last executing test programs: 11m50.874866224s ago: executing program 32 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251000000005000f000400000008000100", @ANYRES32=0x0, @ANYBLOB="050010"], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\xa9!\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, 'veth1_to_batadv\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000884}, 0x24040000) r2 = socket$inet(0x2, 0x4, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x4e20, @empty=0xffffff00}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d3320000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000650000000000000000000000000000000000000000228404cd"], 0x138}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000040)=0x7f, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 11m22.746589909s ago: executing program 33 (id=783): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async, rerun: 64) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) (rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x5, 0xfffe, 0x3f00, 0x0, 0x40, 0x0}) sendto$packet(r1, &(0x7f0000000240)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1bc5b8431bb01c8200f4c3087489be91d3b08f48bdd6c1107607257711da807e3e67411d56bdac41", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x10001, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2001) ioctl$DRM_IOCTL_AUTH_MAGIC(r5, 0x40046411, &(0x7f00000002c0)=0x7c) (async) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, &(0x7f0000000240)={0x77359400}, 0x8) 10m16.735370062s ago: executing program 2 (id=1303): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x11, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8002}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 10m16.565163873s ago: executing program 2 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setreuid(r2, r2) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r2, &(0x7f00000002c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40, 0x1ff, 0x3, 0x10, 0x2, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0xfff, 0x8049]}) (fail_nth: 1) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x24}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x5) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0x9}) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$dsp(r7, &(0x7f00000004c0)='\x00', 0x1) close(r7) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000000)={0x1, 0x1fffffe, 0x82cd, 0x80000000006, 0xd, 0x8, 0xfffdfffffffffffe, 0x4, 0x0, 0x2, 0xfffffffd, 0x2}) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ocfs2\x00', 0x2200000, 0x0) statx(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x200, &(0x7f0000000640)) 10m16.083927958s ago: executing program 2 (id=1309): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x11e) 10m15.899719227s ago: executing program 2 (id=1313): socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x11, 0x2, 0x0) futex(&(0x7f0000000000)=0x1, 0x8, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x149181, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x10) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="12042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00', 0x272) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 10m15.838291543s ago: executing program 2 (id=1315): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="fee7a3b702762bd4adfb7323429f10f1a29007b0721d7a93695fcf5193758299a1d952eeec86095b7402864cf6129b7c1850e24b4d86747d66585813b4d3255a8ec9a9ef480fc99f8ed180244381c5bd4c272304815aeb73803878923c35dbaa79acc9e7821324af9418a3f8fa134704adaa6b443da818e1273aeba1231c8043cf196da413a6a6a9778a640ecbb0908fa592ce452b618cfabfefb22a78d6055d07435641573bec56a6cf8bb9a7834ea1f0680c5bb21ac4ebdb96e6997aa1b605c6b97d95167d2030"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$caif_stream(0x25, 0x1, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d00)={0x0, 0x6, 0x10}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001100)={{r1}, r4, 0x4, @unused=[0x2dd6, 0x1, 0x1, 0x2], @devid=r5}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0xf10, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, r7, 0x1, 0x70bd28, 0x25dfdffd, {{}, {@val={0x8, 0x1, 0x80035}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x24040894) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 10m15.525264338s ago: executing program 2 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="0f05730eb9130800000f320f01cbb8ca2000000f23c80f21f8350c0080000f23f8f4f2a70f20d835200000000f22d8b9fe0a0000b8f4070000ba000000000f30360f01c4", 0x44}], 0x1, 0x11, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000003c40), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000003c80)=0x1ff, 0x80000001) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x2717, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffd, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffc2200c67, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x40, 0x4, 0x0, 0x8]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000080)="2e0f2cf10fc71866660fc7b070c511fa660f384119c4c151e49eb3be0000c4e2fd355bfcb9800000c00f3235002000000f300f3066b809000f00d09a000000004f00", 0x42}], 0x1, 0x0, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {r10, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0xfffd, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000540)={0xa, 0x4, 0xfa00, {r10}}, 0xc) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10m15.089428847s ago: executing program 34 (id=1319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x240, 0x108, 0x37}, 0x18) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="0f05730eb9130800000f320f01cbb8ca2000000f23c80f21f8350c0080000f23f8f4f2a70f20d835200000000f22d8b9fe0a0000b8f4070000ba000000000f30360f01c4", 0x44}], 0x1, 0x11, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000003c40), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000003c80)=0x1ff, 0x80000001) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x2717, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffd, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffc2200c67, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x40, 0x4, 0x0, 0x8]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, &(0x7f0000000080)="2e0f2cf10fc71866660fc7b070c511fa660f384119c4c151e49eb3be0000c4e2fd355bfcb9800000c00f3235002000000f300f3066b809000f00d09a000000004f00", 0x42}], 0x1, 0x0, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {r10, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0xfffd, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000540)={0xa, 0x4, 0xfa00, {r10}}, 0xc) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8m22.840961465s ago: executing program 1 (id=2050): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d001c00020400bf050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$getownex(r5, 0x10, &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2084) writev(r6, &(0x7f0000002280)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000002180)='K', 0x2f}], 0x1000000000000293) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f00000020c0)=""/61, 0x3b}, {&(0x7f0000000300)=""/198, 0xfffffffffffffd50}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000000440)=""/180, 0xb4}], 0x6, &(0x7f00000022c0)=[{0x78, 0x0, 0x0, ""/112}, {0xe8, 0x0, 0x0, ""/211}], 0x160, 0x12120}, 0x38, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, 0x0) 8m22.246946861s ago: executing program 1 (id=2055): setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(0xffffffffffffffff, 0x0, 0x52002) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x20004080) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') pread64(r5, &(0x7f0000000480)=""/209, 0xd1, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80) 8m22.0950961s ago: executing program 1 (id=2057): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000580)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x6f, {"66646646d28f5e994ffd660fd1665542c1dce6f30f09472400660f3880650eb91f0a0000b85804fe43ba000000000f30c744240051d80000c744240200380000c7442406000000000f011424420fc733b9800000c00f3235010000000f30"}}, @cpuid={0x64, 0x18, {0x6, 0x9552}}, @rdmsr={0x66, 0x18, {0xa81}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xacc9, 0x3}}, @in_dx={0x69, 0x20, {0x208c}}, @wr_crn={0x67, 0x20, {0x3, 0x200}}, @code={0xa, 0x62, {"460f60d20f20c035000004000f22c00f2012b9800000c00f3235008000000f3066baf80cb84a561881ef66bafc0c66ed2e266766400f388150800f01dfc4222538a1fa260000460f208466de9000880000"}}, @nested_load_code={0x12e, 0xa7, {0x3, "2e673e0fb41dcd6ca71a420fc7bd0080000066baf80cb84c3cb18bef66bafc0c66b8b00066efc74424005f000000c744240200180000ff2c2466baf80cb8da62eb8aef66bafc0c66b8d2ae66efc4410deaaeae00000066baf80cb8f845da84ef66bafc0cedc7442400ae020000c744240213000000c7442406000000000f011424660f38811567330000660fc77100"}}, @wr_crn={0x67, 0x20, {0x2, 0x10}}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0xa2a, 0x9d}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x6402, 0x9, 0x8, 0xa25}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x45, {0x2, "0fc72ff30f1ed3f30f1efaf3400fc7fe440f01c566b8b3000f00d00f09c4a27918c7f30fc77529028100000000"}}, @code={0xa, 0x77, {"66baf80cb8f06fce84ef66bafc0ced400f209466bad104ec660f381d6500b9e2000000b800000000ba000000800f3066baa00066b882f466efc42335027dfd082e47c1487800c744240000800000c744240247970000c7442406000000000f011424f6492ad0"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c05, 0x0, 0x4000000000000007, 0x84}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0xc001001f}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6804, 0x14bb5547, 0x3ff, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x57}}, @nested_vmresume={0x130, 0x18, 0x3}, @code={0xa, 0x61, {"c7442400fd9a7734c744240200280000c7442406000000000f011424b97e0300000f3266baf80cb8f822b086ef66bafc0ced430f01df450f01c90fc737f247a7260f63f72e44dc2b2e0f01bebc000000"}}], 0x4ed}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m21.811190151s ago: executing program 1 (id=2058): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000580)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x6f, {"66646646d28f5e994ffd660fd1665542c1dce6f30f09472400660f3880650eb91f0a0000b85804fe43ba000000000f30c744240051d80000c744240200380000c7442406000000000f011424420fc733b9800000c00f3235010000000f30"}}, @cpuid={0x64, 0x18, {0x6, 0x9552}}, @rdmsr={0x66, 0x18, {0xa81}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xacc9, 0x3}}, @in_dx={0x69, 0x20, {0x208c}}, @wr_crn={0x67, 0x20, {0x3, 0x200}}, @code={0xa, 0x62, {"460f60d20f20c035000004000f22c00f2012b9800000c00f3235008000000f3066baf80cb84a561881ef66bafc0c66ed2e266766400f388150800f01dfc4222538a1fa260000460f208466de9000880000"}}, @nested_load_code={0x12e, 0xa7, {0x3, "2e673e0fb41dcd6ca71a420fc7bd0080000066baf80cb84c3cb18bef66bafc0c66b8b00066efc74424005f000000c744240200180000ff2c2466baf80cb8da62eb8aef66bafc0c66b8d2ae66efc4410deaaeae00000066baf80cb8f845da84ef66bafc0cedc7442400ae020000c744240213000000c7442406000000000f011424660f38811567330000660fc77100"}}, @wr_crn={0x67, 0x20, {0x2, 0x10}}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0xa2a, 0x9d}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x6402, 0x9, 0x8, 0xa25}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x45, {0x2, "0fc72ff30f1ed3f30f1efaf3400fc7fe440f01c566b8b3000f00d00f09c4a27918c7f30fc77529028100000000"}}, @code={0xa, 0x77, {"66baf80cb8f06fce84ef66bafc0ced400f209466bad104ec660f381d6500b9e2000000b800000000ba000000800f3066baa00066b882f466efc42335027dfd082e47c1487800c744240000800000c744240247970000c7442406000000000f011424f6492ad0"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c05, 0x0, 0x4000000000000007, 0x84}}, @nested_vmresume={0x130, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @rdmsr={0x66, 0x18, {0xc001001f}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6804, 0x14bb5547, 0x3ff, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x57}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x4ac}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m21.378128176s ago: executing program 1 (id=2060): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4a, &(0x7f0000000000)=0xff00, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1a8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x47) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000000)='./file1\x00', r2, &(0x7f00000001c0)='./bus\x00', 0x400) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) unlinkat(r2, &(0x7f0000000180)='./bus\x00', 0x0) 8m21.195102491s ago: executing program 1 (id=2062): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000580)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x6f, {"66646646d28f5e994ffd660fd1665542c1dce6f30f09472400660f3880650eb91f0a0000b85804fe43ba000000000f30c744240051d80000c744240200380000c7442406000000000f011424420fc733b9800000c00f3235010000000f30"}}, @cpuid={0x64, 0x18, {0x6, 0x9552}}, @rdmsr={0x66, 0x18, {0xa81}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xacc9, 0x3}}, @in_dx={0x69, 0x20, {0x208c}}, @wr_crn={0x67, 0x20, {0x3, 0x200}}, @code={0xa, 0x62, {"460f60d20f20c035000004000f22c00f2012b9800000c00f3235008000000f3066baf80cb84a561881ef66bafc0c66ed2e266766400f388150800f01dfc4222538a1fa260000460f208466de9000880000"}}, @nested_load_code={0x12e, 0xa7, {0x3, "2e673e0fb41dcd6ca71a420fc7bd0080000066baf80cb84c3cb18bef66bafc0c66b8b00066efc74424005f000000c744240200180000ff2c2466baf80cb8da62eb8aef66bafc0c66b8d2ae66efc4410deaaeae00000066baf80cb8f845da84ef66bafc0cedc7442400ae020000c744240213000000c7442406000000000f011424660f38811567330000660fc77100"}}, @wr_crn={0x67, 0x20, {0x2, 0x10}}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0xa2a, 0x9d}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x6402, 0x9, 0x8, 0xa25}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x45, {0x2, "0fc72ff30f1ed3f30f1efaf3400fc7fe440f01c566b8b3000f00d00f09c4a27918c7f30fc77529028100000000"}}, @code={0xa, 0x77, {"66baf80cb8f06fce84ef66bafc0ced400f209466bad104ec660f381d6500b9e2000000b800000000ba000000800f3066baa00066b882f466efc42335027dfd082e47c1487800c744240000800000c744240247970000c7442406000000000f011424f6492ad0"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c05, 0x0, 0x4000000000000007, 0x84}}, @nested_vmresume={0x130, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @rdmsr={0x66, 0x18, {0xc001001f}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6804, 0x14bb5547, 0x3ff, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x57}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x4ac}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m5.855503457s ago: executing program 35 (id=2062): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000580)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x6f, {"66646646d28f5e994ffd660fd1665542c1dce6f30f09472400660f3880650eb91f0a0000b85804fe43ba000000000f30c744240051d80000c744240200380000c7442406000000000f011424420fc733b9800000c00f3235010000000f30"}}, @cpuid={0x64, 0x18, {0x6, 0x9552}}, @rdmsr={0x66, 0x18, {0xa81}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xacc9, 0x3}}, @in_dx={0x69, 0x20, {0x208c}}, @wr_crn={0x67, 0x20, {0x3, 0x200}}, @code={0xa, 0x62, {"460f60d20f20c035000004000f22c00f2012b9800000c00f3235008000000f3066baf80cb84a561881ef66bafc0c66ed2e266766400f388150800f01dfc4222538a1fa260000460f208466de9000880000"}}, @nested_load_code={0x12e, 0xa7, {0x3, "2e673e0fb41dcd6ca71a420fc7bd0080000066baf80cb84c3cb18bef66bafc0c66b8b00066efc74424005f000000c744240200180000ff2c2466baf80cb8da62eb8aef66bafc0c66b8d2ae66efc4410deaaeae00000066baf80cb8f845da84ef66bafc0cedc7442400ae020000c744240213000000c7442406000000000f011424660f38811567330000660fc77100"}}, @wr_crn={0x67, 0x20, {0x2, 0x10}}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0xa2a, 0x9d}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x6402, 0x9, 0x8, 0xa25}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x45, {0x2, "0fc72ff30f1ed3f30f1efaf3400fc7fe440f01c566b8b3000f00d00f09c4a27918c7f30fc77529028100000000"}}, @code={0xa, 0x77, {"66baf80cb8f06fce84ef66bafc0ced400f209466bad104ec660f381d6500b9e2000000b800000000ba000000800f3066baa00066b882f466efc42335027dfd082e47c1487800c744240000800000c744240247970000c7442406000000000f011424f6492ad0"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c05, 0x0, 0x4000000000000007, 0x84}}, @nested_vmresume={0x130, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x9}}, @rdmsr={0x66, 0x18, {0xc001001f}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6804, 0x14bb5547, 0x3ff, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x57}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x4ac}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m44.435365708s ago: executing program 5 (id=3778): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x2}) 2m44.408142552s ago: executing program 5 (id=3779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getflags(r0, 0xb) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r1, 0x89e1, &(0x7f0000000000)={'tunl0\x00', 0x7d4c}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, 'syz1\x00', @null, 0x6, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2m43.096922931s ago: executing program 5 (id=3788): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000140)={r1, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0x2d, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, 0x0) preadv2(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000100)=""/132, 0x84}, {&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000280)=""/203, 0xcb}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000080)}], 0x7, 0x4, 0x3, 0x2a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)=0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r8, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCFLSH(r8, 0x540b, 0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f00000004c0)) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) vmsplice(r10, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x11}, [@NFT_MSG_NEWSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x3c}}, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x34, 0x0, 0x2}]}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000000c0), 0x4) 2m42.31173075s ago: executing program 5 (id=3795): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2c060000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40) ioctl$BLKCRYPTOGENERATEKEY(r4, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000040)=""/3, 0x3}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaab34, 0x55, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000002540)=0x1) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000021, 0x0, 0xff}]}) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f00000000c0)={0xd4, 0x0, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m41.842263106s ago: executing program 5 (id=3800): syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x1f, 0x8c, 0xea, 0x10, 0x4fc, 0x235, 0xdfc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0x2, 0x2, 0xff, 0x36, 0xf4, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x6000, 0x40) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x192) 2m41.518861557s ago: executing program 5 (id=3803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0x1d4, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x4e20, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in=@private=0xa010101, 0x3505, 0x3, 0x3, 0x9, 0x100, 0x10, 0xc78}, {{@in6=@private0, 0x4d3, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x3, 0x3, 0x4, 0x0, 0x4}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in=@remote, 0x3507, 0x4, 0x3, 0x42, 0x8, 0x6f, 0x4}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x1, 0x3, 0x8, 0x2, 0xa6, 0x7fc}, {{@in=@broadcast, 0x4d6, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x2, 0x1, 0x5, 0x8, 0x7, 0x7}, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x2, 0x1, 0xee, 0x400, 0x19a, 0x2}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x800}, 0x43840) 2m41.310510435s ago: executing program 36 (id=3803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0x1d4, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x4e20, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in=@private=0xa010101, 0x3505, 0x3, 0x3, 0x9, 0x100, 0x10, 0xc78}, {{@in6=@private0, 0x4d3, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x2, 0x3, 0x3, 0x4, 0x0, 0x4}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in=@remote, 0x3507, 0x4, 0x3, 0x42, 0x8, 0x6f, 0x4}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x1, 0x3, 0x8, 0x2, 0xa6, 0x7fc}, {{@in=@broadcast, 0x4d6, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x2, 0x1, 0x5, 0x8, 0x7, 0x7}, {{@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x2, 0x1, 0xee, 0x400, 0x19a, 0x2}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x800}, 0x43840) 2m1.497542043s ago: executing program 7 (id=3981): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x101, 0x2, 0xc7, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0x101, 0x800800, 0xa239, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x2, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x1, 0xefcb, 0xfffffff7]}) 2m1.351682982s ago: executing program 7 (id=3984): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x51, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "58271f14"}]}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x3f6e, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)='3', 0x1}], 0x1}, 0x0) close(r3) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x3, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x9, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x81, 0x43}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x40, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0x1, 0x3, 0xff, 0x1}, 0x138, &(0x7f0000000140)={0x5, 0xf, 0x138, 0x6, [@generic={0x84, 0x10, 0x1, "919f93f0211e38f17a637a1957e4183b47874d2307287716bd8144eb9a06766eb78b0cd145cd64627dd990c1ca38604f23df9406ce4abc81a3feb9352681fd5b99a1f50050ce92074fad4f809794a25d2ff7269e9fd7853f2aff04d027f94ed6685979e8830f7998c5e4d125364442fd04e75a685494002dd4cbfe7647429288e0"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x75, 0x1, 0x8, 0xf0f, 0x4, [0x3f30]}, @generic={0x74, 0x10, 0x1, "f658a97e9e256940acfff3336e6fb0c6648c04da2d38d7ed6c3211b83a903adcb6d9cd12e3d0f20fd4a4d2712d7720c06bb2a38aba3c587dcf3690c6b3e094036ee5c2d41f8df5e5ae44c3ef7d5cac9672f0a115587ded28fe8e7a1de917f3a564b1d9159e3e9f96b34ccad0228037680b"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x6, 0x0, 0x0, [0x0, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "f88682f4f9e50033315299daa72ecde2"}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}]}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0xc, 0x4d, {0x4d, 