last executing test programs: 10m54.258064407s ago: executing program 32 (id=17): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000007c0)=0x40049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xe, &(0x7f000001c900)=ANY=[], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2e}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000003800)=""/102368, 0x18fe0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a) sendfile(0xffffffffffffffff, r3, 0x0, 0x85b1) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f00000017c0)={0x2020}, 0x2020) 10m49.916655049s ago: executing program 33 (id=34): syz_create_resource$futex(&(0x7f0000000040)=0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x7, 0x4, 0x67, @mcast1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1, 0x20, 0x3fb, 0xffe}}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r2, &(0x7f0000000800)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000840)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000880)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000900)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000980)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000a00), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x6) mkdir(&(0x7f0000000ac0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./trace\x00', &(0x7f0000000b40)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffff9c, &(0x7f0000000b80)='./trace/events/mac80211/enable\x00', 0x40000, 0x1) readv(r9, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00&\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0), 0x0) 10m43.591195644s ago: executing program 3 (id=75): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000840)=""/102392, 0x18ff8) timer_create(0x2, 0x0, &(0x7f0000019840)=0x0) timer_settime(r2, 0x1, &(0x7f0000019880)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000198c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb86dd601d6000001c2c00fe800000"], 0x0) mmap(&(0x7f000006b000/0x4000)=nil, 0x4000, 0x2000001, 0x810, r0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = io_uring_setup(0x2fac, &(0x7f0000000100)={0x0, 0x9d1d, 0x8000, 0x0, 0x10176}) close_range(r3, 0xffffffffffffffff, 0x0) 10m41.451735132s ago: executing program 3 (id=81): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x8d40, 0x0) ppoll(&(0x7f0000000440)=[{r0, 0x1072}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000780)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, "00769a7d8200010000001495595915303d6000"}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 10m25.923665785s ago: executing program 34 (id=81): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x8d40, 0x0) ppoll(&(0x7f0000000440)=[{r0, 0x1072}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000780)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, "00769a7d8200010000001495595915303d6000"}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) 9m6.4187474s ago: executing program 35 (id=253): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'bond0\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 8m30.054431258s ago: executing program 36 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) gettid() mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) write(r0, &(0x7f0000000100)='R', 0x1) read$FUSE(r0, &(0x7f00000017c0)={0x2020}, 0x2020) 8m3.095367496s ago: executing program 37 (id=395): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = syz_clone(0x40000080, &(0x7f0000000000)="3d3e489f992280d85f10065a", 0xc, &(0x7f0000000040), 0x0, &(0x7f0000000180)="29c35e0420b76cbb1321d2980ff478a2b0658052f6925edb6d4450198bd7") prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400090401000000000000002d000000010000000500020008"], 0x20}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) ptrace$poke(0x5, r1, &(0x7f00000003c0), 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) 7m48.843985299s ago: executing program 38 (id=429): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7m42.16775444s ago: executing program 39 (id=441): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)="2efdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffd}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 6m22.061589247s ago: executing program 9 (id=577): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000380)=0x32, 0x4) 6m21.849301238s ago: executing program 9 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 6m21.3433401s ago: executing program 9 (id=579): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280"], 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 6m19.491827738s ago: executing program 9 (id=580): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x8280, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x100, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40727b, 0x80, 0x3, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000002, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6m19.146773024s ago: executing program 9 (id=581): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000840)=""/102392, 0x18ff8) timer_create(0x2, 0x0, &(0x7f0000019840)=0x0) timer_settime(r2, 0x1, &(0x7f0000019880)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000198c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb86dd601d6000001c2c00fe800000"], 0x0) mmap(&(0x7f000006b000/0x4000)=nil, 0x4000, 0x2000001, 0x810, r0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x2fac, &(0x7f0000000100)={0x0, 0x9d1d, 0x8000, 0x0, 0x10176}) close_range(r3, 0xffffffffffffffff, 0x0) 6m18.271865023s ago: executing program 40 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x161) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x80) mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='dir0/per_cpu/cpu0/trace\x00', 0x48342, 0x1a1) 6m18.245208446s ago: executing program 9 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x5, 0xb05, 0x8502, 0x0, 0x0, "05010902a10185030901150026ff00750895088102c0"}}, 0x12e) read(r2, &(0x7f0000000680), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./tracing\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./tracing/events/lock/contended_release/enable\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {0x0, 0x4109}, {0x14, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ipv4_newaddr={0x2c, 0x14, 0x8, 0x70bd26, 0x25dfdbfd, {0x2, 0x3f, 0x88, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0xbc, 0xf0, 0x3, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) write(r3, &(0x7f0000000b40)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x101800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000700)={0xa, {0x1}}, 0xa) 6m15.988605716s ago: executing program 3 (id=457): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000640)) dup3(r0, r1, 0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000600)={{@my=0x1, 0x2}, @my=0x1, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006, 0x0, 0x80000000}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='smb3\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000340), 0x24100, 0x0) 6m14.029529475s ago: executing program 3 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="2efdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffd}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(r0, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = userfaultfd(0x1) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x2000, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x106, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x2, 0x1, 0x8, 0xc0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "417e2e01ceb8"}, {0x5, 0x24, 0x0, 0xd8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@mdlm_detail={0xa, 0x24, 0x13, 0x81, "a477cf439ff8"}, @mdlm_detail={0x5c, 0x24, 0x13, 0x1, "2df578ea851ad5b29821a89d96b1b21d689e204cb4bf0bdf61759c0bcb71cc9c3245784de84d52853b0c4857bbad4a0556631c387ff59e1102b4611de9bd58a58035527780b6b28793023732757d22b6f77b645e75b5a0be"}, @country_functional={0x6, 0x24, 0x7, 0x7, 0xd9f}, @mdlm_detail={0x26, 0x24, 0x13, 0x9, "3e9f82c8d5f3563faab5c51866b26400073ac8e393a13cdbf0deecd3f0681a30e039"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x0, 0xfa}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2403}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdir(&(0x7f0000000a80)='./file1\x00', 0x0) 6m12.322913689s ago: executing program 41 (id=572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x240000c8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x10, 0x2, 0x6, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x3, 0x0, 0xa, 0x0, 0xffd, 0x200010, 0xaf, 0x0, 0x9, 0x0, 0x6]}) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./proc_mnt\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r2, &(0x7f00000009c0)=""/1, 0x1000) 6m9.223422485s ago: executing program 3 (id=591): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000840)=""/102392, 0x18ff8) timer_create(0x2, 0x0, &(0x7f0000019840)=0x0) timer_settime(r2, 0x1, &(0x7f0000019880)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000198c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb86dd601d6000001c2c00fe800000"], 0x0) mmap(&(0x7f000006b000/0x4000)=nil, 0x4000, 0x2000001, 0x810, r0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x2fac, &(0x7f0000000100)={0x0, 0x9d1d, 0x8000, 0x0, 0x10176}) close_range(r3, 0xffffffffffffffff, 0x0) 6m8.349046334s ago: executing program 3 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x5, 0xb05, 0x8502, 0x0, 0x0, "05010902a10185030901150026ff00750895088102c0"}}, 0x12e) read(r2, &(0x7f0000000680), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./tracing\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./tracing/events/lock/contended_release/enable\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {0x0, 0x4109}, {0x14, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ipv4_newaddr={0x2c, 0x14, 0x8, 0x70bd26, 0x25dfdbfd, {0x2, 0x3f, 0x88, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0xbc, 0xf0, 0x3, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) write(r3, &(0x7f0000000b40)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$UHID_INPUT2(r2, &(0x7f00000006c0)={0xc, {0x9, "030000000000000000"}}, 0xf) 6m3.017209258s ago: executing program 42 (id=583): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x5, 0xb05, 0x8502, 0x0, 0x0, "05010902a10185030901150026ff00750895088102c0"}}, 0x12e) read(r2, &(0x7f0000000680), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./tracing\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./tracing/events/lock/contended_release/enable\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {0x0, 0x4109}, {0x14, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ipv4_newaddr={0x2c, 0x14, 0x8, 0x70bd26, 0x25dfdbfd, {0x2, 0x3f, 0x88, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0xbc, 0xf0, 0x3, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) write(r3, &(0x7f0000000b40)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x101800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x6) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000700)={0xa, {0x1}}, 0xa) 5m53.177392881s ago: executing program 43 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000540)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x16, 0x5, 0xb05, 0x8502, 0x0, 0x0, "05010902a10185030901150026ff00750895088102c0"}}, 0x12e) read(r2, &(0x7f0000000680), 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./tracing\x00', &(0x7f0000000900)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./tracing/events/lock/contended_release/enable\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {0x0, 0x4109}, {0x14, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ipv4_newaddr={0x2c, 0x14, 0x8, 0x70bd26, 0x25dfdbfd, {0x2, 0x3f, 0x88, 0xfd}, [@IFA_CACHEINFO={0x14, 0x6, {0xbc, 0xf0, 0x3, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000) write(r3, &(0x7f0000000b40)='1', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$UHID_INPUT2(r2, &(0x7f00000006c0)={0xc, {0x9, "030000000000000000"}}, 0xf) 5m26.729196567s ago: executing program 4 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/rfcomm0\x00', 