last executing test programs: 21m42.05930626s ago: executing program 32 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1342, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000b00)="0ee7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) 21m36.302830038s ago: executing program 33 (id=403): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000002300)=[{0x0}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x700) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='xfs\x00', 0x85, &(0x7f0000000400)='rtdev=./loop0\x00') syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e28, 0x0, @loopback}, 0x1c) 21m35.852761621s ago: executing program 34 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)={@void, @val={0x6, 0x0, 0x6488, 0x8, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, {[@timestamp_addr={0x44, 0x4, 0xc, 0x1, 0x1}]}}}}, 0x22) 11m1.066286762s ago: executing program 6 (id=2876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000240)={{0x101, 0x8}, {0xa1, 0xcb11}, 0xa77, 0x1}) fcntl$notify(r2, 0x402, 0x30) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x48001051, r5, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 10m57.752828907s ago: executing program 6 (id=2882): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000180)={0x0, 0x1aa3, 0x80, 0x2, 0x20000, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5f4, 0x4, 0x1, 0x24}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf835, 0x10, 0x5, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffff7ffe, 0x4, 0x10000, 0xea}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x2000, 0x1, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x100, 0xdbd, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x10000, 0x1000403, 0x15, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) unshare(0x6a060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001840)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0xfe, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') sendmsg$IPSET_CMD_GET_BYNAME(r15, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 10m46.04882259s ago: executing program 6 (id=2901): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) sendto$packet(r0, 0x0, 0x0, 0x4008050, &(0x7f0000000100)={0x11, 0x15, 0x1, 0x1, 0xc, 0x0, @remote}, 0x14) connect(r0, 0x0, 0x0) 10m45.289139599s ago: executing program 6 (id=2905): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) openat$vicodec1(0xffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x92) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x180) setpgid(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r3, 0x0, 0x40003) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x5}) write(r2, &(0x7f0000000a00)="c7", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1400) 10m43.938566113s ago: executing program 6 (id=2906): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c", 0x3}], 0x1}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x21, 0x0, 0x80000000, 0x0, 0x20410, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x1, 0x80, 0x9, 0x9bfb, {{0x2d, 0x4, 0x2, 0x9, 0xb4, 0x66, 0x0, 0xfb, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@ssrr={0x89, 0x1b, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @private=0xa010102, @broadcast, @broadcast]}, @cipso={0x86, 0x25, 0x2, [{0x1, 0x4, "0f60"}, {0x1, 0x5, '.?\a'}, {0x5, 0x8, "27cd4f41801f"}, {0x5, 0x3, "ff"}, {0x5, 0xb, "8778932bdacbdf6015"}]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0x34, 0x93, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@local, 0x7}, {@multicast1, 0x609929f6}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x27, 0xc2, [@local, @broadcast, @private=0xa010102, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @private=0xa010102]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0), 0x4) 10m43.008636971s ago: executing program 6 (id=2907): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 10m29.593175792s ago: executing program 35 (id=2902): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 10m26.276993926s ago: executing program 36 (id=2907): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4000010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4m10.093597088s ago: executing program 3 (id=3972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000a00000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) execveat(r4, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x400) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) mkdir(&(0x7f00000001c0)='./file0\x00', 0x20) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x5b) keyctl$revoke(0x3, r5) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x20) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r6, r7) write(r1, 0x0, 0x0) 4m5.837441973s ago: executing program 3 (id=3980): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0x1, 0xffffffffffffffff) r1 = add_key$user(0x0, &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r0}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) 4m5.660829299s ago: executing program 3 (id=3984): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 4m5.604918171s ago: executing program 3 (id=3986): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) 4m5.394177333s ago: executing program 3 (id=3988): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="b23d"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) read$FUSE(r2, 0x0, 0x0) syz_clone(0x810011, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xe, 0x0, 0x7fffffff}]}) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd98df26cf76010eb, 0x28012, r3, 0xddf46000) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, 0x0) 4m3.730265995s ago: executing program 3 (id=3991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) 3m47.226160051s ago: executing program 37 (id=3991): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) 2m47.713765222s ago: executing program 9 (id=4191): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde81", 0xba, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r1, r0}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) 2m47.664169115s ago: executing program 9 (id=4192): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x12, 0x0, &(0x7f00000005c0)="c1188e99b95d02ff4284860188a88aa286dd", 0x0, 0x6597, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m47.57308116s ago: executing program 9 (id=4193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20048041}, 0x8880) 2m47.560551391s ago: executing program 9 (id=4194): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x1d, 0x2, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.448227769s ago: executing program 9 (id=4195): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001000)=""/126, 0x7e}, {&(0x7f0000003ac0)=""/4100, 0x1004}, {&(0x7f0000004b00)=""/4108, 0x100c}, {&(0x7f0000000c80)=""/171, 0xab}, {&(0x7f00000039c0)=""/210, 0xd2}, {&(0x7f0000001080)=""/248, 0xf8}], 0x6}, 0x40000102) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 2m46.440297669s ago: executing program 9 (id=4199): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x804) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @ramp={0x4, 0x9, {0x401, 0x4, 0x6, 0x1ff}}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000027000100288f7000ffdbdf2505000000abad404526061202cd7ba976220d6b485d7bcf4c0f67eae65873a170aecf64cbda662263bd370aa0923a209f380d915f481fc89b1ed2fd456da360d098f4749b13f98567ea650ad3a7fcfe9d6245c173d07c19c0b107bd3c9ad3f71fb80b945c4616b9954f4cb510a05be5e330d0ec094f1ad333ab796d15b9310a9073d1764eef5fe65c8104c49cee6d2fd8cbf65e7687a481167249bce488a1ca72d028e77fe3b43f59ca57253e9cbfb0942de793098ec6f878dda157ae93d14e8d"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) 2m29.936117938s ago: executing program 38 (id=4199): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x804) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @ramp={0x4, 0x9, {0x401, 0x4, 0x6, 0x1ff}}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x1c}}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000027000100288f7000ffdbdf2505000000abad404526061202cd7ba976220d6b485d7bcf4c0f67eae65873a170aecf64cbda662263bd370aa0923a209f380d915f481fc89b1ed2fd456da360d098f4749b13f98567ea650ad3a7fcfe9d6245c173d07c19c0b107bd3c9ad3f71fb80b945c4616b9954f4cb510a05be5e330d0ec094f1ad333ab796d15b9310a9073d1764eef5fe65c8104c49cee6d2fd8cbf65e7687a481167249bce488a1ca72d028e77fe3b43f59ca57253e9cbfb0942de793098ec6f878dda157ae93d14e8d"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004990) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) 2m19.977610289s ago: executing program 8 (id=4327): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 2m19.126567231s ago: executing program 8 (id=4328): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00"/220], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010020000000000000003a"], 0x0, 0x5a}, 0x28) 2m18.569754197s ago: executing program 8 (id=4331): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) syz_open_dev$sndctrl(0x0, 0xe26, 0x101400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xb10692d486d5f5b4, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) fadvise64(r0, 0x401, 0xffffffff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) gettid() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x20008045) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003480), 0x81402, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1, 0x4000854, &(0x7f0000000400)={0xa, 0x4e21, 0xbe7, @private0, 0x800000c0}, 0x1c) 2m14.447704876s ago: executing program 8 (id=4342): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0xc, 0x0, 0x7}, {0xf000, 0x6000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfb}, {0x2, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0x3, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xeeee8000, 0x4, 0x6, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x9, 0x4}, {0x4000, 0x1000, 0xb, 0xfc, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x2fff, 0x100000, 0x10, 0x8, 0x9, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x5000, 0x3000, 0xe, 0x2, 0x6, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x9000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x220, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/xfrm_stat\x00') ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r1 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f000904010000010220000904010101010220000905"], 0x0) syz_usb_control_io$uac2(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000340)}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000240)={0xffffffffffffffff}) sendfile(r3, r3, &(0x7f0000000080)=0x1, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003280), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f00000032c0)) pipe(&(0x7f0000000300)) r5 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000021c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close(r6) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x205c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f00000001c0), 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000008411000000000000ff7f080000000400"], 0x18, 0x24000001}, 0x0) 2m11.450228392s ago: executing program 8 (id=4348): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/exports\x00', 0x86080, 0x8) 2m11.203978507s ago: executing program 8 (id=4351): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 1m54.873722332s ago: executing program 39 (id=4351): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='1\n', 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) close(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) 1m36.280738308s ago: executing program 7 (id=4492): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x91], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.007650085s ago: executing program 7 (id=4495): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xa0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback, 0x5}, 0x1c) 1m33.771167564s ago: executing program 7 (id=4497): syz_emit_ethernet(0x22, &(0x7f00000007c0)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x14, 0x4068, 0x3e8, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}}, 0x0) 1m33.568389672s ago: executing program 7 (id=4498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$binderfs_feature(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0xa, 0x0, 0x3, 0xa], 0x41000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.332303913s ago: executing program 7 (id=4505): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) syz_fuse_handle_req(r0, &(0x7f0000001680)="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", 0x2000, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m25.723457245s ago: executing program 7 (id=4520): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) 1m9.37508066s ago: executing program 40 (id=4520): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) 7.694735162s ago: executing program 5 (id=4895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) 7.666329366s ago: executing program 2 (id=4897): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xe10, 0x80000001f000000}) 7.609345507s ago: executing program 0 (id=4898): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2020) 7.507612474s ago: executing program 2 (id=4899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.403481494s ago: executing program 1 (id=4900): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./pipe\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount(0x0, &(0x7f0000000040)='./pipe\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) 6.926414107s ago: executing program 2 (id=4902): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0xe212, 0x1000, 0x1, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x5, 0x0, 0x0) r9 = dup(0xffffffffffffffff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000008c0)={0x9, 0x7, 0x0, 0x1, 0x7fffffff}, 0x14) close(r10) syz_open_dev$media(0x0, 0x6, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f00000003c0)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) 6.84554858s ago: executing program 1 (id=4903): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.630602057s ago: executing program 5 (id=4906): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x8, 0x10000, 0x0, 0xfffe, 0xffffffff, 0x8001, 0x0, 0x0, 0x1, 0x4}}, 0x50) lseek(r0, 0x6, 0x3) 6.609454166s ago: executing program 1 (id=4907): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x84) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$dvb_demux(0x0, 0x9, 0xbc102) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) 6.521194984s ago: executing program 0 (id=4908): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bacff6b94ff5e41400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011e567c4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006208000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents64(r2, 0x0, 0x0) getdents64(r2, &(0x7f00000006c0)=""/164, 0xa4) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="300000000000000008000000000000000100000000000000000000000000000001"], 0x0, 0x0, 0x0, 0x0}) 6.345162344s ago: executing program 5 (id=4910): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x9}, 0x28) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) fsopen(0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="0503d0fcd3fc140000004788031c09102c28", 0x1f, 0x4, &(0x7f0000000140)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.936802908s ago: executing program 5 (id=4912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.484697062s ago: executing program 2 (id=4913): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60441, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x50) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 5.293599581s ago: executing program 0 (id=4914): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.259585303s ago: executing program 4 (id=4915): socket$inet6(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xfffffffffffffd69}, {0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "c9de22fd1c7801fa79c4b35d81ec9588cb86d905932f6d5d852da309730ddbc2a02261c84916929dfa7554ff8de31f9b65edefd9042c77b44e8019213019acdb6b057c24ba647920a386d32ba6e57692e34277dbd852a24274561890924faebb3665b8287c0bb59e05dfcd3207b6cd4a1ca7f5d0f4e990df3d252a715bc6a5ddbb76a526174f583e0f5570ed6e6401fcceaec923958dda3341adeb7ae01ab743ba7b859162635ed46f3414e270dd9396512ee81709f80e4d9b3b41b33d47cc3f0a0a6e2e8f0b889dd5b708393c3f45b524f3447421b33027090515e8186021c08a7f7b592aa7185077d40f8dce156ed8274e75599e5f4f3e"}}}, 0x102) 4.400533724s ago: executing program 4 (id=4916): r0 = socket(0x2, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x15c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32], 0x28}}, 0x802) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x4040010) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x48810, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 4.355121255s ago: executing program 1 (id=4917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x0, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3f, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.28311011s ago: executing program 2 (id=4918): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94fa27100a007a2f7453801896034277ce06bbace8034cb393a5e83d42365f003724a237ee4b11602b2270000000014d6d9bc8742ee045d10511b53c74a81d530dfe1d9c322fe040000005025acca262f3d40fad75667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccb3", 0xd8}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) r5 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_io_uring_setup(0x1c46, &(0x7f00000002c0)={0x0, 0x1996, 0x10, 0x80000001, 0x15a}, &(0x7f0000000340), &(0x7f0000000680), &(0x7f0000000640)) io_uring_enter(r6, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(0x0, 0x0, 0x100) r8 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f00000005c0)) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000006c0)='\x00\x00\x00\x00\x00.