last executing test programs: 14m32.794883939s ago: executing program 32 (id=3217): syz_open_dev$evdev(0x0, 0x7, 0x60001) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000002400)={{0x3, 0x3, 0x82a, 0x2, 0x2}}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) r1 = request_key(0x0, &(0x7f0000002900)={'syz', 0x3}, &(0x7f0000002940)='rfdno', 0xfffffffffffffffb) add_key(&(0x7f0000002740)='pkcs7_test\x00', &(0x7f0000002780)={'syz', 0x1}, &(0x7f00000027c0)="6a2abea8e4a0b97f7ac1a975b1424e2217473d7d1cf6d3aae8d9e7d673ea8351e9eb53fc0bd8b1d4949f5e0fe39b9d5e8b44b0d5418fbbc4790fa5c5b6c6a47e5e7d44aa4825408babe8f42e944b698f8b6ea76e14049f4b7add91c2e8b4d85e90171aafc1e9ead8a87d90e7f0152fcfded7e41b95f6918b29ded003fbcffe5ec2e2aaec6d6022a3339144bfac47115d40c6b56eae85e1ccf92b9118cbb0c32f4855ea73c78a620b673c93af2e96a21f2fbe325eb15b4d94b72a35036aea20fe1c1039", 0xc3, r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffffffffffff}}, './file0\x00'}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000029c0)={0x128, 0x29, 0x1, {0x9, [{{0x8, 0x2}, 0xffff, 0xf9, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0xfffffffffffffff7, 0x40, 0x7, './file0'}, {{0x0, 0x4, 0x8}, 0x0, 0x1, 0x7, './file0'}, {{0x80, 0x1, 0x5}, 0x4ce3, 0x4, 0x7, './file1'}, {{0x4, 0x0, 0x1}, 0x7, 0x40, 0x7, './file0'}, {{0x8, 0x1, 0x4}, 0x5, 0xfc, 0xd, './file0/file0'}, {{0x40, 0x1, 0x5}, 0xfb, 0x4, 0x7, './file0'}, {{0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0x7, './file1'}, {{0x8, 0x0, 0x8}, 0x1, 0x2, 0x7, './file0'}]}}, 0x128) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x3, 0x1000, 0xffff, 0x3, {0x1, 0x9, 0x9, 0xfffffffffffffffe, 0x7, 0x400, 0xa, 0x81, 0x9, 0xa000, 0xfffffffe, 0x0, 0x0, 0xc892, 0x7}}, {0x0, 0x3}}}, 0xa0) read$FUSE(0xffffffffffffffff, &(0x7f0000002bc0)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) keyctl$set_reqkey_keyring(0xe, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000004dc0)={0x2020}, 0x2020) fanotify_mark(0xffffffffffffffff, 0x200, 0x8152ccb16b8807e6, 0xffffffffffffffff, &(0x7f0000006e00)='./file1\x00') 14m26.079578532s ago: executing program 33 (id=3248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, &(0x7f0000000100)) socket$can_j1939(0x1d, 0x2, 0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 13m29.681438736s ago: executing program 4 (id=3373): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13m29.506988737s ago: executing program 4 (id=3374): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0xfc5d, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x84, 0x2, 0x3, 0x10007f, 0x20000003, 0x53, 0x6, 0x3, 0x80005, 0x2, 0x1, 0xffffff01, 0x6, 0x1003, 0xfffffffb, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0x7, 0x15, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x40001, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x100401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0x1, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x2, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x8, 0x5, 0x1, 0x87, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x90f, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb0, 0xfffffff8, 0xa2, 0xb, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xec, 0xce9, 0x1ff, 0x5, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x7, 0x804, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x6, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xffffffff, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13m29.235351802s ago: executing program 4 (id=3375): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x59f8, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13m28.657165812s ago: executing program 34 (id=3376): clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x8, 0x1ff, 0x7fffffffffffffff, 0x200, 0x9cbc, 0x6, 0x9, 0x1}, &(0x7f0000000540)={0x3, 0xe, 0x5, 0x8, 0xd, 0xb94, 0x7, 0x4}, &(0x7f0000000580)={0x2, 0x8, 0xf0f4, 0x1ff, 0x1, 0x8, 0x5, 0x2}, &(0x7f0000000640)={r0, r1+60000000}, &(0x7f00000006c0)={&(0x7f0000000680)={[0x4c]}, 0x8}) 13m28.31777998s ago: executing program 4 (id=3379): clock_nanosleep(0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='^\x00']) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380)={0xf9, 0xfe}, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000140)={0x18, 0x3, 0x3, 0x80000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8009f"], 0x7) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d022cbd7000fbdbdf25010000000500060002000000080002002c000000050005000000f50008000b00ff030000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) socket(0x11, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 13m27.958010316s ago: executing program 4 (id=3380): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d36726567"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x80) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000280)={0x0, 'hsr0\x00', {0x1}}) socket$kcm(0x2, 0xa, 0x2) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 13m26.351273122s ago: executing program 5 (id=3381): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13m26.120734446s ago: executing program 5 (id=3382): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f00000000c0)='-*P/*\xea\x00', 0x800, &(0x7f0000000100)={@align=0xffffffffffffffff, {0xa, 0x929b, 0xfffffffa, 0x9}}, 0x616, &(0x7f0000000140), &(0x7f00000001c0)=0x1ad7}, {[0x5, 0xaf2, 0x6, 0xffff]}, 0x400, 0xa8, &(0x7f0000000240)=""/168}) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000440)='./file0\x00') r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 13m24.90684185s ago: executing program 4 (id=3383): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r0, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 13m24.563490198s ago: executing program 35 (id=3383): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r0, 0x301, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 13m24.378563686s ago: executing program 5 (id=3385): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x59f8, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 13m23.090735408s ago: executing program 5 (id=3386): clock_nanosleep(0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='^\x00']) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380)={0xf9, 0xfe}, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000140)={0x18, 0x3, 0x3, 0x80000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8009f"], 0x7) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d022cbd7000fbdbdf25010000000500060002000000080002002c000000050005000000f50008000b00ff030000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) socket(0x11, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 13m22.839168041s ago: executing program 5 (id=3387): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 13m21.660652202s ago: executing program 5 (id=3388): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13m21.399231151s ago: executing program 36 (id=3388): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc00000021000100ffffffff00000000fc020000000000000000000000000001fe80000000000000008000000000003a00000000000000000a0000202e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000000000000000000013c040000000000000a"], 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12m49.7491389s ago: executing program 0 (id=3341): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) 12m49.317313779s ago: executing program 0 (id=3390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0xa0}}, 0x24004084) 12m48.767448944s ago: executing program 0 (id=3391): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x59f8, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x1}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 12m47.796241362s ago: executing program 0 (id=3392): clock_nanosleep(0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='^\x00']) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380)={0xf9, 0xfe}, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000140)={0x18, 0x3, 0x3, 0x80000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8009f"], 0x7) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d022cbd7000fbdbdf25010000000500060002000000080002002c000000050005000000f50008000b00ff030000"], 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 12m47.584076729s ago: executing program 0 (id=3393): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000025c0)="24acadd7f04daaa04e88680351d9ce53f67fd2afefe557d4bd561f02df2570f175951d4bdd97ec433ec583c79fa668922a61c8662e0890ce06996f5ba401e582dfb5197822bee50c6cd4b3a6f9d14f1fde9b1698ad6847d4fde0458282ece396a1e212cd02e6fb62599df5ecb5984843ee04e96eb26fa2a8100a0b7b2d032fff96", 0x81}], 0x1}}], 0x1, 0x2090) 12m42.333851047s ago: executing program 0 (id=3394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x5, r7, r6}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x7, 0x44840) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, r10}) r11 = syz_open_dev$dri(&(0x7f00000004c0), 0x1f, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r12], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x5, 0x4}) r14 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r15 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r15, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r16}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r14, 0xc01064ab, &(0x7f0000000380)={0x5, r17, r16}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[r6, r8, r10, r12, r13, 0x0, r16], 0x7, r3, r4, 0x3ff, 0x800, 0x9, 0x884, {0x1, 0x7, 0x0, 0x8, 0x2, 0x7, 0x0, 0x80, 0x7, 0x200, 0x1ff, 0x400, 0x3, 0x7, "9abea50d1c9b315a56fcecc3d78edc1b6b7908455419123b75395192e430c657"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={r5, r3, r4, 0x0, 0x0, 0x4000}) r18 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r19 = dup3(r18, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r19, 0x40046208, 0x0) 12m41.16567641s ago: executing program 37 (id=3394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x80000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000380)={0x5, r7, r6}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) r9 = syz_open_dev$dri(&(0x7f0000000280), 0x7, 0x44840) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, r10}) r11 = syz_open_dev$dri(&(0x7f00000004c0), 0x1f, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r12], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x5, 0x4}) r14 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r15 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r15, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r15, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1, 0x0, 0x0, r16}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r14, 0xc01064ab, &(0x7f0000000380)={0x5, r17, r16}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[r6, r8, r10, r12, r13, 0x0, r16], 0x7, r3, r4, 0x3ff, 0x800, 0x9, 0x884, {0x1, 0x7, 0x0, 0x8, 0x2, 0x7, 0x0, 0x80, 0x7, 0x200, 0x1ff, 0x400, 0x3, 0x7, "9abea50d1c9b315a56fcecc3d78edc1b6b7908455419123b75395192e430c657"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={r5, r3, r4, 0x0, 0x0, 0x4000}) r18 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r19 = dup3(r18, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r19, 0x40046208, 0x0) 12m41.131622229s ago: executing program 6 (id=3377): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0xcb7010bf17d94be5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0xb0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3d921c31}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELSETELEM={0x814, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x800, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1ff}]}}}, @NFTA_SET_ELEM_USERDATA={0xde, 0x6, 0x1, 0x0, "9606fb1d3022b68851b70f82bd2b64c9a059452fd0f4f0c093228beaa90abc9db0effbf269e534b99f38a307e11b175bcb6f7a50fba527c5d168c1e4ab656aac7c83d764fbf3615825b153278e80fcc09295042e0a63f50acbad09e9fcb62d84cdc60d472f1703fb4e8761502254471393e914961aa39d9f1a82a53bfd5a773ca1c9fc48f18e294a0d53b3539ac29cb4eb8b685b532208fac22bfcd221c90f015a908dfedb8c64bce4cbfb779cb7f094fa0b94f4f8c6b38940cc7beefbb6788d7b531f8a0d15351747a68e3243992947535b5ab45e291d10a381"}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "6f00e8b50b2758bd7f00e231ac374a5373976663cabf1f4fc78ecd62d72ac0b810648ceffab6678f0d43ecc283e015d37fd953a46da1fe58c158b37acae8329b8a20af8be9d6fd2c4e75c1cefda6a39cae68e6e95b50d2c40d00d5c271e1829c4b9d02d3de18e8ce42c8d5"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x12, 0x1, "8d6de63320f90aea47139e6381c3"}, @NFTA_DATA_VALUE={0x8, 0x1, "a9e135a1"}]}, @NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "5ecd5c71cc68556f50c513d6507d49dab777a52518c8d1583a65c569bf4a936bc96007c03db98192"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, {0x254, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x220, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "588bb9eccc37"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "e9eb15d673d1c839947c83ce94fa756438fcd1ef0d34919497ad82a7f3c7921b488b9c0bc1cf12d3c2ca84b8a72488df7763187544bcda6a052c5ecbd880d10ddd637df6e4e57b3b3902a29274d2e6645e591d34b2e567b6d62e1b652a634da4845bc2ea543906b861131fa0c0bd3899fb3ea18d5a4be66c730806d07b1e3eec77b77ba3db7ff954a8edbb8f0cc0aa8a03f95e14447b9329c385ce972a14212406dc2d8d8de6f2f4e7a1a2372553b088cb58fd1a6b727c10bf200f651082"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x95, 0x1, "656110634e8d1e0b2eb7f3d65ce911344afde44faec3b0fe1e456d9e0940142e9fc4f7a4d8d81b266078b95804603120d8e6981a010181dcff859c7be0479df7402f6eeca95e434a31159da0367777ecc57b6f6e54b47db02ed724494122c56dcc3cfd46bfb9e6826a9a0afac397859cba768eef677ccb3e5052c55540fb4585aabbd386f0a8564a2ffde409d38e311a09"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x244, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "9f5f71796427937adaeeb9096c530c68b8c4df03c5a4ffa79a"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_KEY={0x19c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc7, 0x1, "40a23751d519a30d8f90571b1c4e7bae7020fd3ba04ad44b76f911f61a3f79213b99b13ace4459d1a5bf576c4d69a631c2ace811ddbc448bce3d7059c0490931bb3e0d684bfa785118f351c4647fe88f244da0f1ec1bca3c38218e3e3dcef8a6978dc3bf22bdf83e1c438d9cb927f3875d253d89af6590ad01b34d472757c9b2536aa4541efc1e977d55adab7a844e3b76ecb4823ff69ffc4818680330522f4b8137f316def8c2c3fda2bbab79c534b15266a6cee7c37abd6c4190319dc848e8bd409f"}, @NFTA_DATA_VALUE={0x8, 0x1, "8dd73859"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x22, 0x1, "8fc4dd3a200ac74a6d8bab319e104ea1454b375833cbb8d66a92bdda7360"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xf, 0x1, "aaac45c578f7bd5940d63b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}]}], {0x14}}, 0x9d4}}, 0xc0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x2, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x40, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) 12m40.483780719s ago: executing program 6 (id=3396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xfffa}, 0x90) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @loopback, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) (fail_nth: 2) 12m39.329209344s ago: executing program 6 (id=3397): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus/file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0xb, 0x100a}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text32={0x20, &(0x7f0000000140)="66b829000f00d0360f070f4c90000000000f01d1360f35c4c2c5015dbdc4c21d064eea0fae33f13e0faeae68e4e46e", 0x2f}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000440)={0x80, 0x0, 0xd}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 12m37.61204232s ago: executing program 6 (id=3398): clock_nanosleep(0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='^\x00']) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380)={0xf9, 0xfe}, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000140)={0x18, 0x3, 0x3, 0x80000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8009f"], 0x7) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 12m36.86132443s ago: executing program 6 (id=3399): mount$overlay(0x0, 0x0, 0x0, 0x2280420, &(0x7f0000000140)={[], [{@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0xe18ce511eddb7460, 0xf, 0x61, 0x36, 0x54, 0x33, 0x39, 0x35], 0x2d, [0x65, 0x33, 0x54], 0x2d, [0x64, 0x39, 0x66, 0x35], 0x2d, [0x62, 0x30, 0x35, 0x62], 0x2d, [0x33, 0x39, 0x64, 0x37, 0x0, 0x34, 0x39, 0x38]}}}]}) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect$uac2(0x1, 0xc9, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x1, 0x60, 0xd, {0x8, 0xb, 0x2, 0x1, 0x1, 0x3, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0xc, 0x42}, [@feature_unit={0xf, 0x24, 0x6, 0x6, 0x5, [0x2, 0xedc6e8cc8daca631, 0x2, 0xff, 0x8]}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x1ff, 0x2, 0x71, 0x6, 0x10001, 0x6, 0x8, 0x10}, @selector_unit={0xd, 0x24, 0xb, 0xfc, 0x8, "4af38e22f4b7f04d"}, @processing_unit={0xd, 0x24, 0x8, 0x3, 0x6, [0x1, 0x2, 0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xff, 0x3, 0xfd, 0xa, "ba654bf3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x9, 0x8, {0x8, 0x25, 0x1, 0x0, 0xf, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x6, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x74, 0x1, {0x8, 0x25, 0x1, 0x82, 0xc, 0x3}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x5, 0x1, 0x2, 0x8, 0x3}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0xdb, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, {0xe0, &(0x7f0000000400)=@string={0xe0, 0x3, "0c8ace02870c63b7527b7c576d7a094a54d57792e2518729392b261dfdfa5057ccba5f415f737bc315d5f8303db5dfedaa233a2999b257373d75588506aacd141686876bf8726ef534a1c2203dce8193c7897f93cc3e78c40035dbf4ca1150cf28b2e59862c7b7839dff2eb55a0864d7c24e10485aae4ba6e5edb0fde00d71e7a49e0ae60951a975536505d289c2e38819e0b06b4cfd86184ca306027148bf639711f860dc248f58074e06a918732fb682f169c562bfdf92ef54bb6d6b6989d3e4b6459c16af9ab256e047d01f4bdd23c7a5e1444a57446d6a8dea36bc71"}}]}) 12m32.899709878s ago: executing program 6 (id=3406): clock_nanosleep(0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='^\x00']) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380)={0xf9, 0xfe}, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000140)={0x18, 0x3, 0x3, 0x80000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8009f"], 0x7) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 12m31.880198753s ago: executing program 38 (id=3406): clock_nanosleep(0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB='^\x00']) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000380)={0xf9, 0xfe}, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000140)={0x18, 0x3, 0x3, 0x80000000}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c8009f"], 0x7) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 7m47.894408198s ago: executing program 7 (id=4474): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 7m47.830996047s ago: executing program 7 (id=4475): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7m47.305497941s ago: executing program 7 (id=4478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x10, 0xffff, 0x72, 0x71d, 0x400}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r1, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4000001, @rand_addr=' \x01\x00', 0x1ff}, @in6={0xa, 0x4e24, 0x4000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}]}, &(0x7f0000000000)=0x10) 7m46.223648793s ago: executing program 7 (id=4483): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4080) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 7m46.082918659s ago: executing program 7 (id=4485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x844}, 0x24000840) 7m45.545948884s ago: executing program 7 (id=4489): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000240)={0x40, 0x48, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000400)={{}, 0x7, 0x10001, 0xa63f}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) splice(r4, 0x0, r2, 0x0, 0xae9, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m29.429541352s ago: executing program 39 (id=4489): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000240)={0x40, 0x48, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000400)={{}, 0x7, 0x10001, 0xa63f}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) splice(r4, 0x0, r2, 0x0, 0xae9, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m8.635268875s ago: executing program 8 (id=5440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000580)) 5m8.258684699s ago: executing program 8 (id=5449): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f", 0x98, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0e", 0x95}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m6.676215919s ago: executing program 8 (id=5459): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x9, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0xa}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xf7, 0x7}], 0x2, 0x2c, 0x2, 0x0, 0x7}}, 0xffffffff}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x1, 0x4, 0x2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x200, 0x7, 0x27b6}}) clock_gettime(0x0, &(0x7f0000009e80)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000009c40)=[{{&(0x7f0000000240)=@nl=@proc, 0x80, &(0x7f0000001a40)=[{&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/70, 0x46}, {&(0x7f0000001640)=""/205, 0xcd}, {&(0x7f0000001740)=""/37, 0x25}, {&(0x7f0000001780)=""/167, 0xa7}, {&(0x7f0000001840)=""/255, 0xff}, {&(0x7f0000001940)=""/225, 0xe1}], 0x8, &(0x7f0000001f80)=""/4096, 0x1000}, 0x80}, {{&(0x7f0000002f80)=@nl, 0x80, &(0x7f0000003340)=[{&(0x7f0000003000)=""/158, 0x9e}, {&(0x7f00000030c0)=""/181, 0xb5}, {&(0x7f0000003180)=""/195, 0xc3}, {&(0x7f0000003280)=""/130, 0x82}], 0x4, &(0x7f0000003380)=""/56, 0x38}, 0xfffffffa}, {{&(0x7f00000033c0)=@xdp, 0x80, &(0x7f0000004a00)=[{&(0x7f0000003440)=""/152, 0x98}, {&(0x7f0000003500)=""/31, 0x1f}, {&(0x7f0000003540)=""/163, 0xa3}, {&(0x7f0000003600)=""/179, 0xb3}, {&(0x7f00000036c0)=""/249, 0xf9}, {&(0x7f00000037c0)=""/1, 0x1}, {&(0x7f0000003800)=""/169, 0xa9}, {&(0x7f00000038c0)=""/4, 0x4}, {&(0x7f0000003900)=""/212, 0xd4}, {&(0x7f0000003a00)=""/4096, 0x1000}], 0xa}, 0xf}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004ac0)=""/182, 0xb6}, {&(0x7f0000004b80)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/133, 0x85}], 0x3, &(0x7f0000005c80)=""/101, 