0x802, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5401, 0x0) 5m26.332088498s ago: executing program 4 (id=648): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000240)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x113845, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYBLOB=',group', @ANYRESDEC=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'dummy0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 5m25.189921734s ago: executing program 4 (id=651): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000200)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2043, 0x3, 0xf8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800093ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5m24.850821259s ago: executing program 4 (id=653): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0xa0011, 0x0, 0x0, @by_dev={r1}, [@raid={0x0, 0x8, 0x0, 0x80, 'raid\x00', {'raid1', 0x20, '3 64 rebuild 0', 0x20, 0x2, [{0x20, @none, 0x20, @ram_num={'1:', 0x0}}, {0x20, @dev=@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}}]}}]}) 5m23.491340417s ago: executing program 4 (id=656): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000000240), 0x800001d, 0x0) 5m22.407994608s ago: executing program 4 (id=659): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'bond0\x00', {0x3}, 0x7}) 5m5.974490313s ago: executing program 44 (id=659): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)}) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000280)={0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40080c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000300)={0x0, 'bond0\x00', {0x3}, 0x7}) 4m10.410425639s ago: executing program 1 (id=849): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x149}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x49, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) read$FUSE(r6, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0xf) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000200)={0x800, 0x1, 0x1, 0x0, 0x7c}) ioctl$vim2m_VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f0000000280)={0x1, 0x6, 0x3, 0x4080}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r10, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 4m7.852163558s ago: executing program 1 (id=862): r0 = syz_open_dev$I2C(&(0x7f0000001100), 0x0, 0x80) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000001140)={0x1, 0x4, 0x3, &(0x7f0000001180)={0x10, "14a6c62707da000000b100000000000028000000000000000000000000002000"}}) 4m7.671055226s ago: executing program 1 (id=864): syz_open_dev$vim2m(0x0, 0x800, 0x2) socket$unix(0x1, 0x5, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000008c0)='270', 0x3) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000005800000000000000070000009500"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync_file_range(r1, 0x800, 0x5f0f, 0x6) socket$kcm(0x10, 0x2, 0x10) unshare(0x40000000) 4m3.536655155s ago: executing program 1 (id=876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) 4m2.366417903s ago: executing program 1 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000840)=""/102392, 0x18ff8) timer_create(0x2, 0x0, &(0x7f0000019840)=0x0) timer_settime(r2, 0x1, &(0x7f0000019880)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000198c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb86dd601d6000001c2c00fe800000"], 0x0) mmap(&(0x7f000006b000/0x4000)=nil, 0x4000, 0x2000001, 0x810, r0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x2fac, &(0x7f0000000100)={0x0, 0x9d1d, 0x8000, 0x0, 0x10176}) close_range(r3, 0xffffffffffffffff, 0x0) 4m1.029548188s ago: executing program 1 (id=883): r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000003c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000400)={0x0, @bt={0x500, 0x2d3, 0x1, 0x280000, 0xdd9f83, 0x1, 0x9, 0x1d, 0x2, 0x4, 0x721, 0x13, 0x6, 0x7f, 0x3b, 0x4, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x70b525, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x32ff5f671ead9f00}, 0x4008874) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="000061d5", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="1800508005000200000000000500020004000000040005000800090001ac0f000a0006000802110000010000080037000200000004000b00"], 0x54}}, 0x4000841) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x7ff, r4}, 0x38) sendfile(r1, r1, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000300), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000640)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000006c0)={{0x80000000, r7, 0x3, [0x0, 0x10000]}, {r6, r8, 0x4, [0xff, 0x7]}, 0x10000000, [0x80004, 0x200008]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc01c7c02, &(0x7f0000000600)={r6, 0x0, &(0x7f0000000700)=[{{}, {0x80000000, 0x0}}]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) acct(&(0x7f0000000180)='./sec/tomoyo/query\x00') close(r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) ioctl$SIOCSIFHWADDR(r10, 0x8b35, &(0x7f0000000c00)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000b40)={{0x80000000, r9, 0x4, [0x2, 0xc441]}, {0x80000000, 0x0, 0x2, [0xbc15, 0xfffffff8]}, 0x0, [0x6, 0xb]}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES32=r11], 0x48}}, 0x0) 3m45.810437038s ago: executing program 45 (id=883): r0 = syz_open_dev$vbi(&(0x7f0000000380), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000003c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000400)={0x0, @bt={0x500, 0x2d3, 0x1, 0x280000, 0xdd9f83, 0x1, 0x9, 0x1d, 0x2, 0x4, 0x721, 0x13, 0x6, 0x7f, 0x3b, 0x4, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x70b525, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x32ff5f671ead9f00}, 0x4008874) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="000061d5", @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="1800508005000200000000000500020004000000040005000800090001ac0f000a0006000802110000010000080037000200000004000b00"], 0x54}}, 0x4000841) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x7ff, r4}, 0x38) sendfile(r1, r1, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000300), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000640)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f00000006c0)={{0x80000000, r7, 0x3, [0x0, 0x10000]}, {r6, r8, 0x4, [0xff, 0x7]}, 0x10000000, [0x80004, 0x200008]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc01c7c02, &(0x7f0000000600)={r6, 0x0, &(0x7f0000000700)=[{{}, {0x80000000, 0x0}}]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) acct(&(0x7f0000000180)='./sec/tomoyo/query\x00') close(r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)) ioctl$SIOCSIFHWADDR(r10, 0x8b35, &(0x7f0000000c00)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000b40)={{0x80000000, r9, 0x4, [0x2, 0xc441]}, {0x80000000, 0x0, 0x2, [0xbc15, 0xfffffff8]}, 0x0, [0x6, 0xb]}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES32=r11], 0x48}}, 0x0) 1m28.609155523s ago: executing program 7 (id=1372): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x2a00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfffffff7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xb, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m27.263182649s ago: executing program 7 (id=1377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)) 1m26.929869243s ago: executing program 7 (id=1380): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x15, 0x8, 0x2, 0x42, 0x1}, 0x50) 1m26.704077356s ago: executing program 7 (id=1383): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x12148c5, &(0x7f0000000100)={[{@utf8no}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@fat=@debug}, {@uni_xlateno}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@utf8no}]}, 0x0, 0x2d9, &(0x7f0000000200)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x1333406, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000680)='.\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x1005c48, 0x0) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 1m26.291149588s ago: executing program 7 (id=1387): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0x2a00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1, 0xfffffff7}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xb, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xffd8) 1m18.988058497s ago: executing program 7 (id=1410): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x7ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1m18.36446016s ago: executing program 46 (id=1410): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x7ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 9.088625741s ago: executing program 5 (id=1701): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd27, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) 8.886180071s ago: executing program 2 (id=1703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="2efdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffd}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(r0, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000ff2505a8a440000e4013c122000102030109021b000101058003090400060107010201090501020004040904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = userfaultfd(0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x2000, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x106, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x2, 0x1, 0x8, 0xc0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "417e2e01ceb8"}, {0x5, 0x24, 0x0, 0xd8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@mdlm_detail={0xa, 0x24, 0x13, 0x81, "a477cf439ff8"}, @mdlm_detail={0x5c, 0x24, 0x13, 0x1, "2df578ea851ad5b29821a89d96b1b21d689e204cb4bf0bdf61759c0bcb71cc9c3245784de84d52853b0c4857bbad4a0556631c387ff59e1102b4611de9bd58a58035527780b6b28793023732757d22b6f77b645e75b5a0be"}, @country_functional={0x6, 0x24, 0x7, 0x7, 0xd9f}, @mdlm_detail={0x26, 0x24, 0x13, 0x9, "3e9f82c8d5f3563faab5c51866b26400073ac8e393a13cdbf0deecd3f0681a30e039"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x0, 0xfa}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2403}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdir(&(0x7f0000000a80)='./file1\x00', 0x0) 8.866939323s ago: executing program 8 (id=1704): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 8.801316939s ago: executing program 5 (id=1705): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000440)={&(0x7f0000001fc0)=[{0x1, 0x10, 0x3a, &(0x7f00000000c0)="f8f3ba33e8f4ecda433dcc7fd028f0aa6210edc26aa6f942c6137c844faca76c34e1035e3fcf783ec40037851fef0122b9cdbf21a77841cdd753"}], 0x1}) 6.568337886s ago: executing program 6 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000019340)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000193c0)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 6.302316843s ago: executing program 8 (id=1708): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"77fe1801f805000000ffee0092000008", "000900000000000200", "000000000000161cdf2b7400"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000000c0)={0x400, {"52f85c70d9764fad16f726a7dca3011e", "6936f6809c8010c296846957dcd968bf", "1c21212bd50edbcfa2baf5bbd009d38e"}, 0x8, 0x1}) 6.213702052s ago: executing program 6 (id=1709): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000400)=[@wrmsr={0x65, 0x20, {0x37c, 0x4bd63bd2}}, @cpuid={0x64, 0x18, {0x7, 0x7}}, @nested_set_state_pages={0x140, 0x28, {0x1, 0xa, @gpa=0xffe}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x88, 0x5, 0x200, 0x3}}, @wrmsr={0x65, 0x20, {0x48778ece9afd7b5b, 0xfffffffffffffc02}}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x1, 0x3b0, 0x400}}, @wrmsr={0x65, 0x20, {0xe7, 0xffffffffffffff34}}, @uexit={0x0, 0x18, 0x10000}, @set_irq_handler={0xc8, 0x20, {0x82, 0x2}}, @nested_amd_clgi={0x17f, 0x10}], 0x168}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000300)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 6.02698505s ago: executing program 8 (id=1711): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, 0x0, 0x0) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 5.92822688s ago: executing program 6 (id=1712): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r0 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000600)={0x0, 0x30b5, 0x800, 0x1, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0xc1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 4.716223433s ago: executing program 8 (id=1714): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='\v', 0x1) 4.603991195s ago: executing program 5 (id=1715): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0, 0x40010002, 0x0, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000740)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 4.541839441s ago: executing program 0 (id=1716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)}], 0x1}, 0x48043) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "698efc4a970c20e519683303c2d20fb06287c5a9590b730a4126567f5c6ee431f97fa12babf477563697702d8961a8a9fd59d87ced46843f70e0401cc350ff0a3df974e5544dffc5d45e19"}, 0x56) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.532625571s ago: executing program 2 (id=1717): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000500)=0x4, 0x4) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='dummy_udc.0', 0xb) bind$bt_sco(r3, &(0x7f0000000380), 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.243923561s ago: executing program 5 (id=1718): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 4.068178169s ago: executing program 8 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000019340)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f00000193c0)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 4.017344103s ago: executing program 2 (id=1720): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='.