\x8b;\x18bh\xd3\xe8\x9a\xb4V\x81\x00', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x102030405060708, {0x0, 0x1, 0x4}, 0x2}, 0x54) connect$can_j1939(r4, &(0x7f0000000180)={0x1d, r5, 0x0, {0x0, 0xee}, 0xff}, 0x18) preadv(r3, 0x0, 0x0, 0x2, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000480)={0x1d, r8, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0xbdba17846774e43b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0x19, 0xfff2}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}}, 0x0) write$tun(r0, &(0x7f0000000440)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x8, 0x28, 0x67, 0x0, 0xf, 0x6, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfff8, 0x0, 0x9}}}}, 0x32) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000100001042dbd74000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b02060025210000240012800b0001006970766c616e0000140002800600020001000000060001000200000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x20005841}, 0x0) 3.66852298s ago: executing program 0 (id=4921): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500"], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00D\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b00"], 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 3.536736397s ago: executing program 1 (id=4922): socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="3399", 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd6000000000143a4020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c0003"], 0xc8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) 3.456967897s ago: executing program 4 (id=4923): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0xe212, 0x1000, 0x1, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000040)=""/185) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x5, 0x0, 0x0) r9 = dup(0xffffffffffffffff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000008c0)={0x9, 0x7, 0x0, 0x1, 0x7fffffff}, 0x14) close(r10) syz_open_dev$media(0x0, 0x6, 0x2) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f00000003c0)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r7, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) 2.809845453s ago: executing program 0 (id=4924): syz_open_dev$sg(0x0, 0x6f5e, 0x402) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200ffff48"], 0x9c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.169608823s ago: executing program 4 (id=4925): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x80) memfd_create(0x0, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x20) 1.78958236s ago: executing program 4 (id=4926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)=""/80}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x1000000000000, 0x0}) 1.727937088s ago: executing program 4 (id=4927): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x84) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$dvb_demux(0x0, 0x9, 0xbc102) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x1, 0xb, 0x5, 0x0, 0x8000], 0x1, 0x3c4210}) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) 726.606375ms ago: executing program 2 (id=4928): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x60441, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x50) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 401.684162ms ago: executing program 1 (id=4929): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(r4, 0x0, r0, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r5, r6, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x200, 0x1000002, 0x141, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16fd, 0x2, 0x2, 0xc5, 0x0, r5}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=4930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) kernel console output (not intermixed with test programs): 17464] usb 6-1: USB disconnect, device number 35 [ 1387.074397][ T5700] usb 5-1: USB disconnect, device number 32 [ 1387.124069][T19177] udevd[19177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1387.128164][ T1242] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 1387.161908][ T1242] usb 9-1: device descriptor read/8, error -71 [ 1387.416133][ T1242] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 1387.451442][ T1242] usb 9-1: device descriptor read/8, error -71 [ 1387.568204][ T1242] usb usb9-port1: unable to enumerate USB device [ 1387.946756][ T1242] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1387.968782][ T5700] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1388.122301][ T1242] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1388.124148][ T1242] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1388.124181][ T1242] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1388.126778][ T1242] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1388.126806][ T1242] usb 5-1: Product: syz [ 1388.126823][ T1242] usb 5-1: Manufacturer: syz [ 1388.126839][ T1242] usb 5-1: SerialNumber: syz [ 1388.133300][ T1242] usb 5-1: config 0 descriptor?? [ 1388.159606][T20101] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1388.195322][ T5700] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1388.210034][ T5700] usb 6-1: not running at top speed; connect to a high speed hub [ 1388.210081][ T5700] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1388.215605][ T5700] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.215636][ T5700] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1388.215691][ T5700] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1388.268354][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1388.268377][ T5700] usb 6-1: Product: syz [ 1388.268389][ T5700] usb 6-1: Manufacturer: syz [ 1388.289442][ T1242] usb 5-1: selecting invalid altsetting 0 [ 1388.310274][ T5700] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1388.310357][ T5700] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 1388.310433][ T5700] uvcvideo 6-1:1.0: Failed to create links for entity 3 [ 1388.310453][ T5700] uvcvideo 6-1:1.0: Failed to register entities (-22). [ 1388.543149][T17464] usb 6-1: USB disconnect, device number 36 [ 1388.594673][ T5727] usb 5-1: USB disconnect, device number 33 [ 1389.221642][T20113] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4224'. [ 1390.010023][ T5700] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1390.168219][ T5700] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1390.172587][ T5700] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1390.172626][ T5700] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1390.212241][ T5700] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1390.212275][ T5700] usb 9-1: Product: syz [ 1390.212292][ T5700] usb 9-1: Manufacturer: syz [ 1390.212309][ T5700] usb 9-1: SerialNumber: syz [ 1390.232610][ T5700] usb 9-1: config 0 descriptor?? [ 1390.244956][T20126] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1390.285451][ T5700] usb 9-1: selecting invalid altsetting 0 [ 1390.644290][T20137] fuse: Unknown parameter 'user_id00000000000000000000' [ 1392.000529][T20154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4237'. [ 1392.180725][T20162] sctp: [Deprecated]: syz.5.4241 (pid 20162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1392.180725][T20162] Use struct sctp_sack_info instead [ 1392.554811][ T5700] usb 9-1: USB disconnect, device number 61 [ 1392.595974][ T5596] Bluetooth: hci2: unexpected event 0x2f length: 509 > 255 [ 1393.270888][T20178] tipc: New replicast peer: 172.20.20.187 [ 1393.332115][T20178] tipc: Enabled bearer , priority 10 [ 1393.759139][T20188] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1393.823473][T20195] jffs2: notice: (20195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1394.009168][T20201] fuse: Bad value for 'fd' [ 1394.260155][T20207] program syz.5.4257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1394.479328][ T5700] tipc: Node number set to 1212317226 [ 1394.517091][T20207] bq24190-charger 0-0006: No support for SMBUS_BYTE_DATA [ 1394.517655][T20207] i2c i2c-0: new_device: Instantiated device bq24190 at 0x06 [ 1394.903065][ T5700] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1394.925084][T20227] fuse: Bad value for 'fd' [ 1395.063255][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 1395.064175][ T5700] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1395.071279][ T5700] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1395.071311][ T5700] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1395.073862][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.073891][ T5700] usb 5-1: Product: syz [ 1395.073907][ T5700] usb 5-1: Manufacturer: syz [ 1395.073923][ T5700] usb 5-1: SerialNumber: syz [ 1395.718864][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4273'. [ 1396.195178][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1396.195208][T20250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1396.492112][T20258] binder: 20257:20258 ioctl c0306201 2000000003c0 returned -22 [ 1396.601530][ T9] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 1396.768089][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1396.768741][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 1396.768783][ T9] usb 9-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1396.770068][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.770096][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1396.770164][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1396.772044][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1396.772070][ T9] usb 9-1: Product: syz [ 1396.772087][ T9] usb 9-1: Manufacturer: syz [ 1396.850525][ T5700] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1396.878883][ T9] uvcvideo 9-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1397.014250][ T5700] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1397.015953][ T5700] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1397.016000][ T5700] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1397.016030][ T5700] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1397.019367][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1397.019396][ T5700] usb 6-1: Product: syz [ 1397.019415][ T5700] usb 6-1: Manufacturer: syz [ 1397.019432][ T5700] usb 6-1: SerialNumber: syz [ 1397.033804][ T5700] usb 6-1: config 0 descriptor?? [ 1397.096594][T20260] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1397.124756][ T9] uvcvideo 9-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 3: -71 (exp. 1). [ 1397.126712][ T9] uvcvideo 9-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1). [ 1397.131892][ T9] uvcvideo 9-1:1.0: Failed to query (GET_INFO) UVC control 10 on unit 3: -71 (exp. 1). [ 1397.162614][ T9] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770. [ 1397.162703][ T9] uvcvideo 9-1:1.0: Failed to create links for entity 3 [ 1397.162722][ T9] uvcvideo 9-1:1.0: Failed to register entities (-22). [ 1397.200254][ T5700] usb 6-1: selecting invalid altsetting 0 [ 1397.229201][ T9] usb 9-1: USB disconnect, device number 62 [ 1397.347656][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.348171][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.366431][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.366776][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.367184][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.367621][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.376375][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.398084][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.443671][T20260] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1397.797952][T20265] netlink: 'syz.8.4283': attribute type 46 has an invalid length. [ 1397.797982][T20265] netlink: 'syz.8.4283': attribute type 28 has an invalid length. [ 1397.907392][ T1032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1397.947148][T14638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1398.012258][T14638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1398.015020][T14638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1398.061978][T14638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1398.078973][T14638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1398.085340][ T9] usb 5-1: USB disconnect, device number 34 [ 1398.467954][T20268] syzkaller0: entered promiscuous mode [ 1398.467985][T20268] syzkaller0: entered allmulticast mode [ 1398.474289][T20275] comedi comedi2: comedi_config --init_data is deprecated [ 1398.599564][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4287'. [ 1398.692878][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4287'. [ 1399.326609][T20259] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 1399.423774][T20291] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4291'. [ 1400.327189][T20308] FAULT_INJECTION: forcing a failure. [ 1400.327189][T20308] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.327232][T20308] CPU: 1 UID: 0 PID: 20308 Comm: syz.8.4294 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1400.327266][T20308] Tainted: [L]=SOFTLOCKUP [ 1400.327276][T20308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1400.327292][T20308] Call Trace: [ 1400.327301][T20308] [ 1400.327316][T20308] dump_stack_lvl+0xe8/0x150 [ 1400.327363][T20308] should_fail_ex+0x46b/0x600 [ 1400.327407][T20308] should_failslab+0xa8/0x100 [ 1400.327433][T20308] ? __inet_hash_connect+0xecf/0x25c0 [ 1400.327463][T20308] kmem_cache_alloc_noprof+0x9e/0x690 [ 1400.327499][T20308] ? __inet_hash_connect+0xecf/0x25c0 [ 1400.327531][T20308] __inet_hash_connect+0xecf/0x25c0 [ 1400.327560][T20308] ? __pfx___inet6_check_established+0x10/0x10 [ 1400.327634][T20308] ? __inet_hash_connect+0x5fe/0x25c0 [ 1400.327673][T20308] ? __pfx___inet_hash_connect+0x10/0x10 [ 1400.327699][T20308] ? sk_setup_caps+0x94f/0xbc0 [ 1400.327746][T20308] ? inet6_ehashfn+0x2f/0x3b0 [ 1400.327785][T20308] ? inet6_hash_connect+0xeb/0x170 [ 1400.327833][T20308] tcp_v6_connect+0x1231/0x1cf0 [ 1400.327882][T20308] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1400.327910][T20308] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1400.327943][T20308] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1400.327975][T20308] __inet_stream_connect+0x258/0xe00 [ 1400.328022][T20308] ? __pfx___inet_stream_connect+0x10/0x10 [ 1400.328052][T20308] ? __local_bh_enable+0x1e3/0x2f0 [ 1400.328093][T20308] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1400.328126][T20308] ? lockdep_hardirqs_on+0x7b/0x110 [ 1400.328161][T20308] inet_stream_connect+0x66/0xa0 [ 1400.328197][T20308] __sys_connect+0x32d/0x470 [ 1400.328225][T20308] ? __pfx___sys_connect+0x10/0x10 [ 1400.328264][T20308] ? rcu_is_watching+0x16/0xb0 [ 1400.328312][T20308] __x64_sys_connect+0x7a/0x90 [ 1400.328340][T20308] do_syscall_64+0x166/0x520 [ 1400.328366][T20308] ? trace_irq_disable+0x3b/0x140 [ 1400.328399][T20308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.328425][T20308] ? clear_bhb_loop+0x70/0xc0 [ 1400.328456][T20308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.328481][T20308] RIP: 0033:0x7fe667cae199 [ 1400.328505][T20308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.328526][T20308] RSP: 002b:00007fe665f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1400.328553][T20308] RAX: ffffffffffffffda RBX: 00007fe667f35fa0 RCX: 00007fe667cae199 [ 1400.328572][T20308] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 1400.328587][T20308] RBP: 00007fe667d458e0 R08: 0000000000000000 R09: 0000000000000000 [ 1400.328603][T20308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1400.328619][T20308] R13: 00007fe667f36038 R14: 00007fe667f35fa0 R15: 00007ffffa1dc298 [ 1400.328659][T20308] [ 1400.423944][T20259] snd-usb-audio 6-1:0.0: Runtime PM usage count underflow! [ 1400.483643][ T5700] usb 6-1: USB disconnect, device number 37 [ 1400.534113][ T5596] Bluetooth: hci6: command tx timeout [ 1400.734720][T20311] fuse: Bad value for 'user_id' [ 1400.734737][T20311] fuse: Bad value for 'user_id' [ 1400.956142][T20263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.956400][T20263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.956630][T20263] bridge_slave_0: entered allmulticast mode [ 1401.010056][T20263] bridge_slave_0: entered promiscuous mode [ 1401.019761][T20263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.024081][T20263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.024692][T20263] bridge_slave_1: entered allmulticast mode [ 1401.058002][T20263] bridge_slave_1: entered promiscuous mode [ 1401.345867][ T1242] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1401.384660][T20263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.461222][T20263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.532508][ T1242] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1401.539846][ T1242] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1401.539884][ T1242] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1401.598068][ T1242] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1401.598102][ T1242] usb 9-1: Product: syz [ 1401.598119][ T1242] usb 9-1: Manufacturer: syz [ 1401.598137][ T1242] usb 9-1: SerialNumber: syz [ 1401.762353][ T1242] usb 9-1: config 0 descriptor?? [ 1401.794250][T20321] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1401.800798][ T5700] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1401.837378][ T1242] usb 9-1: selecting invalid altsetting 0 [ 1401.998874][ T5700] usb 6-1: Using ep0 maxpacket: 8 [ 1402.087135][ T5700] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1402.115660][ T5700] usb 6-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1402.115694][ T5700] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1402.115719][ T5700] usb 6-1: config 1 has no interface number 0 [ 1402.115768][ T5700] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1402.115799][ T5700] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1402.115830][ T5700] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1402.118582][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.118731][ T5700] usb 6-1: Product: syz [ 1402.118749][ T5700] usb 6-1: Manufacturer: syz [ 1402.118991][ T5700] usb 6-1: SerialNumber: syz [ 1402.293129][T20263] team0: Port device team_slave_0 added [ 1402.465086][T20263] team0: Port device team_slave_1 added [ 1402.712164][ T1242] usb 9-1: USB disconnect, device number 63 [ 1402.786508][ T5596] Bluetooth: hci6: command tx timeout [ 1402.906152][T20263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.906174][T20263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.906205][T20263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.914482][T20263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.914502][T20263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.914535][T20263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.048479][T20329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.080742][T20329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.189952][ T5700] usb 6-1: USB disconnect, device number 38 [ 1403.379607][T20335] Bluetooth: MGMT ver 1.23 [ 1403.498070][T20263] hsr_slave_0: entered promiscuous mode [ 1403.604700][T20263] hsr_slave_1: entered promiscuous mode [ 1403.608610][T20263] debugfs: 'hsr0' already exists in 'hsr' [ 1403.608642][T20263] Cannot create hsr debugfs directory [ 1403.912270][T19016] udevd[19016]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.935223][T18975] udevd[18975]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1405.039618][ T5596] Bluetooth: hci6: command tx timeout [ 1407.292610][ T5596] Bluetooth: hci6: command tx timeout [ 1407.342752][T20263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1407.427577][T20404] 9pnet_virtio: no channels available for device syz [ 1407.572426][T20409] fuse: Bad value for 'fd' [ 1407.627023][T20412] FAULT_INJECTION: forcing a failure. [ 1407.627023][T20412] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.627073][T20412] CPU: 0 UID: 0 PID: 20412 Comm: syz.8.4327 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1407.627106][T20412] Tainted: [L]=SOFTLOCKUP [ 1407.627117][T20412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1407.627134][T20412] Call Trace: [ 1407.627144][T20412] [ 1407.627159][T20412] dump_stack_lvl+0xe8/0x150 [ 1407.627203][T20412] should_fail_ex+0x46b/0x600 [ 1407.627260][T20412] should_failslab+0xa8/0x100 [ 1407.627289][T20412] __kmalloc_cache_noprof+0xa1/0x680 [ 1407.627325][T20412] ? nft_pernet+0x23/0x240 [ 1407.627395][T20412] ? nf_tables_commit+0x906/0xad60 [ 1407.627421][T20412] ? nf_tables_commit+0x906/0xad60 [ 1407.627456][T20412] nf_tables_commit+0x906/0xad60 [ 1407.627485][T20412] ? nf_register_net_hook+0xc8/0x190 [ 1407.627527][T20412] ? nft_netdev_register_hooks+0x241/0x250 [ 1407.627594][T20412] ? __pfx_nf_tables_commit+0x10/0x10 [ 1407.627682][T20412] nfnetlink_rcv+0x1cb2/0x28d0 [ 1407.627751][T20412] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1407.627801][T20412] ? ref_tracker_free+0x668/0x820 [ 1407.627864][T20412] ? skb_clone+0x246/0x3a0 [ 1407.627899][T20412] ? __netlink_deliver_tap+0x811/0x860 [ 1407.627941][T20412] ? netlink_deliver_tap+0x2e/0x1b0 [ 1407.627972][T20412] ? netlink_deliver_tap+0x2e/0x1b0 [ 1407.628011][T20412] netlink_unicast+0x7f5/0x990 [ 1407.628051][T20412] netlink_sendmsg+0x813/0xb40 [ 1407.628096][T20412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.628130][T20412] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1407.628166][T20412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.628196][T20412] sock_sendmsg_nosec+0x13a/0x180 [ 1407.628232][T20412] ____sys_sendmsg+0x565/0x870 [ 1407.628272][T20412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1407.628312][T20412] ? import_iovec+0x73/0xa0 [ 1407.628363][T20412] ___sys_sendmsg+0x2a5/0x360 [ 1407.628392][T20412] ? __lock_acquire+0x747/0x2de0 [ 1407.628430][T20412] ? __pfx____sys_sendmsg+0x10/0x10 [ 1407.628464][T20412] ? futex_wait+0x2a2/0x390 [ 1407.628528][T20412] ? __fget_files+0x2a/0x420 [ 1407.628556][T20412] ? __fget_files+0x3a8/0x420 [ 1407.628596][T20412] __x64_sys_sendmsg+0x1b7/0x290 [ 1407.628629][T20412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1407.628683][T20412] do_syscall_64+0x166/0x520 [ 1407.628710][T20412] ? trace_irq_disable+0x3b/0x140 [ 1407.628742][T20412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.628767][T20412] ? clear_bhb_loop+0x70/0xc0 [ 1407.628797][T20412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.628822][T20412] RIP: 0033:0x7fe667cae199 [ 1407.628846][T20412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.628867][T20412] RSP: 002b:00007fe665f06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.628894][T20412] RAX: ffffffffffffffda RBX: 00007fe667f35fa0 RCX: 00007fe667cae199 [ 1407.628913][T20412] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000004 [ 1407.628930][T20412] RBP: 00007fe667d458e0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.628946][T20412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.628962][T20412] R13: 00007fe667f36038 R14: 00007fe667f35fa0 R15: 00007ffffa1dc298 [ 1407.629001][T20412] [ 1409.144321][T20263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.426469][T17464] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1409.588825][T17464] usb 9-1: Using ep0 maxpacket: 32 [ 1409.589745][T17464] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1409.591355][T17464] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1409.591384][T17464] usb 9-1: config 0 has no interface number 0 [ 1409.594652][T17464] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.594672][T17464] usb 9-1: Product: syz [ 1409.594683][T17464] usb 9-1: Manufacturer: syz [ 1409.594695][T17464] usb 9-1: SerialNumber: syz [ 1409.599199][T17464] usb 9-1: config 0 descriptor?? [ 1409.673644][T17464] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1410.065562][ T1242] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1410.251644][ T1242] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1410.285057][ T1242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.285090][ T1242] usb 6-1: Product: syz [ 1410.285108][ T1242] usb 6-1: Manufacturer: syz [ 1410.285125][ T1242] usb 6-1: SerialNumber: syz [ 1410.729283][T18512] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1411.363179][ T9] usb 6-1: USB disconnect, device number 39 [ 1412.240441][T18512] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1412.575286][T18512] ath9k_htc: Failed to initialize the device [ 1412.589271][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 1412.718235][T17464] usb 9-1: qt2_attach - failed to power on unit: -71 [ 1412.718519][T17464] quatech2 9-1:0.51: probe with driver quatech2 failed with error -71 [ 1412.771418][T17464] usb 9-1: USB disconnect, device number 64 [ 1412.924242][T20263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.466931][ T5727] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1413.667155][ T5727] usb 9-1: Using ep0 maxpacket: 8 [ 1413.667949][ T5727] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1413.677810][ T5727] usb 9-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1413.677838][ T5727] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1413.678359][ T5727] usb 9-1: config 1 has no interface number 0 [ 1413.678414][ T5727] usb 9-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1413.678445][ T5727] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1413.678476][ T5727] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1413.785556][ T5727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.785580][ T5727] usb 9-1: Product: syz [ 1413.785591][ T5727] usb 9-1: Manufacturer: syz [ 1413.785603][ T5727] usb 9-1: SerialNumber: syz [ 1414.468073][T20263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.713035][T20455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.753030][T20455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.046265][ T5727] usb 9-1: USB disconnect, device number 65 [ 1416.318146][T20479] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 1416.916574][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1416.916620][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1417.672400][ T5700] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1421.262395][T20263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1421.329572][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1421.340749][T20263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1421.667529][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1421.668699][T20263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1421.754473][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1421.756246][T20263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1421.886695][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1422.335165][T20263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.384178][T20263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.400644][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.400927][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.509280][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.509435][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1423.026435][T20543] kvm [20541]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 1424.316450][T20263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.571578][T20263] veth0_vlan: entered promiscuous mode [ 1424.605403][T20263] veth1_vlan: entered promiscuous mode [ 1424.787693][T20263] veth0_macvtap: entered promiscuous mode [ 1424.800148][T20263] veth1_macvtap: entered promiscuous mode [ 1424.866374][T20263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.898785][T20263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.937631][T19164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.937687][T19164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.937727][T19164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.937767][T19164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.986923][ T5727] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1425.049589][ T5600] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1425.153367][ T5727] usb 5-1: device descriptor read/64, error -71 [ 1425.250585][ T5600] usb 6-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 1425.324583][ T5600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.324617][ T5600] usb 6-1: Product: syz [ 1425.324636][ T5600] usb 6-1: Manufacturer: syz [ 1425.324655][ T5600] usb 6-1: SerialNumber: syz [ 1425.545808][ T5727] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1425.693465][ T5727] usb 5-1: device descriptor read/64, error -71 [ 1425.806794][ T5727] usb usb5-port1: attempt power cycle [ 1426.231303][ T5727] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1426.285530][ T5727] usb 5-1: device descriptor read/8, error -71 [ 1426.508299][ T5600] usb 6-1: USB disconnect, device number 40 [ 1426.558463][T19168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.558490][T19168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.573347][ T5727] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1426.597169][ T5727] usb 5-1: device descriptor read/8, error -71 [ 1426.748774][ T5727] usb usb5-port1: unable to enumerate USB device [ 1427.060243][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.060270][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.656469][ T5700] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1427.829872][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 1427.830773][ T5700] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1427.832964][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.833040][ T5700] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1427.833087][ T5700] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1427.833140][ T5700] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1427.833171][ T5700] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1427.835785][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.835814][ T5700] usb 2-1: Product: syz [ 1427.835832][ T5700] usb 2-1: Manufacturer: syz [ 1427.835849][ T5700] usb 2-1: SerialNumber: syz [ 1427.993877][ T5700] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1427.994085][ T5700] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1428.490946][ T5700] usb 2-1: USB disconnect, device number 14 [ 1428.580946][T19177] udevd[19177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1430.277817][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1430.418856][ T9] usb 6-1: device descriptor read/64, error -71 [ 1430.689591][ T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1430.841069][ T9] usb 6-1: device descriptor read/64, error -71 [ 1430.961630][ T9] usb usb6-port1: attempt power cycle [ 1431.334805][ T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1431.356503][ T9] usb 6-1: device descriptor read/8, error -71 [ 1431.519652][ T5596] Bluetooth: hci5: Dropping invalid advertising data [ 1431.519751][ T5596] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1431.610334][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1431.617601][T19164] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1431.639604][ T9] usb 6-1: device descriptor read/8, error -71 [ 1431.751641][ T9] usb usb6-port1: unable to enumerate USB device [ 1432.204458][T20665] netlink: 'syz.1.4406': attribute type 1 has an invalid length. [ 1432.972420][T14638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1433.017186][T14638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1433.034959][T14638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1433.070671][T14638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1433.071496][T14638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1433.222599][T20687] program syz.4.4413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1434.123122][ T5700] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1434.289789][ T5700] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e [ 1434.291204][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.291261][ T5700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1434.291292][ T5700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1434.291310][ T5700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1434.291329][ T5700] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1434.291345][ T5700] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1434.291363][ T5700] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1434.399844][ T5700] usb 2-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3 [ 1434.399872][ T5700] usb 2-1: Product: syz [ 1434.399885][ T5700] usb 2-1: Manufacturer: syz [ 1434.399903][ T5700] usb 2-1: SerialNumber: syz [ 1434.434168][T20705] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1434.455422][T20705] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1434.455572][T20705] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1434.480031][ T5700] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 1434.486686][ T5700] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1434.490651][ T5700] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 1434.490845][ T5700] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1434.554298][ T5700] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1434.643511][T20681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.643635][T20681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.643818][T20681] bridge_slave_0: entered allmulticast mode [ 1434.646807][T20681] bridge_slave_0: entered promiscuous mode [ 1434.650174][T20681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.650593][T20681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.650782][T20681] bridge_slave_1: entered allmulticast mode [ 1434.656399][T20681] bridge_slave_1: entered promiscuous mode [ 1434.922533][T20681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.939291][T20681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.945003][T20714] syzkaller0: entered promiscuous mode [ 1434.945034][T20714] syzkaller0: entered allmulticast mode [ 1435.294110][ T5700] usb 2-1: USB disconnect, device number 15 [ 1435.323885][ T5700] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1435.331450][ T5700] keyspan 2-1:1.0: device disconnected [ 1435.391311][T20721] fuse: Invalid rootmode [ 1435.515461][T20681] team0: Port device team_slave_0 added [ 1435.524824][T20681] team0: Port device team_slave_1 added [ 1435.542460][ T5596] Bluetooth: hci7: command tx timeout [ 1435.639137][T20681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.639154][T20681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.639175][T20681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.655120][T20681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.655183][T20681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.655323][T20681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.834034][T20681] hsr_slave_0: entered promiscuous mode [ 1435.850002][T20681] hsr_slave_1: entered promiscuous mode [ 1435.869951][T20681] debugfs: 'hsr0' already exists in 'hsr' [ 1435.869985][T20681] Cannot create hsr debugfs directory [ 1435.916166][T20728] program syz.5.4423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1436.210729][T20737] jffs2: notice: (20737) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1436.267313][T20738] binder: 20735:20738 ioctl 402c542c 0 returned -22 [ 1436.311188][ T5600] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1436.452162][ T5600] usb 2-1: device descriptor read/64, error -71 [ 1436.712000][ T5600] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1436.852852][ T5600] usb 