec76b827e96adced5e", @typed={0x8, 0x15, 0x0, 0x0, @ipv4=@local}, @generic="8b01496acf9e75f358c60dcbb9b40101d43aca043b3e99ca47257cc645cb1f8a223792acd2260b3f7d97fd8e71d0694a7e1dd2fc491d7427634f2de24146e02acd2f18d1d4b7608db0bf809605092db25265b6645f95764159298f150ecbceb53d579b49b5a75e216dfcc2b0684691d7c578c9a4781b6516699e095476e620686e6477db9a57d3bb630f8b902e9d", @nested={0x4, 0x166}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="a0fb77a90fc9197e1a6b6a79c4af775670368235e09124119d362b3ccb39841e890f7f84af840a40fa833c77f44248efaaa25729b91876683dbdda0c8e962d2f6d5d05e66aa6d1f1b474af77f3ea720fe498c32f54f193a97125a9846283d4eb2f6fa788dd1410c51660578170af7dfd4f55e0cd877ae767d0ee621e849a0d16067ecdacfb75a0c8c09e51f96f87a7cc4f7c1ad3e633c3f82297"]}, 0x11d0}, {&(0x7f0000001b00)={0x6c, 0x32, 0x300, 0x70bd29, 0x25dfdbfe, "", [@generic="59ba76cf9ea3cb0e8e4ca54911c267143bff9088ab3376a20cde0f0ff3d6603c3d7e3d2a4a49347c233d99357ef6ae67bb0c3e8f1e9e65aa7f553c8d4bbf371b2ddb6d0a9d5633c57a8859ad40e51957f2e2036647b239ad07a4"]}, 0x6c}, {&(0x7f0000001b80)={0x2c8, 0x2b, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x9e, 0x0, 0x0, @pid=r4}, @generic="452b0799b546a5dfcc5e417d0ba71f52588f281b9982c67eb5737afb028d0f8bc2fcd5727607ca5019edbdf22119de7980c2daec1bb1d9ed82f9cfb4a7728684ce2e683789e8d4786ba160c967324a2dc3367d46d674bfc4428c66111216e7f820caf1ebfc7b1cd458799dde92bddb070e84931748518bf42dfc8f456c2ad7f1b704406e0c168dac1fa2922f368e788b2c73c9f114a06f3bf7e1e3aa36ededfdffd4305377e6ce89f3fe94146cf0c0e59b549de96c1be7d7f08642f21e5989299e1e72e3e80b8bf352fd265c4b30c090ec57dc2dd2a11c6b1b", @generic="cc0b2250bf0d3f734f2e928b4823a633ef62fba175d9f62c46d19e07a56292e4868b3fd4604c6aaaf4bd58effa4b2f625a964184d5bcd51663cfc4c04a37d7062d83fe9089dac509acbd9463b5e0af453587ab989a428085f78047c5d35565b1356909891bd8eb9404921916ab5d055e4bd5a1f4e1d414d3de5ada88ec1a1954b3da412fc68766d238691e30eaec11c994e6011667c852cfff0d403235affa0d8e0fba2a5cef511a", @nested={0x99, 0x9f, 0x0, 0x1, [@generic="de7084b13be4acdf4d4a709b02b6dd5bc7074746b024d79892d36a7d05396801ec3535cfa99b117442eb94f887a74f827e32e87e65522ab6379510e72d4c7713", @nested={0x4, 0x4c}, @generic="18978a52d0df7f2b7a0e601de50a89607a095673ef726c2cc0c71a549aaa6f3a3193775cd6c626da95f022caffb367addefda39e706e46b29c3a3149ba4c7945eb1c6f0ec46b7373e29b3027c56db77aa0"]}, @generic="80b3b1ba37c8f61c685a2dbd1f486764209c9cafe48b64b1ca0a80e6413a3fdc27c12955f4052fafe71fe96dca19833aa7e62e9825fbd32d9abfeea2ff54fee8d4a365e71356a472c4133d3ac9d6ca5d5a1ff2a11c276d893bed37db6dcc6c1d3c55b244c28666fe0f0cd8bc3a24b9254aefab3a0335010b1ffe848e1d24e39cdb1e3a7b8f1c206122b62720cc24b7e5cc"]}, 0x2c8}], 0x5, 0x0, 0x0, 0x20000010}, 0x40000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x34, r5, 0xa, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x34}}, 0x20000000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000020c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002140)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000002340)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002180)={0x150, r6, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x89, 0x19, "debe35c5a8fa64b67484f74fbde8629db453aa1d9b023d0c0694c232491d8f31b085a4d78631f6a514d9cbe0ffe582c8995a108f98285ae0e320ac9a95fe42126508ffeede7630d1a76457c787431486c72f0310761d37c8ea09f620d965ea1b7bb697009affaeb37f54e092f6703a02734e3935ce9801d950b575907a32cc6de86dd24ad3"}, @NFC_ATTR_SE_APDU={0x96, 0x19, "ae778bd2eee18a64f2000dbe3ebe0453f9dfce00e8f422dc83d6c6dac2f20d34cf0d2df5332847052eb83788d6428d8ed203012c9efc6f500702a9ccf5fd271b1b20300b529e5ebd2908bc483880de53c1e5f8066ea2beae7f5409ffc925b8ad30cb17c004f9a5f980ead878160eba129c494545cb11a33a46fc048c9fa11304c43c0e5226210ee6fa325f75051598e13f71"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), r0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0x4000) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x24, r6, 0x401, 0x9, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) prctl$PR_SET_DUMPABLE(0x4, 0x3) r10 = openat$macvtap(0xffffffffffffff9c, &(0x7f00000025c0), 0x600, 0x0) write$tun(r10, &(0x7f0000002600)={@val={0x0, 0x16}, @void, @mpls={[{0x7046}, {0xfe61, 0x0, 0x1}, {0x8, 0x0, 0x1}], @generic="e2c317104f7e7cb03e14f4fab0faa69a2e202c6c909e4a291a7f5cffaadd9be0177208674820b5e0d6316985ca5de72e847692b26af654fb5341857ed6151d93616c40da39e5a12dab9b6a353d9a2d2a88a31449f6d6ba4e038137d68b7c7fca4d54a1021cb9b5a6069bce72a952e49c5669e20b9f55929e20d1f6c149bec449da65deb0225d8dce684f830675e5b0653baf848f14d52a2957db38a9f066218ecccc1cb46d2d37766f6497c493bab10db267"}}, 0xc2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000004fc0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004f80)={&(0x7f0000002780)={0x27e8, r11, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x82}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x6}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x87, 0xb, "de4825187d50cadec421c851011e53e5bd945b570630b4e251af8750183b3cb401c2094910922ef970ba1fd5630df5d405405ec1581faf0e2cd9127037c3b86bca4ca037641ea6ef169261b18cc91692a44e8b241aa70d3588e628d3bf52524b120f905141c60f11ffbcb3fde9d3e98e4e72d94990b6f246144485c83cd5a96c432386"}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa0, 0xb, "0cad9255b8428cdf7373c37635c4f984ea018565d4dba4d8fedb411da857a9501efb4dd3133879bbabdf4000a0ca27a9c19c69a2c708f81c14e028219b35ea2ede681cab43e3136e6973f8976e13644a0c359f2a9db73a36a9c5836cb5a905bb5061a884303943e42b910c06b5b75428759dc3942dc6a1c9bc64bfd9751c6eeb303e7f524e33a68120af10e1fb8d23302fae441c4ae2be2ae6c4987f"}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7c97}]}, @NL80211_ATTR_NAN_FUNC={0x21b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfd}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x217c, 0xd, 0x0, 0x1, [{0x12, 0x0, "9899403ccc9aedc76ce7b087e807"}, {0x1b, 0x0, "3a881c65811442b161ff5e910ee2d96cf7d46bb3bc7d10"}, {0x1d, 0x0, "2933b869d8c947c3e67a024ed70a880af0750736525655e686"}, {0x67, 0x0, "2e3b0637c414416a126ef2218c287253ce6033c1b020546ad997fc7324f43135202c0d34288c19fd278bd9aa9c9e1705cb883a3c0a81db2e815b2da3a025f25441c65348cb8a859a838b2031b35b08ac31cb09f5091b558ed66788550d3945de609a96"}, {0x1004, 0x0, "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"}, {0x1004, 0x0, "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"}, {0xb5, 0x0, "c1eac39ca50ffd3aa95fd0694d5186918869e960676829ef8839ddc70dedb666bd993f5bf3f8cf8b0ffee8ce66383180183a1fb7cf82807465257047eedf548df186cdcbc1b4b0f93950ab5ca6411cd576a715d99b7733cf27de9abfb3435e14ecdb1e49895041658e96bdd9eb861cbcc116ac1bf364ba97c69860295d003e38259a353af75c4781656e8648852f07c1bdc19d73a209bb756fb28e780a8cc37203166208269d6c4137d6f6aa578929b210"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x494, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x344, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF={0x103, 0x2, "2123214f6c2a1fc78854f9566f287171af327f2950a4d54278081d0138ba1bca6061288dae0cfb22c9e786a046ef68a8e09cfea195b41aa5200fa0590074515f099ecf392a8c122ee5a18f9c0157c70e83479dd0af8b7b197fa1465baebe998cc52f70404f576cd955d898852be12284e0978ca90ed4725ba364c5db263aac2287eaeddc07a8fd11f94bd7efcdc1a7bfc37711c75fb90fd91de3d5c2f51036dfe93689c55deed19ca7ae6a9d55b1b3e94b491d31986e9bf247edefd65d6863ab0a4eff037cad5ad947dc6950f690b6e5235964243415bd8efc8a41a55bff793849af4b95792dd1bad86893f9b53c148ddcc2260bdf47e1a63d0b914d114c2b"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6f}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5c}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_SRF={0x144, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_BF={0x103, 0x2, "45a8dfa43d3d3f72a0335209edd590dff2a3e92d7a09c62846ca44e86657b85000b9b2bac207f5c3e94748cba776c169ecc5e3eb141e5c0571f2781d324b36dcac9393410e87064087dc160a59870519cf5f9db54651b947e19084b4b72b65a74e7aad8270c8a2fc368d7d16205e6739b61502d432ab76b8791235f13426e1facdaec2748054d943b929e55fda056ef40464628d5bae0c69428f8409afb62535edb587b4a2d7b0963f70c2f79063096e19b461ec7f887800d92b851e7e95b6654c8cf8dc5bcd22cce341c467b252da6e5125a9ca65e66fe64a1be9dac97ba5cbf9dc5827561dfb420c72a4f5cb2107e84219db3624e5a0841390345a2dcbfe"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x27e8}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000005000)={0x84, @local, 0x4e21, 0x3, 'lblc\x00', 0x4, 0x7f, 0x47}, 0x2c) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r13, &(0x7f0000005140)={&(0x7f0000005040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005100)={&(0x7f0000005080)={0x80, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3b3b}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x36b1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x90}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000005180)={0x1, 'ip6gretap0\x00', 0x3}, 0x18) 1m46.957857971s ago: executing program 2 (id=952): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xd, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000000)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'lo\x00'}) r4 = dup2(r0, r3) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @private=0xa010102}, 0xc) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000018c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100b0000904000001020d0000052406000d240f0100000000000000000006241a0000000905810310020000000904010000020d00000904010102020d00000905820200"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 1m45.20136048s ago: executing program 2 (id=960): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000028c0), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002900)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002940)='./sys\x00', &(0x7f0000002980)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000029c0)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r6, &(0x7f0000002a00)=""/10, 0x5b) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000002a40)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000002a80), 0x8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) sendmmsg$inet(r9, &(0x7f0000000680)=[{{&(0x7f00000006c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)='4', 0xffe3}], 0x1}}], 0x1, 0x24000804) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x1d, 0x1, @tid=r10}, &(0x7f00000007c0)) r11 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x3, 0x81f, 0x0, 0x0, 0x1000, 0xc, r10, 0x0, 0xf0}}}, &(0x7f0000000780)=0x0) r14 = syz_open_dev$ublk_chdev(&(0x7f0000000280), r11, 0x2) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r17, 0x4080aebf, &(0x7f0000000840)=@vmx={0x4, 0x0, 0xffffffffffffff40, {0xffffffffffffffff, 0xffffffffffffffff}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005956899d05de74b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000370646b200f6e25b00"}}) syz_ublk_setup_queues(r14, r13, &(0x7f00000002c0)={0x0, 0xdba6, 0x0, 0x3, 0x28e, 0x0, r1}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x4000, 0x2, 0x233, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdb3a, 0x40, 0x0, 0x330}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8000, 0x0, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x1000, 0xfffffffd, 0x1fe, 0x0, r1}}], 0x4, &(0x7f00000005c0)={0x2e, 0x58, 0x0, r14, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r12, '\x00', {0x2, 0x79, 0x0, 0x0}}, 0x0) 1m44.818609659s ago: executing program 2 (id=962): mkdir(&(0x7f0000000240)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./my_configfs\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='27', 0x2) r1 = syz_open_dev$mtd(&(0x7f0000000140), 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x1, 0x1f, 0x98, &(0x7f0000000380)={0x3, 0xfffe, 0x12}}) mkdir(&(0x7f0000000300)='./my_configfs/dlm/cluster1\x00', 0x1ff) rmdir(&(0x7f0000000340)='./my_configfs/dlm/cluster1\x00') 1m29.679605114s ago: executing program 33 (id=962): mkdir(&(0x7f0000000240)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./my_configfs\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='27', 0x2) r1 = syz_open_dev$mtd(&(0x7f0000000140), 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x1, 0x1f, 0x98, &(0x7f0000000380)={0x3, 0xfffe, 0x12}}) mkdir(&(0x7f0000000300)='./my_configfs/dlm/cluster1\x00', 0x1ff) rmdir(&(0x7f0000000340)='./my_configfs/dlm/cluster1\x00') 1m7.20236281s ago: executing program 5 (id=1111): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000040)={'8255\x00', [0x3f00, 0x5, 0xd09a, 0x3f0000, 0x5, 0xfdfffffa, 0x2, 0x8, 0x1002, 0x7fffbfff, 0x5, 0x401, 0x404, 0x8, 0x804, 0x4, 0x5, 0x9, 0x100830, 0x5, 0x3, 0x70004496, 0x80, 0x9, 0x20000006, 0x8001, 0x0, 0x10001, 0xffffffff, 0x2, 0x6]}) 1m7.146389722s ago: executing program 5 (id=1112): r0 = epoll_create1(0x0) fallocate(r0, 0x0, 0x101, 0x9) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x40, 0xb, 0xf, 0x8, 0x6, 0xa, 0xcc, 0xff, 0x0, 0xe, 0xc, 0x40, 0x4, 0x7}, 0xe) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x7, &(0x7f0000000040)={0x8, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @private=0xa010100}}}, 0x108) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x109840, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r4, 0x0, &(0x7f0000000200)='$', 0x1, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000280)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f00000002c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_INTERLEAVING_SUPPORTED(r2, 0x84, 0x7d, &(0x7f0000000300)={0x1, 0x5}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000380)={r7, @in={{0x2, 0x4e20, @broadcast}}, [0xfc6, 0x6, 0x90, 0xfffffffffffffffa, 0x2, 0x3, 0x25e, 0xfffffffffffffff4, 0x7, 0x10, 0xc, 0x1, 0xc1, 0xfffffffffffffff7, 0x17]}, &(0x7f0000000480)=0x100) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000540)={0x8, r9}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f00000005c0)={0x20, r4, 0x3, 0x0, &(0x7f0000000580)=[{}, {}, {}]}) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000600)=""/3, &(0x7f0000000640)=0x3) (async) r10 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat(r10, &(0x7f0000000680)='./file0\x00', 0x200, 0x1) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f00000006c0)={r8, 0x5}, &(0x7f0000000700)=0x8) (async, rerun: 32) r13 = syz_ublk_setup_io_uring(0x7405, &(0x7f0000000740)={0x0, 0xd18c, 0x6002, 0x3, 0x222}, &(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) (rerun: 32) munmap$IORING_OFF_CQ_RING(r14, 0x7) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000880)={{0x1, 0x1, 0x18, r10, {r13}}, '\x00'}) (rerun: 64) ioctl$IOMMU_IOAS_MAP$PAGES(r16, 0x3b85, &(0x7f00000008c0)={0x28, 0x0, r4, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9}) dup(r10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r16, 0x84, 0x72, &(0x7f0000000900)={r5, 0x40, 0x20}, &(0x7f0000000940)=0xc) (async) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r11, 0x84, 0x83, &(0x7f0000000980)={r12}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000000a00)={r17, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}}, 0x84) (async) setsockopt(r6, 0x8, 0x80000001, &(0x7f0000000ac0)="d548186108ae1b6556459b0c44510f48b4f7acfe6277fc7571b6b01f8f0399af793e13d6ebe836d0cb42e3996114e37e3a5e3b12abd15b04e029937e641283999d559ab3031407452bdb577c5bb0e5cc3296f2a9034ca9fc02f8885b600609b3a8e97143887b9bf504d230ebb81278bb7c1d6d7aa8f00141b54f83a77e731acf0a4b88deed1d8c50607200a79db32cde6004b66e82f405d7a91d66845bb157b840ee960ccf175cddc554b50a667f091b8d86ade5d946e984ed49e937174cc85681f805", 0xc3) ioctl$SNDCTL_MIDI_PRETIME(r15, 0xc0046d00, &(0x7f0000000bc0)=0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) 1m6.956766081s ago: executing program 5 (id=1113): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0xa4242, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c3902, 0x0) sendfile(r1, r0, 0x0, 0x2000fb) 1m6.616105228s ago: executing program 5 (id=1114): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)=@multiplanar_mmap={0x80000001, 0x2, 0x4, 0x10, 0x9, {0x77359400}, {0x4, 0x2, 0x8d, 0x74, 0x1, 0x1, "b5fcfe8b"}, 0x2556, 0x1, {0x0}, 0x8, 0x0, 0xffffffffffffffff}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000340)={{r0, &(0x7f0000000180)='()(%\x00', 0x2, &(0x7f00000001c0)={@_ha_fsid={[0x4, 0x3]}, {0x6, 0xd, 0x2, 0x516}}, 0x0, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x7d4}, {[0xc, 0x4, 0x80000001, 0x9]}, 0x7, 0x36, &(0x7f0000000300)=""/54}) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000003c0)={0xba, 0x2}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1a4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000100)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001000000086307032040000102030109026f0003010890050904000000010100000a240108000a00020102090401000001020000090401010101020000072401020202f9072402012f0300230905010910008204000725010c99040009040200000102000009040201010102000009058209a0"], 0x0) 1m3.49382363s ago: executing program 5 (id=1122): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/178) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x800, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing\x00', 0xbd) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/module/kernel/parameters/panic\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000840)='./tracing\x00', &(0x7f0000000880)='tracefs\x00', 0x1800000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000900)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000940)='.