\x00', 0x0, 0x244) r1 = openat(r0, &(0x7f0000000380)='./proc/thread-self/fail-nth\x00', 0x2, 0x19) write(r1, &(0x7f00000003c0)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3.292823377s ago: executing program 0 (id=1721): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"77fe1801f805000000ffee0092000008", "000900000000000200", "000000000000161cdf2b7400"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000000c0)={0x400, {"52f85c70d9764fad16f726a7dca3011e", "6936f6809c8010c296846957dcd968bf", "1c21212bd50edbcfa2baf5bbd009d38e"}, 0x8, 0x1}) 3.233525303s ago: executing program 6 (id=1722): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000400)=[@wrmsr={0x65, 0x20, {0x37c, 0x4bd63bd2}}, @cpuid={0x64, 0x18, {0x7, 0x7}}, @nested_set_state_pages={0x140, 0x28, {0x1, 0xa, @gpa=0xffe}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x88, 0x5, 0x200, 0x3}}, @wrmsr={0x65, 0x20, {0x48778ece9afd7b5b, 0xfffffffffffffc02}}, @nested_intel_msr_list_add={0x155, 0x30, {0x1, 0x1, 0x3b0, 0x400}}, @wrmsr={0x65, 0x20, {0xe7, 0xffffffffffffff34}}, @uexit={0x0, 0x18, 0x10000}, @set_irq_handler={0xc8, 0x20, {0x82, 0x2}}, @nested_amd_clgi={0x17f, 0x10}], 0x168}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000300)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 3.216491635s ago: executing program 5 (id=1723): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'dmm32at\x00', [0x300, 0x1, 0x1, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffe]}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="503bfde51b257f40b3392d504fe4", 0xe}], 0x1) syz_ublk_setup_io_uring(0x735d, &(0x7f0000000500)={0x0, 0x8eb4, 0x1000, 0x3, 0xa1, 0x0, r4}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xfc, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.056965811s ago: executing program 2 (id=1724): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, 0x0, 0x0) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 2.996333537s ago: executing program 8 (id=1725): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200119"], 0x0}) 2.977517899s ago: executing program 6 (id=1726): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f00000003c0)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) open(&(0x7f00000001c0)='.\x00', 0x8000, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000700)=0x0) r2 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r2, r1, &(0x7f0000000740)={0x0, 0x3d27, 0x500, 0x3, 0xf3}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe703, 0x0, 0x3, 0x40092}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4519, 0x8, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x8000, 0x40040085, 0xe6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x24b3, 0x1, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.912763675s ago: executing program 5 (id=1727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="2efdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffd}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) accept4(r0, &(0x7f0000000500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x80, 0x81000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000ff2505a8a440000e4013c122000102030109021b000101058003090400060107010201090501020004040904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = userfaultfd(0x1) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x2000, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x106, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x2, 0x1, 0x8, 0xc0, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "417e2e01ceb8"}, {0x5, 0x24, 0x0, 0xd8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1000, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x9}, [@mdlm_detail={0xa, 0x24, 0x13, 0x81, "a477cf439ff8"}, @mdlm_detail={0x5c, 0x24, 0x13, 0x1, "2df578ea851ad5b29821a89d96b1b21d689e204cb4bf0bdf61759c0bcb71cc9c3245784de84d52853b0c4857bbad4a0556631c387ff59e1102b4611de9bd58a58035527780b6b28793023732757d22b6f77b645e75b5a0be"}, @country_functional={0x6, 0x24, 0x7, 0x7, 0xd9f}, @mdlm_detail={0x26, 0x24, 0x13, 0x9, "3e9f82c8d5f3563faab5c51866b26400073ac8e393a13cdbf0deecd3f0681a30e039"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x0, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x7, 0x3, 0xfc}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x0, 0xfa}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x2403}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x1c09}}]}) mkdir(&(0x7f0000000a80)='./file1\x00', 0x0) 2.893805677s ago: executing program 0 (id=1728): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000540)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000680)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0, 0x40010002, 0x0, {0x3}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000740)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000007c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 687.388331ms ago: executing program 0 (id=1729): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000001c0)='\v', 0x1) 663.658063ms ago: executing program 2 (id=1730): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000500)=0x4, 0x4) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./config\x00', &(0x7f00000002c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='dummy_udc.0', 0xb) bind$bt_sco(r3, &(0x7f0000000380), 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x800c2, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 600.21914ms ago: executing program 6 (id=1731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)}], 0x1}, 0x48043) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "698efc4a970c20e519683303c2d20fb06287c5a9590b730a4126567f5c6ee431f97fa12babf477563697702d8961a8a9fd59d87ced46843f70e0401cc350ff0a3df974e5544dffc5d45e19"}, 0x56) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 441.530976ms ago: executing program 0 (id=1732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 297.62175ms ago: executing program 2 (id=1733): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$kcm(0x2, 0x7, 0x2) socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) clock_adjtime(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584609c24a00c06c9d319", 0x9b}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190) 0s ago: executing program 0 (id=1734): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./nfsd\x00', &(0x7f00000004c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000007c0)='100', 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x4cec2000) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='tcp 2', 0x5) kernel console output (not intermixed with test programs): 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.113822][ T9516] RSP: 002b:00007fb4a4616028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 606.122252][ T9516] RAX: ffffffffffffffda RBX: 00007fb4a3a25fa0 RCX: 00007fb4a379fb19 [ 606.130233][ T9516] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000 [ 606.138229][ T9516] RBP: 00007fb4a3837b70 R08: 0000000000000008 R09: 0000000000000000 [ 606.146221][ T9516] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 606.154238][ T9516] R13: 00007fb4a3a26038 R14: 00007fb4a3a25fa0 R15: 00007ffc1f8a2538 [ 606.162268][ T9516] [ 606.317257][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.542693][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.023425][ T6902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.102634][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.111477][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.484650][ T9534] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 607.890225][ T5158] asus 0005:0B05:8502.001D: No inputs registered, leaving [ 607.929008][ T5158] asus 0005:0B05:8502.001D: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 609.353035][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.078625][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.913083][ T9559] fido_id[9559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 612.142999][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.254570][ T4652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.384641][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.394193][ T9571] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 613.183039][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.239648][ T9579] loop5: detected capacity change from 0 to 128 [ 614.222761][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.347581][ T9572] loop6: detected capacity change from 0 to 32768 [ 614.447858][ T9572] XFS (loop6): Mounting V5 Filesystem [ 614.528658][ T9572] XFS (loop6): Ending clean mount [ 614.713796][ T9629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.742250][ T7392] XFS (loop6): Unmounting Filesystem [ 615.263047][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.432884][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.870039][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 615.870128][ T27] audit: type=1326 audit(1793929346.648:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 615.934568][ T27] audit: type=1326 audit(1793929346.648:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 615.999527][ T27] audit: type=1326 audit(1793929346.688:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 616.055837][ T27] audit: type=1326 audit(1793929346.688:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 616.121103][ T27] audit: type=1326 audit(1793929346.688:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 616.149831][ T27] audit: type=1326 audit(1793929346.688:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 616.177635][ T27] audit: type=1326 audit(1793929346.688:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 616.213934][ T27] audit: type=1326 audit(1793929346.688:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 616.258943][ T27] audit: type=1326 audit(1793929346.688:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 616.305581][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.349261][ T27] audit: type=1326 audit(1793929346.688:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9662 comm="syz.7.1116" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d8d9fb19 code=0x7ffc0000 [ 617.405299][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.463240][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.487873][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.385887][ T9780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.394636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.503408][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.697760][ T128] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 621.121691][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.282963][ T128] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 621.828000][ T128] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 621.901525][ T9788] loop0: detected capacity change from 0 to 16 [ 622.045072][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.053800][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.122126][ T128] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.137107][ T9788] erofs: (device loop0): mounted with root inode @ nid 36. [ 622.274577][ T128] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.340802][ T9788] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 622.372784][ T128] usb 8-1: Product: syz [ 622.377150][ T128] usb 8-1: Manufacturer: ᰉ [ 622.381784][ T128] usb 8-1: SerialNumber: syz [ 622.390472][ T9788] syz.0.1138: attempt to access beyond end of device [ 622.390472][ T9788] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 622.437817][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.495259][ T9788] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 622.579674][ T9788] syz.0.1138: attempt to access beyond end of device [ 622.579674][ T9788] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 622.673381][ T128] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 622.689952][ T128] cdc_ncm 8-1:1.0: bind() failure [ 622.694291][ T9794] FAULT_INJECTION: forcing a failure. [ 622.694291][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 622.728183][ T128] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 622.737806][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 622.737822][ T27] audit: type=1800 audit(1793929353.518:133): pid=9788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1138" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 622.785667][ T128] cdc_ncm 8-1:1.1: bind() failure [ 622.785692][ T9794] CPU: 0 PID: 9794 Comm: syz.5.1139 Not tainted syzkaller #0 [ 622.798221][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 622.808327][ T9794] Call Trace: [ 622.811654][ T9794] [ 622.814625][ T9794] dump_stack_lvl+0x188/0x24e [ 622.819384][ T9794] ? show_regs_print_info+0x12/0x12 [ 622.820521][ T128] usb 8-1: USB disconnect, device number 15 [ 622.824627][ T9794] ? load_image+0x410/0x410 [ 622.824662][ T9794] ? __might_sleep+0xd0/0xd0 [ 622.824687][ T9794] ? __lock_acquire+0x7ea0/0x7ea0 [ 622.824722][ T9794] should_fail_ex+0x390/0x4c0 [ 622.849682][ T9794] should_failslab+0x5/0x20 [ 622.854237][ T9794] slab_pre_alloc_hook+0x59/0x300 [ 622.859348][ T9794] kmem_cache_alloc+0x56/0x2f0 [ 622.864196][ T9794] ? __proc_create+0x36f/0x8b0 [ 622.869061][ T9794] __proc_create+0x36f/0x8b0 [ 622.873714][ T9794] ? proc_symlink+0x210/0x210 [ 622.878484][ T9794] proc_mkdir+0x3b/0x110 [ 622.882868][ T9794] cache_register_net+0x25c/0x4b0 [ 622.888048][ T9794] nfsd_idmap_init+0x157/0x1e0 [ 622.892958][ T9794] ? nfsd_init_net+0x34/0x1e0 [ 622.897760][ T9794] nfsd_init_net+0x47/0x1e0 [ 622.902301][ T9794] ops_init+0x360/0x5e0 [ 622.906503][ T9794] setup_net+0x4f2/0xbd0 [ 622.910773][ T9794] ? copy_net_ns+0x5b0/0x5b0 [ 622.915389][ T9794] ? copy_net_ns+0x324/0x5b0 [ 622.920002][ T9794] ? down_read_killable+0x1cc/0x340 [ 622.925232][ T9794] copy_net_ns+0x33e/0x5b0 [ 622.929700][ T9794] create_new_namespaces+0x3ce/0x700 [ 622.935093][ T9794] unshare_nsproxy_namespaces+0x116/0x160 [ 622.940860][ T9794] ksys_unshare+0x4f6/0x8e0 [ 622.945454][ T9794] ? sighand_ctor+0x40/0x40 [ 622.949998][ T9794] ? lock_chain_count+0x20/0x20 [ 622.954889][ T9794] ? syscall_enter_from_user_mode+0x21/0x80 [ 622.960819][ T9794] __x64_sys_unshare+0x34/0x40 [ 622.965620][ T9794] do_syscall_64+0x4c/0xa0 [ 622.970082][ T9794] ? clear_bhb_loop+0x60/0xb0 [ 622.974798][ T9794] ? clear_bhb_loop+0x60/0xb0 [ 622.979514][ T9794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.985469][ T9794] RIP: 0033:0x7f8453b9fb19 [ 622.989911][ T9794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.009548][ T9794] RSP: 002b:00007f8454a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 623.017991][ T9794] RAX: ffffffffffffffda RBX: 00007f8453e25fa0 RCX: 00007f8453b9fb19 [ 623.025993][ T9794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 623.033989][ T9794] RBP: 00007f8453c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 623.041987][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.049983][ T9794] R13: 00007f8453e26038 R14: 00007f8453e25fa0 R15: 00007ffd13ea12e8 [ 623.057994][ T9794] [ 623.503509][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.525594][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1142'. [ 623.554786][ T9804] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1143'. [ 623.906818][ T9808] jffs2: notice: (9808) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 624.305962][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.312388][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.544461][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.103970][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.583460][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.623291][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.912698][ T8977] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 627.118039][ T8977] usb 3-1: config 0 has no interfaces? [ 627.161672][ T8977] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 627.284246][ T8977] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 627.405795][ T8977] usb 3-1: Product: syz [ 627.470557][ T8977] usb 3-1: Manufacturer: syz [ 627.539646][ T8977] usb 3-1: SerialNumber: syz [ 627.689556][ T8977] usb 3-1: config 0 descriptor?? [ 627.821695][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.036082][ T4429] usb 3-1: USB disconnect, device number 6 [ 628.144707][ T4652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.933705][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.092521][ T5158] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 630.541678][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.832271][ T4429] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 631.091027][ T5158] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 631.141799][ T5158] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 631.212588][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.332166][ T5158] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.342678][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.462811][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.471409][ T5158] usb 1-1: Product: syz [ 631.602041][ T5158] usb 1-1: Manufacturer: ᰉ [ 631.607545][ T5158] usb 1-1: SerialNumber: syz [ 631.631813][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.031847][ T9986] Cannot find add_set index 0 as target [ 632.748602][ T5158] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 632.811177][ T5158] cdc_ncm 1-1:1.0: bind() failure [ 632.853014][ T5158] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 632.859888][ T5158] cdc_ncm 1-1:1.1: bind() failure [ 632.986718][ T5158] usb 1-1: USB disconnect, device number 19 [ 633.048146][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.357235][T10000] jffs2: notice: (10000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 634.042770][T10016] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 634.063375][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.090333][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1184'. [ 634.232929][ T4652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.371908][T10021] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 634.795079][T10029] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1187'. [ 635.104070][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.056869][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.208929][ T27] audit: type=1326 audit(1793929367.988:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10049 comm="syz.0.1193" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc91bb9fb19 code=0x0 [ 637.232539][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.262749][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.418426][T10057] jffs2: notice: (10057) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 638.062630][T10082] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 638.063166][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.069208][T10082] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 638.085008][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.152678][T10082] vhci_hcd vhci_hcd.0: Device attached [ 638.166899][T10088] Cannot find add_set index 0 as target [ 638.275371][T10083] vhci_hcd: cannot find the pending unlink 0 [ 638.344414][ T128] asus 0005:0B05:8502.001E: No inputs registered, leaving [ 638.372248][ T128] asus 0005:0B05:8502.001E: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 638.462532][ T5158] usb 46-1: SetAddress Request (2) to port 0 [ 638.469900][ T5158] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 638.746117][T10100] fido_id[10100]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 638.850468][T10083] vhci_hcd: connection reset by peer [ 638.857899][ T48] vhci_hcd: stop threads [ 638.862195][ T48] vhci_hcd: release socket [ 638.892600][ T48] vhci_hcd: disconnect device [ 639.009611][T10116] jffs2: notice: (10116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 639.102994][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.297568][T10128] jffs2: notice: (10128) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 639.584447][T10137] loop0: detected capacity change from 0 to 2048 [ 639.908133][T10137] loop0: unable to read partition table [ 639.908298][ T4429] asus 0005:0B05:8502.001F: No inputs registered, leaving [ 639.949806][ T4429] asus 0005:0B05:8502.001F: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 639.971443][T10137] loop0: partition table beyond EOD, truncated [ 639.986239][ T4429] sysfs: cannot create duplicate filename '/class/power_supply/asus-keyboard-syz0-battery' [ 639.998702][T10137] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 640.037381][ T4429] CPU: 1 PID: 4429 Comm: kworker/1:7 Not tainted syzkaller #0 [ 640.044933][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 640.055032][ T4429] Workqueue: events uhid_device_add_worker [ 640.060991][ T4429] Call Trace: [ 640.064314][ T4429] [ 640.067294][ T4429] dump_stack_lvl+0x188/0x24e [ 640.072034][ T4429] ? show_regs_print_info+0x12/0x12 [ 640.077297][ T4429] ? load_image+0x410/0x410 [ 640.081854][ T4429] sysfs_warn_dup+0x8a/0xa0 [ 640.086468][ T4429] sysfs_do_create_link_sd+0xc0/0x110 [ 640.091877][ T4429] device_add+0x83b/0x1050 [ 640.096390][ T4429] __power_supply_register+0xa5b/0xd20 [ 640.101950][ T4429] ? power_supply_register+0x30/0x30 [ 640.107261][ T4429] ? __kmem_cache_alloc_node+0x19d/0x270 [ 640.112944][ T4429] ? devm_power_supply_register+0x37/0xc0 [ 640.118690][ T4429] ? rcu_is_watching+0x11/0xa0 [ 640.123486][ T4429] ? devm_power_supply_register+0x37/0xc0 [ 640.129235][ T4429] ? __kmalloc_node_track_caller+0xe1/0x240 [ 640.135163][ T4429] ? asus_probe+0x9e/0xcb0 [ 640.139616][ T4429] ? devm_power_supply_register+0xc0/0xc0 [ 640.145366][ T4429] ? __devres_alloc_node+0x64/0x110 [ 640.150677][ T4429] devm_power_supply_register+0x52/0xc0 [ 640.156250][ T4429] asus_probe+0x78c/0xcb0 [ 640.160610][ T4429] ? mutex_unlock+0x10/0x10 [ 640.165146][ T4429] ? creative_sb0540_input_configured+0x1d0/0x1d0 [ 640.171613][ T4429] ? hid_lookup_quirk+0x37c/0x610 [ 640.176662][ T4429] hid_device_probe+0x2b8/0x520 [ 640.181632][ T4429] ? hid_uevent+0x330/0x330 [ 640.186170][ T4429] really_probe+0x24a/0xb40 [ 640.190699][ T4429] ? pm_runtime_barrier+0x147/0x1c0 [ 640.195995][ T4429] __driver_probe_device+0x1f5/0x390 [ 640.201329][ T4429] driver_probe_device+0x4f/0x420 [ 640.206381][ T4429] __device_attach_driver+0x2c6/0x510 [ 640.211779][ T4429] ? coredump_store+0x90/0x90 [ 640.216486][ T4429] bus_for_each_drv+0x184/0x210 [ 640.221390][ T4429] ? coredump_store+0x90/0x90 [ 640.226103][ T4429] ? subsys_find_device_by_id+0x360/0x360 [ 640.231859][ T4429] ? __mutex_lock+0x1ab/0xb40 [ 640.236566][ T4429] __device_attach+0x2a7/0x480 [ 640.241356][ T4429] ? device_attach+0x20/0x20 [ 640.245970][ T4429] ? kobject_uevent_env+0x364/0x890 [ 640.251202][ T4429] bus_probe_device+0xba/0x1d0 [ 640.256005][ T4429] device_add+0xbcf/0x1050 [ 640.260464][ T4429] hid_add_device+0x361/0x500 [ 640.265181][ T4429] uhid_device_add_worker+0x3f/0xe0 [ 640.270408][ T4429] ? process_one_work+0x7b4/0x1160 [ 640.275646][ T4429] process_one_work+0x8ab/0x1160 [ 640.280620][ T4429] ? worker_detach_from_pool+0x240/0x240 [ 640.286284][ T4429] ? _raw_spin_lock_irq+0xb7/0xf0 [ 640.291342][ T4429] ? _raw_spin_lock_irqsave+0x100/0x100 [ 640.296917][ T4429] ? wq_worker_running+0x97/0x190 [ 640.301983][ T4429] worker_thread+0xaf5/0x12a0 [ 640.306692][ T4429] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 640.312607][ T4429] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 640.318534][ T4429] kthread+0x29d/0x330 [ 640.322624][ T4429] ? worker_clr_flags+0x1a0/0x1a0 [ 640.327672][ T4429] ? kthread_blkcg+0xd0/0xd0 [ 640.332280][ T4429] ret_from_fork+0x1f/0x30 [ 640.336756][ T4429] [ 640.584019][T10148] fido_id[10148]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 640.943587][ T4429] asus 0005:0B05:8502.0020: Unable to register battery device [ 640.951143][ T4429] asus 0005:0B05:8502.0020: Asus hid battery_probe failed: -17 [ 640.962450][ T4429] asus: probe of 0005:0B05:8502.0020 failed with error -17 [ 640.973123][T10162] loop0: detected capacity change from 0 to 128 [ 640.982635][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.996051][ T4652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.004643][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.368918][T10168] jffs2: notice: (10168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 641.449150][T10170] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 641.455728][T10170] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 641.627557][T10170] vhci_hcd vhci_hcd.0: Device attached [ 641.962487][ T128] usb 44-1: SetAddress Request (2) to port 0 [ 641.970283][ T128] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 642.099383][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.232947][ T4652] asus 0005:0B05:8502.0021: No inputs registered, leaving [ 642.241155][T10171] vhci_hcd: connection reset by peer [ 642.248942][ T6894] vhci_hcd: stop threads [ 642.263800][ T6894] vhci_hcd: release socket [ 642.268421][ T6894] vhci_hcd: disconnect device [ 642.285427][ T4652] asus 0005:0B05:8502.0021: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 642.426744][ T4652] asus 0005:0B05:8502.0022: No inputs registered, leaving [ 642.459660][ T4652] asus 0005:0B05:8502.0022: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 642.613599][T10213] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(8) [ 642.670253][T10203] fido_id[10203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 643.088589][T10257] jffs2: notice: (10257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 643.122169][ T8977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.586194][ T5158] usb 46-1: device descriptor read/8, error -110 [ 643.718215][T10220] fido_id[10220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 644.034925][ T5158] usb usb46-port1: attempt power cycle [ 644.072673][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.151361][ T4429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.297242][T10266] rxe_eth0 speed is unknown, defaulting to 1000 [ 644.948176][ T5158] usb usb46-port1: unable to enumerate USB device [ 644.962787][ T4652] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 645.198839][ T4652] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 645.298122][ T4652] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 645.808199][ T4652] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 646.005488][ T4652] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.152019][ T4652] usb 6-1: Product: syz [ 646.233430][ T4652] usb 6-1: Manufacturer: ᰉ [ 646.321814][ T4652] usb 6-1: SerialNumber: syz [ 647.102498][ T128] usb 44-1: device descriptor read/8, error -110 [ 647.124686][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.303097][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.676878][ T128] usb usb44-port1: attempt power cycle [ 648.144489][ T5158] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 648.434760][ T128] usb usb44-port1: unable to enumerate USB device [ 649.753879][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.890857][T10293] xt_TPROXY: Can be used only with -p tcp or -p udp [ 649.916181][ T5158] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 649.991876][ T5158] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 650.029970][ T4652] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 650.220066][ T5158] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.381453][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.525294][ T5158] usb 1-1: Product: syz [ 650.589081][ T4652] cdc_ncm 6-1:1.0: bind() failure [ 650.606806][ T5158] usb 1-1: Manufacturer: ᰉ [ 650.676917][ T5158] usb 1-1: SerialNumber: syz [ 650.833165][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.841886][ T8296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.850067][ T8296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.869722][ T4652] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 650.881044][ T4652] cdc_ncm 6-1:1.1: bind() failure [ 650.897835][ T4652] usb 6-1: USB disconnect, device number 25 [ 651.054145][ T5158] usb 1-1: can't set config #1, error -71 [ 651.239227][ T5158] usb 1-1: USB disconnect, device number 20 [ 651.751367][T10301] jffs2: notice: (10301) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 651.903413][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.943339][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.262567][ T4361] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 653.437011][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.454821][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.595375][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.603384][ T4361] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 653.792588][ T128] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 655.955026][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.015284][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.064734][ T4361] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 656.117898][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.293693][ T128] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 656.303842][ T128] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 656.322557][ T128] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.337875][ T8296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.342045][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.354517][ T128] usb 3-1: Product: syz [ 656.355677][ T4361] usb 1-1: string descriptor 0 read error: -71 [ 656.359081][ T128] usb 3-1: Manufacturer: ᰉ [ 656.359106][ T128] usb 3-1: SerialNumber: syz [ 656.383748][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.412792][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.440906][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.499347][T10351] jffs2: notice: (10351) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 656.500784][ T128] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 656.538400][ T4361] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 656.562822][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.571377][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.583919][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.593301][ T128] cdc_ncm 3-1:1.0: bind() failure [ 656.632443][ T4361] usb 1-1: can't set config #1, error -71 [ 656.655136][ T128] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 656.672541][ T4361] usb 1-1: USB disconnect, device number 21 [ 656.680926][ T128] cdc_ncm 3-1:1.1: bind() failure [ 656.692725][T10345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.741964][ T128] usb 3-1: USB disconnect, device number 8 [ 657.770705][T10380] FAULT_INJECTION: forcing a failure. [ 657.770705][T10380] name failslab, interval 1, probability 0, space 0, times 0 [ 657.854273][T10380] CPU: 1 PID: 10380 Comm: syz.5.1281 Not tainted syzkaller #0 [ 657.861808][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 657.871910][T10380] Call Trace: [ 657.875237][T10380] [ 657.878174][T10380] dump_stack_lvl+0x188/0x24e [ 657.882883][T10380] ? show_regs_print_info+0x12/0x12 [ 657.888104][T10380] ? load_image+0x410/0x410 [ 657.892624][T10380] ? __might_sleep+0xd0/0xd0 [ 657.897226][T10380] ? __lock_acquire+0x7ea0/0x7ea0 [ 657.902276][T10380] should_fail_ex+0x390/0x4c0 [ 657.906991][T10380] should_failslab+0x5/0x20 [ 657.911502][T10380] slab_pre_alloc_hook+0x59/0x300 [ 657.916557][T10380] ? _raw_spin_unlock+0x40/0x40 [ 657.921456][T10380] ? nft_trans_table_add+0x52/0x270 [ 657.926844][T10380] __kmem_cache_alloc_node+0x4f/0x270 [ 657.932256][T10380] ? nft_trans_table_add+0x52/0x270 [ 657.937468][T10380] kmalloc_trace+0x26/0xe0 [ 657.941911][T10380] nft_trans_table_add+0x52/0x270 [ 657.946951][T10380] nf_tables_newtable+0xcb8/0x16c0 [ 657.952109][T10380] nfnetlink_rcv+0x1119/0x2470 [ 657.957006][T10380] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 657.962591][T10380] ? ref_tracker_free+0x682/0x830 [ 657.967758][T10380] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.973217][T10380] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 657.978709][T10380] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.983927][T10380] netlink_unicast+0x7ad/0x920 [ 657.988737][T10380] netlink_sendmsg+0x8ad/0xbd0 [ 657.993550][T10380] ? netlink_getsockopt+0x550/0x550 [ 657.998761][T10380] ? apparmor_socket_sendmsg+0x8a/0x330 [ 658.004323][T10380] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 658.009693][T10380] ? security_socket_sendmsg+0x7c/0xa0 [ 658.015204][T10380] ? netlink_getsockopt+0x550/0x550 [ 658.020421][T10380] ____sys_sendmsg+0x5ed/0x9a0 [ 658.025254][T10380] ? __sys_sendmsg_sock+0x30/0x30 [ 658.030298][T10380] ? __import_iovec+0x306/0x510 [ 658.035194][T10380] ? import_iovec+0x6f/0xa0 [ 658.039718][T10380] ___sys_sendmsg+0x2a2/0x360 [ 658.044415][T10380] ? __sys_sendmsg+0x2a0/0x2a0 [ 658.049226][T10380] __se_sys_sendmsg+0x1c3/0x2b0 [ 658.054258][T10380] ? __x64_sys_sendmsg+0x80/0x80 [ 658.059224][T10380] ? lockdep_hardirqs_on+0x94/0x140 [ 658.064450][T10380] do_syscall_64+0x4c/0xa0 [ 658.068908][T10380] ? clear_bhb_loop+0x60/0xb0 [ 658.073618][T10380] ? clear_bhb_loop+0x60/0xb0 [ 658.078328][T10380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 658.084242][T10380] RIP: 0033:0x7f8453b9fb19 [ 658.088669][T10380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.108287][T10380] RSP: 002b:00007f8454a85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.116726][T10380] RAX: ffffffffffffffda RBX: 00007f8453e25fa0 RCX: 00007f8453b9fb19 [ 658.124797][T10380] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 658.132778][T10380] RBP: 00007f8453c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 658.140756][T10380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.148735][T10380] R13: 00007f8453e26038 R14: 00007f8453e25fa0 R15: 00007ffd13ea12e8 [ 658.156750][T10380] [ 658.162530][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1284'. [ 658.593468][T10402] jffs2: notice: (10402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 661.263472][ T22] net_ratelimit: 776 callbacks suppressed [ 661.263492][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.864387][T10441] loop6: detected capacity change from 0 to 32768 [ 661.958623][T10472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 661.993916][T10441] XFS (loop6): Mounting V5 Filesystem [ 662.164157][T10441] XFS (loop6): Ending clean mount [ 662.302887][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.188355][ T4652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.343192][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.613142][ T7392] XFS (loop6): Unmounting Filesystem [ 663.762050][T10507] ip_tables: iptables: counters