last executing test programs: 5m52.354604512s ago: executing program 1 (id=106): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xffff, 0x4) 5m52.179388676s ago: executing program 1 (id=108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) (async) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x9, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setuid(0xee00) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="0f060f2159b97b0200000f3248b84c000000000000000f23d0660fd0a7fe0700003510bc0001c744240000300000c7442402b6790000c7442406000000000f011c2447ef6566430f70b700800000746666440f013066baf80cef66bafc0ce2b80001400f01c5000048b885dc0000000000000f23c00f21f80f23f80f09", 0x78}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m51.409062929s ago: executing program 1 (id=110): syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x3b, 0x56, 0xae, 0x8, 0xeb1, 0x7007, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x27, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x3e, 0x0, 0x0, 0x9f, 0x53, 0xc3, 0x48}}]}}]}}, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="017ef49b"]) 5m49.982955346s ago: executing program 1 (id=114): mmap(&(0x7f000072a000/0x1000)=nil, 0x1000, 0x6, 0x13, 0xffffffffffffffff, 0x57787000) syz_usb_connect(0x5, 0x36, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xcc, 0xba, 0xf2, 0x40, 0x12d1, 0x3099, 0xa4dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc, 0x6, 0xa0, 0x9, [{{0x9, 0x4, 0xf7, 0xe, 0x2, 0xff, 0x2, 0x73, 0x4, [], [{{0x9, 0x5, 0x8a, 0x2, 0x400, 0x5, 0x2, 0x20}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x4, 0x5e}}]}}]}}]}}, 0x0) 5m48.586309409s ago: executing program 1 (id=118): unshare(0x6a040000) (async) unshare(0x6a040000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000002dc0)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @hci={0x1f, 0x0, 0x3}, @sco={0x1f, @none}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x5}) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000002dc0)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x1}, @hci={0x1f, 0x0, 0x3}, @sco={0x1f, @none}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0xc3490000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/104) (async) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/104) getpriority(0x1, 0x0) (async) getpriority(0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) creat(&(0x7f0000000000)='./file0\x00', 0x108) (async) creat(&(0x7f0000000000)='./file0\x00', 0x108) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r3, r1) (async) dup2(r3, r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3, 0x7], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0x78) 5m47.756570493s ago: executing program 1 (id=126): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1d}]}, 0x14}], 0x1}, 0x0) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) (async) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006484ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x9e) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5m32.111729837s ago: executing program 32 (id=126): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1d}]}, 0x14}], 0x1}, 0x0) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) (async) splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006484ff00000000000000000000000000000000ff020000000000000000000000000001"], 0x9e) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3m25.681820744s ago: executing program 3 (id=769): getpid() r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0xfffffff7, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc4, 0x33, 0x200, 0x70bd25, 0x25dfdbfb, {0x9}, [@generic="9e42fda224d9504e2653dfe037c6902e20dd30518fcb0dc3707700"/39, @nested={0x18, 0x37, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0x7f}, @typed={0x8, 0xfc, 0x0, 0x0, @fd=r0}]}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x80000000}, @generic="f507c59503642d3e60621005406c48f337f11d03cb9b782fc0e5832e0a8aefed16968a1818354f3fd8a51503dd3e81c0c1333e7b1dcd8ff0478ccd75e7beca9ace44321ea1c70093825dc5183f7809bcb142c0b9e956d60a20c07f81b4044ab23cfb95e19c"]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e120900", 0x26}], 0x1}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029a00030100007f0904000000010100000a24010000000201020c24020000000000000000000c24020400000000001000000d2407000000004336d88b1a560904010000010200000904010101010200000905010940000000000725018000000209040200000102"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) ftruncate(r7, 0x2) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 3m24.122461462s ago: executing program 3 (id=779): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000218000004000000140004000000000600000000000000000000000115000280", @ANYBLOB="fd"], 0x44}, 0x1, 0x0, 0x0, 0x4c855}, 0x84) syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402"], 0x0) 3m22.902949008s ago: executing program 3 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x44804) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800014004000000", 0x41}], 0x1) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x3da8b10753cd4d18) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[], 0x15) 3m21.570923689s ago: executing program 3 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000f100010000000000000000000000000a64000000090a0104000000000000000308000a40000000020900020073797a31000000000900010073797a3000000000080005400000000d280009801c0002800c00018008000140000000070c00018008000140001fffe00800014000000001140000001000010000000002000000000084000a"], 0x8c}}, 0x20050800) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x44010103}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x4000800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={r4, 0xf5bd}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000600)={r4, @in={{0x2, 0x4e20, @empty}}, 0x80, 0x0, 0x100, 0x6, 0x0, 0x1, 0x5}, 0x9c) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000a00142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f210000bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}, {&(0x7f0000000000)="94dd4f7b3a65f85ec7cd9f3c69d9752f11a560368996e8f4be77db8272873dd461a46ea6c28889d48d36", 0x2a}, {&(0x7f0000000040)="0dc123efa26792a91b9d1cecb959f9eff641c6df218a0fecc6", 0x19}, {&(0x7f00000000c0)="faf0b62f73825c0924d7c3d41ef80e629c1e2807e683c3d7bee12786479b42c9fadf6178566f5a5653032043f1b8e432eb138f8a8d37358a564486d8f2b9844b24e1315b85a8899e55e238951f216d2409d5c81c318d9945df81a33a0bd2136a54fd125a1f5a01e916206ed0a852c9814d16543bd4fd4bd42c5bf49beb71b654c428553b6a85238da1ce153f3616169197", 0x91}, {&(0x7f0000000200)="46cd17602e4dd61d788acef04002e99d737e76cce93ef8723857622706829a49f3cffbe681d9c18682adb85a6dd94159b9d4920f230c3216cf9d06c82d299e6af4dcc2bd44b12cafea0f445252ff602e9b4696227a7e6844d9feabeb7bf9119f44b166abce4289e0b2f19479ddca7719bd5427c9065dd14b5c13acf2f3a296f69cde1b762d293367889c7690b6d3e33a32f3a30a6efd77537a980fab680e90125302328f357a1f799f84cb87ef2af75e3bff48edab9fc48d5b042235c676ea40c677fcf4704f7b4f90a63e55e2bbf40735ea5c8f1906153d4fe2d5c6be6126de346d2cb9829eaefd43526e837f06af3cf255", 0xf2}], 0x5}, 0x4010) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0585604, &(0x7f0000000180)={0x0, 0xffffc000}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x2f0, 0x0, 0x7, 0x0, 0xffffffffffffffdd, 0x77, 0x0, 0x0, 0x2, 0x8, 0x2485, 0x4, 0x0, 0x1, 0x5, 0xfbd2, 0x1000000000000000, 0x6f0, 0x1002, 0x0, 0x6, 0x5, 0x0, 0xf439}) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000006c0)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0xa93007, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000060a0b040000000000000000020000000c00062100000000000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x60}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000440)) socket$igmp6(0xa, 0x3, 0x2) 3m21.444453762s ago: executing program 3 (id=790): r0 = syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "", "8e0300"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000302000000020387da2702891d7188b97362131e0c9409d26e025670f4b9c0"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2000}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000040001090212000100000000090400000080829b00"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="541402000000d0f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "", "8e0300"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000302000000020387da2702891d7188b97362131e0c9409d26e025670f4b9c0"]}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2000}}, 0x0, 0x0, 0x0}, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b8c07d40450c01800a9000040001090212000100000000090400000080829b00"], 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="541402000000d0f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 3m21.146310729s ago: executing program 3 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x8108d2, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@userxattr}], [{@hash}, {@uid_lt={'uid<', r1}}, {@obj_type={'obj_type', 0x3d, '.\\-#[[%\\@{\''}}]}) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@OVL_FILEID_V1={0x16, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x3, 0x5, "e837282efe0868327a31a705ec978547"}}}, 0xd71640) 3m20.995435404s ago: executing program 33 (id=791): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000200)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x8108d2, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@userxattr}], [{@hash}, {@uid_lt={'uid<', r1}}, {@obj_type={'obj_type', 0x3d, '.\\-#[[%\\@{\''}}]}) r3 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=@OVL_FILEID_V1={0x16, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x3, 0x5, "e837282efe0868327a31a705ec978547"}}}, 0xd71640) 5.678202228s ago: executing program 4 (id=1434): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x210048, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002180)={0x2c, r3, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x45}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x2c}}, 0x10) (async) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x1) mmap(&(0x7f0000449000/0x1000)=nil, 0x1000, 0x1, 0x20010, r4, 0x29df4000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4ed, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x374, &(0x7f0000000580)=ANY=[@ANYBLOB="d700004efb5c76d7445f9a8e05b7cdbb7fc9a0466a4766ea34ccccc08337b3a0218561b323ea79095d94ced08bb03f7320b00f1cb195af8387823c178cc1ada44ef65b8bc6957177dde2db2766b5aca76660297f2b0b130132bc4999be51959ece9ca37f9df3466abe385314d6fba25589586362a9fc9f93a95a2263bd2ce3c50e1ac3a414c56781daffac85cc25283a5c1a040772e1cb96446fafe7e46de79313d6cdd8c5d94776b780c3a7c06fc1a896ae8bba845d7f4ef6a2b9348d6fd7371c225ed2e549a82f36a46a8698709e05f72673604d96267b8a16e6000500004e"]) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050600000008000300"/18, @ANYRES32=r8, @ANYBLOB="0800050008000000"], 0x24}}, 0xc080) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x82) (async) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffec8, &(0x7f0000001040)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRESHEX=0x0, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c637b075a1506b038ba14", @ANYRESOCT=r4, @ANYBLOB="50d76f2f3b51e0ae3b7aedf00c1573082e1733ed7b841c342e38beabde", @ANYBLOB="69e01155938a01ecfb64a38cc19a7b9429e3b2955599f82b3ccef8d602a9dd112b828f65efe54d5668017667b03e8c48f0cef604b46808d0504f9cd2cd5a4513739888fab87a7c5c4dc24d226aecda37f28437b3d55481e65d77db29a21e2e272b42ffa3a97ba38269050fb52173f874a8c30b73ee215fe87bf8cd2ac17b71ee9cd4d3da2b3a91bf2244695ac0f3813ddc8315fb95759738e28c0e5f2735d03279b3057278800b62dee57924404cb6321bc66db85be82535896a1dc01c12a32ed0b05b121ac7281e29b2abfa07dcfc24c672d41950103a831efd5ad13601e18115d19b9fc849a2cc20268fffc58782cd69febaecd90cab81"]) 3.974824408s ago: executing program 4 (id=1442): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xffffab23, 0x5a, 0x9d, 0x5, 0xdf, 0x8, 0xffff, {0x0, @in={{0x2, 0x3ad2, @loopback}}, 0x6, 0x10000, 0x7, 0x2, 0x8}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r1, 0x3, 0x4}, 0x8) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000140)=""/51) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b4c041b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x284e41bd}]}]}, @NFT_MSG_NEWRULE={0x144, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x104, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x4c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0xf4, 0x8, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xc8, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}, {0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0xacd16bd280c1139c}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3b}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2f4}, 0x1, 0x0, 0x0, 0x4001}, 0x40080) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000540)={0x0, 0x6, 0xc8}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000940)={0x0, "b8c7a0e22fb08973c92f7f5bfa898cde"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001940)={0x10, 0x2, {0xa4, @usage, r2, 0x9, 0x973, 0x7b66, 0x1, 0x3, 0x4394a41b0ddfb719, @usage=0x2, 0x1, 0x0, [0x0, 0x2146, 0xd, 0x4000000000000000, 0xfffffffffffffffb, 0x2]}, {0x8, @struct={0x3, 0xffffffb7}, 0x0, 0x7fff, 0xd, 0x1, 0xffffffff7fffffff, 0x7, 0x400, @struct={0x8, 0x4}, 0x7, 0x80000, [0x3, 0x35e, 0x4, 0x15b9, 0xe760, 0xb3]}, {0x7fffffffffffffff, @usage=0xb69, r3, 0x0, 0x0, 0x8, 0x9, 0x0, 0xf0db43e6e72f08c5, @usage=0x95cf, 0x7, 0x8, [0x100000000, 0x9, 0x2, 0x7ff, 0x7ff, 0x6]}, {0x3, 0x623, 0x5}}) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', 0x50880, 0x101) faccessat2(r4, &(0x7f0000001d80)='./file0\x00', 0x22, 0x100) (async) r5 = socket(0x2, 0xa, 0xc) (async) faccessat(r4, &(0x7f0000001dc0)='./file0\x00', 0x10) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001e00), 0x101002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000001e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0x8}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x30, 0x1412, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040000) (async) chdir(&(0x7f0000001f80)='./file0\x00') (async) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000001fc0)) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x34) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000002080)=[@textreal={0x8, &(0x7f0000002000)="66b9300600000f32f30f32660f3a42e8f9aa0f01986b00bad004edb874008ee866b94d08000066b8043fdf2366ba000000000f3066b9ba09000066b86000000066ba000000000f3066b9800000c00f326635000800000f30", 0x58}], 0x1, 0x20, &(0x7f00000020c0)=[@efer={0x2, 0x2000}, @cstype3={0x5, 0xa}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = msgget$private(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000002140)={'dvmrp0\x00', 0x1000}) (async) bind(r6, &(0x7f0000002180)=@phonet={0x23, 0x2, 0x4, 0x40}, 0x80) (async) socket(0x25, 0x80000, 0x10001) (async) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000034c0)={@empty, @dev, 0x0}, &(0x7f0000003500)=0xc) sendmsg$inet(r5, &(0x7f00000035c0)={&(0x7f0000002200)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000003440)=[{&(0x7f0000002240)="273bd32f34dae6455030d92514deeb3f6b1b5802a11fc454d058317f1c213c3734a3fc08263172190cf305ddb19fa46638c91bbccee44de0e26dc6a715391e15fd83308dd11eb91d33fac11570518131b1ef3f310720445c999af0cf9e4565a813899bff8c8214", 0x67}, {&(0x7f00000022c0)="9064d0d5efc1d8a2c0aabf83790d0048a5d05d9f658140", 0x17}, {&(0x7f0000002300)="e255689f868913412acee016bb980175880fc56fa7a32dfadef02dc651ac0515c7fc354529bfba41", 0x28}, {&(0x7f0000002340)="2167e3caae0766ec92e36e20c22448185a103b0ffe351dc20c56ebc90e5fbcf0180be6c3e779ccb3e94c07c315182580285b2226eb7859a9491588f00fbd0a55e63202a8e63ae6952fc13dc5558713763195350a96c031799978a7e0356297a00adc1f347010bb504d1f25d6ae88fe15ed04ee0f249eefa59b015a9aec9418ffcf990c1ba52c32e1e1a7fdfa0a255e0c63032152186a7832a3ffc287fcefb8be5d368f50f1875ea74914285e168de68d1e", 0xb1}, {&(0x7f0000002400)="d2170999156618", 0x7}, {&(0x7f0000002440)="582cc19985ea580b91efce04f89a8d1d50081f93c9b2c42bb3a0568b47ec40362f4396180206542ffdb4d491db4d393ca21cf1538dd7563be3294e28c85be8fa8985deaa58efd2597b223dfe9cbc6a87ac6f7b4facde993660f481cf46b8de50bcfbe3f9f346fb2706b110a6b79d8ce9c568e8f2c7283180d73f07c21c2ec056fe5042a0236ceeba785f9e8319b9e7961565fc603a56f96024ab32a550ca8ffec95f5d9bff8c88b2c53274693043efbfa5ce9a9ba533afad24a9cf0b7159a00d994a74212cceb9f50398f0a9b0832fef6f48bdf959d770db63e1039a1ebc54649eefb4b18ceb43890d7181f28f5dda26d61fe59809bf84cc6da4f87aed4d73f47825f83a86bca8f2dc5e6a6d9897952589906165958d118a7eabfbc109d64b2cc2b741e8ae8681a9799382c352ef0179554540194990d772e81be7ce53f1be8abed4cde193bfde778040c2e91898f92d5f32986845577b546d6b8e548e018d40766e471d10569d1caf6df5c97517167eb63d3b01ca1b29508fa53899b9f8c75bcadb2380f43db0414546e6aaef160cb084c5a1eea63933ebefbe885d3d5af9d04737cddf2ae85d604cb78ea1c513efd716246f98abfec1a674d28960323fa3acb0bed9815e8dac7b600df5d6cf8671c68ec2a697471846139e4cad7899bf403945567ac0a13f11567093a24060734467dbcf84e9bc23ab7402a7e929d3c5bf72c7e1fc05cd79cf401dbac41d509bd6710a652ae649aa5a9797785fc507852cae25592a6d803aba436b5f53f9bb14fbaa3925ba623bc7f0fadc1d93444a4fdfba38b27bcf693a17361a322f102d697ea417dc0287e865d6e71195a6da631ce5525921cb1d529e630d443b6f86ee1c1edd48960111d0d58250bc06f93db6b54d45c14d553e071f4a2605633713e7f2356977bc2fb1574b79946a946eaf05d8119635636ff9dd7992ae0d2dbc2519a8e2a63fc28779bec41fbd55cd87d55aa464abd2f91d62dea625c857847841fdbf29681498b1a1a9900d83ba67d012058fdd7016d063ca0336d2bf723ccfc7328156569f41b6b5169b9f3601a339f30bef720dc6386a847544d571a777111a6cc2856441627ca2387c27f4e9ecc63576f1a970bc7e8757b5029f5d3088210f4837749cf6e2528344f0161d256efa71b610789a9aedd7474d7e50fe6b5e0f22a12575b5d91e4a848fee0784db12ac1c5ea15ef6ca101688439058b3467b033f71f9416fe3ba8660ab6429e1b83ffd785d3a49e0948a7eb097527ffbe43ec94b2cb72fa28a02669fcede913241ec328a05a67df33d459dc27035c3f9d42d7d8647ff0570c8cecbb55159ceff199b814b26a6e8591486e097d05ce0cf2b4b97fcec70231ae90efbe87e07f7b56d8f1e3239c51af4443719a5df5ad153caa112c02812406135b7bf0a033721c27dfb990c222b519d8e6c20e19d73fcebee9044ff06fbc7893136d0158337eb4a4431d843590f6e35221be3da2fe4f78702dfc395bce8b737326216cf6ffb163da9de01bbcf8970b9f271a3f4c3564687b1c7af5ae4fa7753691ed6936af9f353a55488e2e860983d96d52317fe5e2e243f9f30fcb83412685cf5f760339d28f02ba5400bc49ea767c80d27079b65a795410b38b98c59e582064fecb978884c5c187783139a0b71685505d1d0d9e515ac6470fd60f4834b95d040cd8528471dd48f7b07e0a32d525e9294eb1e53b566123b89227067448431ef1698b16d53ad9cd524884eb23ab5e5673f4c0207c82efc19a5a305246f2e91b073e971f158ee3ce73850189839a976c5a4b19d8396e52eef3920b2b504d2906015e6dea5bd3151b975659ea36aa799834f99afbca9ff42cebc72d602837882ced3bc8c6a3c68b2efd2f1c9259958cd08962d1a0542ba897a79a5333c25e010fba826b990628c482aeabbba4957083e8cd4a34cd8406a9bcab66ff5a46dc5d99f13775b942552171105d5a7ed61a5cee7e44cac63d2fa58784db48942393a9e4a1b916bf7b282cc043b7defc905f37f70de963a38c886b7ba289a243910c14b86a08960bee16af0be118d5b01527a15a5e7c8101680fa634f93ba79d9e59c351918f596827d971f52380180abb02519bb6ec62f03ec4e91db9e70b405e1dd40e7cede1ae199fb6fe84c2fa8aba2626cd74d3659a7b452c36964bf98189daa7144905a03f65296ffca718446599d5de71741adb73a858c5c9c5171520fc78590a87e3817b6b35e6dd2edefac9b1d77bcbae7799ce63c8f325402921adb66fb8e85c7a03151270538841386c75f8ec26f7d1b89c42d8c4e7ad86fe9c1b611e03a755de92683c38aaecca3fac80413a2e8f482eea7408cad54f6d59a918fa499d831fdb4bca87910a43679088413b3f22c0fed0f54c23e393494b39561e940595c9d477200332c1c2c0c420a8385d14d5721aab888bfed05a990ef0d458f14bad70a9d47fcae3e702509909f7f17804c6443401f90fc2912d82b8bf18ed990332c68a8273eb8504866095eb20bc077493245b89fb800f64560e0e5ac242cf63732aca4d35fa0c588e23f704563c56afc3d0630aeaeb85d65d188ede1ec8bddcf4dfdaff21a0ae8226181259f248dc4acedcff4803fe0e4af781276f3131bcaae2730a3596bf5d578776ba51a2a5484dcc033366423c73755f472a4c63bcc311f238463fa2e815ede08f03e0d8d2c5dab638a0e0ca5cf8206596b3e79fd4b7d9570bbb10f58e4a93f9c27e89ec02be872a16e5e18bafe63028a1ddbac45a9f4c4edd436a6a0b74e86641e4f6edfb9f27fe53040934a419ec7e7e37b37aff04baaec6b99064cad120417ae6596fba735e2a2bb574aaacfa996e973be1ae2b8511e967fd4ac17437ef61613a87aba93cd0fa30afee260073e08038ea483eb1b81c3d0d3cf195d996ae704716d41ad76a60cdd1975b5e9e09b28d876faea1e4861a01556fbc7302b4f7cb70a8a6d8c9cb0f78abbc4dff6075979fd00f1d9a5066a0593bcae0f61d9db5498c4421f9eb67d36867567fc001f4799e1db2b3d33c7fff621518d3a5a765d362066f6eb1fd82a183664311b35b30dbb7b5962901c54b2ed53e2c226c2592eefd9465aeb141ac3395058354df69574db939eb90279262777f7680e8f69e1039b879ea4a30bd46c6341095dfbd42c05c95ed3071124f0992cf4421a66170ecb4d938add443cc293339f6f594047d85a67fbec49f726a0400d149f7013f224df4ecc627b422e95ab7d2e848f286e557db38bcaa90a64fbed2aacea7cff168c236b1446992709bd69d9e47b8b57d94b9e1377f37fb3d1c1317d177b6171632751c131691579029f94c6e355768bc35a3e28a843fc18471dd0dd5f32e303974650bf835cb2fc991d4f9d4b4c5b6610581e3c347e70664b95edb0e32a49c69dc5a82ad852208e039dc33cfc51003bf3b8db2fbf0d48e376fda77715e6564c261dd56f3da0f8861de1009fbd48620206a709a6024f396e06dec9ea6af3b1a042cb0deb4738b9e357fe03e8aa2ecc3257a037f80d2c64df6f3df38fe8a5048b7d320a0db99de1953e819bfdb6034ec036991524b9d203db90ba5803ef517eb224f017f78ee48a09220f12e27b73b82a1256266a6ba80fc1eb235a9852652b2fe0bddce1d1da3889c3567bd25bed7ec740b5530a4e907e4818546856447d81d705eb4fb6c2dc8a7a5a06a4d3396ec50b400cbd3a34f084f73153be2b46b7028dcf4251543c50bdb7ac142c73e75e15430ad64e544e28e09e181be020701b66b9ff7a3f23ada2bf1eddf1a2cbca59df32a638ee81a0d23c3fd6653ed892f7193167423593394a7ad57f27f43232dac64c537f97d36f2e7a9e8c88e7935c6b58c4dbe2fba16a446ed82484154f60d1f0b2c08a64eec67275ecab56f42439376927a8b4d7575e041783b799552af419c0393f8aee86661b2dfee9f06fefdf7929111a6489ee6b13bd17f553f4a85c249f754798ccaa9648e7043049860a4a8903210b16f2ae080f4c1b9557879ba2af60ff5ce5873bb5d9ec5c795c836f15755495d60c02e7942cd4bb0bab8707c69dbdc8b060524ba20bd4b11a9b13b973a982b82f205a8a9db032b28ddcd1edafd6e071e34cf5dc1ee55b21b2993ed95e645d2bd02e42639ae84fe95b82f4c59bfc733f049e8eb7162d5590e00e6fb9462bcb425af7f920eab64b3fdf6b2b212e0883dc8ba56bddd63563c2f25004536415dd5e93a43f1a30212b14bbdc2632e0b7d2681cfa1e3020dbabba6e1234f979a9988e7768b53d41e700788a6f92f17639735ce084e49764a7e78e805f116b114a66e65715fa2b265fa24be0e9902d37427b30b9230a8b3da582c3f5bf3e5e9c0dc5e241548313e3502b3e023332303917bb5ac1420effda6defbc5889e76f40a63bdd3267f341d8976e2ade155a3a7264368b2feb31bbb99808647564ae7659444fe1b9c758e12f2c15f6c02d7d8e2c2bd3940e568bc633ac711dd5e7752352da06c02ebf2ec7b7566e1e782d6c99c6dc2c9ee0233991f31830673ec3d838421dd3782a54545094a1a7af9685e1a8280c370c4f18322d106ead7c939d9672d93196531eddfaa72e93ec0fd61ec4ecb27959e735e2f88d4310c0442f9bfd964d4670d1e35c1dccd2e0f988ac10deff5259dc3ec665ea550f7d27d7ddc84825e98f6ada9f15171de1df7c67b575924345d797ba66eee8695aa0fd2ed4c77dec988f065613b4c475d0ac7da7480b0e9f308cbf856ca6434a86593dd794f7586b68a23f640f989a6d04f1f0a756aeb3db8901e07a6820ed5a5d0596571a4d0539b39c7550efb8d99ccf77affeb8690c0b9bf8b9967a8572ef29163046404738c718304cdfaa000494d680c707745c8318d3b3da62a6b6fbe4a0a3b3e87bfb9d810f1b7202abe20bcebec8d33c12c6cb9ed600e683d97d9ff65c6852c24aaa3e5552abc4662daaa3cfde42213b59648a4648b9a2799f14ba188d89b59fa915f8225110a529167746937592fa1cc623609892c0857570711333fa2771d9961bca242a1e9c3636c085d50b5abd064209ea762d6d6cf6800af2ee5345a16eb7bac9f65922362b5ea509198a86b4b80afaf95da36af8235031e5e5507b66ebba7c048848c81a37ee21e3843287d2c74627e8cea5dcfe1fe9f430fe14ec8071066719c425efe8378f624c14baff517641ab7a3d7b2fcc2e73fa441741513ba5bdf6c7a91960dafbebfd99553f55553279727871dfd48b0e22b900df01c53c20905cccc3be0f910cc999f7d37b0fce92fed53610e646a6a1eedc9ec466c62d48a0c13d24e325e29f4b315fcf23725e13f0c7386b802540d3bdb871d67b4f5ff723cf88dd214f7ad039cedb716ffba82ecd15afbeff7dae854d4f093aaba6fa39e09f5ca3b66639b0c9c4c2a7d5a2d6075e78c4f331612aeb4f68ee9543b9d750a3d87cc3a7c3c08bd47ab120814054788d7ca77b70b20a6b0d57324c2a4bcbe454079147a3143cdb7f6dfeb7c54a0312fb987b56e22507e19cd877f202595eaf908e4dd25e0fb79d34001111de915436e698ab5f9cbda94e2678cba7b4b72e253dbe9713cc8185dfe3387014c3bff983b0cc96f735d9e646a12e471faf7c2cea2ad2dee0131f389ba7bc2705d1f26d92ce433755c49f89f92db7f454d91167e9e0040fe9ac5c969659c8796d3c16c5e5b1adcdd81d9dbc5c24bd2088e653b89f5a288f509bcd05ebd4c24c48564356d453a6e75c90fbb1218634b27c1523e423296b97bfda71805968581ec7027fe30dffab3e32a4", 