\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0x1c, 0x2, 0x3, "e70db0655ed2e56c9e205977fcc735021695ee853985fbfeb44c9bbb02b40614", 0x34343452}) r5 = open(&(0x7f0000000280)='./file0\x00', 0x1b0140, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)={0x3, 0x0, @auto=[0x31, 0x28, 0x3a, 0x1a, 0x21, 0x12, 0x3a]}, 0xf, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000ac0)='syzkaller\x00', 0x0) fcntl$setlease(r5, 0x400, 0x1) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close_range(r5, r7, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace(0x420e, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000440)) recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000027c0)=""/4097, 0x1001}, {&(0x7f0000001480)=""/4079, 0xfef}, {&(0x7f0000002480)=""/230, 0xe6}, {&(0x7f0000002700)=""/143, 0x8f}, {&(0x7f0000002640)=""/163, 0xa3}], 0x5}, 0x40000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') syz_open_dev$usbmon(&(0x7f0000000140), 0x5, 0x105100) r10 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="073c45ed1e8fa12691cf65cbe030878631fbf9a2f36c2b6a894c7a74e5f9acf1af8f0140a083fb1de9b1b15c33e094e0458677678c6aae670c98e0e9b553317d5acf767c1c23b9495a90303c5988621bb9f1f289fbd936", 0x57, r10) 1m3.138414425s ago: executing program 5 (id=1125): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)="39afabf47100000000000000c1188051829b08240707400800000000000000", 0x1f}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) 48.03149573s ago: executing program 34 (id=1125): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)="39afabf47100000000000000c1188051829b08240707400800000000000000", 0x1f}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x80000) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x3, 0x4) 5.010802474s ago: executing program 6 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000029c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x40) 4.909893439s ago: executing program 6 (id=1380): r0 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0xee01) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x4008094) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r1) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0xfffffffffffffd41, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x20000005) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, 0x0, 0x4008010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40140, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x882) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x800004, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0\x00'}) getgroups(0x6, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0]) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, 0x0, 0x200, 0x1, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x80c}, 0x1080) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@remote}}, &(0x7f0000000540)=0xe8) write$P9_RSTATu(r3, &(0x7f0000000580)={0x61, 0x7d, 0x2, {{0x0, 0x41, 0xff, 0x0, {0x40, 0x2, 0x1}, 0x2000000, 0x1000, 0x3, 0x2, 0x0, '', 0x4, '-\xd8)-', 0x7, 'NET_DM\x00', 0x3, '%!:'}, 0xb, 'NLBL_UNLBL\x00', r6, r8, r10}}, 0x61) r11 = semget$private(0x0, 0x4, 0x430) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000800)={r9, 0x1, 0x6, @broadcast}, 0x10) semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000780)={{0x3, r6, r8, r6, r7, 0x101, 0xe9}, 0x2fe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x79}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000075d105024e5b8331682c77b5bcacc6eba8e95e7d5e3c2a87cc69ba2172cefb687fa148e54d5773b1c1c7058d071b7f084b266fa93dda5728535558086b581c5ac794ed0800000000000000a57a141f6bdc32dd1e683359726b762c2056555d8848142363221fd98cb076dcbcecf8ec79ec88b75ef99cf8c3b0c75447640d1b7283de74ec3e0cd056344ff3dcaef54159a3", @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250400000008000500ffffffff14000600697036746e6c30000000000000000000080004007f000001"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x880) 4.500570193s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40000, 0x6) r2 = syz_io_uring_setup(0x5123, &(0x7f0000000180)={0x0, 0x6f04, 0x130c8, 0x1, 0x2a4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000340)={0x90000008}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) close(0x3) open_by_handle_at(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="100000000200000012"], 0x0) pread64(r1, &(0x7f00000000c0)=""/152, 0x98, 0x7) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', '', [], 0xa, "bdd92f0efe80000000000000b320655800b2b184ef1b05713031e573a3d16b0acc6de928"}, 0x28) 4.300290589s ago: executing program 0 (id=1386): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000580)) landlock_restrict_self(r0, 0xe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x400, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x3, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8000, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x1, 0x10000, 0x4, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000b00)=[@nested_set_state_pages={0x140, 0x28, {0x3, 0x14, @arbitrary=0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8000000000000001, 0x1, 0x1}}, @wr_drn={0x68, 0x20, {0x6, 0x8}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @gpa=0x8080000}}, @nested_amd_clgi={0x17f, 0x10}], 0xc8}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000c40)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000d40)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d80)=[@text32={0x20, &(0x7f0000000dc0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000e00)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) landlock_restrict_self(r0, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x700}) 4.229328392s ago: executing program 6 (id=1387): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='dev/ttyUSB0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') move_mount(0xffffffffffffffff, &(0x7f0000000240)='dev/ttyUSB0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='dev/ttyUSB0\x00', 0x3) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/200, 0xc8}], 0x1, 0x91, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0x8}}, 0x20) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0x0) ioctl$TIOCCBRK(r1, 0x5428) 3.874409568s ago: executing program 0 (id=1388): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000029c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x40) 3.873423929s ago: executing program 0 (id=1389): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x200, 0x408100) read$snddsp(r2, &(0x7f0000000280)=""/62, 0x3e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r3, &(0x7f0000000200)='+b', 0x2) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x1, 0x5, 0xc}) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @remote, 0x8}], 0x1c) 3.537752625s ago: executing program 4 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='autofs\x00', 0x0, &(0x7f0000000480)) chdir(&(0x7f00000004c0)='./file1\x00') r0 = open(&(0x7f0000000500)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3}}, './proc\x00'}) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000780)={r2, &(0x7f0000000140)='proc\x00', 0x40, &(0x7f0000000180)={@align=0x8000000000000001, {0x2, 0xf0, 0xc}}, 0x4, &(0x7f00000001c0), &(0x7f0000000480)=0x9}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x37) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="f80000001600010000000000000000000a010101000000000000000000000000fc000000000000000000000000000001000000000072fe62000000000080a0f1000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000250000000033000000fe80000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff000000000000000096070000000000000000000000000002bc0000000000000000000000b0a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x840) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000a40)={0x1, 0x0, [{0x80a}]}) 3.255799858s ago: executing program 4 (id=1393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x3e7, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 3.150050931s ago: executing program 0 (id=1395): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x2208004, 0x21fffc, 0xb, 0x3, 0x7f, 0x60e}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) capget(&(0x7f00000004c0)={0x19980330, r1}, &(0x7f0000000500)={0x80, 0x8, 0x9, 0x6, 0x5, 0xb2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000008000240ffffff3854000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d6574610000000014000280080003400000000108000240"], 0xdc}, 0x1, 0x0, 0x0, 0x14}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r4, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3e4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000005000000b9"]) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x134, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_vlan\x00'}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '&\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge0\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x70}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '\'\\}\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffffd}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x10001}}]}]}, 0x134}}, 0x800) 3.033375242s ago: executing program 4 (id=1396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000500)=0x8af5, 0xffffffffffffffcd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r6 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000640)=@req3={0x9000, 0xe00000, 0x1000, 0x70000000, 0x7ff, 0x8000, 0x77}, 0x1c) r8 = fsmount(r6, 0x1, 0x82) fchdir(r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, 0x0, 0xffffff6c) sendto$packet(r4, &(0x7f00000003c0)="10031200e0ff02000203000000000000005ded2735f4db171088aa96862ccf5de98480d1e24037215786d82ea13bb171f5b7efa975a72d0713bde6012fd67a71a81fc9c6d168ab9627dbe571d2386870c98e91672a99519c272fc7ceb41e54ece51ffd51b4d2d4d5905b0598eccfe0ad0761bdb137bd5a66774ef57866bfc8d59e5f7f09d0a03b96cb11563eced5fc78731c2c95115db1d5d654010e0262e7f4d189d15cf722015b8e284b5ef466ef8003842f06a30121888e5842dd76b8f38c7d49a4ee0e340000000000", 0xfffffebf, 0x4000040, &(0x7f00000004c0)={0x11, 0x8, r5}, 0x14) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.997689743s ago: executing program 0 (id=1397): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="b2", 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x4c844) (fail_nth: 7) 2.450105286s ago: executing program 0 (id=1398): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0xfffffffffffffe27) socket$inet6_mptcp(0xa, 0x1, 0x106) setns(0xc9, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r6 = syz_usb_connect(0x0, 0x45, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.18610403s ago: executing program 4 (id=1399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='cpuset\x00', 0x9a7b9c2b4cd27226, &(0x7f0000000040)='[ddr%\x0f\x00\x00.0.0.1,vers=2\x80\a\x00\x00\x00o=\x00\x00\x00\x00\x00\x179\xa9*\x05\xecW\"\xc0K?\xf0i\f\xef\xd8T1+c\x94\xec\x81\xc8\xfa\xaav\xad\xe0\xbf\xba?I\x87\xc6\x95\xc8\xe8$#u\xbe\n?\x1b\xb7h\x89G\xfc\xecg\xdb\xa9@\xb5}n\xd7\xca3\xa3') 2.115438055s ago: executing program 4 (id=1400): socket$inet6(0xa, 0x1, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000480)=0x16) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0x7000, 0x0, 0x1, 0x257, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x2000000, 0x4042011, r8, 0x8000000) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 1.165868324s ago: executing program 1 (id=1404): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) r1 = landlock_create_ruleset(&(0x7f0000000600)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x8) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_create={'create_thin ', 0x2}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f0000000900)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_dev={r2}, {0x0, @thin_pool='set_transaction_id 1 2'}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000001780)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000017c0)='sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001840)='sys/class/net/bridge0/bridge/multicast_querier\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000001880)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5d, 0x1}}, 0x30) r7 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000180)={0x0, 0x0}) r8 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r13 = syz_open_dev$sg(&(0x7f0000000200), 0xa, 0x28102) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r14 = fcntl$dupfd(r13, 0x0, r13) write$FUSE_INIT(r14, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r12, 0xf2a9fdced78a8c2b, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x1c010) getsockopt$inet_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000015c0)={0x0, 0x155, 0x0, 0x108, 0x0, 0x3, &(0x7f0000000a80)=[{0x0, {@in={{0x2, 0x0, @remote}}, @in={{0x2, 0x0, @private}}}}, {0x0, {@in={{0x2, 0x0, @multicast1}}, @in6={{0xa, 0x0, 0x0, @loopback}}}}, {0x0, {@in={{0x2, 0x0, @multicast2}}}}], &(0x7f0000000dc0), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001680)=0x88) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000001740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x30, r12, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r15}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x30}}, 0x8000) syz_kvm_add_vcpu$x86(r10, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0x40000081}}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.094540804s ago: executing program 4 (id=1405): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f05106605480200030109021200"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x4bfa, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0000900000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x213, 0xe, 0x3, 0x6}, {0x1, 0x2, 0x66, 0x7}, {0x5, 0x4, 0x7, 0x1}, {0xb0, 0x6, 0x7f, 0x3}, {0x8, 0x7f, 0x5, 0x1}, {0x1000, 0xb, 0x10, 0x200}, {0x3, 0xfc, 0x2e, 0x7f}, {0x8, 0xf, 0xa, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) chdir(&(0x7f0000000340)='./bus\x00') creat(&(0x7f0000000380)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x2) 1.005555073s ago: executing program 6 (id=1406): capset(0x0, 0x0) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) fanotify_init(0x40, 0x80000) mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0xaa, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x4001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0xd3e, &(0x7f0000000000)={0x0, 0x6, 0x3010, 0x3, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd=r1, 0x0, 0x0, 0x1, {0x200}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x24) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000002c0)={0x1, 0x0, @ioapic={0xe000, 0x7ff, 0x4, 0x7f, 0x0, [{0x9, 0x40, 0x27, '\x00', 0x8}, {0xff, 0x6, 0xc, '\x00', 0x5}, {0x1, 0x80, 0x1}, {0x1, 0x2, 0x7, '\x00', 0x42}, {0x7, 0xbc, 0x7f, '\x00', 0x3}, {0x7f, 0x3, 0x40, '\x00', 0x2}, {0x80, 0x38, 0x3, '\x00', 0x49}, {0x3, 0xff, 0x9, '\x00', 0x6}, {0x77, 0x84, 0x6, '\x00', 0x1}, {0x8, 0x37, 0x1, '\x00', 0x7}, {0xff, 0x72, 0x2, '\x00', 0x3}, {0x1, 0xf5, 0xc, '\x00', 0x79}, {0x6, 0x2, 0x3, '\x00', 0x4}, {0x81, 0x6, 0x8, '\x00', 0x8}, {0x0, 0x4, 0x0, '\x00', 0x4}, {0x2, 0xfa, 0xb9, '\x00', 0x2}, {0x1, 0x5e, 0x2, '\x00', 0x7}, {0x0, 0x3, 0x9, '\x00', 0x10}, {0x2, 0x2, 0x74, '\x00', 0xd}, {0xc0, 0x1, 0x3, '\x00', 0x80}, {0x8, 0x2e, 0x1, '\x00', 0x38}, {0x5, 0x8, 0x4, '\x00', 0xa}, {0x7, 0x5, 0x5, '\x00', 0x8}, {0xe2, 0x1, 0xc3, '\x00', 0x1}]}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) write$cgroup_int(r0, 0x0, 0x0) 779.562889ms ago: executing program 6 (id=1407): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000354000000120a01010000000000000000000000000900010073797a3000000000090002006f30303000000000080003400000000720000480060001000002000005000200110000000c000300080001000000001e54000000120a01010000000000000000020000000900010073797a3000000000090002006f303130000000000800034000000007200004800600fc000002000005000200110000000c0003"], 0x3204}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (rerun: 64) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) (async) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000000000407f04fff400000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000900)={0x24, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x8, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x1, "ff"}, @local=@item_012={0x1, 0x2, 0x7, "04"}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0x9, "1a9f653b"}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x2, 0x1, 0x2, "c5bd"}, @local=@item_012={0x1, 0x2, 0x0, '0'}]}}, 0x0}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='xfrm0\x00', 0x10) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000007c0)={0x802}, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000005a0001e13d0000000000000000000000040005"], 0x18}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c"], 0xfc}}, 0x0) (async, rerun: 32) r7 = syz_open_dev$dvb_frontend(&(0x7f00000006c0), 0x0, 0x2) (rerun: 32) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x11, '\x00', @st={0x4, [{0x0, @uvalue=0x9b}, {0x3, @svalue=0x3}, {0x2, @svalue=0x7ffffffffffffffd}, {0x0, @svalue=0x2}]}, 0x9}]}) (async) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e20, @private=0xa010100}, 0x10) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x2}, &(0x7f0000000600)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000640)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(r8, 0x1, &(0x7f0000000680)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0xc, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x44884}, 0x48000) (async) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="560002002a000000000000000002010001000000000000000000000040000000000000002100"/48, 0x30) 639.414024ms ago: executing program 1 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000002080001400000002108000b40000000000900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000880), 0x80000) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000ac0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010c00000000000000000200000a64000000060a010400000000000000000a0020050900010073797a3100000000380004803400018009000100686173680000000024000280080002400000000c0800024000000013080007401f00000108100440000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc892}, 0x24000000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x1}) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0xd, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x9, 0x32, 0x7c, 0x0, 0x9, 0x4, 0x66, 0x6, 0xbc, 0x3, 0x9, 0x80, 0x0, 0x1, 0x6, 0x10, 0xa6, 0x8, 0xff, '\x00', 0xf0, 0x10000}) r5 = eventfd2(0x8, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000300)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0xfffffffd, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x2, 0x40, 0xa4d, 0x3ff, 0x1, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x6, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200004, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x7, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc2, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e84, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x4061, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x4008001, 0x1900, 0x4, 0xd, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xa, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000780)={0x77359400}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000800)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f00000007c0)="70303f89e30578", 0x7, r0}, 0x68) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r5, 0x4}) write$eventfd(r5, &(0x7f0000000140)=0x430f, 0x8) 333.779601ms ago: executing program 1 (id=1409): syz_open_dev$loop(&(0x7f0000000280), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0xefd, &(0x7f00000006c0)={0x0, 0x9492, 0x110101, 0x6, 0x388}, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000800)={0x2e, 0x4c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x4000000, 0x0, 0x0, 0x10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000880)=@any_dev={0x3, 0x498, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x80}}}, &(0x7f00000008c0)) 114.386023ms ago: executing program 1 (id=1410): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xe4, 0x0, &(0x7f0000000980)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, 0x0}}}, 0x400}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x100, 0x0, &(0x7f0000000600)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f0000000780)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0xc, 0x300, &(0x7f00000008c0)=[@free_buffer={0x40086303, r2}]}) 62.416494ms ago: executing program 1 (id=1411): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000480)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 1 (id=1412): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp6(r1, &(0x7f0000000300)={0xa, 0x0, 0x81, @remote, 0xd34, 0x3}, 0x20) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x5) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x7f, &(0x7f0000000180)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000001c0)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f0000000280)='./md0\x00', 0x6180, 0x0) r4 = openat$md_node(0xffffffffffffff9c, &(0x7f00000002c0)='./md0\x00', 0x2, 0x0) ioctl$ADD_NEW_DISK(r4, 0x40140921, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000100)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 9][T10193] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 366.498717][T10193] Node 0 DMA32: 1436*4kB (UME) 1085*8kB (UM) 608*16kB (UM) 662*32kB (UM) 177*64kB (UME) 114*128kB (UME) 23*256kB (UM) 17*512kB (UM) 3*1024kB (ME) 3*2048kB (UM) 284*4096kB (UM) = 1258328kB [ 366.499429][T10193] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 366.502348][T10193] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 8*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942068kB [ 366.502555][T10193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.502573][T10193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.502591][T10193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.502637][T10193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.502656][T10193] 61163 total pagecache pages [ 366.502715][T10193] 12 pages in swap cache [ 366.502745][T10193] Free swap = 124524kB [ 366.502847][T10193] Total swap = 124996kB [ 366.502877][T10193] 2097051 pages RAM [ 366.502899][T10193] 0 pages HighMem/MovableOnly [ 366.502927][T10193] 435597 pages reserved [ 366.503006][T10193] 0 pages cma reserved [ 366.503036][T10193] kvm: failed to allocate vcpu's fpu [ 366.545842][ T5747] usb 7-1: Using ep0 maxpacket: 8 [ 366.638363][ T5747] usb 7-1: New USB device found: idVendor=0644, idProduct=800e, bcdDevice=0.40 [ 366.681801][ T5747] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 366.887772][ T5747] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.887810][ T5747] usb 7-1: Product: 뷫蛉볯㞩퇷혮二靏ﭦ뱢漓丌靬돡蟋پﱧ圠䟟ꪬ컂ꮕ賓꘺甌ௗ庎褥쿤楘3דּ㷆ꋩ쓥氻ꤘ技စ쩇᧹厅㩇⾎蕲驇Ꮁ㋩豯꧊眢⟨䅈鬜ꄗᒥꟘ驙艺᧗놇낯䮰昙঑᜙룩鏎涣乆雙칯⪆ષ圧挴創ॲ勏슶鬭섏䇗搞┺황╽ꮑ憺蘥퀝া卣뺅 [ 366.887849][ T5747] usb 7-1: Manufacturer: ힲ綢퇓蓎튰喝ၱ뽣㖢ꘇ啅읫糴Ｎ甉嗭惨襌▼틳炻哝俴鑀뜇อ∨입培 [ 366.888180][ T5747] usb 7-1: SerialNumber: 鰺䦰팽旬켉頌䂣⃳Ṻ唡䲎ﾳ鯲맰蓫﷍䪠⧘軃足泄楻採᪽꫎쪊֗潰떦샵ퟵ㈌箼咚਻䁞챨磨檐象≠꒭࿉级牄뀬퀙㒆ⱊ豙ퟡ⻜㞺份頦㱲廬鴗盿吧鋔趵㧷鱉㨲♿헮댇ẎբᏇ犋㯡䎂𥉉陓퍱錠긂☘鉟櫼㽞⣅唹･熀ㅞ뚆䢗跶ꋯ颧 [ 367.813216][T10181] NILFS (nullb0): couldn't find nilfs on the device [ 367.834258][ T5747] usb 7-1: 1:1 : no UAC_FORMAT_TYPE desc [ 367.842176][ T5747] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 367.900826][ T5747] usb 7-1: USB disconnect, device number 2 [ 367.961595][T10200] FAULT_INJECTION: forcing a failure. [ 367.961595][T10200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.961631][T10200] CPU: 1 UID: 0 PID: 10200 Comm: syz.0.