copy to user failed while replacing table [ 663.861387][T10510] Cannot find add_set index 0 as target [ 664.560073][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.588900][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.222828][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.622746][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.669278][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.292722][ T956] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 668.492911][ T956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 668.523122][ T956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 668.591113][ T956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.627271][ T956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.658544][ T956] usb 3-1: Product: syz [ 668.678005][ T956] usb 3-1: Manufacturer: ᰉ [ 668.704233][ T956] usb 3-1: SerialNumber: syz [ 668.790182][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.273623][ T4361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.744217][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.387012][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.441910][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.982566][ T956] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 671.022671][ T956] cdc_ncm 3-1:1.0: bind() failure [ 671.031282][ T956] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 671.054189][ T956] cdc_ncm 3-1:1.1: bind() failure [ 671.078324][ T956] usb 3-1: USB disconnect, device number 9 [ 671.350374][T10557] Cannot find add_set index 0 as target [ 671.502660][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.547372][T10521] netlink: 'syz.0.1315': attribute type 10 has an invalid length. [ 672.462884][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 672.548340][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.621764][T10590] loop2: detected capacity change from 0 to 512 [ 672.654352][T10591] overlayfs: missing 'lowerdir' [ 672.663245][T10590] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 673.346012][T10593] netlink: 'syz.7.1339': attribute type 10 has an invalid length. [ 673.553431][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.586294][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.980971][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.989740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.071285][T10622] Cannot find add_set index 0 as target [ 674.623043][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.663311][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.543301][T10662] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1358'. [ 676.594548][T10665] Cannot find add_set index 0 as target [ 676.645851][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.673640][T10654] loop5: detected capacity change from 0 to 16 [ 676.702770][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.708092][T10654] erofs: (device loop5): mounted with root inode @ nid 36. [ 676.746201][T10670] FAULT_INJECTION: forcing a failure. [ 676.746201][T10670] name failslab, interval 1, probability 0, space 0, times 0 [ 676.791514][T10670] CPU: 1 PID: 10670 Comm: syz.0.1360 Not tainted syzkaller #0 [ 676.799053][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 676.809123][T10670] Call Trace: [ 676.812452][T10670] [ 676.815401][T10670] dump_stack_lvl+0x188/0x24e [ 676.820192][T10670] ? show_regs_print_info+0x12/0x12 [ 676.825435][T10670] ? load_image+0x410/0x410 [ 676.829970][T10670] ? __might_sleep+0xd0/0xd0 [ 676.834571][T10670] ? __lock_acquire+0x7ea0/0x7ea0 [ 676.839619][T10670] should_fail_ex+0x390/0x4c0 [ 676.844328][T10670] should_failslab+0x5/0x20 [ 676.848871][T10670] slab_pre_alloc_hook+0x59/0x300 [ 676.853949][T10670] kmem_cache_alloc_lru+0x49/0x2e0 [ 676.859091][T10670] ? ovl_alloc_inode+0x28/0x90 [ 676.863918][T10670] ? ovl_lookup_inode+0x130/0x130 [ 676.869072][T10670] ovl_alloc_inode+0x28/0x90 [ 676.873705][T10670] ? ovl_d_real+0x490/0x490 [ 676.878231][T10670] iget5_locked+0x9e/0x260 [ 676.882678][T10670] ? ovl_get_trap_inode+0x190/0x190 [ 676.887944][T10670] ovl_get_trap_inode+0x87/0x190 [ 676.892943][T10670] ovl_fill_super+0x278c/0x42f0 [ 676.897943][T10670] ? ovl_mount+0x30/0x30 [ 676.902244][T10670] ? free_anon_bdev+0x20/0x20 [ 676.906947][T10670] ? ovl_mount+0x30/0x30 [ 676.911212][T10670] mount_nodev+0x52/0xe0 [ 676.915492][T10670] legacy_get_tree+0xe6/0x180 [ 676.920271][T10670] ? virtio_fs_zero_page_range+0x130/0x130 [ 676.926114][T10670] vfs_get_tree+0x88/0x270 [ 676.930582][T10670] do_new_mount+0x247/0xa50 [ 676.935118][T10670] __se_sys_mount+0x2e3/0x3d0 [ 676.939827][T10670] ? __x64_sys_mount+0xc0/0xc0 [ 676.944621][T10670] ? lockdep_hardirqs_on+0x94/0x140 [ 676.949858][T10670] ? __x64_sys_mount+0x1c/0xc0 [ 676.954673][T10670] do_syscall_64+0x4c/0xa0 [ 676.959124][T10670] ? clear_bhb_loop+0x60/0xb0 [ 676.963829][T10670] ? clear_bhb_loop+0x60/0xb0 [ 676.968550][T10670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.974470][T10670] RIP: 0033:0x7fc91bb9fb19 [ 676.978907][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.998627][T10670] RSP: 002b:00007fc919dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 677.007062][T10670] RAX: ffffffffffffffda RBX: 00007fc91be26090 RCX: 00007fc91bb9fb19 [ 677.015059][T10670] RDX: 0000200000000740 RSI: 0000200000000700 RDI: 0000000000000000 [ 677.023231][T10670] RBP: 00007fc91bc37b70 R08: 0000200000000780 R09: 0000000000000000 [ 677.031311][T10670] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 677.039326][T10670] R13: 00007fc91be26128 R14: 00007fc91be26090 R15: 00007ffc33364f28 [ 677.047352][T10670] [ 677.742650][ T128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.164864][T10700] bridge0: port 3(netdevsim0) entered blocking state [ 678.171903][T10700] bridge0: port 3(netdevsim0) entered disabled state [ 678.183360][T10700] device netdevsim0 entered promiscuous mode [ 678.190604][T10700] bridge0: port 3(netdevsim0) entered blocking state [ 678.197515][T10700] bridge0: port 3(netdevsim0) entered forwarding state [ 678.926852][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.991455][T10704] tmpfs: Bad value for 'huge' [ 679.342858][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.662684][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.992750][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.084476][T10712] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1372'. [ 680.365372][T10725] Cannot find add_set index 0 as target [ 680.892885][T10739] jffs2: notice: (10739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 680.952692][T10747] loop7: detected capacity change from 0 to 128 [ 680.993527][T10747] FAT-fs (loop7): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 681.022711][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.304500][ T27] audit: type=1326 audit(1793929412.088:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00b79fb19 code=0x7ffc0000 [ 681.328727][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.863172][ T27] audit: type=1326 audit(1793929412.148:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00b79fb19 code=0x7ffc0000 [ 682.062907][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.155862][ T27] audit: type=1326 audit(1793929412.148:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe00b79fb19 code=0x7ffc0000 [ 682.502805][ T27] audit: type=1326 audit(1793929413.288:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00b79fb19 code=0x7ffc0000 [ 682.596066][ T27] audit: type=1326 audit(1793929413.288:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.6.1386" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00b79fb19 code=0x7ffc0000 [ 682.703575][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.102671][ T6084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.779104][T10782] jffs2: notice: (10782) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 684.142751][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.197713][T10801] Cannot find add_set index 0 as target [ 685.755048][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.761558][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.771797][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.782069][ T4360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.818787][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.840735][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.850156][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.859452][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.916660][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.149908][T10813] loop2: detected capacity change from 0 to 16 [ 686.247660][T10813] erofs: (device loop2): mounted with root inode @ nid 36. [ 686.863382][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.389177][T10799] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1398'. [ 688.391830][T10823] jffs2: notice: (10823) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 688.703144][T10835] Cannot find add_set index 0 as target [ 688.725288][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.788199][T10839] device-mapper: ioctl: Unable to change name on mapped device syza0 to one that already exists: syza2 [ 688.914431][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.078400][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.181203][ T48] device netdevsim0 left promiscuous mode [ 689.203073][ T48] bridge0: port 3(netdevsim0) entered disabled state [ 689.232958][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.287258][ T50] Bluetooth: Wrong link type (-71) [ 689.308090][T10856] net_ratelimit: 1 callbacks suppressed [ 689.308106][T10856] ip_tables: iptables: counters copy to user failed while replacing table [ 689.590462][T10860] FAULT_INJECTION: forcing a failure. [ 689.590462][T10860] name failslab, interval 1, probability 0, space 0, times 0 [ 689.640162][T10860] CPU: 1 PID: 10860 Comm: syz.5.1417 Not tainted syzkaller #0 [ 689.647725][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 689.657830][T10860] Call Trace: [ 689.661148][T10860] [ 689.664132][T10860] dump_stack_lvl+0x188/0x24e [ 689.668854][T10860] ? show_regs_print_info+0x12/0x12 [ 689.674088][T10860] ? load_image+0x410/0x410 [ 689.678626][T10860] ? __might_sleep+0xd0/0xd0 [ 689.683242][T10860] ? __lock_acquire+0x7ea0/0x7ea0 [ 689.688304][T10860] ? percpu_ref_put+0x12/0x100 [ 689.693109][T10860] should_fail_ex+0x390/0x4c0 [ 689.697844][T10860] should_failslab+0x5/0x20 [ 689.702377][T10860] slab_pre_alloc_hook+0x59/0x300 [ 689.707439][T10860] kmem_cache_alloc+0x56/0x2f0 [ 689.712247][T10860] ? __kvm_mmu_topup_memory_cache+0x197/0x480 [ 689.718464][T10860] __kvm_mmu_topup_memory_cache+0x197/0x480 [ 689.724397][T10860] kvm_mmu_load+0x98/0x2480 [ 689.728983][T10860] ? kvm_hv_setup_tsc_page+0x5f4/0xa80 [ 689.734523][T10860] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.740540][T10860] ? kvm_msr_ignored_check+0x180/0x180 [ 689.746088][T10860] ? kvm_apic_has_interrupt+0x72d/0x740 [ 689.751673][T10860] vcpu_enter_guest+0x4338/0x7a90 [ 689.756739][T10860] ? trace_kvm_fpu+0x230/0x230 [ 689.761529][T10860] ? is_bpf_text_address+0x28b/0x2a0 [ 689.766889][T10860] ? is_bpf_text_address+0x22/0x2a0 [ 689.772132][T10860] ? kernel_text_address+0x9c/0xd0 [ 689.777273][T10860] ? __kernel_text_address+0x9/0x30 [ 689.782508][T10860] ? unwind_get_return_address+0x49/0x80 [ 689.788197][T10860] ? mark_lock+0x94/0x320 [ 689.792580][T10860] ? __lock_acquire+0x142d/0x7ea0 [ 689.797654][T10860] ? mark_lock+0x94/0x320 [ 689.802021][T10860] ? __lock_acquire+0x1359/0x7ea0 [ 689.807100][T10860] ? verify_lock_unused+0x140/0x140 [ 689.812346][T10860] ? mark_lock+0x94/0x320 [ 689.816720][T10860] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.822737][T10860] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 689.828074][T10860] ? lock_chain_count+0x20/0x20 [ 689.832951][T10860] ? __mutex_trylock_common+0x15c/0x260 [ 689.838542][T10860] ? read_lock_is_recursive+0x10/0x10 [ 689.843954][T10860] ? fpregs_activate+0xb0/0x230 [ 689.848921][T10860] kvm_arch_vcpu_ioctl_run+0xf2c/0x22c0 [ 689.854529][T10860] ? kvm_arch_vcpu_ioctl_run+0x11c/0x22c0 [ 