0x1000}], 0x6, &(0x7f0000003540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @dev={0xac, 0x14, 0x14, 0x36}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x50}, 0x10000) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x18, 0x3, 0x1, 0x101, 0x0, 0x0, {0xd, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000003700)=@md0, 0x0, &(0x7f0000003740)) (async) msgctl$IPC_RMID(r9, 0x0) 3.96661334s ago: executing program 4 (id=1443): r0 = socket$kcm(0x10, 0x5, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, r3, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r4, 0x200, 0x3, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048809}, 0x4) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f00001ad000/0x4000)=nil, 0x4000, 0x0) (async, rerun: 64) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (rerun: 64) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) (rerun: 64) 3.049110219s ago: executing program 4 (id=1448): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10001, 0x4, 0x40000, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x100000002, 0xffffffffd, 0xffffffff, 0x3d, 0x4, 0x5, 0x80, 0x3, 0xa1f, 0x6902, 0x2, 0x9, 0x3, 0x2, 0x0, 0x8bb6], 0x10000, 0x40246}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001440)={'vcan0\x00'}) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) (async) accept4(r4, 0x0, 0x0, 0x80800) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) 2.782420331s ago: executing program 4 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, &(0x7f0000000040)) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f000000cfc0)={0x48}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) recvmsg(r6, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x2000) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, 0x0) 2.667835676s ago: executing program 4 (id=1450): openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d000, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_setup(0x94e, &(0x7f0000000140)={0x0, 0x4bfd, 0x10100}, &(0x7f0000000100), &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x11, r1, 0x4eb2d000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r6, 0x101, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}}) r7 = syz_usb_connect$uac1(0x6, 0x13a, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x128, 0x3, 0x1, 0x0, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xe}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x3, 0x80, "13"}, @feature_unit={0x9, 0x24, 0x6, 0x6, 0x6, 0x1, [0x4], 0x80}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x1, 0x0, "0bd83b5aaa"}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x7, 0x81, "e889"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x3, 0x6, 0x43}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x1, "4212419cdd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3, 0xfff7, 0x3, "4d0b1b7c"}, @as_header={0x7, 0x24, 0x1, 0xe, 0xd9}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "57e96d", '\x00\x00\x00'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x5, 0x1, "fb15c5d8570dfbe5"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xffc0, 0x5, 0x3, "81029d7b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x81, 0x1c, {0x7, 0x25, 0x1, 0x0, 0x94, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x8, 0x6, 0xff, 'Kv', 'V'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x4, 0x12}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x10, 0x4, 0xff, 0x9, "9088b3bb0777ce01"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xaacc, 0xd, 0x6, "2c3e2bee2a1d258f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0x80, "456c93d6921e389258"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x40, 0x4, 0x8, 0x8b, "d7e18f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x1, 0x7f, {0x7, 0x25, 0x1, 0x3, 0xd}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x8, 0x7c, 0x0, 0x10, 0x6}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf, "c1d3b5964f7ebc2baeded1e45ba599b5"}]}, 0x3, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000480)={0x14, &(0x7f00000003c0)={0x20, 0x21, 0x10, {0x10, 0x21, "eaa4e64e4cd9e389f1846c253515"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f0000000880)={0x44, &(0x7f0000000580)={0x40, 0x7, 0x3e, "c23eed4ca356c3035c36be6a9a417f060f2f3e3a599ea93d60a71ddcd23dfd560d4e8a2b80fc906b7794214f99c6b8baa6233c503524d8b5411c5236c2f9"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x81, 0x2, "588d"}, &(0x7f0000000680)={0x20, 0x82, 0x3, "7126c1"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, 'I'}, &(0x7f0000000700)={0x20, 0x84, 0x3, "5812ce"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "bcbc84"}}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x32, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xc8}}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000a80)={0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "62d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000400)={0x40, 0x16, 0x2, "0e90"}, 0x0, 0x0, 0x0, 0x0}) 2.579123977s ago: executing program 5 (id=1451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xab, "f355116005bf5e22386f2b2b615560787eb7238c4d19da2271c17fbe73f55f1b487a904f7cc1969063be50cd7edcf0a56737d9b9bc63e28d0cce0a91d87878d009ff5ff8a0d7ba18a6ac5a48be2611e2c5188294ac146e76e3577b69aa2b4c42d9797cd295365895dc8cb16f45ebc09f4da91d51680c42232b7871893c30b5e5d8c9efec87ec72824166ff9933e820c9331763e7a5e6b66b7e7582e8242da916ec6e3eff7394b65e9604a5"}, &(0x7f0000000040)=0xb3) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x9, 0x6, 0x5, 0x1, 0x6, 0x9, 0x19d3, r2}, &(0x7f0000000200)=0x20) 1.622293889s ago: executing program 5 (id=1453): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r3, 0x604ab000) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) (async) listen(r1, 0xb5d6) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async, rerun: 32) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 64) r5 = accept4(r0, 0x0, 0x0, 0x80000) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="f30fc773d50f0d33660fd28543ba66b97a0200000f32f4670f01cf66b8000000800f23d00f21f86635200000090f23f8b81c010f00d866b96502000066b80018000066ba000000000f30f2f4", 0x4c}], 0x1, 0x51, &(0x7f0000000280)=[@cr4={0x1, 0x400}], 0x1) (async, rerun: 32) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000003c0)={0x3148, 0x20, [0x0, 0x8428, 0xe162, 0xa], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0]}) (rerun: 32) r7 = accept4$alg(r5, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="cb8e363f2486d7bf4a8bc2f5e05a86875d8788e66617e2cfe55a2fcdc8c9b3cda2bcd2cb5f68b5c1fc763d40600b", 0x2e}, {&(0x7f0000000240)="954c", 0x2}], 0x2, 0x0, 0x0, 0x4004}], 0x1, 0x200048d1) 1.490876967s ago: executing program 5 (id=1455): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x200004}, 0x1c) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67eb6fa6ce75030000003d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r5, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000000100)=""/134, 0x86) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) getdents64(r6, 0x0, 0xc0) syz_fuse_handle_req(r3, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='0'], 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) accept(r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000140)=@file={0x0, './file0/file0\x00'}, 0x6e) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0445624, &(0x7f00000005c0)={0x0, 0x1}) 1.487911164s ago: executing program 0 (id=1456): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) syz_clone(0x10828400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x829f}, 0x8) 1.367854485s ago: executing program 0 (id=1457): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2, 0x4) (async) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f00000000c0)=@canfd={{0x3}, 0xd, 0x1, 0x0, 0x0, "bce54fa1a9031d10c6d7b05ae3eeb27a7b6749f4b318f333abefe7730e125c7e2b687203fa6a5934f5a5fecfc8fd6301db64a03b899b1a08cbfdfc70d927ecb6"}, 0x48}, 0x1, 0x0, 0x0, 0x4000002}, 0x44801) 1.31929431s ago: executing program 0 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e21, @empty}}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) (async) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000040)=@profile={'stack ', '&&\n:\f\xca|+\b\xc9\xdf\xf7\x89w\xf3\x06\xb4W\xca\x93\x03\x1d7\x1d\x06\xd2\xe5\x9e\x86>/\xe5A\x18\xa4\xeeC\x06\x8d\xf6\xba\x88\xe1\xb6\xdc:/,\x91\xae\x1c\x81}k`\x14\'\v\x8b\xc5\x1fs68R\xf4\xf1.\xe9U\xf4dY\x9f\fH]\x00`\x93sh\xedX\xf2\xcb\xb0\x1c\x83\xe4f\xe9\xaao\x13\xf3\x81\xf0>(AKf\x83\x92\xb5\xa0Z\xaa\xa5N\xa9\xf0q.\xd5*&c\x1a\x8e\x02\xe6\xd29\xf1!\a&\xe7k\xda\x93w\xb2\xa2\xefm\xdf$\"\xee\xc7\xe3.\x1f\xe6\xba\xae\x83s\xc8\xaco\x17\x14!N\xfd\xca\xac^L\xd4\xe1N\xc7\xf6\x98\xa7}\xaeH\xed\\Q\xf5\xf4\xcf\xf8\xa3Yv n\xf5\xfc/\xa7\xc6\x93\';\x04\xd6Y=Hf\x82h\xdfe\xb0j\x8a~6\xee>\xbf\xc5\'$\x1f;\f+\xa8[x\xd4\x95N\xb3\x1a\xbb$0\x8c\xb4x\xd5\xbf\x17\xdch#'}, 0xf4) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) setresuid(0xee00, 0xee01, 0xee01) r7 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) (async) fcntl$setsig(r8, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r9, 0x1000}], 0x1, 0x0, 0x0, 0x0) (async) setresuid(0x0, 0xee00, 0x0) (async) dup2(r8, r9) (async) fcntl$setown(r9, 0x8, r7) (async) tkill(r7, 0x13) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r5, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x4, 0x9, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.234316454s ago: executing program 0 (id=1459): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0xffffffff, 0x25dfdbfd, {0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x4040) (async) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8000000180081064e81f782db44b904021d08000600ea09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto(r1, &(0x7f00000001c0)="e979", 0x2, 0x20004051, 0x0, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/157, 0x9d}], 0x1}}], 0x1, 0x40000020, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (rerun: 32) copy_file_range(r4, 0x0, r5, 0x0, 0xd, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x7ffff000, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000080)="6a14cc1ef70dbc0bf0e31dc32a5fe6d870a35ad82e306395278940d5aecbf09ad3ff13f63203e9a83d74", 0x2a) 1.206743207s ago: executing program 0 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "d44a3f83915ca751", "e2114c577fc81ac7fd7d4ce5e9e089a8", "8896a4ad", "f5d31ae534973248"}, 0x28) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x1, 0x0, 0x0, [{}, {}, {0x0, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x1}, {0x0, 0x47, 0x0, '\x00', 0xfd}, {0x0, 0x4}, {0x0, 0x0, 0x20}, {}, {0x20}, {}, {}, {0x0, 0x7f}, {0x4}, {0x21}, {}, {}, {0x3, 0x0, 0xcc}, {}, {}, {0x0, 0x6}, {}, {}, {0xfe}, {0x0, 0x0, 0x40}]}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000002c0)={0x4, 0x0, [{0x27ee65f48f3452d3, 0x0, 0x2}, {0x1c9a, 0x0, 0x401}, {0x4db, 0x0, 0x4}, {0xaef, 0x0, 0x107}]}) 1.030206255s ago: executing program 0 (id=1462): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setreuid(0xee00, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x7, 0x4) syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f903e9049a0e231129d7000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setreuid(0xee00, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000100)=0x7, 0x4) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f903e9049a0e231129d7000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) 940.443613ms ago: executing program 2 (id=1464): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc}}, './file0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000340)=0xb, 0x4) 826.841232ms ago: executing program 2 (id=1465): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r6, &(0x7f0000000480)=""/177, 0xb1, 0xe0) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) (async) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000000, r3}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="305c061ce1821f7051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e64174d46de00a5a09fa80393d502b0cd490635d54cdf5bd046cc030000000000005e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x2, 0x2) 815.695821ms ago: executing program 2 (id=1466): ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000001c0)={0x5, 0x8, 0x6c, 0x5b6, 0x17, "cdbff8064597cde7941b9cc947a66ebb8a5f9b"}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x24, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000041045f201d0640c16fce0102030109021b000100001000090433"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @raw8={"3ad5e4aa05fd1f1646e53f27"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {}], 0x70) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f00000003c0)) fcntl$setlease(r3, 0x400, 0x1) r6 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, {0xffffffffffffffff}, 0x3, 0x3}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x26, 0xa, 0x10000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@private2}}, &(0x7f0000000540)=0xe8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="3473591cc322a2836d4546caa4f20eaf0b4d6261555f14ef8298f496f1fb2d27de3f46b6bc4db201cde1f2a3fc5d5876d5c0d32a3cc222d8a0305f0a3c73e5caf4b768ad21ab5d6ada16fb7d0c6c3fce3a47f78ba0eb35671d17a668ad1ab6be84027b3eb657600564c313989a4d42396a1d037aa0006269baac571741cf529c88bbb35cb75e5594b9d1cc05233d4c0d4e71fd4ad1654e094b2cddd744bc7d7e9ad4287212b8aa6b9cbec2d9d5d13f1f5f0f36d6bfa19c898d177242839241f9f0862fc0aa4d102bbc329924d8bf9c5ee69a6fa947b39f5f2c4991a9", 0xdc}], 0x2, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r3, r4]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}], 0x68, 0x840}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000780)={0x0, 0x5, 0x3f63, 0x7, 0x0, [0x0, 0x0], [0x401, 0x2f1, 0xdb3, 0xfff], [0x5, 0x5, 0x2, 0x9], [0x9, 0xffffffff, 0x7c5, 0x3]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000800)={0x0, 0x8, 0x7, 0x870a, 0x0, [0x0, 0x0, 0x0], [0x101, 0xa, 0x8000000, 0x2], [0xb, 0xfffffffa, 0x9, 0x7], [0x0, 0x5, 0x40000000, 0x5]}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000880)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000008c0)={r7, 0x9, 0x7, 0x80000001, 0xcacee160ac7637, [r8, r9, 0x0, r10], [0x4, 0x0, 0x1ff, 0x7fffffff], [0x8, 0x11, 0x1, 0x9], [0xe2, 0xff, 0x3, 0xb1]}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000940)={0x4, 0xfd}) write$P9_RSETATTR(r0, &(0x7f0000000980)={0x7, 0x1b, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000009c0)='dvmrp1\x00', 0x10) close(r0) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x30081, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000a40)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000a80)={r12}) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/power/resume', 0x400, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r13, 0x119, 0x1, &(0x7f0000000b00), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r13, 0xc018937e, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r13, 0xc01064c1, &(0x7f0000000b80)={r12}) connect$unix(r14, &(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r14, 0xc00864bf, &(0x7f0000000c40)) rename(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='./file0\x00') connect(r0, &(0x7f0000000d00)=@generic={0x25, "bc3d23cd40af81eb30e6a12f532e95c529d638b110068a49a0bb404bbddba77c5574494a427d87eafc6109d792e4e55af43fa4ed2fe45336cd8c5fb33797948f4d7f86b195a95808f256f429d3c0603c1b3199b694678bd49f2a01225c3da1efa2a3628767c77e01e3fb2bf8f2088146805391e12c3569ed47760082b3d6"}, 0x80) recvfrom$inet_nvme(r3, &(0x7f0000000d80)=""/104, 0x68, 0x40002241, &(0x7f0000000e00)=@llc={0x1a, 0x15, 0x0, 0x8, 0x9, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) pread64(r11, &(0x7f0000000e80)=""/128, 0x80, 0x8) 491.245116ms ago: executing program 5 (id=1468): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a80)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a000000300001802c00018014000300fe800000000000aa45"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_open_dev$I2C(&(0x7f0000001900), 0x0, 0x12140) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x4, 0xfffffffffffffdf8) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000100)=0x100a97, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r4, &(0x7f0000000080)="861a", 0xa9b) ioctl$I2C_RETRIES(r3, 0x701, 0x5) 397.348025ms ago: executing program 5 (id=1469): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec47200000000000109022d0001000060020904000007030003000921000036012205000905810300040c"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_disconnect(r0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f00000001c0)={0x30}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40afd03000000", 0x41d) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) 110.391109ms ago: executing program 2 (id=1470): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@private0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x40824) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) listen(r0, 0x7) 75.555562ms ago: executing program 2 (id=1471): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xfffffffd) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hfs\x00', 0x208000, 0x0) 0s ago: executing program 2 (id=1472): open_by_handle_at(0xffffffffffffffff, 0x0, 0x40) socket(0x2a, 0x80000, 0x7) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x6, 0x2, 0x2, {0xa, @pix_mp={0x4, 0x2, 0x47504a50, 0x0, 0xf, [{0x38, 0x4}, {0x200, 0xfffffff2}, {0x62c, 0x9}, {0x70, 0x4}, {0x6, 0x3}, {0x7fff, 0x9}, {0xed, 0x7}, {0x1, 0x5}], 0x5, 0x0, 0x4, 0x1, 0x2}}, 0x1ff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000040)={0x30, r1, 0x0, 0x0, 0xfffffffffffffffa, 0x52c74b4d, 0x2, &(0x7f0000000540)=""/4096}) socket$inet6_mptcp(0xa, 0x1, 0x106) mq_open(&(0x7f0000000080)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00\xcd\x1b\x02\xc2\x13\xc1!