0x65}}, {{&(0x7f0000005d00)=@un=@abs, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005d80)=""/179, 0xb3}, {&(0x7f0000005e40)}, {&(0x7f0000005e80)=""/218, 0xda}], 0x3}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000005fc0)=""/142, 0x8e}, {&(0x7f0000006080)=""/227, 0xe3}, {&(0x7f0000006180)=""/135, 0x87}, {&(0x7f0000006240)=""/56, 0x38}, {&(0x7f0000006280)=""/32, 0x20}, {&(0x7f00000062c0)=""/27, 0x1b}], 0x6, &(0x7f0000006380)=""/150, 0x96}, 0x8a}, {{&(0x7f0000006440)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000064c0), 0x0, &(0x7f0000006500)=""/163, 0xa3}, 0x6}, {{&(0x7f00000065c0)=@qipcrtr, 0x80, &(0x7f0000006740)=[{&(0x7f0000006640)=""/228, 0xe4}], 0x1, &(0x7f0000006780)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000007780)=@nfc, 0x80, &(0x7f0000009ac0)=[{&(0x7f0000007800)=""/45, 0x2d}, {&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000008840)=""/226, 0xe2}, {&(0x7f0000008940)=""/164, 0xa4}, {&(0x7f0000008a00)=""/4096, 0x1000}, {&(0x7f0000009a00)=""/81, 0x51}, {&(0x7f0000009a80)=""/20, 0x14}], 0x7, &(0x7f0000009b40)=""/202, 0xca}, 0x43cd}], 0x9, 0x40000000, &(0x7f0000009ec0)={r3, r4+60000000}) 5m5.661614249s ago: executing program 8 (id=5477): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) write(r0, &(0x7f0000000040)="842a0affbd", 0x5) (fail_nth: 2) 5m5.298673307s ago: executing program 8 (id=5479): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = socket(0x80000000000000a, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x23, 0x99, 0xd1, 0x8, 0xcf3, 0xb003, 0x17b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x27, 0x16, 0x0, 0x60, 0xc3, 0x40, 0x7}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) 5m3.363392188s ago: executing program 8 (id=5499): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020120c300800000000000109022d000100003003090400000903000000092109000101222c0009058103ff03100000090502030800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200d2e0000002e23e75bcf47a88a34d2dd23ee248c3610637e74"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m46.86467069s ago: executing program 40 (id=5499): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020120c300800000000000109022d000100003003090400000903000000092109000101222c0009058103ff03100000090502030800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200d2e0000002e23e75bcf47a88a34d2dd23ee248c3610637e74"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.188610831s ago: executing program 1 (id=6817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 7.305676119s ago: executing program 1 (id=6818): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 7.158082325s ago: executing program 1 (id=6819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x19, {{0x2, 0x4e24, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000480)={0x4, {{0x2, 0x4e21, @multicast1}}}, 0x90) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x2) close(r1) 6.839361543s ago: executing program 1 (id=6820): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009"], 0x0) 6.509515105s ago: executing program 2 (id=6823): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18}], 0x1, 0x0) 6.435630437s ago: executing program 2 (id=6824): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000340)={0x28, 0x7, 0x0, r1, 0x1c, 0x7, 0x7f}) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xf000, 0x1}, 0xe) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) r4 = syz_usb_connect(0x4, 0x36, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x15, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x22fe0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x40084149, &(0x7f0000000080)) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0xb6, "c21e7facad7c5739195fe26568d447e2bb8b70012dc7eb44720ade28ef8aa93f8fddc3e6b922c5b51d01e5701cb2ec074fd87c43d50c523db306c42a04000000f4bc839b70b5533f1c6a0f8df55221b7912fc3feb250082054787953a076a1a25d14e20f1f461a410de7da411bcf5c7f8cbfe2d3aace3df2df3b02c449501c94d2cd11bc9ca30fa910a80ad2d3230ff0fc73b796f4a2732719e24259872725cf7170c9bf9dd81ae23359a864f5bcf5e82b05c4ec4c6a"}, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xfffa}, 0x90) sendmsg$inet6(r7, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @loopback, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) close_range(r2, 0xffffffffffffffff, 0x0) 4.081239938s ago: executing program 3 (id=6832): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000021c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002ac0)={0xf2, 0xf2}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x145e42, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34022}], 0x1000000000000364) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004b80)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001000)="3bacbc9eeecf9318c7bf513db6fb761cc7e9d37c59c92c2abee331cbbfc307f126c99d0aaa850f9de0d6635c00e4a3a425f52c45ff7ddb2952564880c513943a0fd263ca1c1a2ace7d6f2f2bfeadc43e0230b99c530a0b948a01ebe54be7f163108cccf465b16944fb3e0c5d54eadac03b80889687a92db1e46af4a3fd06984f21b17cf0dd303436ea3e7b158cadbdbfde81295151eb3255cbc3b95b59dcbb6c1d0324d0d604b073469a10ecc863024b8fa48d96811f7cc5b2687d2dc4480e6d20668a462fdd6989bdc5d56e"}, {&(0x7f0000001100)="7f702a745674b3615431bdaff191a4096f126758d15738fb905049083874b1a1134923d4ec"}, {&(0x7f0000001140)="0e575808a9fc0ca837940f509c524b1c0de7c60e1f1d89facac84d"}], 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000003300)=[{&(0x7f00000011c0)="d994f8ef8618b4bd4a7968e268ad67501ea72e67bbcafae65ed48e014fc756b5c28d326c1cb3a6bc9cae56ef9c7c1870e9b7c2e0e90ebb715ed7d108cf8549e80a89f051bc81d17a841402e812eb0b6532a684ed73b439c2cb5010f80d59b5b7ab761ae6f1b7dbc57f77df350f8944784211a31b09fb1e3286876ad29d24b129f7d450bf0b28601cf22812fae3150bfd43550508a4b7fdf545c32a435871281a6d8abd7b9089a93d117c0cea3840ff4ea0a019ad157d2017064e34bc22d57d58385505946b53eef24912ebe5f8e8e64077"}, {&(0x7f00000012c0)="4743bbf810be0ea0a9307177cc5a2fb9278dc8e793aa2369c385e725e210fb6910493d6114b939b9837041afcef0165f46d7915a5e747a2d9c4edac53362978864a1c142ab1e2b5f25471b8bb8c6ad544a0db089d70c82242d387e083a48d78308bf641ad3a67a919b591b073f7dd08a9f3b4c716dd5f399f1a201a2b236b4af35ed4c913e8c0529b1aff6b6ea4144"}, {&(0x7f0000001380)="1139a66ff535ed399eb43587a06c3c3937a0d913b2ee08725360936ce0218b39271ce04bc66c0257c104330368dac1f70eab04e38b2286af0970aead9a0047b11452e0208365c3e008afc49b3ba2e6852ca644aacb2e9cb430dd7fd4d703ec9192adc4c40d133e4b27ce436baad15824af48cf057f09e81db9bc4528bcb229582f835c12099d4536c6f397491fe222a5bb8c2fa21843cf4ecb16034b9ab92ee5b7a7bd3938a9e3f8c7b5633044471cf6c822fe68e38c95f52031fd2ff3e8d26cda35f44c317582fa34f82bd4d505ac53b6ac967f441734"}, {&(0x7f0000001480)="535656be4917df81a3cd7042df3422b50177c60b9051bbf8add6bc79c5bf73da37aa253ac8e9aa960aa76e6ed71900145d19a8002fbebd6f0e357044fd43ef614167f3bc20e3f5d44e2f034f6b21e23d18564dca3046aa85f4b15395f14b40cb8d2454255b927293c007cb9e0e92143c17329a0db58074dfa3f01890bf7898b426de822d5ac14bac1e23e0dab7e02d72ef22f0e0fe0ac418352e96ab37ef751ea3932bb6f9b841a170e1ff621ef41afd124a316169274e75478655620e6d51347d54c4b06bcbe2cd093c8d5183cf9c6bb7"}, {&(0x7f0000001580)="364ffdbef6f1f65a7e6150000a68c5af9b0be81135e94edc757b36987a69be3b2c8d64ebf302eddba5f47201525b8dfc93753a4a57b9e8079c1ba3b6e24fbf66088778f43bdd86f4b320e3f1a517d60de321ab1a6c270359c79f85a73dcf3289dc892c56b5360694b5f2a4b9db0b6df20ddf48947b905a9e7c7c4c29aa19ebfc7c84fec97ac9c19ea9862821bae8e0ed067cb7175be74b4437f3eef20241d38a12a724b01fc6307d4d0448ff7d5b97"}, {&(0x7f0000002240)="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"}, {&(0x7f0000003240)="cce85dde64c71f6131d687ba82a969526ec348b57a484732629766b7b108eca482dc59b7f5a99df4dfaccd0609f966f72e60886e700bdec38165e61aca353ae53ca6f0bde3e2e9ed978aea9cbea5a672103274b84ea207114e75b51af792"}, {&(0x7f00000032c0)="e9594fe4dbad37b99b8416785d56f01c15a2b16881e5038cfc4691367f8d49244de3316f20"}], 0x0, &(0x7f0000003380)=[@assoc={0x0, 0x117, 0x4, 0x3}, @op, @assoc={0x0, 0x117, 0x4, 0x5}]}, {0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003400)="d9670e2ed528fa952875848187a20e875ebd3dcb5421d427f27df592153d1078675ad9b785c585d5ff426f8c5fccb87a5c2bed73860799078c084ff9af3d3009e24c49adb5636811c516632c"}, {&(0x7f0000003480)="3a44cb65227f604b303ca2f2822287581ef3668eb4edbaed922ea71df07a7c060f4c55d99a91c14e786f8f568e785c87bdbe3db4d0ebf40842026b338bb8c330a935b75911f3931dabcdbc631ae29f2f65169e9ca81be48b7e9fd9e0cd5e2074b8f9a23f4ca584402d23ad02ced0dfbf2383916dd59901fad836516457f0cbd3a028fd144969e3d4d26ff6cd"}, {&(0x7f0000003540)="0ec19504022795876cbe283d932161a282e6015aeac75b227869907337cbe6d81be397d1b7f12b6b34113c057a16212a65fee432b5ef0e3e197fb98c1b401845415b3bb1ab409c54783868bb6fb8311a41d894376417ca2fb8ccac9aaf718ab0081012"}, {&(0x7f00000035c0)="092910ad6d8357b3e7c0b765caf9888e1a87a5277fc0bc381f4adee62b1518e740530a"}, {&(0x7f0000003600)="005117a9ddd9882d8f71ba3447ac01db3dbfd1804bb60325a1"}], 0x0, &(0x7f00000036c0)=[@op, @assoc={0x0, 0x117, 0x4, 0x6ac}], 0x0, 0x4008014}, {0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003700)="2f78d619bdfeae5bc9676bb1a6666639027f40a15681a313c4e67203aa68847839322ee7cb46"}, {&(0x7f0000003740)}, {&(0x7f0000003780)="9c081560dc70567d81b50af206d7b37f3cfcd7da705b3c211e727332744bee230f585d579c88bf8df217cea944100ff37b10f5708d4b2b160c890694327c8386f12072a95d2a8ae73e819acbbc75d31a3da3949e6e365d71de6314c282570534ae4ca537bf6465257868d438836afa"}, {&(0x7f0000003800)="2c0e033a7a34bd"}, {&(0x7f0000003840)="a3392a36"}, {&(0x7f0000003880)="5cdc0d91ccd8285eb7141dcd9d044143da2ed13da369e16c08147afc225eac158e2822443462e41437400946ee70689c8c8afa"}, {&(0x7f00000038c0)="99279f5ddb2eb77ea9b95f61dd8ba1db55a0a3e51e7c6470fe91d75af26c5aa333b1d93823ca96d2eaf0cb7f4d6b3da771eb69485c9613ce97e1e24012cc967af11265623d55015a39e1e100f7f06c9b9b32dc262337c8a327c1d99186a60dd793a89d10b1a570e256df770ad671dbbec68d57bef2eac704dcb77dcb558162cd3ebd52ea7133bdf549e1d530b1cebd83e123088e0bb3d5eb48103d7cfe5288fc87eb7e9f8ee4c9e81eadf7ac30cb617405f99c2e408043c8d0ae48baa565c0103fc3f6b1edfa6e3179ed0529e6d24becafa85639b47530b129485dc1daf1c482c8379dd094d65ab9445a891c8a0dee4fa9"}], 0x0, &(0x7f0000003a40)=[@assoc={0x0, 0x117, 0x4, 0xffff0001}], 0x0, 0x10}, {0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003a80)="9ee2f24d959a0d299c15a251b00b49b10e31917917c7a7842a6a6f27480d9e3c21a81edbb6411e82728b7304e3de8be39624029aa958d699cc192c20b0f45e72508e68612ef715f13812b6e707116c050c7c6ab58a54899856dc183f93732f095c85f5790120c4b63e4f819a2c04920e3e267d0ef0e1ef2fd96c2157be29a4912e6a16bafd0cf6d8e3715182395c75dd267ac11b075e999a046bff043deb7b4fdd01a9edaed37cd33d0679f155520e21c6bff91e53e951e9d3e7386de71d648f9b25274bd0793357d8dfe80807c1e0767f26ea7b5055fcded5f343dbd3bc3b6650"}, {&(0x7f0000003b80)="884cc22f461d93f312a4ae14fd4de2c8bf7afceb52636b001886829205374d9d9436262fe46cb333aeeb0664e8cbf1f5880fcfcaa78719458ada415cd9418e6d87a89480ac8821844515aaa27d65824dadf3e58863df93887fdf01e990acb32bbdee8d397ee1516c29f7e3cedaed1af35bd6d9078b5fb113c335c8ebaec5dbcc9315f564edf67ffe5d0fd8a008ed5c506c6e7a68e9f029b9bdf69b65f82ff2fc5c5b1e97a1c5"}, {&(0x7f0000003c40)="543d72280f4d56ccc9a371c9f5d6b4c08e5ecf17085bc212f7ca35363648252774b31e779fda3a7354e15367e6a489a3fbc2f178a53703f4c5c410b0613ef660d1e4686b53a3f2a052db00959632d37a3a7ed6bf61fb1a2c1e1380c0f8fbd2e7869126af60604fa4dad5beb6319b3382f76e9632aa458ff98bdc70f14bff9a4198ca4a62b47f0843f9f6376fa8636420a95a37ded6d01bdc5a5bbc7950de52f9ff0af286219f5048786d1749e325f2181c7064"}, {&(0x7f0000003d00)="9fd7bbe13431e1a015d5639793ff6edc832b746a26b42d254179e0d982b1cd3ab08e6900751c2db0621f0de7d61c3f3ff3943b9a20cf5c1ec80bfc4bf94826c912918af0ecf35df40c9849da3289fbc99b5532f5ebb1cde5865e12c68d0091717b4de2bbdb837fdcddc52c946a4c82bde6179b8f21114f75db99577d10a36d18dc5a370a1fa3e880d08d36090118f5b327e5e3f49e7dd2b9fd20046313d3810da0ff972abf71e7186b2ff018a550817d0279c5b917ecbffd38bd62d66f28584d0f2221ae13c53023f185901834562cc998784a75af5829b9e7b8a528657089ff50827650cf1658b16b25001fda5d"}, {&(0x7f0000003e00)="70d93831afbd2bb10f35665b1558c7279c0ba8b434ddd73897c7306db1caa0ae19"}], 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003ec0)="4d0b70b952a44e926760d42d7f44c24ea2c3c2c05d33a7fd36723b3c606ac118aaadc69c28bc47a8f1e163deb69fc95ecb737605761254cb87e574ec99326ade3c268689e36c73cc02390f7e42e0a17b1b84cc5227e9463b3593a0138d17432f284e51fb0d007c18914dd3eb72f785fe00be844ad4a0f40fcca23ec7289b02300af21083037b9564533b6d525d778b2220d8d96aa208f4b4479bd8f98ec030adac4390f943fbef4d34e525ac71814e0e0292c163037415f969b9c6ec488190da8d30bd5d3d5b26119620"}, {&(0x7f0000003fc0)="0e94b9147ca0a25e76e565482b2ba6a4d6df3b59e37e40845af82aaa8f1237a15c15bb76a86c0172ca5ee6d0105930055e6318f6599939f54398809738225166a257504a564e69af8a13f7f6cc817e87b722981ebda01d1b19adf8db886c3a4752f0e2b7faf63e0940052bcee4f97f4e1a86a14c6a4b31e7ab44356c9cbbd8832c32d9bbc052fbf30921a1f244b3ef57c4926eb5cb1235529c0673eb97"}, {&(0x7f0000004080)="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"}, {&(0x7f0000004180)="333419123532788b7069fa9a3ce627d41317bc7ddf3035b70c49ddd5c1ba9a370f6e00c90b203e19c6228e8d1a3679c4d3ba0c396224812f2bafecbb2e9c5958dc60ba6693a260ee4ca56bb9c1073138ee1cd1283500bc8e672c057d9d8c95fbf174b07f257aab29c2996333e4a0b80070"}, {&(0x7f0000004200)="a4799e38191ce7402b3438e69e96a8d302eea01f1e40c1d12f6856ade9dbeff7d3a54955a03fe9e87b9e4c90bdf65c1e8601cae9ce02c57ff849d0aede6bd91542c09eec0f40d5b732e254378dd70e85265df03d363ba0e4e998d40897587d9d6ece6980b2d44e7773f936c539feb65edef117e00acb45a444f2"}, {&(0x7f0000004280)="1f13d4c2a9dc347962719cda1a3a77a0b6257142d63395292fb33993558345f9ea56b231f3d295a78a17f276c553621c66089e35da2673c14c4f08a4a6b41a8529f4a216756b70007167c4f9b7f2514800ece5f422767c2334d08ead734f48afa1f2291c5eb59641e9abdfa558bade335351549750e44a2495fddeb3f7e565325d"}, {&(0x7f0000004340)="39c9ba63842cb438bdda40a2cbbff67449c1e1b10748498a05ceb7ff890ec5679e135b449ccc356355c95b3be1e8a162650075de054c28ab8c1dc9ba3e1b184565eec358f21a"}], 0x0, &(0x7f0000004440)=[@iv, @op={0x0, 0x117, 0x3, 0x1}, @op, @op={0x0, 0x117, 0x3, 0x1}], 0x0, 0x40}, {0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000044c0)="6d629df3efc7e17fdf56ca2aae794e1a069e5746acd34982246864bca5908f5ad5ae06"}, {&(0x7f0000004500)="bcd3a2b5517bc1e31ffe33d6590b03f16cc807c2ddaff84fa8d020e2f54805e35aff419d71224cebf4538216035df503bfce51491472285a7fc0310aab2275ca41f545e511f98a481cb449db1ef0051f69f86dca209c1b1c66d0599174e4827cc8b4285b95ea25003b84e7c6cc2ccdf6efd03085cc08f093026abf994e2ef4d3"}, {&(0x7f0000004580)="7d84528fddf21146ebb281aefaae05211bf579ec919dc377e6e35dab17b9f0a168c88c6000b0568d3d948db8780d0a1da21ff468a2e383eab540870f3e6bbe4193f08eb05cbb26fe63b23201679da2a8da4230ee5b252a4301baacc109fc11bb12ebfaf769cd2553d6b84bdccbb6d852849f1fcaee633696a5ebe704a230680825334d8ba8560f521e7fb467b05ad21662543e8a01b9d631162a9099dafff2ef65b31ae633f08cbab8b6fddf5d61f86e0f06f2d4203a6bc77b4dc896f3b91d"}, {&(0x7f0000004640)="f57cf3a024052466e2a494dd15b8efc14672ecbab98e64169590bb45da3a44fdb6c54bd0a063af15b9de6dd37ae61b2d2a91b0172efaac192e4934fe8e050aac40c93ce20a0f654d68b41ec8d63e35e8f4520044b60bfedd04caafe794f9449172"}], 0x0, &(0x7f0000004700)=[@assoc={0x0, 0x117, 0x4, 0x10bc000}], 0x0, 0x4008000}, {0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004740)="62a26e866918fd9fc237e19aa6ba6df2c7047a5cabf234896f5fbc3ef2d4cd269417f29b24e1f6a46fb549d071ab4b18c1795926473f94350388a8a01487beb4573bb88414fdd03b8be222c3b4a243bd49ad6e14f7a67ec2190884af4d598fb4ba760e38937d75198658f7399de4d793233ecb3edb2639575dee58aba6c4c0dd404e383ab56c233b400a1ec2f99bdf75de8611ff06850c4e75d20badab63616880ca096a822a91eaee8fe7701987fd844c9c17f3f5056d1bf08258f71a9d386d1517583d7916860399"}, {&(0x7f0000004840)="0e3108024fd7197cd4"}, {&(0x7f0000004880)="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"}, {&(0x7f0000004980)="cb1592c59f02eb26af92390ef8c83c6d02397b9d2c570f0bccfc7c95a15ff82943f2a9bf7f9e690ee2995cd0a6f85fa3566bd29eae267d4fe74d6ccd7cf37738c93f6ff75bfa683ee20493af40b3df2577c4a8edc4ae41c5d2e82d7e1fedcd9c51ce3816089bd418cb8c417f09aa17ab29068cc5b3c8934849b947a0b4d1f47fe6a93991f66456f66a407fc5c5e956a38a06dcc9653fe5d505793949f0faddd1047dbbad8c7dda8c495030dd1f1d931255a658855045bfa262a85b7105ca7af6e854d4bb2a4626d1d5e8480255d5df5b3cf4a9aaa8095915f5ec19b0050872f62326439e1aa41078a98c1bb2c56a9d6ac013"}, {&(0x7f0000004a80)="e187aa2d3ff02c59138153e82e54df1a97553e7f145fd4b635d591fcead88c617f78caacc09240940416b23f0ee627008dbf8fd6d667ffbf3349e6b82b62c2467d23b6abfa8c52d614145025af62ed3ce7949267408ae5e302f6117d"}], 0x0, 0x0, 0x0, 0x8048000}], 0x1, 0x0) recvfrom$inet(r2, &(0x7f0000000000)=""/4084, 0xff4, 0x2102, 0x0, 0x0) 3.975324003s ago: executing program 3 (id=6833): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800050027bd70d400fedbdf54"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800050027bd70d400fedbdf54"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) close(r2) (async) close(r2) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x8, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "0bf6043e529cbfeab8318cb5249c38f7"}) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "0bf6043e529cbfeab8318cb5249c38f7"}) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x100c, 0xffffffffffffffff, 0x0, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'batadv_slave_0\x00', &(0x7f0000000240)=@ethtool_regs={0x4, 0x1, 0xfffffffffffffcef, "5a47d29d0271184345d82e13d15a1627ea6f5ca511c7304da3d638de17ebdef465c0697dc88dd8387d136bf0801ad55a2e8cbb7d82109c06f8a0b620a317b1e2e715c3a7e515fac7a12849392e5a3244af787777779cb8fbb838dc793d6bcffc68b6aa550ae200c01eb4fe8e10726d2187bf2339b0b325e825387f64a193c6f5eb75adeb3ec5cb453b4c1b2df4b26a912b1c12622783ab789734f2508bbf35c34802c3f07b587963fbaca2dc3ff1c39163e5985ea3d30fc6919e527f6cab229a69e58d"}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x80010, r4, 0x50d86000) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 3.818179935s ago: executing program 3 (id=6835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 3.378473122s ago: executing program 1 (id=6838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x1f, 0x4000000, 0x10001000, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x8, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) r4 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000f, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0xca9b5e511653c080) flock(r6, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r10, 0x20, 0x74bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x31}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x88}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040810}, 0x80) r12 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7fff, 0x100) close(r12) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x2c, r8, 0x321, 0x70bd2b, 0x35dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000004) 3.098135597s ago: executing program 3 (id=6839): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fanotify_init(0xf00, 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$nl80211(0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, 0x0, 0x2ce137de341091cc) socket$inet6(0xa, 0x3, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee2010203010902"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000840)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7ffffffe], 0x0, 0x4}) dup3(r1, r0, 0x0) 2.803507038s ago: executing program 2 (id=6840): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r2 = syz_open_pts(r1, 0x2100) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) getpid() r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.74103636s ago: executing program 2 (id=6841): syz_io_uring_setup(0x47ec, &(0x7f0000000400)={0x0, 0x9ac7, 0x10000, 0x0, 0x55}, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/vmcoreinfo', 0x0, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x2, 0x0, 0x0, 0x0, 0xfc, 0x9, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfc, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mount_setattr(r4, 0x0, 0x1100, &(0x7f00000000c0)={0x100013, 0x74, 0x100000, {r4}}, 0x20) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x5, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x54000, 0x200306}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.42392915s ago: executing program 9 (id=6842): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000100)="3bed2272c4d593103786b8722cbd57f65e466f55f96aa650c24c1cd54775a467f71c1575212f574f177be9c011c9231870b97cf35b326853fa574d4a09886fc1c395028b81b364241db5b7b5ea714c35c6232c621d71424bb789dc0e95846d1cb6", 0x61, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x1a0c0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000200)={0x4f, 0x0, 0x0}) 2.075274344s ago: executing program 2 (id=6843): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x1a0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x9}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.014106203s ago: executing program 9 (id=6844): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)={@val={0xa}, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x3, 0x1, 0x2}, {0x8100, 0x5}}, {@ipv6={0x86dd, @tcp={0x3, 0x6, "97aca7", 0x15, 0x6, 0x0, @empty, @mcast1, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x401, 0x0, 0x800}, {"84"}}}}}}}}, 0x57) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xeca874b}], 0x1, 0x60012060, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1a600, 0x0) signalfd(r4, &(0x7f0000000140)={[0x100000000]}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@flat=@weak_handle={0x73682a85, 0x100, 0x1}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x2c}, @fda={0x66646185, 0x8, 0xffffffffffffffff, 0xb4}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1040}], 0x0, 0x0, 0x0}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000000)) 2.004056597s ago: executing program 2 (id=6845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='X\x00\x00', 0x3}], 0x1) r1 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000005c0)={0x14, &(0x7f00000004c0)={0x0, 0x4, 0xb6, {0xb6, 0x9, "6555ad922449dedadeecf77e2d0d22bf394ceff51adfdde865467a7a769c68d69bf6ad8f19fc0285bd3da68fe244a5592d06f888c01ab570b200752baaaf67889642544caa54d7d2a0f15913da93aa52df3efb7f4b2e01c50a60e7b1a7da6d36f4f954f8af00cdeedda61458002f7b84322270191fe90d49175568cd62e8a0534b098eb1672ed1c878503db9cb04d715b59215e95ad0f982d16a64e8ffa936dee4ee6fb2ddb9e17b8d834d535db9e0299cfb2809"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000600)={0x20, 0x17, 