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.961662][T10200] Tainted: [L]=SOFTLOCKUP [ 367.961671][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 367.961685][T10200] Call Trace: [ 367.961694][T10200] [ 367.961704][T10200] dump_stack_lvl+0xe8/0x150 [ 367.961746][T10200] should_fail_ex+0x3eb/0x540 [ 367.961782][T10200] prepare_alloc_pages+0x21e/0x5f0 [ 367.961819][T10200] __alloc_frozen_pages_noprof+0x189/0x450 [ 367.961850][T10200] ? __pfx_mmap_region+0x10/0x10 [ 367.961890][T10200] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.961930][T10200] ? policy_nodemask+0x31b/0x980 [ 367.961970][T10200] alloc_pages_mpol+0x21e/0x390 [ 367.962010][T10200] alloc_pages_noprof+0xb1/0x2b0 [ 367.962049][T10200] pte_alloc_one+0x22/0x2a0 [ 367.962084][T10200] do_pte_missing+0x1295/0x3520 [ 367.962130][T10200] handle_mm_fault+0x1807/0x2f80 [ 367.962179][T10200] ? handle_mm_fault+0xee/0x2f80 [ 367.962223][T10200] ? __pfx_handle_mm_fault+0x10/0x10 [ 367.962286][T10200] __get_user_pages+0xf93/0x1cd0 [ 367.962360][T10200] populate_vma_page_range+0x37c/0x460 [ 367.962395][T10200] ? __pfx_populate_vma_page_range+0x10/0x10 [ 367.962429][T10200] ? down_read+0x2b9/0x320 [ 367.962460][T10200] __mm_populate+0x27c/0x3b0 [ 367.962496][T10200] ? __pfx___mm_populate+0x10/0x10 [ 367.962522][T10200] ? vm_mmap_pgoff+0x332/0x520 [ 367.962563][T10200] vm_mmap_pgoff+0x36e/0x520 [ 367.962597][T10200] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 367.962626][T10200] ? __fget_files+0x2a/0x420 [ 367.962660][T10200] ? __fget_files+0x3a2/0x420 [ 367.962686][T10200] ? __fget_files+0x2a/0x420 [ 367.962720][T10200] ksys_mmap_pgoff+0x4dc/0x760 [ 367.962763][T10200] do_syscall_64+0x171/0x540 [ 367.962796][T10200] ? trace_irq_disable+0x3b/0x140 [ 367.962828][T10200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.962851][T10200] ? clear_bhb_loop+0x70/0xc0 [ 367.962888][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.962913][T10200] RIP: 0033:0x00007fd75cba8f19 [ 367.962936][T10200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.962955][T10200] RSP: 002b:00007fd75da1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 367.962980][T10200] RAX: ffffffffffffffda RBX: 00007fd75ce25fa0 RCX: 00007fd75cba8f19 [ 367.962997][T10200] RDX: 0000000001000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 367.963011][T10200] RBP: 00007fd75da1b090 R08: 0000000000000003 R09: 0000000000000000 [ 367.963027][T10200] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 367.963041][T10200] R13: 00007fd75ce26038 R14: 00007fd75ce25fa0 R15: 00007ffc6b32de48 [ 367.963077][T10200] [ 368.218998][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 368.253207][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 368.288381][ T9355] udevd[9355]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 368.378795][ T10] usb 5-1: USB disconnect, device number 35 [ 368.383965][ T1669] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 368.619376][T10207] FAULT_INJECTION: forcing a failure. [ 368.619376][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 368.619418][T10207] CPU: 1 UID: 0 PID: 10207 Comm: syz.6.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.619451][T10207] Tainted: [L]=SOFTLOCKUP [ 368.619460][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 368.619475][T10207] Call Trace: [ 368.619485][T10207] [ 368.619496][T10207] dump_stack_lvl+0xe8/0x150 [ 368.619538][T10207] should_fail_ex+0x3eb/0x540 [ 368.619576][T10207] should_failslab+0xa8/0x100 [ 368.619616][T10207] __kmalloc_cache_noprof+0x9e/0x600 [ 368.619647][T10207] ? __kmalloc_cache_noprof+0x148/0x600 [ 368.619676][T10207] ? vidtv_mux_init+0x10fa/0x1960 [ 368.619709][T10207] ? vidtv_mux_init+0x10fa/0x1960 [ 368.619740][T10207] vidtv_mux_init+0x10fa/0x1960 [ 368.619776][T10207] vidtv_start_feed+0x36b/0x5a0 [ 368.619815][T10207] ? __pfx_vidtv_start_feed+0x10/0x10 [ 368.619846][T10207] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 368.619896][T10207] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.619933][T10207] dmx_section_feed_start_filtering+0x519/0x6b0 [ 368.619978][T10207] dvb_dmxdev_filter_start+0xcdb/0x10d0 [ 368.620013][T10207] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 368.620045][T10207] dvb_demux_do_ioctl+0x470/0x540 [ 368.620078][T10207] dvb_usercopy+0x199/0x2e0 [ 368.620103][T10207] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 368.620131][T10207] ? __pfx_dvb_usercopy+0x10/0x10 [ 368.620171][T10207] ? __fget_files+0x2a/0x420 [ 368.620208][T10207] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 368.620236][T10207] dvb_demux_ioctl+0x29/0x40 [ 368.620265][T10207] __se_sys_ioctl+0xfc/0x170 [ 368.620305][T10207] do_syscall_64+0x171/0x540 [ 368.620342][T10207] ? trace_irq_disable+0x3b/0x140 [ 368.620375][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.620401][T10207] ? clear_bhb_loop+0x70/0xc0 [ 368.620430][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.620455][T10207] RIP: 0033:0x00007f1b96fa8f19 [ 368.620479][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.620499][T10207] RSP: 002b:00007f1b951f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.620524][T10207] RAX: ffffffffffffffda RBX: 00007f1b97225fa0 RCX: 00007f1b96fa8f19 [ 368.620541][T10207] RDX: 00002000000001c0 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 368.620557][T10207] RBP: 00007f1b97037f6d R08: 0000000000000000 R09: 0000000000000000 [ 368.620572][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.620586][T10207] R13: 00007f1b97226038 R14: 00007f1b97225fa0 R15: 00007ffcb45d1688 [ 368.620626][T10207] [ 368.697198][T10208] comedi comedi3: comedi_config --init_data is deprecated [ 369.108924][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 369.108949][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1222'. [ 369.141109][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 369.298518][T10227] FAULT_INJECTION: forcing a failure. [ 369.298518][T10227] name failslab, interval 1, probability 0, space 0, times 0 [ 369.298565][T10227] CPU: 0 UID: 0 PID: 10227 Comm: syz.6.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.298607][T10227] Tainted: [L]=SOFTLOCKUP [ 369.298618][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 369.298636][T10227] Call Trace: [ 369.298646][T10227] [ 369.298658][T10227] dump_stack_lvl+0xe8/0x150 [ 369.298705][T10227] should_fail_ex+0x3eb/0x540 [ 369.298754][T10227] should_failslab+0xa8/0x100 [ 369.298809][T10227] __kmalloc_node_noprof+0xfb/0x720 [ 369.298842][T10227] ? fifo_init+0x3ed/0x6d0 [ 369.298894][T10227] ? qdisc_alloc+0x92/0x9d0 [ 369.298920][T10227] ? qdisc_alloc+0x92/0x9d0 [ 369.298957][T10227] ? __pfx_fifo_init+0x10/0x10 [ 369.298994][T10227] qdisc_alloc+0x92/0x9d0 [ 369.299031][T10227] qdisc_create_dflt+0x8e/0x4e0 [ 369.299065][T10227] taprio_init+0x410/0xc00 [ 369.299096][T10227] ? sock_write_iter+0x2de/0x3e0 [ 369.299121][T10227] ? vfs_write+0x612/0xba0 [ 369.299155][T10227] ? ksys_write+0x150/0x270 [ 369.299205][T10227] ? __pfx_taprio_init+0x10/0x10 [ 369.299236][T10227] ? qdisc_alloc+0x6e7/0x9d0 [ 369.299267][T10227] ? __pfx_taprio_init+0x10/0x10 [ 369.299300][T10227] qdisc_create+0xc23/0x1450 [ 369.299343][T10227] ? lockdep_rtnl_is_held+0x26/0x40 [ 369.299371][T10227] ? qdisc_lookup+0x364/0x6c0 [ 369.299409][T10227] tc_modify_qdisc+0x17af/0x2390 [ 369.299461][T10227] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 369.299500][T10227] ? __pfx_hook_capable+0x10/0x10 [ 369.299568][T10227] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 369.299607][T10227] rtnetlink_rcv_msg+0x7b9/0xc00 [ 369.299653][T10227] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 369.299691][T10227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.299730][T10227] ? __lock_acquire+0x747/0x2de0 [ 369.299789][T10227] netlink_rcv_skb+0x226/0x4a0 [ 369.299826][T10227] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.299866][T10227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.299915][T10227] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.299948][T10227] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.299989][T10227] netlink_unicast+0x8ef/0xa80 [ 369.300039][T10227] netlink_sendmsg+0x7f0/0xb20 [ 369.300081][T10227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.300120][T10227] ? aa_sock_msg_perm+0x144/0x210 [ 369.300161][T10227] ? apparmor_socket_sendmsg+0x98/0x360 [ 369.300195][T10227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.300229][T10227] sock_sendmsg_nosec+0x14e/0x190 [ 369.300262][T10227] sock_write_iter+0x2de/0x3e0 [ 369.300291][T10227] ? __pfx_sock_write_iter+0x10/0x10 [ 369.300331][T10227] ? bpf_lsm_file_permission+0x9/0x20 [ 369.300358][T10227] ? security_file_permission+0x75/0x260 [ 369.300388][T10227] vfs_write+0x612/0xba0 [ 369.300424][T10227] ? __pfx_vfs_write+0x10/0x10 [ 369.300455][T10227] ? __fget_files+0x3a2/0x420 [ 369.300480][T10227] ? __fget_files+0x2a/0x420 [ 369.300510][T10227] ? fdget+0x1ac/0x250 [ 369.300541][T10227] ksys_write+0x150/0x270 [ 369.300571][T10227] ? __pfx_ksys_write+0x10/0x10 [ 369.300610][T10227] do_syscall_64+0x171/0x540 [ 369.300642][T10227] ? trace_irq_disable+0x3b/0x140 [ 369.300671][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.300693][T10227] ? clear_bhb_loop+0x70/0xc0 [ 369.300719][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.300741][T10227] RIP: 0033:0x00007f1b96fa8f19 [ 369.300772][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.300792][T10227] RSP: 002b:00007f1b951f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.300817][T10227] RAX: ffffffffffffffda RBX: 00007f1b97225fa0 RCX: 00007f1b96fa8f19 [ 369.300835][T10227] RDX: 00000000000000a0 RSI: 0000200000000100 RDI: 0000000000000004 [ 369.300850][T10227] RBP: 00007f1b97037f6d R08: 0000000000000000 R09: 0000000000000000 [ 369.300863][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.300877][T10227] R13: 00007f1b97226038 R14: 00007f1b97225fa0 R15: 00007ffcb45d1688 [ 369.300908][T10227] [ 369.455042][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 369.630435][ T10] usb 1-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 369.637910][ T10] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 369.638081][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.638156][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.718429][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.718510][ T10] usb 1-1: Product: syz [ 369.718558][ T10] usb 1-1: Manufacturer: syz [ 369.718599][ T10] usb 1-1: SerialNumber: syz [ 369.794091][ T10] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 369.803568][ T10] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage [ 369.848466][ T10] usbtest 1-1:1.1: Interface 1 is not authorized for usage [ 369.953618][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 370.030068][T10237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.034701][T10237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.215053][T10242] FAULT_INJECTION: forcing a failure. [ 370.215053][T10242] name failslab, interval 1, probability 0, space 0, times 0 [ 370.215092][T10242] CPU: 0 UID: 0 PID: 10242 Comm: syz.6.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.215123][T10242] Tainted: [L]=SOFTLOCKUP [ 370.215133][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 370.215148][T10242] Call Trace: [ 370.215157][T10242] [ 370.215167][T10242] dump_stack_lvl+0xe8/0x150 [ 370.215206][T10242] should_fail_ex+0x3eb/0x540 [ 370.215243][T10242] should_failslab+0xa8/0x100 [ 370.215280][T10242] __kvmalloc_node_noprof+0x171/0x820 [ 370.215313][T10242] ? __kvmalloc_node_noprof+0x340/0x820 [ 370.215342][T10242] ? io_alloc_cache_init+0x42/0x140 [ 370.215368][T10242] ? io_alloc_cache_init+0x42/0x140 [ 370.215401][T10242] io_alloc_cache_init+0x42/0x140 [ 370.215431][T10242] io_ring_ctx_alloc+0x54b/0xb80 [ 370.215467][T10242] io_uring_create+0x50/0x980 [ 370.215498][T10242] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 370.215528][T10242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 370.215567][T10242] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 370.215613][T10242] ? __pfx_ksys_write+0x10/0x10 [ 370.215667][T10242] do_syscall_64+0x171/0x540 [ 370.215700][T10242] ? trace_irq_disable+0x3b/0x140 [ 370.215732][T10242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.215756][T10242] ? clear_bhb_loop+0x70/0xc0 [ 370.215785][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.215809][T10242] RIP: 0033:0x00007f1b96fa8f19 [ 370.215832][T10242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.215856][T10242] RSP: 002b:00007f1b951f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 370.215879][T10242] RAX: ffffffffffffffda RBX: 00002000000001c0 RCX: 00007f1b96fa8f19 [ 370.215896][T10242] RDX: 00002000000007c0 RSI: 00002000000001c0 RDI: 0000000000003071 [ 370.215912][T10242] RBP: 00007f1b951f6090 R08: 0000000000000000 R09: 0000000000000101 [ 370.215927][T10242] R10: 00002000000002c0 R11: 0000000000000206 R12: 00002000000007c0 [ 370.215943][T10242] R13: 00002000000002c0 R14: 0000200000000240 R15: 00007ffcb45d1688 [ 370.215978][T10242] [ 370.515077][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1231'. [ 370.515105][T10245] FAULT_INJECTION: forcing a failure. [ 370.515105][T10245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.515127][T10245] CPU: 0 UID: 0 PID: 10245 Comm: syz.6.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.515149][T10245] Tainted: [L]=SOFTLOCKUP [ 370.515156][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 370.515166][T10245] Call Trace: [ 370.515173][T10245] [ 370.515180][T10245] dump_stack_lvl+0xe8/0x150 [ 370.515208][T10245] should_fail_ex+0x3eb/0x540 [ 370.515234][T10245] prepare_alloc_pages+0x21e/0x5f0 [ 370.515260][T10245] __alloc_frozen_pages_noprof+0x189/0x450 [ 370.515287][T10245] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 370.515316][T10245] ? policy_nodemask+0x31b/0x980 [ 370.515349][T10245] alloc_pages_mpol+0x21e/0x390 [ 370.515376][T10245] ? wiphy_new_nm+0x625/0x1b20 [ 370.515395][T10245] ___kmalloc_large_node+0x7b/0x170 [ 370.515417][T10245] __kmalloc_large_node_noprof+0x18/0x90 [ 370.515460][T10245] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 370.515487][T10245] __kmalloc_noprof+0x3f6/0x710 [ 370.515515][T10245] ? wiphy_new_nm+0x625/0x1b20 [ 370.515547][T10245] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 370.515571][T10245] wiphy_new_nm+0x625/0x1b20 [ 370.515602][T10245] ? ieee80211_alloc_hw_nm+0x8d7/0x1ef0 [ 370.515624][T10245] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 370.515642][T10245] ieee80211_alloc_hw_nm+0x3c7/0x1ef0 [ 370.515662][T10245] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 370.515684][T10245] mac80211_hwsim_new_radio+0x1f6/0x5990 [ 370.515732][T10245] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 370.515754][T10245] ? trace_kmalloc+0x2a/0xf0 [ 370.515777][T10245] hwsim_new_radio_nl+0xd8b/0xf90 [ 370.515809][T10245] genl_family_rcv_msg_doit+0x233/0x340 [ 370.515841][T10245] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 370.515901][T10245] ? bpf_lsm_capable+0x9/0x20 [ 370.515933][T10245] ? security_capable+0x7e/0x2c0 [ 370.515971][T10245] genl_rcv_msg+0x614/0x7a0 [ 370.516001][T10245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.516046][T10245] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 370.516080][T10245] ? __asan_memcpy+0x40/0x70 [ 370.516115][T10245] netlink_rcv_skb+0x226/0x4a0 [ 370.516149][T10245] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.516176][T10245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.516208][T10245] ? down_read+0x2b9/0x320 [ 370.516228][T10245] genl_rcv+0x28/0x40 [ 370.516251][T10245] netlink_unicast+0x8ef/0xa80 [ 370.516282][T10245] netlink_sendmsg+0x7f0/0xb20 [ 370.516307][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.516331][T10245] ? aa_sock_msg_perm+0x144/0x210 [ 370.516356][T10245] ? apparmor_socket_sendmsg+0x98/0x360 [ 370.516375][T10245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.516395][T10245] sock_sendmsg_nosec+0x14e/0x190 [ 370.516415][T10245] ____sys_sendmsg+0x54e/0x850 [ 370.516443][T10245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.516474][T10245] ? import_iovec+0x73/0xa0 [ 370.516497][T10245] ___sys_sendmsg+0x2a6/0x360 [ 370.516518][T10245] ? __lock_acquire+0x747/0x2de0 [ 370.516540][T10245] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.516590][T10245] ? __fget_files+0x3a2/0x420 [ 370.516615][T10245] ? __fget_files+0x2a/0x420 [ 370.516643][T10245] __x64_sys_sendmsg+0x1b1/0x290 [ 370.516668][T10245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.516708][T10245] do_syscall_64+0x171/0x540 [ 370.516733][T10245] ? trace_irq_disable+0x3b/0x140 [ 370.516755][T10245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.516772][T10245] ? clear_bhb_loop+0x70/0xc0 [ 370.516792][T10245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.516807][T10245] RIP: 0033:0x00007f1b96fa8f19 [ 370.516824][T10245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.516839][T10245] RSP: 002b:00007f1b951f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.516856][T10245] RAX: ffffffffffffffda RBX: 00007f1b97225fa0 RCX: 00007f1b96fa8f19 [ 370.516868][T10245] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 370.516879][T10245] RBP: 00007f1b951f6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.516890][T10245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.516899][T10245] R13: 00007f1b97226038 R14: 00007f1b97225fa0 R15: 00007ffcb45d1688 [ 370.516925][T10245] [ 370.987272][T10247] FAULT_INJECTION: forcing a failure. [ 370.987272][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 370.987311][T10247] CPU: 1 UID: 0 PID: 10247 Comm: syz.6.