\xd1TRx+5\xc7\x84\x93\xecm\xa9\xed\x18\xef\x8e\x05\x05_\xa8\x86\xda\xfb\xa8\xf0:B#5\xafEu\x94\x026\x11\n`\x15,\xfalF\x95\xd0\x0f\xdf\xb1\xfd0]=i\xdc\x97\x93\xe1\x1d!U|\xb2', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) 0s ago: executing program 2 (id=1473): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43", 0xe6}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73a", 0x7f}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0x47, 0x0) sendfile(r1, r1, &(0x7f0000000300)=0x7, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x5, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="120100024392d5204c05c3067aeb0102030109022d0001088770070904cb0103663eafb509059302100409052e09050b02"], 0x0) kernel console output (not intermixed with test programs): aw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.181000][ T5930] usb 3-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config [ 403.200490][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 403.222377][ T5930] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 403.231498][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.254537][ T5930] usb 3-1: config 0 descriptor?? [ 403.660493][ T5939] usb 5-1: reset high-speed USB device number 115 using dummy_hcd [ 404.018810][ T9841] syz.4.1095 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 404.138598][ T9841] CPU: 1 UID: 0 PID: 9841 Comm: syz.4.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.138633][ T9841] Tainted: [L]=SOFTLOCKUP [ 404.138641][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.138652][ T9841] Call Trace: [ 404.138661][ T9841] [ 404.138669][ T9841] dump_stack_lvl+0x189/0x250 [ 404.138714][ T9841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.138735][ T9841] ? __pfx__printk+0x10/0x10 [ 404.138780][ T9841] dump_header+0xd4/0x4c0 [ 404.138807][ T9841] oom_kill_process+0x263/0x800 [ 404.138843][ T9841] out_of_memory+0x898/0x1120 [ 404.138867][ T9841] ? __lock_acquire+0x6b6/0x2cf0 [ 404.138895][ T9841] ? __pfx___mutex_lock+0x10/0x10 [ 404.138928][ T9841] ? __pfx_out_of_memory+0x10/0x10 [ 404.138967][ T9841] mem_cgroup_out_of_memory+0x13f/0x230 [ 404.138998][ T9841] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 404.139032][ T9841] ? do_raw_spin_unlock+0x122/0x240 [ 404.139057][ T9841] ? _raw_spin_unlock+0x28/0x50 [ 404.139075][ T9841] ? memcg1_oom_prepare+0x37f/0x450 [ 404.139107][ T9841] try_charge_memcg+0xde4/0x1280 [ 404.139125][ T9841] ? rcu_is_watching+0x15/0xb0 [ 404.139165][ T9841] ? __pfx_try_charge_memcg+0x10/0x10 [ 404.139185][ T9841] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 404.139216][ T9841] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 404.139246][ T9841] charge_memcg+0x9f/0x180 [ 404.139279][ T9841] __mem_cgroup_charge+0x25/0x80 [ 404.139308][ T9841] shmem_alloc_and_add_folio+0x790/0xf40 [ 404.139340][ T9841] ? filemap_get_entry+0xad/0x2f0 [ 404.139365][ T9841] ? filemap_get_entry+0xad/0x2f0 [ 404.139394][ T9841] ? filemap_get_entry+0x28f/0x2f0 [ 404.139424][ T9841] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 404.139454][ T9841] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 404.139486][ T9841] shmem_get_folio_gfp+0x59d/0x1660 [ 404.139526][ T9841] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 404.139559][ T9841] shmem_write_begin+0x16c/0x330 [ 404.139594][ T9841] generic_perform_write+0x2c5/0x900 [ 404.139630][ T9841] ? __pfx_generic_perform_write+0x10/0x10 [ 404.139647][ T9841] ? down_write+0x162/0x1f0 [ 404.139688][ T9841] ? file_update_time_flags+0x2cb/0x4e0 [ 404.139720][ T9841] shmem_file_write_iter+0xf8/0x120 [ 404.139744][ T9841] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 404.139772][ T9841] __kernel_write_iter+0x428/0x910 [ 404.139801][ T9841] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 404.139829][ T9841] ? __pfx___kernel_write_iter+0x10/0x10 [ 404.139866][ T9841] ? __asan_memset+0x22/0x50 [ 404.139892][ T9841] ? iov_iter_bvec+0xb8/0x180 [ 404.139923][ T9841] dump_user_range+0x8a0/0xc90 [ 404.139960][ T9841] ? __pfx_dump_user_range+0x10/0x10 [ 404.139981][ T9841] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 404.140017][ T9841] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 404.140055][ T9841] ? dump_emit+0xa6/0xe0 [ 404.140074][ T9841] ? elf_core_dump+0x2cd0/0x3960 [ 404.140101][ T9841] elf_core_dump+0x3369/0x3960 [ 404.140150][ T9841] ? __pfx_elf_core_dump+0x10/0x10 [ 404.140177][ T9841] ? kasan_save_track+0x4f/0x80 [ 404.140200][ T9841] ? kasan_save_track+0x3e/0x80 [ 404.140225][ T9841] ? __kasan_kmalloc+0x93/0xb0 [ 404.140240][ T9841] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 404.140265][ T9841] ? coredump_write+0x343/0x18b0 [ 404.140285][ T9841] ? vfs_coredump+0x3321/0x3e60 [ 404.140305][ T9841] ? get_signal+0x1108/0x1340 [ 404.140328][ T9841] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 404.140350][ T9841] ? irqentry_exit+0x177/0x660 [ 404.140367][ T9841] ? exc_page_fault+0xab/0x100 [ 404.140385][ T9841] ? asm_exc_page_fault+0x26/0x30 [ 404.140462][ T9841] ? 0xffffffffff600000 [ 404.140501][ T9841] coredump_write+0x1121/0x18b0 [ 404.140547][ T9841] ? __pfx_coredump_write+0x10/0x10 [ 404.140591][ T9841] ? unshare_files+0xa9/0x140 [ 404.140614][ T9841] vfs_coredump+0x3321/0x3e60 [ 404.140664][ T9841] ? __pfx_vfs_coredump+0x10/0x10 [ 404.140693][ T9841] ? __lock_acquire+0x6b6/0x2cf0 [ 404.140723][ T9841] ? __lock_acquire+0x6b6/0x2cf0 [ 404.140764][ T9841] ? __lock_acquire+0x6b6/0x2cf0 [ 404.140799][ T9841] ? __lock_acquire+0x6b6/0x2cf0 [ 404.140830][ T9841] ? __lock_acquire+0x6b6/0x2cf0 [ 404.140866][ T9841] ? unwind_next_frame+0xa5/0x23d0 [ 404.140896][ T9841] ? unwind_next_frame+0xa5/0x23d0 [ 404.140919][ T9841] ? is_bpf_text_address+0x26/0x2b0 [ 404.140959][ T9841] ? is_bpf_text_address+0x26/0x2b0 [ 404.140989][ T9841] ? is_bpf_text_address+0x292/0x2b0 [ 404.141012][ T9841] ? is_bpf_text_address+0x26/0x2b0 [ 404.141041][ T9841] ? kernel_text_address+0xa5/0xe0 [ 404.141066][ T9841] ? __kernel_text_address+0xd/0x40 [ 404.141089][ T9841] ? unwind_get_return_address+0x4d/0x90 [ 404.141108][ T9841] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 404.141133][ T9841] ? arch_stack_walk+0xfc/0x150 [ 404.141165][ T9841] ? stack_trace_save+0x9c/0xe0 [ 404.141194][ T9841] ? stack_depot_save_flags+0x40/0x850 [ 404.141219][ T9841] ? __lock_acquire+0x6b6/0x2cf0 [ 404.141252][ T9841] ? kasan_save_track+0x4f/0x80 [ 404.141278][ T9841] ? kasan_save_track+0x3e/0x80 [ 404.141301][ T9841] ? kasan_save_free_info+0x46/0x50 [ 404.141322][ T9841] ? __kasan_slab_free+0x5c/0x80 [ 404.141338][ T9841] ? kmem_cache_free+0x197/0x620 [ 404.141375][ T9841] ? get_signal+0xa4b/0x1340 [ 404.141398][ T9841] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 404.141419][ T9841] ? irqentry_exit+0x177/0x660 [ 404.141437][ T9841] ? exc_page_fault+0xab/0x100 [ 404.141453][ T9841] ? asm_exc_page_fault+0x26/0x30 [ 404.141541][ T9841] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.141562][ T9841] ? lockdep_hardirqs_on+0x98/0x140 [ 404.141587][ T9841] get_signal+0x1108/0x1340 [ 404.141638][ T9841] arch_do_signal_or_restart+0x9a/0x7a0 [ 404.141667][ T9841] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 404.141715][ T9841] ? local_irq_enable_exit_to_user+0x5/0x10 [ 404.141749][ T9841] irqentry_exit+0x177/0x660 [ 404.141771][ T9841] ? trace_page_fault_user+0x84/0x1c0 [ 404.141811][ T9841] exc_page_fault+0xab/0x100 [ 404.141844][ T9841] asm_exc_page_fault+0x26/0x30 [ 404.141863][ T9841] RIP: 0033:0x7fa96778f749 [ 404.141888][ T9841] Code: Unable to access opcode bytes at 0x7fa96778f71f. [ 404.141897][ T9841] RSP: 002b:00007fa9686c3f08 EFLAGS: 00010246 [ 404.141914][ T9841] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fa96778f749 [ 404.141927][ T9841] RDX: 00007fa9686c3f20 RSI: 0000000000000058 RDI: 00007fa9686c3f20 [ 404.141938][ T9841] RBP: 00007fa967813f91 R08: 0000000000000000 R09: 0000000000000058 [ 404.141949][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.141961][ T9841] R13: 00007fa9679e6038 R14: 00007fa9679e5fa0 R15: 00007ffc69b42bc8 [ 404.141998][ T9841] [ 404.821803][ T9841] memory: usage 307200kB, limit 307200kB, failcnt 20397 [ 404.823986][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 404.846989][ T9841] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 404.855050][ T9841] kmem: usage 4520kB, limit 9007199254740988kB, failcnt 0 [ 404.864136][ T9841] Memory cgroup stats for /syz4: [ 404.887349][ T9841] cache 309870592 [ 404.900727][ T9841] rss 57344 [ 404.904567][ T9841] rss_huge 0 [ 404.909066][ T9841] shmem 309870592 [ 404.927297][ T9841] mapped_file 0 [ 404.930854][ T9841] dirty 0 [ 404.942367][ T9841] writeback 0 [ 404.945750][ T9841] workingset_refault_anon 10 [ 404.950407][ T9841] workingset_refault_file 0 [ 404.961663][ T9841] swap 127995904 [ 404.965715][ T9841] swapcached 0 [ 404.969144][ T9841] pgpgin 173842 [ 404.972661][ T9841] pgpgout 98176 [ 404.976622][ T9841] pgfault 58358 [ 404.980141][ T9841] pgmajfault 12 [ 404.983650][ T9841] inactive_anon 135913472 [ 404.988757][ T9841] active_anon 174014464 [ 404.992960][ T9841] inactive_file 0 [ 404.997977][ T9841] active_file 0 [ 405.001554][ T9841] unevictable 0 [ 405.007757][ T5921] gspca_vc032x: reg_w err -71 [ 405.012531][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.018916][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.024411][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.029873][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.033048][ T9841] hierarchical_memory_limit 314572800 [ 405.035216][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.047164][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.052932][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.058253][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.064317][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.069840][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.071475][ T9841] hierarchical_memsw_limit 9223372036854771712 [ 405.075222][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.086838][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.092205][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.097521][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.102906][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.106319][ T9841] total_cache 309870592 [ 405.108205][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.108219][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.108229][ T5921] gspca_vc032x: I2c Bus Busy Wait 00 [ 405.108239][ T5921] gspca_vc032x: Unknown sensor... [ 405.108329][ T5921] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 405.144299][ T5921] usb 1-1: USB disconnect, device number 113 [ 405.176314][ T9841] total_rss 57344 [ 405.187809][ T9841] total_rss_huge 0 [ 405.191708][ T9841] total_shmem 309870592 [ 405.195975][ T9841] total_mapped_file 0 [ 405.202212][ T9841] total_dirty 0 [ 405.205893][ T9841] total_writeback 0 [ 405.209910][ T9841] total_workingset_refault_anon 10 [ 405.215133][ T9841] total_workingset_refault_file 0 [ 405.220271][ T9841] total_swap 127995904 [ 405.224363][ T9841] total_swapcached 0 [ 405.228561][ T9841] total_pgpgin 173842 [ 405.236971][ T6617] usb 5-1: USB disconnect, device number 115 [ 405.244041][ T9841] total_pgpgout 98176 [ 405.248593][ T9841] total_pgfault 58358 [ 405.260439][ T9841] total_pgmajfault 12 [ 405.271676][ T9841] total_inactive_anon 135913472 [ 405.279667][ T9841] total_active_anon 174014464 [ 405.289284][ T9841] total_inactive_file 0 [ 405.293555][ T9841] total_active_file 0 [ 405.297788][ T9841] total_unevictable 0 [ 405.301853][ T9841] anon_cost 0 [ 405.305164][ T9841] file_cost 0 [ 405.311568][ T9841] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1095,pid=9835,uid=0 [ 405.328758][ T9841] Memory cgroup out of memory: Killed process 9835 (syz.4.1095) total-vm:49268kB, anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 405.767534][T10159] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1183'. [ 405.809657][ T5930] usb 3-1: string descriptor 0 read error: -71 [ 405.833533][ T5930] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 405.855532][ T5930] usb 3-1: USB disconnect, device number 19 [ 406.438122][ T5966] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 406.590235][ T5966] usb 3-1: device descriptor read/64, error -71 [ 406.688389][ T9831] syz.4.1095 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 406.844259][ T5966] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 406.883167][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.4.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.883200][ T9831] Tainted: [L]=SOFTLOCKUP [ 406.883207][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.883219][ T9831] Call Trace: [ 406.883227][ T9831] [ 406.883235][ T9831] dump_stack_lvl+0x189/0x250 [ 406.883267][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.883288][ T9831] ? __pfx__printk+0x10/0x10 [ 406.883334][ T9831] dump_header+0xd4/0x4c0 [ 406.883362][ T9831] oom_kill_process+0x263/0x800 [ 406.883397][ T9831] out_of_memory+0x898/0x1120 [ 406.883423][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 406.883454][ T9831] ? __pfx___mutex_lock+0x10/0x10 [ 406.883508][ T9831] ? __pfx_out_of_memory+0x10/0x10 [ 406.883550][ T9831] mem_cgroup_out_of_memory+0x13f/0x230 [ 406.883581][ T9831] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 406.883617][ T9831] ? do_raw_spin_unlock+0x122/0x240 [ 406.883645][ T9831] ? _raw_spin_unlock+0x28/0x50 [ 406.883664][ T9831] ? memcg1_oom_prepare+0x37f/0x450 [ 406.883706][ T9831] try_charge_memcg+0xde4/0x1280 [ 406.883725][ T9831] ? rcu_is_watching+0x15/0xb0 [ 406.883767][ T9831] ? __pfx_try_charge_memcg+0x10/0x10 [ 406.883789][ T9831] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 406.883824][ T9831] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 406.883855][ T9831] charge_memcg+0x9f/0x180 [ 406.883888][ T9831] __mem_cgroup_charge+0x25/0x80 [ 406.883918][ T9831] shmem_alloc_and_add_folio+0x790/0xf40 [ 406.883953][ T9831] ? filemap_get_entry+0xad/0x2f0 [ 406.883979][ T9831] ? filemap_get_entry+0xad/0x2f0 [ 406.884008][ T9831] ? filemap_get_entry+0x28f/0x2f0 [ 406.884039][ T9831] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 406.884071][ T9831] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 406.884106][ T9831] shmem_get_folio_gfp+0x59d/0x1660 [ 406.884147][ T9831] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 406.884182][ T9831] shmem_write_begin+0x16c/0x330 [ 406.884218][ T9831] generic_perform_write+0x2c5/0x900 [ 406.884256][ T9831] ? __pfx_generic_perform_write+0x10/0x10 [ 406.884276][ T9831] ? down_write+0x162/0x1f0 [ 406.884310][ T9831] ? file_update_time_flags+0x2cb/0x4e0 [ 406.884342][ T9831] shmem_file_write_iter+0xf8/0x120 [ 406.884367][ T9831] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 406.884397][ T9831] __kernel_write_iter+0x428/0x910 [ 406.884428][ T9831] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 406.884458][ T9831] ? __pfx___kernel_write_iter+0x10/0x10 [ 406.884497][ T9831] ? __asan_memset+0x22/0x50 [ 406.884525][ T9831] ? iov_iter_bvec+0xb8/0x180 [ 406.884556][ T9831] dump_user_range+0x8a0/0xc90 [ 406.884598][ T9831] ? __pfx_dump_user_range+0x10/0x10 [ 406.884619][ T9831] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 406.884656][ T9831] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 406.884702][ T9831] ? dump_emit+0xa6/0xe0 [ 406.884721][ T9831] ? elf_core_dump+0x2cd0/0x3960 [ 406.884751][ T9831] elf_core_dump+0x3369/0x3960 [ 406.884802][ T9831] ? __pfx_elf_core_dump+0x10/0x10 [ 406.884830][ T9831] ? kasan_save_track+0x4f/0x80 [ 406.884857][ T9831] ? kasan_save_track+0x3e/0x80 [ 406.884883][ T9831] ? __kasan_kmalloc+0x93/0xb0 [ 406.884900][ T9831] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 406.884927][ T9831] ? coredump_write+0x343/0x18b0 [ 406.884948][ T9831] ? vfs_coredump+0x3321/0x3e60 [ 406.884968][ T9831] ? get_signal+0x1108/0x1340 [ 406.884992][ T9831] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 406.885014][ T9831] ? irqentry_exit+0x177/0x660 [ 406.885035][ T9831] ? exc_page_fault+0xab/0x100 [ 406.885054][ T9831] ? asm_exc_page_fault+0x26/0x30 [ 406.885134][ T9831] ? 0xffffffffff600000 [ 406.885171][ T9831] coredump_write+0x1121/0x18b0 [ 406.885221][ T9831] ? __pfx_coredump_write+0x10/0x10 [ 406.885270][ T9831] ? unshare_files+0xa9/0x140 [ 406.885296][ T9831] vfs_coredump+0x3321/0x3e60 [ 406.885349][ T9831] ? __pfx_vfs_coredump+0x10/0x10 [ 406.885373][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 406.885405][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 406.885447][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 406.885484][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 406.885516][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 406.885557][ T9831] ? unwind_next_frame+0xa5/0x23d0 [ 406.885588][ T9831] ? unwind_next_frame+0xa5/0x23d0 [ 406.885612][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 406.885654][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 406.885693][ T9831] ? is_bpf_text_address+0x292/0x2b0 [ 406.885717][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 406.885744][ T9831] ? kernel_text_address+0xa5/0xe0 [ 406.885768][ T9831] ? __kernel_text_address+0xd/0x40 [ 406.885789][ T9831] ? unwind_get_return_address+0x4d/0x90 [ 406.885808][ T9831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 406.885833][ T9831] ? arch_stack_walk+0xfc/0x150 [ 406.885867][ T9831] ? stack_trace_save+0x9c/0xe0 [ 406.885895][ T9831] ? stack_depot_save_flags+0x40/0x850 [ 406.885921][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 406.885953][ T9831] ? kasan_save_track+0x4f/0x80 [ 406.885980][ T9831] ? kasan_save_track+0x3e/0x80 [ 406.886004][ T9831] ? kasan_save_free_info+0x46/0x50 [ 406.886025][ T9831] ? __kasan_slab_free+0x5c/0x80 [ 406.886041][ T9831] ? kmem_cache_free+0x197/0x620 [ 406.886071][ T9831] ? get_signal+0xa4b/0x1340 [ 406.886092][ T9831] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 406.886113][ T9831] ? irqentry_exit+0x177/0x660 [ 406.886132][ T9831] ? exc_page_fault+0xab/0x100 [ 406.886148][ T9831] ? asm_exc_page_fault+0x26/0x30 [ 406.886231][ T9831] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.886251][ T9831] ? lockdep_hardirqs_on+0x98/0x140 [ 406.886277][ T9831] get_signal+0x1108/0x1340 [ 406.886333][ T9831] arch_do_signal_or_restart+0x9a/0x7a0 [ 406.886362][ T9831] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 406.886404][ T9831] ? local_irq_enable_exit_to_user+0x5/0x10 [ 406.886441][ T9831] irqentry_exit+0x177/0x660 [ 406.886465][ T9831] ? trace_page_fault_user+0x84/0x1c0 [ 406.886497][ T9831] exc_page_fault+0xab/0x100 [ 406.886522][ T9831] asm_exc_page_fault+0x26/0x30 [ 406.886541][ T9831] RIP: 0033:0x7fa96778f749 [ 406.886566][ T9831] Code: Unable to access opcode bytes at 0x7fa96778f71f. [ 406.886575][ T9831] RSP: 002b:00007fa9686c3f08 EFLAGS: 00010246 [ 406.886593][ T9831] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fa96778f749 [ 406.886606][ T9831] RDX: 00007fa9686c3f20 RSI: 0000000000000058 RDI: 00007fa9686c3f20 [ 406.886618][ T9831] RBP: 00007fa967813f91 R08: 0000000000000000 R09: 0000000000000058 [ 406.886629][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.886640][ T9831] R13: 00007fa9679e6038 R14: 00007fa9679e5fa0 R15: 00007ffc69b42bc8 [ 406.886682][ T9831] [ 407.635238][ T9831] memory: usage 307200kB, limit 307200kB, failcnt 21675 [ 407.642253][ T9831] memory+swap: usage 432072kB, limit 9007199254740988kB, failcnt 0 [ 407.655785][ T9831] kmem: usage 4564kB, limit 9007199254740988kB, failcnt 0 [ 407.667027][ T9831] Memory cgroup stats for /syz4: [ 407.667185][ T9831] cache 308572160 [ 407.677248][ T9831] rss 57344 [ 407.680444][ T9831] rss_huge 0 [ 407.683695][ T9831] shmem 308572160 [ 407.687361][ T9831] mapped_file 0 [ 407.690672][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 407.690962][ T9831] dirty 0 [ 407.702744][ T9831] writeback 0 [ 407.706052][ T9831] workingset_refault_anon 11 [ 407.710731][ T9831] workingset_refault_file 0 [ 407.715264][ T9831] swap 127995904 [ 407.718831][ T9831] swapcached 0 [ 407.722259][ T9831] pgpgin 178331 [ 407.725747][ T9831] pgpgout 102982 [ 407.729309][ T9831] pgfault 58648 [ 407.732832][ T9831] pgmajfault 13 [ 407.736315][ T9831] inactive_anon 210591744 [ 407.740664][ T9831] active_anon 96989184 [ 407.744777][ T9831] inactive_file 0 [ 407.748430][ T9831] active_file 0 [ 407.751916][ T9831] unevictable 0 [ 407.755454][ T9831] hierarchical_memory_limit 314572800 [ 407.761113][ T9831] hierarchical_memsw_limit 9223372036854771712 [ 407.767369][ T9831] total_cache 308572160 [ 407.771640][ T9831] total_rss 57344 [ 407.775388][ T9831] total_rss_huge 0 [ 407.779133][ T9831] total_shmem 308572160 [ 407.784406][ T9831] total_mapped_file 0 [ 407.788413][ T9831] total_dirty 0 [ 407.791886][ T9831] total_writeback 0 [ 407.795987][ T9831] total_workingset_refault_anon 11 [ 407.801112][ T9831] total_workingset_refault_file 0 [ 407.806182][ T9831] total_swap 127995904 [ 407.810264][ T9831] total_swapcached 0 [ 407.814351][ T9831] total_pgpgin 178331 [ 407.818385][ T9831] total_pgpgout 102982 [ 407.822464][ T9831] total_pgfault 58648 [ 407.826468][ T9831] total_pgmajfault 13 [ 407.830505][ T9831] total_inactive_anon 210591744 [ 407.835375][ T9831] total_active_anon 96989184 [ 