2-1: device descriptor read/64, error -71 [ 1436.979147][ T5600] usb usb2-port1: attempt power cycle [ 1437.372675][ T5600] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1437.381996][T20760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4432'. [ 1437.418742][ T5600] usb 2-1: device descriptor read/8, error -71 [ 1437.686757][ T5600] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1437.712789][ T5600] usb 2-1: device descriptor read/8, error -71 [ 1437.799969][ T5596] Bluetooth: hci7: command tx timeout [ 1437.828848][ T5600] usb usb2-port1: unable to enumerate USB device [ 1438.235656][T20753] syzkaller0: entered promiscuous mode [ 1438.235680][T20753] syzkaller0: entered allmulticast mode [ 1439.463273][ T5700] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1439.594569][T20803] FAULT_INJECTION: forcing a failure. [ 1439.594569][T20803] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.594615][T20803] CPU: 1 UID: 0 PID: 20803 Comm: syz.1.4442 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1439.594651][T20803] Tainted: [L]=SOFTLOCKUP [ 1439.594662][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1439.594677][T20803] Call Trace: [ 1439.594687][T20803] [ 1439.594722][T20803] dump_stack_lvl+0xe8/0x150 [ 1439.594777][T20803] should_fail_ex+0x46b/0x600 [ 1439.594821][T20803] should_failslab+0xa8/0x100 [ 1439.594850][T20803] __kmalloc_noprof+0xfb/0x790 [ 1439.594894][T20803] ? __register_sysctl_table+0x6f/0x1370 [ 1439.594970][T20803] ? __register_sysctl_table+0x6f/0x1370 [ 1439.595013][T20803] __register_sysctl_table+0x6f/0x1370 [ 1439.595052][T20803] ? __asan_memcpy+0x40/0x70 [ 1439.595090][T20803] register_pidns_sysctls+0x105/0x1e0 [ 1439.595123][T20803] copy_pid_ns+0x54d/0x940 [ 1439.595165][T20803] ? __pfx_copy_pid_ns+0x10/0x10 [ 1439.595201][T20803] ? rcu_is_watching+0x16/0xb0 [ 1439.595239][T20803] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1439.595264][T20803] ? create_new_namespaces+0x33/0x6b0 [ 1439.595306][T20803] ? copy_ipcs+0x2a9/0x6c0 [ 1439.595340][T20803] ? copy_utsname+0x184/0x620 [ 1439.595372][T20803] create_new_namespaces+0x2ad/0x6b0 [ 1439.595410][T20803] ? security_capable+0x7e/0x2c0 [ 1439.595443][T20803] unshare_nsproxy_namespaces+0x149/0x190 [ 1439.595481][T20803] ksys_unshare+0x5a7/0x950 [ 1439.595524][T20803] ? __pfx_ksys_unshare+0x10/0x10 [ 1439.595561][T20803] ? rcu_is_watching+0x16/0xb0 [ 1439.595610][T20803] __x64_sys_unshare+0x38/0x50 [ 1439.595646][T20803] do_syscall_64+0x166/0x520 [ 1439.595674][T20803] ? trace_irq_disable+0x3b/0x140 [ 1439.595706][T20803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.595732][T20803] ? clear_bhb_loop+0x70/0xc0 [ 1439.595761][T20803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.595795][T20803] RIP: 0033:0x7f205e54e199 [ 1439.595819][T20803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.595841][T20803] RSP: 002b:00007f205c7a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1439.595868][T20803] RAX: ffffffffffffffda RBX: 00007f205e7d5fa0 RCX: 00007f205e54e199 [ 1439.595888][T20803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 1439.595903][T20803] RBP: 00007f205e5e58e0 R08: 0000000000000000 R09: 0000000000000000 [ 1439.595920][T20803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.595935][T20803] R13: 00007f205e7d6038 R14: 00007f205e7d5fa0 R15: 00007ffd1bd42b08 [ 1439.595973][T20803] [ 1439.679841][ T5700] usb 5-1: Using ep0 maxpacket: 8 [ 1439.685775][ T5700] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1439.734632][ T5700] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1439.734717][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1439.734789][ T5700] usb 5-1: config 1 has no interface number 0 [ 1439.734923][ T5700] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1439.734998][ T5700] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1439.735075][ T5700] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1439.794833][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.794919][ T5700] usb 5-1: Product: syz [ 1439.794963][ T5700] usb 5-1: Manufacturer: syz [ 1439.795006][ T5700] usb 5-1: SerialNumber: syz [ 1439.932581][ T5700] usb 5-1: Device is not authorized for usage [ 1440.054299][ T5596] Bluetooth: hci7: command tx timeout [ 1440.870219][T20814] syzkaller0: entered promiscuous mode [ 1440.870250][T20814] syzkaller0: entered allmulticast mode [ 1442.382177][T14638] Bluetooth: hci7: command tx timeout [ 1442.560082][ T1242] usb 5-1: USB disconnect, device number 40 [ 1442.840599][T20865] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1443.342179][T20870] syzkaller0: entered promiscuous mode [ 1443.342209][T20870] syzkaller0: entered allmulticast mode [ 1444.283443][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1444.490789][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1444.510932][T20681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1444.525254][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.525288][ T9] usb 2-1: Product: syz [ 1444.525307][ T9] usb 2-1: Manufacturer: syz [ 1444.525324][ T9] usb 2-1: SerialNumber: syz [ 1444.585489][ T5727] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1444.611660][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1444.613862][T20681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1444.635332][ T5808] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1444.712454][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1444.770817][ T5808] usb 5-1: device descriptor read/64, error -71 [ 1444.772032][T20681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1444.947309][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1444.963384][T20906] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4467'. [ 1445.041688][ T5808] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1445.046603][T20681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1445.169901][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1445.213580][ T5808] usb 5-1: device descriptor read/64, error -71 [ 1445.324264][ T5808] usb usb5-port1: attempt power cycle [ 1446.571663][ T5727] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1446.661740][T18709] usb 2-1: USB disconnect, device number 20 [ 1446.674795][ T5808] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1446.717818][ T5808] usb 5-1: device descriptor read/8, error -71 [ 1446.962696][ T5727] ath9k_htc: Failed to initialize the device [ 1446.967997][T18709] usb 2-1: ath9k_htc: USB layer deinitialized [ 1446.982006][ T5808] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1447.002807][ T5808] usb 5-1: device descriptor read/8, error -71 [ 1447.135547][ T5808] usb usb5-port1: unable to enumerate USB device [ 1447.390996][T20681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.431245][T20681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.464913][T19168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.465059][T19168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.586161][T19168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.598951][T19168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.019015][ T5808] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1449.190280][ T5808] usb 5-1: Using ep0 maxpacket: 8 [ 1449.191470][ T5808] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1449.193190][ T5808] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1449.193221][ T5808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1449.193245][ T5808] usb 5-1: config 1 has no interface number 0 [ 1449.193416][ T5808] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1449.193447][ T5808] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1449.193476][ T5808] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1449.197004][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.197033][ T5808] usb 5-1: Product: syz [ 1449.197050][ T5808] usb 5-1: Manufacturer: syz [ 1449.197067][ T5808] usb 5-1: SerialNumber: syz [ 1449.296355][ T5808] usb 5-1: Device is not authorized for usage [ 1450.561673][T20681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.562302][T21032] fuse: Bad value for 'fd' [ 1450.966690][ T5594] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1451.058242][T20681] veth0_vlan: entered promiscuous mode [ 1451.082878][T20681] veth1_vlan: entered promiscuous mode [ 1451.113801][ T5594] usb 6-1: device descriptor read/64, error -71 [ 1451.275426][T20681] veth0_macvtap: entered promiscuous mode [ 1451.335426][T20681] veth1_macvtap: entered promiscuous mode [ 1451.367472][ T5594] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1451.408582][T20681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.459910][T20681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.509708][ T5594] usb 6-1: device descriptor read/64, error -71 [ 1451.628813][ T5594] usb usb6-port1: attempt power cycle [ 1451.674405][ T166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.244108][T19166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.244443][T19166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.245053][T19166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.496769][ T9] usb 5-1: USB disconnect, device number 45 [ 1452.514567][ T5594] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1452.532961][ T5594] usb 6-1: device descriptor read/8, error -71 [ 1452.557433][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.253176][ T5594] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1453.278482][ T5594] usb 6-1: device descriptor read/8, error -71 [ 1453.364408][T19158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.364452][T19158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.393665][ T5594] usb usb6-port1: unable to enumerate USB device [ 1453.781788][T19166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.781815][T19166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.786099][T14638] Bluetooth: hci5: command 0x0406 tx timeout [ 1455.332041][ T7014] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1455.392820][ T5817] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1455.504501][ T7014] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1455.529036][ T7014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.529071][ T7014] usb 6-1: Product: syz [ 1455.529090][ T7014] usb 6-1: Manufacturer: syz [ 1455.529108][ T7014] usb 6-1: SerialNumber: syz [ 1455.674455][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1455.691849][ T5817] usb 2-1: not running at top speed; connect to a high speed hub [ 1455.691978][ T5817] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1455.720621][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.720653][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1455.720974][ T5817] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1455.771319][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1455.771361][ T5817] usb 2-1: Product: syz [ 1455.771378][ T5817] usb 2-1: Manufacturer: syz [ 1455.852916][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1456.031605][ T5817] uvcvideo 2-1:1.0: Found UVC 0.00 device syz (8086:0ad2) [ 1456.031646][ T5817] uvcvideo 2-1:1.0: No valid video chain found. [ 1456.550357][ T5600] usb 2-1: USB disconnect, device number 21 [ 1457.048492][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1457.143708][T21104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1457.144094][T21104] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1457.934984][ T9] ath9k_htc: Failed to initialize the device [ 1457.991826][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 1459.207946][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 1459.695422][T21136] FAULT_INJECTION: forcing a failure. [ 1459.695422][T21136] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.695468][T21136] CPU: 0 UID: 0 PID: 21136 Comm: syz.1.4512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1459.695507][T21136] Tainted: [L]=SOFTLOCKUP [ 1459.695516][T21136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1459.695532][T21136] Call Trace: [ 1459.695541][T21136] [ 1459.695552][T21136] dump_stack_lvl+0xe8/0x150 [ 1459.695595][T21136] should_fail_ex+0x46b/0x600 [ 1459.695636][T21136] should_failslab+0xa8/0x100 [ 1459.695662][T21136] ? vm_area_alloc+0x24/0x140 [ 1459.695709][T21136] kmem_cache_alloc_noprof+0x9e/0x690 [ 1459.695744][T21136] ? vm_area_alloc+0x24/0x140 [ 1459.695788][T21136] vm_area_alloc+0x24/0x140 [ 1459.695826][T21136] mmap_region+0x1400/0x25c0 [ 1459.695865][T21136] ? do_raw_spin_lock+0x12b/0x2f0 [ 1459.695895][T21136] ? __pfx_mmap_region+0x10/0x10 [ 1459.695924][T21136] ? rcu_is_watching+0x16/0xb0 [ 1459.695960][T21136] ? trace_hrtimer_start+0x82/0x200 [ 1459.696014][T21136] ? lockdep_hardirqs_on+0x7b/0x110 [ 1459.696099][T21136] ? futex_unqueue+0x22/0x240 [ 1459.696175][T21136] ? cap_mmap_addr+0xaf/0x100 [ 1459.696212][T21136] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1459.696240][T21136] ? security_mmap_addr+0x71/0x240 [ 1459.696281][T21136] do_mmap+0xe0e/0x1310 [ 1459.696319][T21136] ? __pfx_do_mmap+0x10/0x10 [ 1459.696358][T21136] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1459.696391][T21136] ? rwbase_write_lock+0x550/0x720 [ 1459.696434][T21136] vm_mmap_pgoff+0x275/0x4e0 [ 1459.696473][T21136] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1459.696504][T21136] ? rcu_is_watching+0x16/0xb0 [ 1459.696549][T21136] ? __x64_sys_mmap+0x7f/0x140 [ 1459.696580][T21136] do_syscall_64+0x166/0x520 [ 1459.696606][T21136] ? trace_irq_disable+0x3b/0x140 [ 1459.696638][T21136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.696664][T21136] ? clear_bhb_loop+0x70/0xc0 [ 1459.696702][T21136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.696727][T21136] RIP: 0033:0x7f205e54e199 [ 1459.696751][T21136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.696773][T21136] RSP: 002b:00007f205c7a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1459.696800][T21136] RAX: ffffffffffffffda RBX: 00007f205e7d5fa0 RCX: 00007f205e54e199 [ 1459.696819][T21136] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 1459.696836][T21136] RBP: 00007f205e5e58e0 R08: ffffffffffffffff R09: 00000000ec776000 [ 1459.696854][T21136] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 1459.696869][T21136] R13: 00007f205e7d6038 R14: 00007f205e7d5fa0 R15: 00007ffd1bd42b08 [ 1459.696907][T21136] [ 1460.213584][T21104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1460.281699][T21104] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1460.374731][T21104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1460.374891][T21104] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1460.464252][T21104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1460.464359][T21104] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1460.582147][T21104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1460.582246][T21104] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1460.767354][T21104] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1460.767506][T21104] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1460.821075][T21152] 9pnet_virtio: no channels available for device syz [ 1460.877855][T21104] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1460.877954][T21104] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1461.004585][T21104] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1461.108890][T21104] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1461.109031][T21104] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1461.209051][T21104] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1461.457300][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 1461.664448][T18709] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1461.712145][ T1242] usb 6-1: USB disconnect, device number 49 [ 1461.874383][T18709] usb 1-1: Using ep0 maxpacket: 32 [ 1461.875414][T18709] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1461.877147][T18709] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1461.877178][T18709] usb 1-1: config 0 has no interface number 0 [ 1461.882431][T18709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.882462][T18709] usb 1-1: Product: syz [ 1461.882480][T18709] usb 1-1: Manufacturer: syz [ 1461.882497][T18709] usb 1-1: SerialNumber: syz [ 1461.963743][T18709] usb 1-1: config 0 descriptor?? [ 1461.989937][T18709] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1462.412208][T21181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4521'. [ 1462.415127][ T5596] Bluetooth: hci0: command 0x0406 tx timeout [ 1462.579159][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 1462.665146][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 1462.762747][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 1463.014140][ T5596] Bluetooth: hci5: command 0x0406 tx timeout [ 1463.099353][ T5596] Bluetooth: hci6: command 0x0c1a tx timeout [ 1463.358369][ T5596] Bluetooth: hci7: command 0x0c1a tx timeout [ 1463.884824][T18709] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1463.885142][T18709] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 1463.944413][T18709] usb 1-1: USB disconnect, device number 16 [ 1464.344015][ T1242] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1464.509062][ T1242] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1464.516341][ T1242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.516376][ T1242] usb 6-1: Product: syz [ 1464.516395][ T1242] usb 6-1: Manufacturer: syz [ 1464.516413][ T1242] usb 6-1: SerialNumber: syz [ 1464.655963][T18709] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1464.661998][ T5596] Bluetooth: hci0: command 0x0406 tx timeout [ 1464.832198][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 1464.921064][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 1465.043606][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 1465.258472][T19167] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1465.264785][ T5596] Bluetooth: hci5: command 0x0406 tx timeout [ 1465.294624][T21220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.295702][T21220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.351723][ T5596] Bluetooth: hci6: command 0x0c1a tx timeout [ 1465.394046][T21220] random: crng reseeded on system resumption [ 1465.611467][ T5596] Bluetooth: hci7: command 0x0c1a tx timeout [ 1465.872776][T18709] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1465.967316][T18709] ath9k_htc: Failed to initialize the device [ 1466.047576][ T7014] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1466.261267][ T7014] usb 2-1: Using ep0 maxpacket: 8 [ 1466.262283][ T7014] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1466.264116][ T7014] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1466.264144][ T7014] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1466.264167][ T7014] usb 2-1: config 1 has no interface number 0 [ 1466.264210][ T7014] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1466.264239][ T7014] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1466.264267][ T7014] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1466.282679][T18709] usb 6-1: ath9k_htc: USB layer deinitialized [ 1466.383725][ T7014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.383759][ T7014] usb 2-1: Product: syz [ 1466.383777][ T7014] usb 2-1: Manufacturer: syz [ 1466.383794][ T7014] usb 2-1: SerialNumber: syz [ 1466.842006][ T5600] usb 6-1: USB disconnect, device number 50 [ 1467.259463][T21223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.260143][T21223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.350839][T18709] usb 2-1: USB disconnect, device number 22 [ 1467.604641][ T5596] Bluetooth: hci6: command 0x0c1a tx timeout [ 1467.864427][ T5596] Bluetooth: hci7: command 0x0c1a tx timeout [ 1467.887546][ T5600] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1468.051761][ T5600] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1468.052929][ T5600] usb 6-1: not running at top speed; connect to a high speed hub [ 1468.052960][ T5600] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1468.069633][ T5600] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.069670][ T5600] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1468.069708][ T5600] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1468.124896][ T5600] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1468.124919][ T5600] usb 6-1: Product: syz [ 1468.124931][ T5600] usb 6-1: Manufacturer: syz [ 1468.215928][ T5600] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1468.215969][ T5600] uvcvideo 6-1:1.0: No valid video chain found. [ 1468.430147][ T5600] usb 6-1: USB disconnect, device number 51 [ 1468.481934][T18709] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1468.648205][T18709] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1468.649892][T18709] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1468.649928][T18709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1468.652485][T18709] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1468.652517][T18709] usb 2-1: Product: syz [ 1468.652529][T18709] usb 2-1: Manufacturer: syz [ 1468.652542][T18709] usb 2-1: SerialNumber: syz [ 1468.728542][T18709] usb 2-1: config 0 descriptor?? [ 1468.730440][T21240] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1468.766229][T18709] usb 2-1: selecting invalid altsetting 0 [ 1468.831105][T21251] syzkaller0: entered promiscuous mode [ 1468.831134][T21251] syzkaller0: entered allmulticast mode [ 1469.005558][T18709] usb 2-1: USB disconnect, device number 23 [ 1469.512477][ T7014] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1469.674338][ T7014] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1469.679029][ T7014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.679063][ T7014] usb 5-1: Product: syz [ 1469.679075][ T7014] usb 5-1: Manufacturer: syz [ 1469.679086][ T7014] usb 5-1: SerialNumber: syz [ 1469.685886][T19168] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm kworker/u8:32: bg 3: bad block bitmap checksum [ 1469.726562][T19168] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3583 with max blocks 1 with error 74 [ 1469.726634][T19168] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1469.726634][T19168] [ 1469.790299][ T7014] usb 5-1: Device is not authorized for usage [ 1469.944207][T18709] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1470.009150][ T5600] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1470.142530][T18709] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1470.146083][T18709] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1470.146118][T18709] usb 1-1: Product: syz [ 1470.146136][T18709] usb 1-1: SerialNumber: syz [ 1470.161041][T18709] usb 1-1: config 0 descriptor?? [ 1470.193234][ T5600] usb 2-1: Using ep0 maxpacket: 8 [ 1470.194237][ T5600] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1470.196058][ T5600] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1470.196086][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.196109][ T5600] usb 2-1: config 1 has no interface number 0 [ 1470.196156][ T5600] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1470.196185][ T5600] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1470.196216][ T5600] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1470.200379][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.200408][ T5600] usb 2-1: Product: syz [ 1470.200426][ T5600] usb 2-1: Manufacturer: syz [ 1470.200443][ T5600] usb 2-1: SerialNumber: syz [ 1470.462105][T18709] hso 1-1:0.0: Failed to find BULK eps [ 1471.041355][T21267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.042036][T21267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.176180][ T5600] usb 2-1: USB disconnect, device number 24 [ 1471.317758][ T5700] usb 1-1: USB disconnect, device number 17 [ 1472.239718][T21287] syzkaller0: entered promiscuous mode [ 1472.239751][T21287] syzkaller0: entered allmulticast mode [ 1472.262205][ T5600] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1472.494218][ T5600] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1472.494886][ T5600] usb 2-1: not running at top speed; connect to a high speed hub [ 1472.495003][ T5600] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1472.496649][ T5600] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.496677][ T5600] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1472.496741][ T5600] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1472.499198][ T5600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1472.499227][ T5600] usb 2-1: Product: syz [ 1472.499245][ T5600] usb 2-1: Manufacturer: syz [ 1472.599914][ T5600] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1472.599949][ T5600] uvcvideo 2-1:1.0: No valid video chain found. [ 1472.715947][T11470] usb 5-1: USB disconnect, device number 46 [ 1472.728130][ T1242] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1472.820424][ T5600] usb 2-1: USB disconnect, device number 25 [ 1472.912919][ T1242] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1472.918896][ T1242] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 1472.918951][ T1242] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1472.922644][ T1242] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1472.922674][ T1242] usb 6-1: Product: syz [ 1472.926653][ T1242] usb 6-1: Manufacturer: syz [ 1472.926709][ T1242] usb 6-1: SerialNumber: syz [ 1472.954190][ T1242] usb 6-1: config 0 descriptor?? [ 1472.973472][T21291] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1472.994624][ T1242] usb 6-1: selecting invalid altsetting 0 [ 1473.215336][T11470] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1473.249288][ T5600] usb 6-1: USB disconnect, device number 52 [ 1473.402628][T11470] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1473.406414][T11470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.406446][T11470] usb 5-1: Product: syz [ 1473.406462][T11470] usb 5-1: Manufacturer: syz [ 1473.406478][T11470] usb 5-1: SerialNumber: syz [ 1473.428619][T11470] usb 5-1: Device is not authorized for usage [ 1474.184965][T21309] tipc: Enabled bearer , priority 0 [ 1474.185929][T21309] syzkaller0: entered promiscuous mode [ 1474.185948][T21309] syzkaller0: entered allmulticast mode [ 1474.189585][T21309] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1474.359190][T21310] tipc: Resetting bearer [ 1474.434415][T21308] tipc: Resetting bearer [ 1474.722801][T21308] tipc: Disabling bearer [ 1475.166303][ T5596] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1475.786308][T21327] syzkaller0: entered promiscuous mode [ 1475.786329][T21327] syzkaller0: entered allmulticast mode [ 1476.147036][T17464] usb 5-1: USB disconnect, device number 47 [ 1476.248997][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4577'. [ 1476.833286][T17464] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1476.997876][T17464] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1477.001537][T17464] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1477.001567][T17464] usb 1-1: Product: syz [ 1477.001589][T17464] usb 1-1: SerialNumber: syz [ 1477.033459][T17464] usb 1-1: config 0 descriptor?? [ 1477.266782][T17464] hso 1-1:0.0: Failed to find BULK eps [ 1477.470629][T21356] FAULT_INJECTION: forcing a failure. [ 1477.470629][T21356] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.470682][T21356] CPU: 0 UID: 0 PID: 21356 Comm: syz.4.4584 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1477.470716][T21356] Tainted: [L]=SOFTLOCKUP [ 1477.470726][T21356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1477.470741][T21356] Call Trace: [ 1477.470756][T21356] [ 1477.470772][T21356] dump_stack_lvl+0xe8/0x150 [ 1477.470815][T21356] should_fail_ex+0x46b/0x600 [ 1477.470853][T21356] ? sock_alloc_inode+0x2c/0x1a0 [ 1477.470898][T21356] should_failslab+0xa8/0x100 [ 1477.470928][T21356] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1477.470965][T21356] ? sock_alloc_inode+0x2c/0x1a0 [ 1477.471005][T21356] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1477.471038][T21356] sock_alloc_inode+0x2c/0x1a0 [ 1477.471077][T21356] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1477.471102][T21356] alloc_inode+0x6a/0x1b0 [ 1477.471122][T21356] __sock_create+0x12d/0x9d0 [ 1477.471155][T21356] __sys_socket+0xd6/0x1b0 [ 1477.471184][T21356] __x64_sys_socket+0x7a/0x90 [ 1477.471211][T21356] do_syscall_64+0x166/0x520 [ 1477.471230][T21356] ? trace_irq_disable+0x3b/0x140 [ 1477.471253][T21356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.471301][T21356] ? clear_bhb_loop+0x70/0xc0 [ 1477.471330][T21356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.471356][T21356] RIP: 0033:0x7f957198e199 [ 1477.471373][T21356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.471386][T21356] RSP: 002b:00007f956fbe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1477.471405][T21356] RAX: ffffffffffffffda RBX: 00007f9571c15fa0 RCX: 00007f957198e199 [ 1477.471418][T21356] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1477.471428][T21356] RBP: 00007f9571a258e0 R08: 0000000000000000 R09: 0000000000000000 [ 1477.471439][T21356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.471449][T21356] R13: 00007f9571c16038 R14: 00007f9571c15fa0 R15: 00007fff977cc618 [ 1477.471475][T21356] [ 1477.471484][T21356] socket: no more sockets [ 1477.956495][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4588'. [ 1478.049607][T11470] usb 1-1: USB disconnect, device number 18 [ 1478.189233][ T1242] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1478.352000][ T1242] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1478.376961][ T1242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.376994][ T1242] usb 5-1: Product: syz [ 1478.377013][ T1242] usb 5-1: Manufacturer: syz [ 1478.377031][ T1242] usb 5-1: SerialNumber: syz [ 1478.432888][ T1242] usb 5-1: Device is not authorized for usage [ 1478.771110][T14638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1478.840869][T14638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1478.846684][T14638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1478.887896][T14638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1478.902985][T14638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1479.389515][T21394] dlm: no locking on control device [ 1479.514518][T21399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1479.641173][T21403] smc: net device veth1_macvtap applied user defined pnetid SYZ2 [ 1479.858504][T21408] netlink: 'syz.5.4603': attribute type 1 has an invalid length. [ 1479.913150][T21408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1480.000086][T21410] netlink: 'syz.5.4603': attribute type 10 has an invalid length. [ 1480.000107][T21410] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4603'. [ 1480.058602][T21408] bond1: (slave dummy0): making interface the new active one [ 1480.060238][T21408] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1480.245564][T21410] dummy0: entered promiscuous mode [ 1480.290201][T21410] bond1: (slave dummy0): Releasing active interface [ 1480.765380][ T1242] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1480.869512][T21380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.869741][T21380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.869992][T21380] bridge_slave_0: entered allmulticast mode [ 1480.872887][T21380] bridge_slave_0: entered promiscuous mode [ 1480.885219][T21380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.885850][T21380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.887417][T21380] bridge_slave_1: entered allmulticast mode [ 1480.894271][T21380] bridge_slave_1: entered promiscuous mode [ 1480.933958][ T1242] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1480.961250][ T1242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.961284][ T1242] usb 6-1: Product: syz [ 1480.961311][ T1242] usb 6-1: Manufacturer: syz [ 1480.961328][ T1242] usb 6-1: SerialNumber: syz [ 1481.027356][T11470] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1481.279386][ T5700] usb 5-1: USB disconnect, device number 48 [ 1481.362328][T21380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.394879][ T5596] Bluetooth: hci8: command tx timeout [ 1481.596970][T21434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.629923][T21434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.684579][T21380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.839143][T21438] random: crng reseeded on system resumption [ 1481.889923][T21439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4610'. [ 1482.234044][T21380] team0: Port device team_slave_0 added [ 1482.374402][T21380] team0: Port device team_slave_1 added [ 1482.435768][T11470] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1482.477095][T11470] ath9k_htc: Failed to initialize the device [ 1482.702401][T11470] usb 6-1: ath9k_htc: USB layer deinitialized [ 1483.518358][ T5700] usb 6-1: USB disconnect, device number 53 [ 1483.608783][T21380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.608806][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.608838][T21380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.620866][T21380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.620907][T21380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.620954][T21380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.646657][ T5596] Bluetooth: hci8: command tx timeout [ 1484.030984][T21380] hsr_slave_0: entered promiscuous mode [ 1484.034045][T21380] hsr_slave_1: entered promiscuous mode [ 1484.035772][T21380] debugfs: 'hsr0' already exists in 'hsr' [ 1484.035802][T21380] Cannot create hsr debugfs directory [ 1484.259699][T21456] syz.1.4614 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1485.152082][T17464] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1485.321271][T17464] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1485.345063][T17464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.345086][T17464] usb 2-1: Product: syz [ 1485.345097][T17464] usb 2-1: Manufacturer: syz [ 1485.345109][T17464] usb 2-1: SerialNumber: syz [ 1485.422622][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1485.888679][ T5596] Bluetooth: hci8: command tx timeout [ 1486.216417][T11470] usb 2-1: USB disconnect, device number 26 [ 1486.224817][T21471] FAULT_INJECTION: forcing a failure. [ 1486.224817][T21471] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.224862][T21471] CPU: 0 UID: 0 PID: 21471 Comm: syz.5.4620 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1486.225003][T21471] Tainted: [L]=SOFTLOCKUP [ 1486.225032][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1486.225074][T21471] Call Trace: [ 1486.225104][T21471] [ 1486.225127][T21471] dump_stack_lvl+0xe8/0x150 [ 1486.225242][T21471] should_fail_ex+0x46b/0x600 [ 1486.225349][T21471] should_failslab+0xa8/0x100 [ 1486.225420][T21471] ? vm_area_dup+0x28/0x750 [ 1486.225509][T21471] kmem_cache_alloc_noprof+0x9e/0x690 [ 1486.225602][T21471] ? vm_area_dup+0x28/0x750 [ 1486.225711][T21471] vm_area_dup+0x28/0x750 [ 1486.225795][T21471] ? dup_mmap+0x70e/0x1d80 [ 1486.225859][T21471] dup_mmap+0x8d6/0x1d80 [ 1486.226007][T21471] ? __pfx_dup_mmap+0x10/0x10 [ 1486.226090][T21471] ? reacquire_held_locks+0x117/0x1a0 [ 1486.226180][T21471] ? rt_spin_lock+0x1e2/0x400 [ 1486.226312][T21471] ? lock_acquire+0x115/0x350 [ 1486.226462][T21471] copy_mm+0x115/0x480 [ 1486.226524][T21471] copy_process+0x1e7e/0x4410 [ 1486.226592][T21471] ? copy_process+0xd16/0x4410 [ 1486.226715][T21471] ? __pfx_copy_process+0x10/0x10 [ 1486.226812][T21471] ? futex_wait+0x2a2/0x390 [ 1486.226911][T21471] kernel_clone+0x2d2/0x8d0 [ 1486.227001][T21471] ? __pfx_kernel_clone+0x10/0x10 [ 1486.227119][T21471] ? do_futex+0x3e7/0x4e0 [ 