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.987343][T10247] Tainted: [L]=SOFTLOCKUP [ 370.987352][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 370.987367][T10247] Call Trace: [ 370.987377][T10247] [ 370.987387][T10247] dump_stack_lvl+0xe8/0x150 [ 370.987434][T10247] should_fail_ex+0x3eb/0x540 [ 370.987470][T10247] ? __pfx_proc_alloc_inode+0x10/0x10 [ 370.987497][T10247] should_failslab+0xa8/0x100 [ 370.987536][T10247] ? __pfx_proc_alloc_inode+0x10/0x10 [ 370.987560][T10247] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 370.987591][T10247] ? proc_alloc_inode+0x2a/0xc0 [ 370.987614][T10247] ? proc_alloc_inode+0x2a/0xc0 [ 370.987645][T10247] ? __pfx_proc_alloc_inode+0x10/0x10 [ 370.987670][T10247] proc_alloc_inode+0x2a/0xc0 [ 370.987705][T10247] alloc_inode+0x6a/0x1b0 [ 370.987735][T10247] new_inode+0x1f/0x170 [ 370.987771][T10247] proc_setup_self+0x5f/0x200 [ 370.987800][T10247] proc_fill_super+0x58d/0x770 [ 370.987829][T10247] ? __pfx_proc_fill_super+0x10/0x10 [ 370.987860][T10247] get_tree_nodev+0xbe/0x150 [ 370.987896][T10247] vfs_get_tree+0x92/0x2a0 [ 370.987934][T10247] do_new_mount+0x325/0xb00 [ 370.987969][T10247] ? __pfx_do_new_mount+0x10/0x10 [ 370.987995][T10247] ? security_capable+0x7e/0x2c0 [ 370.988027][T10247] ? ns_capable+0x84/0xe0 [ 370.988060][T10247] ? path_mount+0x643/0x1070 [ 370.988092][T10247] ? user_path_at+0xd4/0x160 [ 370.988126][T10247] __se_sys_mount+0x31d/0x420 [ 370.988163][T10247] ? __pfx___se_sys_mount+0x10/0x10 [ 370.988200][T10247] ? __x64_sys_mount+0x20/0xc0 [ 370.988232][T10247] do_syscall_64+0x171/0x540 [ 370.988269][T10247] ? trace_irq_disable+0x3b/0x140 [ 370.988302][T10247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.988328][T10247] ? clear_bhb_loop+0x70/0xc0 [ 370.988359][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.988384][T10247] RIP: 0033:0x00007f1b96fa8f19 [ 370.988409][T10247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.988431][T10247] RSP: 002b:00007f1b951f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.988458][T10247] RAX: ffffffffffffffda RBX: 00007f1b97225fa0 RCX: 00007f1b96fa8f19 [ 370.988477][T10247] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000000 [ 370.988494][T10247] RBP: 00007f1b97037f6d R08: 0000000000000000 R09: 0000000000000000 [ 370.988510][T10247] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 370.988526][T10247] R13: 00007f1b97226038 R14: 00007f1b97225fa0 R15: 00007ffcb45d1688 [ 370.988564][T10247] [ 370.989043][T10247] proc_fill_super: can't allocate /proc/self [ 371.173055][T10247] syzkaller1: entered promiscuous mode [ 371.173119][T10247] syzkaller1: entered allmulticast mode [ 371.596035][ T5809] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 371.756053][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 371.758432][ T5809] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 371.759718][ T5809] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 371.759772][ T5809] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.759803][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 371.759825][ T5809] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 371.759843][ T5809] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.759874][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.054657][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.067483][ T5809] usb 5-1: GET_CAPABILITIES returned 0 [ 372.067535][ T5809] usbtmc 5-1:16.0: can't read capabilities [ 372.069133][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.210313][ T5809] usb 1-1: USB disconnect, device number 89 [ 372.278809][ T5747] usb 5-1: USB disconnect, device number 36 [ 372.591746][T10266] FAULT_INJECTION: forcing a failure. [ 372.591746][T10266] name failslab, interval 1, probability 0, space 0, times 0 [ 372.591819][T10266] CPU: 0 UID: 0 PID: 10266 Comm: syz.0.1239 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.591852][T10266] Tainted: [L]=SOFTLOCKUP [ 372.591862][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 372.591876][T10266] Call Trace: [ 372.591886][T10266] [ 372.591896][T10266] dump_stack_lvl+0xe8/0x150 [ 372.591937][T10266] should_fail_ex+0x3eb/0x540 [ 372.591974][T10266] should_failslab+0xa8/0x100 [ 372.592012][T10266] __kmalloc_cache_noprof+0x9e/0x600 [ 372.592042][T10266] ? ubifs_init_fs_context+0x54/0x2c0 [ 372.592070][T10266] ? ubifs_init_fs_context+0x54/0x2c0 [ 372.592107][T10266] ubifs_init_fs_context+0x54/0x2c0 [ 372.592141][T10266] alloc_fs_context+0x99e/0xd00 [ 372.592186][T10266] __se_sys_fsopen+0x118/0x370 [ 372.592213][T10266] do_syscall_64+0x171/0x540 [ 372.592247][T10266] ? trace_irq_disable+0x3b/0x140 [ 372.592279][T10266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.592304][T10266] ? clear_bhb_loop+0x70/0xc0 [ 372.592333][T10266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.592357][T10266] RIP: 0033:0x00007fd75cba8f19 [ 372.592380][T10266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.592400][T10266] RSP: 002b:00007fd75da1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 372.592424][T10266] RAX: ffffffffffffffda RBX: 00007fd75ce25fa0 RCX: 00007fd75cba8f19 [ 372.592442][T10266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 372.592458][T10266] RBP: 00007fd75da1b090 R08: 0000000000000000 R09: 0000000000000000 [ 372.592472][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.592487][T10266] R13: 00007fd75ce26038 R14: 00007fd75ce25fa0 R15: 00007ffc6b32de48 [ 372.592524][T10266] [ 373.011830][T10271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1241'. [ 373.050855][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 373.051077][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 373.051287][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 373.051501][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 373.346033][ T1669] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 373.496009][ T1669] usb 1-1: Using ep0 maxpacket: 16 [ 373.498316][ T1669] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0102, bcdDevice=0.40 [ 373.501846][ T1669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.501876][ T1669] usb 1-1: Product: syz [ 373.501894][ T1669] usb 1-1: Manufacturer: syz [ 373.501911][ T1669] usb 1-1: SerialNumber: syz [ 373.748378][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.753265][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.758598][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.763057][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.778481][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.781506][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.866071][ T5809] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 374.027273][ T5809] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 374.030601][ T5809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.030633][ T5809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 374.030681][ T5809] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.033019][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.033050][ T5809] usb 5-1: Product: syz [ 374.033067][ T5809] usb 5-1: Manufacturer: syz [ 374.033085][ T5809] usb 5-1: SerialNumber: syz [ 374.106991][ T1669] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 374.109174][ T5809] cdc_ncm 5-1:1.0: skipping garbage [ 374.109198][ T5809] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 374.109241][ T5809] cdc_ncm 5-1:1.0: bind() failure [ 374.113457][ T1669] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage [ 374.341481][T10296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 375.185363][T10300] __nla_validate_parse: 30 callbacks suppressed [ 375.185387][T10300] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1252'. [ 375.202497][T10300] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1252'. [ 375.203559][T10300] netlink: 'syz.1.1252': attribute type 29 has an invalid length. [ 375.204978][T10300] binder: Read failure Err(EAGAIN) in pid:1123 [ 375.379865][T10308] syz0: rxe_newlink: already configured on bond0 [ 375.416241][ T1669] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 375.566075][ T1669] usb 7-1: Using ep0 maxpacket: 32 [ 375.569720][ T1669] usb 7-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 375.571185][ T1669] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 375.571222][ T1669] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 375.571243][ T1669] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.571286][ T1669] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 375.573555][ T1669] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.573582][ T1669] usb 7-1: Product: syz [ 375.573600][ T1669] usb 7-1: Manufacturer: syz [ 375.573617][ T1669] usb 7-1: SerialNumber: syz [ 375.621548][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 375.630282][ T1669] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input26 [ 375.836068][ T1669] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 375.836092][ T1669] (id 0x00) [ 375.908868][ T1669] rc_core: IR keymap rc-imon-pad not found [ 375.908890][ T1669] Registered IR keymap rc-empty [ 375.908974][ T1669] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 375.908994][ T1669] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 376.037181][ T1669] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 376.041763][T10317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1257'. [ 376.071975][ T1669] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input27 [ 376.119105][ T1669] imon 7-1:155.0: iMON device (15c2:ffdc) on usb<7:3> initialized [ 376.150867][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1257'. [ 376.296354][ T995] usb 1-1: USB disconnect, device number 90 [ 376.598449][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.602715][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.625441][ T35] audit: type=1400 audit(1794392180.115:16): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name=66226F pid=10337 comm="syz.1.1259" name=66226F offset=35 [ 376.686512][ T995] usb 5-1: USB disconnect, device number 37 [ 377.054139][ T4960] Bluetooth: hci2: Malformed Event: 0x02 [ 377.054639][ T4960] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 377.116466][ T995] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 377.244719][T10353] imon:send_packet: task interrupted [ 377.244742][T10353] imon:send_packet: packet tx failed (-512) [ 377.271533][T10353] imon:vfd_write: send packet #3 failed [ 377.280611][ T995] usb 5-1: Using ep0 maxpacket: 16 [ 377.292411][ T995] usb 5-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 377.293719][ T995] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.293754][ T995] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.301730][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.301815][ T995] usb 5-1: Product: syz [ 377.301858][ T995] usb 5-1: Manufacturer: syz [ 377.301899][ T995] usb 5-1: SerialNumber: syz [ 377.323935][ T995] usb 5-1: config 0 descriptor?? [ 377.358424][ T34] usb 7-1: USB disconnect, device number 3 [ 377.745479][T10343] FAULT_INJECTION: forcing a failure. [ 377.745479][T10343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.745517][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz.4.1261 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.745548][T10343] Tainted: [L]=SOFTLOCKUP [ 377.745562][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 377.745576][T10343] Call Trace: [ 377.745586][T10343] [ 377.745596][T10343] dump_stack_lvl+0xe8/0x150 [ 377.745636][T10343] should_fail_ex+0x3eb/0x540 [ 377.745674][T10343] _copy_to_user+0x31/0xb0 [ 377.745709][T10343] simple_read_from_buffer+0xe1/0x170 [ 377.745745][T10343] proc_fail_nth_read+0x1bb/0x230 [ 377.745774][T10343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.745803][T10343] ? rw_verify_area+0x24a/0x4c0 [ 377.745836][T10343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.745860][T10343] vfs_read+0x213/0xa80 [ 377.745894][T10343] ? __pfx___mutex_lock+0x10/0x10 [ 377.745942][T10343] ? __pfx_vfs_read+0x10/0x10 [ 377.745975][T10343] ? __fget_files+0x2a/0x420 [ 377.746002][T10343] ? __fget_files+0x3a2/0x420 [ 377.746029][T10343] ? __fget_files+0x2a/0x420 [ 377.746067][T10343] ? fdget+0x1ac/0x250 [ 377.746103][T10343] ksys_read+0x150/0x270 [ 377.746136][T10343] ? __pfx_ksys_read+0x10/0x10 [ 377.746180][T10343] do_syscall_64+0x171/0x540 [ 377.746215][T10343] ? trace_irq_disable+0x3b/0x140 [ 377.746254][T10343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.746279][T10343] ? clear_bhb_loop+0x70/0xc0 [ 377.746309][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.746333][T10343] RIP: 0033:0x00007fefe236974e [ 377.746356][T10343] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.746377][T10343] RSP: 002b:00007fefe31f8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.746400][T10343] RAX: ffffffffffffffda RBX: 00007fefe31f96c0 RCX: 00007fefe236974e [ 377.746416][T10343] RDX: 000000000000000f RSI: 00007fefe31f90a0 RDI: 0000000000000004 [ 377.746431][T10343] RBP: 00007fefe31f9090 R08: 0000000000000000 R09: 0000000000000000 [ 377.746444][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.746456][T10343] R13: 00007fefe2626038 R14: 00007fefe2625fa0 R15: 00007ffcb7e56c78 [ 377.746490][T10343] [ 378.030620][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 378.052538][ T995] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 378.105423][ T995] imon:send_packet: packet tx failed (-71) [ 378.122077][ T995] imon 5-1:0.0: panel buttons/knobs setup failed [ 378.246531][ T995] rc_core: IR keymap rc-imon-pad not found [ 378.246554][ T995] Registered IR keymap rc-empty [ 378.246637][ T995] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 378.246658][ T995] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 378.246961][ T995] imon:send_packet: packet tx failed (-71) [ 378.283314][ T995] imon 5-1:0.0: remote input dev register failed [ 378.283787][ T995] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 378.357140][ T995] imon 5-1:0.0: unable to initialize intf0, err 0 [ 378.371511][T10385] FAULT_INJECTION: forcing a failure. [ 378.371511][T10385] name failslab, interval 1, probability 0, space 0, times 0 [ 378.371614][T10385] CPU: 0 UID: 0 PID: 10385 Comm: syz.4.1270 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.371694][T10385] Tainted: [L]=SOFTLOCKUP [ 378.371716][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 378.371755][T10385] Call Trace: [ 378.371778][T10385] [ 378.371808][T10385] dump_stack_lvl+0xe8/0x150 [ 378.371910][T10385] should_fail_ex+0x3eb/0x540 [ 378.371996][T10385] should_failslab+0xa8/0x100 [ 378.372075][T10385] ? skb_clone+0x212/0x3a0 [ 378.372166][T10385] kmem_cache_alloc_noprof+0x9c/0x600 [ 378.372239][T10385] ? skb_clone+0x212/0x3a0 [ 378.372349][T10385] skb_clone+0x212/0x3a0 [ 378.372450][T10385] __netlink_deliver_tap+0x355/0x6e0 [ 378.372580][T10385] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.372658][T10385] netlink_deliver_tap+0x19c/0x1b0 [ 378.372742][T10385] netlink_dump+0x9a0/0xf20 [ 378.372847][T10385] ? __pfx_netlink_dump+0x10/0x10 [ 378.372947][T10385] ? netlink_lookup+0x30/0x200 [ 378.373011][T10385] ? netlink_lookup+0x30/0x200 [ 378.373095][T10385] __netlink_dump_start+0x589/0x7b0 [ 378.373187][T10385] rtnetlink_rcv_msg+0xa48/0xc00 [ 378.373274][T10385] ? __pfx_rtnl_dump_all+0x10/0x10 [ 378.373306][T10385] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 378.373353][T10385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 378.373451][T10385] ? __pfx_rtnl_dumpit+0x10/0x10 [ 378.373543][T10385] ? __pfx_rtnl_dump_all+0x10/0x10 [ 378.373642][T10385] ? __asan_memcpy+0x40/0x70 [ 378.373731][T10385] netlink_rcv_skb+0x226/0x4a0 [ 378.373802][T10385] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 378.373892][T10385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.374036][T10385] netlink_unicast+0x8ef/0xa80 [ 378.374147][T10385] netlink_sendmsg+0x7f0/0xb20 [ 378.374239][T10385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.374324][T10385] ? aa_sock_msg_perm+0x144/0x210 [ 378.374417][T10385] ? apparmor_socket_sendmsg+0x98/0x360 [ 378.374479][T10385] ? lock_acquire+0x115/0x350 [ 378.374554][T10385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.374641][T10385] sock_sendmsg_nosec+0x14e/0x190 [ 378.374714][T10385] sock_write_iter+0x2de/0x3e0 [ 378.374776][T10385] ? __pfx_sock_write_iter+0x10/0x10 [ 378.374910][T10385] ? bpf_lsm_file_permission+0x9/0x20 [ 378.374989][T10385] ? security_file_permission+0x75/0x260 [ 378.375066][T10385] vfs_write+0x612/0xba0 [ 378.375176][T10385] ? __pfx_vfs_write+0x10/0x10 [ 378.375259][T10385] ? __fget_files+0x3a2/0x420 [ 378.375330][T10385] ? __fget_files+0x2a/0x420 [ 378.375413][T10385] ? fdget+0x1ac/0x250 [ 378.375510][T10385] ksys_write+0x150/0x270 [ 378.375613][T10385] ? __pfx_ksys_write+0x10/0x10 [ 378.375717][T10385] do_syscall_64+0x171/0x540 [ 378.375810][T10385] ? trace_irq_disable+0x3b/0x140 [ 378.375890][T10385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.375950][T10385] ? clear_bhb_loop+0x70/0xc0 [ 378.376021][T10385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.376076][T10385] RIP: 0033:0x00007fefe23a8f19 [ 378.376136][T10385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.376188][T10385] RSP: 002b:00007fefe31f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.376271][T10385] RAX: ffffffffffffffda RBX: 00007fefe2625fa0 RCX: 00007fefe23a8f19 [ 378.376320][T10385] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 378.376360][T10385] RBP: 00007fefe31f9090 R08: 0000000000000000 R09: 0000000000000000 [ 378.376400][T10385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.376432][T10385] R13: 00007fefe2626038 R14: 00007fefe2625fa0 R15: 00007ffcb7e56c78 [ 378.376532][T10385] [ 378.479172][ T11] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 378.627967][ T995] usb 5-1: USB disconnect, device number 38 [ 378.654997][ T11] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 378.671110][ T11] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.671190][ T11] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.671312][ T11] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.729421][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.729504][ T11] usb 7-1: Product: syz [ 378.729554][ T11] usb 7-1: Manufacturer: syz [ 378.729596][ T11] usb 7-1: SerialNumber: syz [ 378.862809][T10387] FAULT_INJECTION: forcing a failure. [ 378.862809][T10387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.862848][T10387] CPU: 1 UID: 0 PID: 10387 Comm: syz.0.1271 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.862879][T10387] Tainted: [L]=SOFTLOCKUP [ 378.862888][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 378.862902][T10387] Call Trace: [ 378.862912][T10387] [ 378.862922][T10387] dump_stack_lvl+0xe8/0x150 [ 378.862969][T10387] should_fail_ex+0x3eb/0x540 [ 378.863004][T10387] _copy_from_user+0x2d/0xb0 [ 378.863036][T10387] kstrtouint_from_user+0xd6/0x180 [ 378.863066][T10387] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 378.863101][T10387] ? lock_acquire+0x115/0x350 [ 378.863142][T10387] proc_fail_nth_write+0x8e/0x210 [ 378.863168][T10387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.863201][T10387] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.863229][T10387] vfs_write+0x296/0xba0 [ 378.863270][T10387] ? __pfx_vfs_write+0x10/0x10 [ 378.863302][T10387] ? __fget_files+0x2a/0x420 [ 378.863329][T10387] ? __fget_files+0x3a2/0x420 [ 378.863357][T10387] ? __fget_files+0x2a/0x420 [ 378.863390][T10387] ? fdget+0x1ac/0x250 [ 378.863426][T10387] ksys_write+0x150/0x270 [ 378.863458][T10387] ? __pfx_ksys_write+0x10/0x10 [ 378.863503][T10387] do_syscall_64+0x171/0x540 [ 