0xdd, "0a9fab25f08eb3d758c2d23a8bca619d0125d13fd8d27ccd44b054a2d4b0347a58ab21c6c8b453272614ea0ec1873557a123bc1a19a544262c5462360825a167504303d5b27723a9dbb58444b8074d066ea782fb9a8626b967d20fcc46fb1ef92a28237418aff1b764906375a0c383df12e631b61628046dd3aeb55bfb69556466d4188fe87be3fed4a2b477217e3fdae26b84dfe31309943a803dd0667f97f61e587c6c20810e6c689813a95e1a2d8c1a24d20c1b7c5e6b83a124c3ab3f4a5c75f342795e518e6a7fc9426400f0d58fa5685c7a8d3b6f27455694860e"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x0, 0x3, 0x4, 0xffff, 0x7, 0x0, 0x4900, 0x9, 0x6, 0x6, 0x5, 0xd5}}, &(0x7f00000007c0)={0x20, 0x85, 0x4}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0xa}, &(0x7f0000000940)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_usb_connect$cdc_ncm(0x1, 0x10c, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x2, 0x1, 0x3, 0x80, 0x81, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "c504bf0765ef"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x200, 0xb, 0xe}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@obex={0x5, 0x24, 0x15, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x8, 0x8}, @mdlm_detail={0x70, 0x24, 0x13, 0x5, "347c7ffa11da1b3421d491d8ba05fa65e6ca1dd84542e4360ef7ea115203952a78a9ed963329dc50bc344c2d2dc93b20e93ed8ee80e0cdb289852080f9f125821fc9f3d27d589be10ce4692ef802b14692e768e0792476debb05c91d9b65ac954e23a5cfd2fc60189624d582"}, @mbim={0xc, 0x24, 0x1b, 0x2000, 0x2, 0x3, 0x6, 0x4, 0xd}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x4, 0x7, 0x11}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0xa67}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x69, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x60, 0x9, 0x5, 0x5d}}}}}}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x310, 0x80, 0x9, 0x1, 0x40, 0x5}, 0xc4, &(0x7f0000000b80)={0x5, 0xf, 0xc4, 0x5, [@generic={0x7a, 0x10, 0x3, "282c711694612fa04756c2674979f150bd6fe49e394a1fa9062eed6289392b7ee4205e987d6ded2761c8997ba3d50a3e27b33def17b8581a5758871a2eeffa4f137b5f7765bd92236045aa8243befe55c50d5094bdc2666d1e46086524620cf7def4dbb45875b74778d2bbc066e4d87756b5088abe4607"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x3, 0x62, 0xfff}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "8aa818602e7c7d3c98b10aac40873dff"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x2, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x0, 0xf00, 0x9, [0xc00f, 0x3fc0, 0xf, 0x3f0f, 0x3f]}]}, 0x4, [{0xe2, &(0x7f0000000c80)=@string={0xe2, 0x3, "c2ee20fc18de1d49c4e9634758d5ced8d981f089f7d0d672a3752ecfb7d441beb5ab78f5fb79cc9e417e001cce94e18aa028166df6222525b0422ba95c1d45a799e7e547a53cc722f1df508d0ee6a32dfdd74445ed1e47464887ed17382ee8442b00c95b4c7695645a217671d46d07f8cc4158d0d97e68794cd1e4e891104a1437e9ddd58a6f138fcf8901d2b0bc929881ad29beebc915af2df79834f0a489dec266e58afc4a7a74b08c7bda32f4710497b2b6772cd5c4c0bbe5a1972d1ba40d12e907497fe45f1e7b1b573908c4b2a21a1a282ea1acbb83d14786564cb9ed77"}}, {0xf2, &(0x7f0000000d80)=@string={0xf2, 0x3, "838df6b6b94d09f83d27061310bba2b615b03253c6aed343d6088a1ec055c8f6945e3866d30f6591eb8e6c271f4188ae3eabce2099aecadfae2cf701ac3530897ea7e083c3acbd6bfbd11f9694f5af5219bcc6b7d63f1447a98244a16bd49b53190d1feb1c230f3bd00267e741c113565d3a9df7c2393513f4585f947dbb4628e3266867f04fb5db79c16814c2102027f3c9e3828cbcea0fec78421236f3f495bff037c094a4296c03bfff44634b653c4cf02da6b22fceac55f37b90ee46ba7952a88c7b1c4c3ea19a150696d5a05ac13e55bf32bc295e379a98d8497cee67bf01ea1ccc870910044cf22fe81a157816"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x809}}, {0xf, &(0x7f0000000ec0)=@string={0xf, 0x3, "5ac337c9aba2b238595475877c"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000001000)={0x14, &(0x7f0000000f80)={0x0, 0xc, 0x36, {0x36, 0x22, "7579c0b71ebcfb29f41564e970db7c5ef75ae153c6bf4255af3d2f3f9d9f09d7d2b5b34c1cf450186a81f1812705a73e6acca03a"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x44, &(0x7f0000001040)={0x0, 0xe, 0x27, "055ff72e4ff779c8f3717401923afee4b83495a310e20cb8a9e96f0ce4e337d40829d562bd2c35"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xae}, &(0x7f0000001100)={0x20, 0x80, 0x1c, {0xdf1b, 0x1, 0xa, 0x5, 0x6, 0x0, 0xd8, 0xc, 0x1, 0x5, 0x401, 0x2}}, &(0x7f0000001140)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000001180)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000011c0)={0x20, 0x87, 0x2, 0x547}, &(0x7f0000001200)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r3 = syz_usb_connect$midi(0x3, 0xcd, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x9, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0x81, 0x50, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x38, 0x4}], [{{0x9, 0x5, 0x2, 0x2, 0x0, 0xc, 0x80, 0xc9, {0x9, 0x25, 0x1, 0x5, "d02373fee9"}}}, {{0x9, 0x5, 0xf, 0x8, 0xe9d14e256efb8635, 0x8, 0x9, 0x5, {0xb, 0x25, 0x1, 0x7, "15a9071883fd46"}}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x7, 0x7, {0xc, 0x25, 0x1, 0x8, "16c45e7579d60015"}}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0xfd, 0xb2, 0x5, {0x13, 0x25, 0x1, 0xf, "8a135b29a3c4293e4b6dc7969724a1"}}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0xff, 0x7, 0x8, {0xa, 0x25, 0x1, 0x6, "1a693a7bd547"}}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0x8, 0x4, 0x9, {0xb, 0x25, 0x1, 0x7, "5408462f857911"}}}, {{0x9, 0x5, 0x4, 0x4, 0x200, 0x10, 0x5, 0x48, {0x9, 0x25, 0x1, 0x5, "55897ec207"}}}, {{0x9, 0x5, 0x57311519ebb5a11, 0x0, 0x10, 0x4, 0x2, 0x4, {0xa, 0x25, 0x1, 0x6, "8432a6a54fb0"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x7, 0x9a, 0x7, 0x10, 0x8}, 0x6e, &(0x7f0000000180)={0x5, 0xf, 0x6e, 0x1, [@generic={0x69, 0x10, 0xb, "b142335d6d978d153dbc2fd8804ef1867ef2d1080e792cc04288b264e579cf97d6d42be677e967c464c1600e36faf977c1ab2f3a6b6468514535a18c3e1a62fd3cabe5595d401f2e8ecbebfb2b163a584c864a9f8dd21e6594541cfcf61aeed3a28292f447aa"}]}, 0x3, [{0xbb, &(0x7f0000000200)=@string={0xbb, 0x3, "467c7dc21f332f403bf9d347347f554d82efd1d63d9aedeafa9bd89390b0906eede2afa5961069a8881825790a1af41a54dc77d6ded49a777ca9adcc91744bbb42ff51089ff45b6c30fd735012c380cea0b28538f59f334a614ea28a78294afec9605d339ac80cb1c5eb4a01c2f59908939739fa4379a118f9efd650a84cdb7bda919f38d95fc0de382d5a38d208521d16e8fe035aac431c39a29c19267eb096072578b6c3fc3760db8fcfcdc5734cd32d89cd7217b6449f17"}}, {0x8f, &(0x7f00000002c0)=@string={0x8f, 0x3, "37f448262af6d3d54516df5dfc20f17f486207b0610183adf79721d0d95c1baf708ddc8dccc27bc4c52a5283285a744345522a617502175082449bdaab125e69a7aff519daba096acf99d4459a00a69f87a370e073be334d25be439c659d977172cbc2141986f5778ac0c2a9ee1a89897cd136d165fbfe834312da5cb362e4fc20bdd5eae941121083f4122566"}}, {0x4d, &(0x7f0000000380)=@string={0x4d, 0x3, "a1822c73beb1bf2e76e4e599470e2e00d06ee80aec010d3d0fcaa328f05c6c252f74d6a0938c6c62179300768398e23e6df5c3b4eb8d0389a827920b400782886d5450cc10401eeb7b2352"}}]}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.811420223s ago: executing program 9 (id=6846): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009"], 0x0) 1.678658087s ago: executing program 3 (id=6847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 1.403427988s ago: executing program 3 (id=6848): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000340)={0x28, 0x7, 0x0, r1, 0x1c, 0x7, 0x7f}) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0xf000, 0x1}, 0xe) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) r4 = syz_usb_connect(0x4, 0x36, &(0x7f0000000680)=ANY=[], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac2(r4, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x15, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0x22fe0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42544, 0x1) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x40084149, &(0x7f0000000080)) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x40, 0xe, 0xb6, "c21e7facad7c5739195fe26568d447e2bb8b70012dc7eb44720ade28ef8aa93f8fddc3e6b922c5b51d01e5701cb2ec074fd87c43d50c523db306c42a04000000f4bc839b70b5533f1c6a0f8df55221b7912fc3feb250082054787953a076a1a25d14e20f1f461a410de7da411bcf5c7f8cbfe2d3aace3df2df3b02c449501c94d2cd11bc9ca30fa910a80ad2d3230ff0fc73b796f4a2732719e24259872725cf7170c9bf9dd81ae23359a864f5bcf5e82b05c4ec4c6a"}, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = dup(r7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xfffa}, 0x90) sendmsg$inet6(r7, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x1, @loopback, 0xc}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) close_range(r2, 0xffffffffffffffff, 0x0) 490.829091ms ago: executing program 9 (id=6849): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r2 = syz_open_pts(r1, 0x2100) fcntl$setstatus(r2, 0x4, 0x102800) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 390.689516ms ago: executing program 9 (id=6850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (fail_nth: 2) 15.49088ms ago: executing program 9 (id=6851): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000020000000010000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4008010) r2 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000006c0)={r3, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x57ff]}}) preadv2(r2, &(0x7f0000001880)=[{&(0x7f0000000040)=""/239, 0xef}, {&(0x7f0000000140)=""/149, 0xfffffd42}, {0x0}], 0x3, 0x8, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x20, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x10) 0s ago: executing program 1 (id=6852): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="26a4ad812ad4eefe34ed61b90f71b5002c4c2a50d10022b4abca01ab12f2ff66ed37a9a6b6d62f39aa6bda82e0eef2ffa695c125a18ca80fedcd4b02351213"], 0x310) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000b0101000000000000000003000008080003400000000105000100000000000800024000000005080003"], 0x4c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0xfa, 0x81, 0x8, 0x27, 0x2d, 0xb8, 0x5, 0x8, 0x9, 0x7, 0x3, 0xa, 0x6, 0xe}, 0xe) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000077e5fe4bdc6c90f230fef31b35a44cf5000000000000000000000000003c3400000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="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", 0x2b3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef", 0xb6}, {&(0x7f0000000140)="23b8ce44711f1e6f1e1059b58dfd6c1fbae9ca50cec9126827230a4b25a750120f30aab739c810d8424df34e6d1579255bc8ad160b61d2f336d7a823faad5de6204d45b9b5afde1391", 0x49}, {&(0x7f0000000ac0)="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", 0xabe}], 0x4, 0x0, 0x0, 0x4880}], 0x1, 0x150) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xffffffffffffffe9, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000cc80)={0x3d8, 0x0, 0x3ff, [{{0x5, 0x3, 0x2, 0x5, 0x9, 0x4, {0x3, 0x9, 0x80000001, 0x5, 0x5, 0xfffffffffffffff7, 0x3, 0x6, 0xc2f, 0x2000, 0xc, r10, r11, 0x101}}, {0x1, 0x5, 0x5, 0x7f, 'fuse\x00'}}, {{0x3, 0x1, 0x8, 0x963, 0x6, 0x3, {0x1, 0x0, 0x80000001, 0x80, 0xf, 0x401, 0x2, 0x4344, 0x6, 0x8000, 0x5, 0x0, r11, 0x640, 0x100}}, {0x3, 0x10001, 0x1, 0x5, ']'}}, {{0x0, 0x0, 0x5, 0x2, 0x4df, 0x7, {0x0, 0xfffffffffffffffc, 0x9, 0xe9, 0x2, 0xe, 0x2, 0xfffffffd, 0xa, 0x1000, 0x3, r10, r11, 0x4, 0x7}}, {0x3, 0x7, 0x2, 0x3, '}\''}}, {{0x1, 0x2, 0x308, 0x6, 0x9, 0x8, {0x4, 0x5, 0x3, 0x8, 0xa0, 0x7, 0x8, 0x6, 0x7fff, 0x6000, 0x80000000, r10, 0x0, 0x3, 0x8000}}, {0x0, 0xf6, 0x2, 0xa, '{['}}, {{0x2, 0x3, 0x1, 0x50, 0xa6, 0xfffffffe, {0x1, 0x1, 0x6, 0x1, 0x693, 0x275, 0x6, 0x3ff, 0x6, 0x8000, 0x8, r10, r11, 0xf, 0xfffffffe}}, {0x1, 0x7, 0xa, 0x0, '/dev/fuse\x00'}}, {{0x2, 0x1, 0x7, 0x8, 0x7, 0xc866, {0x1, 0x400, 0x5d, 0x5, 0x2, 0x1, 0x80000001, 0x2, 0x7, 0x1000, 0x9, 0x0, r11, 0x80, 0x1}}, {0x4, 0x0, 0x1, 0x184, '\x00'}}]}, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, r11}, 0xc) kernel console output (not intermixed with test programs): e number 66 using dummy_hcd [ 1509.613189][T24128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.613254][T24128] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1509.613282][T24128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.620664][T24128] usb 4-1: config 0 descriptor?? [ 1509.688057][T24128] pwc: Askey VC010 type 2 USB webcam detected. [ 1509.795195][T26104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.810205][T26104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.810532][T26104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.887266][T24128] pwc: send_video_command error -71 [ 1509.887288][T24128] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1509.887420][T24128] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1509.914241][T24128] usb 4-1: USB disconnect, device number 66 [ 1510.056564][T26108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6532'. [ 1510.161852][T26112] ufs: You didn't specify the type of your ufs filesystem [ 1510.161852][T26112] [ 1510.161852][T26112] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1510.161852][T26112] [ 1510.161852][T26112] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1510.161988][T26112] ufs: ufstype=old is supported read-only [ 1510.328410][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1510.328543][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1510.401319][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1510.401716][ T10] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1510.562044][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1510.609757][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.609822][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1510.609847][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.673110][ T9] usb 4-1: config 0 descriptor?? [ 1510.684710][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.684743][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1510.728956][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1510.728991][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1510.729014][ T10] usb 10-1: Product: syz [ 1510.729030][ T10] usb 10-1: Manufacturer: syz [ 1510.729046][ T10] usb 10-1: SerialNumber: syz [ 1510.729986][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1510.945332][ T10] usb 10-1: 0:2 : does not exist [ 1511.109625][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1511.110914][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1511.143209][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1511.161409][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1511.168721][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1511.187225][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1511.187954][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1511.188916][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1511.189659][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1511.205754][ T10] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1511.406422][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1511.406925][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1511.407460][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1511.407965][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1511.408691][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1511.409192][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1511.766167][ T10] usb 10-1: USB disconnect, device number 23 [ 1511.832227][ T9] pwc: Registered as video103. [ 1511.864531][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input89 [ 1512.096162][ T9] usb 4-1: USB disconnect, device number 67 [ 1512.615817][T26128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.798169][T25732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.798448][T25732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1512.806434][ T10] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1512.969910][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1512.970551][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 1512.971823][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.971851][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1512.974588][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1512.974620][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.974643][ T10] usb 3-1: Product: syz [ 1512.974664][ T10] usb 3-1: Manufacturer: syz [ 1512.974676][ T10] usb 3-1: SerialNumber: syz [ 1512.978263][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1513.081060][ T10] usb 3-1: selecting invalid altsetting 1 [ 1513.081750][ T10] usb 3-1: unit 6 not found! [ 1513.163502][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1513.215610][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1513.236387][T16396] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1513.237994][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1513.238226][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1513.238459][ T9] usb 4-1: Product: syz [ 1513.238512][ T9] usb 4-1: Manufacturer: syz [ 1513.238701][ T9] usb 4-1: SerialNumber: syz [ 1513.303099][ T9] usb 4-1: config 0 descriptor?? [ 1513.305947][T26124] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1513.392144][ T9] chaoskey 4-1:0.0: Unable to register with hwrng [ 1513.397921][T16396] usb 10-1: Using ep0 maxpacket: 16 [ 1513.410986][T16396] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.411026][T16396] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1513.411074][T16396] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1513.411103][T16396] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.525418][T16396] usb 10-1: config 0 descriptor?? [ 1513.603287][T24128] usb 4-1: USB disconnect, device number 68 [ 1513.718059][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1513.724528][ T10] usb 3-1: USB disconnect, device number 90 [ 1513.863787][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.980079][T16396] microsoft 0003:045E:07DA.005E: ignoring exceeding usage max [ 1514.036402][T16396] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.005E/input/input90 [ 1514.361163][T26145] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1514.538611][T24128] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1514.582527][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1514.603920][T16396] microsoft 0003:045E:07DA.005E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1514.710702][T24128] usb 2-1: Using ep0 maxpacket: 16 [ 1514.734321][T24128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.734378][T24128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1514.769017][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.769457][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1514.804513][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1514.804550][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1514.804573][ T9] usb 4-1: SerialNumber: syz [ 1514.811147][T24128] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1514.811251][T24128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1514.811275][T24128] usb 2-1: Product: syz [ 1514.811316][T24128] usb 2-1: Manufacturer: syz [ 1514.811360][T24128] usb 2-1: SerialNumber: syz [ 1514.899529][ T5703] usb 10-1: USB disconnect, device number 24 [ 1514.964609][ T9] cdc_ether 4-1:1.0: GUID doesn't match [ 1515.018667][T24128] usb 2-1: 0:2 : does not exist [ 1515.194699][ T9] usb 4-1: USB disconnect, device number 69 [ 1515.268755][T24128] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1515.291016][T26150] FAULT_INJECTION: forcing a failure. [ 1515.291016][T26150] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.291052][T26150] CPU: 0 UID: 0 PID: 26150 Comm: syz.9.6547 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1515.291079][T26150] Tainted: [L]=SOFTLOCKUP [ 1515.291087][T26150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1515.291098][T26150] Call Trace: [ 1515.291106][T26150] [ 1515.291114][T26150] dump_stack_lvl+0xe8/0x150 [ 1515.291145][T26150] should_fail_ex+0x46b/0x600 [ 1515.291177][T26150] should_failslab+0xa8/0x100 [ 1515.291206][T26150] __kmalloc_noprof+0xdf/0x7b0 [ 1515.291230][T26150] ? tomoyo_encode+0x28b/0x550 [ 1515.291256][T26150] tomoyo_encode+0x28b/0x550 [ 1515.291282][T26150] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1515.291307][T26150] ? tomoyo_domain+0xd7/0x130 [ 1515.291333][T26150] ? tomoyo_path_number_perm+0x219/0x630 [ 1515.291362][T26150] tomoyo_path_number_perm+0x246/0x630 [ 1515.291394][T26150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1515.291423][T26150] ? __lock_acquire+0x6b5/0x2d10 [ 1515.291448][T26150] ? do_raw_spin_lock+0x12b/0x2f0 [ 1515.291493][T26150] ? __fget_files+0x2a/0x420 [ 1515.291518][T26150] ? __fget_files+0x2a/0x420 [ 1515.291538][T26150] ? __fget_files+0x3a6/0x420 [ 1515.291559][T26150] ? __fget_files+0x2a/0x420 [ 1515.291584][T26150] security_file_ioctl+0xc3/0x2a0 [ 1515.291614][T26150] __se_sys_ioctl+0x47/0x170 [ 1515.291642][T26150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.291663][T26150] do_syscall_64+0x174/0x580 [ 1515.291691][T26150] ? trace_irq_disable+0x3b/0x140 [ 1515.291726][T26150] ? clear_bhb_loop+0x40/0x90 [ 1515.291749][T26150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.291768][T26150] RIP: 0033:0x7f23be18ce59 [ 1515.291786][T26150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.291811][T26150] RSP: 002b:00007f23bc3bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.291831][T26150] RAX: ffffffffffffffda RBX: 00007f23be406090 RCX: 00007f23be18ce59 [ 1515.291846][T26150] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1515.291858][T26150] RBP: 00007f23bc3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.291870][T26150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.291882][T26150] R13: 00007f23be406128 R14: 00007f23be406090 R15: 00007fff247f27e8 [ 1515.291915][T26150] [ 1515.291954][T26150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1515.697824][T26154] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1515.924292][T24128] usb 2-1: USB disconnect, device number 38 [ 1516.012372][T26162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.051075][T25783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.053802][T25783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.137232][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.547690][T16396] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1516.660959][T26181] FAULT_INJECTION: forcing a failure. [ 1516.660959][T26181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.661001][T26181] CPU: 0 UID: 0 PID: 26181 Comm: syz.1.6557 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1516.661033][T26181] Tainted: [L]=SOFTLOCKUP [ 