407.840059][ T9831] total_inactive_file 0 [ 407.844325][ T9831] total_active_file 0 [ 407.848349][ T9831] total_unevictable 0 [ 407.852346][ T9831] anon_cost 0 [ 407.855646][ T9831] file_cost 0 [ 407.859006][ T9831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1095,pid=9826,uid=0 [ 407.875551][ T9831] Memory cgroup out of memory: Killed process 9826 (syz.4.1095) total-vm:49268kB, anon-rss:0kB, file-rss:30208kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 408.190675][ T5966] usb 3-1: device descriptor read/64, error -71 [ 408.309314][ T5966] usb usb3-port1: attempt power cycle [ 408.387723][ T30] audit: type=1326 audit(6057879257.765:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10189 comm="syz.5.1192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd061d8f749 code=0x0 [ 408.692645][ T5966] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 408.714615][ T5966] usb 3-1: device descriptor read/8, error -71 [ 408.871682][T10197] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1194'. [ 408.891633][T10196] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1194'. [ 408.981001][ T5966] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 409.003300][ T5966] usb 3-1: device descriptor read/8, error -71 [ 409.131381][ T5966] usb usb3-port1: unable to enumerate USB device [ 409.312449][ T5939] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 409.408037][T10202] netlink: 'syz.5.1196': attribute type 4 has an invalid length. [ 409.472464][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 409.479596][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.506476][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.527959][ T5939] usb 1-1: New USB device found, idVendor=056a, idProduct=7d84, bcdDevice= 0.0a [ 409.547281][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.570112][ T5939] usb 1-1: config 0 descriptor?? [ 409.750336][ T6617] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 409.916779][ T6617] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 409.925455][ T6617] usb 3-1: config 5 has no interface number 0 [ 409.931666][ T6617] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 409.959844][ T6617] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 409.970958][ T6617] usb 3-1: config 5 interface 123 has no altsetting 0 [ 409.988586][ T6617] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 409.998155][ T6617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.006229][ T6617] usb 3-1: Product: syz [ 410.023085][ T5939] wacom 0003:056A:7D84.0023: unknown main item tag 0x0 [ 410.031874][ T6617] usb 3-1: Manufacturer: syz [ 410.036508][ T6617] usb 3-1: SerialNumber: syz [ 410.042400][ T5939] wacom 0003:056A:7D84.0023: unknown main item tag 0x0 [ 410.050916][ T5939] wacom 0003:056A:7D84.0023: Unknown device_type for 'HID 056a:7d84'. Ignoring. [ 410.236794][ T5966] usb 1-1: USB disconnect, device number 114 [ 410.308358][ T6617] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 410.341804][ T6617] usb 3-1: USB disconnect, device number 24 [ 410.550891][ T9823] syz.4.1095 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 410.662964][ T9823] CPU: 1 UID: 0 PID: 9823 Comm: syz.4.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.662998][ T9823] Tainted: [L]=SOFTLOCKUP [ 410.663006][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.663018][ T9823] Call Trace: [ 410.663027][ T9823] [ 410.663037][ T9823] dump_stack_lvl+0x189/0x250 [ 410.663069][ T9823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.663091][ T9823] ? __pfx__printk+0x10/0x10 [ 410.663137][ T9823] dump_header+0xd4/0x4c0 [ 410.663165][ T9823] oom_kill_process+0x263/0x800 [ 410.663200][ T9823] out_of_memory+0x898/0x1120 [ 410.663226][ T9823] ? __lock_acquire+0x6b6/0x2cf0 [ 410.663258][ T9823] ? __pfx___mutex_lock+0x10/0x10 [ 410.663292][ T9823] ? __pfx_out_of_memory+0x10/0x10 [ 410.663333][ T9823] mem_cgroup_out_of_memory+0x13f/0x230 [ 410.663365][ T9823] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 410.663400][ T9823] ? do_raw_spin_unlock+0x122/0x240 [ 410.663446][ T9823] ? _raw_spin_unlock+0x28/0x50 [ 410.663464][ T9823] ? memcg1_oom_prepare+0x37f/0x450 [ 410.663496][ T9823] try_charge_memcg+0xde4/0x1280 [ 410.663515][ T9823] ? rcu_is_watching+0x15/0xb0 [ 410.663555][ T9823] ? __pfx_try_charge_memcg+0x10/0x10 [ 410.663577][ T9823] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 410.663619][ T9823] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 410.663650][ T9823] charge_memcg+0x9f/0x180 [ 410.663683][ T9823] __mem_cgroup_charge+0x25/0x80 [ 410.663714][ T9823] shmem_alloc_and_add_folio+0x790/0xf40 [ 410.663749][ T9823] ? filemap_get_entry+0xad/0x2f0 [ 410.663775][ T9823] ? filemap_get_entry+0xad/0x2f0 [ 410.663804][ T9823] ? filemap_get_entry+0x28f/0x2f0 [ 410.663834][ T9823] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 410.663865][ T9823] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 410.663897][ T9823] shmem_get_folio_gfp+0x59d/0x1660 [ 410.663933][ T9823] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 410.663965][ T9823] shmem_write_begin+0x16c/0x330 [ 410.663999][ T9823] generic_perform_write+0x2c5/0x900 [ 410.664038][ T9823] ? __pfx_generic_perform_write+0x10/0x10 [ 410.664057][ T9823] ? down_write+0x162/0x1f0 [ 410.664091][ T9823] ? file_update_time_flags+0x2cb/0x4e0 [ 410.664123][ T9823] shmem_file_write_iter+0xf8/0x120 [ 410.664147][ T9823] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 410.664176][ T9823] __kernel_write_iter+0x428/0x910 [ 410.664208][ T9823] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 410.664238][ T9823] ? __pfx___kernel_write_iter+0x10/0x10 [ 410.664276][ T9823] ? __asan_memset+0x22/0x50 [ 410.664304][ T9823] ? iov_iter_bvec+0xb8/0x180 [ 410.664335][ T9823] dump_user_range+0x8a0/0xc90 [ 410.664376][ T9823] ? __pfx_dump_user_range+0x10/0x10 [ 410.664398][ T9823] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 410.664435][ T9823] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 410.664474][ T9823] ? dump_emit+0xa6/0xe0 [ 410.664495][ T9823] ? elf_core_dump+0x2cd0/0x3960 [ 410.664525][ T9823] elf_core_dump+0x3369/0x3960 [ 410.664576][ T9823] ? __pfx_elf_core_dump+0x10/0x10 [ 410.664611][ T9823] ? kasan_save_track+0x4f/0x80 [ 410.664638][ T9823] ? kasan_save_track+0x3e/0x80 [ 410.664664][ T9823] ? __kasan_kmalloc+0x93/0xb0 [ 410.664682][ T9823] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 410.664710][ T9823] ? coredump_write+0x343/0x18b0 [ 410.664731][ T9823] ? vfs_coredump+0x3321/0x3e60 [ 410.664751][ T9823] ? get_signal+0x1108/0x1340 [ 410.664776][ T9823] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 410.664799][ T9823] ? irqentry_exit+0x177/0x660 [ 410.664818][ T9823] ? exc_page_fault+0xab/0x100 [ 410.664836][ T9823] ? asm_exc_page_fault+0x26/0x30 [ 410.664916][ T9823] ? 0xffffffffff600000 [ 410.664954][ T9823] coredump_write+0x1121/0x18b0 [ 410.665003][ T9823] ? __pfx_coredump_write+0x10/0x10 [ 410.665051][ T9823] ? unshare_files+0xa9/0x140 [ 410.665077][ T9823] vfs_coredump+0x3321/0x3e60 [ 410.665129][ T9823] ? __pfx_vfs_coredump+0x10/0x10 [ 410.665151][ T9823] ? __lock_acquire+0x6b6/0x2cf0 [ 410.665183][ T9823] ? __lock_acquire+0x6b6/0x2cf0 [ 410.665225][ T9823] ? __lock_acquire+0x6b6/0x2cf0 [ 410.665261][ T9823] ? __lock_acquire+0x6b6/0x2cf0 [ 410.665293][ T9823] ? __lock_acquire+0x6b6/0x2cf0 [ 410.665333][ T9823] ? unwind_next_frame+0xa5/0x23d0 [ 410.665364][ T9823] ? unwind_next_frame+0xa5/0x23d0 [ 410.665389][ T9823] ? is_bpf_text_address+0x26/0x2b0 [ 410.665431][ T9823] ? is_bpf_text_address+0x26/0x2b0 [ 410.665464][ T9823] ? is_bpf_text_address+0x292/0x2b0 [ 410.665489][ T9823] ? is_bpf_text_address+0x26/0x2b0 [ 410.665519][ T9823] ? kernel_text_address+0xa5/0xe0 [ 410.665545][ T9823] ? __kernel_text_address+0xd/0x40 [ 410.665568][ T9823] ? unwind_get_return_address+0x4d/0x90 [ 410.665595][ T9823] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 410.665621][ T9823] ? arch_stack_walk+0xfc/0x150 [ 410.665657][ T9823] ? stack_trace_save+0x9c/0xe0 [ 410.665686][ T9823] ? stack_depot_save_flags+0x40/0x850 [ 410.665712][ T9823] ? __lock_acquire+0x6b6/0x2cf0 [ 410.665745][ T9823] ? kasan_save_track+0x4f/0x80 [ 410.665772][ T9823] ? kasan_save_track+0x3e/0x80 [ 410.665798][ T9823] ? kasan_save_free_info+0x46/0x50 [ 410.665820][ T9823] ? __kasan_slab_free+0x5c/0x80 [ 410.665836][ T9823] ? kmem_cache_free+0x197/0x620 [ 410.665862][ T9823] ? get_signal+0xa4b/0x1340 [ 410.665885][ T9823] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 410.665907][ T9823] ? irqentry_exit+0x177/0x660 [ 410.665926][ T9823] ? exc_page_fault+0xab/0x100 [ 410.665944][ T9823] ? asm_exc_page_fault+0x26/0x30 [ 410.666033][ T9823] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.666054][ T9823] ? lockdep_hardirqs_on+0x98/0x140 [ 410.666080][ T9823] get_signal+0x1108/0x1340 [ 410.666132][ T9823] arch_do_signal_or_restart+0x9a/0x7a0 [ 410.666159][ T9823] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 410.666196][ T9823] ? local_irq_enable_exit_to_user+0x5/0x10 [ 410.666231][ T9823] irqentry_exit+0x177/0x660 [ 410.666255][ T9823] ? trace_page_fault_user+0x84/0x1c0 [ 410.666285][ T9823] exc_page_fault+0xab/0x100 [ 410.666311][ T9823] asm_exc_page_fault+0x26/0x30 [ 410.666329][ T9823] RIP: 0033:0x7fa96778f749 [ 410.666355][ T9823] Code: Unable to access opcode bytes at 0x7fa96778f71f. [ 410.666365][ T9823] RSP: 002b:00007fa9686c3f08 EFLAGS: 00010246 [ 410.666384][ T9823] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fa96778f749 [ 410.666398][ T9823] RDX: 00007fa9686c3f20 RSI: 0000000000000058 RDI: 00007fa9686c3f20 [ 410.666411][ T9823] RBP: 00007fa967813f91 R08: 0000000000000000 R09: 0000000000000058 [ 410.666424][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.666436][ T9823] R13: 00007fa9679e6038 R14: 00007fa9679e5fa0 R15: 00007ffc69b42bc8 [ 410.666475][ T9823] [ 410.666484][ T9823] memory: usage 307200kB, limit 307200kB, failcnt 23573 [ 411.025888][T10223] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.1203'. [ 411.070134][ T9823] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 411.445171][T10230] fuse: Unknown parameter ']!`' [ 411.460189][ T9823] kmem: usage 4524kB, limit 9007199254740988kB, failcnt 0 [ 411.467567][ T9823] Memory cgroup stats for /syz4: [ 411.467749][ T9823] cache 309882880 [ 411.477556][ T6617] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 411.488771][ T9823] rss 57344 [ 411.516290][ T9823] rss_huge 0 [ 411.519544][ T9823] shmem 309882880 [ 411.523334][ T9823] mapped_file 0 [ 411.527480][ T9823] dirty 0 [ 411.530524][ T9823] writeback 0 [ 411.533833][ T9823] workingset_refault_anon 11 [ 411.539296][ T9823] workingset_refault_file 0 [ 411.543844][ T9823] swap 127995904 [ 411.548001][ T9823] swapcached 0 [ 411.551566][ T9823] pgpgin 189431 [ 411.555038][ T9823] pgpgout 113762 [ 411.559170][ T9823] pgfault 59339 [ 411.562861][ T9823] pgmajfault 13 [ 411.577861][ T9823] inactive_anon 75608064 [ 411.582168][ T9823] active_anon 233762816 [ 411.586339][ T9823] inactive_file 0 [ 411.592332][ T9823] active_file 0 [ 411.595829][ T9823] unevictable 0 [ 411.600291][ T9823] hierarchical_memory_limit 314572800 [ 411.605907][ T9823] hierarchical_memsw_limit 9223372036854771712 [ 411.613622][ T9823] total_cache 309882880 [ 411.618032][ T9823] total_rss 57344 [ 411.625725][ T9823] total_rss_huge 0 [ 411.629668][ T9823] total_shmem 309882880 [ 411.643195][ T5201] Dev loop6: unable to read RDB block 1 [ 411.648831][ T5201] loop6: unable to read partition table [ 411.662813][ T9823] total_mapped_file 0 [ 411.666922][ T9823] total_dirty 0 [ 411.670408][ T9823] total_writeback 0 [ 411.674695][ T5201] loop6: partition table beyond EOD, truncated [ 411.682092][ T6617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 411.686186][ T9823] total_workingset_refault_anon 11 [ 411.708848][ T6617] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 411.722535][ T6617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.736833][ T6617] usb 3-1: config 0 descriptor?? [ 411.758599][T10227] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 411.760640][ T9823] total_workingset_refault_file 0 [ 411.774843][ T9823] total_swap 127995904 [ 411.779053][ T9823] total_swapcached 0 [ 411.784663][ T9823] total_pgpgin 189431 [ 411.788684][ T9823] total_pgpgout 113762 [ 411.793291][ T9823] total_pgfault 59339 [ 411.797305][ T9823] total_pgmajfault 13 [ 411.804240][ T9823] total_inactive_anon 75608064 [ 411.811909][ T9823] total_active_anon 233762816 [ 411.824177][ T9823] total_inactive_file 0 [ 411.829404][ T9823] total_active_file 0 [ 411.833474][ T9823] total_unevictable 0 [ 411.839103][ T9823] anon_cost 0 [ 411.842416][ T9823] file_cost 0 [ 411.846303][ T9823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1095,pid=9850,uid=0 [ 411.872793][ T9823] Memory cgroup out of memory: Killed process 9850 (syz.4.1095) total-vm:49268kB, anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 411.983407][ T5939] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 412.143826][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 412.158974][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.173752][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.189840][ T5939] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 412.202673][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.216674][ T5939] usb 1-1: config 0 descriptor?? [ 412.234249][ T5939] hub 1-1:0.0: USB hub found [ 412.258364][ T6617] pyra 0003:1E7D:2CF6.0024: hidraw0: USB HID v1.01 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 412.453080][T10227] Bluetooth: MGMT ver 1.23 [ 412.633207][ T5939] hub 1-1:0.0: 1 port detected [ 412.652439][ T5966] usb 3-1: USB disconnect, device number 25 [ 412.726741][ T9859] syz.4.1095 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 412.850370][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.4.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 412.850406][ T9859] Tainted: [L]=SOFTLOCKUP [ 412.850414][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.850426][ T9859] Call Trace: [ 412.850435][ T9859] [ 412.850444][ T9859] dump_stack_lvl+0x189/0x250 [ 412.850476][ T9859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.850497][ T9859] ? __pfx__printk+0x10/0x10 [ 412.850541][ T9859] dump_header+0xd4/0x4c0 [ 412.850568][ T9859] oom_kill_process+0x263/0x800 [ 412.850603][ T9859] out_of_memory+0x898/0x1120 [ 412.850630][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 412.850657][ T9859] ? __pfx___mutex_lock+0x10/0x10 [ 412.850690][ T9859] ? __pfx_out_of_memory+0x10/0x10 [ 412.850732][ T9859] mem_cgroup_out_of_memory+0x13f/0x230 [ 412.850763][ T9859] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 412.850805][ T9859] ? do_raw_spin_unlock+0x122/0x240 [ 412.850833][ T9859] ? _raw_spin_unlock+0x28/0x50 [ 412.850851][ T9859] ? memcg1_oom_prepare+0x37f/0x450 [ 412.850883][ T9859] try_charge_memcg+0xde4/0x1280 [ 412.850901][ T9859] ? rcu_is_watching+0x15/0xb0 [ 412.850942][ T9859] ? __pfx_try_charge_memcg+0x10/0x10 [ 412.850964][ T9859] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 412.850997][ T9859] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 412.851027][ T9859] charge_memcg+0x9f/0x180 [ 412.851060][ T9859] __mem_cgroup_charge+0x25/0x80 [ 412.851090][ T9859] shmem_alloc_and_add_folio+0x790/0xf40 [ 412.851123][ T9859] ? filemap_get_entry+0xad/0x2f0 [ 412.851148][ T9859] ? filemap_get_entry+0xad/0x2f0 [ 412.851176][ T9859] ? filemap_get_entry+0x28f/0x2f0 [ 412.851207][ T9859] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 412.851237][ T9859] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 412.851268][ T9859] shmem_get_folio_gfp+0x59d/0x1660 [ 412.851306][ T9859] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 412.851335][ T9859] shmem_write_begin+0x16c/0x330 [ 412.851366][ T9859] generic_perform_write+0x2c5/0x900 [ 412.851402][ T9859] ? __pfx_generic_perform_write+0x10/0x10 [ 412.851418][ T9859] ? down_write+0x162/0x1f0 [ 412.851450][ T9859] ? file_update_time_flags+0x2cb/0x4e0 [ 412.851479][ T9859] shmem_file_write_iter+0xf8/0x120 [ 412.851500][ T9859] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 412.851526][ T9859] __kernel_write_iter+0x428/0x910 [ 412.851554][ T9859] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 412.851581][ T9859] ? __pfx___kernel_write_iter+0x10/0x10 [ 412.851615][ T9859] ? __asan_memset+0x22/0x50 [ 412.851641][ T9859] ? iov_iter_bvec+0xb8/0x180 [ 412.851669][ T9859] dump_user_range+0x8a0/0xc90 [ 412.851708][ T9859] ? __pfx_dump_user_range+0x10/0x10 [ 412.851726][ T9859] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 412.851760][ T9859] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 412.851802][ T9859] ? dump_emit+0xa6/0xe0 [ 412.851820][ T9859] ? elf_core_dump+0x2cd0/0x3960 [ 412.851845][ T9859] elf_core_dump+0x3369/0x3960 [ 412.851891][ T9859] ? __pfx_elf_core_dump+0x10/0x10 [ 412.851916][ T9859] ? kasan_save_track+0x4f/0x80 [ 412.851943][ T9859] ? kasan_save_track+0x3e/0x80 [ 412.851967][ T9859] ? __kasan_kmalloc+0x93/0xb0 [ 412.851983][ T9859] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 412.852008][ T9859] ? coredump_write+0x343/0x18b0 [ 412.852028][ T9859] ? vfs_coredump+0x3321/0x3e60 [ 412.852046][ T9859] ? get_signal+0x1108/0x1340 [ 412.852068][ T9859] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 412.852090][ T9859] ? irqentry_exit+0x177/0x660 [ 412.852109][ T9859] ? exc_page_fault+0xab/0x100 [ 412.852127][ T9859] ? asm_exc_page_fault+0x26/0x30 [ 412.852202][ T9859] ? 0xffffffffff600000 [ 412.852238][ T9859] coredump_write+0x1121/0x18b0 [ 412.852285][ T9859] ? __pfx_coredump_write+0x10/0x10 [ 412.852327][ T9859] ? unshare_files+0xa9/0x140 [ 412.852351][ T9859] vfs_coredump+0x3321/0x3e60 [ 412.852398][ T9859] ? __pfx_vfs_coredump+0x10/0x10 [ 412.852415][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 412.852439][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 412.852472][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 412.852505][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 412.852531][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 412.852569][ T9859] ? unwind_next_frame+0xa5/0x23d0 [ 412.852599][ T9859] ? unwind_next_frame+0xa5/0x23d0 [ 412.852623][ T9859] ? is_bpf_text_address+0x26/0x2b0 [ 412.852662][ T9859] ? is_bpf_text_address+0x26/0x2b0 [ 412.852694][ T9859] ? is_bpf_text_address+0x292/0x2b0 [ 412.852719][ T9859] ? is_bpf_text_address+0x26/0x2b0 [ 412.852749][ T9859] ? kernel_text_address+0xa5/0xe0 [ 412.852774][ T9859] ? __kernel_text_address+0xd/0x40 [ 412.852804][ T9859] ? unwind_get_return_address+0x4d/0x90 [ 412.852822][ T9859] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.852848][ T9859] ? arch_stack_walk+0xfc/0x150 [ 412.852882][ T9859] ? stack_trace_save+0x9c/0xe0 [ 412.852910][ T9859] ? stack_depot_save_flags+0x40/0x850 [ 412.852933][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 412.852963][ T9859] ? kasan_save_track+0x4f/0x80 [ 412.852987][ T9859] ? kasan_save_track+0x3e/0x80 [ 412.853010][ T9859] ? kasan_save_free_info+0x46/0x50 [ 412.853032][ T9859] ? __kasan_slab_free+0x5c/0x80 [ 412.853048][ T9859] ? kmem_cache_free+0x197/0x620 [ 412.853058][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.853073][ T9859] ? get_signal+0xa4b/0x1340 [ 412.853093][ T9859] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 412.853114][ T9859] ? irqentry_exit+0x177/0x660 [ 412.853131][ T9859] ? exc_page_fault+0xab/0x100 [ 412.853144][ T9859] ? asm_exc_page_fault+0x26/0x30 [ 412.853229][ T9859] get_signal+0x1108/0x1340 [ 412.853275][ T9859] arch_do_signal_or_restart+0x9a/0x7a0 [ 412.853299][ T9859] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.853335][ T9859] ? local_irq_enable_exit_to_user+0x5/0x10 [ 412.853365][ T9859] irqentry_exit+0x177/0x660 [ 412.853384][ T9859] ? trace_page_fault_user+0x84/0x1c0 [ 412.853412][ T9859] exc_page_fault+0xab/0x100 [ 412.853434][ T9859] asm_exc_page_fault+0x26/0x30 [ 412.853450][ T9859] RIP: 0033:0x7fa96778f749 [ 412.853472][ T9859] Code: Unable to access opcode bytes at 0x7fa96778f71f. [ 412.853481][ T9859] RSP: 002b:00007fa9686c3f08 EFLAGS: 00010246 [ 412.853497][ T9859] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fa96778f749 [ 412.853509][ T9859] RDX: 00007fa9686c3f20 RSI: 0000000000000058 RDI: 00007fa9686c3f20 [ 412.853521][ T9859] RBP: 00007fa967813f91 R08: 0000000000000000 R09: 0000000000000058 [ 412.853532][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.853542][ T9859] R13: 00007fa9679e6038 R14: 00007fa9679e5fa0 R15: 00007ffc69b42bc8 [ 412.853575][ T9859] [ 412.877531][ T9859] memory: usage 307200kB, limit 307200kB, failcnt 24945 [ 412.921424][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.508194][ T9859] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 413.516376][ T9859] kmem: usage 4444kB, limit 9007199254740988kB, failcnt 0 [ 413.523677][ T9859] Memory cgroup stats for /syz4: [ 413.523811][ T9859] cache 309841920 [ 413.532421][ T9859] rss 77824 [ 413.535702][ T9859] rss_huge 0 [ 413.538932][ T9859] shmem 309841920 [ 413.542588][ T9859] mapped_file 0 [ 413.546269][ T9859] dirty 0 [ 413.549243][ T9859] writeback 0 [ 413.552537][ T9859] workingset_refault_anon 11 [ 413.557623][ T9859] workingset_refault_file 0 [ 413.562361][ T9859] swap 127995904 [ 413.570115][ T9859] swapcached 0 [ 413.574619][ T9859] pgpgin 189673 [ 413.642268][ T9859] pgpgout 114009 [ 413.646163][ T9859] pgfault 59361 [ 413.649687][ T9859] pgmajfault 13 [ 413.653295][ T9859] inactive_anon 224841728 [ 413.657778][ T9859] active_anon 84553728 [ 413.662200][ T9859] inactive_file 0 [ 413.665882][ T9859] active_file 0 [ 413.671441][ T9859] unevictable 0 [ 413.675047][ T9859] hierarchical_memory_limit 314572800 [ 413.680458][ T9859] hierarchical_memsw_limit 9223372036854771712 [ 413.686800][ T9859] total_cache 309841920 [ 413.691815][ T9859] total_rss 77824 [ 413.698246][ T9859] total_rss_huge 0 [ 413.702094][ T9859] total_shmem 309841920 [ 413.707391][ T9859] total_mapped_file 0 [ 413.712076][T10258] netlink: 'syz.5.1213': attribute type 12 has an invalid length. [ 413.720120][T10258] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1213'. [ 413.808751][ T5939] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 413.816128][ T5939] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 413.837403][ T5939] usbhid 1-1:0.0: can't add hid device: -71 [ 413.853336][ T5939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 413.896834][ T5939] usb 1-1: USB disconnect, device number 115 [ 413.948767][ T9859] total_dirty 0 [ 413.979531][ T9859] total_writeback 0 [ 414.017711][ T9859] total_workingset_refault_anon 11 [ 414.083255][ T9859] total_workingset_refault_file 0 [ 414.120353][ T9859] total_swap 127995904 [ 414.124483][ T9859] total_swapcached 0 [ 414.171560][ T9859] total_pgpgin 189673 [ 414.194304][ T9859] total_pgpgout 114009 [ 414.210635][ T9859] total_pgfault 59361 [ 414.214736][ T9859] total_pgmajfault 13 [ 414.260465][ T9859] total_inactive_anon 224841728 [ 414.265469][ T9859] total_active_anon 84553728 [ 414.271924][ T9859] total_inactive_file 0 [ 414.276300][ T9859] total_active_file 0 [ 414.281324][ T9859] total_unevictable 0 [ 414.286343][ T9859] anon_cost 0 [ 414.290529][ T9859] file_cost 0 [ 414.296033][ T9859] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1095,pid=9830,uid=0 [ 414.313077][T10268] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 414.321830][T10268] PKCS7: Only support pkcs7_signedData type [ 414.329815][ T9859] Memory cgroup out of memory: Killed process 9830 (syz.4.1095) total-vm:49268kB, anon-rss:0kB, file-rss:28288kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 414.995205][ T9833] syz.4.1095 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 415.062881][ T9833] CPU: 0 UID: 0 PID: 9833 Comm: syz.4.