378.863537][T10387] ? trace_irq_disable+0x3b/0x140 [ 378.863567][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.863590][T10387] ? clear_bhb_loop+0x70/0xc0 [ 378.863617][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.863640][T10387] RIP: 0033:0x00007fd75cb6974e [ 378.863663][T10387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.863683][T10387] RSP: 002b:00007fd75da1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.863707][T10387] RAX: ffffffffffffffda RBX: 00007fd75da1b6c0 RCX: 00007fd75cb6974e [ 378.863724][T10387] RDX: 0000000000000001 RSI: 00007fd75da1b0a0 RDI: 0000000000000006 [ 378.863746][T10387] RBP: 00007fd75da1b090 R08: 0000000000000000 R09: 0000000000000000 [ 378.863760][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.863774][T10387] R13: 00007fd75ce26038 R14: 00007fd75ce25fa0 R15: 00007ffc6b32de48 [ 378.863810][T10387] [ 379.008024][ T11] cdc_ncm 7-1:1.0: skipping garbage [ 379.008095][ T11] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 379.008194][ T11] cdc_ncm 7-1:1.0: bind() failure [ 379.526009][ T1669] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 379.576108][ T995] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 379.678620][ T1669] usb 1-1: Using ep0 maxpacket: 16 [ 379.679256][ T1669] usb 1-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 379.681089][ T1669] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 379.681117][ T1669] usb 1-1: config 1 has no interface number 0 [ 379.681160][ T1669] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 379.681189][ T1669] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 379.681216][ T1669] usb 1-1: config 1 interface 105 has no altsetting 0 [ 379.684718][ T1669] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 379.684747][ T1669] usb 1-1: Product: syz [ 379.684763][ T1669] usb 1-1: Manufacturer: syz [ 379.684780][ T1669] usb 1-1: SerialNumber: syz [ 379.739054][T10396] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 379.739510][T10396] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 379.772188][ T1669] aqc111 1-1:1.105: Interface 105 is not authorized for usage [ 379.783402][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 379.783645][ T1669] usbtest 1-1:1.105: Interface 105 is not authorized for usage [ 379.805244][ T995] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 379.820793][ T995] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 379.820825][ T995] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 379.820852][ T995] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 379.820933][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.820958][ T995] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 379.820984][ T995] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 379.821028][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.825703][ T995] usb 5-1: config 0 descriptor?? [ 380.025714][ T5747] usb 1-1: USB disconnect, device number 91 [ 380.069934][ T995] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 380.430788][T10422] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5643] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[10422] [ 380.430848][T10422] FAULT_INJECTION: forcing a failure. [ 380.430848][T10422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.430870][T10422] CPU: 1 UID: 0 PID: 10422 Comm: syz.1.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 380.430892][T10422] Tainted: [L]=SOFTLOCKUP [ 380.430898][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 380.430911][T10422] Call Trace: [ 380.430918][T10422] [ 380.430925][T10422] dump_stack_lvl+0xe8/0x150 [ 380.430954][T10422] should_fail_ex+0x3eb/0x540 [ 380.430989][T10422] _copy_from_user+0x2d/0xb0 [ 380.431013][T10422] kstrtouint_from_user+0xd6/0x180 [ 380.431034][T10422] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 380.431060][T10422] ? lock_acquire+0x115/0x350 [ 380.431084][T10422] proc_fail_nth_write+0x8e/0x210 [ 380.431102][T10422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.431126][T10422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.431142][T10422] vfs_write+0x296/0xba0 [ 380.431173][T10422] ? __pfx_vfs_write+0x10/0x10 [ 380.431199][T10422] ? __fget_files+0x2a/0x420 [ 380.431219][T10422] ? __fget_files+0x3a2/0x420 [ 380.431238][T10422] ? __fget_files+0x2a/0x420 [ 380.431267][T10422] ? fdget+0x1ac/0x250 [ 380.431293][T10422] ksys_write+0x150/0x270 [ 380.431324][T10422] ? __pfx_ksys_write+0x10/0x10 [ 380.431391][T10422] do_syscall_64+0x171/0x540 [ 380.431427][T10422] ? trace_irq_disable+0x3b/0x140 [ 380.431459][T10422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.431484][T10422] ? clear_bhb_loop+0x70/0xc0 [ 380.431514][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.431542][T10422] RIP: 0033:0x00007f9f1216974e [ 380.431559][T10422] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.431574][T10422] RSP: 002b:00007f9f130cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.431591][T10422] RAX: ffffffffffffffda RBX: 00007f9f130d06c0 RCX: 00007f9f1216974e [ 380.431604][T10422] RDX: 0000000000000001 RSI: 00007f9f130d00a0 RDI: 0000000000000003 [ 380.431615][T10422] RBP: 00007f9f130d0090 R08: 0000000000000000 R09: 0000000000000000 [ 380.431625][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.431635][T10422] R13: 00007f9f12426038 R14: 00007f9f12425fa0 R15: 00007ffc6c7cbb18 [ 380.431667][T10422] [ 380.788445][T10424] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 380.791732][T10424] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 381.026022][ T11] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 381.177652][ T11] usb 1-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 381.182615][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.182687][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.182734][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.231698][ T11] rtsx_usb 1-1:1.0: Interface 0 is not authorized for usage [ 381.243515][ T11] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 381.315466][ T5747] usb 7-1: USB disconnect, device number 4 [ 381.552879][T10434] netlink: 'syz.6.1281': attribute type 1 has an invalid length. [ 381.552905][T10434] netlink: 4320 bytes leftover after parsing attributes in process `syz.6.1281'. [ 381.797934][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1282'. [ 381.849577][T10439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.850228][T10439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.023004][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.026618][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.049167][T10442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.051103][T10442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.263180][ T34] usb 5-1: USB disconnect, device number 39 [ 382.294573][ T34] usblp0: removed [ 382.412994][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.413484][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.643125][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.644595][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.925583][T10461] binder: Write failure EFAULT in pid:43 [ 382.936823][T10461] binder: Failure when writing BR_NOOP at beginning of buffer. [ 382.936849][T10461] binder: Read failure Err(EFAULT) in pid:43 [ 382.996294][ T34] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 383.156111][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 383.156893][ T34] usb 5-1: New USB device found: idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 383.158576][ T34] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 383.158603][ T34] usb 5-1: config 0 has no interface number 0 [ 383.158648][ T34] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 383.158677][ T34] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.161228][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.161437][ T34] usb 5-1: Product: syz [ 383.161456][ T34] usb 5-1: Manufacturer: syz [ 383.161472][ T34] usb 5-1: SerialNumber: syz [ 383.172367][ T34] usb 5-1: config 0 descriptor?? [ 383.176894][T10459] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 383.179509][T10459] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 383.391791][T10459] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 383.391941][T10459] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 383.444443][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.445011][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.467740][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.468237][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.497005][ T995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 383.646802][ T995] usb 7-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 383.647901][ T995] usb 7-1: config index 0 descriptor too short (expected 69, got 51) [ 383.647966][ T995] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.648008][ T995] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.650465][ T995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.650493][ T995] usb 7-1: Product: syz [ 383.650504][ T995] usb 7-1: Manufacturer: syz [ 383.650536][ T995] usb 7-1: SerialNumber: syz [ 383.674823][ T995] usb 7-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 383.810524][ T11] usb 1-1: USB disconnect, device number 92 [ 383.863623][ T995] usb 7-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 383.875803][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 383.887895][T10474] FAULT_INJECTION: forcing a failure. [ 383.887895][T10474] name failslab, interval 1, probability 0, space 0, times 0 [ 383.887932][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.0.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.887964][T10474] Tainted: [L]=SOFTLOCKUP [ 383.887973][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 383.887988][T10474] Call Trace: [ 383.887998][T10474] [ 383.888008][T10474] dump_stack_lvl+0xe8/0x150 [ 383.888047][T10474] should_fail_ex+0x3eb/0x540 [ 383.888083][T10474] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 383.888116][T10474] should_failslab+0xa8/0x100 [ 383.888152][T10474] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 383.888186][T10474] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 383.888215][T10474] ? alloc_inode+0x6a/0x1b0 [ 383.888240][T10474] ? alloc_inode+0x6a/0x1b0 [ 383.888270][T10474] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 383.888300][T10474] alloc_inode+0x6a/0x1b0 [ 383.888326][T10474] new_inode+0x1f/0x170 [ 383.888358][T10474] __debugfs_create_file+0xb8/0x400 [ 383.888395][T10474] debugfs_create_file_full+0x3f/0x60 [ 383.888428][T10474] ref_tracker_dir_debugfs+0x197/0x360 [ 383.888488][T10474] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 383.888550][T10474] ? __kvmalloc_node_noprof+0x52a/0x820 [ 383.888583][T10474] ? __kvmalloc_node_noprof+0x340/0x820 [ 383.888617][T10474] ? __raw_spin_lock_init+0x45/0x100 [ 383.888668][T10474] alloc_netdev_mqs+0x275/0x1240 [ 383.888693][T10474] ? __pfx___mutex_trylock_common+0x10/0x10 [ 383.888727][T10474] ? __pfx_macsec_setup+0x10/0x10 [ 383.888758][T10474] rtnl_create_link+0x321/0xd70 [ 383.888791][T10474] rtnl_newlink_create+0x258/0x7b0 [ 383.888836][T10474] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 383.888876][T10474] ? __pfx___mutex_lock+0x10/0x10 [ 383.888924][T10474] ? ns_capable+0x84/0xe0 [ 383.888959][T10474] rtnl_newlink+0x167a/0x1c30 [ 383.889010][T10474] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.889040][T10474] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 383.889066][T10474] ? netlink_deliver_tap+0x19c/0x1b0 [ 383.889093][T10474] ? netlink_unicast+0x8c1/0xa80 [ 383.889116][T10474] ? netlink_sendmsg+0x7f0/0xb20 [ 383.889143][T10474] ? sock_sendmsg_nosec+0x14e/0x190 [ 383.889166][T10474] ? sock_write_iter+0x2de/0x3e0 [ 383.889186][T10474] ? vfs_write+0x612/0xba0 [ 383.889214][T10474] ? ksys_write+0x150/0x270 [ 383.889241][T10474] ? do_syscall_64+0x171/0x540 [ 383.889275][T10474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.889342][T10474] ? kasan_quarantine_put+0xbb/0x1f0 [ 383.889371][T10474] ? lockdep_hardirqs_on+0x7b/0x110 [ 383.889410][T10474] ? nlmon_xmit+0xb0/0x100 [ 383.889432][T10474] ? kmem_cache_free+0x184/0x660 [ 383.889470][T10474] ? __lock_acquire+0x747/0x2de0 [ 383.889506][T10474] ? __pfx_hook_capable+0x10/0x10 [ 383.889535][T10474] ? __dev_queue_xmit+0x29b/0x3920 [ 383.889563][T10474] ? __pfx_hook_capable+0x10/0x10 [ 383.889593][T10474] ? lockdep_hardirqs_on+0x7b/0x110 [ 383.889664][T10474] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.889696][T10474] rtnetlink_rcv_msg+0x802/0xc00 [ 383.889733][T10474] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 383.889764][T10474] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.889797][T10474] ? __copy_skb_header+0xa3/0x4a0 [ 383.889832][T10474] ? __asan_memcpy+0x40/0x70 [ 383.889867][T10474] netlink_rcv_skb+0x226/0x4a0 [ 383.889896][T10474] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.889930][T10474] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.889979][T10474] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.890007][T10474] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.890041][T10474] netlink_unicast+0x8ef/0xa80 [ 383.890087][T10474] netlink_sendmsg+0x7f0/0xb20 [ 383.890125][T10474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.890159][T10474] ? aa_sock_msg_perm+0x144/0x210 [ 383.890196][T10474] ? apparmor_socket_sendmsg+0x98/0x360 [ 383.890220][T10474] ? lock_acquire+0x115/0x350 [ 383.890249][T10474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.890278][T10474] sock_sendmsg_nosec+0x14e/0x190 [ 383.890306][T10474] sock_write_iter+0x2de/0x3e0 [ 383.890330][T10474] ? __pfx_sock_write_iter+0x10/0x10 [ 383.890380][T10474] ? bpf_lsm_file_permission+0x9/0x20 [ 383.890409][T10474] ? security_file_permission+0x75/0x260 [ 383.890440][T10474] vfs_write+0x612/0xba0 [ 383.890478][T10474] ? __pfx_vfs_write+0x10/0x10 [ 383.890510][T10474] ? __fget_files+0x3a2/0x420 [ 383.890537][T10474] ? __fget_files+0x2a/0x420 [ 383.890577][T10474] ? fdget+0x1ac/0x250 [ 383.890612][T10474] ksys_write+0x150/0x270 [ 383.890645][T10474] ? __pfx_ksys_write+0x10/0x10 [ 383.890704][T10474] do_syscall_64+0x171/0x540 [ 383.890737][T10474] ? trace_irq_disable+0x3b/0x140 [ 383.890767][T10474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.890790][T10474] ? clear_bhb_loop+0x70/0xc0 [ 383.890820][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.890845][T10474] RIP: 0033:0x00007fd75cba8f19 [ 383.890869][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.890890][T10474] RSP: 002b:00007fd75da1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.890915][T10474] RAX: ffffffffffffffda RBX: 00007fd75ce25fa0 RCX: 00007fd75cba8f19 [ 383.890932][T10474] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 383.890947][T10474] RBP: 00007fd75da1b090 R08: 0000000000000000 R09: 0000000000000000 [ 383.890961][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.890976][T10474] R13: 00007fd75ce26038 R14: 00007fd75ce25fa0 R15: 00007ffc6b32de48 [ 383.891014][T10474] [ 383.891867][T10474] debugfs: out of free dentries, can not create file 'netdev@ffff888057c8c720' [ 384.515400][ T995] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 384.535630][ T995] usb 7-1: USB disconnect, device number 5 [ 384.557870][T10476] FAULT_INJECTION: forcing a failure. [ 384.557870][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 384.557899][T10476] CPU: 1 UID: 0 PID: 10476 Comm: syz.0.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.557921][T10476] Tainted: [L]=SOFTLOCKUP [ 384.557927][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 384.557938][T10476] Call Trace: [ 384.557944][T10476] [ 384.557952][T10476] dump_stack_lvl+0xe8/0x150 [ 384.557980][T10476] should_fail_ex+0x3eb/0x540 [ 384.558010][T10476] should_failslab+0xa8/0x100 [ 384.558035][T10476] ? do_getname+0x2e/0x250 [ 384.558052][T10476] kmem_cache_alloc_noprof+0x9c/0x600 [ 384.558072][T10476] ? do_getname+0x2e/0x250 [ 384.558093][T10476] do_getname+0x2e/0x250 [ 384.558109][T10476] ? user_path_at+0x1e/0x160 [ 384.558132][T10476] user_path_at+0x2a/0x160 [ 384.558156][T10476] __se_sys_mount+0x2dc/0x420 [ 384.558180][T10476] ? __pfx___se_sys_mount+0x10/0x10 [ 384.558207][T10476] ? __x64_sys_mount+0x20/0xc0 [ 384.558228][T10476] do_syscall_64+0x171/0x540 [ 384.558253][T10476] ? trace_irq_disable+0x3b/0x140 [ 384.558275][T10476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.558292][T10476] ? clear_bhb_loop+0x70/0xc0 [ 384.558312][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.558328][T10476] RIP: 0033:0x00007fd75cba8f19 [ 384.558345][T10476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.558359][T10476] RSP: 002b:00007fd75da1b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 384.558377][T10476] RAX: ffffffffffffffda RBX: 00007fd75ce25fa0 RCX: 00007fd75cba8f19 [ 384.558389][T10476] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000140 [ 384.558401][T10476] RBP: 00007fd75da1b090 R08: 0000200000000200 R09: 0000000000000000 [ 384.558413][T10476] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001 [ 384.558426][T10476] R13: 00007fd75ce26038 R14: 00007fd75ce25fa0 R15: 00007ffc6b32de48 [ 384.558451][T10476] [ 384.565655][T10478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.579594][T10478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.788381][T10459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.804266][ T9431] udevd[9431]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.805263][T10459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.832764][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.832790][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 384.905006][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.905044][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 384.950169][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.950618][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.950647][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 384.952334][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.954299][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.954330][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 384.959482][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.962780][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.962863][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 384.965803][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.967890][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.967971][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 