1516.661043][T26181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1516.661059][T26181] Call Trace: [ 1516.661068][T26181] [ 1516.661079][T26181] dump_stack_lvl+0xe8/0x150 [ 1516.661114][T26181] should_fail_ex+0x46b/0x600 [ 1516.661163][T26181] _copy_from_iter+0x1d3/0x1670 [ 1516.661186][T26181] ? aa_file_perm+0x192/0x15f0 [ 1516.661223][T26181] ? __pfx__copy_from_iter+0x10/0x10 [ 1516.661250][T26181] ? __pfx_aa_file_perm+0x10/0x10 [ 1516.661282][T26181] ? iov_iter_advance+0x8b/0x1c0 [ 1516.661308][T26181] vhost_chr_write_iter+0x2aa/0xae0 [ 1516.661341][T26181] ? __lock_acquire+0x6b5/0x2d10 [ 1516.661370][T26181] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 1516.661413][T26181] vfs_write+0x629/0xba0 [ 1516.661456][T26181] ? __pfx_vfs_write+0x10/0x10 [ 1516.661498][T26181] ? __fget_files+0x2a/0x420 [ 1516.661536][T26181] ksys_write+0x156/0x270 [ 1516.661571][T26181] ? __pfx_ksys_write+0x10/0x10 [ 1516.661616][T26181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.661642][T26181] do_syscall_64+0x174/0x580 [ 1516.661678][T26181] ? trace_irq_disable+0x3b/0x140 [ 1516.661704][T26181] ? clear_bhb_loop+0x40/0x90 [ 1516.661732][T26181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.661757][T26181] RIP: 0033:0x7ff73062ce59 [ 1516.661780][T26181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.661802][T26181] RSP: 002b:00007ff72e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1516.661827][T26181] RAX: ffffffffffffffda RBX: 00007ff7308a5fa0 RCX: 00007ff73062ce59 [ 1516.661844][T26181] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 1516.661860][T26181] RBP: 00007ff72e87e090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.661876][T26181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.661891][T26181] R13: 00007ff7308a6038 R14: 00007ff7308a5fa0 R15: 00007ffd112f2728 [ 1516.661926][T26181] [ 1516.788791][T16396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1516.811484][T16396] usb 4-1: not running at top speed; connect to a high speed hub [ 1516.846455][T16396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.846491][T16396] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1516.958816][T16396] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1516.958854][T16396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.958878][T16396] usb 4-1: Product: syz [ 1516.958895][T16396] usb 4-1: Manufacturer: syz [ 1516.958913][T16396] usb 4-1: SerialNumber: syz [ 1517.026593][T26186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.037514][T16396] usb 4-1: selecting invalid altsetting 1 [ 1517.038218][T16396] usb 4-1: unit 6 not found! [ 1517.072555][T26184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.072762][T26184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.538728][T16396] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1517.554910][T16396] usb 4-1: USB disconnect, device number 70 [ 1517.634149][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.755697][ T825] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1517.959633][ T825] usb 2-1: Using ep0 maxpacket: 16 [ 1517.972434][ T825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.972468][ T825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1518.008919][ T825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1518.008956][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1518.008979][ T825] usb 2-1: Product: syz [ 1518.008997][ T825] usb 2-1: Manufacturer: syz [ 1518.009014][ T825] usb 2-1: SerialNumber: syz [ 1518.060529][ T825] usb 2-1: 0:2 : does not exist [ 1518.301834][ T825] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1518.400611][ T825] usb 2-1: USB disconnect, device number 39 [ 1518.623716][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1518.882938][T26225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.903872][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.910520][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.444611][ T825] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1519.488553][T26241] FAULT_INJECTION: forcing a failure. [ 1519.488553][T26241] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.488589][T26241] CPU: 1 UID: 0 PID: 26241 Comm: syz.1.6576 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1519.488616][T26241] Tainted: [L]=SOFTLOCKUP [ 1519.488623][T26241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1519.488637][T26241] Call Trace: [ 1519.488644][T26241] [ 1519.488653][T26241] dump_stack_lvl+0xe8/0x150 [ 1519.488682][T26241] should_fail_ex+0x46b/0x600 [ 1519.488715][T26241] should_failslab+0xa8/0x100 [ 1519.488742][T26241] __kmalloc_noprof+0xdf/0x7b0 [ 1519.488764][T26241] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1519.488787][T26241] ? alloc_pipe_info+0x1fc/0x4d0 [ 1519.488814][T26241] ? alloc_pipe_info+0xe8/0x4d0 [ 1519.488845][T26241] alloc_pipe_info+0x1fc/0x4d0 [ 1519.488876][T26241] splice_direct_to_actor+0xa19/0xc80 [ 1519.488906][T26241] ? kstrtouint+0x6e/0xe0 [ 1519.488934][T26241] ? __pfx_direct_splice_actor+0x10/0x10 [ 1519.488967][T26241] ? __pfx_aa_file_perm+0x10/0x10 [ 1519.488991][T26241] ? __lock_acquire+0x6b5/0x2d10 [ 1519.489014][T26241] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1519.489049][T26241] do_splice_direct+0x19b/0x2a0 [ 1519.489080][T26241] ? __pfx_do_splice_direct+0x10/0x10 [ 1519.489109][T26241] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1519.489147][T26241] ? rw_verify_area+0x25b/0x4e0 [ 1519.489182][T26241] do_sendfile+0x547/0x7e0 [ 1519.489203][T26241] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1519.489237][T26241] ? __pfx_do_sendfile+0x10/0x10 [ 1519.489266][T26241] __se_sys_sendfile64+0x144/0x1a0 [ 1519.489286][T26241] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1519.489311][T26241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.489331][T26241] do_syscall_64+0x174/0x580 [ 1519.489357][T26241] ? trace_irq_disable+0x3b/0x140 [ 1519.489377][T26241] ? clear_bhb_loop+0x40/0x90 [ 1519.489399][T26241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.489417][T26241] RIP: 0033:0x7ff73062ce59 [ 1519.489434][T26241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.489450][T26241] RSP: 002b:00007ff72e87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1519.489479][T26241] RAX: ffffffffffffffda RBX: 00007ff7308a5fa0 RCX: 00007ff73062ce59 [ 1519.489493][T26241] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1519.489503][T26241] RBP: 00007ff72e87e090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.489515][T26241] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1519.489526][T26241] R13: 00007ff7308a6038 R14: 00007ff7308a5fa0 R15: 00007ffd112f2728 [ 1519.489552][T26241] [ 1519.784896][ T825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1519.789454][ T825] usb 4-1: not running at top speed; connect to a high speed hub [ 1519.791196][ T825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.791224][ T825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1519.821871][ T825] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1519.821907][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.821931][ T825] usb 4-1: Product: syz [ 1519.821947][ T825] usb 4-1: Manufacturer: syz [ 1519.821963][ T825] usb 4-1: SerialNumber: syz [ 1519.880464][ T825] usb 4-1: selecting invalid altsetting 1 [ 1519.881325][ T825] usb 4-1: unit 6 not found! [ 1519.974012][ T825] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1520.099474][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1520.200775][T26244] /dev/nullb0: Can't open blockdev [ 1520.358993][ T825] usb 4-1: USB disconnect, device number 71 [ 1520.535965][T26256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.550122][T25783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.586120][T25783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.683064][T26259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6584'. [ 1520.722745][T16396] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1520.876992][T16396] usb 10-1: Using ep0 maxpacket: 16 [ 1520.879277][T16396] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.879307][T16396] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1520.881811][T16396] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1520.881843][T16396] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1520.881872][T16396] usb 10-1: Product: syz [ 1520.881884][T16396] usb 10-1: Manufacturer: syz [ 1520.881896][T16396] usb 10-1: SerialNumber: syz [ 1520.959050][T16396] usb 10-1: 0:2 : does not exist [ 1521.018864][T24128] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1521.157639][T16396] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1521.284259][T24128] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1521.284294][T24128] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1521.284324][T24128] usb 3-1: Product: syz [ 1521.284341][T24128] usb 3-1: SerialNumber: syz [ 1521.307315][T24128] usb 3-1: config 0 descriptor?? [ 1521.340114][T24128] hso 3-1:0.0: Not our interface [ 1521.381121][T16396] usb 10-1: USB disconnect, device number 25 [ 1521.456872][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1521.543054][ T9] usb 3-1: USB disconnect, device number 91 [ 1522.063616][T26279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.077944][T25732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.079196][T25732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.360490][T26288] input: syz1 as /devices/virtual/input/input91 [ 1522.482879][T26293] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1522.544451][ T9] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1522.555633][T26295] FAULT_INJECTION: forcing a failure. [ 1522.555633][T26295] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.555739][T26295] CPU: 1 UID: 0 PID: 26295 Comm: syz.9.6597 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1522.555835][T26295] Tainted: [L]=SOFTLOCKUP [ 1522.555858][T26295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1522.555902][T26295] Call Trace: [ 1522.555931][T26295] [ 1522.555955][T26295] dump_stack_lvl+0xe8/0x150 [ 1522.556053][T26295] should_fail_ex+0x46b/0x600 [ 1522.556171][T26295] should_failslab+0xa8/0x100 [ 1522.556257][T26295] __kmalloc_noprof+0xdf/0x7b0 [ 1522.556330][T26295] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 1522.556408][T26295] ? alloc_pipe_info+0x1fc/0x4d0 [ 1522.556531][T26295] ? alloc_pipe_info+0xe8/0x4d0 [ 1522.556623][T26295] alloc_pipe_info+0x1fc/0x4d0 [ 1522.556704][T26295] splice_direct_to_actor+0xa19/0xc80 [ 1522.556755][T26295] ? kstrtouint+0x6e/0xe0 [ 1522.556789][T26295] ? __pfx_direct_splice_actor+0x10/0x10 [ 1522.556900][T26295] ? __pfx_aa_file_perm+0x10/0x10 [ 1522.556977][T26295] ? __lock_acquire+0x6b5/0x2d10 [ 1522.557052][T26295] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1522.557151][T26295] do_splice_direct+0x19b/0x2a0 [ 1522.557245][T26295] ? __pfx_do_splice_direct+0x10/0x10 [ 1522.557323][T26295] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1522.557422][T26295] ? rw_verify_area+0x25b/0x4e0 [ 1522.557517][T26295] do_sendfile+0x547/0x7e0 [ 1522.557580][T26295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1522.557692][T26295] ? __pfx_do_sendfile+0x10/0x10 [ 1522.557796][T26295] __se_sys_sendfile64+0x144/0x1a0 [ 1522.557863][T26295] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1522.557945][T26295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.558018][T26295] do_syscall_64+0x174/0x580 [ 1522.558131][T26295] ? trace_irq_disable+0x3b/0x140 [ 1522.558226][T26295] ? clear_bhb_loop+0x40/0x90 [ 1522.558289][T26295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.558342][T26295] RIP: 0033:0x7f23be18ce59 [ 1522.558383][T26295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.558420][T26295] RSP: 002b:00007f23bc3bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1522.558479][T26295] RAX: ffffffffffffffda RBX: 00007f23be406090 RCX: 00007f23be18ce59 [ 1522.558541][T26295] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1522.558636][T26295] RBP: 00007f23bc3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.558668][T26295] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1522.558695][T26295] R13: 00007f23be406128 R14: 00007f23be406090 R15: 00007fff247f27e8 [ 1522.558785][T26295] [ 1522.972590][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1522.973154][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1522.974434][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.974464][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1522.978137][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1522.978169][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.978193][ T9] usb 4-1: Product: syz [ 1522.978210][ T9] usb 4-1: Manufacturer: syz [ 1522.978231][ T9] usb 4-1: SerialNumber: syz [ 1523.143635][ T9] usb 4-1: selecting invalid altsetting 1 [ 1523.144517][ T9] usb 4-1: unit 6 not found! [ 1523.274476][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1523.584504][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1523.689414][ T9] usb 4-1: USB disconnect, device number 72 [ 1523.805820][ T5703] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1523.891696][T26313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.912394][T17178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.916261][T17178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.992810][ T5703] usb 10-1: Using ep0 maxpacket: 16 [ 1524.014813][ T5703] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.014850][ T5703] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1524.022264][ T5703] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1524.022360][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1524.022417][ T5703] usb 10-1: Product: syz [ 1524.022474][ T5703] usb 10-1: Manufacturer: syz [ 1524.022530][ T5703] usb 10-1: SerialNumber: syz [ 1524.108914][T26315] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1524.111033][ T5703] usb 10-1: 0:2 : does not exist [ 1524.396138][ T5703] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1524.611751][T26315] /dev/nullb0: Can't open blockdev [ 1524.809527][ T5703] usb 10-1: USB disconnect, device number 26 [ 1525.065937][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1525.074415][T26329] usb usb7: usbfs: process 26329 (syz.3.6607) did not claim interface 0 before use [ 1525.114508][T26328] Set syz1 is full, maxelem 14 reached [ 1525.142010][T24128] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1525.317340][T24128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.317408][T24128] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1525.317428][T24128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.371269][T24128] usb 3-1: config 0 descriptor?? [ 1525.406488][T24128] pwc: Askey VC010 type 2 USB webcam detected. [ 1525.609508][T24128] pwc: send_video_command error -71 [ 1525.609538][T24128] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1525.609649][T24128] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1525.704146][T24128] usb 3-1: USB disconnect, device number 92 [ 1525.817245][T26341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.890216][ T9] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 1526.004378][T25746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.006289][T25746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.053970][ T9] usb 2-1: config 0 has no interfaces? [ 1526.179785][T24128] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1526.232478][ T825] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1526.317711][T24128] usb 3-1: device descriptor read/64, error -71 [ 1526.347620][T26347] syzkaller1: entered promiscuous mode [ 1526.347656][T26347] syzkaller1: entered allmulticast mode [ 1526.398821][ T825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1526.400397][ T825] usb 4-1: not running at top speed; connect to a high speed hub [ 1526.403455][ T825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.403486][ T825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1526.461755][ T825] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1526.461864][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.461890][ T825] usb 4-1: Product: syz [ 1526.461907][ T825] usb 4-1: Manufacturer: syz [ 1526.461925][ T825] usb 4-1: SerialNumber: syz [ 1526.528719][ T825] usb 4-1: selecting invalid altsetting 1 [ 1526.530466][ T825] usb 4-1: unit 6 not found! [ 1526.595840][T24128] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1526.705896][ T825] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1526.746560][T24128] usb 3-1: device descriptor read/64, error -71 [ 1526.864941][T24128] usb usb3-port1: attempt power cycle [ 1526.994516][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.262128][ T825] usb 4-1: USB disconnect, device number 73 [ 1527.388197][T24128] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1527.415122][T24128] usb 3-1: device descriptor read/8, error -71 [ 1527.686166][T24128] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1527.708477][T24128] usb 3-1: device descriptor read/8, error -71 [ 1527.713494][T26353] syzkaller1: entered promiscuous mode [ 1527.713542][T26353] syzkaller1: entered allmulticast mode [ 1527.733353][T26353] FAULT_INJECTION: forcing a failure. [ 1527.733353][T26353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.733462][T26353] CPU: 1 UID: 0 PID: 26353 Comm: syz.9.6615 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1527.733504][T26353] Tainted: [L]=SOFTLOCKUP [ 1527.733513][T26353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1527.733528][T26353] Call Trace: [ 1527.733567][T26353] [ 1527.733597][T26353] dump_stack_lvl+0xe8/0x150 [ 1527.733660][T26353] should_fail_ex+0x46b/0x600 [ 1527.733724][T26353] _copy_from_iter+0x1d3/0x1670 [ 1527.733801][T26353] ? __lock_acquire+0x6b5/0x2d10 [ 1527.733843][T26353] ? __pfx__copy_from_iter+0x10/0x10 [ 1527.733898][T26353] tun_get_user+0x6c6/0x4450 [ 1527.734001][T26353] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1527.734031][T26353] ? reacquire_held_locks+0x80/0x190 [ 1527.734103][T26353] ? rt_spin_lock+0x1e0/0x400 [ 1527.734161][T26353] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1527.734204][T26353] ? __pfx_tun_get_user+0x10/0x10 [ 1527.734291][T26353] ? rt_spin_unlock+0x14f/0x200 [ 1527.734338][T26353] ? rt_spin_unlock+0x160/0x200 [ 1527.734370][T26353] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 1527.734487][T26353] ? ref_tracker_alloc+0x332/0x4a0 [ 1527.734529][T26353] ? tun_get+0x157/0x2f0 [ 1527.734590][T26353] ? vfs_write+0x629/0xba0 [ 1527.734664][T26353] ? ksys_write+0x156/0x270 [ 1527.734698][T26353] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1527.734787][T26353] ? tun_get+0x1c/0x2f0 [ 1527.734855][T26353] ? tun_get+0x1c/0x2f0 [ 1527.734928][T26353] ? tun_get+0x1c/0x2f0 [ 1527.735009][T26353] tun_chr_write_iter+0x119/0x210 [ 1527.735108][T26353] vfs_write+0x629/0xba0 [ 1527.735189][T26353] ? __pfx_vfs_write+0x10/0x10 [ 1527.735241][T26353] ? __fget_files+0x2a/0x420 [ 1527.735342][T26353] ksys_write+0x156/0x270 [ 1527.735379][T26353] ? __pfx_ksys_write+0x10/0x10 [ 1527.735468][T26353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.735515][T26353] do_syscall_64+0x174/0x580 [ 1527.735554][T26353] ? clear_bhb_loop+0x40/0x90 [ 1527.735623][T26353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.735675][T26353] RIP: 0033:0x7f23be18ce59 [ 1527.735700][T26353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.735729][T26353] RSP: 002b:00007f23bc3de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1527.735763][T26353] RAX: ffffffffffffffda RBX: 00007f23be405fa0 RCX: 00007f23be18ce59 [ 1527.735816][T26353] RDX: 000000000000fdef RSI: 0000200000001440 RDI: 0000000000000003 [ 1527.735847][T26353] RBP: 00007f23bc3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.735863][T26353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.735878][T26353] R13: 00007f23be406038 R14: 00007f23be405fa0 R15: 00007fff247f27e8 [ 1527.735936][T26353] [ 1527.828707][T24128] usb usb3-port1: unable to enumerate USB device [ 1528.510371][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1528.510410][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.552387][ T9] usb 2-1: config 0 descriptor?? [ 1528.557945][ T9] usb 2-1: can't set config #0, error -71 [ 1528.571495][ T9] usb 2-1: USB disconnect, device number 40 [ 1528.594676][T16396] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1528.754929][T16396] usb 4-1: Using ep0 maxpacket: 16 [ 1528.757886][T16396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1528.757918][T16396] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1528.764706][T16396] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1528.764742][T16396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1528.764768][T16396] usb 4-1: Product: syz [ 1528.764785][T16396] usb 4-1: Manufacturer: syz [ 1528.764812][T16396] usb 4-1: SerialNumber: syz [ 1528.890688][T16396] usb 4-1: 0:2 : does not exist [ 1529.116238][T16396] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1529.184219][T16396] usb 4-1: USB disconnect, device number 74 [ 1529.278669][T16692] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1529.306187][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1529.450017][T16692] usb 10-1: Using ep0 maxpacket: 8 [ 1529.460447][T16692] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1529.460481][T16692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.460505][T16692] usb 10-1: Product: syz [ 1529.460521][T16692] usb 10-1: Manufacturer: syz [ 1529.460551][T16692] usb 10-1: SerialNumber: syz [ 1529.486166][T16692] usb 10-1: config 0 descriptor?? [ 1529.737434][T16692] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1529.917636][T26367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.993628][T26363] xt_limit: Overflow, try lower: 324384747/4200216962 [ 1530.073513][T17183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.075529][T17183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.096725][T26370] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6622'. [ 1530.097329][T26370] vxcan0: entered promiscuous mode [ 1530.604259][ T825] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1530.769501][ T825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1530.770149][ T825] usb 4-1: not running