0x2, "f330828da5bb8a17703b5eb36acf23ec9665c5876c64d4202c73c9cd6d81b6576b023f4df481e61414b2c4fbfdb6b35cc915ba32a55fe6b41d7f3d38aacaea0435d04ab7e166fd2f741d3a"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200bcb000000385f87fe8fa38dcf2956f63a37bd2c60a57deda3db9f54fb52e40096ea2f45b6f577b529120982ebfcc2c76e0856d0d930f038aa8830688a7f975c4099f9989ebb9e5a2e456ef3dfbb9df67d1d400a82c08d88dc7893de575a7dd9145f889d95a98aa3c94c0afa6d7c778a048f53a6cb0454aadc2ee6071958a55d262b2534892bcacbe0d95512fae5b9a4025095ae13c3a8ecf3c38f77a797b875181fa3429c2864b65cf168d59b70af5a4b8cd7691904b5147c00bb796277160470ea3e76b5dc2120e9b7988c26ca1eeebfb774c4a8ab18158c37e18800936db0bf25ab9a6af164af011e4e88c72bd85c55eba68161da28d6478fdc1c6a0ee7daf5ead29825ec"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x51, {0x4f, "a8b633e0bf8ad2e9befb6977684e6410c916b0284cdf428123f848465c84e64667c39f19e4fad7ad37e69f674ea6c0807abe0ec1b13b58751952e109cd6276ed627b7391be05e42d1afa1b3fe98735"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x7f}}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0x5, 0x3d, {0x3d, 0x23, "497d02b3a1404123704e20a95733959f09932f18bbec900c934978010919412b371ecf5408355ecb7e186fe28871b71f82ffaa5b47f2e4142f8d62"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000540)={0x20, 0x9, 0x1b, "91dc5e8872cbc93720cd1328b881a22f4dfc419f41604070fa72f8"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1b3e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x51, 0x3}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "58271f14"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) (async) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) (async) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x3f6e, 0x4) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="9d", 0x1}], 0x1, &(0x7f00000020c0)=ANY=[], 0xff0}, 0x80) (async) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)='3', 0x1}], 0x1}, 0x0) (async) close(r3) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x3, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x9, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xd, 0x81, 0x43}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x40, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0x1, 0x3, 0xff, 0x1}, 0x138, &(0x7f0000000140)={0x5, 0xf, 0x138, 0x6, [@generic={0x84, 0x10, 0x1, "919f93f0211e38f17a637a1957e4183b47874d2307287716bd8144eb9a06766eb78b0cd145cd64627dd990c1ca38604f23df9406ce4abc81a3feb9352681fd5b99a1f50050ce92074fad4f809794a25d2ff7269e9fd7853f2aff04d027f94ed6685979e8830f7998c5e4d125364442fd04e75a685494002dd4cbfe7647429288e0"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x75, 0x1, 0x8, 0xf0f, 0x4, [0x3f30]}, @generic={0x74, 0x10, 0x1, "f658a97e9e256940acfff3336e6fb0c6648c04da2d38d7ed6c3211b83a903adcb6d9cd12e3d0f20fd4a4d2712d7720c06bb2a38aba3c587dcf3690c6b3e094036ee5c2d41f8df5e5ae44c3ef7d5cac9672f0a115587ded28fe8e7a1de917f3a564b1d9159e3e9f96b34ccad0228037680b"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x6, 0x0, 0x0, [0x0, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "f88682f4f9e50033315299daa72ecde2"}]}, 0x4, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}]}) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0xc, 0x4d, {0x4d, 0x2, "f330828da5bb8a17703b5eb36acf23ec9665c5876c64d4202c73c9cd6d81b6576b023f4df481e61414b2c4fbfdb6b35cc915ba32a55fe6b41d7f3d38aacaea0435d04ab7e166fd2f741d3a"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000a80)={0x34, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x51, {0x4f, "a8b633e0bf8ad2e9befb6977684e6410c916b0284cdf428123f848465c84e64667c39f19e4fad7ad37e69f674ea6c0807abe0ec1b13b58751952e109cd6276ed627b7391be05e42d1afa1b3fe98735"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x7f}}) (async) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0x5, 0x3d, {0x3d, 0x23, "497d02b3a1404123704e20a95733959f09932f18bbec900c934978010919412b371ecf5408355ecb7e186fe28871b71f82ffaa5b47f2e4142f8d62"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000540)={0x20, 0x9, 0x1b, "91dc5e8872cbc93720cd1328b881a22f4dfc419f41604070fa72f8"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}}) (async) 2m1.101572516s ago: executing program 7 (id=3987): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) syz_clone(0xa4003000, 0x0, 0x49, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 2m1.012410379s ago: executing program 7 (id=3988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2717, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x111090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x141000, 0x5e) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 2m0.875484221s ago: executing program 7 (id=3989): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r1, 0x11e, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/228, 0xe4}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x20, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000080)=0x80000001, 0x0, 0x4) close(0x3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet6_tcp_int(r1, 0x11e, 0x1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/228, 0xe4}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x20, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000080)=0x80000001, 0x0, 0x4) (async) close(0x3) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) (async) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) (async) 2m0.423285839s ago: executing program 7 (id=3991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', @remote}) (async) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006028000003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 2m0.047159202s ago: executing program 37 (id=3991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'team_slave_1\x00', @remote}) (async) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd010000000000140000006028000003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 1m47.36851965s ago: executing program 9 (id=4046): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="fee7a3b702762bd4adfb7323429f10f1a29007b0721d7a93695fcf5193758299a1d952eeec86095b7402864cf6129b7c1850e24b4d86747d66585813b4d3255a8ec9a9ef480fc99f8ed180244381c5bd4c272304815aeb73803878923c35dbaa79acc9e7821324af9418a3f8fa134704adaa6b443da818e1273aeba1231c8043cf196da413a6a6a9778a640ecbb0908fa592ce452b618cfabfefb22a78d6055d07435641573bec56a6cf8bb9a7834ea1f0680c5bb21ac4ebdb96e6997aa1b605c6b97d95167d2030"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$caif_stream(0x25, 0x1, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d00)={0x0, 0x6, 0x10}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001100)={{r1}, r4, 0x4, @unused=[0x2dd6, 0x1, 0x1, 0x2], @devid=r5}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0xf10, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, r7, 0x1, 0x70bd28, 0x25dfdffd, {{}, {@val={0x8, 0x1, 0x80035}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x24040894) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc030000382c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0x6e) 1m46.852966205s ago: executing program 9 (id=4048): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x99a42, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000040)='keyring\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = accept$alg(r1, 0x0, 0x0) recvmsg(r5, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x1}, 0x40000102) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r5, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b27975", 0x2e}], 0x2}}], 0x1, 0x8058) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x13}) 1m46.582307801s ago: executing program 9 (id=4049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002240)={'syzkaller1\x00', 0xc201}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="0bca00a5cb0819a02c1d638ca3f2056e"], 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff0200f5ff000000000000000000000187"], 0x340a) 1m45.860456688s ago: executing program 9 (id=4055): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x85494000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f00005f9000/0x3000)=nil, 0x3000, 0x0) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (rerun: 32) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 64) unshare(0x2c060000) (async, rerun: 64) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (rerun: 32) mount$9p_virtio(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@access_any}]}}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf39f80000306beb3b897ff51658f5addefd296311000800080040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x844) (async) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380400001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="1c040080170413"], 0x438}}, 0x0) (async) lseek(r2, 0xfffd, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x10000, 0x7}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00001af000/0x4000)=nil) 1m45.29018394s ago: executing program 9 (id=4059): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x10}, &(0x7f0000000040)=0xc) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000000c0)={0x6, 0x5, 0x6}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000140)) (async) r4 = syz_io_uring_complete(0x0) (async) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000180)="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") quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, 0xffffffffffffffff, &(0x7f0000000280)) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x93eaacae804421f3}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300), 0x10) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) getdents64(r5, &(0x7f0000000380)=""/139, 0x8b) (async) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000000440)) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r4) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x7, 0x70bd29, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'team0\x00'}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x9) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000600)={r1, 0xffffffff, 0x20}, 0xc) (async) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3d) quotactl_fd$Q_GETQUOTA(r8, 0x100445dc1ed91791, 0xee01, &(0x7f0000000640)) (async) ioctl$BLKSSZGET(r2, 0x1268, &(0x7f00000006c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000700)={0x0, 0xbd, [0x10001, 0x800, 0x7, 0x9, 0x4, 0xbd0]}) (async) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000000740)={0x0, "4e192946f8b7b26758d82c7b57cb3fab"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000001740)={r9, "59535785ce2239a97e6c5541e50845bf"}) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x6) read$hiddev(r2, &(0x7f0000002740)=""/83, 0x53) (async) r10 = syz_clone(0x4000200, &(0x7f0000003c80)="65ad1474007c89f51d34740a7312dc6ddab8524a046af1cec98535990f0cb972a1264f938ae14b51c6622b7988ae70d9b1227c32beb6944038d16652e7845d203926832c21baf4b70ebe88de631d3330f3a345a2dbd93846b799a1315923feb0bad9d9b333ae9537d0a7f442c19d66b52f6c409005cda78c1ca51e7911b0600eb03154aa1726", 0x86, &(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0)="726a7d23c08536cc50a8d4a8d294fcc7455ea9453b02e3669202c38fdb4c3b03257eab70e3a0aa79919f297a22a665d93de04c0ba84039117d5c7d9e029b43fb95c0fdde72140cd86de0b6e24bd1a6af1b9f3d067628321d5a803a7187977d83e7dd138d349e07aec8816ac18e37d62f1c505362d20e5c44e2035f6f0ecf8f17e3166811578c8c18315b11d39d60cbb1d28ff26af76e1e905ee0360aa311dcd4316651c627ef128ac4627ffa470db95ded0bf483c8fe8ee0ac2d61da33028b9853ec7098a7b5a26f085c22105ce330bce66ff5d5ddd44b94695c86a89f4ddd905d9a493f9763") (async) getresuid(&(0x7f0000003ec0), &(0x7f0000003f00)=0x0, &(0x7f0000003f40)) sendmsg$netlink(r2, &(0x7f0000006380)={&(0x7f00000027c0)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003c40)=[{&(0x7f0000002800)={0x350, 0x18, 0x300, 0x70bd2c, 0x25dfdbff, "", [@typed={0x4, 0x10}, @generic="e5cb4e866b6269c6c6a663b032e0d097e4e9d80f9e8a4f7e464ef2e2d42557d16b45d2a200cc3fa64436da4982bf8c4d1c696e9f4f7128862d0014b7b10d72e2b0b04ca3da16047015c99e9d16bb5a7d8aa20757f61f6f1b51245d2dc437571891f0c8cc5caf8103c8facb00a5e92a0745ed8a4974fc4542c27b088525f9803eff9d22cced123128f15a127afd7cc42132c81bf10fed4b367b5a8ec57c6fd1857de9cbbd96d3f177f047df9c0478e198155c2e3fda970726e6a03a2728eca3", @nested={0x9d, 0xef, 0x0, 0x1, [@generic="39c09dec619e2daad84baafa2ed136ce55c218432fb63b3887868d6872e2fe8db5ad3240e997c2072271fc430fa245a3ae1536cd19d13d40d309c66495acacf0b56a10a6fcc96d04ef5eda99ec6fa35d0504247a7181e3714f350d3306745be2d6f82797db2aee24d4b9390195ea40edd22ca889f8", @generic="2b05d749bee7faada17af66bd5a3102b", @typed={0x4, 0x111}, @typed={0x8, 0x12, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x4}]}, @nested={0xff, 0x9, 0x0, 0x1, [@generic="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"]}, @generic="a7b842fd3813503cc17fea5d6df2b648bc9f744bdffe6ab1fe69fc9e7224191dc244cf9d1d1e4a558bb5cd908874a1e2e6eb6ac1f60e251ad2847162ed9334afb0e3079adb07598c4a2971c7ef1da2273080b0d035da5f31e1241dde964ba511eaf971856187bca24ba417eb238f3bbba34ec7cd463fc2075ba133eb82fe472ded13e80f86680e2fabaced1ea0eaf6092b9dd0f9b07b5e46759ebf241e8d5296a459668fbc0d803330dfd1625df256123374cc38d6c8f78fbbe522950918cc03c9358397923608d70ca905286e7623ec4d8abc6e79dee3b697e9"]}, 0x350}, {&(0x7f0000002b80)={0x10, 0x29, 0x4, 0x70bd2c, 0x25dfdbfd}, 0x10}, {&(0x7f0000002bc0)={0x105c, 0x42, 0x10, 0x70bd27, 0x25dfdbfe, "", [@nested={0x10, 0x133, 0x0, 0x1, [@typed={0x9, 0x13b, 0x0, 0x0, @str='!B,*\x00'}]}, @nested={0x103c, 0x9, 0x0, 0x1, [@generic="9a904f0a7476599b9d808595edea0310276935b4b3cdea36688678f09971493bb2722419b755acb6f2c118fa3eac59e5ac388514", @generic="aaca76e2420df89511a28f93878132a765b53842ac2eec0a2e13a6f25c0b24a44e89a8caaab9fecfe285e78f14d80113853b1ade8472f1d193a8dc4a7de3b44dd80e060e431bb3fe87954ac5cf0c7f08c70555d195050687ba8cd887c71bd60651cbfe881588588593e58a5a6ab11477f26fc91e77186f6082ffd1f422220055f84340cb804522628bbf3a96dcc2386ceaabf5ce5cc473ce4dfa261cb5ba1085bef300b94b34f4e6609a9d26a7177c6fdbcf9b8b79ba641ff6fa19b4bea0efcf3a130cf69b08dc5110bf205ff52cfc0dd03845081f705bc2dda492c559dd92f3344355c382ce003b3fd2a7549221a68433f308fbc4cf97dcfb391b6ec38cdb6fc9783691b5175cf7af706206169d6f3d1f91b5e1a4381b1db0e42701f57515665616983fdd87354696793d17ba4b28c7cc7f0a589be0945d00c4a9056eaa24a72570348b64e5faad73df4df335a172f0087b5dcedc8a5a7506e2367db1520bc736b4183ee01c6e14b66538c6a66706cc0f7d68cf81c603b6cc09834a7e883e660d96c82fae3325ef94b3dea256801457682bb80d03560e1af247a55d2ce5db0470b4e17866effb7ba55aa32b44233033710b7ebd27c413d79df784ee9360b03cce985bdc49fccf9c62b876859789ec4dac3fa087ae2486e8a9fa298cd280bf6dc218a41917c5c5e4b0eabc13f2c657c19c14c256c46801c12cf68a9314939ec477eb5a5284a6083b063eaf557205f66f320eff1e448535da427605eab442e074b0aff410a24a3650b8403331756ccfb003d79b2d2cc78a466effaef1cb88365e3053f8faf20d2acf1073e9c3bdc357da9ae6882eca103fdf5aac6462eed2de1cba7f5e9fdcd41f6b189575befee3f9717c6ef7c46ccd269c285c5894d1cb0c5555b74813887f95e63cb3999823809cc3a128754ca29f05b99870fe5c850bceed656e3afb28b65495af3d0d7569aceea209c685777d6c76b5077ee26b471a2982ff709393457f4aa7bd2752eea0a7d8a2ab97b6d2f4b95d529b33ac98a798dfe490ed0a20cdd08712a8e491064e0beca919b7e701de8a9413dfd60771cd024b16b49dcd0e8bb84e615bca1d31aa910379941276d40de8c6ff361ff26ef561d530823f049a2720d6459963d6fa17b14fb1acf6b71380fe0c14f44a058d0f075f03f3599a1efc2d02ca1816544113720c6952384ebcca8aea26082ce1ac4f99322053d0773e462607ee50bcb27bff5d0ffead706102d8f7f2d04f3f976b34134a4f8715aed44ba213bd15657413dff992d8d55f10e4f41ddd96abe6b907434727c134d5b3d9329c4d7998e56434fef8fcd768c23d1785822c5a78e6babec77573245721046593eb812d1b3f4489d24de739ff683f1559493616b04171d076de0de53974c764061aa9f1057ad60319bcef471049fa0e76dbeb79594d41bdeb290f5c5efa304df1d9063a6d82024b95fe36bd21335bf5d39e90ec59dfb9b0925bced112efefc0d0dc8529b7aca589f8e2ae826f22c6b2bead088040c3efa97ad61e12c9510fcfd946e3bdfeb05df85366c9fc18b5af5e86fdee2fc0a2a969d4b1378354ac8bd263d2c6f064b88154b24508652e52efbbc47c004a6555a767bde0d2c0ada280044d0e47aa1183710cd703c44e262343db9cd6e882bdc4573f9b1558c22ccd5a03f11feced0994a976cb9a21c1a7bc047dea717ca825fd475306dd15b656c76119eba5ee44f0eda4b9a2c0e6ef934fe67133ba88a98973d41654dea33cf0487bc794ef3072ca4ad9945012a2ae0eaec06a040bd3426204d65b0fe7a954b64a4423c4cb709ab767c3ab69d9cc1922e371adb9688e0db850ee4966bf81352db5c7a0741d454d13abce59576afd7969c8c1e37a2d2e205d63454c22d7c63f6f7a43938345bfb064d2c93eb4668037cab052ee5a6d59c29306222bfb9f7c7e9ae5c43b16d55f4af9ded454fad82bcb95cb8098bb29d2fd10562677b587758ba533ed16dc9ac19aad3c4fbe180d917eb665b6000259223cf4161080143707b7a7c0413f089ea0009811066ab1a87eaafb7a89248ddc45f41aeb40f90ffebb75921ffa4ba4f160cd65d87847b116dbc227b8c93911de753e848859d9cdec106e054123321447789e0ffd87b30fe6b7789c002c70e57285db5984521cdc78d4d684c188f20652846b27c738d5540bbe1217f361caa6f126e88071268a20ddfe233b274905993a95aa4dfdd9c0974df8809d6ccb21e9aa34f68e857c4437655036ee312dc7fd241f349b33675f08111ed6886a89b96e6ebf19fea690b568c4c3de32fafd44c760a7c7459552b829315c9eb1f5db97d9a6c1b82ab28e66afc8a93dba848b5175405389aab5e01e596409e5ae6be6acc3e51b025e9de5ca95371f5bcfc5348f46e61621ed520f64e7dd341f6d571fc83df7ce61a3427adb1ce82bd356864cecf754cca9ad9c3ff33e1864e9c881dbbec7a53cc5220c40362783d68865a7bc1647598886c1f69431dd913b3791481dc008fcc93563673d22c967a9e346f6031d8fd1608e6f02fa1db6fe397c92893f726483faaa696f1b3eb269c215d9780d4d6f943517d6252bc84b07cc917221997cbf22e41f1e21142d9e3a8ae9c919345f101a1dff40671acc57d9145ee5ae9b31d3d0668238728f7646b266d421cd8e4e85df097780c151f98f34dde6c2a3a8b7ac566e601733deb878aa668a5478964fb41ff4d564f80ce6d1ad4212067c68067fa461b0ecf00102f520a47960f1ff6af283967fd428db9a31166fea0b22b48ffd9fa8aa270f7d0a03645bce053192369d9c41c73f779674b348b4c19fd71f0716c951dd00d313f57ab4a4091db597b759893fea0172cb5843b9018cee1ba7bf706a957d9dd276a969e449e2f8d388255ea9fd624669d2efcb4812a45dcf1b91fad5c67a7ab0fb0a1c7173cb9b8dd4e464c4505f82e2b7cc548d2ce9cea2b21e2be5d2ba9f30fef8b55c75d2d39654adc337c0f31da5d5231456b326eaf58a19d295f576839384f7452baf98206ea1a283573c8e4a7147e38105c47dc88397343facc889e8a64c72d68d58180e0ba841f24100bc5ef0f37606712b04f61f997ffae915835ae03d434b21e430433343662a9ed9fce3544f0a1314f72de4e9ab6ed9b29c942564dd435ef4f4a1e509667bf0a467ee4079c8a73b60030dc4e0c96cdd5e546b7acede463d5c866e462b2995486952fc92e0f16d5a8499527504625b9d758b9e87e73c60906314d15223abeea5878b82cfac365e879d04b739179bc51d2d0ba0a4c044eed8f61c692aaabc12e6c67e7316b9a33a23805b3b4d774c9b89a089736cc218de4f2b1691908ab9fa77b46c94b03462db89f093071af0565daa8c6c235a5ac89e8bbd39f91dee131aeb322465797db13af57ea7422160e005257e01a6fe65aff94c431b9df5d5d107c975c49faf146f987aa31fca3aa7876863d6601edd721d92b0905af51e2b7faa9a18e856eb75ad941d5f80c9dfdf6516379021116f72ca96bc79e919fb7237304ee2291d56775e6c773bdab6458dc113d25e057e211f324052a2ea57865a307d8bd133b86387b5aff37f6f8ceaaf31a839a9193fec94e2e78dfefefa43746e54de33f45fc662816d76ff4e20f306b2a88e4e32b2924cb739c3e36c0ae8cc4e38615ef44a173b35f8378cb8bb404ab2d2db37a37e462aaf1eeec78979f1e42fa625c98a8be6371b5c9751b704ad384a2a640c31096627ddcbc0d3d38cdaa216b506a7eeb38d2c4a93e79d6197c938800defb1ac9e157588cdac684a43d0f64445c976de8389b5320487792de940a8f3fded9c2f63cfae0c24f4f075f2618e554a9f24c97dc3b39632e963b745eaa84551408f8e6be96f6cf2c0cdf8a1378081e96e741f6b82b6564b9b80f7b19c93a676dd166c12c3a3ea35fad054e8c2edcfb354d21a646f159538b17ea7e17720da2b67a0548e99a0ca01d1d7b0b3c02e155b4612a6fd933b9ff6fc852ce2e3eee347077ac71ac3a3a6df626ba1332a5a82a24df53c722c5bf4f399c6f031ebb1382b97b6ca6f19f5817255bdfbfee669dffa3c2e34365f389709a38819fe7d5340cc1bb06712722397abc0ac220a275826f0b2ef8f01b69d866569c48a0ca3756733e211479373d21b228a03068c42864a66d46e25c358b9afab4d08a498bb1c92cee553ea4a46a29381309d0bbd73f9a26bb15930e098318a961588f790e2b8ebffd60c4824d88c5221ef235dd433fec2308364f508e99aaa6171680f1a011886a7676f1a1dd032b0a38fb71eed866e9a70eba1b51b26333b64d8199a8f9049553389b5f1f8d68da845c80c73c50cf7ca74434ff63f044635e76151a18f9225454dec672415705dd25b70e59e27541a1f312a30971e9221101e1b3d22e6c0eb6d540152745e915e9b4695841e768b1b2fc3fcca6e2ef6cea575f2c449e6ae171119a3566e20cb42202508a1825c73eba81eff100f2d75f4910eab0ecc1610da01b43ee4a2224d6dd74948d6ce73d9f2aec992d75c5fcea9ca52af42be47d6f458269e78ec6bed07d89e73d781957deac3b79770dfd08161fe2bd3e7a1b8f6be240778e362970775fd4a69e814d133f96ef2a7c5bfd550221f39be50ba260cb30cb2e130030b7d726856cabbace010465d4f1d45f3a4d20237371cbca05e957a6b870c1b0584ca335730554e0cfc1de693f5575333b5ab6cbf91a97f515e6e51480a04d2bbe0af7038f6b559f3d910130eb4c10cd3a7ccc6a96ddc67963bbafb91fc4796435bc17d560bee7026e4d48f9fc2271cb7e37427964dc43d65959766479664515908cec1cf774da2770915c373582b4a53025c6a381cab3483664b5633af99c72bd2d11bd4f37a4c41f670937c4eaa7b57ce7d4260700f3907b924111d457f5c477555501b1f0fab41a4b0b6ee9555d2af4ca485107b278cd6fee9bdb7de67fe8352f3190dbfd7f6f2c9111caed6f607e419348dda660ff3f5b8479b2c5104ef5933a76b45a93cc5ddfdac5719e12006f45bc42d1eb65f6f5367fca21443a308903a46668467d4277a145838e51de13dfb9db654c96cb94cdfefb409e66a02a0770c41fd8eaeb50754855c3181cc6ff9daa47b59d2a95ec473f4f296bb7624dc29a3d97c6a3924fa551ca9556c7d9efdb2698efde22f2489ffb72e29c2297718148d701c6d5f5a3803718c61da8be65a915d4e04a930c9ee320a2f5b1060c0505fc3602ec6a9014a5cd8816a885de031e6bef4e239f0309d3302e2dee77ea11edae92d1988f6f52daf93d554d51a10ee8a3e44fbc50de45991efbbc2cf92ebc3f37a8ec5ab191caae94ae992dbb7ef762cf8468428b8cda40d02a312d1edbb992932860cd6233cde66ceaaf564be29604e27dc72bef5ecfa0cb3f1057eb7590d72e2639ccb918de005d152c059abb483d8119b4492584f76e070d27c3f5d0043d50313b39f3254ce1e12e822fb8d30c275c82f60374cff702d603869e363fd72045717e3b09d650aa4833a4fe6d9bb1780fba611b386f5c558ea9715dd7899a3827d9ce62e377e30851d9dc11f1a7cabcdc0fa2fae16dfab9671c3d56cdf5da13b40ce87fa5e8abcc8431e3d0fd16c93f72b8a099ca211988517d41267d0f4238da73b4aed27605782079181a00e9a58024e10c3664d335ac347f91ceb396b69f65900147213b05c63a6b32f1bfbdc3fc550e5c6e2564da01035a01d42757f1b49fd131a77a3050f9a7e961f607c691268a774e77de65c44978be0c83be31b70d6a478f892cea02d9ebd", @typed={0x4, 0x11f}]}]}, 0x105c}], 0x3, &(0x7f0000006300)=[@cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x20000}, 0x4000800) 1m45.091578482s ago: executing program 9 (id=4061): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) syz_clone(0xa4003000, 0x0, 0x49, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 1m44.812707251s ago: executing program 38 (id=4061): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) syz_clone(0xa4003000, 0x0, 0x49, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x9) 1m33.736851698s ago: executing program 6 (id=4103): modify_ldt$write(0x1, &(0x7f0000000040)={0xf, 0x20001000, 0x2000, 0x0, 0x2, 0x0, 0x1}, 0x10) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) (rerun: 64) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x332a, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async, rerun: 32) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000f40)={[0xfff, 0x5, 0x1000, 0x1, 0x9, 0x1, 0x99, 0x3, 0x9, 0x6, 0x8, 0x0, 0x4, 0xf, 0xf93, 0x4, 0x3, 0x1, 0x40, 0x4, 0x1, 0x6, 0x3, 0x800, 0x674f, 0x3, 0x9ff, 0x800, 0x44a, 0x5, 0x2, 0x5, 0x2, 0xc, 0x8, 0x7fff, 0x7fffffff, 0x5, 0x200, 0x6, 0xfffffff8, 0x5, 0x80000000, 0x2, 0x3, 0xa, 0x7, 0x10001, 0x6, 0x7, 0x80000001, 0x40, 0x800, 0x0, 0x3, 0x453, 0x8, 0x0, 0x5, 0x2f4, 0x3, 0x7c39, 0x0, 0x86, 0x6, 0xc13, 0x7, 0x5, 0x0, 0x5, 0x3ff, 0x8ee, 0x9, 0x1, 0xb, 0xfffffffd, 0x9, 0x0, 0xffff, 0x9, 0x0, 0x2, 0x7fffffff, 0x8, 0x807f, 0x101, 0x6, 0x8, 0x9, 0x401, 0x40, 0x81, 0x80, 0x4, 0x5, 0x3, 0x80000001, 0x6, 0x1, 0xffffffff, 0x101, 0x0, 0xc, 