384.970941][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.973015][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.973086][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.030465][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.033286][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.033380][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.052474][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.053696][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.053779][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.057561][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.061194][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.061272][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.069028][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.116495][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.116588][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.122089][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.128576][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.128635][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.132751][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.135517][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.135590][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.138523][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.142223][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.142304][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.152963][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.295133][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.295223][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.300548][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.302357][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.302444][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.311827][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.315505][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.315587][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.323884][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.324844][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.324915][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.331637][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.333133][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.333209][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.341677][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.349107][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.349194][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.361562][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.365105][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.365181][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.375218][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.386693][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.386784][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.392901][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.397066][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.397167][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.405814][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.412125][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.412198][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.418685][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.431913][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.431948][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.435775][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.443296][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.443327][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.451067][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.454512][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.454587][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.463001][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.464138][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.464198][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.473686][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.479211][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.479298][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.485020][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.490338][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.490432][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.499145][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.502851][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 385.502934][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 385.507818][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 385.576828][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.576890][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.751703][ T34] asix 5-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 385.774810][ T34] asix 5-1:0.251: probe with driver asix failed with error -5 [ 385.875430][ T34] usb 5-1: USB disconnect, device number 40 [ 386.030965][T10489] FAULT_INJECTION: forcing a failure. [ 386.030965][T10489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.031005][T10489] CPU: 1 UID: 0 PID: 10489 Comm: syz.4.1301 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.031036][T10489] Tainted: [L]=SOFTLOCKUP [ 386.031046][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 386.031060][T10489] Call Trace: [ 386.031069][T10489] [ 386.031091][T10489] dump_stack_lvl+0xe8/0x150 [ 386.031132][T10489] should_fail_ex+0x3eb/0x540 [ 386.031169][T10489] _copy_from_user+0x2d/0xb0 [ 386.031202][T10489] ___sys_recvmsg+0x173/0x5a0 [ 386.031243][T10489] ? __pfx____sys_recvmsg+0x10/0x10 [ 386.031318][T10489] do_recvmmsg+0x31a/0x800 [ 386.031361][T10489] ? __pfx_do_recvmmsg+0x10/0x10 [ 386.031409][T10489] ? get_timespec64+0x119/0x1b0 [ 386.031442][T10489] ? __pfx_get_timespec64+0x10/0x10 [ 386.031475][T10489] ? fdget+0x1ac/0x250 [ 386.031511][T10489] __x64_sys_recvmmsg+0x1b7/0x250 [ 386.031548][T10489] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 386.031596][T10489] do_syscall_64+0x171/0x540 [ 386.031630][T10489] ? trace_irq_disable+0x3b/0x140 [ 386.031661][T10489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.031685][T10489] ? clear_bhb_loop+0x70/0xc0 [ 386.031713][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.031737][T10489] RIP: 0033:0x00007fefe23a8f19 [ 386.031760][T10489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.031779][T10489] RSP: 002b:00007fefe31f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 386.031803][T10489] RAX: ffffffffffffffda RBX: 00007fefe2625fa0 RCX: 00007fefe23a8f19 [ 386.031821][T10489] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 386.031837][T10489] RBP: 00007fefe31f9090 R08: 00002000000001c0 R09: 0000000000000000 [ 386.031853][T10489] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 386.031867][T10489] R13: 00007fefe2626038 R14: 00007fefe2625fa0 R15: 00007ffcb7e56c78 [ 386.031905][T10489] [ 386.361744][T10497] syzkaller1: entered promiscuous mode [ 386.361773][T10497] syzkaller1: entered allmulticast mode [ 386.526461][ T1669] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 386.606197][ T11] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 386.627968][ T4972] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 386.697719][ T1669] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 386.699312][ T1669] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.699387][ T1669] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.702849][ T1669] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.702876][ T1669] usb 7-1: Product: syz [ 386.702892][ T1669] usb 7-1: Manufacturer: syz [ 386.702909][ T1669] usb 7-1: SerialNumber: syz [ 386.774819][ T4972] usb 1-1: device descriptor read/64, error -71 [ 386.787918][ T1669] cdc_ncm 7-1:1.0: skipping garbage [ 386.787942][ T1669] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 386.788014][ T1669] cdc_ncm 7-1:1.0: bind() failure [ 386.791844][ T11] usb 5-1: New USB device found: idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 386.794549][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.794604][ T11] usb 5-1: config 0 interface 0 has no altsetting 0 [ 386.842390][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.842421][ T11] usb 5-1: Product: syz [ 386.842462][ T11] usb 5-1: Manufacturer: syz [ 386.842481][ T11] usb 5-1: SerialNumber: syz [ 386.869896][ T11] usb 5-1: config 0 descriptor?? [ 386.883574][ T11] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 386.905044][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.917837][ T11] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 386.917899][ T11] usb 5-1: media controller created [ 386.957791][ T11] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.006099][ T4972] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 387.066294][ T11] DVB: Unable to find symbol tda10046_attach() [ 387.066316][ T11] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 387.066333][ T11] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 387.073276][ T11] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 387.113483][ T11] usb 5-1: USB disconnect, device number 41 [ 387.165968][ T4972] usb 1-1: device descriptor read/64, error -71 [ 387.256131][T10520] FAULT_INJECTION: forcing a failure. [ 387.256131][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 387.256173][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.1.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.256204][T10520] Tainted: [L]=SOFTLOCKUP [ 387.256214][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 387.256228][T10520] Call Trace: [ 387.256237][T10520] [ 387.256248][T10520] dump_stack_lvl+0xe8/0x150 [ 387.256287][T10520] should_fail_ex+0x3eb/0x540 [ 387.256320][T10520] ? __alloc_skb+0x1db/0x7a0 [ 387.256348][T10520] should_failslab+0xa8/0x100 [ 387.256384][T10520] ? __alloc_skb+0x1db/0x7a0 [ 387.256417][T10520] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 387.256444][T10520] ? __alloc_skb+0x18d/0x7a0 [ 387.256473][T10520] ? __alloc_skb+0x1db/0x7a0 [ 387.256511][T10520] __alloc_skb+0x1db/0x7a0 [ 387.256545][T10520] hci_cmd_sync_alloc+0x3d/0x3a0 [ 387.256573][T10520] ? __raw_spin_lock_init+0x45/0x100 [ 387.256612][T10520] __hci_cmd_sync_sk+0x1c7/0xcf0 [ 387.256636][T10520] ? lock_acquire+0x115/0x350 [ 387.256668][T10520] ? __pfx___hci_cmd_sync_sk+0x10/0x10 [ 387.256691][T10520] ? __mutex_trylock_common+0x15f/0x270 [ 387.256735][T10520] ? rcu_is_watching+0x16/0xb0 [ 387.256768][T10520] ? trace_contention_end+0x3d/0x140 [ 387.256807][T10520] ? __mutex_lock+0x305/0x15a0 [ 387.256847][T10520] ? hci_pause_advertising_sync+0x6c/0x420 [ 387.256887][T10520] hci_suspend_sync+0x27f/0xf30 [ 387.256922][T10520] ? hci_suspend_dev+0x286/0x530 [ 387.256950][T10520] ? __pfx___mutex_lock+0x10/0x10 [ 387.256987][T10520] ? __pfx_hci_suspend_sync+0x10/0x10 [ 387.257027][T10520] ? lockdep_hardirqs_on+0x7b/0x110 [ 387.257060][T10520] ? enable_work+0x1fd/0x230 [ 387.257085][T10520] ? hci_cmd_sync_cancel_sync+0xc9/0x1c0 [ 387.257116][T10520] hci_suspend_dev+0x28e/0x530 [ 387.257139][T10520] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 387.257173][T10520] ? __pfx_hci_suspend_dev+0x10/0x10 [ 387.257199][T10520] ? rcu_barrier+0x523/0x610 [ 387.257246][T10520] hci_suspend_notifier+0xf2/0x2f0 [ 387.257276][T10520] notifier_call_chain+0x1a5/0x3d0 [ 387.257309][T10520] blocking_notifier_call_chain_robust+0x85/0x100 [ 387.257340][T10520] pm_notifier_call_chain_robust+0x2c/0x60 [ 387.257371][T10520] snapshot_open+0x19c/0x290 [ 387.257402][T10520] ? __pfx_snapshot_open+0x10/0x10 [ 387.257440][T10520] misc_open+0x2d5/0x350 [ 387.257475][T10520] chrdev_open+0x4d9/0x600 [ 387.257524][T10520] ? __pfx_chrdev_open+0x10/0x10 [ 387.257558][T10520] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 387.257595][T10520] ? devcgroup_check_permission+0x31/0x8f0 [ 387.257655][T10520] ? __pfx_chrdev_open+0x10/0x10 [ 387.257693][T10520] do_dentry_open+0x80e/0x1360 [ 387.257731][T10520] vfs_open_consume+0x4a/0x350 [ 387.257754][T10520] ? path_openat+0x16e1/0x20f0 [ 387.257791][T10520] path_openat+0x16fc/0x20f0 [ 387.257847][T10520] do_file_open+0x23e/0x4a0 [ 387.257888][T10520] ? __pfx_do_file_open+0x10/0x10 [ 387.257946][T10520] ? _raw_spin_unlock+0x28/0x50 [ 387.257977][T10520] ? alloc_fd+0x6af/0x760 [ 387.258016][T10520] do_sys_openat2+0x115/0x200 [ 387.258046][T10520] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.258073][T10520] ? ksys_write+0x242/0x270 [ 387.258108][T10520] ? __pfx_ksys_write+0x10/0x10 [ 387.258144][T10520] __x64_sys_openat+0x138/0x170 [ 387.258177][T10520] do_syscall_64+0x171/0x540 [ 387.258212][T10520] ? trace_irq_disable+0x3b/0x140 [ 387.258245][T10520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.258269][T10520] ? clear_bhb_loop+0x70/0xc0 [ 387.258299][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.258324][T10520] RIP: 0033:0x00007f9f121a8f19 [ 387.258348][T10520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.258367][T10520] RSP: 002b:00007f9f130d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.258392][T10520] RAX: ffffffffffffffda RBX: 00007f9f12425fa0 RCX: 00007f9f121a8f19 [ 387.258417][T10520] RDX: 0000000000000400 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 387.258435][T10520] RBP: 00007f9f130d0090 R08: 0000000000000000 R09: 0000000000000000 [ 387.258450][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.258465][T10520] R13: 00007f9f12426038 R14: 00007f9f12425fa0 R15: 00007ffc6c7cbb18 [ 387.258504][T10520] [ 387.258531][T10520] Bluetooth: hci2: no memory for command (opcode 0x0c1a) [ 387.258548][T10520] Bluetooth: hci2: Opcode 0x0c1a failed: -12 [ 387.261659][T10520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 387.295290][ T4972] usb usb1-port1: attempt power cycle [ 387.361972][T10520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.362179][T10520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 387.368641][T10520] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 387.747748][ T4972] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 387.777003][ T4972] usb 1-1: device descriptor read/8, error -71 [ 388.029692][ T4972] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 388.048363][ T4972] usb 1-1: device descriptor read/8, error -71 [ 388.156576][ T4972] usb usb1-port1: unable to enumerate USB device [ 388.963721][T10534] FAULT_INJECTION: forcing a failure. [ 388.963721][T10534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 388.963761][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.1.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.963792][T10534] Tainted: [L]=SOFTLOCKUP [ 388.963804][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 388.963819][T10534] Call Trace: [ 388.963828][T10534] [ 388.963839][T10534] dump_stack_lvl+0xe8/0x150 [ 388.963879][T10534] should_fail_ex+0x3eb/0x540 [ 388.963915][T10534] prepare_alloc_pages+0x21e/0x5f0 [ 388.963949][T10534] __alloc_frozen_pages_noprof+0x189/0x450 [ 388.963988][T10534] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 388.964036][T10534] ? policy_nodemask+0x31b/0x980 [ 388.964078][T10534] alloc_pages_mpol+0x21e/0x390 [ 388.964118][T10534] folio_alloc_mpol_noprof+0x39/0x160 [ 388.964157][T10534] vma_alloc_folio_noprof+0xe1/0x210 [ 388.964196][T10534] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 388.964235][T10534] ? do_raw_spin_unlock+0xf5/0x200 [ 388.964265][T10534] __swap_cache_alloc_folio+0x356/0x990 [ 388.964305][T10534] ? swap_cache_get_folio+0x315/0x390 [ 388.964348][T10534] swapin_sync+0xdb/0x190 [ 388.964375][T10534] ? __pfx_swapin_sync+0x10/0x10 [ 388.964407][T10534] ? swap_cache_get_folio+0x315/0x390 [ 388.964443][T10534] ? get_swap_device+0xd7/0x1c0 [ 388.964472][T10534] do_swap_page+0xf56/0x4e80 [ 388.964516][T10534] ? lock_acquire+0x115/0x350 [ 388.964561][T10534] ? do_swap_page+0x12c/0x4e80 [ 388.964596][T10534] ? __pfx_do_swap_page+0x10/0x10 [ 388.964633][T10534] ? pte_offset_map_rw_nolock+0xea/0x160 [ 388.964712][T10534] handle_mm_fault+0x1327/0x2f80 [ 388.964762][T10534] ? handle_mm_fault+0xee/0x2f80 [ 388.964805][T10534] ? follow_page_pte+0x660/0xf10 [ 388.964840][T10534] ? __pfx_handle_mm_fault+0x10/0x10 [ 388.964876][T10534] ? follow_page_pte+0x748/0xf10 [ 388.964918][T10534] ? __pfx_follow_page_pte+0x10/0x10 [ 388.964953][T10534] ? follow_pmd_mask+0x183/0x6f0 [ 388.964993][T10534] __get_user_pages+0xf93/0x1cd0 [ 388.965058][T10534] faultin_page_range+0x26a/0x8f0 [ 388.965092][T10534] ? blk_start_plug+0x6e/0x1b0 [ 388.965123][T10534] madvise_do_behavior+0x2e4/0x540 [ 388.965162][T10534] ? __pfx_madvise_do_behavior+0x10/0x10 [ 388.965203][T10534] ? down_read+0x2b9/0x320 [ 388.965237][T10534] do_madvise+0x327/0x3a0 [ 388.965313][T10534] ? __pfx_do_madvise+0x10/0x10 [ 388.965371][T10534] ? __pfx_ksys_write+0x10/0x10 [ 388.965432][T10534] __x64_sys_madvise+0xa6/0xc0 [ 388.965466][T10534] do_syscall_64+0x171/0x540 [ 388.965500][T10534] ? trace_irq_disable+0x3b/0x140 [ 388.965532][T10534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.965563][T10534] ? clear_bhb_loop+0x70/0xc0 [ 388.965592][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.965616][T10534] RIP: 0033:0x00007f9f121a8f19 [ 388.965640][T10534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.965660][T10534] RSP: 002b:00007f9f130af028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 388.965684][T10534] RAX: ffffffffffffffda RBX: 00007f9f12426090 RCX: 00007f9f121a8f19 [ 388.965702][T10534] RDX: 0000000000000016 RSI: 0000000000400000 RDI: 0000200000000000 [ 388.965716][T10534] RBP: 00007f9f130af090 R08: 0000000000000000 R09: 0000000000000000 [ 388.965758][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.965772][T10534] R13: 00007f9f12426128 R14: 00007f9f12426090 R15: 00007ffc6c7cbb18 [ 388.965809][T10534] [ 389.332172][ T5654] Bluetooth: hci4: command 0x0c1a tx timeout [ 389.406324][ T5654] Bluetooth: hci1: command 0x0c1a tx timeout [ 389.455191][ T5809] usb 7-1: USB disconnect, device number 6 [ 390.022645][T10587] FAULT_INJECTION: forcing a failure. [ 390.022645][T10587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.022685][T10587] CPU: 0 UID: 0 PID: 10587 Comm: syz.4.1321 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.022716][T10587] Tainted: [L]=SOFTLOCKUP [ 390.022737][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 390.022752][T10587] Call Trace: [ 390.022761][T10587] [ 390.022772][T10587] dump_stack_lvl+0xe8/0x150 [ 390.022814][T10587] should_fail_ex+0x3eb/0x540 [ 390.022851][T10587] _copy_from_user+0x2d/0xb0 [ 390.022884][T10587] snd_seq_oss_write+0x6e2/0x950 [ 390.022930][T10587] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 390.022971][T10587] ? apparmor_file_permission+0x1fb/0x2b0 [ 390.022999][T10587] ? security_file_permission+0x75/0x260 [ 390.023028][T10587] odev_write+0x5a/0x80 [ 390.023050][T10587] ? __pfx_odev_write+0x10/0x10 [ 390.023077][T10587] vfs_write+0x296/0xba0 [ 390.023121][T10587] ? __pfx_vfs_write+0x10/0x10 [ 390.023153][T10587] ? __fget_files+0x2a/0x420 [ 390.023179][T10587] ? __fget_files+0x3a2/0x420 [ 390.023206][T10587] ? __fget_files+0x2a/0x420 [ 390.023238][T10587] ? fdget+0x1ac/0x250 [ 390.023274][T10587] ksys_write+0x150/0x270 [ 390.023308][T10587] ? __pfx_ksys_write+0x10/0x10 [ 390.023351][T10587] do_syscall_64+0x171/0x540 [ 390.023386][T10587] ? trace_irq_disable+0x3b/0x140 [ 390.023418][T10587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.023442][T10587] ? clear_bhb_loop+0x70/0xc0 [ 390.023471][T10587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.023495][T10587] RIP: 0033:0x00007fefe23a8f19 [ 390.023518][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.023538][T10587] RSP: 002b:00007fefe31f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 390.023562][T10587] RAX: ffffffffffffffda RBX: 00007fefe2625fa0 RCX: 00007fefe23a8f19 [ 390.023579][T10587] RDX: 0000000000000239 RSI: 0000200000000e00 RDI: 0000000000000003 [ 390.023594][T10587] RBP: 00007fefe31f9090 R08: 0000000000000000 R09: 0000000000000000 [ 390.023609][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.023622][T10587] R13: 00007fefe2626038 R14: 00007fefe2625fa0 R15: 00007ffcb7e56c78 [ 390.023657][T10587] [ 390.419354][T10594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.423966][T10594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.616124][ T5747] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 390.746083][ T5747] usb 5-1: device descriptor read/64, error -71 [ 390.986040][ T5747] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 