at top speed; connect to a high speed hub [ 1530.771610][ T825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.771638][ T825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1530.816282][ T825] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1530.816320][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.816345][ T825] usb 4-1: Product: syz [ 1530.816363][ T825] usb 4-1: Manufacturer: syz [ 1530.816381][ T825] usb 4-1: SerialNumber: syz [ 1530.879295][ T5703] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 1530.915048][ T825] usb 4-1: selecting invalid altsetting 1 [ 1530.915933][ T825] usb 4-1: unit 6 not found! [ 1530.989250][ T825] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1531.067350][ T5703] usb 2-1: config 0 has no interfaces? [ 1531.107637][T23195] udevd[23195]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1531.429758][T23818] usb 4-1: USB disconnect, device number 75 [ 1531.918474][T16692] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1531.927353][T16692] dvbdev: DVB: registering new adapter (Terratec H7) [ 1531.928039][T16692] usb 10-1: media controller created [ 1532.421507][T26363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.422770][T26363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.881245][ T825] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1532.999165][T26387] syzkaller1: entered promiscuous mode [ 1532.999197][T26387] syzkaller1: entered allmulticast mode [ 1533.041336][ T825] usb 4-1: Using ep0 maxpacket: 16 [ 1533.044004][ T825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.044035][ T825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1533.047190][ T825] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1533.047224][ T825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1533.047247][ T825] usb 4-1: Product: syz [ 1533.047264][ T825] usb 4-1: Manufacturer: syz [ 1533.047282][ T825] usb 4-1: SerialNumber: syz [ 1533.179400][ T825] usb 4-1: 0:2 : does not exist [ 1533.396818][ T825] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1533.430898][T16692] usb read operation failed. (-71) [ 1533.482917][T16692] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1533.544232][ T825] usb 4-1: USB disconnect, device number 76 [ 1533.546647][T16692] usb 10-1: USB disconnect, device number 27 [ 1533.698193][T23195] udevd[23195]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.820105][ T5703] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1533.820142][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.886762][ T5703] usb 2-1: config 0 descriptor?? [ 1533.890957][ T5703] usb 2-1: can't set config #0, error -71 [ 1533.920372][ T5703] usb 2-1: USB disconnect, device number 41 [ 1533.959649][T26389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.984267][T26389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.984433][T26389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.474014][ T5703] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1534.650078][ T5703] usb 2-1: config 144 has no interfaces? [ 1534.650124][ T5703] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1534.650150][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.124424][ T5703] usb 2-1: string descriptor 0 read error: -71 [ 1535.160139][ T5703] usb 2-1: USB disconnect, device number 42 [ 1535.396317][T23818] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1535.424589][T26409] FAULT_INJECTION: forcing a failure. [ 1535.424589][T26409] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.424619][T26409] CPU: 0 UID: 0 PID: 26409 Comm: syz.3.6637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1535.424643][T26409] Tainted: [L]=SOFTLOCKUP [ 1535.424650][T26409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1535.424661][T26409] Call Trace: [ 1535.424667][T26409] [ 1535.424674][T26409] dump_stack_lvl+0xe8/0x150 [ 1535.424700][T26409] should_fail_ex+0x46b/0x600 [ 1535.424729][T26409] should_failslab+0xa8/0x100 [ 1535.424753][T26409] __kmalloc_noprof+0xdf/0x7b0 [ 1535.424774][T26409] ? tomoyo_encode+0x28b/0x550 [ 1535.424801][T26409] tomoyo_encode+0x28b/0x550 [ 1535.424860][T26409] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1535.424890][T26409] ? tomoyo_domain+0xd7/0x130 [ 1535.424922][T26409] ? tomoyo_path_number_perm+0x219/0x630 [ 1535.424959][T26409] tomoyo_path_number_perm+0x246/0x630 [ 1535.424997][T26409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1535.425033][T26409] ? __lock_acquire+0x6b5/0x2d10 [ 1535.425063][T26409] ? do_raw_spin_lock+0x12b/0x2f0 [ 1535.425122][T26409] ? __fget_files+0x2a/0x420 [ 1535.425153][T26409] ? __fget_files+0x2a/0x420 [ 1535.425180][T26409] ? __fget_files+0x3a6/0x420 [ 1535.425213][T26409] ? __fget_files+0x2a/0x420 [ 1535.425246][T26409] security_file_ioctl+0xc3/0x2a0 [ 1535.425282][T26409] __se_sys_ioctl+0x47/0x170 [ 1535.425316][T26409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.425351][T26409] do_syscall_64+0x174/0x580 [ 1535.425377][T26409] ? trace_irq_disable+0x3b/0x140 [ 1535.425396][T26409] ? clear_bhb_loop+0x40/0x90 [ 1535.425417][T26409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.425433][T26409] RIP: 0033:0x7fd87cb0ce59 [ 1535.425449][T26409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.425464][T26409] RSP: 002b:00007fd87ad5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1535.425481][T26409] RAX: ffffffffffffffda RBX: 00007fd87cd85fa0 RCX: 00007fd87cb0ce59 [ 1535.425494][T26409] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 1535.425504][T26409] RBP: 00007fd87ad5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.425515][T26409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.425525][T26409] R13: 00007fd87cd86038 R14: 00007fd87cd85fa0 R15: 00007ffdebf2bda8 [ 1535.425550][T26409] [ 1535.435925][T26409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1535.683849][T23818] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1535.704379][T23818] usb 3-1: not running at top speed; connect to a high speed hub [ 1535.706006][T23818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.706032][T23818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1535.708149][T23818] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1535.708176][T23818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.708197][T23818] usb 3-1: Product: syz [ 1535.708210][T23818] usb 3-1: Manufacturer: syz [ 1535.708224][T23818] usb 3-1: SerialNumber: syz [ 1535.787746][T23818] usb 3-1: selecting invalid altsetting 1 [ 1535.794944][T23818] usb 3-1: unit 6 not found! [ 1535.899788][T23818] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1536.026622][T26417] FAULT_INJECTION: forcing a failure. [ 1536.026622][T26417] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.026663][T26417] CPU: 1 UID: 0 PID: 26417 Comm: syz.3.6641 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1536.026697][T26417] Tainted: [L]=SOFTLOCKUP [ 1536.026707][T26417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1536.026722][T26417] Call Trace: [ 1536.026731][T26417] [ 1536.026742][T26417] dump_stack_lvl+0xe8/0x150 [ 1536.026781][T26417] should_fail_ex+0x46b/0x600 [ 1536.026824][T26417] should_failslab+0xa8/0x100 [ 1536.026858][T26417] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1536.026888][T26417] ? __alloc_skb+0x1d0/0x7d0 [ 1536.026919][T26417] ? lockdep_hardirqs_on+0x7a/0x110 [ 1536.026961][T26417] __alloc_skb+0x1d0/0x7d0 [ 1536.027000][T26417] netlink_sendmsg+0x5d4/0xb40 [ 1536.027034][T26417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.027060][T26417] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1536.027096][T26417] ? aa_sock_msg_perm+0x122/0x200 [ 1536.027124][T26417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.027147][T26417] sock_sendmsg_nosec+0x13a/0x180 [ 1536.027179][T26417] ____sys_sendmsg+0x55c/0x870 [ 1536.027224][T26417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.027278][T26417] ? import_iovec+0x73/0xa0 [ 1536.027320][T26417] ___sys_sendmsg+0x2a5/0x360 [ 1536.027363][T26417] ? __lock_acquire+0x6b5/0x2d10 [ 1536.027398][T26417] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.027473][T26417] ? __fget_files+0x2a/0x420 [ 1536.027502][T26417] ? __fget_files+0x3a6/0x420 [ 1536.027541][T26417] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1536.027583][T26417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1536.027632][T26417] ? __pfx_ksys_write+0x10/0x10 [ 1536.027676][T26417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.027703][T26417] do_syscall_64+0x174/0x580 [ 1536.027739][T26417] ? trace_irq_disable+0x3b/0x140 [ 1536.027767][T26417] ? clear_bhb_loop+0x40/0x90 [ 1536.027797][T26417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.027823][T26417] RIP: 0033:0x7fd87cb0ce59 [ 1536.027845][T26417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.027866][T26417] RSP: 002b:00007fd87ad5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.027891][T26417] RAX: ffffffffffffffda RBX: 00007fd87cd85fa0 RCX: 00007fd87cb0ce59 [ 1536.027909][T26417] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1536.027925][T26417] RBP: 00007fd87ad5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.027939][T26417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.027954][T26417] R13: 00007fd87cd86038 R14: 00007fd87cd85fa0 R15: 00007ffdebf2bda8 [ 1536.027995][T26417] [ 1536.208126][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1536.470637][T26416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.529005][T25737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.529203][T25737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.666449][T26430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6644'. [ 1536.793286][ T825] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1536.855427][T16397] usb 3-1: USB disconnect, device number 97 [ 1536.969716][ T825] usb 2-1: config 0 has no interfaces? [ 1537.519744][T26440] netlink: 'syz.2.6646': attribute type 12 has an invalid length. [ 1538.151747][T16692] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1538.168098][T26443] nvme_fabrics: missing parameter 'transport=%s' [ 1538.168118][T26443] nvme_fabrics: missing parameter 'nqn=%s' [ 1538.321980][T16692] usb 3-1: Using ep0 maxpacket: 8 [ 1538.324408][T16692] usb 3-1: config 0 has no interfaces? [ 1538.372540][T16692] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1538.372577][T16692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.372602][T16692] usb 3-1: Product: syz [ 1538.372621][T16692] usb 3-1: Manufacturer: syz [ 1538.372648][T16692] usb 3-1: SerialNumber: syz [ 1538.442394][T16692] usb 3-1: config 0 descriptor?? [ 1538.676882][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.678588][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.696441][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.697859][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.745996][T26440] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6646'. [ 1538.758652][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.759415][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.786096][T16396] usb 3-1: USB disconnect, device number 98 [ 1539.144342][T26461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.181794][T25736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.183882][T25736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.247157][ T825] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1539.247191][ T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.319251][ T825] usb 2-1: config 0 descriptor?? [ 1539.320735][ T825] usb 2-1: can't set config #0, error -71 [ 1539.342347][ T825] usb 2-1: USB disconnect, device number 43 [ 1539.717615][T26469] FAULT_INJECTION: forcing a failure. [ 1539.717615][T26469] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.717654][T26469] CPU: 1 UID: 0 PID: 26469 Comm: syz.9.6652 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1539.717682][T26469] Tainted: [L]=SOFTLOCKUP [ 1539.717690][T26469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1539.717703][T26469] Call Trace: [ 1539.717711][T26469] [ 1539.717719][T26469] dump_stack_lvl+0xe8/0x150 [ 1539.717750][T26469] should_fail_ex+0x46b/0x600 [ 1539.717784][T26469] should_failslab+0xa8/0x100 [ 1539.717813][T26469] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1539.717837][T26469] ? __alloc_skb+0x1d0/0x7d0 [ 1539.717864][T26469] ? lockdep_hardirqs_on+0x7a/0x110 [ 1539.717899][T26469] __alloc_skb+0x1d0/0x7d0 [ 1539.717931][T26469] netlink_sendmsg+0x5d4/0xb40 [ 1539.717960][T26469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1539.717981][T26469] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1539.718012][T26469] ? aa_sock_msg_perm+0x122/0x200 [ 1539.718047][T26469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1539.718066][T26469] sock_sendmsg_nosec+0x13a/0x180 [ 1539.718094][T26469] ____sys_sendmsg+0x55c/0x870 [ 1539.718131][T26469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1539.718168][T26469] ? import_iovec+0x73/0xa0 [ 1539.718194][T26469] ___sys_sendmsg+0x2a5/0x360 [ 1539.718223][T26469] ? __lock_acquire+0x6b5/0x2d10 [ 1539.718250][T26469] ? __pfx____sys_sendmsg+0x10/0x10 [ 1539.718314][T26469] ? __fget_files+0x2a/0x420 [ 1539.718338][T26469] ? __fget_files+0x3a6/0x420 [ 1539.718368][T26469] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1539.718401][T26469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1539.718447][T26469] ? __pfx_ksys_write+0x10/0x10 [ 1539.718482][T26469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.718504][T26469] do_syscall_64+0x174/0x580 [ 1539.718537][T26469] ? trace_irq_disable+0x3b/0x140 [ 1539.718570][T26469] ? clear_bhb_loop+0x40/0x90 [ 1539.718597][T26469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.718616][T26469] RIP: 0033:0x7f23be18ce59 [ 1539.718635][T26469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.718652][T26469] RSP: 002b:00007f23bc3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1539.718673][T26469] RAX: ffffffffffffffda RBX: 00007f23be405fa0 RCX: 00007f23be18ce59 [ 1539.718687][T26469] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000004 [ 1539.718699][T26469] RBP: 00007f23bc3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1539.718711][T26469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.718722][T26469] R13: 00007f23be406038 R14: 00007f23be405fa0 R15: 00007fff247f27e8 [ 1539.718749][T26469] [ 1540.430866][T16396] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1540.568255][T26486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.590265][T11162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.590589][T11162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.612358][T16396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1540.613088][T16396] usb 4-1: not running at top speed; connect to a high speed hub [ 1540.614966][T16396] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.614996][T16396] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1540.618572][T16396] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1540.618606][T16396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.618629][T16396] usb 4-1: Product: syz [ 1540.618645][T16396] usb 4-1: Manufacturer: syz [ 1540.618660][T16396] usb 4-1: SerialNumber: syz [ 1540.727668][T16396] usb 4-1: selecting invalid altsetting 1 [ 1540.728948][T16396] usb 4-1: unit 6 not found! [ 1540.836213][T16396] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1540.917543][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1541.015560][ T37] audit: type=1326 audit(4347.108:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26491 comm="syz.2.6662" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f1bc5ce59 code=0x0 [ 1541.015630][ T37] audit: type=1326 audit(4347.108:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26491 comm="syz.2.6662" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f1bc5ce59 code=0x0 [ 1541.171424][T16396] usb 4-1: USB disconnect, device number 77 [ 1541.678410][ T5703] usb 10-1: new low-speed USB device number 28 using dummy_hcd [ 1541.852697][ T5703] usb 10-1: config 0 has no interfaces? [ 1542.176214][T16692] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1542.309026][ T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1542.330577][T16692] usb 2-1: Using ep0 maxpacket: 16 [ 1542.333465][T16692] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.333496][T16692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1542.336883][T16692] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1542.336913][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1542.336974][T16692] usb 2-1: Product: syz [ 1542.336987][T16692] usb 2-1: Manufacturer: syz [ 1542.336998][T16692] usb 2-1: SerialNumber: syz [ 1542.479561][T16692] usb 2-1: 0:2 : does not exist [ 1542.493951][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.494022][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1542.494054][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1542.494085][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1542.494110][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1542.497278][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1542.497313][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1542.497342][ T9] usb 4-1: Product: syz [ 1542.497360][ T9] usb 4-1: Manufacturer: syz [ 1542.497377][ T9] usb 4-1: SerialNumber: syz [ 1542.590465][ T9] usb 4-1: config 0 descriptor?? [ 1542.690211][T16692] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1542.814541][ T9] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1542.814573][ T9] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1543.060777][ T9] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1543.060806][ T9] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1543.061074][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1543.171506][ T9] usb 4-1: USB disconnect, device number 78 [ 1543.435684][T16692] usb 2-1: USB disconnect, device number 44 [ 1543.551084][T26511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.646309][T25783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.646484][T25783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.092023][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.667918][ T5703] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1544.667956][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.723516][ T5703] usb 10-1: config 0 descriptor?? [ 1544.725357][ T5703] usb 10-1: can't set config #0, error -71 [ 1544.754527][ T5703] usb 10-1: USB disconnect, device number 28 [ 1545.155120][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6676'. [ 1545.157925][T26528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6676'. [ 1545.157963][T26528] netlink: 'syz.1.6676': attribute type 3 has an invalid length. [ 1545.303793][ T5703] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1545.365213][T26532] pimreg9: entered allmulticast mode [ 1545.526759][T16692] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1545.553303][ T5703] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1545.554009][ T5703] usb 10-1: not running at top speed; connect to a high speed hub [ 1545.555483][ T5703] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.555513][ T5703] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.558006][ T5703] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1545.558055][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.558110][ T5703] usb 10-1: Product: syz [ 1545.558128][ T5703] usb 10-1: Manufacturer: syz [ 1545.558145][ T5703] usb 10-1: SerialNumber: syz [ 1545.788470][ T5703] usb 10-1: selecting invalid altsetting 1 [ 1545.789095][ T5703] usb 10-1: unit 6 not found! [ 1545.816688][T16692] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1545.816734][T16692] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1545.816764][T16692] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1545.820521][T16692] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1545.820572][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.820595][T16692] usb 2-1: Product: syz [ 1545.820611][T16692] usb 2-1: Manufacturer: syz [ 1545.820627][T16692] usb 2-1: SerialNumber: syz [ 1545.836771][T16692] usb 2-1: config 0 descriptor?? [ 1545.853648][T26528] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1545.853759][T26528] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1545.942907][T16692] usb 2-1: ucan: probing device on interface #0 [ 1545.987312][T26535] FAULT_INJECTION: forcing a failure. [ 1545.987312][T26535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.987344][T26535] CPU: 1 UID: 0 PID: 26535 Comm: syz.3.6678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1545.987373][T26535] Tainted: [L]=SOFTLOCKUP [ 1545.987380][T26535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1545.987391][T26535] Call Trace: [ 1545.987398][T26535] [ 1545.987406][T26535] dump_stack_lvl+0xe8/0x150 [ 1545.987433][T26535] should_fail_ex+0x46b/0x600 [ 1545.987472][T26535] _copy_from_user+0x2d/0xb0 [ 1545.987492][T26535] ip_set_mcast_msfilter+0x15a/0x3f0 [ 1545.987523][T26535] do_ip_setsockopt+0x1a27/0x2ea0 [ 1545.987554][T26535] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1545.987579][T26535] ? aa_sk_perm+0x703/0x950 [ 1545.987597][T26535] ? __fget_files+0x2a/0x420 [ 1545.987621][T26535] ? __pfx_aa_sk_perm+0x10/0x10 [ 1545.987684][T26535] ? aa_sock_opt_perm+0x131/0x1f0 [ 1545.987718][T26535] ip_setsockopt+0x66/0x110 [ 1545.987742][T26535] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1545.987766][T26535] do_sock_setsockopt+0x17c/0x1b0 [ 1545.987795][T26535] __x64_sys_setsockopt+0x143/0x1b0 [ 1545.987822][T26535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.987840][T26535] do_syscall_64+0x174/0x580 [ 1545.987871][T26535] ? trace_irq_disable+0x3b/0x140 [ 1545.987890][T26535] ? clear_bhb_loop+0x40/0x90 [ 1545.987910][T26535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.987927][T26535] RIP: 0033:0x7fd87cb0ce59 [ 1545.987942][T26535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.987963][T26535] RSP: 002b:00007fd87ad5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1545.987981][T26535] RAX: ffffffffffffffda RBX: 00007fd87cd85fa0 RCX: 00007fd87cb0ce59 [ 1545.987994][T26535] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 1545.988005][T26535] RBP: 