1486.227196][T21471] __x64_sys_clone+0x1b6/0x230 [ 1486.227293][T21471] ? __pfx___x64_sys_clone+0x10/0x10 [ 1486.227425][T21471] ? rcu_is_watching+0x16/0xb0 [ 1486.227554][T21471] do_syscall_64+0x166/0x520 [ 1486.227627][T21471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.227678][T21471] ? clear_bhb_loop+0x70/0xc0 [ 1486.227770][T21471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.227842][T21471] RIP: 0033:0x7fb8652be199 [ 1486.227921][T21471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.227974][T21471] RSP: 002b:00007fb863515fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1486.228040][T21471] RAX: ffffffffffffffda RBX: 00007fb865545fa0 RCX: 00007fb8652be199 [ 1486.228078][T21471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020100000 [ 1486.228114][T21471] RBP: 00007fb8653558e0 R08: 0000000000000000 R09: 0000000000000000 [ 1486.228149][T21471] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1486.228193][T21471] R13: 00007fb865546038 R14: 00007fb865545fa0 R15: 00007ffc718f2738 [ 1486.228260][T21471] [ 1486.589049][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1486.679686][ T9] ath9k_htc: Failed to initialize the device [ 1486.680316][T11470] usb 2-1: ath9k_htc: USB layer deinitialized [ 1487.354832][T21491] program syz.4.4627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1487.393523][T21491] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1487.431836][T21492] FAULT_INJECTION: forcing a failure. [ 1487.431836][T21492] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1487.431882][T21492] CPU: 0 UID: 0 PID: 21492 Comm: syz.1.4628 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1487.431916][T21492] Tainted: [L]=SOFTLOCKUP [ 1487.431926][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1487.431941][T21492] Call Trace: [ 1487.431951][T21492] [ 1487.431962][T21492] dump_stack_lvl+0xe8/0x150 [ 1487.432021][T21492] should_fail_ex+0x46b/0x600 [ 1487.432062][T21492] get_futex_key+0x1b4/0x1580 [ 1487.432097][T21492] ? __lock_acquire+0x747/0x2de0 [ 1487.432135][T21492] ? kasan_save_track+0x3e/0x80 [ 1487.432171][T21492] ? __kasan_slab_free+0x5c/0x80 [ 1487.432205][T21492] ? kmem_cache_free+0x187/0x6d0 [ 1487.432242][T21492] ? __pfx_get_futex_key+0x10/0x10 [ 1487.432292][T21492] futex_wake+0x119/0x600 [ 1487.432328][T21492] ? __pfx_futex_wake+0x10/0x10 [ 1487.432378][T21492] do_futex+0x458/0x4e0 [ 1487.432409][T21492] ? __pfx_do_futex+0x10/0x10 [ 1487.432432][T21492] ? kmem_cache_free+0x187/0x6d0 [ 1487.432467][T21492] ? do_sys_openat2+0x14e/0x200 [ 1487.432500][T21492] __se_sys_futex+0x3a8/0x450 [ 1487.432532][T21492] ? __pfx___se_sys_futex+0x10/0x10 [ 1487.432557][T21492] ? rcu_is_watching+0x16/0xb0 [ 1487.432597][T21492] ? __x64_sys_futex+0x21/0xf0 [ 1487.432624][T21492] do_syscall_64+0x166/0x520 [ 1487.432650][T21492] ? trace_irq_disable+0x3b/0x140 [ 1487.432682][T21492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.432707][T21492] ? clear_bhb_loop+0x70/0xc0 [ 1487.432736][T21492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.432759][T21492] RIP: 0033:0x7f205e54e199 [ 1487.432783][T21492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.432812][T21492] RSP: 002b:00007f205c7a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1487.432840][T21492] RAX: ffffffffffffffda RBX: 00007f205e7d5fa8 RCX: 00007f205e54e199 [ 1487.432859][T21492] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f205e7d5fac [ 1487.432875][T21492] RBP: 00007f205e7d5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1487.432892][T21492] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1487.432907][T21492] R13: 00007f205e7d6038 R14: 00007ffd1bd42a20 R15: 00007ffd1bd42b08 [ 1487.432944][T21492] [ 1487.448601][ T5700] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1487.654409][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 1487.704286][ T5700] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1487.706033][ T5700] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1487.706063][ T5700] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1487.742526][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.742559][ T5700] usb 1-1: Product: syz [ 1487.742576][ T5700] usb 1-1: Manufacturer: syz [ 1487.742594][ T5700] usb 1-1: SerialNumber: syz [ 1487.890220][T21494] fuse: Unknown parameter 'user_id00000000000000000000' [ 1488.142168][ T5596] Bluetooth: hci8: command tx timeout [ 1488.347535][ T5700] usb 1-1: USB disconnect, device number 19 [ 1488.404593][T21501] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1488.404634][T21501] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1488.411881][T21501] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1488.411920][T21501] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1489.799853][T21521] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1489.799894][T21521] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1489.800595][T21521] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1489.800628][T21521] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1489.946575][T21525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1489.946609][T21525] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1489.947776][T21525] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1489.947810][T21525] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1490.238339][T21528] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1490.238375][T21528] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1490.244368][T21528] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1490.244403][T21528] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1490.537094][T21497] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.761696][T21535] program syz.5.4639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1490.829998][T21535] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1490.974149][T21538] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1490.974189][T21538] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1490.975554][T21538] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1490.975586][T21538] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1491.607296][T21553] FAULT_INJECTION: forcing a failure. [ 1491.607296][T21553] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1491.607344][T21553] CPU: 0 UID: 0 PID: 21553 Comm: syz.5.4646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.607368][T21553] Tainted: [L]=SOFTLOCKUP [ 1491.607375][T21553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1491.607386][T21553] Call Trace: [ 1491.607393][T21553] [ 1491.607401][T21553] dump_stack_lvl+0xe8/0x150 [ 1491.607432][T21553] should_fail_ex+0x46b/0x600 [ 1491.607462][T21553] get_futex_key+0x1b4/0x1580 [ 1491.607494][T21553] ? __lock_acquire+0x747/0x2de0 [ 1491.607519][T21553] ? __pfx_get_futex_key+0x10/0x10 [ 1491.607553][T21553] futex_wake+0x119/0x600 [ 1491.607578][T21553] ? __pfx_futex_wake+0x10/0x10 [ 1491.607607][T21553] ? __fget_files+0x2a/0x420 [ 1491.607631][T21553] do_futex+0x458/0x4e0 [ 1491.607671][T21553] ? __fget_files+0x2a/0x420 [ 1491.607723][T21553] ? __pfx_do_futex+0x10/0x10 [ 1491.607747][T21553] ? __sys_getsockname+0x2a7/0x2d0 [ 1491.607780][T21553] __se_sys_futex+0x3a8/0x450 [ 1491.607809][T21553] ? ksys_write+0x248/0x270 [ 1491.607838][T21553] ? __pfx___se_sys_futex+0x10/0x10 [ 1491.607862][T21553] ? __pfx_ksys_write+0x10/0x10 [ 1491.607898][T21553] ? __x64_sys_futex+0x21/0xf0 [ 1491.607925][T21553] do_syscall_64+0x166/0x520 [ 1491.607952][T21553] ? trace_irq_disable+0x3b/0x140 [ 1491.607984][T21553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.608007][T21553] ? clear_bhb_loop+0x70/0xc0 [ 1491.608036][T21553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.608060][T21553] RIP: 0033:0x7fb8652be199 [ 1491.608082][T21553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.608111][T21553] RSP: 002b:00007fb8635160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1491.608138][T21553] RAX: ffffffffffffffda RBX: 00007fb865545fa8 RCX: 00007fb8652be199 [ 1491.608157][T21553] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb865545fac [ 1491.608173][T21553] RBP: 00007fb865545fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1491.608189][T21553] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1491.608205][T21553] R13: 00007fb865546038 R14: 00007ffc718f2650 R15: 00007ffc718f2738 [ 1491.608243][T21553] [ 1492.300318][T21497] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.913012][T21572] program syz.0.4651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1492.941398][T21572] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1493.562279][T21497] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.833103][T21584] EXT4-fs warning: 14 callbacks suppressed [ 1493.833127][T21584] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1493.833157][T21584] EXT4-fs error: 14 callbacks suppressed [ 1493.833170][T21584] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1493.864637][T21584] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1493.864741][T21584] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1494.089551][ T5700] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1494.251066][ T5700] usb 6-1: Using ep0 maxpacket: 8 [ 1494.258623][ T5700] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1494.265304][ T5700] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.265337][ T5700] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1494.265369][ T5700] usb 6-1: config 1 has no interface number 0 [ 1494.265418][ T5700] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1494.269993][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.270024][ T5700] usb 6-1: Product: syz [ 1494.270040][ T5700] usb 6-1: Manufacturer: syz [ 1494.270056][ T5700] usb 6-1: SerialNumber: syz [ 1494.271278][T21587] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1494.271311][T21587] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1494.348785][T21587] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1494.348872][T21587] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1494.647710][T21590] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1494.647750][T21590] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1494.648205][T21590] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1494.648234][T21590] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1494.775833][ T5700] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1494.870935][T21595] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1494.870975][T21595] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 1494.871495][T21595] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 1494.871526][T21595] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 1494.981232][T18974] udevd[18974]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1495.158242][T21497] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.226389][T21599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.227718][T21599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.718845][T21604] program syz.0.4661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1495.776183][T21604] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1497.108183][ T5700] usb 6-1: USB disconnect, device number 54 [ 1497.866148][T21629] futex_wake_op: syz.5.4670 tries to shift op by -1; fix this program [ 1497.866386][T21629] futex_wake_op: syz.5.4670 tries to shift op by -1; fix this program [ 1497.903869][T21380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1497.939847][T21631] program syz.5.4671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1497.969935][T21380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.022298][T21631] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1498.418450][T21380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1498.520455][T21380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.608263][T21380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1498.698049][T21380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.793539][T21380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1498.825317][T21380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1498.834536][T21506] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.852513][T21509] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.997074][T21509] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.000212][T21509] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.060867][T11968] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1499.090043][T21380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.180949][T21380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.222864][T11968] usb 6-1: Using ep0 maxpacket: 8 [ 1499.223936][T19164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.224168][T19164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.232025][T11968] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1499.264823][T11968] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.264856][T11968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.264879][T11968] usb 6-1: config 1 has no interface number 0 [ 1499.264927][T11968] usb 6-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1499.293485][T18149] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1499.330801][T11968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.330873][T11968] usb 6-1: Product: syz [ 1499.330892][T11968] usb 6-1: Manufacturer: syz [ 1499.330909][T11968] usb 6-1: SerialNumber: syz [ 1499.378453][ T5600] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1499.495427][T21509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.519096][T21509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.538943][ T5600] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1499.595328][ T5600] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1499.595434][ T5600] usb 5-1: Product: syz [ 1499.595452][ T5600] usb 5-1: SerialNumber: syz [ 1499.647837][ T5600] usb 5-1: Device is not authorized for usage [ 1499.895936][T11968] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1500.007474][T18974] udevd[18974]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1500.060167][T21664] program syz.0.4681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1500.096774][T21664] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1500.269437][T21667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.270136][T21667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.332045][T21671] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1500.333860][T21671] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1500.630440][T21380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1500.736282][T21677] kvm: user requested TSC rate below hardware speed [ 1500.747934][T21677] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1500.996131][T21380] veth0_vlan: entered promiscuous mode [ 1501.049311][T21380] veth1_vlan: entered promiscuous mode [ 1501.228843][T21380] veth0_macvtap: entered promiscuous mode [ 1501.246558][T21380] veth1_macvtap: entered promiscuous mode [ 1501.295445][T21380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1501.333821][T21380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1501.509691][T19168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.097306][T17464] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1502.293695][T17464] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1502.294013][T11470] usb 5-1: USB disconnect, device number 49 [ 1502.296379][T17464] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1502.296418][T17464] usb 1-1: can't read configurations, error -61 [ 1502.397281][T19168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.407037][T18709] usb 6-1: USB disconnect, device number 55 [ 1502.409032][T19163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.409547][T19163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.464626][T17464] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1502.703562][T17464] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1502.705867][T17464] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1502.705908][T17464] usb 1-1: can't read configurations, error -61 [ 1502.707836][T17464] usb usb1-port1: attempt power cycle [ 1502.946189][T19164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.946215][T19164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.241433][T17464] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1503.264747][T17464] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1503.267098][T17464] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1503.267140][T17464] usb 1-1: can't read configurations, error -61 [ 1503.403860][T17464] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1503.432786][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.432813][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.435297][T17464] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1503.475012][T17464] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1503.475043][T17464] usb 1-1: can't read configurations, error -61 [ 1503.482522][T17464] usb usb1-port1: unable to enumerate USB device [ 1504.334004][T21705] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4692'. [ 1504.334982][T21705] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4692'. [ 1505.610774][T21731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1505.627340][T21731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4704'. [ 1506.613058][T11968] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1506.850275][T11968] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1506.852764][T11968] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 61 [ 1506.852803][T11968] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1506.887354][T11968] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1506.887387][T11968] usb 3-1: Product: syz [ 1506.887405][T11968] usb 