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.062915][ T9833] Tainted: [L]=SOFTLOCKUP [ 415.062923][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.062934][ T9833] Call Trace: [ 415.062944][ T9833] [ 415.062953][ T9833] dump_stack_lvl+0x189/0x250 [ 415.062985][ T9833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.063007][ T9833] ? __pfx__printk+0x10/0x10 [ 415.063053][ T9833] dump_header+0xd4/0x4c0 [ 415.063078][ T9833] oom_kill_process+0x263/0x800 [ 415.063110][ T9833] out_of_memory+0x898/0x1120 [ 415.063135][ T9833] ? __lock_acquire+0x6b6/0x2cf0 [ 415.063164][ T9833] ? __pfx___mutex_lock+0x10/0x10 [ 415.063198][ T9833] ? __pfx_out_of_memory+0x10/0x10 [ 415.063239][ T9833] mem_cgroup_out_of_memory+0x13f/0x230 [ 415.063270][ T9833] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 415.063306][ T9833] ? do_raw_spin_unlock+0x122/0x240 [ 415.063335][ T9833] ? _raw_spin_unlock+0x28/0x50 [ 415.063353][ T9833] ? memcg1_oom_prepare+0x37f/0x450 [ 415.063410][ T9833] try_charge_memcg+0xde4/0x1280 [ 415.063429][ T9833] ? rcu_is_watching+0x15/0xb0 [ 415.063471][ T9833] ? __pfx_try_charge_memcg+0x10/0x10 [ 415.063492][ T9833] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 415.063525][ T9833] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 415.063556][ T9833] charge_memcg+0x9f/0x180 [ 415.063589][ T9833] __mem_cgroup_charge+0x25/0x80 [ 415.063620][ T9833] shmem_alloc_and_add_folio+0x790/0xf40 [ 415.063655][ T9833] ? filemap_get_entry+0xad/0x2f0 [ 415.063681][ T9833] ? filemap_get_entry+0xad/0x2f0 [ 415.063710][ T9833] ? filemap_get_entry+0x28f/0x2f0 [ 415.063741][ T9833] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 415.063782][ T9833] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 415.063818][ T9833] shmem_get_folio_gfp+0x59d/0x1660 [ 415.063859][ T9833] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 415.063894][ T9833] shmem_write_begin+0x16c/0x330 [ 415.063930][ T9833] generic_perform_write+0x2c5/0x900 [ 415.063968][ T9833] ? __pfx_generic_perform_write+0x10/0x10 [ 415.063987][ T9833] ? down_write+0x162/0x1f0 [ 415.064022][ T9833] ? file_update_time_flags+0x2cb/0x4e0 [ 415.064055][ T9833] shmem_file_write_iter+0xf8/0x120 [ 415.064080][ T9833] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 415.064109][ T9833] __kernel_write_iter+0x428/0x910 [ 415.064140][ T9833] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 415.064170][ T9833] ? __pfx___kernel_write_iter+0x10/0x10 [ 415.064208][ T9833] ? __asan_memset+0x22/0x50 [ 415.064236][ T9833] ? iov_iter_bvec+0xb8/0x180 [ 415.064267][ T9833] dump_user_range+0x8a0/0xc90 [ 415.064310][ T9833] ? __pfx_dump_user_range+0x10/0x10 [ 415.064331][ T9833] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 415.064369][ T9833] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 415.064408][ T9833] ? dump_emit+0xa6/0xe0 [ 415.064428][ T9833] ? elf_core_dump+0x2cd0/0x3960 [ 415.064458][ T9833] elf_core_dump+0x3369/0x3960 [ 415.064509][ T9833] ? __pfx_elf_core_dump+0x10/0x10 [ 415.064535][ T9833] ? kasan_save_track+0x4f/0x80 [ 415.064561][ T9833] ? kasan_save_track+0x3e/0x80 [ 415.064587][ T9833] ? __kasan_kmalloc+0x93/0xb0 [ 415.064604][ T9833] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 415.064633][ T9833] ? coredump_write+0x343/0x18b0 [ 415.064655][ T9833] ? vfs_coredump+0x3321/0x3e60 [ 415.064676][ T9833] ? get_signal+0x1108/0x1340 [ 415.064700][ T9833] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 415.064721][ T9833] ? irqentry_exit+0x177/0x660 [ 415.064742][ T9833] ? exc_page_fault+0xab/0x100 [ 415.064760][ T9833] ? asm_exc_page_fault+0x26/0x30 [ 415.064850][ T9833] ? 0xffffffffff600000 [ 415.064889][ T9833] coredump_write+0x1121/0x18b0 [ 415.064939][ T9833] ? __pfx_coredump_write+0x10/0x10 [ 415.064988][ T9833] ? unshare_files+0xa9/0x140 [ 415.065014][ T9833] vfs_coredump+0x3321/0x3e60 [ 415.065067][ T9833] ? __pfx_vfs_coredump+0x10/0x10 [ 415.065090][ T9833] ? __lock_acquire+0x6b6/0x2cf0 [ 415.065122][ T9833] ? __lock_acquire+0x6b6/0x2cf0 [ 415.065164][ T9833] ? __lock_acquire+0x6b6/0x2cf0 [ 415.065201][ T9833] ? __lock_acquire+0x6b6/0x2cf0 [ 415.065233][ T9833] ? __lock_acquire+0x6b6/0x2cf0 [ 415.065274][ T9833] ? unwind_next_frame+0xa5/0x23d0 [ 415.065305][ T9833] ? unwind_next_frame+0xa5/0x23d0 [ 415.065329][ T9833] ? is_bpf_text_address+0x26/0x2b0 [ 415.065370][ T9833] ? is_bpf_text_address+0x26/0x2b0 [ 415.065404][ T9833] ? is_bpf_text_address+0x292/0x2b0 [ 415.065428][ T9833] ? is_bpf_text_address+0x26/0x2b0 [ 415.065458][ T9833] ? kernel_text_address+0xa5/0xe0 [ 415.065486][ T9833] ? __kernel_text_address+0xd/0x40 [ 415.065510][ T9833] ? unwind_get_return_address+0x4d/0x90 [ 415.065528][ T9833] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 415.065555][ T9833] ? arch_stack_walk+0xfc/0x150 [ 415.065591][ T9833] ? stack_trace_save+0x9c/0xe0 [ 415.065620][ T9833] ? stack_depot_save_flags+0x40/0x850 [ 415.065646][ T9833] ? __lock_acquire+0x6b6/0x2cf0 [ 415.065680][ T9833] ? kasan_save_track+0x4f/0x80 [ 415.065706][ T9833] ? kasan_save_track+0x3e/0x80 [ 415.065732][ T9833] ? kasan_save_free_info+0x46/0x50 [ 415.065755][ T9833] ? __kasan_slab_free+0x5c/0x80 [ 415.065781][ T9833] ? kmem_cache_free+0x197/0x620 [ 415.065807][ T9833] ? get_signal+0xa4b/0x1340 [ 415.065831][ T9833] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 415.065852][ T9833] ? irqentry_exit+0x177/0x660 [ 415.065872][ T9833] ? exc_page_fault+0xab/0x100 [ 415.065890][ T9833] ? asm_exc_page_fault+0x26/0x30 [ 415.065982][ T9833] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.066002][ T9833] ? lockdep_hardirqs_on+0x98/0x140 [ 415.066029][ T9833] get_signal+0x1108/0x1340 [ 415.066084][ T9833] arch_do_signal_or_restart+0x9a/0x7a0 [ 415.066114][ T9833] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 415.066156][ T9833] ? local_irq_enable_exit_to_user+0x5/0x10 [ 415.066192][ T9833] irqentry_exit+0x177/0x660 [ 415.066217][ T9833] ? trace_page_fault_user+0x84/0x1c0 [ 415.066249][ T9833] exc_page_fault+0xab/0x100 [ 415.066281][ T9833] asm_exc_page_fault+0x26/0x30 [ 415.066300][ T9833] RIP: 0033:0x7fa96778f749 [ 415.066325][ T9833] Code: Unable to access opcode bytes at 0x7fa96778f71f. [ 415.066335][ T9833] RSP: 002b:00007fa9686c3f08 EFLAGS: 00010246 [ 415.066355][ T9833] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fa96778f749 [ 415.066369][ T9833] RDX: 00007fa9686c3f20 RSI: 0000000000000058 RDI: 00007fa9686c3f20 [ 415.066382][ T9833] RBP: 00007fa967813f91 R08: 0000000000000000 R09: 0000000000000058 [ 415.066395][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.066407][ T9833] R13: 00007fa9679e6038 R14: 00007fa9679e5fa0 R15: 00007ffc69b42bc8 [ 415.066445][ T9833] [ 415.066467][ T9833] memory: usage 307200kB, limit 307200kB, failcnt 27230 [ 415.894196][ T9833] memory+swap: usage 432116kB, limit 9007199254740988kB, failcnt 0 [ 415.960951][ T9833] kmem: usage 4440kB, limit 9007199254740988kB, failcnt 0 [ 416.161468][T10290] openvswitch: netlink: IP tunnel dst address not specified [ 416.175462][ T9833] Memory cgroup stats for /syz4: [ 416.175611][ T9833] cache 309678080 [ 416.238503][ T9833] rss 212992 [ 416.241803][ T9833] rss_huge 0 [ 416.245020][ T9833] shmem 309678080 [ 416.342951][ T9833] mapped_file 0 [ 416.396345][ T9833] dirty 0 [ 416.399432][ T9833] writeback 0 [ 416.491102][ T9833] workingset_refault_anon 11 [ 416.517458][ T9833] workingset_refault_file 0 [ 416.571818][ T9833] swap 127995904 [ 416.575471][ T9833] swapcached 0 [ 416.662299][ T9833] pgpgin 195405 [ 416.733573][ T9833] pgpgout 119717 [ 416.737193][ T9833] pgfault 59823 [ 416.759553][ T9833] pgmajfault 13 [ 416.763073][ T9833] inactive_anon 67575808 [ 416.767333][ T9833] active_anon 241520640 [ 416.817903][ T9833] inactive_file 0 [ 416.821625][ T9833] active_file 0 [ 416.834374][ T9833] unevictable 0 [ 416.837900][ T9833] hierarchical_memory_limit 314572800 [ 416.862380][ T9833] hierarchical_memsw_limit 9223372036854771712 [ 417.007958][ T9833] total_cache 309678080 [ 417.155926][ T9833] total_rss 212992 [ 417.192252][ T9833] total_rss_huge 0 [ 417.271329][ T9833] total_shmem 309678080 [ 417.338375][ T9833] total_mapped_file 0 [ 417.507662][ T9833] total_dirty 0 [ 417.565315][ T9833] total_writeback 0 [ 417.622710][ T9833] total_workingset_refault_anon 11 [ 417.706352][ T9833] total_workingset_refault_file 0 [ 417.721322][ T5921] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 417.795252][ T9833] total_swap 127995904 [ 417.858052][ T9833] total_swapcached 0 [ 417.887208][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.901776][ T5921] usb 1-1: config 0 has no interfaces? [ 417.916419][ T5921] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 417.930889][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.943203][ T9833] total_pgpgin 195405 [ 417.949741][ T5921] usb 1-1: Product: syz [ 417.958830][ T5921] usb 1-1: Manufacturer: syz [ 417.967007][ T5921] usb 1-1: SerialNumber: syz [ 418.004684][ T5921] usb 1-1: config 0 descriptor?? [ 418.040269][ T9833] total_pgpgout 119717 [ 418.066970][ T9833] total_pgfault 59823 [ 418.110777][ T9833] total_pgmajfault 13 [ 418.178033][ T9833] total_inactive_anon 67575808 [ 418.252923][ T6617] usb 1-1: USB disconnect, device number 116 [ 418.317444][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 418.330332][ T9833] total_active_anon 241520640 [ 418.335124][ T9833] total_inactive_file 0 [ 418.339348][ T9833] total_active_file 0 [ 418.578242][ T9833] total_unevictable 0 [ 418.595482][ T9833] anon_cost 0 [ 418.612885][ T9833] file_cost 0 [ 418.627228][ T9833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1095,pid=9841,uid=0 [ 418.926650][ T9833] Memory cgroup out of memory: Killed process 9841 (syz.4.1095) total-vm:49268kB, anon-rss:0kB, file-rss:29824kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 420.078102][T10303] support for cryptoloop has been removed. Use dm-crypt instead. [ 420.233339][ T5883] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 420.307348][ T9831] syz.4.1095 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 420.317248][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.4.1095 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.317273][ T9831] Tainted: [L]=SOFTLOCKUP [ 420.317279][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 420.317289][ T9831] Call Trace: [ 420.317297][ T9831] [ 420.317304][ T9831] dump_stack_lvl+0x189/0x250 [ 420.317330][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.317347][ T9831] ? __pfx__printk+0x10/0x10 [ 420.317384][ T9831] dump_header+0xd4/0x4c0 [ 420.317406][ T9831] oom_kill_process+0x263/0x800 [ 420.317433][ T9831] out_of_memory+0x898/0x1120 [ 420.317454][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 420.317479][ T9831] ? __pfx___mutex_lock+0x10/0x10 [ 420.317523][ T9831] ? __pfx_out_of_memory+0x10/0x10 [ 420.317563][ T9831] mem_cgroup_out_of_memory+0x13f/0x230 [ 420.317592][ T9831] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 420.317623][ T9831] ? do_raw_spin_unlock+0x122/0x240 [ 420.317648][ T9831] ? _raw_spin_unlock+0x28/0x50 [ 420.317665][ T9831] ? memcg1_oom_prepare+0x37f/0x450 [ 420.317695][ T9831] try_charge_memcg+0xde4/0x1280 [ 420.317713][ T9831] ? rcu_is_watching+0x15/0xb0 [ 420.317751][ T9831] ? __pfx_try_charge_memcg+0x10/0x10 [ 420.317772][ T9831] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 420.317804][ T9831] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 420.317834][ T9831] charge_memcg+0x9f/0x180 [ 420.317861][ T9831] __mem_cgroup_charge+0x25/0x80 [ 420.317883][ T9831] shmem_alloc_and_add_folio+0x790/0xf40 [ 420.317909][ T9831] ? filemap_get_entry+0xad/0x2f0 [ 420.317928][ T9831] ? filemap_get_entry+0xad/0x2f0 [ 420.317950][ T9831] ? filemap_get_entry+0x28f/0x2f0 [ 420.317972][ T9831] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 420.317996][ T9831] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 420.318021][ T9831] shmem_get_folio_gfp+0x59d/0x1660 [ 420.318051][ T9831] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 420.318077][ T9831] shmem_write_begin+0x16c/0x330 [ 420.318103][ T9831] generic_perform_write+0x2c5/0x900 [ 420.318132][ T9831] ? __pfx_generic_perform_write+0x10/0x10 [ 420.318145][ T9831] ? down_write+0x162/0x1f0 [ 420.318171][ T9831] ? file_update_time_flags+0x2cb/0x4e0 [ 420.318195][ T9831] shmem_file_write_iter+0xf8/0x120 [ 420.318213][ T9831] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 420.318234][ T9831] __kernel_write_iter+0x428/0x910 [ 420.318257][ T9831] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 420.318279][ T9831] ? __pfx___kernel_write_iter+0x10/0x10 [ 420.318307][ T9831] ? __asan_memset+0x22/0x50 [ 420.318327][ T9831] ? iov_iter_bvec+0xb8/0x180 [ 420.318350][ T9831] dump_user_range+0x8a0/0xc90 [ 420.318381][ T9831] ? __pfx_dump_user_range+0x10/0x10 [ 420.318397][ T9831] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 420.318425][ T9831] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 420.318453][ T9831] ? dump_emit+0xa6/0xe0 [ 420.318467][ T9831] ? elf_core_dump+0x2cd0/0x3960 [ 420.318490][ T9831] elf_core_dump+0x3369/0x3960 [ 420.318534][ T9831] ? __pfx_elf_core_dump+0x10/0x10 [ 420.318554][ T9831] ? kasan_save_track+0x4f/0x80 [ 420.318574][ T9831] ? kasan_save_track+0x3e/0x80 [ 420.318593][ T9831] ? __kasan_kmalloc+0x93/0xb0 [ 420.318606][ T9831] ? __kvmalloc_node_noprof+0x5d5/0x920 [ 420.318626][ T9831] ? coredump_write+0x343/0x18b0 [ 420.318642][ T9831] ? vfs_coredump+0x3321/0x3e60 [ 420.318657][ T9831] ? get_signal+0x1108/0x1340 [ 420.318674][ T9831] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 420.318691][ T9831] ? irqentry_exit+0x177/0x660 [ 420.318705][ T9831] ? exc_page_fault+0xab/0x100 [ 420.318719][ T9831] ? asm_exc_page_fault+0x26/0x30 [ 420.318779][ T9831] ? 0xffffffffff600000 [ 420.318808][ T9831] coredump_write+0x1121/0x18b0 [ 420.318845][ T9831] ? __pfx_coredump_write+0x10/0x10 [ 420.318880][ T9831] ? unshare_files+0xa9/0x140 [ 420.318898][ T9831] vfs_coredump+0x3321/0x3e60 [ 420.318937][ T9831] ? __pfx_vfs_coredump+0x10/0x10 [ 420.318954][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 420.318977][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 420.319008][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 420.319034][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 420.319056][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 420.319086][ T9831] ? unwind_next_frame+0xa5/0x23d0 [ 420.319107][ T9831] ? unwind_next_frame+0xa5/0x23d0 [ 420.319125][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 420.319156][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 420.319179][ T9831] ? is_bpf_text_address+0x292/0x2b0 [ 420.319198][ T9831] ? is_bpf_text_address+0x26/0x2b0 [ 420.319220][ T9831] ? kernel_text_address+0xa5/0xe0 [ 420.319239][ T9831] ? __kernel_text_address+0xd/0x40 [ 420.319256][ T9831] ? unwind_get_return_address+0x4d/0x90 [ 420.319270][ T9831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.319290][ T9831] ? arch_stack_walk+0xfc/0x150 [ 420.319316][ T9831] ? stack_trace_save+0x9c/0xe0 [ 420.319338][ T9831] ? stack_depot_save_flags+0x40/0x850 [ 420.319357][ T9831] ? __lock_acquire+0x6b6/0x2cf0 [ 420.319382][ T9831] ? kasan_save_track+0x4f/0x80 [ 420.319400][ T9831] ? kasan_save_track+0x3e/0x80 [ 420.319419][ T9831] ? kasan_save_free_info+0x46/0x50 [ 420.319436][ T9831] ? __kasan_slab_free+0x5c/0x80 [ 420.319449][ T9831] ? kmem_cache_free+0x197/0x620 [ 420.319468][ T9831] ? get_signal+0xa4b/0x1340 [ 420.319485][ T9831] ? arch_do_signal_or_restart+0x9a/0x7a0 [ 420.319501][ T9831] ? irqentry_exit+0x177/0x660 [ 420.319521][ T9831] ? exc_page_fault+0xab/0x100 [ 420.319534][ T9831] ? asm_exc_page_fault+0x26/0x30 [ 420.319602][ T9831] ? _raw_spin_unlock_irq+0x23/0x50 [ 420.319617][ T9831] ? lockdep_hardirqs_on+0x98/0x140 [ 420.319636][ T9831] get_signal+0x1108/0x1340 [ 420.319676][ T9831] arch_do_signal_or_restart+0x9a/0x7a0 [ 420.319697][ T9831] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 420.319727][ T9831] ? local_irq_enable_exit_to_user+0x5/0x10 [ 420.319754][ T9831] irqentry_exit+0x177/0x660 [ 420.319772][ T9831] ? trace_page_fault_user+0x84/0x1c0 [ 420.319795][ T9831] exc_page_fault+0xab/0x100 [ 420.319813][ T9831] asm_exc_page_fault+0x26/0x30 [ 420.319827][ T9831] RIP: 0033:0x7fa96778f749 [ 420.319848][ T9831] Code: Unable to access opcode bytes at 0x7fa96778f71f. [ 420.319856][ T9831] RSP: 002b:00007fa9686c3f08 EFLAGS: 00010246 [ 420.319871][ T9831] RAX: 0000000000000000 RBX: 0000000000000058 RCX: 00007fa96778f749 [ 420.319881][ T9831] RDX: 00007fa9686c3f20 RSI: 0000000000000058 RDI: 00007fa9686c3f20 [ 420.319891][ T9831] RBP: 00007fa967813f91 R08: 0000000000000000 R09: 0000000000000058 [ 420.319900][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.319909][ T9831] R13: 00007fa9679e6038 R14: 00007fa9679e5fa0 R15: 00007ffc69b42bc8 [ 420.319937][ T9831] [ 420.990838][ T9831] memory: usage 307072kB, limit 307200kB, failcnt 30424 [ 420.998231][ T9831] memory+swap: usage 431600kB, limit 9007199254740988kB, failcnt 0 [ 421.007199][ T9831] kmem: usage 4220kB, limit 9007199254740988kB, failcnt 0 [ 421.014737][ T9831] Memory cgroup stats for /syz4: [ 421.014875][ T9831] cache 310190080 [ 421.025229][ T9831] rss 57344 [ 421.028507][ T9831] rss_huge 0 [ 421.031728][ T9831] shmem 310190080 [ 421.035781][ T9831] mapped_file 0 [ 421.039387][ T9831] dirty 0 [ 421.042339][ T9831] writeback 0 [ 421.046211][ T9831] workingset_refault_anon 11 [ 421.051297][ T9831] workingset_refault_file 1198 [ 421.056400][ T9831] swap 127782912 [ 421.060179][ T9831] swapcached 0 [ 421.063916][ T9831] pgpgin 206159 [ 421.064971][ T5883] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 421.072959][ T9831] pgpgout 130415 [ 421.080697][ T9831] pgfault 60583 [ 421.084377][ T9831] pgmajfault 28 [ 421.088188][ T9831] inactive_anon 220758016 [ 421.092713][ T9831] active_anon 89096192 [ 421.096805][ T9831] inactive_file 0 [ 421.101160][ T9831] active_file 0 [ 421.104731][ T9831] unevictable 0 [ 421.109536][ T9831] hierarchical_memory_limit 314572800 [ 421.114940][ T9831] hierarchical_memsw_limit 9223372036854771712 [ 421.121532][ T9831] total_cache 310190080 [ 421.125793][ T9831] total_rss 57344 [ 421.129294][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.130423][ T9831] total_rss_huge 0 [ 421.157478][ T5883] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 421.168030][ T9831] total_shmem 310190080 [ 421.172238][ T9831] total_mapped_file 0 [ 421.176467][ T9831] total_dirty 0 [ 421.180535][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.180573][ T9831] total_writeback 0 [ 421.192794][ T9831] total_workingset_refault_anon 11 [ 421.197637][ T5883] usb 1-1: Product: syz [ 421.198461][ T9831] total_workingset_refault_file 1198 [ 421.205694][ T5883] usb 1-1: Manufacturer: syz [ 421.207866][ T9831] total_swap 127782912 [ 421.214597][ T5883] usb 1-1: SerialNumber: syz [ 421.216462][ T9831] total_swapcached 0 [ 421.224682][ T9831] total_pgpgin 206159 [ 421.228743][ T9831] total_pgpgout 130415 [ 421.232839][ T9831] total_pgfault 60583 [ 421.235314][ T5883] usb 1-1: config 0 descriptor?? [ 421.238589][ T9831] total_pgmajfault 28 [ 421.246089][ T9831] total_inactive_anon 220758016 [ 421.251126][ T9831] total_active_anon 89096192 [ 421.255741][ T9831] total_inactive_file 0 [ 421.268747][ T5883] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 421.273977][ T9831] total_active_file 0 [ 421.280198][ T9831] total_unevictable 0 [ 421.284606][ T9831] anon_cost 0 [ 421.287921][ T9831] file_cost 0 [ 421.291321][ T9831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1095,pid=9832,uid=0 [ 421.306402][ T9831] Memory cgroup out of memory: Killed process 9832 (syz.4.1095) total-vm:49268kB, anon-rss:0kB, file-rss:33152kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 421.486591][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.497081][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.535755][ T5966] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 421.674598][ T5966] usb 3-1: device descriptor read/64, error -71 [ 421.931046][ T5966] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 421.949442][ T5883] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 421.964295][ T5883] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 421.985501][ T5883] usb 1-1: USB disconnect, device number 117 [ 422.091316][ T5966] usb 3-1: device descriptor read/64, error -71 [ 422.210421][ T5966] usb usb3-port1: attempt power cycle [ 422.572158][ T5830] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 422.582845][ T5966] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 422.615695][ T5966] usb 3-1: device descriptor read/8, error -71 [ 422.711930][ T5830] usb 5-1: device descriptor read/64, error -71 [ 422.900057][ T5966] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 422.936311][ T5966] usb 3-1: device descriptor read/8, error -71 [ 422.967690][ T5830] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 423.064199][ T5966] usb usb3-port1: unable to enumerate USB device [ 423.149327][ T5830] usb 5-1: device descriptor read/64, error -71 [ 423.192394][T10364] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 423.266970][ T5830] usb usb5-port1: attempt power cycle [ 423.534095][ T5883] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 423.640699][ T5830] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 423.664291][ T5830] usb 5-1: device descriptor read/8, error -71 [ 423.709705][ T5883] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 1.64 [ 423.719154][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 423.727321][ T5883] usb 1-1: Product: syz [ 423.731526][ T5883] usb 1-1: SerialNumber: syz [ 423.751131][ T5883] usb 1-1: config 0 descriptor?? [ 423.768926][ T5883] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 423.782343][ T5883] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 423.799123][ T5883] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 423.918467][ T5830] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 423.955009][ T5830] usb 5-1: device descriptor read/8, error -71 [ 424.079101][ T5830] usb usb5-port1: unable to enumerate USB device [ 424.096628][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.105887][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.242942][T10386] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1248'. [ 424.881249][ T5939] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 425.029879][ T5939] usb 3-1: device descriptor read/64, error -71 [ 425.297126][ T5939] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 425.435693][ T5939] usb 3-1: device descriptor read/64, error -71 [ 425.548454][ T5883] usb 1-1: USB disconnect, device number 118 [ 425.564696][ T5939] usb usb3-port1: attempt power cycle [ 425.937954][ T5939] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 425.960135][ T5939] usb 3-1: device descriptor read/8, error -71 [ 426.081141][T10414] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1252'. [ 426.215892][ T5939] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 426.237716][ T5939] usb 3-1: device descriptor read/8, error -71 [ 426.356127][ T5939] usb usb3-port1: unable to enumerate USB device [ 426.782333][ T5939] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 426.931612][ T5939] usb 1-1: device descriptor read/64, error -71 [ 427.191495][ T5939] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 427.337806][ T5939] usb 1-1: device descriptor read/64, error -71 [ 427.456015][ T5939] usb usb1-port1: attempt power cycle [ 427.850601][ T5939] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 427.872514][ T5939] usb 1-1: device descriptor read/8, error -71 [ 428.033817][T10437] netlink: 'syz.5.1261': attribute type 4 has an invalid length. [ 428.052866][T10437] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1261'. [ 428.130691][ T5939] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 428.163401][ T5939] usb 1-1: device descriptor read/8, error -71 [ 428.251895][T10442] dummy0: entered allmulticast mode [ 428.278619][ T5939] usb usb1-port1: unable to enumerate USB device [ 428.285222][ T6617] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 428.293819][T10442] dummy0: left allmulticast mode [ 428.448824][ T6617] usb 3-1: Using ep0 maxpacket: 8 [ 428.456125][ T6617] usb 3-1: config 162 has an invalid interface number: 220 but max is 1 [ 428.468161][ T6617] usb 3-1: config 162 contains an unexpected descriptor of type 0x2, skipping [ 428.484532][ T6617] usb 3-1: config 162 has an invalid interface number: 3 but max is 1 [ 428.495322][ T6617] usb 3-1: config 162 has no interface number 0 [ 428.501611][ T6617] usb 3-1: config 162 has no interface number 1 [ 428.541775][ T6617] usb 3-1: config 162 interface 220 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 428.556911][ T6617] usb 3-1: config 162 interface 3 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 428.567905][ T6617] usb 3-1: config 162 interface 3 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 428.579835][ T6617] usb 3-1: config 162 interface 3 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 428.591937][ T6617] usb 3-1: config 162 interface 3 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 428.603556][ T6617] usb 3-1: config 162 interface 3 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 428.614155][ T6617] usb 3-1: config 162 interface 3 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 428.627529][ T6617] usb 3-1: config 162 interface 220 has no altsetting 0 [ 428.634590][ T6617] usb 3-1: config 162 interface 3 has no altsetting 0 [ 428.644153][ T6617] usb 3-1: New USB device found, idVendor=04fc, idProduct=80c2, bcdDevice= 1.00 [ 428.653700][ T6617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.662223][ T6617] usb 3-1: Product: syz [ 428.666634][ T6617] usb 3-1: Manufacturer: syz [ 428.671261][ T6617] usb 3-1: SerialNumber: syz [ 428.904066][ T6617] usb-storage 3-1:162.220: USB Mass Storage device detected [ 428.937583][ T6617] usb-storage 3-1:162.220: Quirks match for vid 04fc pid 80c2: 40 [ 429.008782][T10446] netlink: 'syz.5.1263': attribute type 1 has an invalid length. [ 429.214175][ T6617] usb-storage 3-1:162.3: USB Mass Storage device detected [ 429.247805][ T6617] usb-storage 3-1:162.3: Quirks match for vid 04fc pid 80c2: 40 [ 429.375395][ T6617] usb 3-1: USB disconnect, device number 34 [ 429.699001][ T5907] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 429.811237][T10457] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1267'. [ 429.875166][ T5907] usb 5-1: config 8 has an invalid interface number: 127 but max is 0 [ 429.891349][ T5907] usb 5-1: config 8 has no interface number 0 [ 429.897534][ T5907] usb 5-1: config 8 interface 127 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 429.927520][ T5907] usb 5-1: config 8 interface 127 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 429.958196][ T5907] usb 5-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=45.36 [ 429.978412][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.986518][ T5907] usb 5-1: Product: syz [ 429.991929][ T5907] usb 5-1: Manufacturer: syz [ 429.996570][ T5907] usb 5-1: SerialNumber: syz [ 430.013039][T10450] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 430.062326][ T5966] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 430.094418][T10466] overlayfs: failed to resolve './file1': -2 [ 430.176911][T10467] overlayfs: failed to resolve './file1': -2 [ 430.222497][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 430.230459][ T5966] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 430.247305][ T5966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.268555][ T5966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.280748][ T5907] io_ti 5-1:8.127: required endpoints missing [ 430.299358][ T5966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.316110][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.317465][ T5907] usb 5-1: USB disconnect, device number 120 [ 430.332842][ T5966] usb 3-1: Product: syz [ 430.337041][ T5966] usb 3-1: Manufacturer: syz [ 430.342731][ T5966] usb 3-1: SerialNumber: syz [ 430.512551][ T5921] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 430.684247][ T5921] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 430.703313][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.725894][ T5921] usb 1-1: config 0 descriptor?? [ 430.797845][ T5966] usb 3-1: 0:2 : does not exist [ 431.238268][T10480] binder: Unknown parameter 'trans' [ 431.251501][ T5966] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 431.358149][ T5966] usb 3-1: USB disconnect, device number 35 [ 431.426645][ T9558] udevd[9558]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.145827][ T5883] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 432.251765][ T5921] usb 1-1: Cannot set autoneg [ 432.257171][ T5921] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 432.300425][ T5921] usb 1-1: USB disconnect, device number 123 [ 432.316824][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 432.324478][ T5883] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 432.338078][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.348213][ T5883] usb 3-1: config 0 has no interface number 0 [ 432.367375][ T5883] usb 3-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 432.395422][ T5883] usb 3-1: config 0 interface 2 has no altsetting 0 [ 432.409939][ T5883] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 432.426441][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.435799][ T5883] usb 3-1: Product: syz [ 432.440112][ T5883] usb 3-1: Manufacturer: syz [ 432.444801][ T5883] usb 3-1: SerialNumber: syz [ 432.454817][ T5883] usb 3-1: config 0 descriptor?? [ 432.682940][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.691839][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.701744][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.710645][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.718731][ T5921] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 432.721628][T10487] netlink: 259 bytes leftover after parsing attributes in process `syz.2.1277'. [ 432.739293][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.749244][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.760854][ T5883] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.771077][ T5883] usb 3-1: invalid MIDI in EP 0 [ 432.829168][ T5883] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 432.845234][ T5883] usb 3-1: USB disconnect, device number 36 [ 432.883190][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 432.895317][ T5921] usb 5-1: too many configurations: 72, using maximum allowed: 8 [ 432.914775][ T9560] udevd[9560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.980539][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.005057][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.047638][ T5921] usb 5-1: string descriptor 0 read error: -71 [ 433.056695][ T5921] usb 5-1: New USB device found, idVendor=1608, idProduct=000e, bcdDevice=ed.b1 [ 433.066116][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70 [ 433.077910][ T5921] usb 5-1: rejected 8 configurations due to insufficient available bus power [ 433.087008][ T5921] usb 5-1: no configuration chosen from 8 choices [ 433.095258][ T5921] usb 5-1: USB disconnect, device number 121 [ 433.289120][ T5883] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 433.449395][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 433.456349][ T5883] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 433.464721][ T5883] usb 1-1: config 1 has no interface number 0 [ 433.471075][ T5883] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 433.481619][ T5883] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 433.491690][ T5883] usb 1-1: config 1 interface 105 has no altsetting 0 [ 433.501740][ T5883] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 433.511096][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.519202][ T5883] usb 1-1: Product: syz [ 433.523435][ T5883] usb 1-1: Manufacturer: syz [ 433.528147][ T5883] usb 1-1: SerialNumber: syz [ 433.536924][T10504] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 433.544284][T10504] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 433.620454][ T5921] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 433.654032][T10511] /dev/nullb0: Can't open blockdev [ 433.814299][ T5921] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 433.826104][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 433.837609][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 433.850691][ T5921] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 433.859897][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.877142][ T5921] usb 3-1: config 0 descriptor?? [ 433.883254][T10509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 433.974159][ T5939] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 433.989955][T10504] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 433.997957][T10504] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 434.146508][ T5939] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 434.155327][ T5939] usb 5-1: config 0 has no interface number 0 [ 434.161664][ T5939] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.175522][ T5939] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 434.184714][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.193240][ T5939] usb 5-1: Product: syz [ 434.198804][ T5939] usb 5-1: Manufacturer: syz [ 434.203465][ T5939] usb 5-1: SerialNumber: syz [ 434.214057][ T5939] usb 5-1: config 0 descriptor?? [ 434.220945][ T5883] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 434.236871][ T5939] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 434.244823][ T5883] aqc111 1-1:1.105: probe with driver aqc111 failed with error -61 [ 434.336195][ T5921] megaworld 0003:07B5:0312.0025: item fetching failed at offset 0/2 [ 434.345052][ T5921] megaworld 0003:07B5:0312.0025: parse failed [ 434.353532][ T5921] megaworld 0003:07B5:0312.0025: probe with driver megaworld failed with error -22 [ 434.542662][ T5921] usb 3-1: USB disconnect, device number 37 [ 434.655792][ T5907] usb 5-1: USB disconnect, device number 122 [ 434.665421][ T5907] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 435.388827][T10527] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 435.650457][ T5907] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 435.789417][ T5907] usb 5-1: device descriptor read/64, error -71 [ 436.045902][ T5907] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 436.184827][ T5907] usb 5-1: device descriptor read/64, error -71 [ 436.225075][ T5921] usb 1-1: USB disconnect, device number 124 [ 436.289411][T10531] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1294'. [ 436.302977][ T5907] usb usb5-port1: attempt power cycle [ 436.387822][ T5966] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 436.561721][ T5966] usb 3-1: not running at top speed; connect to a high speed hub [ 436.572818][ T5966] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 436.584833][ T5966] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 436.598013][ T5966] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 436.613558][ T5966] usb 3-1: config 1 interface 0 has no altsetting 0 [ 436.623338][ T5966] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.40 [ 436.632675][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.642420][ T5966] usb 3-1: Product: syz [ 436.655595][ T5966] usb 3-1: Manufacturer: syz [ 436.660245][ T5966] usb 3-1: SerialNumber: syz [ 436.678048][ T5907] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 436.695172][T10529] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 436.718516][ T5907] usb 5-1: device descriptor read/8, error -71 [ 436.975420][ T5907] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 436.997746][ T5907] usb 5-1: device descriptor read/8, error -71 [ 437.114948][ T5907] usb usb5-port1: unable to enumerate USB device [ 437.157042][ T5939] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 437.344622][ T5939] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.355056][ T5939] usb 1-1: too many configurations: 80, using maximum allowed: 8 [ 437.357096][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.364272][ T5939] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 437.380344][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.381002][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.397722][ T5939] usb 1-1: can't read configurations, error -71 [ 437.405620][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.420142][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.437206][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.449482][ T5966] usbhid 3-1:1.0: can't add hid device: -71 [ 437.457785][ T5966] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 437.480140][ T5966] usb 3-1: USB disconnect, device number 38 [ 437.940452][T10556] tipc: Failed to obtain node identity [ 437.945969][T10556] tipc: Enabling of bearer rejected, failed to enable media [ 438.290198][ T5939] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 438.336277][T10569] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1309'. [ 438.462700][ T5939] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 438.471815][ T5939] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 438.480813][ T5939] usb 1-1: config 1 has no interface number 1 [ 438.488458][ T5939] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 438.501694][ T5939] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.516560][ T5939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.526324][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.534399][ T5939] usb 1-1: Product: syz [ 438.539594][ T5939] usb 1-1: Manufacturer: syz [ 438.544244][ T5939] usb 1-1: SerialNumber: syz [ 438.805638][ T5939] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 438.868664][ T5939] usb 1-1: USB disconnect, device number 126 [ 438.908049][ T9558] udevd[9558]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.326104][ T5939] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 439.446215][ T52] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 439.465113][ T5939] usb 5-1: device descriptor read/64, error -71 [ 439.627591][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1324'. [ 439.641373][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1324'. [ 439.742834][ T5939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 439.774972][ T5883] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 439.881804][ T5939] usb 5-1: device descriptor read/64, error -71 [ 439.935102][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 439.941917][ T5883] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 439.955429][ T5883] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 439.964666][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.972864][ T5883] usb 1-1: Product: syz [ 439.977123][ T5883] usb 1-1: Manufacturer: syz [ 439.981832][ T5883] usb 1-1: SerialNumber: syz [ 439.999586][ T5939] usb usb5-port1: attempt power cycle [ 440.211881][ T5883] pn533_usb 1-1:5.0: NFC: Could not find bulk-in or bulk-out endpoint [ 440.225949][ T5883] usb 1-1: USB disconnect, device number 127 [ 440.362626][ T5939] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 440.416710][ T5939] usb 5-1: device descriptor read/8, error -71 [ 440.673883][ T5939] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 440.702198][ T5939] usb 