00007fd87ad5e090 R08: 0000000000000110 R09: 0000000000000000 [ 1545.988015][T26535] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000001 [ 1545.988026][T26535] R13: 00007fd87cd86038 R14: 00007fd87cd85fa0 R15: 00007ffdebf2bda8 [ 1545.988052][T26535] [ 1546.524868][T26539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.556910][T17183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.557296][T17183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.794791][ T5703] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1546.801984][ T5703] usb 10-1: USB disconnect, device number 29 [ 1546.846469][T16692] ucan 2-1:0.0 can0: registered device [ 1546.921574][T16692] ucan 2-1:0.0 can0: firmware string: âvk´< [ 1546.944776][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1547.097844][T16396] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 1547.159474][T26552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.166834][T26552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.260788][T16396] usb 4-1: config 0 has no interfaces? [ 1547.395949][T26552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.407864][ T825] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1547.414313][T26552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.605019][ T825] usb 10-1: Using ep0 maxpacket: 32 [ 1547.841471][ T825] usb 10-1: device descriptor read/all, error -71 [ 1548.527318][ T5269] ucan 2-1:0.0 can0: bit-timing not yet defined [ 1548.710913][T16692] usb 2-1: USB disconnect, device number 45 [ 1548.724200][ T5269] ucan 2-1:0.0 can0: could not stop device, code: -71 [ 1548.724350][ T5269] ucan 2-1:0.0 can0: could not reset device, code: -19 [ 1549.221942][T26587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.249543][T26589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.255369][T26589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.366054][T26595] 9p: Bad value for 'wfdno' [ 1549.892172][ T9] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1550.129282][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1550.130681][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1550.167551][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.167584][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1550.196096][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1550.196205][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.196230][ T9] usb 2-1: Product: syz [ 1550.196247][ T9] usb 2-1: Manufacturer: syz [ 1550.196265][ T9] usb 2-1: SerialNumber: syz [ 1550.430306][ T9] usb 2-1: selecting invalid altsetting 1 [ 1550.432032][ T9] usb 2-1: unit 6 not found! [ 1550.556878][T16396] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1550.556912][T16396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.654905][T16396] usb 4-1: config 0 descriptor?? [ 1550.656912][T16396] usb 4-1: can't set config #0, error -71 [ 1550.779461][T16396] usb 4-1: USB disconnect, device number 79 [ 1550.832852][T26616] binder: 26614:26616 ioctl c0306201 200000000080 returned -14 [ 1550.834822][T26616] binder: 26614:26616 ioctl c0306201 2000000003c0 returned -14 [ 1550.964533][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1550.976243][ T9] usb 2-1: USB disconnect, device number 46 [ 1551.004190][T26616] veth0_to_team: entered promiscuous mode [ 1551.068889][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1551.769362][T23818] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1551.811931][T16692] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1551.876011][ T5703] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 1551.941224][T23818] usb 2-1: Using ep0 maxpacket: 8 [ 1551.943766][T23818] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 1551.943806][T23818] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1551.943838][T23818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.943866][T23818] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1551.943890][T23818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.949134][T23818] usb 2-1: config 0 descriptor?? [ 1551.961479][T16692] usb 4-1: device descriptor read/64, error -71 [ 1552.093161][ T5703] usb 3-1: config 0 has no interfaces? [ 1552.230807][T16692] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1552.378964][T16692] usb 4-1: device descriptor read/64, error -71 [ 1552.422816][T26633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.427332][T26633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.459977][T23818] usbhid 2-1:0.0: can't add hid device: -71 [ 1552.460803][T23818] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1552.492154][T23818] usb 2-1: USB disconnect, device number 47 [ 1552.507310][T16692] usb usb4-port1: attempt power cycle [ 1552.894762][T16692] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1552.914147][T16692] usb 4-1: device descriptor read/8, error -71 [ 1552.917607][T26648] syzkaller1: entered promiscuous mode [ 1552.917634][T26648] syzkaller1: entered allmulticast mode [ 1552.920139][T26648] FAULT_INJECTION: forcing a failure. [ 1552.920139][T26648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1552.920179][T26648] CPU: 0 UID: 0 PID: 26648 Comm: syz.9.6705 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1552.920210][T26648] Tainted: [L]=SOFTLOCKUP [ 1552.920221][T26648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1552.920237][T26648] Call Trace: [ 1552.920244][T26648] [ 1552.920251][T26648] dump_stack_lvl+0xe8/0x150 [ 1552.920302][T26648] should_fail_ex+0x46b/0x600 [ 1552.920345][T26648] _copy_from_user+0x2d/0xb0 [ 1552.920373][T26648] kstrtouint_from_user+0xd6/0x180 [ 1552.920413][T26648] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1552.920460][T26648] proc_fail_nth_write+0x8e/0x210 [ 1552.920504][T26648] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1552.920540][T26648] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1552.920569][T26648] vfs_write+0x2a3/0xba0 [ 1552.920612][T26648] ? __pfx_vfs_write+0x10/0x10 [ 1552.920638][T26648] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1552.920689][T26648] ? lockdep_hardirqs_on+0x7a/0x110 [ 1552.920724][T26648] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1552.920758][T26648] ? mutex_lock_nested+0x152/0x1d0 [ 1552.920786][T26648] ? fdget_pos+0x252/0x320 [ 1552.920812][T26648] ksys_write+0x156/0x270 [ 1552.920862][T26648] ? __pfx_ksys_write+0x10/0x10 [ 1552.920906][T26648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.920931][T26648] do_syscall_64+0x174/0x580 [ 1552.920969][T26648] ? trace_irq_disable+0x3b/0x140 [ 1552.920988][T26648] ? clear_bhb_loop+0x40/0x90 [ 1552.921030][T26648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.921055][T26648] RIP: 0033:0x7f23be14d68e [ 1552.921077][T26648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1552.921096][T26648] RSP: 002b:00007f23bc3ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1552.921120][T26648] RAX: ffffffffffffffda RBX: 00007f23bc3de6c0 RCX: 00007f23be14d68e [ 1552.921141][T26648] RDX: 0000000000000001 RSI: 00007f23bc3de0a0 RDI: 0000000000000005 [ 1552.921157][T26648] RBP: 00007f23bc3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.921172][T26648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.921186][T26648] R13: 00007f23be406038 R14: 00007f23be405fa0 R15: 00007fff247f27e8 [ 1552.921224][T26648] [ 1553.501372][T26653] syzkaller1: entered promiscuous mode [ 1553.503654][T26653] syzkaller1: entered allmulticast mode [ 1553.544901][T16692] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1553.571450][T16692] usb 4-1: device descriptor read/8, error -71 [ 1553.683179][T16692] usb usb4-port1: unable to enumerate USB device [ 1554.687833][T16692] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1554.866483][T16692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1554.873602][ T5703] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1554.873706][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.876293][T16692] usb 2-1: not running at top speed; connect to a high speed hub [ 1554.890966][T16692] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.890999][T16692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1554.934601][T16692] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1554.934636][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.934660][T16692] usb 2-1: Product: syz [ 1554.934677][T16692] usb 2-1: Manufacturer: syz [ 1554.934693][T16692] usb 2-1: SerialNumber: syz [ 1555.001760][ T5703] usb 3-1: config 0 descriptor?? [ 1555.002901][ T5703] usb 3-1: can't set config #0, error -71 [ 1555.035655][ T5703] usb 3-1: USB disconnect, device number 99 [ 1555.083081][T16692] usb 2-1: selecting invalid altsetting 1 [ 1555.084075][T16692] usb 2-1: unit 6 not found! [ 1555.220368][T16692] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1555.284796][T16396] usb 2-1: USB disconnect, device number 48 [ 1555.296597][ T9] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1555.348126][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1555.423362][T26672] FAULT_INJECTION: forcing a failure. [ 1555.423362][T26672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.423407][T26672] CPU: 0 UID: 0 PID: 26672 Comm: syz.9.6713 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1555.423440][T26672] Tainted: [L]=SOFTLOCKUP [ 1555.423450][T26672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1555.423466][T26672] Call Trace: [ 1555.423476][T26672] [ 1555.423487][T26672] dump_stack_lvl+0xe8/0x150 [ 1555.423520][T26672] should_fail_ex+0x46b/0x600 [ 1555.423561][T26672] _copy_from_iter+0x1d3/0x1670 [ 1555.423583][T26672] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1555.423619][T26672] ? lockdep_hardirqs_on+0x7a/0x110 [ 1555.423664][T26672] ? __pfx__copy_from_iter+0x10/0x10 [ 1555.423695][T26672] ? __rcu_read_unlock+0x83/0xe0 [ 1555.423728][T26672] packet_sendmsg+0x2e26/0x4fd0 [ 1555.423755][T26672] ? aa_label_sk_perm+0x532/0x6e0 [ 1555.423786][T26672] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1555.423811][T26672] ? __lock_acquire+0x6b5/0x2d10 [ 1555.423845][T26672] ? __lock_acquire+0x6b5/0x2d10 [ 1555.423885][T26672] ? __pfx_packet_sendmsg+0x10/0x10 [ 1555.423914][T26672] ? aa_sk_perm+0x703/0x950 [ 1555.423945][T26672] ? __pfx_aa_sk_perm+0x10/0x10 [ 1555.423966][T26672] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1555.423999][T26672] ? aa_sock_msg_perm+0x122/0x200 [ 1555.424026][T26672] ? __pfx_packet_sendmsg+0x10/0x10 [ 1555.424051][T26672] sock_sendmsg_nosec+0x13a/0x180 [ 1555.424100][T26672] __sys_sendto+0x402/0x590 [ 1555.424139][T26672] ? __pfx___sys_sendto+0x10/0x10 [ 1555.424196][T26672] ? ksys_write+0x248/0x270 [ 1555.424232][T26672] ? __pfx_ksys_write+0x10/0x10 [ 1555.424270][T26672] __x64_sys_sendto+0xde/0x100 [ 1555.424303][T26672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.424328][T26672] do_syscall_64+0x174/0x580 [ 1555.424371][T26672] ? trace_irq_disable+0x3b/0x140 [ 1555.424399][T26672] ? clear_bhb_loop+0x40/0x90 [ 1555.424428][T26672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.424452][T26672] RIP: 0033:0x7f23be18ce59 [ 1555.424474][T26672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.424495][T26672] RSP: 002b:00007f23bc3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1555.424524][T26672] RAX: ffffffffffffffda RBX: 00007f23be405fa0 RCX: 00007f23be18ce59 [ 1555.424542][T26672] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1555.424557][T26672] RBP: 00007f23bc3de090 R08: 0000200000000140 R09: 0000000000000014 [ 1555.424573][T26672] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1555.424588][T26672] R13: 00007f23be406038 R14: 00007f23be405fa0 R15: 00007fff247f27e8 [ 1555.424623][T26672] [ 1555.668673][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.668710][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1555.774321][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1555.774374][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.774398][ T9] usb 4-1: Product: syz [ 1555.774415][ T9] usb 4-1: Manufacturer: syz [ 1555.774433][ T9] usb 4-1: SerialNumber: syz [ 1555.824821][ T9] usb 4-1: config 0 descriptor?? [ 1556.037587][T26675] syzkaller1: left promiscuous mode [ 1556.046531][T26675] syzkaller1: left allmulticast mode [ 1556.149800][T26681] program syz.9.6715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1556.173433][T26684] binder: 26674:26684 ioctl c0306201 200000000080 returned -14 [ 1556.181317][T26684] binder: BINDER_SET_CONTEXT_MGR already set [ 1556.181330][T26684] binder: 26674:26684 ioctl 4018620d 2000000001c0 returned -16 [ 1556.181772][T26684] binder: 26674:26684 ioctl c0306201 2000000003c0 returned -14 [ 1556.304419][T26687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1556.310510][T26687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1556.435276][ T9] usb 4-1: USB disconnect, device number 84 [ 1556.644363][T26698] FAULT_INJECTION: forcing a failure. [ 1556.644363][T26698] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.644393][T26698] CPU: 0 UID: 0 PID: 26698 Comm: syz.9.6718 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1556.644417][T26698] Tainted: [L]=SOFTLOCKUP [ 1556.644424][T26698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1556.644435][T26698] Call Trace: [ 1556.644441][T26698] [ 1556.644448][T26698] dump_stack_lvl+0xe8/0x150 [ 1556.644473][T26698] should_fail_ex+0x46b/0x600 [ 1556.644501][T26698] should_failslab+0xa8/0x100 [ 1556.644524][T26698] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1556.644545][T26698] ? __alloc_skb+0x1d0/0x7d0 [ 1556.644567][T26698] ? lockdep_hardirqs_on+0x7a/0x110 [ 1556.644596][T26698] __alloc_skb+0x1d0/0x7d0 [ 1556.644619][T26698] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1556.644646][T26698] netlink_sendmsg+0x5d4/0xb40 [ 1556.644668][T26698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1556.644687][T26698] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1556.644712][T26698] ? ktime_get+0x45/0x220 [ 1556.644728][T26698] ? lock_acquire+0x106/0x350 [ 1556.644747][T26698] ? aa_sock_msg_perm+0x122/0x200 [ 1556.644768][T26698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1556.644783][T26698] sock_sendmsg_nosec+0x13a/0x180 [ 1556.644805][T26698] ____sys_sendmsg+0x55c/0x870 [ 1556.644836][T26698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1556.644868][T26698] ? import_iovec+0x73/0xa0 [ 1556.644890][T26698] ___sys_sendmsg+0x2a5/0x360 [ 1556.644915][T26698] ? __lock_acquire+0x6b5/0x2d10 [ 1556.644937][T26698] ? __pfx____sys_sendmsg+0x10/0x10 [ 1556.644987][T26698] ? __fget_files+0x2a/0x420 [ 1556.645006][T26698] ? __fget_files+0x3a6/0x420 [ 1556.645032][T26698] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1556.645060][T26698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1556.645093][T26698] ? __pfx_ksys_write+0x10/0x10 [ 1556.645122][T26698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.645141][T26698] do_syscall_64+0x174/0x580 [ 1556.645165][T26698] ? trace_irq_disable+0x3b/0x140 [ 1556.645184][T26698] ? clear_bhb_loop+0x40/0x90 [ 1556.645203][T26698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.645245][T26698] RIP: 0033:0x7f23be18ce59 [ 1556.645275][T26698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1556.645296][T26698] RSP: 002b:00007f23bc3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1556.645322][T26698] RAX: ffffffffffffffda RBX: 00007f23be405fa0 RCX: 00007f23be18ce59 [ 1556.645340][T26698] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000004 [ 1556.645361][T26698] RBP: 00007f23bc3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.645372][T26698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.645382][T26698] R13: 00007f23be406038 R14: 00007f23be405fa0 R15: 00007fff247f27e8 [ 1556.645407][T26698] [ 1556.669109][T26679] veth0_to_team: entered promiscuous mode [ 1557.388688][ T5703] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1557.445250][T16397] usb 10-1: new low-speed USB device number 32 using dummy_hcd [ 1557.520148][T24128] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1557.530674][ T5703] usb 3-1: device descriptor read/64, error -71 [ 1557.618846][T16397] usb 10-1: config 0 has no interfaces? [ 1557.624177][T16397] usb 10-1: string descriptor 0 read error: -22 [ 1557.624344][T16397] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1557.624374][T16397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.661885][T16397] usb 10-1: config 0 descriptor?? [ 1557.682970][T24128] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1557.683602][T24128] usb 2-1: not running at top speed; connect to a high speed hub [ 1557.684860][T24128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.684888][T24128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1557.687369][T24128] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1557.687399][T24128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.687425][T24128] usb 2-1: Product: syz [ 1557.687436][T24128] usb 2-1: Manufacturer: syz [ 1557.687448][T24128] usb 2-1: SerialNumber: syz [ 1557.771989][T24128] usb 2-1: selecting invalid altsetting 1 [ 1557.774366][T24128] usb 2-1: unit 6 not found! [ 1557.797938][ T5703] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1557.865912][T24128] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1557.947561][ T5703] usb 3-1: device descriptor read/64, error -71 [ 1557.949775][T24128] usb 10-1: USB disconnect, device number 32 [ 1558.153416][ T5703] usb usb3-port1: attempt power cycle [ 1558.156595][T16692] usb 2-1: USB disconnect, device number 49 [ 1558.191897][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1558.524887][ T5703] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1558.597180][ T5703] usb 3-1: device descriptor read/8, error -71 [ 1558.867470][ T5703] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1558.890555][ T5703] usb 3-1: device descriptor read/8, error -71 [ 1559.023118][ T5703] usb usb3-port1: unable to enumerate USB device [ 1559.915107][ T5703] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1559.960417][T26728] FAULT_INJECTION: forcing a failure. [ 1559.960417][T26728] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.960468][T26728] CPU: 0 UID: 0 PID: 26728 Comm: syz.1.6731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1559.960502][T26728] Tainted: [L]=SOFTLOCKUP [ 1559.960512][T26728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1559.960529][T26728] Call Trace: [ 1559.960540][T26728] [ 1559.960552][T26728] dump_stack_lvl+0xe8/0x150 [ 1559.960589][T26728] should_fail_ex+0x46b/0x600 [ 1559.960632][T26728] should_failslab+0xa8/0x100 [ 1559.960668][T26728] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1559.960697][T26728] ? __alloc_skb+0x1d0/0x7d0 [ 1559.960728][T26728] ? lockdep_hardirqs_on+0x7a/0x110 [ 1559.960770][T26728] __alloc_skb+0x1d0/0x7d0 [ 1559.960808][T26728] netlink_sendmsg+0x5d4/0xb40 [ 1559.960843][T26728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.960868][T26728] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1559.960908][T26728] ? aa_sock_msg_perm+0x122/0x200 [ 1559.960934][T26728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.960957][T26728] sock_sendmsg_nosec+0x13a/0x180 [ 1559.960989][T26728] ____sys_sendmsg+0x55c/0x870 [ 1559.961046][T26728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1559.961091][T26728] ? import_iovec+0x73/0xa0 [ 1559.961122][T26728] ___sys_sendmsg+0x2a5/0x360 [ 1559.961156][T26728] ? __lock_acquire+0x6b5/0x2d10 [ 1559.961190][T26728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1559.961264][T26728] ? __fget_files+0x2a/0x420 [ 1559.961292][T26728] ? __fget_files+0x3a6/0x420 [ 1559.961331][T26728] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1559.961371][T26728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1559.961419][T26728] ? __pfx_ksys_write+0x10/0x10 [ 1559.961462][T26728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.961489][T26728] do_syscall_64+0x174/0x580 [ 1559.961524][T26728] ? trace_irq_disable+0x3b/0x140 [ 1559.961553][T26728] ? clear_bhb_loop+0x40/0x90 [ 1559.961582][T26728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.961608][T26728] RIP: 0033:0x7ff73062ce59 [ 1559.961630][T26728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.961652][T26728] RSP: 002b:00007ff72e87e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.961678][T26728] RAX: ffffffffffffffda RBX: 00007ff7308a5fa0 RCX: 00007ff73062ce59 [ 1559.961696][T26728] RDX: 0000000004000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1559.961713][T26728] RBP: 00007ff72e87e090 R08: 0000000000000000 R09: 0000000000000000 [ 1559.961729][T26728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1559.961745][T26728] R13: 00007ff7308a6038 R14: 00007ff7308a5fa0 R15: 00007ffd112f2728 [ 1559.961782][T26728] [ 1560.224253][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 1560.264324][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.264363][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.264407][ T5703] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1560.264432][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.315224][ T5703] usb 4-1: config 0 descriptor?? [ 1560.774166][T26739] binder: 26735:26739 ioctl c0306201 200000000080 returned -14 [ 1560.799066][T26739] binder: 26735:26739 ioctl c0306201 2000000003c0 returned -14 [ 1560.812315][T24128] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1560.820792][ T5703] koneplus 0003:1E7D:2D51.005F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 1560.976003][T24128] usb 2-1: Using ep0 maxpacket: 32 [ 1560.996967][T24128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.996998][T24128] usb 2-1: config 0 has no interfaces? [ 1561.001542][T24128] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1561.001578][T24128] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1561.001603][T24128] usb 2-1: Product: syz [ 1561.001621][T24128] usb 2-1: Manufacturer: syz [ 1561.001638][T24128] usb 2-1: SerialNumber: syz [ 1561.076967][T24128] usb 2-1: config 0 descriptor?? [ 1561.223305][T26739] veth0_to_team: entered promiscuous mode [ 1561.327268][ T5703] usb 2-1: USB disconnect, device number 50 [ 1561.384773][T26747] FAULT_INJECTION: forcing a failure. [ 1561.384773][T26747] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.384817][T26747] CPU: 1 UID: 0 PID: 