0x10001, 0x5, 0x5307, 0x5, 0x2, 0x8, 0xfffffff8, 0x8001, 0x8, 0x5ca, 0x5, 0x3, 0x7, 0x101, 0x2, 0xfffff7c4, 0x3, 0xf, 0x9, 0x0, 0xfffffffd, 0x7fff, 0x12, 0x81, 0x8, 0x7, 0x0, 0x99, 0x1, 0x1, 0xe, 0x8000, 0x1, 0x8000, 0x3, 0x1000, 0x3, 0x1, 0x8001, 0xd0d5, 0x5, 0x10001, 0x24, 0xfffffffc, 0x9, 0x7, 0x2, 0x9, 0x1bf1, 0x9, 0xc59a, 0x6, 0xffffffff, 0x1000, 0x5, 0x7, 0x0, 0x2, 0x2, 0x3dd, 0x3, 0xff800000, 0x6d6, 0xfffffffe, 0x2, 0x9a83, 0x4, 0xb5af, 0x2da24efa, 0x0, 0x400, 0x4, 0xe52, 0x0, 0x5, 0x6, 0x3, 0x4, 0x4, 0x5, 0x9, 0x8d6, 0x0, 0xc81, 0xfffff6be, 0xa88, 0x4, 0xfffffffb, 0x8, 0x0, 0xfffffffd, 0x6, 0xc, 0x2400000, 0x3, 0xcf3a, 0xffffff80, 0x4, 0x0, 0x3, 0x0, 0x9, 0x2, 0x8000, 0x6, 0x1, 0x5, 0xf, 0x0, 0xf, 0x4, 0x6, 0xa, 0x2, 0x7fff, 0x1, 0x3, 0x3ff, 0x80000001, 0x6, 0x8, 0xab, 0xfffffffe, 0x0, 0x2, 0x8001, 0xd01, 0xeee9, 0x8, 0x9, 0xc, 0x10000, 0xd, 0x7f, 0x5, 0xd, 0x9, 0x3, 0x7, 0x3, 0x3, 0x1, 0xc3, 0x7, 0xfffffff8, 0xffffff46, 0xead, 0x596e, 0x5, 0x2d8, 0x1, 0xc, 0x9, 0x10, 0x2, 0x10001, 0x1, 0x1, 0x7f, 0x9, 0x6, 0xfffffffc, 0x9, 0x8, 0x0, 0x0, 0x231, 0x401, 0x0, 0x8, 0x1, 0x4ae2, 0x1, 0x100, 0x100, 0x5, 0x8, 0xff, 0x401, 0x1b8, 0x5, 0x7a3c, 0x1, 0x6, 0x1, 0xfffffffb, 0x0, 0x0, 0x3, 0x6, 0xa, 0x80000001, 0xfda1, 0xcfaf, 0x2, 0xc000000, 0x8, 0xbc, 0x0, 0x5, 0x240000, 0x0, 0xf199, 0x1, 0x7, 0xffffffff, 0x2, 0xdbb, 0x4, 0x7, 0x200, 0x1000, 0x0, 0x4, 0xfffffff9, 0x3, 0x9, 0x7, 0x1, 0x3, 0x9, 0x5, 0x6, 0x401, 0x1, 0x7082, 0x31, 0x0, 0x6, 0x3, 0x8, 0x9, 0x0, 0xfffffff7, 0x5, 0x8, 0x8, 0xfffffff7, 0x6, 0x0, 0x8, 0x3, 0x4b5c, 0xaded, 0x0, 0x6, 0x3, 0x1, 0x7, 0x3, 0x8, 0x400, 0x19d8981e, 0x9, 0x4, 0xb, 0x7, 0x9, 0x8, 0x35d, 0x1000, 0xb7, 0x1, 0xa, 0x7f, 0x1, 0x5, 0x2, 0x6, 0xfffff0f6, 0x7, 0x5, 0x7, 0x40, 0xa, 0xffff6f41, 0x2, 0x1, 0x6, 0x0, 0x3, 0x7, 0x2, 0x0, 0x6, 0x5, 0x9, 0xc, 0x9, 0x4, 0x0, 0x5, 0x9, 0xffffffff, 0x24f2, 0x3, 0x8, 0x4, 0x1000, 0x3, 0x3, 0x2, 0x6, 0x9, 0x3, 0xdf, 0x6, 0x2, 0x1, 0x1, 0xffffffff, 0x1, 0x97b, 0x3, 0xae, 0x3, 0xfffffff8, 0x0, 0x3, 0x6, 0x0, 0x9, 0xfffffff9, 0x5, 0x2, 0x3, 0x1, 0xb4, 0xb3d2, 0xfff, 0x3, 0xe, 0x31, 0x6, 0x6, 0x100, 0x0, 0x7, 0x8, 0xfd, 0x6, 0x8, 0x5, 0xffffffff, 0xffffbb39, 0x1, 0x0, 0x16ff, 0x5, 0xf, 0x6, 0x4, 0x5, 0x3, 0x4, 0x88d, 0x8, 0xc2, 0x4, 0x5, 0x1, 0x7, 0x7ff, 0x5, 0x4, 0x5, 0x1, 0x3, 0x9, 0x400, 0xa4e, 0x8001, 0x9, 0x6, 0x9, 0x8ea6, 0x3, 0xffffc270, 0x1, 0x2, 0x1, 0x5, 0x2, 0xb4f, 0x3, 0xb90, 0x0, 0x2, 0x100, 0x4, 0x6, 0xffff8000, 0x0, 0x5, 0x8, 0xffb, 0x6, 0xd, 0x5, 0x4, 0x5, 0x1, 0x9, 0x8000, 0x8, 0x8, 0xaab2, 0x5, 0x0, 0x5, 0x2, 0x3ff, 0x4, 0x5, 0x95f0, 0x10, 0x9, 0x0, 0x7ff, 0x9, 0x2000000, 0x2, 0xe7, 0x9cf, 0x401, 0x9, 0x1ff, 0x8f, 0x0, 0xc, 0x3, 0x8, 0x3ff, 0x4, 0xffffff36, 0x401, 0x7fffffff, 0x7ff, 0x5, 0x5, 0x3f0516f3, 0x0, 0x1ff, 0x30000000, 0x8, 0x9, 0x70e4, 0x24f1, 0x6, 0x0, 0x6, 0x3, 0x8, 0x8000, 0x3, 0x4, 0xb6, 0x1000000, 0x2, 0x804, 0x8, 0xa, 0x5, 0x136d, 0x3, 0x8001, 0x4, 0x706c, 0x5, 0x0, 0xbe880000, 0x1, 0x9, 0x9, 0x9, 0xba64, 0x1, 0x0, 0x401, 0xf, 0x6, 0xf8, 0x5, 0x560, 0x0, 0x9, 0x10000, 0x7, 0x5, 0x4, 0x6, 0x8a, 0x400, 0x87a, 0x20000000, 0x7, 0x8, 0x100, 0x1934f7ae, 0x6, 0xe, 0x40, 0x8, 0x5, 0x8, 0x7, 0xf88, 0xdb, 0x1, 0xfaeb, 0x2, 0xff, 0x7f, 0x0, 0x3, 0x4, 0x10002, 0x4, 0x8, 0x101, 0x4, 0x5, 0x6, 0x1d2214b, 0x8, 0x80, 0x7fff, 0x1, 0x8, 0x7, 0x2, 0x3, 0x400, 0x4, 0x3, 0x3, 0x9, 0x3, 0x9, 0xffffffff, 0xf, 0x9, 0xce, 0x7, 0xee1, 0x0, 0x0, 0x5, 0x7, 0x1ff, 0xffffffff, 0x8, 0x0, 0x2, 0x8, 0xe7a6, 0xb, 0x40, 0x2, 0x0, 0x7, 0x1000, 0x6, 0xe, 0x0, 0x7, 0x7fffffff, 0xbb66, 0x6, 0x604f, 0x2, 0xa, 0x101, 0x9, 0x6, 0x6, 0x7, 0x18691043, 0x4, 0x3, 0x5, 0xb96, 0x40, 0x81, 0xfc, 0x0, 0x8, 0x200, 0x1, 0xfffffff2, 0x0, 0x2, 0x7, 0x6, 0x0, 0x8, 0x644, 0x7, 0xfffffffc, 0x4, 0x2, 0x9, 0x4c, 0x0, 0x7fff, 0x3, 0x2, 0x8, 0xfffffffa, 0xffff0001, 0xffff, 0x2, 0x9, 0x4, 0x5, 0x8, 0x1ff, 0x9, 0x8e, 0x4, 0x1, 0xb4, 0x4, 0x7, 0x81, 0x2, 0x87, 0x800, 0x0, 0x80000001, 0x1, 0xb, 0x2, 0x8, 0x80, 0x6, 0x7, 0xe32, 0x8001, 0x0, 0x400, 0x7977, 0xfff, 0x4, 0x5, 0x0, 0x0, 0x5, 0x2, 0x47, 0x0, 0x9, 0xff, 0x800, 0xdeb9, 0x0, 0x8, 0x2, 0x8, 0x359d, 0x868f, 0x1, 0x8, 0xb, 0x1, 0x80, 0x1, 0x6, 0xfffffffa, 0x7ff, 0x5, 0x6, 0xea, 0xffffffff, 0x0, 0x2, 0x4, 0xd, 0x10, 0x800, 0xffff, 0xfffffffc, 0x4, 0x1000, 0x5, 0x8, 0x2, 0xffffffff, 0xb, 0x5, 0x7, 0x6, 0x7, 0x4, 0x2, 0x200, 0x9, 0x40, 0x0, 0x2, 0x1, 0x9, 0x1, 0x4, 0x4, 0x0, 0xe, 0xfffffff0, 0x1, 0x5, 0x4, 0xc2, 0xffffffab, 0x6, 0x7, 0x9, 0xb0d, 0x7, 0x7, 0x3, 0x5, 0x7, 0x6, 0x2, 0x0, 0x4, 0x1ba, 0x800, 0x5, 0x5, 0xf6, 0x3, 0x8, 0x8, 0x2, 0xf0a, 0x4, 0x1, 0x59, 0x4, 0x4, 0x1000, 0xfffffffe, 0x9, 0xb445, 0x800, 0x8001, 0x9, 0x7, 0x3, 0xaca, 0x1, 0x8001, 0x0, 0x4, 0x1, 0x0, 0x6, 0xcfe, 0x77, 0xf20c, 0xd66, 0x81, 0x0, 0x2, 0x7, 0x2, 0x1, 0x2, 0x7, 0x9, 0x3, 0x8, 0x0, 0x9, 0x4, 0x1, 0x0, 0x8, 0xa, 0x80000000, 0x3, 0x1000, 0x8, 0x3, 0x7, 0xa876, 0xd9f9, 0xffffffff, 0x7, 0x45, 0x3, 0xff, 0x101, 0xbefb, 0x95, 0x4, 0x7, 0x2c, 0x1, 0x9c, 0x10001, 0x8, 0x3, 0x80000001, 0xef, 0x3, 0x7, 0x7, 0x465, 0xfff, 0x8, 0x5, 0x2, 0x404d, 0x52aa5086, 0x6f, 0x1, 0x5, 0x9, 0x4, 0x8, 0x4, 0xfffffff9, 0x3, 0x8001, 0xffff8000, 0x8, 0xfffffeff, 0x2, 0xc8f5, 0x7, 0x2, 0x9, 0xbb, 0xb7, 0x7, 0x7, 0x10, 0xd29, 0x6, 0x7, 0x3, 0x4, 0x2, 0x4, 0x80000001, 0xbb0, 0x1d46, 0x10000, 0x23, 0x0, 0xfffffff8, 0xffff, 0x81, 0x7, 0xe0000000, 0x5, 0xfbb, 0x0, 0xcb, 0x84, 0x101, 0x100, 0x1, 0x0, 0xe6, 0x5, 0x80000000, 0x3e, 0x6, 0x1, 0x3ff, 0x1, 0x62f6, 0x3, 0x7, 0x80000000, 0x7, 0x522, 0xd, 0x5, 0x5, 0x21, 0xffffffff, 0x3, 0xffffffff, 0xe, 0x5, 0x7f, 0x8, 0x8, 0xe9, 0x7, 0x6, 0x6, 0x0, 0xffff, 0x8001, 0x2, 0x9, 0x3, 0x0, 0x1, 0x8, 0x9, 0xb8, 0x8, 0xbb62, 0x2, 0x8, 0x9d, 0xc, 0x9bd, 0x8, 0x4, 0x9b10, 0x7, 0x6, 0xfffffffd]}) (async) syz_clone(0x26000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m33.50316338s ago: executing program 6 (id=4104): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x38, r4, 0x103, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x2002c051}, 0x4000) sendfile(r5, r1, &(0x7f0000000040)=0xd, 0x8) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f00000003c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x101, 0x2, 0xc7, 0x4, 0x1001, 0x4, 0x4, 0xffff, 0x3, 0x104, 0xffffffff, 0x1001, 0x101, 0x800800, 0xa239, 0x7fffffff, 0xded9, 0xc7d5, 0x7, 0x40000003, 0x89, 0xcaa7, 0x2, 0x5ca3, 0xb, 0x3, 0x3c, 0xb, 0x1, 0xefcb, 0xfffffff7]}) 1m33.452358327s ago: executing program 6 (id=4105): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x84, 0x4, "06bc7c4f"}, 0x0}) 1m30.952760323s ago: executing program 6 (id=4115): r0 = socket$kcm(0x10, 0x4, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) accept$ax25(r3, 0x0, &(0x7f00000024c0)) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file1/../file0', [{0x20, '1\x01\x9e\x00\x00\xf6\xb2\xa1\xec\x13\vi\x06\x05cZe\x87\xf6\xbaj\x85+\xbc\xf8T\xc7a\xf0\xe3?\x01\x83\f\x0e\xac\xec8\x8e\x8b\xce\xe6\xc1\xda\xf1\xb6\xfe\xb5D\xf1\xea^\\}]s}\xe4zB|\xd9>.TF\xd3g\x90\xafa\x13\xeb\xbbN\xb7i\v\x82\x02\xfb\x95\f\xe8J\xef\xee\xaf\xea\xf3]<\xd9\xa5\x02\n\xaa\xe2\xcdZ\xda\x85\xdd*\x13\x0e&.\x1a\xaf\"\x11\x97zS\xbc\xaan~/U\xe0>\xfc\x17S\x9b\xf5\xf7\xdb\xbeH\xc2\v\xa3r\a\xdaC\xc9\xee{\xa3\xd2IL\xe4\")\xd9s9Y&UiO\xcd\xf4\xd3>\xd2\x98\x8d\x1d~\xd3}\x90\xb3i=\xfd-\x7f\xb9Jdq(\xd8\xfe\x9cu\x12\xe9\x15y \x91\xc2\xcfN\xc0\x9c\xbb8x#\xc8L\xbcd\x00'/217}, {0x20, '\x7f}'}]}, 0xf1) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582003c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000002500)=[@in_dx={0x69, 0x20, {0xed48, 0x1}}, @wr_drn={0x68, 0x20, {0x2, 0x7}}, @wr_crn={0x67, 0x20, {0xa, 0x8000000000000000}}, @uexit={0x0, 0x18, 0x6}, @set_irq_handler={0xc8, 0x20, {0xd2, 0x40000000001}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c01, 0x2, 0x0, 0x8}}, @out_dx={0x6a, 0x28, {0xcd74, 0x0, 0xffffffff}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @cpuid={0x64, 0x18, {0xb1be, 0x28000}}, @nested_vmresume={0x130, 0x18, 0x200000000000003}, @rdmsr={0x66, 0x18, {0x8e6}}, @nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x8d, 0xb392}}, @uexit={0x0, 0x18, 0x10}, @rdmsr={0x66, 0x18, {0x25b}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x407, 0x0, 0x6, 0x48}}, @code={0xa, 0x6c, {"0f01cb66baf80cb8ae50a189ef66bafc0c66b89b2e66eff0f752210f017ee13e400f06470f01df0f01df0f20d835080000000f22d8b9800000c00f3235008000000f3048b8ea020000000000000f23c80f21f8350c0090000f23f8"}}, @nested_vmlaunch={0x12f, 0x18, 0x4}, @wr_drn={0x68, 0x20, {0x6, 0x8000000000000000}}], 0x2dc}) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0x80, {0xfec00000, 0x60000, 0x1}}, "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", "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"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint={0x2, 0x400}}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000205308130300010000000109022d0001000008090904000903030000000921f7ff000122030009058103000000"], 0x0) setfsgid(0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r8, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) 1m29.337760539s ago: executing program 6 (id=4123): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r3], 0x3c}}, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x800}, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f00002e5000/0x4000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) 1m28.478901091s ago: executing program 6 (id=4125): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r1, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x5, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000540)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) 1m28.177639435s ago: executing program 39 (id=4125): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r1, 0x0, &(0x7f000060c000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000580)={0x28, 0x5, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000540)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) 4.539600459s ago: executing program 3 (id=4590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='f2fs\x00', 0x400080, &(0x7f00000001c0)='discard') recvfrom(r2, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, 0x0) ioctl$KVM_GET_SREGS2(r1, 0x8140aecc, &(0x7f0000000300)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000340)="650f6f34343566b842000f00d88705006900b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217ac4e181592f", 0x32}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.131601075s ago: executing program 3 (id=4591): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0x13c2}, @in={0x2, 0x4e20, @empty}], 0x2c) 4.003050138s ago: executing program 3 (id=4593): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x4, 0xfffff000, 0xa2, 0xffff7fff, 0x8}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x54, &(0x7f0000000180)=[@in6={0xa, 0xce23, 0x100, @local, 0x9}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x2}, @in6={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}]}, &(0x7f0000000200)=0x10) socketpair(0x18, 0x6, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r2, 0x1ff}, 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r1, 0x4) 3.881072026s ago: executing program 3 (id=4595): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="03002bbd7000ff0a00251c00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x488c1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd, 0x6c}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000100ac1414bb"], 0x6c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x3f) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="260fab4800b904020000b8844b0000ba000000000f30dd880200000066ba210066b8f08366ef64660f38827da5b8010000000f01c1430f00d00f71f000c4221daa32c744240000000000c744240200000000c7442406000000000f011c24", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r11, 0x4024700a, &(0x7f0000000000)={0x2b, 0x10, 0x0, 0x2, 0xd, 0xad, 0x5, 0x2, 0x1}) 3.563491471s ago: executing program 3 (id=4598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000040) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000180), 0xffffffffffffffff, 0x2) ioctl$LOOP_CONFIGURE(r4, 0x1277, &(0x7f0000000400)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000, 0x0, 0x12, 0xffffffff, 0xc, "16e8a2ab78fc979fe00d96072000001ea89de2b7fb0000e62080f8720000000000000000000300", "2809e8dbe108598948624ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a00000020000000000000000c100"}}) read(r3, &(0x7f00000000c0)=""/81, 0x51) 2.970629192s ago: executing program 8 (id=4608): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) (async) 2.635159654s ago: executing program 8 (id=4610): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @raw_data="fee7a3b702762bd4adfb7323429f10f1a29007b0721d7a93695fcf5193758299a1d952eeec86095b7402864cf6129b7c1850e24b4d86747d66585813b4d3255a8ec9a9ef480fc99f8ed180244381c5bd4c272304815aeb73803878923c35dbaa79acc9e7821324af9418a3f8fa134704adaa6b443da818e1273aeba1231c8043cf196da413a6a6a9778a640ecbb0908fa592ce452b618cfabfefb22a78d6055d07435641573bec56a6cf8bb9a7834ea1f0680c5bb21ac4ebdb96e6997aa1b605c6b97d95167d2030"}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$caif_stream(0x25, 0x1, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000d00)={0x0, 0x6, 0x10}) r6 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r6, 0xd3fc6000) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x9, 0xf, 0x10000, 0x6, 0x8, 0xfffffeff, 0x2174]}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001100)={{r1}, r4, 0x4, @unused=[0x2dd6, 0x1, 0x1, 0x2], @devid=r5}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0xf10, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, r9, 0x1, 0x70bd28, 0x25dfdffd, {{}, {@val={0x8, 0x1, 0x80035}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}}, 0x24040894) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) write$binfmt_script(r11, &(0x7f0000000200), 0xfffffd9d) 2.634741398s ago: executing program 3 (id=4611): read(0xffffffffffffffff, 0x0, 0x0) setreuid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000d40)=ANY=[@ANYBLOB="20089f006d3a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="5d85178d6747108b6524"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xf}}) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x5}, 0xb) 2.522273471s ago: executing program 8 (id=4613): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x6000000, 0x2) 2.383262455s ago: executing program 8 (id=4614): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x72, 0x8, 0x9, 0x10000004, 0x5, 0xfffffbf9, 0x7fff, 0x40000000, 0x800000, 0x100, 0x5, 0x1, 0x1, 0xffff3840, 0x40000004, 0xf, 0x0, 0x0, 0x3, 0x3fffffff, 0x86, 0xfffffffd, 0x0, 0x20001e56, 0x437, 0xfff, 0x3f, 0x7fffffff, 0x7, 0x8000000, 0xfffffff8]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000c23000/0x3000)=nil, 0x3000}, 0x1}) 2.373889449s ago: executing program 8 (id=4615): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x500, 0x300, 0x300, 0x800, 0xffffffff, 0x2, 0x0, 0x1, {0x0, 0x6000}, {0x5, 0x2, 0x1}, {0x4000000}, {0x0, 0x8}, 0x0, 0x40, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x24, 0x0, 0x2}) (async, rerun: 32) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (rerun: 32) accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @default}, [@null, @netrom, @remote, @bcast, @null, @netrom, @remote, @null]}, &(0x7f0000000080)=0x48, 0x80000) (async) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090501", @ANYRES8], 0x0) 1.755889092s ago: executing program 8 (id=4618): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xc14}}, './file0\x00'}) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f00000009c0), 0x4) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 1.119841515s ago: executing program 0 (id=4619): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x1ff, 0x5, 0x3ff, 0x2}, 0x8) (async) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x1ff, 0x5, 0x3ff, 0x2}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) (async) listen(r1, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000240)=[{0x3, 0x1, {0x0, 0x1}, {0x0, 0xf0, 0x1}, 0xff, 0xc2eee2ca1137c465}, {0x2, 0x2, {0x0, 0xff, 0x1}, {0x0, 0x0, 0x4}, 0xff, 0xff}, {0x1, 0x1, {0x2, 0xf0, 0x1}, {0x0, 0x0, 0x1}, 0xff, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x3}, {0x1, 0xf0, 0x4}, 0xfe}, {0x0, 0x0, {0x0, 0x1, 0x4}, {}, 0xfd, 0xff}, {0x2, 0x1, {0x2, 0xff0049e53bd0efc9, 0x4}, {0x2, 0x7f, 0x2}, 0xfe, 0x2}, {0x0, 0x2, {0x0, 0x1}, {0x2, 0xf0, 0x3}, 0xfd, 0xfe}, {0x0, 0x3, {0x0, 0x1, 0x3}, {0x3, 0x1, 0x4}, 0x2, 0xfd}], 0x100) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000008050005000a000000050001800600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c000780080013"], 0x58}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0x0) memfd_secret(0x0) (async) memfd_secret(0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(r4, &(0x7f0000000100)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0x9f, 0x80, 0x6, 0x7}}}, 0xa) 739.783201ms ago: executing program 4 (id=4620): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x6, 0x80}, {0x157, 0x3, 0xfd, 0x5}, {0x4, 0x9, 0x1, 0x80000001}]}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 739.469783ms ago: executing program 4 (id=4621): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) umount2(&(0x7f0000000200)='./file0\x00', 0x2) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) (rerun: 64) 620.680304ms ago: executing program 4 (id=4622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000", 0x54}, {&(0x7f0000000480)="86d0f724", 0x4}], 0x2) 572.868824ms ago: executing program 4 (id=4623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x27) 499.213422ms ago: executing program 4 (id=4624): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x11b000, 0x2c, 0x34}, 0x18) execveat(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)={[&(0x7f0000001080)='(\x00', 0x0, &(0x7f0000001100)='X(-,\\}}*\'-$@$\x00', &(0x7f0000001140)='$-\x00', &(0x7f0000001180)='\x00', &(0x7f00000011c0)='{..\x00']}, &(0x7f0000001280)={[&(0x7f0000001240)='{/\x00']}, 0x1000) symlinkat(&(0x7f00000012c0)='./file0\x00', r0, &(0x7f0000001300)='./file0/file0\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 499.082461ms ago: executing program 4 (id=4625): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x1, r2, 0x2, 0x80000}) 253.267754ms ago: executing program 0 (id=4626): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/31, 0x1f}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 167.022703ms ago: executing program 0 (id=4627): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x7}, 0x8) 91.318445ms ago: executing program 0 (id=4628): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) semop(0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='children\x00') lseek(r1, 0x6, 0x0) 84.05ms ago: executing program 0 (id=4629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084006872baf80c66b860b4498c66efbafc0c66b80e000000670fc71964f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f300f23c80f21f86635040040000f23f8b8f4008ee0", 0x55}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=4630): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x51db9000) fallocate(r0, 0x10, 0x200, 0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000000e4cf55784d31749f3a6317769813e8e0d2d62ea8831c6d090db50522e1a1e54d910b0f771fe8da34fae12f8329f8c9fd8d8b3aa7841b139dfbadd65b5deec544440a122322d72ed4609c599df7ef1fb61cd7a5ead47c55d767"], 0x3f9, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) kernel console output (not intermixed with test programs): ck_lvl+0x189/0x250 [ 860.239098][T20420] ? __pfx____ratelimit+0x10/0x10 [ 860.239126][T20420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.239148][T20420] ? __pfx__printk+0x10/0x10 [ 860.239179][T20420] ? __might_fault+0xb0/0x130 [ 860.239218][T20420] should_fail_ex+0x414/0x560 [ 860.239248][T20420] _copy_from_iter+0x1cd/0x1630 [ 860.239275][T20420] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 860.239317][T20420] ? __pfx__copy_from_iter+0x10/0x10 [ 860.239343][T20420] ? policy_nodemask+0x27c/0x720 [ 860.239371][T20420] ? page_copy_sane+0x4e/0x280 [ 860.239399][T20420] copy_page_from_iter+0xdd/0x170 [ 860.239430][T20420] anon_pipe_write+0x9f8/0x1460 [ 860.239452][T20420] ? __pfx_aa_file_perm+0x10/0x10 [ 860.239483][T20420] ? anon_pipe_write+0xbc1/0x1460 [ 860.239520][T20420] ? __pfx_anon_pipe_write+0x10/0x10 [ 860.239539][T20420] ? common_file_perm+0x1b5/0x220 [ 860.239562][T20420] ? __pfx_autoremove_wake_function+0x10/0x10 [ 860.239591][T20420] ? bpf_lsm_file_permission+0x9/0x20 [ 860.239609][T20420] ? security_file_permission+0x75/0x290 [ 860.239649][T20420] vfs_write+0x5c9/0xb30 [ 860.239683][T20420] ? __pfx_anon_pipe_write+0x10/0x10 [ 860.239716][T20420] ? __pfx_vfs_write+0x10/0x10 [ 860.239755][T20420] ? __fget_files+0x2a/0x420 [ 860.239788][T20420] ksys_write+0x145/0x250 [ 860.239820][T20420] ? __pfx_ksys_write+0x10/0x10 [ 860.239852][T20420] ? do_syscall_64+0xbe/0xf80 [ 860.239885][T20420] do_syscall_64+0xfa/0xf80 [ 860.239914][T20420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.239934][T20420] ? clear_bhb_loop+0x60/0xb0 [ 860.239959][T20420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.239979][T20420] RIP: 0033:0x7f8384f8f749 [ 860.239998][T20420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.240017][T20420] RSP: 002b:00007f8385ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 860.240039][T20420] RAX: ffffffffffffffda RBX: 00007f83851e5fa0 RCX: 00007f8384f8f749 [ 860.240055][T20420] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 860.240069][T20420] RBP: 00007f8385ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 860.240081][T20420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.240094][T20420] R13: 00007f83851e6038 R14: 00007f83851e5fa0 R15: 00007fffc1bac548 [ 860.240128][T20420] [ 860.545946][T20422] comedi comedi3: comedi_config --init_data is deprecated [ 860.630139][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4400'. [ 860.652378][T20424] openvswitch: netlink: Flow key attr not present in new flow. [ 860.674109][T20431] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.4403'. [ 860.750461][T20435] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4404'. [ 860.812937][T20440] ieee802154 phy0 wpan0: encryption failed: -22 [ 860.921436][T16009] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 860.982295][T20446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4408'. [ 860.992773][T20446] netlink: 'syz.0.4408': attribute type 8 has an invalid length. [ 861.030167][T20448] FAULT_INJECTION: forcing a failure. [ 861.030167][T20448] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 861.044320][T20448] CPU: 1 UID: 0 PID: 20448 Comm: syz.0.4409 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.044348][T20448] Tainted: [L]=SOFTLOCKUP [ 861.044355][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.044366][T20448] Call Trace: [ 861.044374][T20448] [ 861.044383][T20448] dump_stack_lvl+0x189/0x250 [ 861.044407][T20448] ? __pfx____ratelimit+0x10/0x10 [ 861.044422][T20448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.044432][T20448] ? __pfx__printk+0x10/0x10 [ 861.044449][T20448] ? fs_reclaim_acquire+0x7d/0x100 [ 861.044463][T20448] should_fail_ex+0x414/0x560 [ 861.044490][T20448] prepare_alloc_pages+0x22b/0x650 [ 861.044515][T20448] __alloc_frozen_pages_noprof+0x123/0x370 [ 861.044539][T20448] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 861.044561][T20448] ? policy_nodemask+0x27c/0x720 [ 861.044572][T20448] ? try_to_migrate+0x302/0x3d0 [ 861.044583][T20448] alloc_pages_mpol+0x232/0x4a0 [ 861.044597][T20448] alloc_migration_target_by_mpol+0x2e6/0x590 [ 861.044615][T20448] migrate_pages_batch+0x801/0x35e0 [ 861.044636][T20448] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 861.044654][T20448] ? __pfx_migrate_pages_batch+0x10/0x10 [ 861.044679][T20448] migrate_pages+0x1b9a/0x28e0 [ 861.044700][T20448] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 861.044717][T20448] ? __pfx_migrate_pages+0x10/0x10 [ 861.044727][T20448] ? mas_next_node+0xafd/0xd60 [ 861.044745][T20448] ? mas_next_slot+0xc27/0xcf0 [ 861.044771][T20448] __se_sys_mbind+0xa47/0xc40 [ 861.044788][T20448] ? __pfx_vfs_write+0x10/0x10 [ 861.044806][T20448] ? __pfx___se_sys_mbind+0x10/0x10 [ 861.044826][T20448] ? fput+0xa0/0xd0 [ 861.044838][T20448] ? ksys_write+0x22a/0x250 [ 861.044853][T20448] ? __pfx_ksys_write+0x10/0x10 [ 861.044869][T20448] ? __x64_sys_mbind+0x21/0xf0 [ 861.044886][T20448] do_syscall_64+0xfa/0xf80 [ 861.044900][T20448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.044911][T20448] ? clear_bhb_loop+0x60/0xb0 [ 861.044923][T20448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.044933][T20448] RIP: 0033:0x7fdf12f8f749 [ 861.044944][T20448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.044954][T20448] RSP: 002b:00007fdf13e2b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 861.044966][T20448] RAX: ffffffffffffffda RBX: 00007fdf131e5fa0 RCX: 00007fdf12f8f749 [ 861.044974][T20448] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 861.044982][T20448] RBP: 00007fdf13e2b090 R08: 0000000000000000 R09: 0000000000000002 [ 861.044988][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 861.044995][T20448] R13: 00007fdf131e6038 R14: 00007fdf131e5fa0 R15: 00007fff86718828 [ 861.045012][T20448] [ 861.156903][T16009] usb 4-1: config 0 has an invalid interface number: 152 but max is 0 [ 861.162405][T17991] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 861.187802][T16009] usb 4-1: config 0 has no interface number 0 [ 861.187856][T16009] usb 4-1: New USB device found, idVendor=31b2, idProduct=0011, bcdDevice=22.45 [ 861.187881][T16009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.198546][T16009] usb 4-1: config 0 descriptor?? [ 861.203074][T16009] usb 4-1: unknown interface protocol 0xa5, assuming v1 [ 861.335570][T17991] usb 5-1: device descriptor read/64, error -71 [ 861.339288][T16009] usb 4-1: cannot find UAC_HEADER [ 861.416328][T20428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.429622][T16009] snd-usb-audio 4-1:0.152: probe with driver snd-usb-audio failed with error -22 [ 861.434328][T20428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.517379][T20457] FAULT_INJECTION: forcing a failure. [ 861.517379][T20457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 861.519558][T16009] usb 4-1: USB disconnect, device number 51 [ 861.532381][T20457] CPU: 1 UID: 0 PID: 20457 Comm: syz.0.4412 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.532412][T20457] Tainted: [L]=SOFTLOCKUP [ 861.532420][T20457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 861.532432][T20457] Call Trace: [ 861.532441][T20457] [ 861.532449][T20457] dump_stack_lvl+0x189/0x250 [ 861.532474][T20457] ? __pfx____ratelimit+0x10/0x10 [ 861.532500][T20457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.532519][T20457] ? __pfx__printk+0x10/0x10 [ 861.532550][T20457] ? fs_reclaim_acquire+0x7d/0x100 [ 861.532576][T20457] should_fail_ex+0x414/0x560 [ 861.532604][T20457] prepare_alloc_pages+0x22b/0x650 [ 861.532631][T20457] __alloc_frozen_pages_noprof+0x123/0x370 [ 861.532655][T20457] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 861.532680][T20457] ? __pfx__copy_from_iter+0x10/0x10 [ 861.532705][T20457] ? policy_nodemask+0x27c/0x720 [ 861.532725][T20457] ? __pfx___might_resched+0x10/0x10 [ 861.532758][T20457] alloc_pages_mpol+0x232/0x4a0 [ 861.532784][T20457] alloc_pages_noprof+0xa9/0x190 [ 861.532807][T20457] anon_pipe_write+0xbf0/0x1460 [ 861.532827][T20457] ? __pfx_aa_file_perm+0x10/0x10 [ 861.532857][T20457] ? anon_pipe_write+0xbc1/0x1460 [ 861.532891][T20457] ? __pfx_anon_pipe_write+0x10/0x10 [ 861.532909][T20457] ? common_file_perm+0x1b5/0x220 [ 861.532936][T20457] ? bpf_lsm_file_permission+0x9/0x20 [ 861.532954][T20457] ? security_file_permission+0x75/0x290 [ 861.532991][T20457] vfs_write+0x5c9/0xb30 [ 861.533023][T20457] ? __pfx_anon_pipe_write+0x10/0x10 [ 861.533050][T20457] ? __pfx_vfs_write+0x10/0x10 [ 861.533087][T20457] ? __fget_files+0x2a/0x420 [ 861.533119][T20457] ksys_write+0x145/0x250 [ 861.533149][T20457] ? __pfx_ksys_write+0x10/0x10 [ 861.533179][T20457] ? do_syscall_64+0xbe/0xf80 [ 861.533209][T20457] do_syscall_64+0xfa/0xf80 [ 861.533237][T20457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.533257][T20457] ? clear_bhb_loop+0x60/0xb0 [ 861.533280][T20457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.533299][T20457] RIP: 0033:0x7fdf12f8f749 [ 861.533316][T20457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.533334][T20457] RSP: 002b:00007fdf13e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 861.533355][T20457] RAX: ffffffffffffffda RBX: 00007fdf131e5fa0 RCX: 00007fdf12f8f749 [ 861.533369][T20457] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 861.533382][T20457] RBP: 00007fdf13e2b090 R08: 0000000000000000 R09: 0000000000000000 [ 861.533395][T20457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 861.533407][T20457] R13: 00007fdf131e6038 R14: 00007fdf131e5fa0 R15: 00007fff86718828 [ 861.533439][T20457] [ 861.586704][T17991] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 861.853333][T20461] comedi comedi3: comedi_config --init_data is deprecated [ 861.948186][T17991] usb 5-1: device descriptor read/64, error -71 [ 862.058144][ T37] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 862.067037][T17991] usb usb5-port1: attempt power cycle [ 862.198471][ T37] usb 9-1: device descriptor read/64, error -71 [ 862.278716][T16009] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 862.292483][T15304] Bluetooth: hci0: command 0x0406 tx timeout [ 862.409169][T17991] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 862.423691][T20472] FAULT_INJECTION: forcing a failure. [ 862.423691][T20472] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 862.433246][T16009] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 862.437230][T20472] CPU: 1 UID: 0 PID: 20472 Comm: syz.3.4418 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.437260][T20472] Tainted: [L]=SOFTLOCKUP [ 862.437268][T20472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.437280][T20472] Call Trace: [ 862.437293][T20472] [ 862.437302][T20472] dump_stack_lvl+0x189/0x250 [ 862.437326][T20472] ? __pfx____ratelimit+0x10/0x10 [ 862.437352][T20472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 862.437371][T20472] ? __pfx__printk+0x10/0x10 [ 862.437401][T20472] ? fs_reclaim_acquire+0x7d/0x100 [ 862.437428][T20472] should_fail_ex+0x414/0x560 [ 862.437454][T20472] prepare_alloc_pages+0x22b/0x650 [ 862.437481][T20472] __alloc_frozen_pages_noprof+0x123/0x370 [ 862.437506][T20472] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 862.437533][T20472] ? policy_nodemask+0x27c/0x720 [ 862.437553][T20472] ? try_to_migrate+0x302/0x3d0 [ 862.437574][T20472] alloc_pages_mpol+0x232/0x4a0 [ 862.437601][T20472] alloc_migration_target_by_mpol+0x2e6/0x590 [ 862.437634][T20472] migrate_pages_batch+0x801/0x35e0 [ 862.437674][T20472] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 862.437708][T20472] ? __pfx_migrate_pages_batch+0x10/0x10 [ 862.437756][T20472] migrate_pages+0x1b9a/0x28e0 [ 862.437794][T20472] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 862.437828][T20472] ? __pfx_migrate_pages+0x10/0x10 [ 862.437848][T20472] ? mas_next_node+0xafd/0xd60 [ 862.437879][T20472] ? mas_next_slot+0xc27/0xcf0 [ 862.437929][T20472] __se_sys_mbind+0xa47/0xc40 [ 862.437958][T20472] ? __pfx_vfs_write+0x10/0x10 [ 862.437991][T20472] ? __pfx___se_sys_mbind+0x10/0x10 [ 862.438028][T20472] ? fput+0xa0/0xd0 [ 862.438050][T20472] ? ksys_write+0x22a/0x250 [ 862.438079][T20472] ? __pfx_ksys_write+0x10/0x10 [ 862.438109][T20472] ? __x64_sys_mbind+0x21/0xf0 [ 862.438141][T20472] do_syscall_64+0xfa/0xf80 [ 862.438175][T20472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.438194][T20472] ? clear_bhb_loop+0x60/0xb0 [ 862.438217][T20472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.438236][T20472] RIP: 0033:0x7f351c98f749 [ 862.438254][T20472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.438271][T20472] RSP: 002b:00007f351d811038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 862.438292][T20472] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351c98f749 [ 862.438307][T20472] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 862.438321][T20472] RBP: 00007f351d811090 R08: 0000000000000000 R09: 0000000000000002 [ 862.438333][T20472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 862.438345][T20472] R13: 00007f351cbe6038 R14: 00007f351cbe5fa0 R15: 00007fff7a7469a8 [ 862.438376][T20472] [ 862.451101][T17991] usb 5-1: device descriptor read/8, error -71 [ 862.465525][T16009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.479342][ T37] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 862.486235][T16009] usb 1-1: Product: syz [ 862.629896][ T37] usb 9-1: device descriptor read/64, error -71 [ 862.632176][T16009] usb 1-1: Manufacturer: syz [ 862.751758][ T37] usb usb9-port1: attempt power cycle [ 862.757510][T16009] usb 1-1: SerialNumber: syz [ 862.762306][T17991] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 862.801054][T17991] usb 5-1: device descriptor read/8, error -71 [ 862.821250][T17857] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 862.911258][T17991] usb usb5-port1: unable to enumerate USB device [ 862.983646][T17857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 862.993259][T17857] usb 4-1: config 127 has an invalid interface number: 138 but max is 0 [ 863.001833][T17857] usb 4-1: config 127 has no interface number 0 [ 863.008167][T17857] usb 4-1: config 127 interface 138 altsetting 220 bulk endpoint 0xC has invalid maxpacket 1023 [ 863.019549][T17857] usb 4-1: config 127 interface 138 has no altsetting 0 [ 863.029551][T17857] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=f0.fc [ 863.038757][T17857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.047093][T17857] usb 4-1: Product: syz [ 863.051392][T17857] usb 4-1: Manufacturer: syz [ 863.055996][T17857] usb 4-1: SerialNumber: syz [ 863.068946][T20474] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 863.121519][ T37] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 863.142187][ T37] usb 9-1: device descriptor read/8, error -71 [ 863.177201][T16009] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 863.189280][T16009] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 863.296519][T17857] ushc 4-1:127.138: probe with driver ushc failed with error -71 [ 863.317651][T17857] usb 4-1: USB disconnect, device number 52 [ 863.396394][ T37] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 863.422899][ T37] usb 9-1: device descriptor read/8, error -71 [ 863.544975][ T37] usb usb9-port1: unable to enumerate USB device [ 863.677401][T20476] comedi comedi3: board detection failed [ 863.725591][T20478] FAULT_INJECTION: forcing a failure. [ 863.725591][T20478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.743270][T20478] CPU: 0 UID: 0 PID: 20478 Comm: syz.4.4421 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.743291][T20478] Tainted: [L]=SOFTLOCKUP [ 863.743295][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.743302][T20478] Call Trace: [ 863.743307][T20478] [ 863.743312][T20478] dump_stack_lvl+0x189/0x250 [ 863.743334][T20478] ? __pfx____ratelimit+0x10/0x10 [ 863.743360][T20478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.743378][T20478] ? __pfx__printk+0x10/0x10 [ 863.743406][T20478] ? __might_fault+0xb0/0x130 [ 863.743440][T20478] should_fail_ex+0x414/0x560 [ 863.743465][T20478] _copy_from_iter+0x1cd/0x1630 [ 863.743490][T20478] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 863.743518][T20478] ? __pfx__copy_from_iter+0x10/0x10 [ 863.743543][T20478] ? policy_nodemask+0x27c/0x720 [ 863.743570][T20478] ? page_copy_sane+0x4e/0x280 [ 863.743597][T20478] copy_page_from_iter+0xdd/0x170 [ 863.743626][T20478] anon_pipe_write+0x9f8/0x1460 [ 863.743648][T20478] ? __pfx_aa_file_perm+0x10/0x10 [ 863.743677][T20478] ? anon_pipe_write+0xbc1/0x1460 [ 863.743712][T20478] ? __pfx_anon_pipe_write+0x10/0x10 [ 863.743730][T20478] ? common_file_perm+0x1b5/0x220 [ 863.743753][T20478] ? __pfx_autoremove_wake_function+0x10/0x10 [ 863.743780][T20478] ? bpf_lsm_file_permission+0x9/0x20 [ 863.743799][T20478] ? security_file_permission+0x75/0x290 [ 863.743838][T20478] vfs_write+0x5c9/0xb30 [ 863.743872][T20478] ? __pfx_anon_pipe_write+0x10/0x10 [ 863.743893][T20478] ? __pfx_vfs_write+0x10/0x10 [ 863.743932][T20478] ? __fget_files+0x2a/0x420 [ 863.743963][T20478] ksys_write+0x145/0x250 [ 863.743992][T20478] ? __pfx_ksys_write+0x10/0x10 [ 863.744021][T20478] ? do_syscall_64+0xbe/0xf80 [ 863.744053][T20478] do_syscall_64+0xfa/0xf80 [ 863.744081][T20478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.744101][T20478] ? clear_bhb_loop+0x60/0xb0 [ 863.744132][T20478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.744152][T20478] RIP: 0033:0x7f8384f8f749 [ 863.744171][T20478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.744190][T20478] RSP: 002b:00007f8385ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 863.744211][T20478] RAX: ffffffffffffffda RBX: 00007f83851e5fa0 RCX: 00007f8384f8f749 [ 863.744226][T20478] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 863.744240][T20478] RBP: 00007f8385ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 863.744253][T20478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.744265][T20478] R13: 00007f83851e6038 R14: 00007f83851e5fa0 R15: 00007fffc1bac548 [ 863.744298][T20478] [ 864.636517][T16009] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 864.851560][T16009] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 864.884928][T16009] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 864.906896][T20493] FAULT_INJECTION: forcing a failure. [ 864.906896][T20493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 864.920502][T16009] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 864.922424][T20493] CPU: 1 UID: 0 PID: 20493 Comm: syz.8.4427 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.922454][T20493] Tainted: [L]=SOFTLOCKUP [ 864.922462][T20493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 864.922474][T20493] Call Trace: [ 864.922483][T20493] [ 864.922491][T20493] dump_stack_lvl+0x189/0x250 [ 864.922516][T20493] ? __pfx____ratelimit+0x10/0x10 [ 864.922542][T20493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.922561][T20493] ? __pfx__printk+0x10/0x10 [ 864.922592][T20493] ? fs_reclaim_acquire+0x7d/0x100 [ 864.922619][T20493] should_fail_ex+0x414/0x560 [ 864.922645][T20493] prepare_alloc_pages+0x22b/0x650 [ 864.922671][T20493] __alloc_frozen_pages_noprof+0x123/0x370 [ 864.922696][T20493] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 864.922723][T20493] ? policy_nodemask+0x27c/0x720 [ 864.922743][T20493] ? try_to_migrate+0x302/0x3d0 [ 864.922765][T20493] alloc_pages_mpol+0x232/0x4a0 [ 864.922790][T20493] alloc_migration_target_by_mpol+0x2e6/0x590 [ 864.922824][T20493] migrate_pages_batch+0x801/0x35e0 [ 864.922863][T20493] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 864.922898][T20493] ? __pfx_migrate_pages_batch+0x10/0x10 [ 864.922945][T20493] migrate_pages+0x1b9a/0x28e0 [ 864.922985][T20493] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 864.923025][T20493] ? __pfx_migrate_pages+0x10/0x10 [ 864.923046][T20493] ? mas_next_node+0xafd/0xd60 [ 864.923078][T20493] ? mas_next_slot+0xc27/0xcf0 [ 864.923130][T20493] __se_sys_mbind+0xa47/0xc40 [ 864.923159][T20493] ? __pfx_vfs_write+0x10/0x10 [ 864.923192][T20493] ? __pfx___se_sys_mbind+0x10/0x10 [ 864.923231][T20493] ? fput+0xa0/0xd0 [ 864.923252][T20493] ? ksys_write+0x22a/0x250 [ 864.923281][T20493] ? __pfx_ksys_write+0x10/0x10 [ 864.923312][T20493] ? __x64_sys_mbind+0x21/0xf0 [ 864.923343][T20493] do_syscall_64+0xfa/0xf80 [ 864.923371][T20493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.923391][T20493] ? clear_bhb_loop+0x60/0xb0 [ 864.923414][T20493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.923437][T20493] RIP: 0033:0x7f9ebd18f749 [ 864.923454][T20493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.923471][T20493] RSP: 002b:00007f9ebe0e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 864.923492][T20493] RAX: ffffffffffffffda RBX: 00007f9ebd3e5fa0 RCX: 00007f9ebd18f749 [ 864.923507][T20493] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 864.923520][T20493] RBP: 00007f9ebe0e7090 R08: 0000000000000000 R09: 0000000000000002 [ 864.923533][T20493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.923545][T20493] R13: 00007f9ebd3e6038 R14: 00007f9ebd3e5fa0 R15: 00007ffc8a25d998 [ 864.923576][T20493] [ 864.957318][ T933] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 864.967609][T16009] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 865.168091][ T933] usb 5-1: device descriptor read/64, error -71 [ 865.242996][T16009] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 865.272357][T16009] usb 1-1: USB disconnect, device number 116 [ 865.385003][T20497] comedi comedi3: board detection failed [ 865.509133][ T933] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 865.642600][ T933] usb 5-1: device descriptor read/64, error -71 [ 865.654550][T20518] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4434'. [ 865.664544][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4434'. [ 865.740037][T16009] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 865.750146][ T933] usb usb5-port1: attempt power cycle [ 865.903762][T16009] usb 1-1: Using ep0 maxpacket: 16 [ 865.911012][T16009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 865.926503][T16009] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 865.936445][T16009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.944669][T16009] usb 1-1: Product: syz [ 865.948823][T16009] usb 1-1: Manufacturer: syz [ 865.953902][T16009] usb 1-1: SerialNumber: syz [ 865.960247][T16009] usb 1-1: config 0 descriptor?? [ 865.968693][T16009] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 865.978512][T16009] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 866.090965][ T933] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 866.113369][ T933] usb 5-1: device descriptor read/8, error -71 [ 866.351826][ T933] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 866.372455][ T933] usb 5-1: device descriptor read/8, error -71 [ 866.400476][T20529] comedi comedi3: board detection failed [ 866.446440][T20531] FAULT_INJECTION: forcing a failure. [ 866.446440][T20531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.460251][T20531] CPU: 0 UID: 0 PID: 20531 Comm: syz.8.4440 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.460274][T20531] Tainted: [L]=SOFTLOCKUP [ 866.460278][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.460285][T20531] Call Trace: [ 866.460290][T20531] [ 866.460295][T20531] dump_stack_lvl+0x189/0x250 [ 866.460311][T20531] ? __pfx____ratelimit+0x10/0x10 [ 866.460325][T20531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.460336][T20531] ? __pfx__printk+0x10/0x10 [ 866.460351][T20531] ? __might_fault+0xb0/0x130 [ 866.460375][T20531] should_fail_ex+0x414/0x560 [ 866.460391][T20531] _copy_from_iter+0x1cd/0x1630 [ 866.460411][T20531] ? anon_pipe_write+0xc5f/0x1460 [ 866.460423][T20531] ? __pfx__copy_from_iter+0x10/0x10 [ 866.460435][T20531] ? __pfx___mutex_lock+0x10/0x10 [ 866.460455][T20531] ? page_copy_sane+0x4e/0x280 [ 866.460469][T20531] copy_page_from_iter+0xdd/0x170 [ 866.460485][T20531] anon_pipe_write+0x9f8/0x1460 [ 866.460495][T20531] ? __pfx_aa_file_perm+0x10/0x10 [ 866.460512][T20531] ? anon_pipe_write+0xbc1/0x1460 [ 866.460531][T20531] ? __pfx_anon_pipe_write+0x10/0x10 [ 866.460540][T20531] ? common_file_perm+0x1b5/0x220 [ 866.460552][T20531] ? __pfx_autoremove_wake_function+0x10/0x10 [ 866.460566][T20531] ? bpf_lsm_file_permission+0x9/0x20 [ 866.460576][T20531] ? security_file_permission+0x75/0x290 [ 866.460598][T20531] vfs_write+0x5c9/0xb30 [ 866.460616][T20531] ? __pfx_anon_pipe_write+0x10/0x10 [ 866.460627][T20531] ? __pfx_vfs_write+0x10/0x10 [ 866.460647][T20531] ? __fget_files+0x2a/0x420 [ 866.460664][T20531] ksys_write+0x145/0x250 [ 866.460680][T20531] ? __pfx_ksys_write+0x10/0x10 [ 866.460696][T20531] ? do_syscall_64+0xbe/0xf80 [ 866.460712][T20531] do_syscall_64+0xfa/0xf80 [ 866.460726][T20531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.460738][T20531] ? clear_bhb_loop+0x60/0xb0 [ 866.460750][T20531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.460760][T20531] RIP: 0033:0x7f9ebd18f749 [ 866.460771][T20531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.460780][T20531] RSP: 002b:00007f9ebe0e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 866.460792][T20531] RAX: ffffffffffffffda RBX: 00007f9ebd3e5fa0 RCX: 00007f9ebd18f749 [ 866.460800][T20531] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 866.460807][T20531] RBP: 00007f9ebe0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 866.460814][T20531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 866.460820][T20531] R13: 00007f9ebd3e6038 R14: 00007f9ebd3e5fa0 R15: 00007ffc8a25d998 [ 866.460837][T20531] [ 866.492510][ T933] usb usb5-port1: unable to enumerate USB device [ 866.584566][T16009] em28xx 1-1:0.0: chip ID is em2765 [ 866.787237][T20504] overlayfs: failed to resolve './file1': -2 [ 866.845285][ T933] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 866.872337][T16009] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 866.881700][T20539] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 866.908393][T16009] em28xx 1-1:0.0: board has no eeprom [ 866.912626][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4443'. [ 866.918190][T20539] CIFS mount error: No usable UNC path provided in device string! [ 866.918190][T20539] [ 866.933942][T20539] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 866.946118][T20539] comedi comedi3: dmm32at: I/O port conflict (0x501,16) [ 866.990410][T16009] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 866.999032][T16009] em28xx 1-1:0.0: dvb set to bulk mode. [ 867.008070][ T933] usb 9-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 867.012761][T18659] em28xx 1-1:0.0: Binding DVB