5-1: device descriptor read/8, error -71 [ 440.821030][T10639] netlink: 'syz.0.1330': attribute type 6 has an invalid length. [ 440.822219][ T5939] usb usb5-port1: unable to enumerate USB device [ 440.869543][T10643] tmpfs: User quota block hardlimit too large. [ 441.057130][ T5939] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 441.143261][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 441.218988][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 441.229742][ T5939] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 441.240317][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 441.251433][ T5939] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 441.263617][ T5939] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 441.272907][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.280917][ T5939] usb 3-1: Product: syz [ 441.285154][ T5939] usb 3-1: Manufacturer: syz [ 441.289758][ T5939] usb 3-1: SerialNumber: syz [ 441.296639][ T5939] usb 3-1: config 0 descriptor?? [ 441.304393][ T5939] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 441.325389][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 441.332485][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.344901][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 441.359794][ T5921] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.370998][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.383234][ T5921] usb 1-1: config 0 descriptor?? [ 441.523107][ T5939] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 441.740312][ T5907] usb 3-1: USB disconnect, device number 39 [ 441.828758][ T5921] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 441.845393][ T5921] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 441.853678][ T5921] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 441.861323][ T5921] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 441.869694][ T5921] microsoft 0003:045E:07DA.0026: item fetching failed at offset 33/34 [ 441.879066][ T5921] microsoft 0003:045E:07DA.0026: parse failed [ 441.886297][ T5921] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 442.046823][T10643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.056974][T10643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.340069][T10656] netlink: 'syz.4.1335': attribute type 13 has an invalid length. [ 442.358820][T10656] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.372109][T10656] CUSE: info not properly terminated [ 442.381641][T10659] netlink: 'syz.2.1336': attribute type 32 has an invalid length. [ 442.431002][T10661] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1337'. [ 442.482814][T10663] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1338'. [ 442.569267][T10665] 9p: Bad value for 'rfdno' [ 442.649664][ T5921] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 442.809366][ T5907] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 442.816998][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 442.826107][ T5921] usb 3-1: config 0 has an invalid interface number: 99 but max is 7 [ 442.834420][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 442.843537][ T5921] usb 3-1: config 0 has no interface number 0 [ 442.852385][ T5921] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 442.861511][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.869662][ T5921] usb 3-1: Product: syz [ 442.873981][ T5921] usb 3-1: Manufacturer: syz [ 442.878588][ T5921] usb 3-1: SerialNumber: syz [ 442.887068][ T5921] usb 3-1: config 0 descriptor?? [ 442.896354][ T5921] ftdi_sio 3-1:0.99: FTDI USB Serial Device converter detected [ 442.906527][ T5921] usb 3-1: Detected FT232R [ 442.982006][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.991002][ T5907] usb 5-1: config 1 has no interface number 0 [ 442.997122][ T5907] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.008155][ T5907] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 443.020268][ T5907] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 443.030745][ T5907] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 443.041703][ T5907] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 443.054953][ T5907] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.064169][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.072307][ T5907] usb 5-1: Product: syz [ 443.076563][ T5907] usb 5-1: Manufacturer: syz [ 443.081226][ T5907] usb 5-1: SerialNumber: syz [ 443.094963][T10667] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 443.107988][ T5921] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 443.324233][T10667] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 443.333118][T10667] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 443.345331][ T5921] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 443.559413][T10667] EXT4-fs: Conflicting test_dummy_encryption options [ 443.566651][T10667] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 444.006036][T10667] bpf: Bad value for 'uid' [ 444.077544][T10643] overlayfs: statfs failed on './file0' [ 444.112064][ T6010] usb 3-1: USB disconnect, device number 40 [ 444.132980][ T6010] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 444.153670][ T5921] usb 1-1: USB disconnect, device number 2 [ 444.166937][ T6010] ftdi_sio 3-1:0.99: device disconnected [ 444.200100][T10674] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 444.207491][T10674] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 444.238433][ T5907] cdc_ncm 5-1:1.1: bind() failure [ 444.371887][T10684] overlayfs: failed to clone upperpath [ 444.653641][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 444.770025][T10696] syzkaller0: entered promiscuous mode [ 444.775592][T10696] syzkaller0: entered allmulticast mode [ 444.841688][ T5921] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 444.852396][ T5921] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.864615][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.876257][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.884622][ T5921] usb 1-1: Product: syz [ 444.888833][ T5921] usb 1-1: Manufacturer: syz [ 444.894105][ T5921] usb 1-1: SerialNumber: syz [ 444.991455][T10700] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000) [ 445.133726][ T5921] usb 1-1: 0:2 : does not exist [ 445.144897][ T5921] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 445.177252][ T5921] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 445.193879][ T5921] usb 1-1: USB disconnect, device number 3 [ 445.242770][ T9558] udevd[9558]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.761894][ T30] audit: type=1326 audit(6057879292.749:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa96778f749 code=0x7fc00000 [ 445.802814][ T5930] usb 5-1: USB disconnect, device number 5 [ 446.249990][ T37] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 446.411824][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.422165][ T5907] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 446.429710][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.440936][ T37] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.450207][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.458332][ T37] usb 1-1: SerialNumber: syz [ 446.606355][ T5907] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 446.614952][ T5907] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 446.631074][ T5907] usb 5-1: config 150 has no interface number 0 [ 446.637493][ T5907] usb 5-1: config 150 interface 204 has no altsetting 0 [ 446.648256][ T5907] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 446.657416][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.665530][ T5907] usb 5-1: Product: syz [ 446.670167][ T5907] usb 5-1: Manufacturer: syz [ 446.674838][ T5907] usb 5-1: SerialNumber: syz [ 446.834916][T10734] netlink: 'syz.5.1361': attribute type 10 has an invalid length. [ 446.857037][T10734] team0: Port device dummy0 added [ 446.866842][T10734] netlink: 'syz.5.1361': attribute type 10 has an invalid length. [ 446.885024][T10734] team0: Port device dummy0 removed [ 446.897094][T10734] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 446.913420][ T5907] xr_serial 5-1:150.204: skipping garbage [ 446.920115][ T5907] xr_serial 5-1:150.204: xr_serial converter detected [ 447.086305][T10741] netlink: 'syz.5.1363': attribute type 9 has an invalid length. [ 447.095486][T10741] netlink: 'syz.5.1363': attribute type 11 has an invalid length. [ 447.103515][T10741] netlink: 'syz.5.1363': attribute type 12 has an invalid length. [ 447.113646][T10741] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.1363'. [ 447.123657][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1363'. [ 447.136973][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 447.143740][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 447.334422][T10751] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 447.562624][ T5907] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 447.572260][ T5907] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 447.596646][ T5907] usb 5-1: USB disconnect, device number 6 [ 447.620847][ T5907] xr_serial 5-1:150.204: device disconnected [ 447.916831][ T6010] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 448.080225][ T6010] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.093291][ T6010] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 448.102784][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.113599][ T6010] usb 3-1: Product: syz [ 448.117833][ T6010] usb 3-1: Manufacturer: syz [ 448.126023][ T6010] usb 3-1: SerialNumber: syz [ 448.137917][ T6010] usb 3-1: config 0 descriptor?? [ 448.163241][ T6010] CoreChips 3-1:0.0: probe with driver CoreChips failed with error -22 [ 448.256951][T10781] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 448.368750][ T5921] usb 3-1: USB disconnect, device number 41 [ 449.356036][ T37] usb 1-1: 0:2 : does not exist [ 449.372559][ T37] usb 1-1: unit 5: unexpected type 0x0c [ 449.426576][T10798] sg_write: data in/out 768/46 bytes for SCSI command 0x0-- guessing data in; [ 449.426576][T10798] program syz.4.1378 not setting count and/or reply_len properly [ 449.462995][ T37] usb 1-1: USB disconnect, device number 4 [ 449.522366][ T9558] udevd[9558]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.577736][ T30] audit: type=1326 audit(6057879296.315:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10804 comm="syz.4.1381" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa96778f749 code=0x0 [ 449.757520][ T5930] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 449.887277][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 449.947040][ T5930] usb 3-1: device descriptor read/64, error -71 [ 450.224157][ T5930] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 450.406367][ T5930] usb 3-1: device descriptor read/64, error -71 [ 450.449340][ T37] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 450.525061][ T5930] usb usb3-port1: attempt power cycle [ 450.630713][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 450.638595][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 450.651352][ T37] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 450.661071][ T37] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 450.671089][ T37] usb 1-1: Product: syz [ 450.684512][ T37] usb 1-1: Manufacturer: syz [ 450.693894][ T37] usb 1-1: SerialNumber: syz [ 450.908472][ T5930] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 450.930501][ T5930] usb 3-1: device descriptor read/8, error -71 [ 450.950667][ T37] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 450.962536][ T37] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 450.970671][ T37] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 451.181726][ T37] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 451.195584][ T5930] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 451.204779][ T37] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 451.228318][ T37] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 451.230002][ T5930] usb 3-1: device descriptor read/8, error -71 [ 451.248871][ T37] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 451.272343][ T37] usb 1-1: USB disconnect, device number 5 [ 451.294279][ T37] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 451.313970][ T37] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 451.339450][ T37] visor 1-1:1.0: device disconnected [ 451.389870][ T5930] usb usb3-port1: unable to enumerate USB device [ 452.099816][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.115322][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.159336][ T5930] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 452.291769][T10829] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1389'. [ 452.419925][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 452.448908][T10836] overlayfs: failed to clone upperpath [ 452.554631][T10838] netlink: 'syz.5.1392': attribute type 21 has an invalid length. [ 452.562767][T10838] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1392'. [ 452.578753][T10838] netlink: 'syz.5.1392': attribute type 4 has an invalid length. [ 452.591347][T10838] netlink: 'syz.5.1392': attribute type 3 has an invalid length. [ 452.602319][T10838] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1392'. [ 452.622106][ T5930] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.645492][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.668393][ T5930] usb 1-1: config 0 has no interface number 0 [ 452.686312][ T5930] usb 1-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 452.717682][ T5930] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 452.729072][ T5930] usb 1-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 452.739533][ T5930] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.759370][ T5930] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 452.780013][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 452.797649][ T5930] usb 1-1: SerialNumber: syz [ 452.822750][ T5930] usb 1-1: config 0 descriptor?? [ 452.848005][ T5930] hso 1-1:0.1: Failed to find BULK OUT ep [ 452.979443][T10848] overlayfs: unescaped trailing colons in lowerdir mount option. [ 453.058911][ T5907] usb 1-1: USB disconnect, device number 6 [ 453.428708][T10806] Set syz1 is full, maxelem 65536 reached [ 453.550432][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1401'. [ 453.702970][T10879] netlink: 'syz.0.1404': attribute type 11 has an invalid length. [ 453.729419][T10879] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 453.736690][T10879] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 453.752979][T10879] vhci_hcd vhci_hcd.0: Device attached [ 453.767616][T10879] netlink: 'syz.0.1404': attribute type 10 has an invalid length. [ 453.775851][T10879] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1404'. [ 453.919855][ T30] audit: type=1326 audit(6057879300.377:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141cd8f749 code=0x7fc00000 [ 453.947767][ T30] audit: type=1326 audit(6057879300.377:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f141cd8f749 code=0x7fc00000 [ 453.974798][ T30] audit: type=1326 audit(6057879300.377:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141cd8f749 code=0x7fc00000 [ 454.054174][ T30] audit: type=1326 audit(6057879300.377:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141cd8f749 code=0x7fc00000 [ 454.082931][ T5907] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 454.103299][ T30] audit: type=1326 audit(6057879300.377:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141cd8f749 code=0x7fc00000 [ 454.131726][ T30] audit: type=1326 audit(6057879300.377:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10847 comm="syz.2.1393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141cd8f749 code=0x7fc00000 [ 454.267070][T10880] vhci_hcd: connection reset by peer [ 454.276930][ T50] vhci_hcd vhci_hcd.0: stop threads [ 454.286931][ T50] vhci_hcd vhci_hcd.0: release socket [ 454.319974][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 454.456349][ T37] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 454.464358][ T5966] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 454.605715][ T5966] usb 3-1: device descriptor read/64, error -71 [ 454.641938][ T37] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 454.654396][ T37] usb 5-1: config 0 has no interface number 0 [ 454.664507][ T37] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 454.678799][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.688591][ T37] usb 5-1: Product: syz [ 454.696121][ T37] usb 5-1: Manufacturer: syz [ 454.701025][ T37] usb 5-1: SerialNumber: syz [ 454.720402][ T37] usb 5-1: config 0 descriptor?? [ 454.862291][ T5966] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 454.950094][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.965523][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.988899][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.002776][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.017993][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.029436][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.033191][ T5966] usb 3-1: device descriptor read/64, error -71 [ 455.065045][ T37] f81534a_ctrl 5-1:0.74: failed to set register 0x116: -5 [ 455.094055][ T37] f81534a_ctrl 5-1:0.74: failed to enable ports: -5 [ 455.104863][ T37] f81534a_ctrl 5-1:0.74: probe with driver f81534a_ctrl failed with error -5 [ 455.137492][ T37] usb 5-1: USB disconnect, device number 7 [ 455.204291][ T5966] usb usb3-port1: attempt power cycle [ 455.299985][ T5930] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 455.462640][ T5930] usb 1-1: not running at top speed; connect to a high speed hub [ 455.482501][ T5930] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 455.492100][ T5930] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 455.502762][ T5930] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 455.524809][ T5930] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.533916][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.542583][ T5930] usb 1-1: Product: 欮›꨽錐쬘穚佾幘籛뀻ᄪ튌跂ᆦ賓ຳ隇ꗜꙚ型╆펐瑶彏孏⇞뻛➻대቗鯌嶱ݸତ膼戚 [ 455.558485][ T5930] usb 1-1: Manufacturer: ᠊ [ 455.563131][ T5930] usb 1-1: SerialNumber: syz [ 455.580520][ T5966] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 455.611185][ T5966] usb 3-1: device descriptor read/8, error -71 [ 455.747485][T10943] TCP: TCP_TX_DELAY enabled [ 455.805159][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.830185][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.868436][ T5966] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 455.890220][ T5930] usb 1-1: 0:2 : does not exist [ 455.899350][ T5966] usb 3-1: device descriptor read/8, error -71 [ 455.956571][ T5930] usb 1-1: USB disconnect, device number 7 [ 456.027233][ T5966] usb usb3-port1: unable to enumerate USB device [ 456.090335][ T30] audit: type=1326 audit(6057879302.407:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10954 comm="syz.5.