3-1: Manufacturer: syz [ 1506.887421][T11968] usb 3-1: SerialNumber: syz [ 1506.932942][T11968] usb 3-1: config 0 descriptor?? [ 1506.934750][T21742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1506.976084][T11968] usb 3-1: selecting invalid altsetting 0 [ 1507.114593][T21764] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1507.116226][T21764] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1507.255501][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.256105][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.256726][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.257388][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.258265][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.259045][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.259557][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.364437][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.364775][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.365105][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.365531][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.394841][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.432535][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.433011][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.460437][T21742] usb 3-1: cannot submit urb 0, error -2: endpoint not enabled [ 1507.564158][T21741] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 1507.567246][T18512] usb 3-1: USB disconnect, device number 4 [ 1507.777700][T21777] fuse: Bad value for 'fd' [ 1508.558607][T21785] kvm [21784]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000080 [ 1509.047456][T11968] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1509.209779][T11968] usb 3-1: Using ep0 maxpacket: 16 [ 1509.210827][T11968] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1509.214449][T11968] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1509.214478][T11968] usb 3-1: config 0 has no interface number 0 [ 1509.214528][T11968] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.214567][T11968] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.214595][T11968] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.214626][T11968] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1509.214664][T11968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.304793][ T5594] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1509.329429][T11968] usb 3-1: config 0 descriptor?? [ 1509.397340][T11968] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 1509.427832][ T1242] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1509.503771][ T5594] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1509.506371][ T5594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.506544][ T5594] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.511884][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.511915][ T5594] usb 6-1: Product: syz [ 1509.511932][ T5594] usb 6-1: Manufacturer: syz [ 1509.512054][ T5594] usb 6-1: SerialNumber: syz [ 1509.598569][ T1242] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1509.617464][ T5594] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1509.617632][ T5594] gspca_mr97310a: reg write [21] error -22 [ 1509.617792][ T5594] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -22 [ 1509.625193][ T1242] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1509.625281][ T1242] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 0 [ 1509.625324][ T1242] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1509.685503][ T1242] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1509.685536][ T1242] usb 1-1: Product: syz [ 1509.685552][ T1242] usb 1-1: Manufacturer: syz [ 1509.685575][ T1242] usb 1-1: SerialNumber: syz [ 1509.760769][ T1242] usb 1-1: config 0 descriptor?? [ 1509.876244][ T1242] usb 1-1: selecting invalid altsetting 0 [ 1510.236285][ T1242] usb 1-1: USB disconnect, device number 24 [ 1510.420814][T19016] udevd[19016]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1511.755348][T17464] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1511.933713][T17464] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1511.938505][T17464] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1511.938535][T17464] usb 2-1: Product: syz [ 1511.938598][T17464] usb 2-1: SerialNumber: syz [ 1511.987517][T17464] usb 2-1: config 0 descriptor?? [ 1512.311842][T17464] hso 2-1:0.0: Failed to find BULK eps [ 1512.398005][ T5594] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1512.647611][ T5594] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1512.649848][ T5594] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1512.649872][ T5594] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 0 [ 1512.649890][ T5594] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1512.700763][T11968] usbhid 3-1:0.1: can't add hid device: -71 [ 1512.701035][T11968] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1512.740886][ T5594] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1512.740919][ T5594] usb 1-1: Product: syz [ 1512.740936][ T5594] usb 1-1: Manufacturer: syz [ 1512.740953][ T5594] usb 1-1: SerialNumber: syz [ 1512.803524][T11968] usb 3-1: USB disconnect, device number 5 [ 1512.851881][ T5594] usb 1-1: config 0 descriptor?? [ 1512.868352][ T5594] usb 1-1: selecting invalid altsetting 0 [ 1513.130912][ T5700] usb 2-1: USB disconnect, device number 27 [ 1513.197085][T18512] usb 1-1: USB disconnect, device number 25 [ 1513.494206][T19016] udevd[19016]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.572677][ T5700] usb 6-1: USB disconnect, device number 56 [ 1513.900132][T11968] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1514.078134][T11968] usb 2-1: Using ep0 maxpacket: 8 [ 1514.079057][T11968] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1514.082025][T11968] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.082064][T11968] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.082096][T11968] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1514.082135][T11968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.163696][T11968] usb 2-1: config 0 descriptor?? [ 1514.474029][T18709] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1514.517368][ T5700] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1514.637663][T18709] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1514.640386][T18709] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1514.640424][T18709] usb 1-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 1514.640454][T18709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1514.643927][T18709] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1514.643956][T18709] usb 1-1: Product: syz [ 1514.643973][T18709] usb 1-1: Manufacturer: syz [ 1514.643990][T18709] usb 1-1: SerialNumber: syz [ 1514.690684][ T5700] usb 5-1: Using ep0 maxpacket: 16 [ 1514.692430][ T5700] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1514.783288][T11968] input: HID 04e7:0030 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04E7:0030.0019/input/input60 [ 1514.793694][ T5700] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1514.793734][ T5700] usb 5-1: config 0 has no interface number 0 [ 1514.793839][ T5700] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.793871][ T5700] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.793913][ T5700] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.793998][ T5700] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1514.794039][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.925063][ T5700] usb 5-1: Device is not authorized for usage [ 1514.954121][T18709] usb 1-1: config 0 descriptor?? [ 1514.979685][T21874] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1515.067857][T11968] elo 0003:04E7:0030.0019: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 04e7:0030] on usb-dummy_hcd.1-1/input0 [ 1515.097573][T18709] usb 1-1: selecting invalid altsetting 0 [ 1515.128714][T11968] usb 2-1: USB disconnect, device number 28 [ 1515.429393][T21884] fido_id[21884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1515.680182][T18709] usb 1-1: USB disconnect, device number 26 [ 1515.808582][T19016] udevd[19016]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.794193][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1516.985909][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1517.011217][ T9] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 1517.011249][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1517.011270][ T9] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1517.011289][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1517.013918][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1517.013943][ T9] usb 6-1: Product: syz [ 1517.013956][ T9] usb 6-1: Manufacturer: syz [ 1517.013968][ T9] usb 6-1: SerialNumber: syz [ 1517.124343][ T9] usb 6-1: config 0 descriptor?? [ 1517.159259][ T9] usb 6-1: selecting invalid altsetting 0 [ 1517.393058][T11968] usb 5-1: USB disconnect, device number 50 [ 1517.491523][ T9] usb 6-1: USB disconnect, device number 57 [ 1517.684798][T19699] udevd[19699]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1517.995467][T21923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1518.164975][T21925] jffs2: notice: (21925) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1519.092288][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1520.354924][T21963] fuse: Unknown parameter 'fd0x0000000000000003' [ 1521.315606][T21976] fuse: Bad value for 'fd' [ 1522.934984][T22010] fuse: Unknown parameter 'fd0x0000000000000003' [ 1523.100629][T22008] kvm: user requested TSC rate below hardware speed [ 1523.373653][T22008] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1525.165092][T18512] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1525.364254][T18512] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1525.367498][T18512] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1525.367540][T18512] usb 6-1: can't read configurations, error -61 [ 1525.501017][T18512] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1525.667767][T18512] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1525.702349][T18512] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1525.702393][T18512] usb 6-1: can't read configurations, error -61 [ 1525.714855][T18512] usb usb6-port1: attempt power cycle [ 1526.098093][T22071] fuse: Unknown parameter 'fd0x0000000000000003' [ 1526.142002][T18512] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1526.307418][T18512] usb 6-1: device descriptor read/8, error -71 [ 1528.544685][ T5594] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1528.685437][ T5594] usb 6-1: device descriptor read/64, error -71 [ 1528.957473][ T5594] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1529.097114][ T5594] usb 6-1: device descriptor read/64, error -71 [ 1529.217708][ T5594] usb usb6-port1: attempt power cycle [ 1529.607712][ T5594] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1529.630680][ T5594] usb 6-1: device descriptor read/8, error -71 [ 1529.963623][ T5594] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1529.986181][ T5594] usb 6-1: device descriptor read/8, error -71 [ 1530.116117][ T5594] usb usb6-port1: unable to enumerate USB device [ 1530.276235][T22152] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1530.383590][T22156] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1530.441359][T22145] bond1: entered allmulticast mode [ 1530.442065][T22145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1530.604708][T22161] netlink: 'syz.1.4852': attribute type 21 has an invalid length. [ 1530.604734][T22161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4852'. [ 1532.583914][T22187] fuse: Bad value for 'fd' [ 1532.738212][T22155] ip6gretap1: entered allmulticast mode [ 1532.824909][T22155] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1533.110943][T22166] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1533.278215][T11470] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1533.427294][T22206] i2c i2c-0: Failed to register i2c client bq24190 at 0x06 (-16) [ 1533.441497][T11470] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1533.451188][T11470] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1533.468788][T11470] usb 2-1: Product: syz [ 1533.468817][T11470] usb 2-1: SerialNumber: syz [ 1533.498827][T11470] usb 2-1: config 0 descriptor?? [ 1533.565390][T22156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.826433][T22156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.828373][T11470] hso 2-1:0.0: Failed to find BULK eps [ 1533.876466][T22156] bond0 (unregistering): Released all slaves [ 1534.231455][T18512] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1534.372249][T18512] usb 6-1: device descriptor read/64, error -71 [ 1534.519638][T22221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4868'. [ 1534.606511][T22221] bridge1: port 1(erspan0) entered blocking state [ 1534.606757][T22221] bridge1: port 1(erspan0) entered disabled state [ 1534.607041][T22221] erspan0: entered allmulticast mode [ 1534.632091][T18512] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1534.633191][T22221] erspan0: entered promiscuous mode [ 1534.673874][T22221] bridge1: port 1(erspan0) entered blocking state [ 1534.674054][T22221] bridge1: port 1(erspan0) entered forwarding state [ 1534.773063][T18512] usb 6-1: device descriptor read/64, error -71 [ 1534.800858][T22224] fuse: Bad value for 'fd' [ 1534.832310][T11470] usb 2-1: USB disconnect, device number 29 [ 1534.894326][T18512] usb usb6-port1: attempt power cycle [ 1535.271271][T18512] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1535.293889][T18512] usb 6-1: device descriptor read/8, error -71 [ 1535.295183][T11968] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1535.490947][T11968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1535.492450][T11968] usb 3-1: not running at top speed; connect to a high speed hub [ 1535.492496][T11968] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1535.494362][T11968] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.494383][T11968] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1535.494424][T11968] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1535.497625][T11968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1535.497658][T11968] usb 3-1: Product: syz [ 1535.497677][T11968] usb 3-1: Manufacturer: syz [ 1535.563852][T18512] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1535.587067][T18512] usb 6-1: device descriptor read/8, error -71 [ 1535.620192][T11968] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -22 [ 1535.705078][T18512] usb usb6-port1: unable to enumerate USB device [ 1535.836705][ T9] usb 3-1: USB disconnect, device number 6 [ 1536.744490][T11968] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1536.930687][T11968] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1536.938193][T11968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.938235][T11968] usb 2-1: Product: syz [ 1536.938253][T11968] usb 2-1: Manufacturer: syz [ 1536.938270][T11968] usb 2-1: SerialNumber: syz [ 1537.059749][T18512] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1537.113357][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1537.241920][T18512] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1537.256058][T18512] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1537.256091][T18512] usb 1-1: Product: syz [ 1537.256108][T18512] usb 1-1: SerialNumber: syz [ 1537.386683][T18512] usb 1-1: config 0 descriptor?? [ 1537.641998][T18512] hso 1-1:0.0: Failed to find BULK eps [ 1538.758953][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1538.998458][T18512] usb 2-1: USB disconnect, device number 30 [ 1539.146085][ T9] ath9k_htc: Failed to initialize the device [ 1539.155014][T18512] usb 2-1: ath9k_htc: USB layer deinitialized [ 1539.664192][T18709] usb 1-1: USB disconnect, device number 27 [ 1540.233298][T22296] FAULT_INJECTION: forcing a failure. [ 1540.233298][T22296] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.233343][T22296] CPU: 0 UID: 0 PID: 22296 Comm: syz.1.4900 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1540.233378][T22296] Tainted: [L]=SOFTLOCKUP [ 1540.233387][T22296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1540.233401][T22296] Call Trace: [ 1540.233411][T22296] [ 1540.233423][T22296] dump_stack_lvl+0xe8/0x150 [ 1540.233475][T22296] should_fail_ex+0x46b/0x600 [ 1540.233510][T22296] should_failslab+0xa8/0x100 [ 1540.233531][T22296] ? security_inode_alloc+0x39/0x310 [ 1540.233552][T22296] kmem_cache_alloc_noprof+0x9e/0x690 [ 1540.233577][T22296] ? security_inode_alloc+0x39/0x310 [ 1540.233601][T22296] security_inode_alloc+0x39/0x310 [ 1540.233621][T22296] inode_init_always_gfp+0x983/0xd40 [ 1540.233644][T22296] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 1540.233737][T22296] alloc_inode+0x82/0x1b0 [ 1540.233765][T22296] new_inode+0x1f/0x170 [ 1540.233798][T22296] rpc_new_dir+0x8f/0x370 [ 1540.233871][T22296] rpc_populate+0xab/0x1c0 [ 1540.233905][T22296] rpc_fill_super+0x220/0x420 [ 1540.233924][T22296] ? __pfx_rpc_fill_super+0x10/0x10 [ 1540.233943][T22296] get_tree_keyed+0xe2/0x170 [ 1540.233967][T22296] vfs_get_tree+0x92/0x2a0 [ 1540.233992][T22296] do_new_mount+0x319/0xdc0 [ 1540.234011][T22296] ? cap_capable+0x123/0x460 [ 1540.234043][T22296] ? __pfx_do_new_mount+0x10/0x10 [ 1540.234063][T22296] ? ns_capable+0x89/0xe0 [ 1540.234090][T22296] ? path_mount+0x647/0x1050 [ 1540.234111][T22296] ? user_path_at+0xd4/0x160 [ 1540.234135][T22296] __se_sys_mount+0x31d/0x420 [ 1540.234159][T22296] ? __pfx___se_sys_mount+0x10/0x10 [ 1540.234186][T22296] ? __x64_sys_mount+0x20/0xc0 [ 1540.234207][T22296] do_syscall_64+0x166/0x520 [ 1540.234227][T22296] ? trace_irq_disable+0x3b/0x140 [ 