extension [ 867.023924][ T933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.063461][ T933] usb 9-1: config 0 descriptor?? [ 867.098747][ T933] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 867.104722][T16009] usb 1-1: USB disconnect, device number 117 [ 867.121159][T16009] em28xx 1-1:0.0: Disconnecting em28xx [ 867.158096][T18659] em28xx 1-1:0.0: Registering input extension [ 867.167104][T16009] em28xx 1-1:0.0: Closing input extension [ 867.191008][T16009] em28xx 1-1:0.0: Freeing device [ 867.346238][ T933] gspca_zc3xx: reg_w_i err -71 [ 867.351196][ T933] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 867.365570][ T933] usb 9-1: USB disconnect, device number 46 [ 867.505282][T16009] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 867.678363][T16009] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 867.686426][T16009] usb 1-1: can't read configurations, error -22 [ 867.766362][T20551] comedi comedi3: board detection failed [ 867.816276][T16009] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 867.851097][T20558] FAULT_INJECTION: forcing a failure. [ 867.851097][T20558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 867.884984][T20558] CPU: 1 UID: 0 PID: 20558 Comm: syz.3.4450 Tainted: G L syzkaller #0 PREEMPT(full) [ 867.885017][T20558] Tainted: [L]=SOFTLOCKUP [ 867.885025][T20558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.885039][T20558] Call Trace: [ 867.885048][T20558] [ 867.885057][T20558] dump_stack_lvl+0x189/0x250 [ 867.885083][T20558] ? __pfx____ratelimit+0x10/0x10 [ 867.885110][T20558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 867.885129][T20558] ? __pfx__printk+0x10/0x10 [ 867.885157][T20558] ? fs_reclaim_acquire+0x7d/0x100 [ 867.885183][T20558] should_fail_ex+0x414/0x560 [ 867.885209][T20558] prepare_alloc_pages+0x22b/0x650 [ 867.885237][T20558] __alloc_frozen_pages_noprof+0x123/0x370 [ 867.885263][T20558] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 867.885292][T20558] ? policy_nodemask+0x27c/0x720 [ 867.885313][T20558] ? try_to_migrate+0x302/0x3d0 [ 867.885336][T20558] alloc_pages_mpol+0x232/0x4a0 [ 867.885363][T20558] alloc_migration_target_by_mpol+0x2e6/0x590 [ 867.885399][T20558] migrate_pages_batch+0x801/0x35e0 [ 867.885440][T20558] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 867.885476][T20558] ? __pfx_migrate_pages_batch+0x10/0x10 [ 867.885526][T20558] migrate_pages+0x1b9a/0x28e0 [ 867.885565][T20558] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 867.885600][T20558] ? __pfx_migrate_pages+0x10/0x10 [ 867.885621][T20558] ? mas_next_node+0xafd/0xd60 [ 867.885655][T20558] ? mas_next_slot+0xc27/0xcf0 [ 867.885708][T20558] __se_sys_mbind+0xa47/0xc40 [ 867.885740][T20558] ? __pfx_vfs_write+0x10/0x10 [ 867.885774][T20558] ? __pfx___se_sys_mbind+0x10/0x10 [ 867.885844][T20558] ? fput+0xa0/0xd0 [ 867.885867][T20558] ? ksys_write+0x22a/0x250 [ 867.885898][T20558] ? __pfx_ksys_write+0x10/0x10 [ 867.885931][T20558] ? __x64_sys_mbind+0x21/0xf0 [ 867.885964][T20558] do_syscall_64+0xfa/0xf80 [ 867.885994][T20558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.886014][T20558] ? clear_bhb_loop+0x60/0xb0 [ 867.886039][T20558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.886059][T20558] RIP: 0033:0x7f351c98f749 [ 867.886078][T20558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.886097][T20558] RSP: 002b:00007f351d811038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 867.886119][T20558] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351c98f749 [ 867.886136][T20558] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 867.886150][T20558] RBP: 00007f351d811090 R08: 0000000000000000 R09: 0000000000000002 [ 867.886164][T20558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 867.886177][T20558] R13: 00007f351cbe6038 R14: 00007f351cbe5fa0 R15: 00007fff7a7469a8 [ 867.886210][T20558] [ 868.239597][T16009] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 868.247826][T16009] usb 1-1: can't read configurations, error -22 [ 868.254520][T16009] usb usb1-port1: attempt power cycle [ 868.286495][T20562] comedi: valid board names for 8255 driver are: [ 868.304636][T20562] 8255 [ 868.307437][T20562] comedi: valid board names for vmk80xx driver are: [ 868.332541][T20562] vmk80xx [ 868.337355][T20562] comedi: valid board names for usbduxsigma driver are: [ 868.344439][T20562] usbduxsigma [ 868.347920][T20562] comedi: valid board names for usbduxfast driver are: [ 868.358609][T20562] usbduxfast [ 868.361950][T20562] comedi: valid board names for usbdux driver are: [ 868.369024][T20562] usbdux [ 868.373911][T20562] comedi: valid board names for ni6501 driver are: [ 868.384603][T20562] ni6501 [ 868.387598][T20562] comedi: valid board names for dt9812 driver are: [ 868.401394][T20562] dt9812 [ 868.404401][T20562] comedi: valid board names for ni_labpc_cs driver are: [ 868.435688][T20562] ni_labpc_cs [ 868.441259][T20562] comedi: valid board names for ni_daq_700 driver are: [ 868.448695][T20562] ni_daq_700 [ 868.452037][T20562] comedi: valid board names for labpc_pci driver are: [ 868.467276][T20562] labpc_pci [ 868.471849][T20562] comedi: valid board names for adl_pci9118 driver are: [ 868.479074][T20562] pci9118dg [ 868.482306][T20562] pci9118hg [ 868.485504][T20562] pci9118hr [ 868.489377][T20562] comedi: valid board names for 8255_pci driver are: [ 868.496104][T20562] 8255_pci [ 868.501062][T20562] comedi: valid board names for s526 driver are: [ 868.507407][T20562] s526 [ 868.512104][T20562] comedi: valid board names for multiq3 driver are: [ 868.518827][T20562] multiq3 [ 868.521866][T20562] comedi: valid board names for pcmuio driver are: [ 868.528447][T20562] pcmuio48 [ 868.531558][T20562] pcmuio96 [ 868.534651][T20562] comedi: valid board names for pcmmio driver are: [ 868.542019][T20562] pcmmio [ 868.544976][T20562] comedi: valid board names for pcmda12 driver are: [ 868.552137][T20562] pcmda12 [ 868.555168][T20562] comedi: valid board names for pcmad driver are: [ 868.561755][T20562] pcmad12 [ 868.564779][T20562] pcmad16 [ 868.567785][T20562] comedi: valid board names for ni_labpc driver are: [ 868.575755][T20562] lab-pc-1200 [ 868.579349][T20562] lab-pc-1200ai [ 868.582893][T20562] lab-pc+ [ 868.585897][T20562] comedi: valid board names for atmio16 driver are: [ 868.592512][T20562] atmio16 [ 868.595556][T20562] atmio16d [ 868.598948][T16009] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 868.606640][T20562] comedi: valid board names for ni_at_ao driver are: [ 868.616982][T20562] at-ao-6 [ 868.621759][T20562] at-ao-10 [ 868.624875][T20562] comedi: valid board names for ni_at_a2150 driver are: [ 868.633671][T20562] ni_at_a2150 [ 868.637098][T20562] comedi: valid board names for adq12b driver are: [ 868.645231][T20562] adq12b [ 868.648373][T20562] comedi: valid board names for mpc624 driver are: [ 868.655033][T20562] mpc624 [ 868.658150][T20562] comedi: valid board names for c6xdigio driver are: [ 868.664965][T20562] c6xdigio [ 868.668242][T16009] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 868.676229][T20562] comedi: valid board names for aio_iiro_16 driver are: [ 868.676248][T20562] aio_iiro_16 [ 868.676259][T20562] comedi: valid board names for aio_aio12_8 driver are: [ 868.676271][T20562] aio_aio12_8 [ 868.676280][T20562] aio_ai12_8 [ 868.676290][T20562] aio_ao12_4 [ 868.676298][T20562] comedi: valid board names for fl512 driver are: [ 868.676310][T20562] fl512 [ 868.676319][T20562] comedi: valid board names for dmm32at driver are: [ 868.676331][T20562] dmm32at [ 868.676340][T20562] comedi: valid board names for dt282x driver are: [ 868.676352][T20562] dt2821 [ 868.676361][T20562] dt2821-f [ 868.676370][T20562] dt2821-g [ 868.676380][T20562] dt2823 [ 868.676389][T20562] dt2824-pgh [ 868.676397][T20562] dt2824-pgl [ 868.676405][T20562] dt2825 [ 868.676414][T20562] dt2827 [ 868.676489][T20562] dt2828 [ 868.676499][T20562] dt2829 [ 868.676508][T20562] dt21-ez [ 868.676517][T20562] dt23-ez [ 868.676525][T20562] dt24-ez [ 868.676535][T20562] dt24-ez-pgl [ 868.676544][T20562] comedi: valid board names for dt2817 driver are: [ 868.676555][T20562] dt2817 [ 868.676565][T20562] comedi: valid board names for dt2815 driver are: [ 868.676576][T20562] dt2815 [ 868.676585][T20562] comedi: valid board names for dt2814 driver are: [ 868.676596][T20562] dt2814 [ 868.676605][T20562] comedi: valid board names for dt2811 driver are: [ 868.676615][T20562] dt2811-pgh [ 868.676624][T20562] dt2811-pgl [ 868.676632][T20562] comedi: valid board names for dt2801 driver are: [ 868.676643][T20562] dt2801 [ 868.676650][T20562] comedi: valid board names for das6402 driver are: [ 868.676660][T20562] das6402-12 [ 868.676668][T20562] das6402-16 [ 868.676677][T20562] comedi: valid board names for das1800 driver are: [ 868.684556][T16009] usb 1-1: can't read configurations, error -22 [ 868.690869][T20562] das-1701st [ 868.698825][T18659] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 868.700830][T20562] das-1701st-da [ 868.829361][T16009] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 868.839186][T20562] das-1702st [ 868.875830][T18659] usb 5-1: Using ep0 maxpacket: 16 [ 868.880743][T20562] das-1702st-da [ 868.885848][T20562] das-1702hr [ 868.887948][T16009] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 868.889241][T20562] das-1702hr-da [ 868.897719][T16009] usb 1-1: can't read configurations, error -22 [ 868.900962][T20562] das-1701ao [ 868.907462][T18659] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 868.910664][T20562] das-1702ao [ 868.920043][T16009] usb usb1-port1: unable to enumerate USB device [ 868.922665][T20562] das-1801st [ 868.930749][T18659] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.932357][T20562] das-1801st-da [ 868.942358][T18659] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 868.946507][T20562] das-1802st [ 868.957387][T18659] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 868.959811][T20562] das-1802st-da [ 868.973270][T20562] das-1802hr [ 868.973613][T18659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.976655][T20562] das-1802hr-da [ 868.987514][T18659] usb 5-1: Product: syz [ 868.989488][T20562] das-1801hc [ 868.996309][T18659] usb 5-1: Manufacturer: syz [ 868.996336][T20562] das-1802hc [ 869.000948][T18659] usb 5-1: SerialNumber: syz [ 869.009780][T20562] das-1801ao [ 869.013128][T20562] das-1802ao [ 869.016434][T20562] comedi: valid board names for das800 driver are: [ 869.022978][T20562] das-800 [ 869.026014][T20562] cio-das800 [ 869.029324][T20562] das-801 [ 869.032730][T20562] cio-das801 [ 869.036043][T20562] das-802 [ 869.039067][T20562] cio-das802 [ 869.042434][T20562] cio-das802/16 [ 869.046013][T20562] comedi: valid board names for isa-das08 driver are: [ 869.053630][T20562] isa-das08 [ 869.056954][T20562] das08-pgm [ 869.060242][T20562] das08-pgh [ 869.063475][T20562] das08-pgl [ 869.066706][T20562] das08-aoh [ 869.080589][T20562] das08-aol [ 869.083829][T20562] das08-aom [ 869.088549][T20562] das08/jr-ao [ 869.094347][T20562] das08jr-16-ao [ 869.097910][T20562] pc104-das08 [ 869.101877][T20562] das08jr/16 [ 869.105277][T20562] comedi: valid board names for das16m1 driver are: [ 869.112621][T20562] das16m1 [ 869.115661][T20562] comedi: valid board names for dac02 driver are: [ 869.122760][T20562] dac02 [ 869.125631][T20562] comedi: valid board names for rti802 driver are: [ 869.132780][T20562] rti802 [ 869.135817][T20562] comedi: valid board names for rti800 driver are: [ 869.142995][T20562] rti800 [ 869.146046][T20562] rti815 [ 869.148990][T20562] comedi: valid board names for pcm3724 driver are: [ 869.157184][T20562] pcm3724 [ 869.160771][T20562] comedi: valid board names for pcl818 driver are: [ 869.167461][T20562] pcl818l [ 869.170905][T20562] pcl818h [ 869.173941][T20562] pcl818hd [ 869.177058][T20562] pcl818hg [ 869.180864][T20562] pcl818 [ 869.183871][T20562] pcl718 [ 869.186817][T20562] pcm3718 [ 869.194817][T20562] comedi: valid board names for pcl816 driver are: [ 869.202056][T20562] pcl816 [ 869.205082][T20562] pcl814b [ 869.212451][T20562] comedi: valid board names for pcl812 driver are: [ 869.218998][T20562] pcl812 [ 869.222061][T20562] pcl812pg [ 869.225199][T20562] acl8112pg [ 869.228396][T20562] acl8112dg [ 869.231979][T20562] acl8112hg [ 869.235201][T20562] a821pgl [ 869.238227][T20562] a821pglnda [ 869.241607][T20562] a821pgh [ 869.244635][T20562] a822pgl [ 869.247656][T20562] a822pgh [ 869.250744][T20562] a823pgl [ 869.253769][T20562] a823pgh [ 869.257947][T20562] pcl813 [ 869.261008][T20562] pcl813b [ 869.264035][T20562] acl8113 [ 869.267049][T20562] iso813 [ 869.269988][T20562] acl8216 [ 869.274130][T20562] a826pg [ 869.277088][T20562] comedi: valid board names for pcl730 driver are: [ 869.283730][T20562] pcl730 [ 869.286681][T20562] iso730 [ 869.289616][T20562] acl7130 [ 869.293303][T20562] pcm3730 [ 869.296343][T20562] pcl725 [ 869.299294][T20562] p8r8dio [ 869.302519][T20562] acl7225b [ 869.306649][T20562] p16r16dio [ 869.309857][T20562] pcl733 [ 869.312885][T20562] pcl734 [ 869.315821][T20562] opmm-1616-xt [ 869.319260][T20562] pearl-mm-p [ 869.322720][T20562] ir104-pbf [ 869.325932][T20562] comedi: valid board names for pcl726 driver are: [ 869.333315][T20562] pcl726 [ 869.336264][T20562] pcl727 [ 869.339201][T20562] pcl728 [ 869.342229][T20562] acl6126 [ 869.345255][T20562] acl6128 [ 869.348276][T20562] comedi: valid board names for pcl724 driver are: [ 869.354978][T20562] pcl724 [ 869.357930][T20562] pcl722 [ 869.361969][T20562] pcl731 [ 869.364921][T20562] acl7122 [ 869.367941][T20562] acl7124 [ 869.371017][T20562] pet48dio [ 869.374134][T20562] pcmio48 [ 869.377155][T20562] onyx-mm-dio [ 869.380525][T20562] comedi: valid board names for pcl711 driver are: [ 869.387346][T20562] pcl711 [ 869.390307][T20562] pcl711b [ 869.393796][T20562] acl8112hg [ 869.397003][T20562] acl8112dg [ 869.400195][T20562] comedi: valid board names for amplc_pc263 driver are: [ 869.407232][T20562] pc263 [ 869.410086][T20562] comedi: valid board names for amplc_pc236 driver are: [ 869.417133][T20562] pc36at [ 869.420078][T20562] comedi: valid board names for amplc_dio200 driver are: [ 869.426936][T18659] usb 5-1: 0:2 : does not exist [ 869.427178][T20562] pc212e [ 869.437886][T20562] pc214e [ 869.442181][T20562] pc215e [ 869.445135][T20562] pc218e [ 869.446429][T18659] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 869.448074][T20562] pc272e [ 869.448085][T20562] comedi: valid board names for comedi_parport driver are: [ 869.448098][T20562] comedi_parport [ 869.448107][T20562] comedi: valid board names for comedi_test driver are: [ 869.475902][T18659] usb 5-1: USB disconnect, device number 29 [ 869.484247][T20562] comedi_test [ 869.487641][T20562] comedi: valid board names for comedi_bond driver are: [ 869.495158][T20562] comedi_bond [ 869.517870][T14141] udevd[14141]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.589020][T20582] FAULT_INJECTION: forcing a failure. [ 869.589020][T20582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.605196][T20582] CPU: 0 UID: 0 PID: 20582 Comm: syz.8.4459 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.605227][T20582] Tainted: [L]=SOFTLOCKUP [ 869.605235][T20582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 869.605247][T20582] Call Trace: [ 869.605256][T20582] [ 869.605265][T20582] dump_stack_lvl+0x189/0x250 [ 869.605286][T20582] ? __pfx____ratelimit+0x10/0x10 [ 869.605312][T20582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.605330][T20582] ? __pfx__printk+0x10/0x10 [ 869.605360][T20582] ? __might_fault+0xb0/0x130 [ 869.605395][T20582] should_fail_ex+0x414/0x560 [ 869.605424][T20582] _copy_from_iter+0x1cd/0x1630 [ 869.605451][T20582] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 869.605483][T20582] ? __pfx__copy_from_iter+0x10/0x10 [ 869.605508][T20582] ? policy_nodemask+0x27c/0x720 [ 869.605528][T20582] ? __pfx___might_resched+0x10/0x10 [ 869.605563][T20582] ? page_copy_sane+0x4e/0x280 [ 869.605590][T20582] copy_page_from_iter+0xdd/0x170 [ 869.605645][T20582] anon_pipe_write+0x9f8/0x1460 [ 869.605666][T20582] ? __pfx_aa_file_perm+0x10/0x10 [ 869.605697][T20582] ? anon_pipe_write+0xbc1/0x1460 [ 869.605732][T20582] ? __pfx_anon_pipe_write+0x10/0x10 [ 869.605750][T20582] ? common_file_perm+0x1b5/0x220 [ 869.605778][T20582] ? bpf_lsm_file_permission+0x9/0x20 [ 869.605795][T20582] ? security_file_permission+0x75/0x290 [ 869.605833][T20582] vfs_write+0x5c9/0xb30 [ 869.605863][T20582] ? __pfx_anon_pipe_write+0x10/0x10 [ 869.605882][T20582] ? __pfx_vfs_write+0x10/0x10 [ 869.605918][T20582] ? __fget_files+0x2a/0x420 [ 869.605950][T20582] ksys_write+0x145/0x250 [ 869.605977][T20582] ? __pfx_ksys_write+0x10/0x10 [ 869.606005][T20582] ? do_syscall_64+0xbe/0xf80 [ 869.606032][T20582] do_syscall_64+0xfa/0xf80 [ 869.606058][T20582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.606076][T20582] ? clear_bhb_loop+0x60/0xb0 [ 869.606101][T20582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.606119][T20582] RIP: 0033:0x7f9ebd18f749 [ 869.606136][T20582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.606153][T20582] RSP: 002b:00007f9ebe0e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 869.606174][T20582] RAX: ffffffffffffffda RBX: 00007f9ebd3e5fa0 RCX: 00007f9ebd18f749 [ 869.606189][T20582] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 869.606202][T20582] RBP: 00007f9ebe0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 869.606216][T20582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.606228][T20582] R13: 00007f9ebd3e6038 R14: 00007f9ebd3e5fa0 R15: 00007ffc8a25d998 [ 869.606260][T20582] [ 869.935181][T20586] FAULT_INJECTION: forcing a failure. [ 869.935181][T20586] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 869.948846][T20586] CPU: 1 UID: 0 PID: 20586 Comm: syz.8.4461 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.948866][T20586] Tainted: [L]=SOFTLOCKUP [ 869.948870][T20586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 869.948877][T20586] Call Trace: [ 869.948883][T20586] [ 869.948888][T20586] dump_stack_lvl+0x189/0x250 [ 869.948903][T20586] ? __pfx____ratelimit+0x10/0x10 [ 869.948917][T20586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.948928][T20586] ? __pfx__printk+0x10/0x10 [ 869.948944][T20586] ? fs_reclaim_acquire+0x7d/0x100 [ 869.948965][T20586] should_fail_ex+0x414/0x560 [ 869.948980][T20586] prepare_alloc_pages+0x22b/0x650 [ 869.948994][T20586] __alloc_frozen_pages_noprof+0x123/0x370 [ 869.949007][T20586] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 869.949022][T20586] ? policy_nodemask+0x27c/0x720 [ 869.949034][T20586] ? try_to_migrate+0x302/0x3d0 [ 869.949046][T20586] alloc_pages_mpol+0x232/0x4a0 [ 869.949059][T20586] alloc_migration_target_by_mpol+0x2e6/0x590 [ 869.949077][T20586] migrate_pages_batch+0x801/0x35e0 [ 869.949098][T20586] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 869.949116][T20586] ? __pfx_migrate_pages_batch+0x10/0x10 [ 869.949141][T20586] migrate_pages+0x1b9a/0x28e0 [ 869.949161][T20586] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 869.949178][T20586] ? __pfx_migrate_pages+0x10/0x10 [ 869.949189][T20586] ? mas_next_node+0xafd/0xd60 [ 869.949206][T20586] ? mas_next_slot+0xc27/0xcf0 [ 869.949236][T20586] __se_sys_mbind+0xa47/0xc40 [ 869.949252][T20586] ? __pfx_vfs_write+0x10/0x10 [ 869.949271][T20586] ? __pfx___se_sys_mbind+0x10/0x10 [ 869.949290][T20586] ? fput+0xa0/0xd0 [ 869.949302][T20586] ? ksys_write+0x22a/0x250 [ 869.949318][T20586] ? __pfx_ksys_write+0x10/0x10 [ 869.949334][T20586] ? __x64_sys_mbind+0x21/0xf0 [ 869.949355][T20586] do_syscall_64+0xfa/0xf80 [ 869.949371][T20586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.949381][T20586] ? clear_bhb_loop+0x60/0xb0 [ 869.949393][T20586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.949403][T20586] RIP: 0033:0x7f9ebd18f749 [ 869.949414][T20586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.949423][T20586] RSP: 002b:00007f9ebe0e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 869.949436][T20586] RAX: ffffffffffffffda RBX: 00007f9ebd3e5fa0 RCX: 00007f9ebd18f749 [ 869.949444][T20586] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 869.949451][T20586] RBP: 00007f9ebe0e7090 R08: 0000000000000000 R09: 0000000000000002 [ 869.949458][T20586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.949464][T20586] R13: 00007f9ebd3e6038 R14: 00007f9ebd3e5fa0 R15: 00007ffc8a25d998 [ 869.949481][T20586] [ 870.261489][T20588] program syz.8.4462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 870.463850][T20596] CIFS mount error: No usable UNC path provided in device string! [ 870.463850][T20596] [ 870.492305][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.494628][T20596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 870.514849][ T5911] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 870.634695][T17991] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 870.668604][ T5911] usb 9-1: config 54 has an invalid interface number: 164 but max is 0 [ 870.678040][ T5911] usb 9-1: config 54 has an invalid descriptor of length 162, skipping remainder of the config [ 870.689267][ T5911] usb 9-1: config 54 has no interface number 0 [ 870.698363][ T5911] usb 9-1: New USB device found, idVendor=05e0, idProduct=2000, bcdDevice=c5.be [ 870.707739][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.716345][ T5911] usb 9-1: Product: syz [ 870.720525][ T5911] usb 9-1: Manufacturer: syz [ 870.725280][ T5911] usb 9-1: SerialNumber: syz [ 870.788926][T20601] vivid-000: ================= START STATUS ================= [ 870.798442][T20601] vivid-000: Enable Output Cropping: true grabbed [ 870.807215][T20601] vivid-000: Enable Output Composing: true grabbed [ 870.816864][T20601] vivid-000: Enable Output Scaler: true grabbed [ 870.818204][T17991] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 870.823276][T20601] vivid-000: Tx RGB Quantization Range: [ 870.832577][T17991] usb 1-1: config 4 has no interface number 0 [ 870.841755][T20601] Automatic [ 870.847648][T17991] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 870.849136][T20601] grabbed [ 870.850830][T17991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.850855][T17991] usb 1-1: Product: syz [ 870.877263][T17991] usb 1-1: Manufacturer: syz [ 870.878186][T20601] [ 870.881937][T17991] usb 1-1: SerialNumber: syz [ 870.887947][T20601] vivid-000: Transmit Mode: HDMI grabbed [ 870.908215][T20601] vivid-000: Hotplug Present: 0x00000000 [ 870.909365][T17991] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.28/input/input107 [ 870.926428][T20601] vivid-000: RxSense Present: 0x00000000 [ 870.945730][T20601] vivid-000: EDID Present: 0x00000000 [ 870.953414][ T5911] usb 9-1: USB disconnect, device number 47 [ 870.958730][T20601] vivid-000: ================== END STATUS ================== [ 871.081923][T20606] FAULT_INJECTION: forcing a failure. [ 871.081923][T20606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 871.096855][T20606] CPU: 0 UID: 0 PID: 20606 Comm: syz.3.4470 Tainted: G L syzkaller #0 PREEMPT(full) [ 871.096888][T20606] Tainted: [L]=SOFTLOCKUP [ 871.096896][T20606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 871.096908][T20606] Call Trace: [ 871.096916][T20606] [ 871.096924][T20606] dump_stack_lvl+0x189/0x250 [ 871.096948][T20606] ? __pfx____ratelimit+0x10/0x10 [ 871.096976][T20606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.096996][T20606] ? __pfx__printk+0x10/0x10 [ 871.097025][T20606] ? fs_reclaim_acquire+0x7d/0x100 [ 871.097053][T20606] should_fail_ex+0x414/0x560 [ 871.097080][T20606] prepare_alloc_pages+0x22b/0x650 [ 871.097106][T20606] __alloc_frozen_pages_noprof+0x123/0x370 [ 871.097130][T20606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 871.097158][T20606] ? policy_nodemask+0x27c/0x720 [ 871.097179][T20606] ? try_to_migrate+0x302/0x3d0 [ 871.097201][T20606] alloc_pages_mpol+0x232/0x4a0 [ 871.097227][T20606] alloc_migration_target_by_mpol+0x2e6/0x590 [ 871.097325][T20606] migrate_pages_batch+0x801/0x35e0 [ 871.097363][T20606] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 871.097397][T20606] ? __pfx_migrate_pages_batch+0x10/0x10 [ 871.097464][T20606] migrate_pages+0x1b9a/0x28e0 [ 871.097504][T20606] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 871.097547][T20606] ? __pfx_migrate_pages+0x10/0x10 [ 871.097573][T20606] ? mas_next_node+0xafd/0xd60 [ 871.097606][T20606] ? mas_next_slot+0xc27/0xcf0 [ 871.097657][T20606] __se_sys_mbind+0xa47/0xc40 [ 871.097686][T20606] ? __pfx_vfs_write+0x10/0x10 [ 871.097718][T20606] ? __pfx___se_sys_mbind+0x10/0x10 [ 871.097753][T20606] ? fput+0xa0/0xd0 [ 871.097774][T20606] ? ksys_write+0x22a/0x250 [ 871.097804][T20606] ? __pfx_ksys_write+0x10/0x10 [ 871.097835][T20606] ? __x64_sys_mbind+0x21/0xf0 [ 871.097867][T20606] do_syscall_64+0xfa/0xf80 [ 871.097896][T20606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.097917][T20606] ? clear_bhb_loop+0x60/0xb0 [ 871.097941][T20606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.097961][T20606] RIP: 0033:0x7f351c98f749 [ 871.097979][T20606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.097997][T20606] RSP: 002b:00007f351d811038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 871.098019][T20606] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351c98f749 [ 871.098034][T20606] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 871.098049][T20606] RBP: 00007f351d811090 R08: 0000000000000000 R09: 0000000000000002 [ 871.098062][T20606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 871.098075][T20606] R13: 00007f351cbe6038 R14: 00007f351cbe5fa0 R15: 00007fff7a7469a8 [ 871.098107][T20606] [ 871.434848][T20592] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 871.455779][T20592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.464953][T20592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.476241][ T5184] bcm5974 1-1:4.28: could not read from device [ 871.509969][ T5184] bcm5974 1-1:4.28: could not read from device [ 871.540958][T17991] usb 1-1: USB disconnect, device number 122 [ 871.557384][ T5184] bcm5974 1-1:4.28: could not read from device [ 871.633262][T14175] udevd[14175]: Error opening device "/dev/input/event4": No such file or directory [ 871.650637][T14175] udevd[14175]: Unable to EVIOCGABS device "/dev/input/event4" [ 871.658923][T14175] udevd[14175]: Unable to EVIOCGABS device "/dev/input/event4" [ 871.666763][T14175] udevd[14175]: Unable to EVIOCGABS device "/dev/input/event4" [ 871.674608][T20617] comedi comedi3: board detection failed [ 871.674711][T14175] udevd[14175]: Unable to EVIOCGABS device "/dev/input/event4" [ 871.761572][T20620] random: crng reseeded on system resumption [ 871.823648][ T933] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 871.846663][T20624] comedi comedi3: dmm32at: I/O port conflict (0x501,16) [ 871.978335][ T933] usb 4-1: Using ep0 maxpacket: 16 [ 871.985550][ T933] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 872.008660][ T933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.028435][ T933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 872.040910][ T933] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 872.053101][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.078899][ T933] usb 4-1: Product: syz [ 872.083108][ T933] usb 4-1: Manufacturer: syz [ 872.087715][ T933] usb 4-1: SerialNumber: syz [ 872.206030][T20632] FAULT_INJECTION: forcing a failure. [ 872.206030][T20632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 872.219457][T20632] CPU: 1 UID: 0 PID: 20632 Comm: syz.4.4481 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.219485][T20632] Tainted: [L]=SOFTLOCKUP [ 872.219490][T20632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.219497][T20632] Call Trace: [ 872.219506][T20632] [ 872.219511][T20632] dump_stack_lvl+0x189/0x250 [ 872.219532][T20632] ? __pfx____ratelimit+0x10/0x10 [ 872.219547][T20632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.219557][T20632] ? __pfx__printk+0x10/0x10 [ 872.219574][T20632] ? fs_reclaim_acquire+0x7d/0x100 [ 872.219588][T20632] should_fail_ex+0x414/0x560 [ 872.219602][T20632] prepare_alloc_pages+0x22b/0x650 [ 872.219617][T20632] __alloc_frozen_pages_noprof+0x123/0x370 [ 872.219630][T20632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 872.219644][T20632] ? policy_nodemask+0x27c/0x720 [ 872.219656][T20632] ? try_to_migrate+0x302/0x3d0 [ 872.219667][T20632] alloc_pages_mpol+0x232/0x4a0 [ 872.219681][T20632] alloc_migration_target_by_mpol+0x2e6/0x590 [ 872.219699][T20632] migrate_pages_batch+0x801/0x35e0 [ 872.219720][T20632] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 872.219738][T20632] ? __pfx_migrate_pages_batch+0x10/0x10 [ 872.219763][T20632] migrate_pages+0x1b9a/0x28e0 [ 872.219784][T20632] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 872.219801][T20632] ? __pfx_migrate_pages+0x10/0x10 [ 872.219812][T20632] ? mas_next_node+0xafd/0xd60 [ 872.219829][T20632] ? mas_next_slot+0xc27/0xcf0 [ 872.219856][T20632] __se_sys_mbind+0xa47/0xc40 [ 872.219872][T20632] ? __pfx_vfs_write+0x10/0x10 [ 872.219890][T20632] ? __pfx___se_sys_mbind+0x10/0x10 [ 872.219910][T20632] ? fput+0xa0/0xd0 [ 872.219922][T20632] ? ksys_write+0x22a/0x250 [ 872.219938][T20632] ? __pfx_ksys_write+0x10/0x10 [ 872.219954][T20632] ? __x64_sys_mbind+0x21/0xf0 [ 872.219970][T20632] do_syscall_64+0xfa/0xf80 [ 872.219985][T20632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.219996][T20632] ? clear_bhb_loop+0x60/0xb0 [ 872.220008][T20632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.220018][T20632] RIP: 0033:0x7f8384f8f749 [ 872.220029][T20632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.220038][T20632] RSP: 002b:00007f8385ec3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 872.220051][T20632] RAX: ffffffffffffffda RBX: 00007f83851e5fa0 RCX: 00007f8384f8f749 [ 872.220059][T20632] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 872.220066][T20632] RBP: 00007f8385ec3090 R08: 0000000000000000 R09: 0000000000000002 [ 872.220072][T20632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.220082][T20632] R13: 00007f83851e6038 R14: 00007f83851e5fa0 R15: 00007fffc1bac548 [ 872.220109][T20632] [ 872.480211][ T122] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 872.545096][T20634] FAULT_INJECTION: forcing a failure. [ 872.545096][T20634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.558661][T20634] CPU: 0 UID: 0 PID: 20634 Comm: syz.4.4482 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.558693][T20634] Tainted: [L]=SOFTLOCKUP [ 872.558701][T20634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.558714][T20634] Call Trace: [ 872.558722][T20634] [ 872.558731][T20634] dump_stack_lvl+0x189/0x250 [ 872.558756][T20634] ? __pfx____ratelimit+0x10/0x10 [ 872.558783][T20634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 872.558811][T20634] ? __pfx__printk+0x10/0x10 [ 872.558856][T20634] should_fail_ex+0x414/0x560 [ 872.558884][T20634] _copy_from_iter+0x1cd/0x1630 [ 872.558919][T20634] ? anon_pipe_write+0xc5f/0x1460 [ 872.558940][T20634] ? __pfx__copy_from_iter+0x10/0x10 [ 872.558964][T20634] ? __pfx___mutex_lock+0x10/0x10 [ 872.559001][T20634] ? page_copy_sane+0x4e/0x280 [ 872.559028][T20634] copy_page_from_iter+0xdd/0x170 [ 872.559058][T20634] anon_pipe_write+0x9f8/0x1460 [ 872.559079][T20634] ? __pfx_aa_file_perm+0x10/0x10 [ 872.559107][T20634] ? anon_pipe_write+0xbc1/0x1460 [ 872.559141][T20634] ? __pfx_anon_pipe_write+0x10/0x10 [ 872.559159][T20634] ? common_file_perm+0x1b5/0x220 [ 872.559181][T20634] ? __pfx_autoremove_wake_function+0x10/0x10 [ 872.559208][T20634] ? bpf_lsm_file_permission+0x9/0x20 [ 872.559225][T20634] ? security_file_permission+0x75/0x290 [ 872.559263][T20634] vfs_write+0x5c9/0xb30 [ 872.559295][T20634] ? __pfx_anon_pipe_write+0x10/0x10 [ 872.559316][T20634] ? __pfx_vfs_write+0x10/0x10 [ 872.559354][T20634] ? __fget_files+0x2a/0x420 [ 872.559387][T20634] ksys_write+0x145/0x250 [ 872.559417][T20634] ? __pfx_ksys_write+0x10/0x10 [ 872.559448][T20634] ? do_syscall_64+0xbe/0xf80 [ 872.559486][T20634] do_syscall_64+0xfa/0xf80 [ 872.559514][T20634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.559532][T20634] ? clear_bhb_loop+0x60/0xb0 [ 872.559556][T20634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.559576][T20634] RIP: 0033:0x7f8384f8f749 [ 872.559594][T20634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.559612][T20634] RSP: 002b:00007f8385ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 872.559633][T20634] RAX: ffffffffffffffda RBX: 00007f83851e5fa0 RCX: 00007f8384f8f749 [ 872.559648][T20634] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 872.559662][T20634] RBP: 00007f8385ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 872.559675][T20634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.559687][T20634] R13: 00007f83851e6038 R14: 00007f83851e5fa0 R15: 00007fffc1bac548 [ 872.559720][T20634] [ 872.831792][ T933] usb 4-1: 0:2 : does not exist [ 872.900894][ T122] usb 1-1: Using ep0 maxpacket: 16 [ 872.906295][T20640] comedi comedi3: board detection failed [ 872.915732][ T122] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 872.925216][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.934640][ T122] usb 1-1: Product: syz [ 872.938827][ T122] usb 1-1: Manufacturer: syz [ 872.943730][ T122] usb 1-1: SerialNumber: syz [ 872.951701][ T122] usb 1-1: config 0 descriptor?? [ 873.050419][T20647] comedi comedi3: dmm32at: I/O port conflict (0x501,16) [ 873.153157][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 873.153175][ T30] audit: type=1326 audit(1765957568.187:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20648 comm="syz.4.4488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8384f8f749 code=0x0 [ 873.175459][T20630] dvmrp0: entered allmulticast mode [ 873.241958][ T5911] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 873.396557][ T5911] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 873.406105][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.414565][ T5911] usb 9-1: Product: syz [ 873.419003][ T5911] usb 9-1: Manufacturer: syz [ 873.423720][ T5911] usb 9-1: SerialNumber: syz [ 873.430966][ T5911] usb 9-1: config 0 descriptor?? [ 873.440299][ T5911] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 873.451581][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 873.461597][ T5911] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 873.471531][ T5911] usb 9-1: media controller created [ 873.486830][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 873.531593][ T5911] DVB: Unable to find symbol mt352_attach() [ 873.567432][ T5911] DVB: Unable to find symbol nxt6000_attach() [ 873.576536][ T5911] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 873.588868][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input108 [ 873.602197][ T5911] dvb-usb: schedule remote query interval to 1000 msecs. [ 873.612200][ T5911] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 873.622427][ T5911] dvb-usb: bulk message failed: -22 (7/0) [ 873.628211][ T5911] dvb-usb: bulk message failed: -22 (7/0) [ 873.641024][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.645978][ T5911] usb 9-1: USB disconnect, device number 48 [ 873.678582][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.693157][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.724598][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.730013][ T5911] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 873.973842][ T933] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 874.018884][ T933] usb 4-1: USB disconnect, device number 53 [ 874.055002][ T122] usb 1-1: USB disconnect, device number 123 [ 874.100559][T14141] udevd[14141]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 874.308086][T20664] FAULT_INJECTION: forcing a failure. [ 874.308086][T20664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.321686][T20664] CPU: 0 UID: 0 PID: 20664 Comm: syz.0.4493 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.321705][T20664] Tainted: [L]=SOFTLOCKUP [ 874.321709][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.321716][T20664] Call Trace: [ 874.321721][T20664] [ 874.321726][T20664] dump_stack_lvl+0x189/0x250 [ 874.321742][T20664] ? __pfx____ratelimit+0x10/0x10 [ 874.321756][T20664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.321766][T20664] ? __pfx__printk+0x10/0x10 [ 874.321782][T20664] ? __might_fault+0xb0/0x130 [ 874.321802][T20664] should_fail_ex+0x414/0x560 [ 874.321816][T20664] _copy_from_iter+0x1cd/0x1630 [ 874.321834][T20664] ? anon_pipe_write+0xc5f/0x1460 [ 874.321846][T20664] ? __pfx__copy_from_iter+0x10/0x10 [ 874.321858][T20664] ? __pfx___mutex_lock+0x10/0x10 [ 874.321878][T20664] ? page_copy_sane+0x4e/0x280 [ 874.321892][T20664] copy_page_from_iter+0xdd/0x170 [ 874.321919][T20664] anon_pipe_write+0x9f8/0x1460 [ 874.321937][T20664] ? __pfx_aa_file_perm+0x10/0x10 [ 874.321964][T20664] ? anon_pipe_write+0xbc1/0x1460 [ 874.321997][T20664] ? __pfx_anon_pipe_write+0x10/0x10 [ 874.322015][T20664] ? common_file_perm+0x1b5/0x220 [ 874.322046][T20664] ? __pfx_autoremove_wake_function+0x10/0x10 [ 874.322073][T20664] ? bpf_lsm_file_permission+0x9/0x20 [ 874.322091][T20664] ? security_file_permission+0x75/0x290 [ 874.322135][T20664] vfs_write+0x5c9/0xb30 [ 874.322171][T20664] ? __pfx_anon_pipe_write+0x10/0x10 [ 874.322191][T20664] ? __pfx_vfs_write+0x10/0x10 [ 874.322226][T20664] ? __fget_files+0x2a/0x420 [ 874.322255][T20664] ksys_write+0x145/0x250 [ 874.322283][T20664] ? __pfx_ksys_write+0x10/0x10 [ 874.322313][T20664] ? do_syscall_64+0xbe/0xf80 [ 874.322346][T20664] do_syscall_64+0xfa/0xf80 [ 874.322372][T20664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.322390][T20664] ? clear_bhb_loop+0x60/0xb0 [ 874.322413][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.322431][T20664] RIP: 0033:0x7fdf12f8f749 [ 874.322449][T20664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.322467][T20664] RSP: 002b:00007fdf13e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 874.322488][T20664] RAX: ffffffffffffffda RBX: 00007fdf131e5fa0 RCX: 00007fdf12f8f749 [ 874.322503][T20664] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 874.322517][T20664] RBP: 00007fdf13e2b090 R08: 0000000000000000 R09: 0000000000000000 [ 874.322529][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.322540][T20664] R13: 00007fdf131e6038 R14: 00007fdf131e5fa0 R15: 00007fff86718828 [ 874.322571][T20664] [ 874.709447][T20669] netlink: 'syz.3.4494': attribute type 21 has an invalid length. [ 874.717480][T20669] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4494'. [ 874.728030][T20666] netlink: 'syz.3.4494': attribute type 1 has an invalid length. [ 874.736188][T20666] netlink: 'syz.3.4494': attribute type 2 has an invalid length. [ 874.758713][T20666] block nbd1: Unsupported socket: should be TCP or UNIX. [ 874.887746][T20672] comedi comedi3: board detection failed [ 874.896665][ T122] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 875.080022][ T122] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 875.089213][ T122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.107211][ T122] usb 1-1: Product: syz [ 875.111646][ T122] usb 1-1: Manufacturer: syz [ 875.116255][ T122] usb 1-1: SerialNumber: syz [ 875.137511][ T122] usb 1-1: config 0 descriptor?? [ 875.151596][ T122] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 124 [ 875.548190][T16009] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 875.617774][ T122] (null): failure reading functionality [ 875.630663][ T122] i2c i2c-1: failure reading functionality [ 875.639934][ T122] i2c i2c-1: connected i2c-tiny-usb device [ 875.648790][ T122] usb 1-1: USB disconnect, device number 124 [ 875.713325][T16009] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 875.722567][T16009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.730993][T16009] usb 4-1: Product: syz [ 875.735191][T16009] usb 4-1: Manufacturer: syz [ 875.740178][T16009] usb 4-1: SerialNumber: syz [ 875.746553][T16009] usb 4-1: config 0 descriptor?? [ 875.755784][T16009] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 875.767327][T16009] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 875.777505][T16009] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 875.787299][T16009] usb 4-1: media controller created [ 875.804208][T16009] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 875.843708][T16009] DVB: Unable to find symbol mt352_attach() [ 875.849799][ T7520] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 875.880001][T16009] DVB: Unable to find symbol nxt6000_attach() [ 875.888472][T16009] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 875.900400][T16009] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input109 [ 875.915501][T16009] dvb-usb: schedule remote query interval to 1000 msecs. [ 875.923246][T16009] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 875.934411][T16009] dvb-usb: bulk message failed: -22 (7/0) [ 875.940452][T16009] dvb-usb: bulk message failed: -22 (7/0) [ 875.963307][T16009] usb 4-1: USB disconnect, device number 54 [ 876.015552][ T7520] usb 9-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 876.027053][ T7520] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.038509][T16009] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 876.049260][ T7520] usb 9-1: Product: syz [ 876.056574][ T7520] usb 9-1: Manufacturer: syz [ 876.066596][ T7520] usb 9-1: SerialNumber: syz [ 876.080522][ T7520] usb 9-1: config 0 descriptor?? [ 876.088047][ T7520] go7007 9-1:0.0: probe with driver go7007 failed with error -12 [ 876.291157][T16009] usb 9-1: USB disconnect, device number 49 [ 876.512158][ T37] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 876.527216][T20695] FAULT_INJECTION: forcing a failure. [ 876.527216][T20695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.540879][ T933] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 876.549688][T20695] CPU: 1 UID: 0 PID: 20695 Comm: syz.3.4506 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.549710][T20695] Tainted: [L]=SOFTLOCKUP [ 876.549714][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 876.549721][T20695] Call Trace: [ 876.549726][T20695] [ 876.549731][T20695] dump_stack_lvl+0x189/0x250 [ 876.549746][T20695] ? __pfx____ratelimit+0x10/0x10 [ 876.549761][T20695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.549771][T20695] ? __pfx__printk+0x10/0x10 [ 876.549787][T20695] ? __might_fault+0xb0/0x130 [ 876.549807][T20695] should_fail_ex+0x414/0x560 [ 876.549822][T20695] _copy_from_iter+0x1cd/0x1630 [ 876.549841][T20695] ? anon_pipe_write+0xc5f/0x1460 [ 876.549861][T20695] ? __pfx__copy_from_iter+0x10/0x10 [ 876.549874][T20695] ? __pfx___mutex_lock+0x10/0x10 [ 876.549893][T20695] ? page_copy_sane+0x4e/0x280 [ 876.549907][T20695] copy_page_from_iter+0xdd/0x170 [ 876.549923][T20695] anon_pipe_write+0x9f8/0x1460 [ 876.549934][T20695] ? __pfx_aa_file_perm+0x10/0x10 [ 876.549949][T20695] ? anon_pipe_write+0xbc1/0x1460 [ 876.549968][T20695] ? __pfx_anon_pipe_write+0x10/0x10 [ 876.549977][T20695] ? common_file_perm+0x1b5/0x220 [ 876.549988][T20695] ? __pfx_autoremove_wake_function+0x10/0x10 [ 876.550003][T20695] ? bpf_lsm_file_permission+0x9/0x20 [ 876.550012][T20695] ? security_file_permission+0x75/0x290 [ 876.550033][T20695] vfs_write+0x5c9/0xb30 [ 876.550051][T20695] ? __pfx_anon_pipe_write+0x10/0x10 [ 876.550062][T20695] ? __pfx_vfs_write+0x10/0x10 [ 876.550082][T20695] ? __fget_files+0x2a/0x420 [ 876.550098][T20695] ksys_write+0x145/0x250 [ 876.550116][T20695] ? __pfx_ksys_write+0x10/0x10 [ 876.550133][T20695] ? do_syscall_64+0xbe/0xf80 [ 876.550149][T20695] do_syscall_64+0xfa/0xf80 [ 876.550164][T20695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.550174][T20695] ? clear_bhb_loop+0x60/0xb0 [ 876.550187][T20695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.550197][T20695] RIP: 0033:0x7f351c98f749 [ 876.550207][T20695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.550216][T20695] RSP: 002b:00007f351d811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 876.550228][T20695] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351c98f749 [ 876.550237][T20695] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 876.550244][T20695] RBP: 00007f351d811090 R08: 0000000000000000 R09: 0000000000000000 [ 876.550251][T20695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.550257][T20695] R13: 00007f351cbe6038 R14: 00007f351cbe5fa0 R15: 00007fff7a7469a8 [ 876.550274][T20695] [ 876.892413][ T37] usb 1-1: device descriptor read/64, error -71 [ 876.967500][ T933] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 876.977300][ T933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.985438][ T933] usb 5-1: Product: syz [ 876.989605][ T933] usb 5-1: Manufacturer: syz [ 876.994745][ T933] usb 5-1: SerialNumber: syz [ 877.125370][T20703] netlink: 324 bytes leftover after parsing attributes in process `syz.8.4510'. [ 877.134621][ T37] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 877.136757][T20703] comedi comedi3: dmm32at: I/O port conflict (0x6,16) [ 877.202346][ T7520] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 877.211956][ T933] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 877.227828][ T933] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 877.238789][ T933] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 877.249061][ T933] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 877.282789][ T37] usb 1-1: device descriptor read/64, error -71 [ 877.379067][ T7520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.389273][ T7520] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 877.392938][ T37] usb usb1-port1: attempt power cycle [ 877.405512][ T7520] usb 4-1: config 0 interface 0 has no altsetting 0 [ 877.414519][ T7520] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 877.423590][ T7520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.433569][ T7520] usb 4-1: config 0 descriptor?? [ 877.442449][ T122] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 877.598375][ T122] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 877.608558][ T122] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.616814][ T122] usb 9-1: Product: syz [ 877.621029][ T122] usb 9-1: Manufacturer: syz [ 877.625847][ T122] usb 9-1: SerialNumber: syz [ 877.637198][ T122] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 877.655209][T16009] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 877.743742][ T37] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 877.773623][ T37] usb 1-1: device descriptor read/8, error -71 [ 877.848001][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.859933][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.012482][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 878.033995][ T37] usb 1-1: device descriptor read/8, error -71 [ 878.088893][ T122] usb 9-1: USB disconnect, device number 50 [ 878.143952][ T37] usb usb1-port1: unable to enumerate USB device [ 878.742913][T16009] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 878.750097][T16009] ath9k_htc: Failed to initialize the device [ 878.757128][ T122] usb 9-1: ath9k_htc: USB layer deinitialized [ 879.064390][ T122] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 879.202386][ T122] usb 9-1: device descriptor read/64, error -71 [ 879.338361][T18659] usb 5-1: USB disconnect, device number 30 [ 879.408890][T20721] FAULT_INJECTION: forcing a failure. [ 879.408890][T20721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.422932][T20721] CPU: 0 UID: 0 PID: 20721 Comm: syz.4.4515 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.422965][T20721] Tainted: [L]=SOFTLOCKUP [ 879.422972][T20721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 879.422985][T20721] Call Trace: [ 879.422993][T20721] [ 879.423002][T20721] dump_stack_lvl+0x189/0x250 [ 879.423025][T20721] ? __pfx____ratelimit+0x10/0x10 [ 879.423041][T20721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.423052][T20721] ? __pfx__printk+0x10/0x10 [ 879.423067][T20721] ? __might_fault+0xb0/0x130 [ 879.423087][T20721] should_fail_ex+0x414/0x560 [ 879.423102][T20721] _copy_from_iter+0x1cd/0x1630 [ 879.423120][T20721] ? anon_pipe_write+0xc5f/0x1460 [ 879.423132][T20721] ? __pfx__copy_from_iter+0x10/0x10 [ 879.423145][T20721] ? __pfx___mutex_lock+0x10/0x10 [ 879.423164][T20721] ? page_copy_sane+0x4e/0x280 [ 879.423178][T20721] copy_page_from_iter+0xdd/0x170 [ 879.423193][T20721] anon_pipe_write+0x9f8/0x1460 [ 879.423204][T20721] ? __pfx_aa_file_perm+0x10/0x10 [ 879.423220][T20721] ? anon_pipe_write+0xbc1/0x1460 [ 879.423239][T20721] ? __pfx_anon_pipe_write+0x10/0x10 [ 879.423248][T20721] ? common_file_perm+0x1b5/0x220 [ 879.423260][T20721] ? __pfx_autoremove_wake_function+0x10/0x10 [ 879.423274][T20721] ? bpf_lsm_file_permission+0x9/0x20 [ 879.423284][T20721] ? security_file_permission+0x75/0x290 [ 879.423305][T20721] vfs_write+0x5c9/0xb30 [ 879.423322][T20721] ? __pfx_anon_pipe_write+0x10/0x10 [ 879.423333][T20721] ? __pfx_vfs_write+0x10/0x10 [ 879.423354][T20721] ? __fget_files+0x2a/0x420 [ 879.423371][T20721] ksys_write+0x145/0x250 [ 879.423387][T20721] ? __pfx_ksys_write+0x10/0x10 [ 879.423403][T20721] ? do_syscall_64+0xbe/0xf80 [ 879.423419][T20721] do_syscall_64+0xfa/0xf80 [ 879.423434][T20721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.423444][T20721] ? clear_bhb_loop+0x60/0xb0 [ 879.423457][T20721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.423467][T20721] RIP: 0033:0x7f8384f8f749 [ 879.423477][T20721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.423487][T20721] RSP: 002b:00007f8385ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 879.423500][T20721] RAX: ffffffffffffffda RBX: 00007f83851e5fa0 RCX: 00007f8384f8f749 [ 879.423508][T20721] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 879.423515][T20721] RBP: 00007f8385ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 879.423522][T20721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 879.423532][T20721] R13: 00007f83851e6038 R14: 00007f83851e5fa0 R15: 00007fffc1bac548 [ 879.423561][T20721] [ 879.700636][ T122] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 879.772376][ T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 879.832390][ T122] usb 9-1: device descriptor read/64, error -71 [ 879.928534][ T37] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 879.942520][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.943707][ T122] usb usb9-port1: attempt power cycle [ 879.950690][ T37] usb 1-1: Product: syz [ 879.963733][ T37] usb 1-1: Manufacturer: syz [ 879.968467][ T37] usb 1-1: SerialNumber: syz [ 879.983981][ T37] usb 1-1: config 0 descriptor?? [ 879.995400][ T7520] usb 4-1: string descriptor 0 read error: -71 [ 880.006776][ T37] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 880.007361][ T7520] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 880.038472][ T7520] usb 4-1: USB disconnect, device number 55 [ 880.061455][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 880.091375][ T37] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 880.103943][ T37] usb 1-1: media controller created [ 880.131685][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.193554][ T37] DVB: Unable to find symbol mt352_attach() [ 880.249981][ T37] DVB: Unable to find symbol nxt6000_attach() [ 880.257874][ T37] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 880.276929][ T37] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input110 [ 880.302325][ T122] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 880.306031][ T37] dvb-usb: schedule remote query interval to 1000 msecs. [ 880.324068][ T122] usb 9-1: device descriptor read/8, error -71 [ 880.330029][ T37] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 880.349980][ T37] dvb-usb: bulk message failed: -22 (7/0) [ 880.357890][ T37] dvb-usb: bulk message failed: -22 (7/0) [ 880.382654][ T37] usb 1-1: USB disconnect, device number 3 [ 880.438117][ T37] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 880.496504][T20743] comedi comedi3: comedi_config --init_data is deprecated [ 880.572575][ T122] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 880.594630][ T122] usb 9-1: device descriptor read/8, error -71 [ 880.662467][ T7520] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 880.702641][ T122] usb usb9-port1: unable to enumerate USB device [ 880.772366][T18659] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 880.806825][ T7520] usb 4-1: device descriptor read/64, error -71 [ 880.934743][T18659] usb 5-1: Using ep0 maxpacket: 16 [ 880.943823][T18659] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 880.964734][T18659] usb 5-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 880.992676][T18659] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 881.008012][T18659] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 881.017760][T18659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.026983][T18659] usb 5-1: Product: syz [ 881.031232][T18659] usb 5-1: Manufacturer: syz [ 881.037986][T18659] usb 5-1: SerialNumber: syz [ 881.092365][ T7520] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 881.222364][ T7520] usb 4-1: device descriptor read/64, error -71 [ 881.252533][ T37] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 881.332648][ T7520] usb usb4-port1: attempt power cycle [ 881.405400][ T37] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 881.414613][ T37] usb 1-1: config 0 has no interface number 0 [ 881.423121][ T37] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=95.fe [ 881.432215][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.440343][ T37] usb 1-1: Product: syz [ 881.444685][ T37] usb 1-1: Manufacturer: syz [ 881.449288][ T37] usb 1-1: SerialNumber: syz [ 881.452486][T18659] usb 5-1: 0:2 : does not exist [ 881.460445][ T37] usb 1-1: config 0 descriptor?? [ 881.471332][ T37] usb_ehset_test 1-1:0.219: probe with driver usb_ehset_test failed with error -32 [ 881.671338][ T37] usb 1-1: USB disconnect, device number 4 [ 881.672347][ T7520] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 881.706952][ T7520] usb 4-1: device descriptor read/8, error -71 [ 881.952626][ T7520] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 881.972971][ T7520] usb 4-1: device descriptor read/8, error -71 [ 882.056341][T20745] CUSE: info not properly terminated [ 882.092828][ T7520] usb usb4-port1: unable to enumerate USB device [ 882.287280][T18659] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 882.330882][T18659] usb 5-1: USB disconnect, device number 31 [ 882.486976][T20758] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4528'. [ 882.742382][ T933] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 882.872397][ T933] usb 1-1: device descriptor read/64, error -71 [ 883.113353][ T933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 883.196674][T20775] comedi comedi3: comedi_config --init_data is deprecated [ 883.242601][ T933] usb 1-1: device descriptor read/64, error -71 [ 883.361098][ T933] usb usb1-port1: attempt power cycle [ 883.518530][T20790] FAULT_INJECTION: forcing a failure. [ 883.518530][T20790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.540692][T20790] CPU: 0 UID: 0 PID: 20790 Comm: syz.3.4540 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.540726][T20790] Tainted: [L]=SOFTLOCKUP [ 883.540734][T20790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 883.540746][T20790] Call Trace: [ 883.540754][T20790] [ 883.540763][T20790] dump_stack_lvl+0x189/0x250 [ 883.540788][T20790] ? __pfx____ratelimit+0x10/0x10 [ 883.540816][T20790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 883.540837][T20790] ? __pfx__printk+0x10/0x10 [ 883.540867][T20790] ? __might_fault+0xb0/0x130 [ 883.540904][T20790] should_fail_ex+0x414/0x560 [ 883.540933][T20790] _copy_from_iter+0x1cd/0x1630 [ 883.540968][T20790] ? anon_pipe_write+0xc5f/0x1460 [ 883.540990][T20790] ? __pfx__copy_from_iter+0x10/0x10 [ 883.541015][T20790] ? __pfx___mutex_lock+0x10/0x10 [ 883.541052][T20790] ? page_copy_sane+0x4e/0x280 [ 883.541079][T20790] copy_page_from_iter+0xdd/0x170 [ 883.541110][T20790] anon_pipe_write+0x9f8/0x1460 [ 883.541130][T20790] ? __pfx_aa_file_perm+0x10/0x10 [ 883.541160][T20790] ? anon_pipe_write+0xbc1/0x1460 [ 883.541196][T20790] ? __pfx_anon_pipe_write+0x10/0x10 [ 883.541214][T20790] ? common_file_perm+0x1b5/0x220 [ 883.541237][T20790] ? __pfx_autoremove_wake_function+0x10/0x10 [ 883.541265][T20790] ? bpf_lsm_file_permission+0x9/0x20 [ 883.541284][T20790] ? security_file_permission+0x75/0x290 [ 883.541322][T20790] vfs_write+0x5c9/0xb30 [ 883.541353][T20790] ? __pfx_anon_pipe_write+0x10/0x10 [ 883.541382][T20790] ? __pfx_vfs_write+0x10/0x10 [ 883.541424][T20790] ? __fget_files+0x2a/0x420 [ 883.541455][T20790] ksys_write+0x145/0x250 [ 883.541485][T20790] ? __pfx_ksys_write+0x10/0x10 [ 883.541517][T20790] ? do_syscall_64+0xbe/0xf80 [ 883.541549][T20790] do_syscall_64+0xfa/0xf80 [ 883.541584][T20790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.541604][T20790] ? clear_bhb_loop+0x60/0xb0 [ 883.541627][T20790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.541718][T20790] RIP: 0033:0x7f351c98f749 [ 883.541738][T20790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.541755][T20790] RSP: 002b:00007f351d811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 883.541774][T20790] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351c98f749 [ 883.541789][T20790] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 883.541804][T20790] RBP: 00007f351d811090 R08: 0000000000000000 R09: 0000000000000000 [ 883.541816][T20790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 883.541828][T20790] R13: 00007f351cbe6038 R14: 00007f351cbe5fa0 R15: 00007fff7a7469a8 [ 883.541862][T20790] [ 883.752743][ T933] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 883.833294][ T933] usb 1-1: device descriptor read/8, error -71 [ 884.082414][T16009] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 884.102975][ T933] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 884.144950][ T933] usb 1-1: device descriptor read/8, error -71 [ 884.234235][T16009] usb 4-1: Using ep0 maxpacket: 16 [ 884.241171][T16009] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 884.250430][T16009] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.261664][T16009] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 884.277854][ T933] usb usb1-port1: unable to enumerate USB device [ 884.279579][T16009] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.294698][T16009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.302964][T16009] usb 4-1: Product: syz [ 884.307202][T16009] usb 4-1: Manufacturer: syz [ 884.311890][T16009] usb 4-1: SerialNumber: syz [ 884.372993][T20802] comedi comedi3: comedi_config --init_data is deprecated [ 884.662415][ T933] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 884.726556][T16009] usb 4-1: 0:2 : does not exist [ 884.822408][ T933] usb 5-1: Using ep0 maxpacket: 32 [ 884.829401][ T933] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.839391][ T933] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 884.851845][ T933] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 884.864015][ T933] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 884.875539][ T933] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 884.889314][ T933] usb 5-1: config 0 interface 0 has no altsetting 0 [ 884.897088][ T933] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 884.907132][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.918045][ T933] usb 5-1: config 0 descriptor?? [ 885.476063][T20809] netlink: 'syz.8.4547': attribute type 46 has an invalid length. [ 885.545280][ T933] usbhid 5-1:0.0: can't add hid device: -71 [ 885.557489][ T933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 885.578401][ T933] usb 5-1: USB disconnect, device number 32 [ 885.757919][T16009] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 885.781373][T20817] FAULT_INJECTION: forcing a failure. [ 885.781373][T20817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.802542][T20817] CPU: 0 UID: 0 PID: 20817 Comm: syz.0.4551 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.802576][T20817] Tainted: [L]=SOFTLOCKUP [ 885.802584][T20817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 885.802597][T20817] Call Trace: [ 885.802606][T20817] [ 885.802615][T20817] dump_stack_lvl+0x189/0x250 [ 885.802641][T20817] ? __pfx____ratelimit+0x10/0x10 [ 885.802668][T20817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.802696][T20817] ? __pfx__printk+0x10/0x10 [ 885.802727][T20817] ? __might_fault+0xb0/0x130 [ 885.802766][T20817] should_fail_ex+0x414/0x560 [ 885.802795][T20817] _copy_from_iter+0x1cd/0x1630 [ 885.802836][T20817] ? anon_pipe_write+0xc5f/0x1460 [ 885.802858][T20817] ? __pfx__copy_from_iter+0x10/0x10 [ 885.802883][T20817] ? __pfx___mutex_lock+0x10/0x10 [ 885.802921][T20817] ? page_copy_sane+0x4e/0x280 [ 885.802949][T20817] copy_page_from_iter+0xdd/0x170 [ 885.802979][T20817] anon_pipe_write+0x9f8/0x1460 [ 885.802999][T20817] ? __pfx_aa_file_perm+0x10/0x10 [ 885.803028][T20817] ? anon_pipe_write+0xbc1/0x1460 [ 885.803063][T20817] ? __pfx_anon_pipe_write+0x10/0x10 [ 885.803081][T20817] ? common_file_perm+0x1b5/0x220 [ 885.803103][T20817] ? __pfx_autoremove_wake_function+0x10/0x10 [ 885.803130][T20817] ? bpf_lsm_file_permission+0x9/0x20 [ 885.803148][T20817] ? security_file_permission+0x75/0x290 [ 885.803194][T20817] vfs_write+0x5c9/0xb30 [ 885.803226][T20817] ? __pfx_anon_pipe_write+0x10/0x10 [ 885.803247][T20817] ? __pfx_vfs_write+0x10/0x10 [ 885.803285][T20817] ? __fget_files+0x2a/0x420 [ 885.803318][T20817] ksys_write+0x145/0x250 [ 885.803349][T20817] ? __pfx_ksys_write+0x10/0x10 [ 885.803382][T20817] ? do_syscall_64+0xbe/0xf80 [ 885.803414][T20817] do_syscall_64+0xfa/0xf80 [ 885.803437][T20817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.803454][T20817] ? clear_bhb_loop+0x60/0xb0 [ 885.803479][T20817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.803499][T20817] RIP: 0033:0x7fdf12f8f749 [ 885.803519][T20817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 885.803537][T20817] RSP: 002b:00007fdf13e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 885.803559][T20817] RAX: ffffffffffffffda RBX: 00007fdf131e5fa0 RCX: 00007fdf12f8f749 [ 885.803579][T20817] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 885.803593][T20817] RBP: 00007fdf13e2b090 R08: 0000000000000000 R09: 0000000000000000 [ 885.803607][T20817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 885.803620][T20817] R13: 00007fdf131e6038 R14: 00007fdf131e5fa0 R15: 00007fff86718828 [ 885.803654][T20817] [ 885.809726][T16009] usb 4-1: USB disconnect, device number 60 [ 885.934424][ T933] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 886.065064][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4552'. [ 886.103861][T20819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4552'. [ 886.114839][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4552'. [ 886.214301][ T933] usb 9-1: Using ep0 maxpacket: 16 [ 886.221724][ T933] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 886.231800][ T933] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.242010][ T933] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.263015][ T933] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.275704][ T933] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.284874][ T933] usb 9-1: Product: syz [ 886.289523][ T933] usb 9-1: Manufacturer: syz [ 886.295084][ T933] usb 9-1: SerialNumber: syz [ 886.506204][ T933] usb 9-1: 0:2 : does not exist [ 886.949075][ T933] usb 9-1: USB disconnect, device number 55 [ 886.983194][T20839] program syz.0.4557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.206314][T20849] FAULT_INJECTION: forcing a failure. [ 887.206314][T20849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.222501][T20849] CPU: 1 UID: 0 PID: 20849 Comm: syz.3.4561 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.222533][T20849] Tainted: [L]=SOFTLOCKUP [ 887.222541][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.222554][T20849] Call Trace: [ 887.222563][T20849] [ 887.222572][T20849] dump_stack_lvl+0x189/0x250 [ 887.222598][T20849] ? __pfx____ratelimit+0x10/0x10 [ 887.222625][T20849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.222645][T20849] ? __pfx__printk+0x10/0x10 [ 887.222676][T20849] ? __might_fault+0xb0/0x130 [ 887.222712][T20849] should_fail_ex+0x414/0x560 [ 887.222739][T20849] _copy_from_iter+0x1cd/0x1630 [ 887.222769][T20849] ? anon_pipe_write+0xc5f/0x1460 [ 887.222788][T20849] ? __pfx__copy_from_iter+0x10/0x10 [ 887.222808][T20849] ? __pfx___mutex_lock+0x10/0x10 [ 887.222836][T20849] ? page_copy_sane+0x4e/0x280 [ 887.222857][T20849] copy_page_from_iter+0xdd/0x170 [ 887.222884][T20849] anon_pipe_write+0x9f8/0x1460 [ 887.222903][T20849] ? __pfx_aa_file_perm+0x10/0x10 [ 887.222931][T20849] ? anon_pipe_write+0xbc1/0x1460 [ 887.222966][T20849] ? __pfx_anon_pipe_write+0x10/0x10 [ 887.222985][T20849] ? common_file_perm+0x1b5/0x220 [ 887.223008][T20849] ? __pfx_autoremove_wake_function+0x10/0x10 [ 887.223035][T20849] ? bpf_lsm_file_permission+0x9/0x20 [ 887.223054][T20849] ? security_file_permission+0x75/0x290 [ 887.223093][T20849] vfs_write+0x5c9/0xb30 [ 887.223134][T20849] ? __pfx_anon_pipe_write+0x10/0x10 [ 887.223153][T20849] ? __pfx_vfs_write+0x10/0x10 [ 887.223191][T20849] ? __fget_files+0x2a/0x420 [ 887.223223][T20849] ksys_write+0x145/0x250 [ 887.223254][T20849] ? __pfx_ksys_write+0x10/0x10 [ 887.223290][T20849] ? do_syscall_64+0xbe/0xf80 [ 887.223321][T20849] do_syscall_64+0xfa/0xf80 [ 887.223350][T20849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.223370][T20849] ? clear_bhb_loop+0x60/0xb0 [ 887.223394][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.223414][T20849] RIP: 0033:0x7f351c98f749 [ 887.223433][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.223451][T20849] RSP: 002b:00007f351d811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 887.223472][T20849] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351c98f749 [ 887.223488][T20849] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 887.223502][T20849] RBP: 00007f351d811090 R08: 0000000000000000 R09: 0000000000000000 [ 887.223515][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.223528][T20849] R13: 00007f351cbe6038 R14: 00007f351cbe5fa0 R15: 00007fff7a7469a8 [ 887.223562][T20849] [ 887.509641][ T5911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 887.651606][T20853] FAULT_INJECTION: forcing a failure. [ 887.651606][T20853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 887.665181][T20853] CPU: 1 UID: 0 PID: 20853 Comm: syz.8.4563 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.665209][T20853] Tainted: [L]=SOFTLOCKUP [ 887.665215][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 887.665224][T20853] Call Trace: [ 887.665231][T20853] [ 887.665239][T20853] dump_stack_lvl+0x189/0x250 [ 887.665264][T20853] ? __pfx____ratelimit+0x10/0x10 [ 887.665285][T20853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.665307][T20853] ? __pfx__printk+0x10/0x10 [ 887.665331][T20853] ? fs_reclaim_acquire+0x7d/0x100 [ 887.665351][T20853] should_fail_ex+0x414/0x560 [ 887.665371][T20853] prepare_alloc_pages+0x22b/0x650 [ 887.665392][T20853] __alloc_frozen_pages_noprof+0x123/0x370 [ 887.665410][T20853] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 887.665430][T20853] ? policy_nodemask+0x27c/0x720 [ 887.665446][T20853] ? try_to_migrate+0x319/0x3d0 [ 887.665463][T20853] alloc_pages_mpol+0x232/0x4a0 [ 887.665483][T20853] alloc_migration_target_by_mpol+0x2e6/0x590 [ 887.665509][T20853] migrate_pages_batch+0x801/0x35e0 [ 887.665540][T20853] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 887.665566][T20853] ? __pfx_migrate_pages_batch+0x10/0x10 [ 887.665602][T20853] migrate_pages+0x1b9a/0x28e0 [ 887.665633][T20853] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 887.665658][T20853] ? __pfx_migrate_pages+0x10/0x10 [ 887.665673][T20853] ? mas_next_node+0xafd/0xd60 [ 887.665698][T20853] ? mas_next_slot+0xc27/0xcf0 [ 887.665737][T20853] __se_sys_mbind+0xa47/0xc40 [ 887.665759][T20853] ? __pfx_vfs_write+0x10/0x10 [ 887.665785][T20853] ? __pfx___se_sys_mbind+0x10/0x10 [ 887.665814][T20853] ? fput+0xa0/0xd0 [ 887.665832][T20853] ? ksys_write+0x22a/0x250 [ 887.665855][T20853] ? __pfx_ksys_write+0x10/0x10 [ 887.665880][T20853] ? __x64_sys_mbind+0x21/0xf0 [ 887.665904][T20853] do_syscall_64+0xfa/0xf80 [ 887.665925][T20853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.665941][T20853] ? clear_bhb_loop+0x60/0xb0 [ 887.665959][T20853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.665974][T20853] RIP: 0033:0x7f9ebd18f749 [ 887.665989][T20853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.666004][T20853] RSP: 002b:00007f9ebe0e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 887.666021][T20853] RAX: ffffffffffffffda RBX: 00007f9ebd3e5fa0 RCX: 00007f9ebd18f749 [ 887.666033][T20853] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 887.666043][T20853] RBP: 00007f9ebe0e7090 R08: 0000000000000000 R09: 0000000000000002 [ 