391.116081][ T5747] usb 5-1: device descriptor read/64, error -71 [ 391.206562][T10621] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.206768][T10621] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.206951][T10621] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.227535][ T5747] usb usb5-port1: attempt power cycle [ 391.384502][T10630] FAULT_INJECTION: forcing a failure. [ 391.384502][T10630] name failslab, interval 1, probability 0, space 0, times 0 [ 391.384538][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.0.1338 Tainted: G L syzkaller #0 PREEMPT(full) [ 391.384571][T10630] Tainted: [L]=SOFTLOCKUP [ 391.384579][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 391.384595][T10630] Call Trace: [ 391.384605][T10630] [ 391.384615][T10630] dump_stack_lvl+0xe8/0x150 [ 391.384655][T10630] should_fail_ex+0x3eb/0x540 [ 391.384691][T10630] should_failslab+0xa8/0x100 [ 391.384728][T10630] __kmalloc_cache_noprof+0x9e/0x600 [ 391.384757][T10630] ? nf_tables_newtable+0x43e/0x1990 [ 391.384783][T10630] ? nf_tables_newtable+0x43e/0x1990 [ 391.384812][T10630] nf_tables_newtable+0x43e/0x1990 [ 391.384861][T10630] nfnetlink_rcv+0x1288/0x28c0 [ 391.384915][T10630] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 391.384979][T10630] ? skb_clone+0x246/0x3a0 [ 391.385028][T10630] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.385055][T10630] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.385082][T10630] netlink_unicast+0x8ef/0xa80 [ 391.385118][T10630] netlink_sendmsg+0x7f0/0xb20 [ 391.385147][T10630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.385174][T10630] ? aa_sock_msg_perm+0x144/0x210 [ 391.385203][T10630] ? apparmor_socket_sendmsg+0x98/0x360 [ 391.385226][T10630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.385261][T10630] sock_sendmsg_nosec+0x14e/0x190 [ 391.385284][T10630] ____sys_sendmsg+0x54e/0x850 [ 391.385316][T10630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.385350][T10630] ? import_iovec+0x73/0xa0 [ 391.385379][T10630] ___sys_sendmsg+0x2a6/0x360 [ 391.385405][T10630] ? __lock_acquire+0x747/0x2de0 [ 391.385432][T10630] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.385492][T10630] ? __fget_files+0x3a2/0x420 [ 391.385516][T10630] ? __fget_files+0x2a/0x420 [ 391.385549][T10630] __x64_sys_sendmsg+0x1b1/0x290 [ 391.385583][T10630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.385628][T10630] do_syscall_64+0x171/0x540 [ 391.385656][T10630] ? trace_irq_disable+0x3b/0x140 [ 391.385682][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.385701][T10630] ? clear_bhb_loop+0x70/0xc0 [ 391.385724][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.385743][T10630] RIP: 0033:0x00007fd75cba8f19 [ 391.385765][T10630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.385782][T10630] RSP: 002b:00007fd75da1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.385803][T10630] RAX: ffffffffffffffda RBX: 00007fd75ce25fa0 RCX: 00007fd75cba8f19 [ 391.385818][T10630] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 391.385830][T10630] RBP: 00007fd75da1b090 R08: 0000000000000000 R09: 0000000000000000 [ 391.385842][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.385854][T10630] R13: 00007fd75ce26038 R14: 00007fd75ce25fa0 R15: 00007ffc6b32de48 [ 391.385885][T10630] [ 391.588754][ T5747] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 391.592933][T10633] loop0: detected capacity change from 0 to 1 [ 391.701038][ T5747] usb 5-1: device descriptor read/8, error -71 [ 391.936323][ T5747] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 391.957529][ T5747] usb 5-1: device descriptor read/8, error -71 [ 391.975245][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.983652][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.068852][ T5747] usb usb5-port1: unable to enumerate USB device [ 392.085394][ T35] audit: type=1326 audit(1794392451.581:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10648 comm="syz.6.1343" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b96fa8f19 code=0x0 [ 392.236394][ T1669] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 392.387263][ T1669] usb 1-1: Using ep0 maxpacket: 16 [ 392.394408][ T1669] usb 1-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 392.410621][ T1669] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 392.410655][ T1669] usb 1-1: config 252 has no interface number 0 [ 392.410703][ T1669] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 392.410733][ T1669] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 392.413152][ T1669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.413183][ T1669] usb 1-1: Product: syz [ 392.413200][ T1669] usb 1-1: Manufacturer: syz [ 392.413218][ T1669] usb 1-1: SerialNumber: syz [ 392.441548][T10642] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 392.486615][ T1669] ath10k_usb 1-1:252.15: Interface 15 is not authorized for usage [ 392.487806][ T1669] usbtest 1-1:252.15: Interface 15 is not authorized for usage [ 392.659774][T10642] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1340'. [ 392.987184][T10677] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1346'. [ 393.070007][T10682] FAULT_INJECTION: forcing a failure. [ 393.070007][T10682] name failslab, interval 1, probability 0, space 0, times 0 [ 393.070043][T10682] CPU: 1 UID: 0 PID: 10682 Comm: syz.6.1347 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.070071][T10682] Tainted: [L]=SOFTLOCKUP [ 393.070077][T10682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 393.070087][T10682] Call Trace: [ 393.070094][T10682] [ 393.070108][T10682] dump_stack_lvl+0xe8/0x150 [ 393.070137][T10682] should_fail_ex+0x3eb/0x540 [ 393.070162][T10682] ? __alloc_skb+0x1db/0x7a0 [ 393.070182][T10682] should_failslab+0xa8/0x100 [ 393.070207][T10682] ? __alloc_skb+0x1db/0x7a0 [ 393.070225][T10682] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 393.070243][T10682] ? __alloc_skb+0x18d/0x7a0 [ 393.070266][T10682] ? __alloc_skb+0x1db/0x7a0 [ 393.070291][T10682] __alloc_skb+0x1db/0x7a0 [ 393.070315][T10682] ovs_ct_limit_cmd_get+0x16a/0xf70 [ 393.070343][T10682] ? rcu_is_watching+0x16/0xb0 [ 393.070367][T10682] ? trace_kmalloc+0x2a/0xf0 [ 393.070385][T10682] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 393.070404][T10682] ? __kmalloc_noprof+0x387/0x710 [ 393.070425][T10682] ? __nla_parse+0x40/0x60 [ 393.070484][T10682] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 393.070521][T10682] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 393.070567][T10682] genl_family_rcv_msg_doit+0x233/0x340 [ 393.070600][T10682] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.070644][T10682] genl_rcv_msg+0x614/0x7a0 [ 393.070674][T10682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.070698][T10682] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 393.070720][T10682] ? __asan_memcpy+0x40/0x70 [ 393.070744][T10682] netlink_rcv_skb+0x226/0x4a0 [ 393.070764][T10682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.070789][T10682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.070820][T10682] ? down_read+0x2b9/0x320 [ 393.070839][T10682] genl_rcv+0x28/0x40 [ 393.070861][T10682] netlink_unicast+0x8ef/0xa80 [ 393.070891][T10682] netlink_sendmsg+0x7f0/0xb20 [ 393.070916][T10682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.070942][T10682] ? aa_sock_msg_perm+0x144/0x210 [ 393.070967][T10682] ? apparmor_socket_sendmsg+0x98/0x360 [ 393.070987][T10682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.071007][T10682] sock_sendmsg_nosec+0x14e/0x190 [ 393.071026][T10682] ____sys_sendmsg+0x54e/0x850 [ 393.071054][T10682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.071084][T10682] ? import_iovec+0x73/0xa0 [ 393.071113][T10682] ___sys_sendmsg+0x2a6/0x360 [ 393.071135][T10682] ? __lock_acquire+0x747/0x2de0 [ 393.071159][T10682] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.071209][T10682] ? __fget_files+0x3a2/0x420 [ 393.071229][T10682] ? __fget_files+0x2a/0x420 [ 393.071256][T10682] __x64_sys_sendmsg+0x1b1/0x290 [ 393.071299][T10682] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.071340][T10682] do_syscall_64+0x171/0x540 [ 393.071368][T10682] ? trace_irq_disable+0x3b/0x140 [ 393.071390][T10682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.071406][T10682] ? clear_bhb_loop+0x70/0xc0 [ 393.071426][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.071443][T10682] RIP: 0033:0x00007f1b96fa8f19 [ 393.071460][T10682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.071474][T10682] RSP: 002b:00007f1b951f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.071491][T10682] RAX: ffffffffffffffda RBX: 00007f1b97225fa0 RCX: 00007f1b96fa8f19 [ 393.071504][T10682] RDX: 000000000000c010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 393.071514][T10682] RBP: 00007f1b951f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.071525][T10682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.071535][T10682] R13: 00007f1b97226038 R14: 00007f1b97225fa0 R15: 00007ffcb45d1688 [ 393.071560][T10682] [ 393.248067][ T4960] Bluetooth: hci4: command 0x0c1a tx timeout [ 393.248181][ T4960] Bluetooth: hci2: command 0x0c1a tx timeout [ 393.248357][ T5654] Bluetooth: hci1: command 0x0c1a tx timeout [ 393.713581][T10696] tipc: Failed to remove unknown binding: 66,0,0/0:555162439/555162440 [ 393.713933][T10696] tipc: Failed to remove unknown binding: 66,0,0/0:555162439/555162440 [ 393.896053][ T5747] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 394.046653][ T5747] usb 5-1: Using ep0 maxpacket: 8 [ 394.047434][ T5747] usb 5-1: New USB device found: idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 394.050106][ T5747] usb 5-1: config 135 interface 0 has no altsetting 0 [ 394.053510][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.053545][ T5747] usb 5-1: Product: syz [ 394.053557][ T5747] usb 5-1: Manufacturer: syz [ 394.053568][ T5747] usb 5-1: SerialNumber: syz [ 394.235783][T10707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.240606][T10707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.310624][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.316011][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.349189][ T5747] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 394.363104][ T5747] dvb_usb_af9015 5-1:135.0: probe with driver dvb_usb_af9015 failed with error -22 [ 394.375188][ T5747] usb 5-1: USB disconnect, device number 46 [ 394.892772][ T5747] usb 1-1: USB disconnect, device number 97 [ 394.951219][T10726] FAULT_INJECTION: forcing a failure. [ 394.951219][T10726] name failslab, interval 1, probability 0, space 0, times 0 [ 394.951260][T10726] CPU: 1 UID: 0 PID: 10726 Comm: syz.4.1358 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.951293][T10726] Tainted: [L]=SOFTLOCKUP [ 394.951303][T10726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 394.951317][T10726] Call Trace: [ 394.951327][T10726] [ 394.951338][T10726] dump_stack_lvl+0xe8/0x150 [ 394.951381][T10726] should_fail_ex+0x3eb/0x540 [ 394.951419][T10726] should_failslab+0xa8/0x100 [ 394.951456][T10726] ? do_getname+0x2e/0x250 [ 394.951481][T10726] kmem_cache_alloc_noprof+0x9c/0x600 [ 394.951507][T10726] ? do_futex+0x3e7/0x4e0 [ 394.951530][T10726] ? do_getname+0x2e/0x250 [ 394.951562][T10726] do_getname+0x2e/0x250 [ 394.951584][T10726] ? getname_flags+0x11/0x20 [ 394.951613][T10726] do_sys_openat2+0xce/0x200 [ 394.951638][T10726] ? __se_sys_futex+0x3a8/0x450 [ 394.951661][T10726] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.951687][T10726] ? rcu_is_watching+0x16/0xb0 [ 394.951719][T10726] __x64_sys_openat+0x138/0x170 [ 394.951744][T10726] do_syscall_64+0x171/0x540 [ 394.951772][T10726] ? trace_irq_disable+0x3b/0x140 [ 394.951798][T10726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.951823][T10726] ? clear_bhb_loop+0x70/0xc0 [ 394.951853][T10726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.951878][T10726] RIP: 0033:0x00007fefe23a8f19 [ 394.951898][T10726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.951916][T10726] RSP: 002b:00007fefe31f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.951938][T10726] RAX: ffffffffffffffda RBX: 00007fefe2625fa0 RCX: 00007fefe23a8f19 [ 394.951953][T10726] RDX: 0000000000008000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 394.951967][T10726] RBP: 00007fefe2437f6d R08: 0000000000000000 R09: 0000000000000000 [ 394.951980][T10726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.951991][T10726] R13: 00007fefe2626038 R14: 00007fefe2625fa0 R15: 00007ffcb7e56c78 [ 394.952030][T10726] [ 395.292757][T10733] affs: No valid root block on device nullb0 [ 395.326277][ T5654] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.516087][ T5747] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 395.536114][ T34] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 395.668191][ T5747] usb 5-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 395.669493][ T5747] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 395.669561][ T5747] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.669591][ T5747] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.672263][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.672291][ T5747] usb 5-1: Product: syz [ 395.672309][ T5747] usb 5-1: Manufacturer: syz [ 395.672326][ T5747] usb 5-1: SerialNumber: syz [ 395.747030][ T5747] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 395.754500][T10750] FAULT_INJECTION: forcing a failure. [ 395.754500][T10750] name failslab, interval 1, probability 0, space 0, times 0 [ 395.754538][T10750] CPU: 0 UID: 0 PID: 10750 Comm: syz.1.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.754567][T10750] Tainted: [L]=SOFTLOCKUP [ 395.754582][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 395.754593][T10750] Call Trace: [ 395.754600][T10750] [ 395.754610][T10750] dump_stack_lvl+0xe8/0x150 [ 395.754664][T10750] should_fail_ex+0x3eb/0x540 [ 395.754701][T10750] should_failslab+0xa8/0x100 [ 395.754743][T10750] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 395.754764][T10750] ? __d_alloc+0x37/0x820 [ 395.754785][T10750] ? __d_alloc+0x37/0x820 [ 395.754837][T10750] __d_alloc+0x37/0x820 [ 395.754872][T10750] __d_alloc_parallel+0xe9/0x1740 [ 395.754912][T10750] ? lock_acquire+0x115/0x350 [ 395.754945][T10750] ? __d_lookup+0x66/0x7a0 [ 395.754991][T10750] ? __d_lookup+0x66/0x7a0 [ 395.755024][T10750] ? __pfx___d_alloc_parallel+0x10/0x10 [ 395.755059][T10750] ? d_lookup+0x1f/0xa0 [ 395.755089][T10750] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 395.755132][T10750] proc_sys_fill_cache+0x23b/0x3c0 [ 395.755168][T10750] ? __pfx_proc_sys_fill_cache+0x10/0x10 [ 395.755201][T10750] ? do_raw_spin_unlock+0xf5/0x200 [ 395.755232][T10750] proc_sys_readdir+0x57d/0xc70 [ 395.755261][T10750] iterate_dir+0x3db/0x880 [ 395.755319][T10750] __se_sys_getdents64+0xf1/0x280 [ 395.755358][T10750] ? __pfx___se_sys_getdents64+0x10/0x10 [ 395.755394][T10750] ? ksys_write+0x242/0x270 [ 395.755414][T10750] ? __pfx_filldir64+0x10/0x10 [ 395.755445][T10750] ? __pfx_ksys_write+0x10/0x10 [ 395.755491][T10750] do_syscall_64+0x171/0x540 [ 395.755528][T10750] ? trace_irq_disable+0x3b/0x140 [ 395.755560][T10750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.755576][T10750] ? clear_bhb_loop+0x70/0xc0 [ 395.755613][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.755638][T10750] RIP: 0033:0x00007f9f121a8f19 [ 395.755661][T10750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.755680][T10750] RSP: 002b:00007f9f130d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 395.755709][T10750] RAX: ffffffffffffffda RBX: 00007f9f12425fa0 RCX: 00007f9f121a8f19 [ 395.755722][T10750] RDX: 0000000000001000 RSI: 0000200000000740 RDI: 0000000000000006 [ 395.755733][T10750] RBP: 00007f9f130d0090 R08: 0000000000000000 R09: 0000000000000000 [ 395.755743][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.755777][T10750] R13: 00007f9f12426038 R14: 00007f9f12425fa0 R15: 00007ffc6c7cbb18 [ 395.755814][T10750] [ 395.944762][ T5747] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 396.120682][ T5747] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 396.159419][ T1669] usb 5-1: USB disconnect, device number 47 [ 396.202121][ T9355] udevd[9355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.396102][T10768] FAULT_INJECTION: forcing a failure. [ 397.396102][T10768] name failslab, interval 1, probability 0, space 0, times 0 [ 397.396138][T10768] CPU: 0 UID: 0 PID: 10768 Comm: syz.4.1374 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.396169][T10768] Tainted: [L]=SOFTLOCKUP [ 397.396178][T10768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 397.396192][T10768] Call Trace: [ 397.396201][T10768] [ 397.396211][T10768] dump_stack_lvl+0xe8/0x150 [ 397.396251][T10768] should_fail_ex+0x3eb/0x540 [ 397.396299][T10768] should_failslab+0xa8/0x100 [ 397.396336][T10768] __kmalloc_cache_noprof+0x9e/0x600 [ 397.396366][T10768] ? tracing_log_err+0xd1/0x510 [ 397.396395][T10768] ? tracing_log_err+0xd1/0x510 [ 397.396433][T10768] tracing_log_err+0xd1/0x510 [ 397.396470][T10768] append_filter_err+0x309/0x460 [ 397.396510][T10768] create_filter+0x110/0x180 [ 397.396545][T10768] apply_event_filter+0x154/0x510 [ 397.396582][T10768] event_filter_write+0x16f/0x220 [ 397.396617][T10768] ? __pfx_event_filter_write+0x10/0x10 [ 397.396659][T10768] vfs_write+0x296/0xba0 [ 397.396701][T10768] ? __pfx_vfs_write+0x10/0x10 [ 397.396736][T10768] ? __fget_files+0x2a/0x420 [ 397.396764][T10768] ? __fget_files+0x3a2/0x420 [ 397.396795][T10768] ? __fget_files+0x2a/0x420 [ 397.396829][T10768] ? fdget+0x1ac/0x250 [ 397.396867][T10768] ksys_write+0x150/0x270 [ 397.396902][T10768] ? __pfx_ksys_write+0x10/0x10 [ 397.396961][T10768] do_syscall_64+0x171/0x540 [ 397.396999][T10768] ? trace_irq_disable+0x3b/0x140 [ 397.397030][T10768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.397054][T10768] ? clear_bhb_loop+0x70/0xc0 [ 397.397084][T10768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.397108][T10768] RIP: 0033:0x00007fefe23a8f19 [ 397.397133][T10768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.397153][T10768] RSP: 002b:00007fefe31f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.397178][T10768] RAX: ffffffffffffffda RBX: 00007fefe2625fa0 RCX: 00007fefe23a8f19 [ 397.397195][T10768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 397.397209][T10768] RBP: 00007fefe31f9090 R08: 0000000000000000 R09: 0000000000000000 [ 397.397224][T10768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.397237][T10768] R13: 00007fefe2626038 R14: 00007fefe2625fa0 R15: 00007ffcb7e56c78 [ 397.397295][T10768] [ 397.490225][ T5654] Bluetooth: hci2: command 0x0c1a tx timeout [ 397.493016][T10736] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 398.382268][T10736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 398.382491][T10736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.455212][ T34] usb 1-1: unable to get BOS descriptor or descriptor too short [ 398.455269][ T34] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 398.455308][ T34] usb 1-1: too many configurations: 94, using maximum allowed: 8 [ 398.460408][ T34] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 398.460512][ T34] usb 1-1: can't read configurations, error -71 [ 398.622473][T10782] FAULT_INJECTION: forcing a failure. [ 398.622473][T10782] name failslab, interval 1, probability 0, space 0, times 0 [ 398.622512][T10782] CPU: 0 UID: 0 PID: 10782 Comm: syz.1.