1540.234250][T22296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.234269][T22296] ? clear_bhb_loop+0x70/0xc0 [ 1540.234290][T22296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.234307][T22296] RIP: 0033:0x7f205e54e199 [ 1540.234323][T22296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.234338][T22296] RSP: 002b:00007f205c7a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1540.234356][T22296] RAX: ffffffffffffffda RBX: 00007f205e7d5fa0 RCX: 00007f205e54e199 [ 1540.234390][T22296] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 1540.234410][T22296] RBP: 00007f205e5e58e0 R08: 0000000000000000 R09: 0000000000000000 [ 1540.234427][T22296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1540.234442][T22296] R13: 00007f205e7d6038 R14: 00007f205e7d5fa0 R15: 00007ffd1bd42b08 [ 1540.234479][T22296] [ 1540.542709][T22296] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1540.966710][T22309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4905'. [ 1541.023526][T22309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4905'. [ 1541.025839][T22309] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4905'. [ 1541.284116][T18512] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1541.378177][T22320] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz.5.4910: bg 4: bad block bitmap checksum [ 1541.446452][T18512] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1541.466523][T18512] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.466556][T18512] usb 2-1: Product: syz [ 1541.466573][T18512] usb 2-1: Manufacturer: syz [ 1541.466591][T18512] usb 2-1: SerialNumber: syz [ 1541.660048][T18709] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1542.544864][ T9] usb 2-1: USB disconnect, device number 31 [ 1542.907803][T18709] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1542.952934][T18709] ath9k_htc: Failed to initialize the device [ 1542.954088][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1543.541880][T22361] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1543.577782][T22361] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1543.592290][T22361] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4919'. [ 1544.009818][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4920'. [ 1544.030265][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4921'. [ 1544.529208][T22379] bridge1: port 1(erspan0) entered blocking state [ 1544.529652][T22379] bridge1: port 1(erspan0) entered disabled state [ 1544.568084][T22379] erspan0: entered allmulticast mode [ 1544.590185][T22379] erspan0: entered promiscuous mode [ 1544.618167][T22379] bridge1: port 1(erspan0) entered blocking state [ 1544.618308][T22379] bridge1: port 1(erspan0) entered forwarding state [ 1544.790879][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1545.032805][ T9] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1545.056860][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.056920][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1545.056951][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1545.056981][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1545.057012][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1545.060319][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.060349][ T9] usb 3-1: Product: syz [ 1545.060364][ T9] usb 3-1: Manufacturer: syz [ 1545.060390][ T9] usb 3-1: SerialNumber: syz [ 1545.149092][ T9] usb 3-1: config 0 descriptor?? [ 1545.158433][T22362] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1545.181928][ T9] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1545.249539][T22378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.280921][T22378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.891130][T22378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.908128][T22378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1546.135634][T18709] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1546.298938][T18709] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1546.335019][T18709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.335051][T18709] usb 5-1: Product: syz [ 1546.335067][T18709] usb 5-1: Manufacturer: syz [ 1546.335084][T18709] usb 5-1: SerialNumber: syz [ 1546.372879][T18709] usb 5-1: Device is not authorized for usage [ 1546.766790][ T9] usb 3-1: USB disconnect, device number 7 [ 1547.381449][T22180] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.382869][T22180] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.382940][T22180] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.383042][T22180] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.512926][ T39] INFO: task syz.9.4199:20051 blocked for more than 143 seconds. [ 1547.512960][ T39] Tainted: G L syzkaller #0 [ 1547.512974][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.512986][ T39] task:syz.9.4199 state:D stack:26216 pid:20051 tgid:20047 ppid:15182 task_flags:0x400040 flags:0x00080002 [ 1547.513061][ T39] Call Trace: [ 1547.513070][ T39] [ 1547.513087][ T39] __schedule+0x16d9/0x5700 [ 1547.513154][ T39] ? trace_irq_disable+0x3b/0x140 [ 1547.513193][ T39] ? __pfx___schedule+0x10/0x10 [ 1547.513236][ T39] rt_mutex_schedule+0x76/0xf0 [ 1547.513269][ T39] rt_mutex_slowlock_block+0x55e/0x690 [ 1547.513314][ T39] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1547.513352][ T39] rt_mutex_slowlock+0x2d4/0x780 [ 1547.513390][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 1547.513426][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1547.513482][ T39] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 1547.513560][ T39] ? nfsd_nl_version_get_doit+0x17c/0xd20 [ 1547.513583][ T39] mutex_lock_nested+0x168/0x1d0 [ 1547.513624][ T39] nfsd_nl_version_get_doit+0x17c/0xd20 [ 1547.513660][ T39] ? __nla_parse+0x40/0x60 [ 1547.513686][ T39] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1547.513713][ T39] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1547.513741][ T39] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1547.513776][ T39] genl_family_rcv_msg_doit+0x233/0x340 [ 1547.513812][ T39] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1547.513864][ T39] genl_rcv_msg+0x614/0x7a0 [ 1547.513896][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1547.513919][ T39] ? ref_tracker_free+0x668/0x820 [ 1547.513954][ T39] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1547.513981][ T39] ? __pfx_ref_tracker_free+0x10/0x10 [ 1547.514028][ T39] netlink_rcv_skb+0x226/0x4a0 [ 1547.514063][ T39] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1547.514090][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1547.514168][ T39] genl_rcv+0x28/0x40 [ 1547.514191][ T39] netlink_unicast+0x7f5/0x990 [ 1547.514233][ T39] netlink_sendmsg+0x813/0xb40 [ 1547.514277][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.514312][ T39] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1547.514349][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.514381][ T39] sock_sendmsg_nosec+0x13a/0x180 [ 1547.514421][ T39] ____sys_sendmsg+0x565/0x870 [ 1547.759219][ T39] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1547.759275][ T39] ? import_iovec+0x73/0xa0 [ 1547.759319][ T39] ___sys_sendmsg+0x2a5/0x360 [ 1547.759347][ T39] ? __lock_acquire+0x747/0x2de0 [ 1547.759385][ T39] ? __pfx____sys_sendmsg+0x10/0x10 [ 1547.759419][ T39] ? futex_wake+0x51e/0x600 [ 1547.759482][ T39] ? __fget_files+0x2a/0x420 [ 1547.759509][ T39] ? __fget_files+0x3a8/0x420 [ 1547.759548][ T39] __x64_sys_sendmsg+0x1b7/0x290 [ 1547.759582][ T39] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1547.759634][ T39] do_syscall_64+0x166/0x520 [ 1547.759662][ T39] ? trace_irq_disable+0x3b/0x140 [ 1547.759693][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.759719][ T39] ? clear_bhb_loop+0x70/0xc0 [ 1547.759749][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.759774][ T39] RIP: 0033:0x7fd272ace199 [ 1547.759796][ T39] RSP: 002b:00007fd270ce4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.759823][ T39] RAX: ffffffffffffffda RBX: 00007fd272d56180 RCX: 00007fd272ace199 [ 1547.759842][ T39] RDX: 0000000004004990 RSI: 0000200000000040 RDI: 0000000000000009 [ 1547.759859][ T39] RBP: 00007fd272b658e0 R08: 0000000000000000 R09: 0000000000000000 [ 1547.759876][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.759891][ T39] R13: 00007fd272d56218 R14: 00007fd272d56180 R15: 00007ffe43789348 [ 1547.759930][ T39] [ 1547.760036][ T39] [ 1547.760036][ T39] Showing all locks held in the system: [ 1547.760056][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 1547.760076][ T39] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1547.765735][ T39] locks held by getty/5340: 2, on CPU#1: [ 1547.765760][ T39] #0: ffff888035f9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1547.765831][ T39] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1547.765910][ T39] locks held by syz-executor/15715: 2, on CPU#1: [ 1547.765929][ T39] #0: ffff888060de80e0 (&type->s_umount_key#72){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 1547.765994][ T39] #1: ffffffff8e4f8778 (nf ** replaying previous printk message ** [ 1547.765994][ T39] #1: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 1547.766091][ T39] locks held by syz.3.3991/19215: 2, on CPU#0: [ 1547.828267][ T39] #0: ffffffff8f647400 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1547.828339][ T39] #1: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53b/0x1a90 [ 1547.828403][ T39] locks held by syz.9.4199/20051: 2, on CPU#0: [ 1547.828421][ T39] #0: ffffffff8f647400 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1547.828474][ T39] #1: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 1547.828533][ T39] locks held by syz-executor/20681: 5, last CPU#1: [ 1547.828552][ T39] #0: ffffffff8e29f550 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 1547.828616][ T39] #1: ffff8880390e2ab8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 1547.828682][ T39] #2: ffff8880679b37b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 1547.828753][ T39] #3: ffffffff8e3119f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1547.828817][ T39] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1547.828887][ T39] locks held by syz.7.4520/21174: 1, on CPU#1: [ 1547.828905][ T39] #0: ffff888060de80e0 (&type->s_umount_key#72){+.+.}-{4:4}, at: super_lock+0x289/0x3d0 [ 1547.828971][ T39] locks held by syz-executor/21380: 2, last CPU#1: [ 1547.828989][ T39] #0: ffffffff8e952078 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 1547.829054][ T39] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1547.829131][ T39] locks held by kworker/u8:49/22035: 5, last CPU#1: [ 1547.829148][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.829212][ T39] #1: ffffc9000f37fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.829277][ T39] #2: ffff888021eb4310 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1547.829394][ T39] #3: ffff88803c8add20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1547.829460][ T39] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1547.829528][ T39] locks held by kworker/u8:57/22166: 6, last CPU#1: [ 1547.829547][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.829612][ T39] #1: ffffc9000811fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.829680][ T39] #2: ffff88803f1ce310 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1547.829767][ T39] #3: ffff8880381b3920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: ieee80211_sta_active_ibss+0xc7/0x330 [ 1547.909634][ T39] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1547.909822][ T39] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1547.909996][ T39] locks held by kworker/u8:62/22171: 4, last CPU#1: [ 1547.910040][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.910241][ T39] #1: ffffc9000800fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.910412][ T39] #2: ffff8880358e4310 (&devlink->lock_key#19){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1547.910631][ T39] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1547.927203][ T39] locks held by kworker/u8:71/22180: 5, last CPU#1: [ 1547.927270][ T39] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.927434][ T39] #1: ffffc90007f37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1547.927626][ T39] #2: ffff888037440310 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1547.927829][ T39] #3: ffff8880268a5120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1547.928009][ T39] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1547.928174][ T39] locks held by syz.5.4920/22368: 1, last CPU#1: [ 1547.928218][ T39] #0: ffff8880331c10b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1547.928386][ T39] locks held by syz.1.4929/22403: 2, last CPU#1: [ 1547.928430][ T39] #0: ffff88804dda4098 (&ctx->uring_lock){+.+.}-{4:4}, at: __se_sys_io_uring_enter+0x359/0x1bb0 [ 1547.928580][ T39] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1547.944067][ T39] [ 1547.944100][ T39] ============================================= [ 1547.944100][ T39] [ 1547.944133][ T39] NMI backtrace for cpu 1 [ 1547.944222][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1547.944287][ T39] Tainted: [L]=SOFTLOCKUP [ 1547.944310][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1547.944337][ T39] Call Trace: [ 1547.944346][ T39] [ 1547.944356][ T39] dump_stack_lvl+0xe8/0x150 [ 1547.944397][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1547.944503][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1547.944576][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1547.944667][ T39] sys_info+0x135/0x170 [ 1547.944775][ T39] watchdog+0xfd7/0x1030 [ 1547.944881][ T39] ? watchdog+0x1c7/0x1030 [ 1547.944979][ T39] kthread+0x38b/0x470 [ 1547.945048][ T39] ? __pfx_watchdog+0x10/0x10 [ 1547.945122][ T39] ? __pfx_kthread+0x10/0x10 [ 1547.945196][ T39] ret_from_fork+0x514/0xb70 [ 1547.945265][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1547.945330][ T39] ? __switch_to+0xc89/0x1420 [ 1547.945426][ T39] ? __pfx_kthread+0x10/0x10 [ 1547.945493][ T39] ret_from_fork_asm+0x1a/0x30 [ 1547.945607][ T39] [ 1547.945801][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1547.945870][ C0] NMI backtrace for cpu 0 [ 1547.945888][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1547.945913][ C0] Tainted: [L]=SOFTLOCKUP [ 1547.945920][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1547.945932][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1547.945963][ C0] Code: e8 ae 76 64 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 71 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1547.945979][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 1547.945996][ C0] RAX: 1ffffffff33d5600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1547.946016][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1547.946027][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1547.946039][ C0] R10: dffffc0000000000 R11: ffffffff85625eb0 R12: dffffc0000000000 [ 1547.946054][ C0] R13: 0000000000000000 R14: ffffffff99eab440 R15: 0000000000000000 [ 1547.946066][ C0] FS: 0000000000000000(0000) GS:ffff888125bc2000(0000) knlGS:0000000000000000 [ 1547.946082][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1547.946095][ C0] CR2: 000000110c4373d0 CR3: 000000004ded6000 CR4: 00000000003526f0 [ 1547.946112][ C0] Call Trace: [ 1547.946120][ C0] [ 1547.946129][ C0] wait_for_lsr+0x190/0x300 [ 1547.946158][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1547.946210][ C0] serial8250_console_write+0xac5/0x1230 [ 1547.946240][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1547.946275][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1547.946311][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1547.946341][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1547.946378][ C0] nbcon_kthread_func+0x679/0x880 [ 1547.946407][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1547.946431][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1547.946460][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1547.946486][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1547.946516][ C0] kthread+0x38b/0x470 [ 1547.946534][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1547.946557][ C0] ? __pfx_kthread+0x10/0x10 [ 1547.946576][ C0] ret_from_fork+0x514/0xb70 [ 1547.946594][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1547.946612][ C0] ? __switch_to+0xc89/0x1420 [ 1547.946639][ C0] ? __pfx_kthread+0x10/0x10 [ 1547.946658][ C0] ret_from_fork_asm+0x1a/0x30 [ 1547.946683][ C0] [ 1547.966936][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1548.793521][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1548.804765][ T39] Tainted: [L]=SOFTLOCKUP [ 1548.809124][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1548.819222][ T39] Call Trace: [ 1548.822539][ T39] [ 1548.825506][ T39] vpanic+0x56d/0xa60 [ 1548.829535][ T39] ? __pfx___schedule+0x10/0x10 [ 1548.834431][ T39] ? __pfx_vpanic+0x10/0x10 [ 1548.838987][ T39] panic+0xc5/0xd0 [ 1548.842726][ T39] ? __pfx_panic+0x10/0x10 [ 1548.847189][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 1548.852725][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1548.858138][ T39] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1548.864363][ T39] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1548.870605][ T39] watchdog+0x1030/0x1030 [ 1548.874995][ T39] ? watchdog+0x1c7/0x1030 [ 1548.879471][ T39] kthread+0x38b/0x470 [ 1548.883557][ T39] ? __pfx_watchdog+0x10/0x10 [ 1548.888261][ T39] ? __pfx_kthread+0x10/0x10 [ 1548.892902][ T39] ret_from_fork+0x514/0xb70 [ 1548.897560][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1548.902710][ T39] ? __switch_to+0xc89/0x1420 [ 1548.907432][ T39] ? __pfx_kthread+0x10/0x10 [ 1548.912049][ T39] ret_from_fork_asm+0x1a/0x30 [ 1548.916865][ T39] [ 1548.921618][ T39] Kernel Offset: disabled [ 1548.925971][ T39] Rebooting in 86400 seconds..