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd061d8f749 code=0x0 [ 456.489262][ T5966] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 456.656984][ T5966] usb 5-1: device descriptor read/64, error -71 [ 456.913519][ T5966] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 457.041866][ T37] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 457.052483][ T5966] usb 5-1: device descriptor read/64, error -71 [ 457.170212][ T5966] usb usb5-port1: attempt power cycle [ 457.212670][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 457.219602][ T37] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 457.228011][ T37] usb 1-1: config 0 has no interface number 0 [ 457.234417][ T37] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1 [ 457.247040][ T37] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 457.256529][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.264538][ T37] usb 1-1: Product: syz [ 457.269450][ T37] usb 1-1: Manufacturer: syz [ 457.274046][ T37] usb 1-1: SerialNumber: syz [ 457.281877][ T37] usb 1-1: config 0 descriptor?? [ 457.287856][T10988] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 457.296823][ T37] smsc95xx v2.0.0 [ 457.510027][T10988] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 457.565532][ T5966] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 457.588790][ T5966] usb 5-1: device descriptor read/8, error -71 [ 457.843042][ T5930] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 457.864415][ T5966] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 457.900118][ T5966] usb 5-1: device descriptor read/8, error -71 [ 458.005605][ T5930] usb 3-1: unable to get BOS descriptor or descriptor too short [ 458.015522][ T5930] usb 3-1: not running at top speed; connect to a high speed hub [ 458.016077][ T5966] usb usb5-port1: unable to enumerate USB device [ 458.034475][ T5930] usb 3-1: config 6 has no interfaces? [ 458.042963][ T5930] usb 3-1: New USB device found, idVendor=0c52, idProduct=2221, bcdDevice=38.98 [ 458.052325][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.060433][ T5930] usb 3-1: Product: syz [ 458.064698][ T5930] usb 3-1: Manufacturer: syz [ 458.070616][ T5930] usb 3-1: SerialNumber: syz [ 458.309342][ T5930] usb 3-1: USB disconnect, device number 50 [ 458.792750][T11006] overlayfs: missing 'workdir' [ 458.871719][T11008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1425'. [ 458.883344][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1425'. [ 459.023524][T11015] tmpfs: Bad value for 'mpol' [ 459.157353][ T5930] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 459.320321][ T5930] usb 3-1: config 0 has an invalid interface number: 91 but max is 0 [ 459.328782][ T5930] usb 3-1: config 0 has no interface number 0 [ 459.335394][ T5930] usb 3-1: New USB device found, idVendor=04e6, idProduct=0002, bcdDevice= 1.00 [ 459.347497][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.371722][ T5930] usb 3-1: config 0 descriptor?? [ 459.594206][ T5930] usb 3-1: string descriptor 0 read error: -71 [ 459.603987][ T5930] usb-storage 3-1:0.91: USB Mass Storage device detected [ 459.606380][ T5907] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 459.635061][ T5930] usb-storage 3-1:0.91: Quirks match for vid 04e6 pid 0002: 4 [ 459.672383][ T5930] usb 3-1: USB disconnect, device number 51 [ 460.017631][ T37] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 460.035498][ T37] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 460.046405][ T37] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 460.060231][ T37] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 460.073233][ T37] usb 1-1: USB disconnect, device number 8 [ 460.252380][T11044] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 460.407483][ T37] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 460.482225][ T5930] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 460.567934][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 460.574575][ T37] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 124, using maximum allowed: 30 [ 460.585746][ T37] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.589011][ T5830] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 460.597003][ T37] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 124 [ 460.617789][ T37] usb 1-1: config 0 interface 0 has no altsetting 0 [ 460.624510][ T37] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 460.634081][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.644070][ T5930] usb 5-1: too many configurations: 237, using maximum allowed: 8 [ 460.645761][ T37] usb 1-1: config 0 descriptor?? [ 460.678233][ T5930] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 460.687587][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.695625][ T5930] usb 5-1: Product: syz [ 460.700152][ T5930] usb 5-1: Manufacturer: syz [ 460.704783][ T5930] usb 5-1: SerialNumber: syz [ 460.718645][ T5930] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 460.746586][ T6617] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 460.760173][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 460.772847][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.784431][ T5830] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 460.794693][ T5830] usb 3-1: config 5 has no interface number 0 [ 460.800908][ T5830] usb 3-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 460.812063][ T5830] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 460.826162][ T5830] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 460.836369][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.844462][ T5830] usb 3-1: Product: syz [ 460.849945][ T5830] usb 3-1: Manufacturer: syz [ 460.854690][ T5830] usb 3-1: SerialNumber: syz [ 460.977448][T11038] 9pnet_fd: Insufficient options for proto=fd [ 461.093460][ T5830] aircable 3-1:5.52: aircable converter detected [ 461.134042][ T5830] usb 3-1: aircable converter now attached to ttyUSB0 [ 461.158546][ T5830] usb 3-1: USB disconnect, device number 52 [ 461.182463][ T5830] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 461.199259][ T5830] aircable 3-1:5.52: device disconnected [ 461.212769][ T5907] usb 5-1: USB disconnect, device number 12 [ 461.250236][ T37] usbhid 1-1:0.0: can't add hid device: -71 [ 461.271271][ T37] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 461.292979][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1439'. [ 461.305893][ T37] usb 1-1: USB disconnect, device number 9 [ 461.914494][ T6617] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 461.925815][ T6617] ath9k_htc: Failed to initialize the device [ 461.932629][ T5907] usb 5-1: ath9k_htc: USB layer deinitialized [ 461.956752][ T5830] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 462.117416][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 462.126989][ T5830] usb 3-1: config index 0 descriptor too short (expected 6683, got 27) [ 462.135824][ T5830] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 462.144817][ T5830] usb 3-1: config 0 has no interface number 0 [ 462.151373][ T5830] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.163651][ T5830] usb 3-1: config 0 interface 85 has no altsetting 0 [ 462.173952][ T5830] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 462.184174][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.192388][ T5830] usb 3-1: Product: syz [ 462.196663][ T5830] usb 3-1: Manufacturer: syz [ 462.201336][ T5830] usb 3-1: SerialNumber: syz [ 462.208469][ T5830] usb 3-1: config 0 descriptor?? [ 462.266611][ T5907] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 462.417358][ T37] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 462.453337][ T5907] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 462.462852][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.471133][ T5907] usb 5-1: Product: syz [ 462.475337][ T5907] usb 5-1: Manufacturer: syz [ 462.480018][ T5907] usb 5-1: SerialNumber: syz [ 462.495014][ T5907] usb 5-1: config 0 descriptor?? [ 462.506703][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 462.594633][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 462.615425][ T37] usb 1-1: config 2 has an invalid interface number: 206 but max is 3 [ 462.624319][ T37] usb 1-1: config 2 has an invalid interface number: 36 but max is 3 [ 462.633169][ T37] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 462.645107][ T37] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 462.656605][ T37] usb 1-1: config 2 has no interface number 0 [ 462.663167][ T37] usb 1-1: config 2 has no interface number 1 [ 462.669370][ T37] usb 1-1: config 2 interface 206 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 462.680655][ T37] usb 1-1: config 2 interface 206 altsetting 224 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 462.693370][ T37] usb 1-1: config 2 interface 206 altsetting 224 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 462.706718][ T37] usb 1-1: config 2 interface 206 altsetting 224 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 462.726141][ T37] usb 1-1: config 2 interface 206 altsetting 224 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 462.737802][ T37] usb 1-1: config 2 interface 206 altsetting 224 has a duplicate endpoint with address 0xA, skipping [ 462.753193][ T5907] gspca_sunplus: reg_r err -71 [ 462.759986][ T5907] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 462.768834][ T37] usb 1-1: config 2 interface 206 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 462.791072][ T5907] usb 5-1: USB disconnect, device number 13 [ 462.800951][ T37] usb 1-1: config 2 interface 206 altsetting 224 has a duplicate endpoint with address 0xD, skipping [ 462.829262][ T37] usb 1-1: config 2 interface 206 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 462.852942][ T37] usb 1-1: config 2 interface 206 altsetting 224 has a duplicate endpoint with address 0x7, skipping [ 462.858930][ T5830] appletouch 3-1:0.85: Geyser mode initialized. [ 462.872685][ T37] usb 1-1: config 2 interface 206 altsetting 224 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 462.883753][ T5830] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input46 [ 462.893503][ T37] usb 1-1: config 2 interface 36 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 462.914164][ T37] usb 1-1: config 2 interface 206 has no altsetting 0 [ 462.925015][ T37] usb 1-1: config 2 interface 36 has no altsetting 0 [ 462.960233][ T37] usb 1-1: Dual-Role OTG device on HNP port [ 462.967735][ T37] usb 1-1: New USB device found, idVendor=1d4d, idProduct=0011, bcdDevice=bf.6d [ 462.978380][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.986528][ T37] usb 1-1: Product: 群ꚺ䔖Ⲓ䅶씫㊼ꏋꎱꪂ⍢䅋蛽邂濱䬜ힼ묧ﺽ뮇ꪼ䒍뀊辳䫏眾벺刬ࡔ毃䅜ᆯ얕⭗䟡ͱ붲糀ɉ䁂Ө繜㳪炥쏇闥怦半䶖瓲풐锁ꊆⶭகဏ省ꭺ鷐㻗䤅묟ၛ㥔颛蕙⚎ﳊꟍ氤蔽䴹០얣輹㠸胍欿ꐋ뱷癩苯뿖谁᱘횯窳欪ᴬ軩⃮햅췱폛搝鶅὾熚쉱蕯ﯿ [ 463.049526][ T37] usb 1-1: Manufacturer: Ћ [ 463.054099][ T37] usb 1-1: SerialNumber: လ [ 463.084766][ T6617] usb 3-1: USB disconnect, device number 53 [ 463.114532][T11069] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 463.123847][ T6617] appletouch 3-1:0.85: input: appletouch disconnected [ 463.463308][ T5830] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 463.559239][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.570640][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.580497][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.590028][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.599403][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.608656][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.623567][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 463.632645][ T5830] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 463.641383][ T5830] usb 5-1: config 0 has no interface number 0 [ 463.649563][ T5830] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 463.660642][ T37] usb 1-1: USB disconnect, device number 10 [ 463.675395][ T5830] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 463.689490][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.710337][ T5830] usb 5-1: Product: syz [ 463.714644][ T5830] usb 5-1: Manufacturer: syz [ 463.725357][ T5830] usb 5-1: SerialNumber: syz [ 463.744855][ T5830] usb 5-1: config 0 descriptor?? [ 463.751457][T11090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 463.895744][T11098] netlink: 'syz.2.1452': attribute type 3 has an invalid length. [ 463.904641][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 463.981569][T11090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 464.326750][T11109] fuse: Unknown parameter 'gou' [ 464.423333][ T5830] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 464.436299][ T5830] asix 5-1:0.188: probe with driver asix failed with error -61 [ 464.659450][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.673471][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.689044][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.705131][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.719555][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.746631][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.899870][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 465.005172][T11147] overlay: ./file0 is not a directory [ 465.011901][T11147] openvswitch: netlink: Flow key attribute not present in set flow. [ 465.034830][ T37] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 465.216994][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.241974][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.252880][ T37] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 465.263087][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.282388][ T37] usb 1-1: config 0 descriptor?? [ 465.336483][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 465.346500][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 465.357948][ T5834] Bluetooth: hci0: hardware error 0x00 [ 465.368242][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1468'. [ 465.772209][T11157] futex_wake_op: syz.2.1471 tries to shift op by -1; fix this program [ 465.883092][T11161] [ 465.885473][T11161] ====================================================== [ 465.892508][T11161] WARNING: possible circular locking dependency detected [ 465.899537][T11161] syzkaller #0 Tainted: G L [ 465.905520][T11161] ------------------------------------------------------ [ 465.912527][T11161] syz.2.1473/11161 is trying to acquire lock: [ 465.918595][T11161] ffff88801ff58088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 465.927989][T11161] [ 465.927989][T11161] but task is already holding lock: [ 465.935469][T11161] ffff88806b5fd868 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x1e3/0x10b0 [ 465.945204][T11161] [ 465.945204][T11161] which lock already depends on the new lock. [ 465.945204][T11161] [ 465.955634][T11161] [ 465.955634][T11161] the existing dependency chain (in reverse order) is: [ 465.964754][T11161] [ 465.964754][T11161] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 465.972161][T11161] __mutex_lock+0x187/0x1350 [ 465.977291][T11161] anon_pipe_write+0x15d/0x1460 [ 465.982670][T11161] __kernel_write_iter+0x481/0x910 [ 465.988317][T11161] __kernel_write+0xef/0x150 [ 465.993436][T11161] autofs_notify_daemon+0x6e7/0xde0 [ 465.999168][T11161] autofs_wait+0x11dc/0x18c0 [ 466.004286][T11161] autofs_mount_wait+0x16b/0x390 [ 466.009744][T11161] autofs_d_automount+0x64f/0x820 [ 466.015289][T11161] __traverse_mounts+0x301/0x5e0 [ 466.020834][T11161] step_into_slowpath+0x469/0x7d0 [ 466.026382][T11161] path_lookupat+0x433/0x8c0 [ 466.031494][T11161] filename_lookup+0x212/0x570 [ 466.036779][T11161] kern_path+0x35/0x50 [ 466.041370][T11161] lookup_bdev+0xc0/0x280 [ 466.046225][T11161] resume_store+0x169/0x480 [ 466.051255][T11161] kernfs_fop_write_iter+0x3af/0x540 [ 466.057094][T11161] vfs_write+0x5c9/0xb30 [ 466.061892][T11161] ksys_write+0x145/0x250 [ 466.066747][T11161] do_syscall_64+0xfa/0xf80 [ 466.071774][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.078190][T11161] [ 466.078190][T11161] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 466.085934][T11161] __mutex_lock+0x187/0x1350 [ 466.091069][T11161] autofs_notify_daemon+0x6d4/0xde0 [ 466.096816][T11161] autofs_wait+0x11dc/0x18c0 [ 466.101924][T11161] autofs_mount_wait+0x16b/0x390 [ 466.107381][T11161] autofs_d_automount+0x64f/0x820 [ 466.112925][T11161] __traverse_mounts+0x301/0x5e0 [ 466.118391][T11161] step_into_slowpath+0x469/0x7d0 [ 466.123945][T11161] path_lookupat+0x433/0x8c0 [ 466.129060][T11161] filename_lookup+0x212/0x570 [ 466.134445][T11161] kern_path+0x35/0x50 [ 466.139067][T11161] lookup_bdev+0xc0/0x280 [ 466.143943][T11161] resume_store+0x169/0x480 [ 466.148983][T11161] kernfs_fop_write_iter+0x3af/0x540 [ 466.154798][T11161] vfs_write+0x5c9/0xb30 [ 466.159574][T11161] ksys_write+0x145/0x250 [ 466.164434][T11161] do_syscall_64+0xfa/0xf80 [ 466.169466][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.175892][T11161] [ 466.175892][T11161] -> #0 (&of->mutex){+.+.}-{4:4}: [ 466.183112][T11161] __lock_acquire+0x15a6/0x2cf0 [ 466.188491][T11161] lock_acquire+0x117/0x340 [ 466.193521][T11161] __mutex_lock+0x187/0x1350 [ 466.198636][T11161] kernfs_fop_write_iter+0x1de/0x540 [ 466.204447][T11161] iter_file_splice_write+0x972/0x10b0 [ 466.210445][T11161] do_splice+0xc79/0x1660 [ 466.215307][T11161] __se_sys_splice+0x2e1/0x460 [ 466.220685][T11161] do_syscall_64+0xfa/0xf80 [ 466.225952][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.232377][T11161] [ 466.232377][T11161] other info that might help us debug this: [ 466.232377][T11161] [ 466.242623][T11161] Chain exists of: [ 466.242623][T11161] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 466.242623][T11161] [ 466.255075][T11161] Possible unsafe locking scenario: [ 466.255075][T11161] [ 466.262526][T11161] CPU0 CPU1 [ 466.267899][T11161] ---- ---- [ 466.273260][T11161] lock(&pipe->mutex); [ 466.277423][T11161] lock(&sbi->pipe_mutex); [ 466.284448][T11161] lock(&pipe->mutex); [ 466.291124][T11161] lock(&of->mutex); [ 466.295103][T11161] [ 466.295103][T11161] *** DEADLOCK *** [ 466.295103][T11161] [ 466.303242][T11161] 2 locks held by syz.2.1473/11161: [ 466.308437][T11161] #0: ffff8880793c4420 (sb_writers#10){.+.+}-{0:0}, at: do_splice+0xbff/0x1660 [ 466.317508][T11161] #1: ffff88806b5fd868 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x1e3/0x10b0 [ 466.327613][T11161] [ 466.327613][T11161] stack backtrace: [ 466.333501][T11161] CPU: 0 UID: 0 PID: 11161 Comm: syz.2.1473 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.333524][T11161] Tainted: [L]=SOFTLOCKUP [ 466.333531][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.333543][T11161] Call Trace: [ 466.333551][T11161] [ 466.333557][T11161] dump_stack_lvl+0x189/0x250 [ 466.333576][T11161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.333594][T11161] ? __pfx__printk+0x10/0x10 [ 466.333616][T11161] ? print_lock_name+0xde/0x100 [ 466.333637][T11161] print_circular_bug+0x2e2/0x300 [ 466.333654][T11161] check_noncircular+0x12e/0x150 [ 466.333671][T11161] __lock_acquire+0x15a6/0x2cf0 [ 466.333702][T11161] ? kasan_save_track+0x4f/0x80 [ 466.333724][T11161] ? kernfs_fop_write_iter+0x1de/0x540 [ 466.333741][T11161] lock_acquire+0x117/0x340 [ 466.333760][T11161] ? kernfs_fop_write_iter+0x1de/0x540 [ 466.333781][T11161] __mutex_lock+0x187/0x1350 [ 466.333798][T11161] ? kernfs_fop_write_iter+0x1de/0x540 [ 466.333815][T11161] ? _copy_from_iter+0x8a7/0x1630 [ 466.333837][T11161] ? __asan_memcpy+0x40/0x70 [ 466.333857][T11161] ? _copy_from_iter+0x96d/0x1630 [ 466.333874][T11161] ? kernfs_fop_write_iter+0x1de/0x540 [ 466.333892][T11161] ? __pfx___mutex_lock+0x10/0x10 [ 466.333908][T11161] ? __pfx__copy_from_iter+0x10/0x10 [ 466.333925][T11161] ? rcu_is_watching+0x15/0xb0 [ 466.333940][T11161] ? trace_kmalloc+0x1f/0xb0 [ 466.333966][T11161] ? __kmalloc_noprof+0x43e/0x800 [ 466.333990][T11161] ? kernfs_fop_write_iter+0x158/0x540 [ 466.334008][T11161] kernfs_fop_write_iter+0x1de/0x540 [ 466.334027][T11161] iter_file_splice_write+0x972/0x10b0 [ 466.334052][T11161] ? __pfx_iter_file_splice_write+0x10/0x10 [ 466.334069][T11161] ? rcu_read_lock_any_held+0xb3/0x120 [ 466.334089][T11161] ? __pfx_iter_file_splice_write+0x10/0x10 [ 466.334104][T11161] do_splice+0xc79/0x1660 [ 466.334131][T11161] ? __pfx_do_splice+0x10/0x10 [ 466.334151][T11161] __se_sys_splice+0x2e1/0x460 [ 466.334170][T11161] ? __pfx___se_sys_splice+0x10/0x10 [ 466.334187][T11161] ? __x64_sys_splice+0x21/0xf0 [ 466.334205][T11161] do_syscall_64+0xfa/0xf80 [ 466.334221][T11161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.334235][T11161] ? clear_bhb_loop+0x60/0xb0 [ 466.334251][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.334267][T11161] RIP: 0033:0x7f141cd8f749 [ 466.334285][T11161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.334299][T11161] RSP: 002b:00007f141dc94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 466.334315][T11161] RAX: ffffffffffffffda RBX: 00007f141cfe5fa0 RCX: 00007f141cd8f749 [ 466.334327][T11161] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 466.334336][T11161] RBP: 00007f141ce13f91 R08: 0000000000000047 R09: 0000000000000000 [ 466.334346][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.334355][T11161] R13: 00007f141cfe6038 R14: 00007f141cfe5fa0 R15: 00007ffeb9ec3ce8 [ 466.334371][T11161] [ 466.342517][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.642512][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.651268][ T5830] usb 5-1: USB disconnect, device number 14 [ 466.671959][ T37] usbhid 1-1:0.0: can't add hid device: -71 [ 466.678031][ T37] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 466.692295][ T37] usb 1-1: USB disconnect, device number 11 [ 466.701520][T10166] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 466.861030][T10166] usb 3-1: Using ep0 maxpacket: 32 [ 466.867930][T10166] usb 3-1: config 8 has an invalid interface number: 203 but max is 0 [ 466.876537][T10166] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 466.887318][T10166] usb 3-1: config 8 has no interface number 0 [ 466.893471][T10166] usb 3-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 466.905246][T10166] usb 3-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 466.916482][T10166] usb 3-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 466.926743][T10166] usb 3-1: config 8 interface 203 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0 [ 466.936592][T10166] usb 3-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0 [ 466.946492][T10166] usb 3-1: config 8 interface 203 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.960011][T10166] usb 3-1: config 8 interface 203 has no altsetting 0 [ 466.968543][T10166] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 466.977920][T10166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.985991][T10166] usb 3-1: Product: syz [ 466.990193][T10166] usb 3-1: Manufacturer: syz [ 466.994785][T10166] usb 3-1: SerialNumber: syz [ 467.001679][T11162] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 467.230171][T10166] port100 3-1:8.203: NFC: Could not get supported command types [ 467.242035][T10166] usb 3-1: USB disconnect, device number 54 [ 467.555525][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110