887.666053][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 887.666071][T20853] R13: 00007f9ebd3e6038 R14: 00007f9ebd3e5fa0 R15: 00007ffc8a25d998 [ 887.666095][T20853] [ 887.670440][ T5911] usb 1-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 887.834450][T16009] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 887.839268][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.976214][ T5911] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 887.985556][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 887.993828][ T5911] usb 1-1: SerialNumber: syz [ 888.132286][T16009] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 888.142820][T16009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.154993][T16009] usb 4-1: config 0 descriptor?? [ 888.305670][T17991] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 888.474518][T17991] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 888.482797][T17991] usb 9-1: config 1 has no interface number 0 [ 888.488961][T17991] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 888.501588][T17991] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 888.512203][T17991] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.532756][T17991] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 888.541920][T17991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.550457][T17991] usb 9-1: Product: syz [ 888.554849][T17991] usb 9-1: Manufacturer: syz [ 888.559475][T17991] usb 9-1: SerialNumber: syz [ 888.580041][T20860] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 888.795387][T20859] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 888.956010][T20871] FAULT_INJECTION: forcing a failure. [ 888.956010][T20871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.969455][T20871] CPU: 0 UID: 0 PID: 20871 Comm: syz.4.4570 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.969487][T20871] Tainted: [L]=SOFTLOCKUP [ 888.969496][T20871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 888.969509][T20871] Call Trace: [ 888.969516][T20871] [ 888.969525][T20871] dump_stack_lvl+0x189/0x250 [ 888.969555][T20871] ? __pfx____ratelimit+0x10/0x10 [ 888.969582][T20871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.969602][T20871] ? __pfx__printk+0x10/0x10 [ 888.969632][T20871] ? __might_fault+0xb0/0x130 [ 888.969669][T20871] should_fail_ex+0x414/0x560 [ 888.969697][T20871] _copy_from_iter+0x1cd/0x1630 [ 888.969732][T20871] ? anon_pipe_write+0xc5f/0x1460 [ 888.969753][T20871] ? __pfx__copy_from_iter+0x10/0x10 [ 888.969777][T20871] ? __pfx___mutex_lock+0x10/0x10 [ 888.969811][T20871] ? page_copy_sane+0x4e/0x280 [ 888.969837][T20871] copy_page_from_iter+0xdd/0x170 [ 888.969866][T20871] anon_pipe_write+0x9f8/0x1460 [ 888.969886][T20871] ? __pfx_aa_file_perm+0x10/0x10 [ 888.969916][T20871] ? anon_pipe_write+0xbc1/0x1460 [ 888.969950][T20871] ? __pfx_anon_pipe_write+0x10/0x10 [ 888.969968][T20871] ? common_file_perm+0x1b5/0x220 [ 888.969999][T20871] ? __pfx_autoremove_wake_function+0x10/0x10 [ 888.970027][T20871] ? bpf_lsm_file_permission+0x9/0x20 [ 888.970044][T20871] ? security_file_permission+0x75/0x290 [ 888.970083][T20871] vfs_write+0x5c9/0xb30 [ 888.970116][T20871] ? __pfx_anon_pipe_write+0x10/0x10 [ 888.970138][T20871] ? __pfx_vfs_write+0x10/0x10 [ 888.970174][T20871] ? __fget_files+0x2a/0x420 [ 888.970206][T20871] ksys_write+0x145/0x250 [ 888.970237][T20871] ? __pfx_ksys_write+0x10/0x10 [ 888.970268][T20871] ? do_syscall_64+0xbe/0xf80 [ 888.970299][T20871] do_syscall_64+0xfa/0xf80 [ 888.970327][T20871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.970347][T20871] ? clear_bhb_loop+0x60/0xb0 [ 888.970371][T20871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.970390][T20871] RIP: 0033:0x7f8384f8f749 [ 888.970409][T20871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.970427][T20871] RSP: 002b:00007f8385ec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 888.970448][T20871] RAX: ffffffffffffffda RBX: 00007f83851e5fa0 RCX: 00007f8384f8f749 [ 888.970463][T20871] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 888.970476][T20871] RBP: 00007f8385ec3090 R08: 0000000000000000 R09: 0000000000000000 [ 888.970489][T20871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.970501][T20871] R13: 00007f83851e6038 R14: 00007f83851e5fa0 R15: 00007fffc1bac548 [ 888.970534][T20871] [ 889.355346][T17991] sierra_net 9-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 889.523502][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4566'. [ 889.532595][ T37] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 889.542678][T17991] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 889.549341][T17991] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 889.585215][T17991] sierra_net 9-1:1.7 wwan0: Submit SYNC failed -71 [ 889.593550][T17991] sierra_net 9-1:1.7 wwan0: Send SYNC failed, status -71 [ 889.626053][T17991] usb 9-1: USB disconnect, device number 56 [ 889.648058][T17991] sierra_net 9-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.8-1, Sierra Wireless USB-to-WWAN Modem [ 889.678111][T16009] usb 4-1: Cannot set autoneg [ 889.692971][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 889.693963][T16009] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 889.699842][T17991] sierra_net 9-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 889.727205][ T37] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 889.738552][T16009] usb 4-1: USB disconnect, device number 61 [ 889.751207][ T37] usb 5-1: config 0 has no interface number 0 [ 889.787468][ T37] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 889.800001][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.815613][ T37] usb 5-1: Product: syz [ 889.819869][ T37] usb 5-1: Manufacturer: syz [ 889.825362][ T37] usb 5-1: SerialNumber: syz [ 889.842956][ T37] usb 5-1: config 0 descriptor?? [ 889.855021][ T37] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 889.931728][ T5911] usb 1-1: 0:2 : does not exist [ 889.948673][ T5911] usb 1-1: unit 5 not found! [ 889.997746][ T5911] usb 1-1: USB disconnect, device number 9 [ 890.041747][T14141] udevd[14141]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.078631][ T37] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 890.093057][T20885] netlink: 774 bytes leftover after parsing attributes in process `syz.0.4572'. [ 890.113640][ T37] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 890.142780][T20885] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4572'. [ 890.466248][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 890.468072][T18891] usb 5-1: USB disconnect, device number 33 [ 890.524894][T18891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 890.566845][T18891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 890.623873][T18891] quatech2 5-1:0.51: device disconnected [ 891.299039][T20929] FAULT_INJECTION: forcing a failure. [ 891.299039][T20929] name failslab, interval 1, probability 0, space 0, times 0 [ 891.318967][T20929] CPU: 0 UID: 0 PID: 20929 Comm: syz.3.4581 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.319001][T20929] Tainted: [L]=SOFTLOCKUP [ 891.319008][T20929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 891.319020][T20929] Call Trace: [ 891.319028][T20929] [ 891.319044][T20929] dump_stack_lvl+0x189/0x250 [ 891.319088][T20929] ? __pfx____ratelimit+0x10/0x10 [ 891.319114][T20929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 891.319134][T20929] ? __pfx__printk+0x10/0x10 [ 891.319164][T20929] ? __pfx___might_resched+0x10/0x10 [ 891.319191][T20929] ? fs_reclaim_acquire+0x7d/0x100 [ 891.319214][T20929] should_fail_ex+0x414/0x560 [ 891.319241][T20929] should_failslab+0xa8/0x100 [ 891.319263][T20929] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 891.319291][T20929] ? __alloc_skb+0x255/0x430 [ 891.319314][T20929] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 891.319343][T20929] __alloc_skb+0x255/0x430 [ 891.319368][T20929] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 891.319397][T20929] ? __pfx___alloc_skb+0x10/0x10 [ 891.319423][T20929] ? irqentry_exit+0x5dd/0x660 [ 891.319450][T20929] ? rcu_is_watching+0x15/0xb0 [ 891.319475][T20929] tcp_stream_alloc_skb+0x3d/0x350 [ 891.319508][T20929] tcp_write_xmit+0xd87/0x6980 [ 891.319582][T20929] tcp_sendmsg_locked+0x2a57/0x5520 [ 891.319651][T20929] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 891.319669][T20929] ? __local_bh_enable_ip+0x12d/0x1c0 [ 891.319702][T20929] ? __local_bh_enable_ip+0x12d/0x1c0 [ 891.319737][T20929] ? do_raw_spin_unlock+0x122/0x240 [ 891.319767][T20929] tcp_sendmsg+0x2f/0x50 [ 891.319786][T20929] sock_sendmsg_nosec+0x8e/0x1d0 [ 891.319812][T20929] sock_write_iter+0x2d9/0x3d0 [ 891.319836][T20929] ? __pfx_sock_write_iter+0x10/0x10 [ 891.319869][T20929] ? bpf_lsm_file_permission+0x9/0x20 [ 891.319887][T20929] ? security_file_permission+0x75/0x290 [ 891.319925][T20929] vfs_write+0x5c9/0xb30 [ 891.319959][T20929] ? __pfx_sock_write_iter+0x10/0x10 [ 891.319981][T20929] ? __pfx_vfs_write+0x10/0x10 [ 891.320019][T20929] ? __fget_files+0x2a/0x420 [ 891.320058][T20929] ksys_write+0x145/0x250 [ 891.320089][T20929] ? __pfx_ksys_write+0x10/0x10 [ 891.320121][T20929] ? do_syscall_64+0xbe/0xf80 [ 891.320153][T20929] do_syscall_64+0xfa/0xf80 [ 891.320182][T20929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.320202][T20929] ? clear_bhb_loop+0x60/0xb0 [ 891.320226][T20929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.320245][T20929] RIP: 0033:0x7f351c98f749 [ 891.320263][T20929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.320281][T20929] RSP: 002b:00007f351d811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 891.320303][T20929] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351c98f749 [ 891.320319][T20929] RDX: 00000000fffffd9d RSI: 0000200000000200 RDI: 000000000000000a [ 891.320333][T20929] RBP: 00007f351d811090 R08: 0000000000000000 R09: 0000000000000000 [ 891.320345][T20929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.320357][T20929] R13: 00007f351cbe6038 R14: 00007f351cbe5fa0 R15: 00007fff7a7469a8 [ 891.320391][T20929] [ 891.888455][T20944] netlink: 'syz.0.4586': attribute type 9 has an invalid length. [ 891.896278][T20944] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4586'. [ 891.962326][T16009] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 892.118309][T16009] usb 9-1: config 0 has an invalid interface number: 71 but max is 0 [ 892.129179][T16009] usb 9-1: config 0 has no interface number 0 [ 892.142439][T16009] usb 9-1: config 0 interface 71 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 892.171604][T16009] usb 9-1: config 0 interface 71 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 892.187228][T16009] usb 9-1: config 0 interface 71 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 892.199925][T16009] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0 [ 892.209993][T16009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.218846][T16009] usb 9-1: Product: syz [ 892.223584][T16009] usb 9-1: Manufacturer: syz [ 892.230273][T16009] usb 9-1: SerialNumber: syz [ 892.238498][T16009] usb 9-1: config 0 descriptor?? [ 892.245292][T20941] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 892.262955][T16009] kvaser_usb 9-1:0.71: error -ENODEV: Cannot get usb endpoint(s) [ 892.352475][ T37] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 892.476930][T20941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.492805][T20941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.514007][ T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.530847][T20964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.550506][ T37] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 892.565624][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.574222][ T37] usb 1-1: Product: syz [ 892.578449][ T37] usb 1-1: Manufacturer: syz [ 892.579870][T20964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.583590][ T37] usb 1-1: SerialNumber: syz [ 892.619511][ T37] usb 1-1: config 0 descriptor?? [ 892.638884][ T37] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 892.659863][ T37] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 892.745777][ T122] usb 9-1: USB disconnect, device number 57 [ 892.824088][T20975] sctp: [Deprecated]: syz.3.4593 (pid 20975) Use of int in maxseg socket option. [ 892.824088][T20975] Use struct sctp_assoc_value instead [ 892.881124][T20977] syzkaller1: entered promiscuous mode [ 892.896845][ T37] usb 1-1: USB disconnect, device number 10 [ 892.898472][T20977] syzkaller1: entered allmulticast mode [ 893.458407][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4602'. [ 893.514774][ T37] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 893.550176][T21004] binder: 21003:21004 ioctl 8010671f 200000000180 returned -22 [ 893.575270][T21004] binder: 21003:21004 ioctl c0306201 200000000280 returned -14 [ 893.682360][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 893.698954][ T37] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 893.709782][ T37] usb 5-1: config 0 has no interface number 0 [ 893.719095][ T37] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 893.730511][ T37] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 893.744696][T21011] netlink: 'syz.8.4606': attribute type 2 has an invalid length. [ 893.758778][ T37] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 893.774085][ T37] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 893.792442][ T37] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 893.805245][ T37] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 893.816218][ T37] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 893.823787][T21015] ªªªªªª: renamed from lo (while UP) [ 893.827429][ T37] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 893.841982][ T37] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.858323][ T37] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 893.858446][T21013] block nbd0: NBD_DISCONNECT [ 893.868187][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.872474][T21013] block nbd0: Send disconnect failed -32 [ 893.881227][ T37] usb 5-1: Product: syz [ 893.891286][ T37] usb 5-1: Manufacturer: syz [ 893.906252][ T37] usb 5-1: SerialNumber: syz [ 893.921051][ T37] usb 5-1: config 0 descriptor?? [ 893.954170][T20994] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 893.975145][ T37] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 893.992093][ T37] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 894.190724][ T122] usb 5-1: USB disconnect, device number 34 [ 894.243910][ T37] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 894.362799][T18659] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 894.403549][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 894.411159][ T37] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.427740][ T37] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 894.446655][ T37] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 894.461145][ T37] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 894.473468][ T37] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 894.483124][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.506295][ T37] hub 1-1:1.0: bad descriptor, ignoring hub [ 894.518620][ T37] hub 1-1:1.0: probe with driver hub failed with error -5 [ 894.526500][ T37] cdc_wdm 1-1:1.0: skipping garbage [ 894.531994][ T37] cdc_wdm 1-1:1.0: skipping garbage [ 894.536264][T18659] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 894.543046][ T37] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 894.552732][ T37] cdc_wdm 1-1:1.0: Unknown control protocol [ 894.553979][T18659] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.569248][T18659] usb 4-1: Product: syz [ 894.574744][T18659] usb 4-1: Manufacturer: syz [ 894.579549][T18659] usb 4-1: SerialNumber: syz [ 894.742381][ T122] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 894.790759][T18659] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 894.806057][T18659] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 894.824108][T18659] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 894.835839][T18659] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 894.904363][ T122] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 894.915481][ T122] usb 5-1: config 0 has no interface number 0 [ 894.922993][ T122] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 894.933192][ T122] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.947350][ T122] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 894.956626][ T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.976872][ T122] usb 5-1: Product: syz [ 894.982293][ T122] usb 5-1: Manufacturer: syz [ 894.987896][ T122] usb 5-1: SerialNumber: syz [ 894.995630][ T122] usb 5-1: config 0 descriptor?? [ 895.013135][T21040] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 895.028214][ T122] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 895.058880][ T122] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 895.136910][ T37] usb 1-1: USB disconnect, device number 11 [ 895.441624][T21040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.450483][T21040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.461527][ T122] usb 5-1: USB disconnect, device number 35 [ 895.473137][ T122] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 895.485733][ T122] cyberjack 5-1:0.69: device disconnected [ 895.711735][T21049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4619'. [ 895.720941][T21049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4619'. [ 895.730067][T21049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4619'. [ 895.740545][T21049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4619'. [ 895.750538][T21048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4619'. [ 895.759741][T21048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4619'. [ 895.769096][T21048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4619'. [ 895.778286][T21048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4619'. [ 896.040682][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.050314][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.059506][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.068552][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.076651][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.084746][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.094128][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.102192][T21055] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 896.776001][ T30] audit: type=1800 audit(2000000019.639:155): pid=21081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4630" name="bus" dev="tmpfs" ino=2954 res=0 errno=0 [ 896.779791][T21081] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 896.804335][T21081] #PF: supervisor instruction fetch in kernel mode [ 896.810838][T21081] #PF: error_code(0x0010) - not-present page [ 896.816824][T21081] PGD 800000003dc5a067 P4D 800000003dc5a067 PUD 0 [ 896.823347][T21081] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 896.828713][T21081] CPU: 0 UID: 0 PID: 21081 Comm: syz.0.4630 Tainted: G L syzkaller #0 PREEMPT(full) [ 896.839642][T21081] Tainted: [L]=SOFTLOCKUP [ 896.843959][T21081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 896.854004][T21081] RIP: 0010:0x0 [ 896.857461][T21081] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 896.864817][T21081] RSP: 0018:ffffc9000dc17938 EFLAGS: 00010287 [ 896.870882][T21081] RAX: ffffffff81fb7d74 RBX: 1ffffd400045d400 RCX: 0000000000080000 [ 896.878843][T21081] RDX: ffffc9000f562000 RSI: ffffea00022ea000 RDI: ffff888029aeea80 [ 896.886805][T21081] RBP: ffffc9000dc179f8 R08: ffffea00022ea007 R09: 1ffffd400045d400 [ 896.894768][T21081] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 896.902729][T21081] R13: ffffea00022ea008 R14: ffffea00022ea000 R15: 1ffffd400045d401 [ 896.910694][T21081] FS: 00007fdf13e2b6c0(0000) GS:ffff8881259e1000(0000) knlGS:0000000000000000 [ 896.919616][T21081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.926195][T21081] CR2: ffffffffffffffd6 CR3: 00000000377f4000 CR4: 00000000003526f0 [ 896.934180][T21081] Call Trace: [ 896.937463][T21081] [ 896.940383][T21081] filemap_read_folio+0x117/0x380 [ 896.945416][T21081] ? __pfx_filemap_read_folio+0x10/0x10 [ 896.950967][T21081] do_read_cache_folio+0x358/0x590 [ 896.956072][T21081] freader_get_folio+0x3c7/0x830 [ 896.961022][T21081] freader_fetch+0xa3/0x750 [ 896.965525][T21081] __build_id_parse+0x133/0x7d0 [ 896.970373][T21081] ? __pfx___build_id_parse+0x10/0x10 [ 896.975748][T21081] procfs_procmap_ioctl+0x76f/0xce0 [ 896.980954][T21081] ? do_futex+0x333/0x420 [ 896.985277][T21081] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 896.990998][T21081] ? __fget_files+0x3a0/0x420 [ 896.995698][T21081] ? __fget_files+0x2a/0x420 [ 897.000282][T21081] ? bpf_lsm_file_ioctl+0x9/0x20 [ 897.005210][T21081] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 897.010925][T21081] __se_sys_ioctl+0xfc/0x170 [ 897.015517][T21081] do_syscall_64+0xfa/0xf80 [ 897.020019][T21081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.026075][T21081] ? clear_bhb_loop+0x60/0xb0 [ 897.030751][T21081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.036639][T21081] RIP: 0033:0x7fdf12f8f749 [ 897.041048][T21081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.060645][T21081] RSP: 002b:00007fdf13e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.069141][T21081] RAX: ffffffffffffffda RBX: 00007fdf131e5fa0 RCX: 00007fdf12f8f749 [ 897.077104][T21081] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000004 [ 897.085064][T21081] RBP: 00007fdf13013f91 R08: 0000000000000000 R09: 0000000000000000 [ 897.093020][T21081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.100995][T21081] R13: 00007fdf131e6038 R14: 00007fdf131e5fa0 R15: 00007fff86718828 [ 897.108961][T21081] [ 897.111979][T21081] Modules linked in: [ 897.115860][T21081] CR2: 0000000000000000 [ 897.120006][T21081] ---[ end trace 0000000000000000 ]--- [ 897.125446][T21081] RIP: 0010:0x0 [ 897.128898][T21081] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 897.136249][T21081] RSP: 0018:ffffc9000dc17938 EFLAGS: 00010287 [ 897.142310][T21081] RAX: ffffffff81fb7d74 RBX: 1ffffd400045d400 RCX: 0000000000080000 [ 897.150271][T21081] RDX: ffffc9000f562000 RSI: ffffea00022ea000 RDI: ffff888029aeea80 [ 897.158240][T21081] RBP: ffffc9000dc179f8 R08: ffffea00022ea007 R09: 1ffffd400045d400 [ 897.166202][T21081] R10: dffffc0000000000 R11: 0000000000000000 R12: 0000000000000000 [ 897.174163][T21081] R13: ffffea00022ea008 R14: ffffea00022ea000 R15: 1ffffd400045d401 [ 897.182127][T21081] FS: 00007fdf13e2b6c0(0000) GS:ffff8881259e1000(0000) knlGS:0000000000000000 [ 897.191045][T21081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.197617][T21081] CR2: ffffffffffffffd6 CR3: 00000000377f4000 CR4: 00000000003526f0 [ 897.205582][T21081] Kernel panic - not syncing: Fatal exception [ 897.211998][T21081] Kernel Offset: disabled [ 897.216308][T21081] Rebooting in 86400 seconds..