26747 Comm: syz.2.6736 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1561.384860][T26747] Tainted: [L]=SOFTLOCKUP [ 1561.384869][T26747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1561.384885][T26747] Call Trace: [ 1561.384895][T26747] [ 1561.384905][T26747] dump_stack_lvl+0xe8/0x150 [ 1561.384950][T26747] should_fail_ex+0x46b/0x600 [ 1561.384992][T26747] should_failslab+0xa8/0x100 [ 1561.385026][T26747] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1561.385055][T26747] ? __alloc_skb+0x1d0/0x7d0 [ 1561.385086][T26747] ? lockdep_hardirqs_on+0x7a/0x110 [ 1561.385127][T26747] __alloc_skb+0x1d0/0x7d0 [ 1561.385166][T26747] netlink_sendmsg+0x5d4/0xb40 [ 1561.385200][T26747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.385226][T26747] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1561.385262][T26747] ? aa_sock_msg_perm+0x122/0x200 [ 1561.385288][T26747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.385309][T26747] sock_sendmsg_nosec+0x13a/0x180 [ 1561.385352][T26747] ____sys_sendmsg+0x55c/0x870 [ 1561.385393][T26747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1561.385441][T26747] ? import_iovec+0x73/0xa0 [ 1561.385470][T26747] ___sys_sendmsg+0x2a5/0x360 [ 1561.385503][T26747] ? __lock_acquire+0x6b5/0x2d10 [ 1561.385534][T26747] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.385607][T26747] ? __fget_files+0x2a/0x420 [ 1561.385635][T26747] ? __fget_files+0x3a6/0x420 [ 1561.385673][T26747] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1561.385712][T26747] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1561.385758][T26747] ? __pfx_ksys_write+0x10/0x10 [ 1561.385805][T26747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.385831][T26747] do_syscall_64+0x174/0x580 [ 1561.385865][T26747] ? trace_irq_disable+0x3b/0x140 [ 1561.385891][T26747] ? clear_bhb_loop+0x40/0x90 [ 1561.385920][T26747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.385943][T26747] RIP: 0033:0x7f5f1bc5ce59 [ 1561.385964][T26747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.385986][T26747] RSP: 002b:00007f5f19eb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.386011][T26747] RAX: ffffffffffffffda RBX: 00007f5f1bed5fa0 RCX: 00007f5f1bc5ce59 [ 1561.386030][T26747] RDX: 0000000004000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1561.386046][T26747] RBP: 00007f5f19eb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.386061][T26747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.386076][T26747] R13: 00007f5f1bed6038 R14: 00007f5f1bed5fa0 R15: 00007fff6d307938 [ 1561.386110][T26747] [ 1561.618324][ T9] usb 10-1: new low-speed USB device number 33 using dummy_hcd [ 1561.890493][ T9] usb 10-1: config 0 has no interfaces? [ 1561.898689][ T9] usb 10-1: string descriptor 0 read error: -22 [ 1561.898843][ T9] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1561.898868][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.908019][ T9] usb 10-1: config 0 descriptor?? [ 1562.154996][ T10] usb 10-1: USB disconnect, device number 33 [ 1562.269797][ T9] usb 4-1: USB disconnect, device number 85 [ 1562.511942][ T5720] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1562.672175][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 1562.674451][ T5720] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1562.674483][ T5720] usb 2-1: config 0 has no interface number 0 [ 1562.677117][ T5720] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1562.677150][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.677173][ T5720] usb 2-1: Product: syz [ 1562.677194][ T5720] usb 2-1: Manufacturer: syz [ 1562.677206][ T5720] usb 2-1: SerialNumber: syz [ 1562.682017][ T5720] usb 2-1: config 0 descriptor?? [ 1562.719144][ T5720] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1562.906669][T26763] FAULT_INJECTION: forcing a failure. [ 1562.906669][T26763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.906716][T26763] CPU: 1 UID: 0 PID: 26763 Comm: syz.9.6742 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1562.906750][T26763] Tainted: [L]=SOFTLOCKUP [ 1562.906760][T26763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1562.906775][T26763] Call Trace: [ 1562.906784][T26763] [ 1562.906795][T26763] dump_stack_lvl+0xe8/0x150 [ 1562.906830][T26763] should_fail_ex+0x46b/0x600 [ 1562.906871][T26763] _copy_to_user+0x31/0xb0 [ 1562.906907][T26763] simple_read_from_buffer+0xe1/0x170 [ 1562.906943][T26763] proc_fail_nth_read+0x1be/0x230 [ 1562.906975][T26763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.907007][T26763] ? rw_verify_area+0x2ac/0x4e0 [ 1562.907039][T26763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.907070][T26763] vfs_read+0x212/0xa80 [ 1562.907110][T26763] ? __pfx_vfs_read+0x10/0x10 [ 1562.907145][T26763] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1562.907180][T26763] ? lockdep_hardirqs_on+0x7a/0x110 [ 1562.907215][T26763] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1562.907248][T26763] ? mutex_lock_nested+0x152/0x1d0 [ 1562.907274][T26763] ? fdget_pos+0x252/0x320 [ 1562.907310][T26763] ksys_read+0x156/0x270 [ 1562.907345][T26763] ? __pfx_ksys_read+0x10/0x10 [ 1562.907399][T26763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.907431][T26763] do_syscall_64+0x174/0x580 [ 1562.907466][T26763] ? trace_irq_disable+0x3b/0x140 [ 1562.907491][T26763] ? clear_bhb_loop+0x40/0x90 [ 1562.907519][T26763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.907542][T26763] RIP: 0033:0x7f23be14d68e [ 1562.907564][T26763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1562.907591][T26763] RSP: 002b:00007f23bc3bcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1562.907616][T26763] RAX: ffffffffffffffda RBX: 00007f23bc3bd6c0 RCX: 00007f23be14d68e [ 1562.907634][T26763] RDX: 000000000000000f RSI: 00007f23bc3bd0a0 RDI: 0000000000000003 [ 1562.907649][T26763] RBP: 00007f23bc3bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.907665][T26763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.907679][T26763] R13: 00007f23be406128 R14: 00007f23be406090 R15: 00007fff247f27e8 [ 1562.907716][T26763] [ 1563.316634][ T5720] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1563.445065][ T5720] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1563.798543][T26756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.799469][T26756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.874434][T24128] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1565.046145][T24128] usb 4-1: Using ep0 maxpacket: 32 [ 1565.057355][T24128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.057385][T24128] usb 4-1: config 0 has no interfaces? [ 1565.081149][T24128] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1565.081196][T24128] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1565.081284][T24128] usb 4-1: Product: syz [ 1565.081302][T24128] usb 4-1: Manufacturer: syz [ 1565.081320][T24128] usb 4-1: SerialNumber: syz [ 1565.137923][T24128] usb 4-1: config 0 descriptor?? [ 1565.147643][T16396] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1565.304965][T16396] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1565.305790][T16396] usb 3-1: not running at top speed; connect to a high speed hub [ 1565.307596][T16396] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.307625][T16396] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1565.311106][T16396] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1565.311140][T16396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.311172][T16396] usb 3-1: Product: syz [ 1565.311190][T16396] usb 3-1: Manufacturer: syz [ 1565.311203][T16396] usb 3-1: SerialNumber: syz [ 1565.406043][T16396] usb 3-1: selecting invalid altsetting 1 [ 1565.406738][T16396] usb 3-1: unit 6 not found! [ 1565.455760][T24128] usb 4-1: USB disconnect, device number 86 [ 1565.505066][ T10] usb 10-1: new low-speed USB device number 34 using dummy_hcd [ 1565.568537][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1565.574465][ T5720] usb 2-1: USB disconnect, device number 51 [ 1565.614562][T16396] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1565.657663][T16396] usb 3-1: USB disconnect, device number 104 [ 1565.669167][ T10] usb 10-1: config 0 has no interfaces? [ 1565.683523][ T10] usb 10-1: string descriptor 0 read error: -22 [ 1565.683693][ T10] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1565.683721][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.726687][ T5720] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1565.789941][ T10] usb 10-1: config 0 descriptor?? [ 1565.790688][ T5720] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1565.828601][ T5720] quatech2 2-1:0.51: device disconnected [ 1565.870238][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1566.034708][T16692] usb 10-1: USB disconnect, device number 34 [ 1566.576035][T16396] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1566.606005][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1566.746195][T16396] usb 2-1: Using ep0 maxpacket: 8 [ 1566.754734][T16396] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1566.754771][T16396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.754796][T16396] usb 2-1: Product: syz [ 1566.754813][T16396] usb 2-1: Manufacturer: syz [ 1566.754831][T16396] usb 2-1: SerialNumber: syz [ 1566.766256][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1566.804131][ T10] usb 3-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 1566.804163][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1566.835063][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1566.835101][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.835124][ T10] usb 3-1: Product: syz [ 1566.835141][ T10] usb 3-1: Manufacturer: syz [ 1566.835158][ T10] usb 3-1: SerialNumber: syz [ 1566.958951][ T10] usb 3-1: 0:2 : does not exist [ 1567.980891][T16396] mxuport 2-1:254.0: Direct firmware load for moxa/moxa-1450.fw failed with error -2 [ 1567.980927][T16396] mxuport 2-1:254.0: Falling back to sysfs fallback for: moxa/moxa-1450.fw [ 1568.592875][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1568.709463][T26824] syzkaller1: entered promiscuous mode [ 1568.715596][T26824] syzkaller1: entered allmulticast mode [ 1568.753155][ T10] usb 3-1: USB disconnect, device number 105 [ 1568.911862][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1569.257346][ T10] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1569.421010][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1569.421656][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1569.423206][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.423235][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1569.425933][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1569.425958][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.425974][ T10] usb 4-1: Product: syz [ 1569.425985][ T10] usb 4-1: Manufacturer: syz [ 1569.425996][ T10] usb 4-1: SerialNumber: syz [ 1569.450905][ T5720] usb 10-1: new low-speed USB device number 35 using dummy_hcd [ 1569.532306][ T10] usb 4-1: selecting invalid altsetting 1 [ 1569.533107][ T10] usb 4-1: unit 6 not found! [ 1569.665327][ T5720] usb 10-1: config 0 has no interfaces? [ 1569.669619][T26835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.670708][ T5720] usb 10-1: string descriptor 0 read error: -22 [ 1569.670863][ T5720] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1569.670892][ T5720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.716903][T26834] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1569.808283][ T5720] usb 10-1: config 0 descriptor?? [ 1569.829217][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1569.847956][ T10] usb 4-1: USB disconnect, device number 87 [ 1569.891050][T23196] udevd[23196]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1570.015822][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1570.035261][ T5720] usb 10-1: USB disconnect, device number 35 [ 1570.176329][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1570.183128][ T9] usb 3-1: config 0 has an invalid interface number: 24 but max is 0 [ 1570.183176][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.183192][ T9] usb 3-1: config 0 has no interface number 0 [ 1570.183235][ T9] usb 3-1: too many endpoints for config 0 interface 24 altsetting 12: 194, using maximum allowed: 30 [ 1570.183270][ T9] usb 3-1: config 0 interface 24 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 1570.183292][ T9] usb 3-1: config 0 interface 24 has no altsetting 0 [ 1570.252733][ T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 1570.252770][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.252794][ T9] usb 3-1: Product: syz [ 1570.252810][ T9] usb 3-1: Manufacturer: syz [ 1570.252827][ T9] usb 3-1: SerialNumber: syz [ 1570.259214][ T9] usb 3-1: config 0 descriptor?? [ 1570.580094][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 1570.580366][ T9] ttusb-dec 3-1:0.24: probe with driver ttusb-dec failed with error -22 [ 1570.602837][ T9] usb 3-1: USB disconnect, device number 106 [ 1570.796325][ T10] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 1570.935353][ T10] usb 4-1: device descriptor read/64, error -71 [ 1571.193604][ T10] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 1571.330734][ T10] usb 4-1: device descriptor read/64, error -71 [ 1571.448532][ T10] usb usb4-port1: attempt power cycle [ 1571.459503][T24128] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1571.619595][T24128] usb 3-1: Using ep0 maxpacket: 8 [ 1571.625592][T24128] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1571.625644][T24128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.625662][T24128] usb 3-1: Product: syz [ 1571.625680][T24128] usb 3-1: Manufacturer: syz [ 1571.625692][T24128] usb 3-1: SerialNumber: syz [ 1571.811698][ T10] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 1571.836422][ T10] usb 4-1: device descriptor read/8, error -71 [ 1572.089893][ T10] usb 4-1: new low-speed USB device number 91 using dummy_hcd [ 1572.113301][ T10] usb 4-1: device descriptor read/8, error -71 [ 1572.229104][ T10] usb usb4-port1: unable to enumerate USB device [ 1572.505134][T26860] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6775'. [ 1572.977461][T26864] binder_alloc: 26614: binder_alloc_buf, no vma [ 1573.286900][T16692] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1573.472201][T16692] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1573.474843][T16692] usb 10-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice= 0.40 [ 1573.474882][T16692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.474905][T16692] usb 10-1: Product: syz [ 1573.474917][T16692] usb 10-1: Manufacturer: syz [ 1573.474929][T16692] usb 10-1: SerialNumber: syz [ 1573.763281][T16692] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1573.870915][T16692] usb 10-1: USB disconnect, device number 36 [ 1574.023727][T24503] udevd[24503]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.836834][T16692] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1575.007795][T16692] usb 10-1: Using ep0 maxpacket: 32 [ 1575.012420][T16692] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.012482][T16692] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1575.015409][T16692] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1575.015452][T16692] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1575.015469][T16692] usb 10-1: Product: syz [ 1575.015482][T16692] usb 10-1: Manufacturer: syz [ 1575.015493][T16692] usb 10-1: SerialNumber: syz [ 1575.093707][T16692] usb 10-1: config 0 descriptor?? [ 1575.315934][ T9] usb 10-1: USB disconnect, device number 37 [ 1575.989863][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1575.989985][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1577.615203][T26921] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1578.236138][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1578.268076][T16397] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1578.407093][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1578.409334][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.409390][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1578.412451][ T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1578.412494][ T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1578.412513][ T10] usb 4-1: Product: syz [ 1578.412525][ T10] usb 4-1: Manufacturer: syz [ 1578.412537][ T10] usb 4-1: SerialNumber: syz [ 1578.480748][ T10] usb 4-1: config 0 descriptor?? [ 1578.484757][T16397] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1578.485380][T16397] usb 10-1: not running at top speed; connect to a high speed hub [ 1578.489225][T16397] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.489267][T16397] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1578.493626][T16397] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1578.493667][T16397] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.493697][T16397] usb 10-1: Product: syz [ 1578.493709][T16397] usb 10-1: Manufacturer: syz [ 1578.493721][T16397] usb 10-1: SerialNumber: syz [ 1578.618279][T16397] usb 10-1: selecting invalid altsetting 1 [ 1578.619141][T16397] usb 10-1: unit 6 not found! [ 1578.675932][T16397] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1578.705360][T16397] usb 4-1: USB disconnect, device number 92 [ 1578.757137][T24503] udevd[24503]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1578.823012][ T9] usb 10-1: USB disconnect, device number 38 [ 1579.647226][T16397] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 1579.696025][T26936] syzkaller1: left promiscuous mode [ 1579.696056][T26936] syzkaller1: left allmulticast mode [ 1579.713887][T26936] binder: BINDER_SET_CONTEXT_MGR already set [ 1579.713931][T26936] binder: 26935:26936 ioctl 4018620d 200000003280 returned -16 [ 1579.714560][T26936] binder: 26935:26936 ioctl c0306201 200000000080 returned -14 [ 1579.718089][T26937] binder_alloc: 26735: binder_alloc_buf, no vma [ 1579.718238][T26936] binder: BINDER_SET_CONTEXT_MGR already set [ 1579.718251][T26936] binder: 26935:26936 ioctl 4018620d 2000000001c0 returned -16 [ 1579.718483][T26936] binder: 26935:26936 ioctl c0306201 2000000003c0 returned -14 [ 1579.851926][T16397] usb 4-1: config 0 has no interfaces? [ 1579.861634][T16397] usb 4-1: string descriptor 0 read error: -22 [ 1579.861771][T16397] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1579.861791][T16397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.869893][T16397] usb 4-1: config 0 descriptor?? [ 1580.104385][T16397] usb 4-1: USB disconnect, device number 93 [ 1580.292759][T26949] @ÿ: renamed from bond_slave_0 (while UP) [ 1580.463275][T26951] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6801'. [ 1580.979565][T26922] block nbd1: shutting down sockets [ 1581.218431][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1581.378627][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1581.381990][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.382507][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1581.385589][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1581.385629][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1581.385653][ T9] usb 4-1: Product: syz [ 1581.385671][ T9] usb 4-1: Manufacturer: syz [ 1581.385688][ T9] usb 4-1: SerialNumber: syz [ 1581.397436][ T9] usb 4-1: config 0 descriptor?? [ 1581.519356][T26955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1581.689143][T16692] usb 4-1: USB disconnect, device number 94 [ 1581.803142][T26965] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.803167][T26965] binder: 26964:26965 ioctl 4018620d 200000003280 returned -16 [ 1581.846908][T26965] binder: 26964:26965 ioctl c0306201 200000000080 returned -14 [ 1581.849657][T26965] binder: BINDER_SET_CONTEXT_MGR already set [ 1581.849672][T26965] binder: 26964:26965 ioctl 4018620d 2000000001c0 returned -16 [ 1581.849890][T26965] binder: 26964:26965 ioctl c0306201 2000000003c0 returned -14 [ 1582.208562][T26973] syzkaller1: entered promiscuous mode [ 1582.208584][T26973] syzkaller1: entered allmulticast mode [ 1582.565708][ T32] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1582.755189][ T32] usb 10-1: Using ep0 maxpacket: 32 [ 1582.765666][ T32] usb 10-1: config 0 has an invalid interface number: 146 but max is 0 [ 1582.765700][ T32] usb 10-1: config 0 has no interface number 0 [ 1582.765819][ T32] usb 10-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1582.765846][ T32] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1582.765878][ T32] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1582.765910][ T32] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1582.765941][ T32] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1582.765970][ T32] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1582.765996][ T32] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1582.766025][ T32] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 1582.766056][ T32] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1582.766084][ T32] usb 10-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.973750][ T32] usb 10-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1582.973862][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.973927][ T32] usb 10-1: Product: syz [ 1582.973973][ T32] usb 10-1: Manufacturer: syz [ 1582.974025][ T32] usb 10-1: SerialNumber: syz [ 1583.069880][ T32] usb 10-1: config 0 descriptor?? [ 1583.071099][T26975] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1583.071368][T26975] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1583.124407][ T32] usb 10-1: will this work? Response EP is not usually 3 [ 1583.124443][ T32] usb 10-1: will this work? Image data EP is not usually 2 [ 1583.225077][ T32] scsi host1: microtekX6 [ 1583.429962][ T32] usb 10-1: USB disconnect, device number 39 [ 1583.461421][T26910] usb 10-1: error -19 submitting URB [ 1583.495481][ T72] usb 10-1: error -19 submitting URB [ 1583.538057][ T72] usb 10-1: error -19 submitting URB [ 1584.641567][ T5720] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 1584.646949][T26993] syzkaller1: left promiscuous mode [ 1584.647506][T26993] syzkaller1: left allmulticast mode [ 1584.766431][T26994] binder: 26992:26994 ioctl c0306201 200000000080 returned -14 [ 1584.776692][T26993] binder: 