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.622544][T10782] Tainted: [L]=SOFTLOCKUP [ 398.622553][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 398.622568][T10782] Call Trace: [ 398.622588][T10782] [ 398.622600][T10782] dump_stack_lvl+0xe8/0x150 [ 398.622639][T10782] should_fail_ex+0x3eb/0x540 [ 398.622682][T10782] should_failslab+0xa8/0x100 [ 398.622717][T10782] ? vm_area_alloc+0x24/0x140 [ 398.622740][T10782] kmem_cache_alloc_noprof+0x9c/0x600 [ 398.622769][T10782] ? vma_merge_new_range+0x556/0x810 [ 398.622801][T10782] ? vm_area_alloc+0x24/0x140 [ 398.622831][T10782] vm_area_alloc+0x24/0x140 [ 398.622855][T10782] mmap_region+0x18e8/0x2820 [ 398.622914][T10782] ? __pfx_mmap_region+0x10/0x10 [ 398.622946][T10782] ? lock_acquire+0x115/0x350 [ 398.622992][T10782] ? process_measurement+0x7b2/0x1c10 [ 398.623022][T10782] ? up_write+0x19d/0x4a0 [ 398.623171][T10782] ? __lock_acquire+0x747/0x2de0 [ 398.623202][T10782] ? cap_mmap_addr+0xaa/0xf0 [ 398.623227][T10782] ? bpf_lsm_mmap_addr+0x9/0x50 [ 398.623256][T10782] ? security_mmap_addr+0x71/0x240 [ 398.623284][T10782] ? memfd_check_seals_mmap+0x8e/0x1f0 [ 398.623315][T10782] do_mmap+0xe0a/0x1300 [ 398.623347][T10782] ? get_pid_task+0x20/0x1f0 [ 398.623380][T10782] ? __pfx_do_mmap+0x10/0x10 [ 398.623427][T10782] ? vm_mmap_pgoff+0x1ed/0x520 [ 398.623452][T10782] ? down_write_killable+0x179/0x230 [ 398.623482][T10782] ? __pfx_down_write_killable+0x10/0x10 [ 398.623506][T10782] ? apparmor_mmap_file+0x2e7/0x390 [ 398.623537][T10782] vm_mmap_pgoff+0x27a/0x520 [ 398.623573][T10782] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 398.623602][T10782] ? __fget_files+0x2a/0x420 [ 398.623635][T10782] ? __fget_files+0x3a2/0x420 [ 398.623662][T10782] ? __fget_files+0x2a/0x420 [ 398.623702][T10782] ksys_mmap_pgoff+0x4dc/0x760 [ 398.623743][T10782] do_syscall_64+0x171/0x540 [ 398.623778][T10782] ? trace_irq_disable+0x3b/0x140 [ 398.623809][T10782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.623833][T10782] ? clear_bhb_loop+0x70/0xc0 [ 398.623862][T10782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.623885][T10782] RIP: 0033:0x00007f9f121a8f19 [ 398.623909][T10782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.623930][T10782] RSP: 002b:00007f9f130d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 398.623956][T10782] RAX: ffffffffffffffda RBX: 00007f9f12425fa0 RCX: 00007f9f121a8f19 [ 398.623973][T10782] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000200000002000 [ 398.623989][T10782] RBP: 00007f9f130d0090 R08: 0000000000000005 R09: 00000000fffff000 [ 398.624005][T10782] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 398.624020][T10782] R13: 00007f9f12426038 R14: 00007f9f12425fa0 R15: 00007ffc6c7cbb18 [ 398.624058][T10782] [ 398.628522][ T5747] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 398.792920][ T5747] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.817689][ T5747] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 398.817853][ T5747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.817926][ T5747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 398.863118][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.863169][ T5747] usb 5-1: Product: syz [ 398.863207][ T5747] usb 5-1: Manufacturer: syz [ 398.863257][ T5747] usb 5-1: SerialNumber: syz [ 398.965322][ T5747] usb 5-1: config 0 descriptor?? [ 399.035241][ T5747] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 399.197150][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.197630][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.212158][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 399.449735][ T5747] usb 5-1: USB disconnect, device number 48 [ 399.566321][ T5654] Bluetooth: hci4: command 0x0c1a tx timeout [ 399.716081][ T4972] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 399.741205][T10810] bonding: b is being created... [ 399.878569][ T4972] usb 7-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 399.879662][ T4972] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.879714][ T4972] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.879740][ T4972] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 399.879767][ T4972] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.882800][ T4972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.882828][ T4972] usb 7-1: Product: syz [ 399.882845][ T4972] usb 7-1: Manufacturer: syz [ 399.882863][ T4972] usb 7-1: SerialNumber: syz [ 399.965923][ T4972] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 399.965951][ T4972] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 399.965996][ T4972] usbserial_generic 7-1:1.0: generic converter detected [ 399.970536][ T4972] usb 7-1: generic converter now attached to ttyUSB0 [ 400.141719][T10817] No control pipe specified [ 400.189571][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1391'. [ 400.446198][ T5654] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.465232][T10823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1393'. [ 400.481737][T10824] program syz.0.1395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.497021][T10826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.497628][T10826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.550682][T10826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.551162][T10826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.690262][T10831] FAULT_INJECTION: forcing a failure. [ 400.690262][T10831] name failslab, interval 1, probability 0, space 0, times 0 [ 400.690302][T10831] CPU: 0 UID: 0 PID: 10831 Comm: syz.0.1397 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.690333][T10831] Tainted: [L]=SOFTLOCKUP [ 400.690343][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 400.690358][T10831] Call Trace: [ 400.690367][T10831] [ 400.690378][T10831] dump_stack_lvl+0xe8/0x150 [ 400.690418][T10831] should_fail_ex+0x3eb/0x540 [ 400.690455][T10831] should_failslab+0xa8/0x100 [ 400.690493][T10831] __kmalloc_cache_noprof+0x9e/0x600 [ 400.690522][T10831] ? __kmalloc_cache_noprof+0x148/0x600 [ 400.690558][T10831] ? sctp_add_bind_addr+0x8c/0x370 [ 400.690581][T10831] ? sctp_add_bind_addr+0x8c/0x370 [ 400.690611][T10831] sctp_add_bind_addr+0x8c/0x370 [ 400.690640][T10831] sctp_copy_local_addr_list+0x31a/0x4e0 [ 400.690670][T10831] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 400.690696][T10831] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 400.690724][T10831] ? sctp_v6_is_any+0x64/0x80 [ 400.690752][T10831] ? sctp_copy_one_addr+0x93/0x360 [ 400.690780][T10831] sctp_bind_addr_copy+0xb3/0x3c0 [ 400.690806][T10831] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 400.690846][T10831] sctp_connect_new_asoc+0x2ff/0x6b0 [ 400.690880][T10831] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 400.690913][T10831] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 400.690948][T10831] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 400.690978][T10831] ? security_sctp_bind_connect+0x7e/0x2c0 [ 400.691007][T10831] sctp_sendmsg+0x159b/0x2d00 [ 400.691057][T10831] ? __pfx_sctp_sendmsg+0x10/0x10 [ 400.691093][T10831] ? __lock_acquire+0x747/0x2de0 [ 400.691138][T10831] ? aa_sock_msg_perm+0xf5/0x210 [ 400.691166][T10831] ? sock_rps_record_flow+0x19/0x350 [ 400.691203][T10831] ? inet_sendmsg+0x298/0x320 [ 400.691234][T10831] ? apparmor_socket_sendmsg+0x98/0x360 [ 400.691263][T10831] ? __pfx_inet_sendmsg+0x10/0x10 [ 400.691295][T10831] sock_sendmsg_nosec+0x10f/0x190 [ 400.691325][T10831] ____sys_sendmsg+0x54e/0x850 [ 400.691364][T10831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.691409][T10831] ? import_iovec+0x73/0xa0 [ 400.691445][T10831] ___sys_sendmsg+0x2a6/0x360 [ 400.691476][T10831] ? __lock_acquire+0x747/0x2de0 [ 400.691509][T10831] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.691592][T10831] ? __fget_files+0x3a2/0x420 [ 400.691620][T10831] ? __fget_files+0x2a/0x420 [ 400.691660][T10831] __x64_sys_sendmsg+0x1b1/0x290 [ 400.691697][T10831] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.691754][T10831] do_syscall_64+0x171/0x540 [ 400.691788][T10831] ? trace_irq_disable+0x3b/0x140 [ 400.691820][T10831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.691844][T10831] ? clear_bhb_loop+0x70/0xc0 [ 400.691874][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.691898][T10831] RIP: 0033:0x00007fd75cba8f19 [ 400.691921][T10831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.691941][T10831] RSP: 002b:00007fd75da1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.691967][T10831] RAX: ffffffffffffffda RBX: 00007fd75ce25fa0 RCX: 00007fd75cba8f19 [ 400.691984][T10831] RDX: 000000000004c844 RSI: 0000200000000040 RDI: 0000000000000003 [ 400.692000][T10831] RBP: 00007fd75da1b090 R08: 0000000000000000 R09: 0000000000000000 [ 400.692015][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.692029][T10831] R13: 00007fd75ce26038 R14: 00007fd75ce25fa0 R15: 00007ffc6b32de48 [ 400.692069][T10831] [ 401.506212][ T34] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 401.656844][ T34] usb 1-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 401.659441][ T34] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 401.659512][ T34] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.659541][ T34] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.663030][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.663068][ T34] usb 1-1: Product: syz [ 401.663085][ T34] usb 1-1: Manufacturer: syz [ 401.663103][ T34] usb 1-1: SerialNumber: syz [ 401.736187][ T34] usbtest 1-1:1.0: Interface 0 is not authorized for usage [ 401.737186][ T34] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage [ 401.741927][ T34] usbtest 1-1:1.1: Interface 1 is not authorized for usage [ 401.947375][T10854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.951464][T10854] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 402.453424][T10861] device-mapper: table: 248:7: thin-pool: Error opening metadata block device (-EBUSY) [ 402.453487][T10861] device-mapper: ioctl: error adding target to table [ 402.465469][T10861] device-mapper: ioctl: The device has no table. [ 402.532260][ T34] usb 7-1: USB disconnect, device number 7 [ 402.571962][ T34] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 402.572606][ T34] usbserial_generic 7-1:1.0: device disconnected [ 402.664481][T10861] sg_write: process 1269 (syz.1.1404) changed security contexts after opening file descriptor, this is not allowed. [ 402.790307][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1407'. [ 402.809953][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1407'. [ 402.822045][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1407'. [ 402.838024][ T1669] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 402.849971][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1407'. [ 402.862259][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1407'. [ 402.874573][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1407'. [ 402.887536][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1407'. [ 402.986118][ T1669] usb 5-1: Using ep0 maxpacket: 8 [ 402.993498][ T1669] usb 5-1: unable to get BOS descriptor or descriptor too short [ 402.993552][ T1669] usb 5-1: New USB device found: idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 402.995189][ T1669] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.995217][ T1669] usb 5-1: config 0 has no interfaces? [ 403.010108][ T1669] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 403.010191][ T1669] usb 5-1: Manufacturer: syz [ 403.010234][ T1669] usb 5-1: SerialNumber: syz [ 403.034885][ T1669] usb 5-1: config 0 descriptor?? [ 403.138338][ T4972] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 403.312272][ T4972] usb 7-1: New USB device found: idVendor=047f, idProduct=f4ff, bcdDevice=0.00 [ 403.325633][ T4972] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.325688][ T4972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.325719][ T4972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.325745][ T4972] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.325793][ T4972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.369424][ T4972] usb 7-1: config 0 descriptor?? [ 403.423930][ T34] usb 5-1: USB disconnect, device number 49 [ 403.636442][T10888] [ 403.638917][T10888] ====================================================== [ 403.645956][T10888] WARNING: possible circular locking dependency detected [ 403.653050][T10888] syzkaller #0 Tainted: G L [ 403.659035][T10888] ------------------------------------------------------ [ 403.666070][T10888] syz.1.1412/10888 is trying to acquire lock: [ 403.672147][T10888] ffffffff90b71780 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 403.681646][T10888] [ 403.681646][T10888] but task is already holding lock: [ 403.689017][T10888] ffff888078854358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 403.699299][T10888] [ 403.699299][T10888] which lock already depends on the new lock. [ 403.699299][T10888] [ 403.709733][T10888] [ 403.709733][T10888] the existing dependency chain (in reverse order) is: [ 403.718775][T10888] [ 403.718775][T10888] -> #2 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 403.727055][T10888] __mutex_lock+0x197/0x15a0 [ 403.732336][T10888] md_alloc+0x81e/0xf40 [ 403.737045][T10888] md_alloc_and_put+0x1a/0x1f0 [ 403.742346][T10888] blk_request_module+0x27d/0x2a0 [ 403.747908][T10888] blkdev_get_no_open+0x3f/0xe0 [ 403.753299][T10888] blkdev_open+0x1d7/0x600 [ 403.758306][T10888] do_dentry_open+0x80e/0x1360 [ 403.763619][T10888] vfs_open_consume+0x4a/0x350 [ 403.768949][T10888] path_openat+0x16fc/0x20f0 [ 403.774083][T10888] do_file_open+0x23e/0x4a0 [ 403.779127][T10888] do_sys_openat2+0x115/0x200 [ 403.784350][T10888] __x64_sys_openat+0x138/0x170 [ 403.789770][T10888] do_syscall_64+0x171/0x540 [ 403.794944][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.801636][T10888] [ 403.801636][T10888] -> #1 (disks_mutex){+.+.}-{4:4}: [ 403.809148][T10888] __mutex_lock+0x197/0x15a0 [ 403.814359][T10888] md_alloc+0x40/0xf40 [ 403.819004][T10888] md_alloc_and_put+0x1a/0x1f0 [ 403.824346][T10888] blk_request_module+0x27d/0x2a0 [ 403.830002][T10888] blkdev_get_no_open+0x3f/0xe0 [ 403.835443][T10888] blkdev_open+0x1d7/0x600 [ 403.840422][T10888] do_dentry_open+0x80e/0x1360 [ 403.845763][T10888] vfs_open_consume+0x4a/0x350 [ 403.851075][T10888] path_openat+0x16fc/0x20f0 [ 403.856208][T10888] do_file_open+0x23e/0x4a0 [ 403.861262][T10888] do_sys_openat2+0x115/0x200 [ 403.866497][T10888] __x64_sys_openat+0x138/0x170 [ 403.871887][T10888] do_syscall_64+0x171/0x540 [ 403.877049][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.883532][T10888] [ 403.883532][T10888] -> #0 (major_names_lock){+.+.}-{4:4}: [ 403.891306][T10888] __lock_acquire+0x164c/0x2de0 [ 403.896719][T10888] lock_acquire+0x115/0x350 [ 403.901784][T10888] __mutex_lock+0x197/0x15a0 [ 403.906937][T10888] blk_request_module+0x35/0x2a0 [ 403.912478][T10888] blkdev_get_no_open+0x3f/0xe0 [ 403.917989][T10888] bdev_file_open_by_dev+0xa0/0x240 [ 403.923748][T10888] md_import_device+0x2e9/0x650 [ 403.929177][T10888] md_add_new_disk+0x280/0x1850 [ 403.934614][T10888] md_ioctl+0x2027/0x2630 [ 403.939595][T10888] blkdev_ioctl+0x5e3/0x740 [ 403.944661][T10888] __se_sys_ioctl+0xfc/0x170 [ 403.949903][T10888] do_syscall_64+0x171/0x540 [ 403.955062][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.961505][T10888] [ 403.961505][T10888] other info that might help us debug this: [ 403.961505][T10888] [ 403.971755][T10888] Chain exists of: [ 403.971755][T10888] major_names_lock --> disks_mutex --> &mddev->reconfig_mutex [ 403.971755][T10888] [ 403.985185][T10888] Possible unsafe locking scenario: [ 403.985185][T10888] [ 403.992677][T10888] CPU0 CPU1 [ 403.998066][T10888] ---- ---- [ 404.003479][T10888] lock(&mddev->reconfig_mutex); [ 404.008566][T10888] lock(disks_mutex); [ 404.015176][T10888] lock(&mddev->reconfig_mutex); [ 404.022743][T10888] lock(major_names_lock); [ 404.027280][T10888] [ 404.027280][T10888] *** DEADLOCK *** [ 404.027280][T10888] [ 404.035451][T10888] locks held by syz.1.1412/10888: 1, on CPU#0: [ 404.041619][T10888] #0: ffff888078854358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: mddev_suspend_and_lock+0x48/0xf0 [ 404.052359][T10888] [ 404.052359][T10888] stack backtrace: [ 404.058277][T10888] CPU: 0 UID: 0 PID: 10888 Comm: syz.1.1412 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.069255][T10888] Tainted: [L]=SOFTLOCKUP [ 404.073601][T10888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 404.083672][T10888] Call Trace: [ 404.086973][T10888] [ 404.089942][T10888] dump_stack_lvl+0xe8/0x150 [ 404.094594][T10888] print_circular_bug+0x2e2/0x300 [ 404.099651][T10888] check_noncircular+0x12f/0x150 [ 404.104620][T10888] __lock_acquire+0x164c/0x2de0 [ 404.109509][T10888] ? prep_new_page+0x22/0xb0 [ 404.114131][T10888] ? get_page_from_freelist+0x22a1/0x22e0 [ 404.119889][T10888] lock_acquire+0x115/0x350 [ 404.124422][T10888] ? blk_request_module+0x35/0x2a0 [ 404.129627][T10888] __mutex_lock+0x197/0x15a0 [ 404.134309][T10888] ? blk_request_module+0x35/0x2a0 [ 404.139464][T10888] ? lock_acquire+0x115/0x350 [ 404.144173][T10888] ? blk_request_module+0x35/0x2a0 [ 404.149312][T10888] ? __pfx___mutex_lock+0x10/0x10 [ 404.154374][T10888] ? find_inode_fast+0x5dc/0x740 [ 404.159386][T10888] ? find_inode_fast+0xd2/0x740 [ 404.164296][T10888] blk_request_module+0x35/0x2a0 [ 404.169279][T10888] blkdev_get_no_open+0x3f/0xe0 [ 404.174179][T10888] bdev_file_open_by_dev+0xa0/0x240 [ 404.179404][T10888] md_import_device+0x2e9/0x650 [ 404.184294][T10888] md_add_new_disk+0x280/0x1850 [ 404.189192][T10888] md_ioctl+0x2027/0x2630 [ 404.193551][T10888] ? tomoyo_path_number_perm+0x219/0x5f0 [ 404.199201][T10888] ? __pfx_md_ioctl+0x10/0x10 [ 404.203912][T10888] ? do_vfs_ioctl+0x11a7/0x1570 [ 404.208800][T10888] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 404.213857][T10888] ? do_futex+0x3e7/0x4e0 [ 404.218211][T10888] ? __pfx_md_ioctl+0x10/0x10 [ 404.222917][T10888] blkdev_ioctl+0x5e3/0x740 [ 404.227452][T10888] ? __pfx_blkdev_ioctl+0x10/0x10 [ 404.232500][T10888] ? bpf_lsm_file_ioctl+0x9/0x20 [ 404.237462][T10888] ? __pfx_blkdev_ioctl+0x10/0x10 [ 404.242517][T10888] __se_sys_ioctl+0xfc/0x170 [ 404.247163][T10888] do_syscall_64+0x171/0x540 [ 404.251780][T10888] ? trace_irq_disable+0x3b/0x140 [ 404.256847][T10888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.262933][T10888] ? clear_bhb_loop+0x70/0xc0 [ 404.267637][T10888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.273556][T10888] RIP: 0033:0x00007f9f121a8f19 [ 404.278340][T10888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.297974][T10888] RSP: 002b:00007f9f130d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.306423][T10888] RAX: ffffffffffffffda RBX: 00007f9f12425fa0 RCX: 00007f9f121a8f19 [ 404.314421][T10888] RDX: 0000000000000000 RSI: 0000000040140921 RDI: 000000000000000c [ 404.322416][T10888] RBP: 00007f9f12237f6d R08: 0000000000000000 R09: 0000000000000000 [ 404.330408][T10888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.338421][T10888] R13: 00007f9f12426038 R14: 00007f9f12425fa0 R15: 00007ffc6c7cbb18 [ 404.346430][T10888] [ 404.355536][T10872] Bluetooth: MGMT ver 1.23 [ 404.366007][ T4972] plantronics 0003:047F:F4FF.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:f4ff] on usb-dummy_hcd.6-1/input0 [ 404.392054][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.402392][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.462468][ T5809] usb 1-1: USB disconnect, device number 100 [ 404.533738][T10888] md: could not open device unknown-block(11,0). [ 404.533784][T10888] md: md_import_device returned -6 [ 405.796554][ T1669] usb 7-1: USB disconnect, device number 8