26992:26993 ioctl c0306201 2000000003c0 returned -14 [ 1584.893726][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1584.895409][ T5720] usb 4-1: config 6 has an invalid interface number: 201 but max is 0 [ 1584.895440][ T5720] usb 4-1: config 6 has no interface number 0 [ 1584.895473][ T5720] usb 4-1: config 6 interface 201 has no altsetting 0 [ 1584.906324][ T5720] usb 4-1: string descriptor 0 read error: -22 [ 1584.906764][ T5720] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=f1.30 [ 1584.906837][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.984302][ T5720] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1584.984458][ T5720] gspca_mr97310a: reg write [21] error -22 [ 1584.984531][ T5720] mr97310a 4-1:6.201: probe with driver mr97310a failed with error -22 [ 1585.338682][ T5720] usb 4-1: USB disconnect, device number 95 [ 1585.444528][T20347] block nbd3: Receive control failed (result -32) [ 1585.704790][T26989] block nbd3: shutting down sockets [ 1587.023828][T27024] binder: 27023:27024 ioctl c0306201 200000000080 returned -14 [ 1587.025945][T27024] binder: 27023:27024 ioctl c0306201 2000000003c0 returned -14 [ 1587.043944][ T32] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1587.230759][ T32] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1587.232014][ T32] usb 10-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.232044][ T32] usb 10-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1587.234529][ T32] usb 10-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1587.234575][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.234598][ T32] usb 10-1: Product: syz [ 1587.234610][ T32] usb 10-1: Manufacturer: syz [ 1587.234622][ T32] usb 10-1: SerialNumber: syz [ 1587.359267][ T32] usb 10-1: can't set config #66, error -71 [ 1587.381631][ T32] usb 10-1: USB disconnect, device number 40 [ 1587.467555][T27030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1587.467581][T27030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6827'. [ 1588.080917][ T10] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 1588.136539][T16692] usb 10-1: new low-speed USB device number 41 using dummy_hcd [ 1588.246612][ T10] usb 4-1: config 0 has no interfaces? [ 1588.250180][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1588.250313][ T10] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1588.250333][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.275801][ T10] usb 4-1: config 0 descriptor?? [ 1588.309890][T16692] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1588.320367][T16692] usb 10-1: config 6 has an invalid interface number: 201 but max is 0 [ 1588.320400][T16692] usb 10-1: config 6 has no interface number 0 [ 1588.320438][T16692] usb 10-1: config 6 interface 201 has no altsetting 0 [ 1588.348612][T16692] usb 10-1: string descriptor 0 read error: -22 [ 1588.348771][T16692] usb 10-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=f1.30 [ 1588.348798][T16692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.391195][T16692] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1588.391297][T16692] gspca_mr97310a: reg write [21] error -22 [ 1588.391390][T16692] mr97310a 10-1:6.201: probe with driver mr97310a failed with error -22 [ 1588.507896][T16692] usb 4-1: USB disconnect, device number 96 [ 1588.606912][ T10] usb 10-1: USB disconnect, device number 41 [ 1588.630638][T20347] block nbd9: Receive control failed (result -32) [ 1588.732322][T27034] block nbd9: shutting down sockets [ 1589.414286][T27052] syzkaller1: left promiscuous mode [ 1589.414315][T27052] syzkaller1: left allmulticast mode [ 1589.430948][T27052] binder: BINDER_SET_CONTEXT_MGR already set [ 1589.430966][T27052] binder: 27051:27052 ioctl 4018620d 200000003280 returned -16 [ 1589.431587][T27052] binder: 27051:27052 ioctl c0306201 200000000080 returned -14 [ 1589.433560][T27052] binder: BINDER_SET_CONTEXT_MGR already set [ 1589.433574][T27052] binder: 27051:27052 ioctl 4018620d 2000000001c0 returned -16 [ 1589.433811][T27052] binder: 27051:27052 ioctl c0306201 2000000003c0 returned -14 [ 1589.585362][T27058] FAULT_INJECTION: forcing a failure. [ 1589.585362][T27058] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.585425][T27058] CPU: 0 UID: 0 PID: 27058 Comm: syz.9.6836 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1589.585459][T27058] Tainted: [L]=SOFTLOCKUP [ 1589.585468][T27058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1589.585484][T27058] Call Trace: [ 1589.585494][T27058] [ 1589.585505][T27058] dump_stack_lvl+0xe8/0x150 [ 1589.585542][T27058] should_fail_ex+0x46b/0x600 [ 1589.585585][T27058] should_failslab+0xa8/0x100 [ 1589.585623][T27058] __kmalloc_noprof+0xdf/0x7b0 [ 1589.585652][T27058] ? sock_kmalloc+0xd6/0x160 [ 1589.585682][T27058] sock_kmalloc+0xd6/0x160 [ 1589.585708][T27058] skcipher_recvmsg+0x517/0x1140 [ 1589.585761][T27058] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1589.585798][T27058] ? __fget_files+0x3a6/0x420 [ 1589.585828][T27058] ? aa_sock_msg_perm+0x122/0x200 [ 1589.585854][T27058] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1589.585896][T27058] sock_recvmsg_nosec+0x130/0x170 [ 1589.585930][T27058] __sys_recvfrom+0x298/0x420 [ 1589.585971][T27058] ? __pfx___sys_recvfrom+0x10/0x10 [ 1589.586042][T27058] ? ksys_write+0x248/0x270 [ 1589.586080][T27058] ? __pfx_ksys_write+0x10/0x10 [ 1589.586117][T27058] __x64_sys_recvfrom+0xde/0x100 [ 1589.586153][T27058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.586180][T27058] do_syscall_64+0x174/0x580 [ 1589.586217][T27058] ? trace_irq_disable+0x3b/0x140 [ 1589.586246][T27058] ? clear_bhb_loop+0x40/0x90 [ 1589.586276][T27058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.586302][T27058] RIP: 0033:0x7f23be18ce59 [ 1589.586324][T27058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.586345][T27058] RSP: 002b:00007f23bc3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1589.586372][T27058] RAX: ffffffffffffffda RBX: 00007f23be405fa0 RCX: 00007f23be18ce59 [ 1589.586390][T27058] RDX: 0000000000000ff4 RSI: 0000200000000000 RDI: 0000000000000004 [ 1589.586407][T27058] RBP: 00007f23bc3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.586428][T27058] R10: 0000000000002102 R11: 0000000000000246 R12: 0000000000000001 [ 1589.586444][T27058] R13: 00007f23be406038 R14: 00007f23be405fa0 R15: 00007fff247f27e8 [ 1589.586482][T27058] [ 1590.065102][T27062] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1590.220911][T27062] picdev_read: 12 callbacks suppressed [ 1590.220937][T27062] kvm: pic: non byte read [ 1590.222404][T27062] pic_ioport_write: 10 callbacks suppressed [ 1590.222428][T27062] kvm: pic: level sensitive irq not supported [ 1590.222582][T27062] kvm: pic: non byte read [ 1590.223610][T27062] kvm: pic: level sensitive irq not supported [ 1590.223711][T27062] kvm: pic: non byte read [ 1590.224311][T27062] kvm: pic: level sensitive irq not supported [ 1590.224896][T27062] kvm: pic: non byte read [ 1590.582278][ T5770] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 1590.722865][T27073] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1590.746206][ T5770] usb 4-1: config 0 has no interfaces? [ 1590.777607][ T5770] usb 4-1: string descriptor 0 read error: -22 [ 1590.777768][ T5770] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1590.777797][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.831607][ T5770] usb 4-1: config 0 descriptor?? [ 1591.055260][ T10] usb 4-1: USB disconnect, device number 97 [ 1591.369995][T27086] binder: BINDER_SET_CONTEXT_MGR already set [ 1591.370010][T27086] binder: 27083:27086 ioctl 4018620d 200000003280 returned -16 [ 1591.371025][T27086] binder: 27083:27086 ioctl c0306201 200000000080 returned -14 [ 1591.399307][T27086] binder: BINDER_SET_CONTEXT_MGR already set [ 1591.399326][T27086] binder: 27083:27086 ioctl 4018620d 2000000001c0 returned -16 [ 1591.758035][T16692] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1591.929226][T16692] usb 10-1: Using ep0 maxpacket: 32 [ 1591.933618][T16692] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1591.937405][T16692] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1591.937444][T16692] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1591.937470][T16692] usb 10-1: Product: syz [ 1591.937489][T16692] usb 10-1: Manufacturer: syz [ 1591.937506][T16692] usb 10-1: SerialNumber: syz [ 1592.000831][T16692] usb 10-1: config 0 descriptor?? [ 1592.185698][ T5770] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1592.222316][T16692] usb 10-1: USB disconnect, device number 42 [ 1592.346198][ T5770] usb 4-1: Using ep0 maxpacket: 8 [ 1592.355728][ T5770] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1592.355765][ T5770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.355789][ T5770] usb 4-1: Product: syz [ 1592.355806][ T5770] usb 4-1: Manufacturer: syz [ 1592.355822][ T5770] usb 4-1: SerialNumber: syz [ 1592.939731][T27098] FAULT_INJECTION: forcing a failure. [ 1592.939731][T27098] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.939764][T27098] CPU: 1 UID: 0 PID: 27098 Comm: syz.9.6850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1592.939797][T27098] Tainted: [L]=SOFTLOCKUP [ 1592.939803][T27098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1592.939816][T27098] Call Trace: [ 1592.939824][T27098] [ 1592.939832][T27098] dump_stack_lvl+0xe8/0x150 [ 1592.939856][T27098] should_fail_ex+0x46b/0x600 [ 1592.939886][T27098] should_failslab+0xa8/0x100 [ 1592.939911][T27098] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1592.939932][T27098] ? __alloc_skb+0x1d0/0x7d0 [ 1592.939955][T27098] ? lockdep_hardirqs_on+0x7a/0x110 [ 1592.939985][T27098] __alloc_skb+0x1d0/0x7d0 [ 1592.940009][T27098] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1592.940037][T27098] netlink_sendmsg+0x5d4/0xb40 [ 1592.940062][T27098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.940080][T27098] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1592.940106][T27098] ? aa_sock_msg_perm+0x122/0x200 [ 1592.940125][T27098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.940141][T27098] sock_sendmsg_nosec+0x13a/0x180 [ 1592.940163][T27098] ____sys_sendmsg+0x55c/0x870 [ 1592.940197][T27098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.940232][T27098] ? import_iovec+0x73/0xa0 [ 1592.940254][T27098] ___sys_sendmsg+0x2a5/0x360 [ 1592.940283][T27098] ? __lock_acquire+0x6b5/0x2d10 [ 1592.940316][T27098] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.940369][T27098] ? __fget_files+0x2a/0x420 [ 1592.940388][T27098] ? __fget_files+0x3a6/0x420 [ 1592.940415][T27098] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1592.940444][T27098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1592.940478][T27098] ? __pfx_ksys_write+0x10/0x10 [ 1592.940508][T27098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.940527][T27098] do_syscall_64+0x174/0x580 [ 1592.940575][T27098] ? trace_irq_disable+0x3b/0x140 [ 1592.940595][T27098] ? clear_bhb_loop+0x40/0x90 [ 1592.940617][T27098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.940636][T27098] RIP: 0033:0x7f23be18ce59 [ 1592.940652][T27098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.940669][T27098] RSP: 002b:00007f23bc3de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.940688][T27098] RAX: ffffffffffffffda RBX: 00007f23be405fa0 RCX: 00007f23be18ce59 [ 1592.940701][T27098] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1592.940713][T27098] RBP: 00007f23bc3de090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.940728][T27098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.940739][T27098] R13: 00007f23be406038 R14: 00007f23be405fa0 R15: 00007fff247f27e8 [ 1592.940765][T27098] [ 1593.347128][T27101] loop4: detected capacity change from 0 to 7 [ 1593.504854][T17185] [ 1593.504868][T17185] ====================================================== [ 1593.504879][T17185] WARNING: possible circular locking dependency detected [ 1593.504913][T17185] syzkaller #0 Tainted: G L [ 1593.504926][T17185] ------------------------------------------------------ [ 1593.504935][T17185] kworker/u8:18/17185 is trying to acquire lock: [ 1593.504949][T17185] ffff88802aaa6b80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 1593.505018][T17185] [ 1593.505018][T17185] but task is already holding lock: [ 1593.505026][T17185] ffffc90005ed7c40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1593.505085][T17185] [ 1593.505085][T17185] which lock already depends on the new lock. [ 1593.505085][T17185] [ 1593.505093][T17185] [ 1593.505093][T17185] the existing dependency chain (in reverse order) is: [ 1593.505101][T17185] [ 1593.505101][T17185] -> #7 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1593.505132][T17185] process_one_work+0x8d7/0x1630 [ 1593.505162][T17185] worker_thread+0xb49/0x1140 [ 1593.505191][T17185] kthread+0x388/0x470 [ 1593.505211][T17185] ret_from_fork+0x514/0xb70 [ 1593.505234][T17185] ret_from_fork_asm+0x1a/0x30 [ 1593.505259][T17185] [ 1593.505259][T17185] -> #6 ((wq_completion)loop5){+.+.}-{0:0}: [ 1593.505289][T17185] touch_wq_lockdep_map+0xcb/0x180 [ 1593.505308][T17185] __flush_workqueue+0x14b/0x14f0 [ 1593.505328][T17185] drain_workqueue+0xd3/0x390 [ 1593.505346][T17185] lo_release+0x287/0x8f0 [ 1593.505373][T17185] bdev_release+0x541/0x660 [ 1593.505403][T17185] blkdev_release+0x15/0x20 [ 1593.505421][T17185] __fput+0x461/0xa70 [ 1593.505442][T17185] fput_close_sync+0x11f/0x240 [ 1593.505464][T17185] __x64_sys_close+0x7e/0x110 [ 1593.505487][T17185] do_syscall_64+0x174/0x580 [ 1593.505517][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.505538][T17185] [ 1593.505538][T17185] -> #5 (&disk->open_mutex#4){+.+.}-{4:4}: [ 1593.505574][T17185] mutex_lock_nested+0x5a/0x1d0 [ 1593.505598][T17185] __del_gendisk+0x127/0x980 [ 1593.505627][T17185] del_gendisk+0xe7/0x160 [ 1593.505649][T17185] loop_remove+0x42/0xc0 [ 1593.505675][T17185] loop_control_ioctl+0x4ba/0x5b0 [ 1593.505702][T17185] __se_sys_ioctl+0xff/0x170 [ 1593.505730][T17185] do_syscall_64+0x174/0x580 [ 1593.505759][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.505780][T17185] [ 1593.505780][T17185] -> #4 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1593.505810][T17185] down_read+0x97/0x200 [ 1593.505827][T17185] add_disk_fwnode+0xe7/0x480 [ 1593.505847][T17185] loop_add+0x86e/0xb50 [ 1593.505873][T17185] blk_request_module+0x27d/0x2a0 [ 1593.505894][T17185] blkdev_get_no_open+0x3f/0xe0 [ 1593.505924][T17185] blkdev_open+0x1f5/0x620 [ 1593.505942][T17185] do_dentry_open+0x83d/0x13e0 [ 1593.505963][T17185] vfs_open+0x3b/0x350 [ 1593.505982][T17185] path_openat+0x2eea/0x3960 [ 1593.506010][T17185] do_file_open+0x23e/0x4a0 [ 1593.506037][T17185] do_sys_openat2+0x115/0x200 [ 1593.506059][T17185] __x64_sys_creat+0x8f/0xc0 [ 1593.506080][T17185] do_syscall_64+0x174/0x580 [ 1593.506109][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.506131][T17185] [ 1593.506131][T17185] -> #3 (major_names_lock){+.+.}-{4:4}: [ 1593.506160][T17185] mutex_lock_nested+0x5a/0x1d0 [ 1593.506183][T17185] blk_request_module+0x35/0x2a0 [ 1593.506205][T17185] blkdev_get_no_open+0x3f/0xe0 [ 1593.506235][T17185] bdev_file_open_by_dev+0xa0/0x240 [ 1593.506266][T17185] swsusp_check+0x56/0x490 [ 1593.506289][T17185] software_resume+0x51/0x4c0 [ 1593.506319][T17185] resume_store+0x333/0x4f0 [ 1593.506336][T17185] kernfs_fop_write_iter+0x3b0/0x540 [ 1593.506365][T17185] vfs_write+0x629/0xba0 [ 1593.506390][T17185] ksys_write+0x156/0x270 [ 1593.506414][T17185] do_syscall_64+0x174/0x580 [ 1593.506442][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.506460][T17185] [ 1593.506460][T17185] -> #2 (system_transition_mutex){+.+.}-{4:4}: [ 1593.506488][T17185] mutex_lock_nested+0x5a/0x1d0 [ 1593.506508][T17185] pm_test_store+0x95/0x480 [ 1593.506532][T17185] kernfs_fop_write_iter+0x3b0/0x540 [ 1593.506560][T17185] iter_file_splice_write+0x9a6/0x10f0 [ 1593.506585][T17185] direct_splice_actor+0x104/0x160 [ 1593.506616][T17185] splice_direct_to_actor+0x545/0xc80 [ 1593.506641][T17185] do_splice_direct+0x19b/0x2a0 [ 1593.506665][T17185] do_sendfile+0x547/0x7e0 [ 1593.506685][T17185] __se_sys_sendfile64+0x144/0x1a0 [ 1593.506703][T17185] do_syscall_64+0x174/0x580 [ 1593.506733][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.506754][T17185] [ 1593.506754][T17185] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1593.506784][T17185] mutex_lock_nested+0x5a/0x1d0 [ 1593.506808][T17185] kernfs_seq_start+0x5c/0x420 [ 1593.506839][T17185] seq_read_iter+0x3f8/0xe20 [ 1593.506871][T17185] vfs_read+0x58b/0xa80 [ 1593.506896][T17185] ksys_read+0x156/0x270 [ 1593.506923][T17185] do_syscall_64+0x174/0x580 [ 1593.506951][T17185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.506971][T17185] [ 1593.506971][T17185] -> #0 (&p->lock){+.+.}-{4:4}: [ 1593.507001][T17185] __lock_acquire+0x15a5/0x2d10 [ 1593.507023][T17185] lock_acquire+0x106/0x350 [ 1593.507045][T17185] mutex_lock_nested+0x5a/0x1d0 [ 1593.507066][T17185] seq_read_iter+0xb8/0xe20 [ 1593.507095][T17185] lo_rw_aio+0xc80/0xf00 [ 1593.507122][T17185] loop_process_work+0x92a/0x11b0 [ 1593.507149][T17185] process_one_work+0x98b/0x1630 [ 1593.507175][T17185] worker_thread+0xb49/0x1140 [ 1593.507203][T17185] kthread+0x388/0x470 [ 1593.507223][T17185] ret_from_fork+0x514/0xb70 [ 1593.507245][T17185] ret_from_fork_asm+0x1a/0x30 [ 1593.507270][T17185] [ 1593.507270][T17185] other info that might help us debug this: [ 1593.507270][T17185] [ 1593.507278][T17185] Chain exists of: [ 1593.507278][T17185] &p->lock --> (wq_completion)loop5 --> (work_completion)(&worker->work) [ 1593.507278][T17185] [ 1593.507315][T17185] Possible unsafe locking scenario: [ 1593.507315][T17185] [ 1593.507322][T17185] CPU0 CPU1 [ 1593.507337][T17185] ---- ---- [ 1593.507346][T17185] lock((work_completion)(&worker->work)); [ 1593.507367][T17185] lock((wq_completion)loop5); [ 1593.507384][T17185] lock((work_completion)(&worker->work)); [ 1593.507403][T17185] lock(&p->lock); [ 1593.507417][T17185] [ 1593.507417][T17185] *** DEADLOCK *** [ 1593.507417][T17185] [ 1593.507424][T17185] 2 locks held by kworker/u8:18/17185: [ 1593.507438][T17185] #0: ffff888058d9e138 ((wq_completion)loop4){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1593.507500][T17185] #1: ffffc90005ed7c40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1593.507565][T17185] [ 1593.507565][T17185] stack backtrace: [ 1593.507583][T17185] CPU: 1 UID: 0 PID: 17185 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1593.507620][T17185] Tainted: [L]=SOFTLOCKUP [ 1593.507629][T17185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1593.507650][T17185] Workqueue: loop4 loop_workfn [ 1593.507680][T17185] Call Trace: [ 1593.507689][T17185] [ 1593.507699][T17185] dump_stack_lvl+0xe8/0x150 [ 1593.507725][T17185] print_circular_bug+0x2e1/0x300 [ 1593.507759][T17185] check_noncircular+0x12e/0x150 [ 1593.507793][T17185] __lock_acquire+0x15a5/0x2d10 [ 1593.507820][T17185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1593.507847][T17185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1593.507869][T17185] ? __pfx___schedule+0x10/0x10 [ 1593.507900][T17185] ? seq_read_iter+0xb8/0xe20 [ 1593.507933][T17185] lock_acquire+0x106/0x350 [ 1593.507959][T17185] ? seq_read_iter+0xb8/0xe20 [ 1593.507996][T17185] ? seq_read_iter+0xb8/0xe20 [ 1593.508032][T17185] ? seq_read_iter+0xb8/0xe20 [ 1593.508066][T17185] mutex_lock_nested+0x5a/0x1d0 [ 1593.508092][T17185] ? seq_read_iter+0xb8/0xe20 [ 1593.508129][T17185] seq_read_iter+0xb8/0xe20 [ 1593.508168][T17185] ? kernfs_fop_read_iter+0x149/0x6b0 [ 1593.508200][T17185] ? __asan_memset+0x22/0x50 [ 1593.508225][T17185] lo_rw_aio+0xc80/0xf00 [ 1593.508263][T17185] ? __pfx_lo_rw_aio+0x10/0x10 [ 1593.508298][T17185] ? kthread_associate_blkcg+0x490/0x600 [ 1593.508325][T17185] ? rt_spin_unlock+0x160/0x200 [ 1593.508353][T17185] loop_process_work+0x92a/0x11b0 [ 1593.508391][T17185] ? ktime_get+0x45/0x220 [ 1593.508418][T17185] ? __pfx_loop_process_work+0x10/0x10 [ 1593.508450][T17185] ? lapic_next_event+0x11/0x20 [ 1593.508478][T17185] ? clockevents_program_event+0x491/0x630 [ 1593.508510][T17185] ? __hrtimer_rearm_deferred+0x99/0x460 [ 1593.508546][T17185] ? __pfx_clockevents_program_event+0x10/0x10 [ 1593.508584][T17185] ? irqentry_exit+0x218/0x8b0 [ 1593.508625][T17185] ? lockdep_hardirqs_on+0x7a/0x110 [ 1593.508657][T17185] ? irqentry_exit+0x218/0x8b0 [ 1593.508688][T17185] ? trace_irq_disable+0x3b/0x140 [ 1593.508718][T17185] ? process_one_work+0x8be/0x1630 [ 1593.508752][T17185] ? lock_acquire+0x221/0x350 [ 1593.508780][T17185] ? process_one_work+0x8be/0x1630 [ 1593.508808][T17185] process_one_work+0x98b/0x1630 [ 1593.508850][T17185] ? __pfx_process_one_work+0x10/0x10 [ 1593.508881][T17185] ? do_raw_spin_lock+0x12b/0x2f0 [ 1593.508909][T17185] worker_thread+0xb49/0x1140 [ 1593.508954][T17185] kthread+0x388/0x470 [ 1593.508977][T17185] ? __pfx_worker_thread+0x10/0x10 [ 1593.509008][T17185] ? __pfx_kthread+0x10/0x10 [ 1593.509031][T17185] ret_from_fork+0x514/0xb70 [ 1593.509057][T17185] ? __pfx_ret_from_fork+0x10/0x10 [ 1593.509082][T17185] ? __switch_to+0xc79/0x1410 [ 1593.509104][T17185] ? __pfx_kthread+0x10/0x10 [ 1593.509128][T17185] ret_from_fork_asm+0x1a/0x30 [ 1593.509182][T17185] [ 1593.509495][ C1] blk_print_req_error: 286 callbacks suppressed [ 1593.509515][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1593.509774][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1593.509806][ C1] buffer_io_error: 9 callbacks suppressed [ 1593.509819][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 1593.595672][T27104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6852'. [ 1593.650307][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1593.650438][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1593.652506][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1593.652601][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1593.659038][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1593.659146][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1593.679148][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1593.679257][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 1594.064821][T27106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6852'. [ 1594.164916][T27104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6852'.