689.860286][T10860] kvm_vcpu_ioctl+0x986/0xd00 [ 689.865055][T10860] ? xa_release+0x50/0x50 [ 689.869418][T10860] ? __fget_files+0x28/0x460 [ 689.874050][T10860] ? bpf_lsm_file_ioctl+0x5/0x10 [ 689.879067][T10860] ? security_file_ioctl+0x7c/0xa0 [ 689.884220][T10860] ? xa_release+0x50/0x50 [ 689.888574][T10860] __se_sys_ioctl+0xfa/0x170 [ 689.893299][T10860] do_syscall_64+0x4c/0xa0 [ 689.897751][T10860] ? clear_bhb_loop+0x60/0xb0 [ 689.902457][T10860] ? clear_bhb_loop+0x60/0xb0 [ 689.907173][T10860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.913119][T10860] RIP: 0033:0x7f8453b9fb19 [ 689.917562][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.937199][T10860] RSP: 002b:00007f8454a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.945643][T10860] RAX: ffffffffffffffda RBX: 00007f8453e25fa0 RCX: 00007f8453b9fb19 [ 689.953645][T10860] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 689.961640][T10860] RBP: 00007f8453c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 689.969634][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.977641][T10860] R13: 00007f8453e26038 R14: 00007f8453e25fa0 R15: 00007ffd13ea12e8 [ 689.985651][T10860] [ 689.988733][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.277525][T10871] loop2: detected capacity change from 0 to 256 [ 690.290166][T10870] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1420'. [ 690.331194][T10871] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 690.571014][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 690.595909][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 690.607620][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 690.624019][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 690.634969][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 690.643302][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.975823][T10878] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.272518][T10914] Cannot find add_set index 0 as target [ 692.702580][ T50] Bluetooth: hci2: command 0x0409 tx timeout [ 692.930027][T10930] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1435'. [ 693.510157][ T27] audit: type=1804 audit(1793929424.288:140): pid=10946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1439" name="bus" dev="ramfs" ino=64268 res=1 errno=0 [ 693.542086][T10878] chnl_net:caif_netlink_parms(): no params data found [ 693.634329][ T27] audit: type=1804 audit(1793929424.348:141): pid=10946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1439" name="bus" dev="ramfs" ino=64268 res=1 errno=0 [ 693.989224][ T48] device hsr_slave_0 left promiscuous mode [ 694.013348][ T48] device hsr_slave_1 left promiscuous mode [ 694.033095][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.049126][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.058471][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.068017][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.079515][ T48] device bridge_slave_1 left promiscuous mode [ 694.088598][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.100286][ T48] device bridge_slave_0 left promiscuous mode [ 694.108104][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.175251][ T48] device veth1_macvtap left promiscuous mode [ 694.189703][ T48] device veth0_macvtap left promiscuous mode [ 694.204408][ T48] device veth1_vlan left promiscuous mode [ 694.229881][ T48] device veth0_vlan left promiscuous mode [ 694.457650][T10957] Cannot find add_set index 0 as target [ 694.782510][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 696.043412][T10971] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.493280][ T48] team0 (unregistering): Port device team_slave_1 removed [ 696.549194][ T48] team0 (unregistering): Port device team_slave_0 removed [ 696.599480][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.651964][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.869809][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 697.027090][ T48] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 697.036261][ T48] bond0 (unregistering): Released all slaves [ 697.103069][T10878] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.110361][T10878] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.118974][T10878] device bridge_slave_0 entered promiscuous mode [ 697.146443][T10878] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.219163][T10878] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.261021][T10878] device bridge_slave_1 entered promiscuous mode [ 697.392191][T10878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.720549][T10878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.759434][T11002] Cannot find add_set index 0 as target [ 697.842990][T10995] rxe_eth0 speed is unknown, defaulting to 1000 [ 697.887322][T10878] team0: Port device team_slave_0 added [ 697.968795][T10878] team0: Port device team_slave_1 added [ 698.197826][T10878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.239250][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.282446][ T26] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 698.369347][T10878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.411228][T10878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.437214][T10878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.496053][ T26] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 698.518318][ T26] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 698.535092][T10878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.561245][ T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.584301][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.596280][ T26] usb 6-1: Product: syz [ 698.605781][ T26] usb 6-1: Manufacturer: ᰉ [ 698.610458][ T26] usb 6-1: SerialNumber: syz [ 698.705849][T10878] device hsr_slave_0 entered promiscuous mode [ 698.743314][T10878] device hsr_slave_1 entered promiscuous mode [ 698.752771][ T4361] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 698.761216][T10878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.779197][T10878] Cannot create hsr debugfs directory [ 698.861657][ T26] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 698.877932][ T26] cdc_ncm 6-1:1.0: bind() failure [ 698.901616][ T26] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 698.917088][ T26] cdc_ncm 6-1:1.1: bind() failure [ 698.928035][ T26] usb 6-1: USB disconnect, device number 26 [ 698.942654][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 698.969500][ T4361] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 699.008947][ T4361] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 699.034506][ T4361] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 64 [ 699.063341][ T4361] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 699.098051][ T4361] usb 7-1: config 0 interface 0 has no altsetting 0 [ 699.112390][ T4361] usb 7-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 699.121496][ T4361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.184780][ T4361] usb 7-1: config 0 descriptor?? [ 699.191345][T11013] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 699.661782][ T4361] logitech-djreceiver 0003:046D:C52F.0023: unknown main item tag 0x2 [ 699.677343][ T4361] logitech-djreceiver 0003:046D:C52F.0023: unknown main item tag 0x0 [ 699.686952][ T4361] logitech-djreceiver 0003:046D:C52F.0023: unknown main item tag 0x0 [ 699.885587][ T4361] usb 7-1: USB disconnect, device number 16 [ 701.362105][T10878] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 701.425211][T10878] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 701.468596][T10878] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 701.492526][ T4360] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 701.531535][T10878] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 701.714785][ T4360] usb 1-1: unable to get BOS descriptor or descriptor too short [ 701.725529][ T4360] usb 1-1: not running at top speed; connect to a high speed hub [ 701.743349][ T4360] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 701.767022][ T4360] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 701.781274][ T4360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.791506][ T4360] usb 1-1: Product: syz [ 701.804359][ T4360] usb 1-1: Manufacturer: syz [ 701.809103][ T4360] usb 1-1: SerialNumber: syz [ 701.834022][T11052] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 701.909545][T10878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.974561][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 702.193919][ T4360] usb 1-1: MIDIStreaming interface descriptor not found [ 702.209025][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 702.333406][T10878] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.352152][ T4360] usb 1-1: USB disconnect, device number 22 [ 702.383503][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 702.403613][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 702.436821][ T4912] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.444067][ T4912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.483631][T11006] udevd[11006]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 702.562571][T11006] udevd[11006]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 702.574570][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 702.616790][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 702.659553][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.666883][ T4912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.727382][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 702.780981][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 702.810276][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 702.837412][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 702.902470][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 702.944518][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 702.952637][ T22] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 703.009890][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 703.024596][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 703.039396][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 703.048719][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 703.068861][T10878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.093743][T10878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 703.103355][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 703.121062][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 703.181660][ T22] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 703.217942][ T22] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 703.252589][ T22] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 703.272097][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.296709][ T22] usb 7-1: Product: syz [ 703.301101][ T22] usb 7-1: Manufacturer: ᰉ [ 703.321296][ T22] usb 7-1: SerialNumber: syz [ 703.564177][ T22] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 703.610727][ T22] cdc_ncm 7-1:1.0: bind() failure [ 703.641135][ T22] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 703.665645][ T22] cdc_ncm 7-1:1.1: bind() failure [ 703.695918][ T22] usb 7-1: USB disconnect, device number 17 [ 703.702037][T11102] syz.5.1471 uses obsolete (PF_INET,SOCK_PACKET) [ 703.899225][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 703.919764][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 703.959126][T10878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.019945][T11113] Cannot find add_set index 0 as target [ 704.810956][T11122] netlink: 'syz.6.1475': attribute type 10 has an invalid length. [ 704.864641][T11122] bridge0: port 3(netdevsim0) entered disabled state [ 704.871590][T11122] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.878930][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.252581][ T128] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 705.452503][ T128] usb 3-1: Using ep0 maxpacket: 8 [ 705.463431][ T128] usb 3-1: unable to get BOS descriptor or descriptor too short [ 705.504846][ T128] usb 3-1: config 4 interface 0 has no altsetting 0 [ 705.529791][ T128] usb 3-1: string descriptor 0 read error: -22 [ 705.645863][ T128] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 705.659709][ T128] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 705.717040][ T128] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 705.766651][ T128] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 705.777962][ T128] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 705.787207][ T128] usb 3-1: media controller created [ 705.829641][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 706.481342][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 706.521969][ T4545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 706.578855][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 706.595064][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 706.614152][T10878] device veth0_vlan entered promiscuous mode [ 706.622025][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 706.660039][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 706.671583][T11162] using random self ethernet address [ 706.687210][T10878] device veth1_vlan entered promiscuous mode [ 706.701015][T11162] using random host ethernet address [ 706.767804][T11160] Config c/1 of g1 needs at least one function. [ 706.778983][T11166] Cannot find add_set index 0 as target [ 706.816867][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 706.827237][T11160] udc dummy_udc.0: failed to start g1: -22 [ 706.833829][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 706.847477][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 706.873463][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 706.921773][T11160] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 706.944646][ T128] zl10353_read_register: readreg error (reg=127, ret==0) [ 706.953585][T10878] device veth0_macvtap entered promiscuous mode [ 707.071772][T11160] UDC core: g1: couldn't find an available UDC or it's busy [ 707.208493][T10878] device veth1_macvtap entered promiscuous mode [ 707.493096][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 707.593143][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 707.655108][ T128] usb 3-1: USB disconnect, device number 10 [ 707.720211][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.024344][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.085258][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.096460][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.108309][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.119525][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.129993][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.141778][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.178667][T10878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.950931][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 708.994234][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 709.019766][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.040607][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.058020][T11189] FAULT_INJECTION: forcing a failure. [ 709.058020][T11189] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 709.061288][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.099722][T11189] CPU: 1 PID: 11189 Comm: syz.5.1485 Not tainted syzkaller #0 [ 709.107268][T11189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 709.117374][T11189] Call Trace: [ 709.120698][T11189] [ 709.122434][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.123656][T11189] dump_stack_lvl+0x188/0x24e [ 709.138230][T11189] ? show_regs_print_info+0x12/0x12 [ 709.142629][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.143477][T11189] ? load_image+0x410/0x410 [ 709.158466][T11189] ? __lock_acquire+0x7ea0/0x7ea0 [ 709.163582][T11189] should_fail_ex+0x390/0x4c0 [ 709.168330][T11189] prepare_alloc_pages+0x1e1/0x5b0 [ 709.173614][T11189] __alloc_pages+0x130/0x4f0 [ 709.178269][T11189] ? lockdep_softirqs_off+0x430/0x430 [ 709.182483][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.183683][T11189] ? zone_statistics+0x170/0x170 [ 709.198502][T11189] ? alloc_pages+0x4dd/0x740 [ 709.203162][T11189] ? __init_waitqueue_head+0xa4/0x140 [ 709.208595][T11189] get_zeroed_page+0x13/0x30 [ 709.213235][T11189] rds_cong_from_addr+0x10f/0x360 [ 709.218423][T11189] ? rds_cong_get_maps+0x1b/0xa0 [ 709.222535][T10878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.223398][T11189] rds_cong_get_maps+0x24/0xa0 [ 709.238628][T11189] __rds_conn_create+0x983/0x1fe0 [ 709.243721][T11189] ? __rds_conn_create+0x2ef/0x1fe0 [ 709.245913][T10878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.248962][T11189] ? rds_conn_create+0x50/0x50 [ 709.263603][T11189] ? rds_message_map_pages+0x790/0x790 [ 709.269149][T11189] rds_conn_create_outgoing+0x3f/0x50 [ 709.274587][T11189] rds_sendmsg+0xf56/0x1d90 [ 709.275411][T10878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.279163][T11189] ? rds_send_sndbuf_remove+0x230/0x230 [ 709.291990][T11189] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 709.298555][T11189] ? aa_sock_msg_perm+0x94/0x150 [ 709.303557][T11189] ? apparmor_socket_sendmsg+0x8a/0x330 [ 709.309162][T11189] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 709.314521][T11189] ? security_socket_sendmsg+0x7c/0xa0 [ 709.320079][T11189] ? rds_send_sndbuf_remove+0x230/0x230 [ 709.325295][T10878] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.325667][T11189] ____sys_sendmsg+0x5ed/0x9a0 [ 709.339175][T11189] ? __sys_sendmsg_sock+0x30/0x30 [ 709.342494][T10878] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.344233][T11189] ? __import_iovec+0x306/0x510 [ 709.357854][T11189] ? import_iovec+0x6f/0xa0 [ 709.362414][T11189] ___sys_sendmsg+0x2a2/0x360 [ 709.367140][T11189] ? __sys_sendmsg+0x2a0/0x2a0 [ 709.371989][T11189] __se_sys_sendmsg+0x1c3/0x2b0 [ 709.376891][T11189] ? __x64_sys_sendmsg+0x80/0x80 [ 709.381894][T11189] ? lockdep_hardirqs_on+0x94/0x140 [ 709.387123][T11189] do_syscall_64+0x4c/0xa0 [ 709.391576][T11189] ? clear_bhb_loop+0x60/0xb0 [ 709.396285][T11189] ? clear_bhb_loop+0x60/0xb0 [ 709.400999][T11189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.406928][T11189] RIP: 0033:0x7f8453b9fb19 [ 709.411394][T11189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.431045][T11189] RSP: 002b:00007f8454a64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.439494][T11189] RAX: ffffffffffffffda RBX: 00007f8453e26090 RCX: 00007f8453b9fb19 [ 709.447500][T11189] RDX: 0000000004000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 709.455502][T11189] RBP: 00007f8453c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 709.463594][T11189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.471589][T11189] R13: 00007f8453e26128 R14: 00007f8453e26090 R15: 00007ffd13ea12e8 [ 709.479619][T11189] [ 709.504250][T10878] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.517293][T10878] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.531123][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 709.546504][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 709.568211][ T128] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 709.727545][ T4621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.762420][ T4621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.770644][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 709.786486][ T128] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 709.804951][T11196] affs: No valid root block on device nbd2 [ 709.832644][ T128] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 709.860313][ T4912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.870330][ T128] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.883200][ T4912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.901299][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 709.909308][ T128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.946702][ T128] usb 7-1: Product: syz [ 709.951082][ T128] usb 7-1: Manufacturer: ᰉ [ 709.972404][ T128] usb 7-1: SerialNumber: syz [ 710.247823][ T128] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 710.347347][ T128] cdc_ncm 7-1:1.0: bind() failure [ 710.403246][ T128] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 710.454933][ T128] cdc_ncm 7-1:1.1: bind() failure [ 710.618979][ T128] usb 7-1: USB disconnect, device number 18 [ 711.591461][T11223] jffs2: notice: (11223) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 712.272500][ T4360] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 712.498253][ T4360] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 712.510096][ T4360] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 712.525832][T11262] ip_tables: iptables: counters copy to user failed while replacing table [ 712.531429][ T4360] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 712.559170][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.581623][ T4360] usb 7-1: Product: syz [ 712.586289][ T4360] usb 7-1: Manufacturer: ᰉ [ 712.591268][ T4360] usb 7-1: SerialNumber: syz [ 712.818616][ T4360] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 712.837585][ T4360] cdc_ncm 7-1:1.0: bind() failure [ 712.853864][ T4360] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 712.861837][ T4360] cdc_ncm 7-1:1.1: bind() failure [ 712.879315][ T4360] usb 7-1: USB disconnect, device number 19 [ 714.310635][T11295] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 714.322033][T11295] syz.2.1516: attempt to access beyond end of device [ 714.322033][T11295] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 714.335190][T11295] exFAT-fs (nbd2): unable to read boot sector [ 714.341323][T11295] exFAT-fs (nbd2): failed to read boot sector [ 714.347668][T11295] exFAT-fs (nbd2): failed to recognize exfat type [ 716.055798][T11308] ip_tables: iptables: counters copy to user failed while replacing table [ 716.922408][ T4360] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 717.852255][ T4360] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 717.872391][ T4360] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 717.885351][ T4360] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.904943][ T4360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.921643][ T4360] usb 9-1: Product: syz [ 717.928600][ T4360] usb 9-1: Manufacturer: ᰉ [ 717.952054][ T4360] usb 9-1: SerialNumber: syz [ 718.182260][ T4360] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 718.191615][ T4360] cdc_ncm 9-1:1.0: bind() failure [ 718.202814][ T4360] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 718.209646][ T4360] cdc_ncm 9-1:1.1: bind() failure [ 718.218752][ T4360] usb 9-1: USB disconnect, device number 6 [ 719.143391][T11366] Bluetooth: MGMT ver 1.22 [ 719.743963][ T5158] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 720.023140][ T5158] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 720.639274][ T5158] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 720.762494][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.442893][ T5158] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 722.027976][ T5158] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 82:21:01:d9:78:e1 [ 722.121638][ T5158] usb 1-1: USB disconnect, device number 23 [ 722.159008][ T5158] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 722.272477][ T956] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 722.466066][ T956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 722.480249][T11422] FAULT_INJECTION: forcing a failure. [ 722.480249][T11422] name failslab, interval 1, probability 0, space 0, times 0 [ 722.497139][ T956] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 722.529520][ T956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.553415][ T956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.566579][ T956] usb 3-1: Product: syz [ 722.570881][ T956] usb 3-1: Manufacturer: ᰉ [ 722.578809][ T956] usb 3-1: SerialNumber: syz [ 722.585714][T11422] CPU: 1 PID: 11422 Comm: syz.6.1545 Not tainted syzkaller #0 [ 722.593238][T11422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 722.603347][T11422] Call Trace: [ 722.606676][T11422] [ 722.609659][T11422] dump_stack_lvl+0x188/0x24e [ 722.614404][T11422] ? show_regs_print_info+0x12/0x12 [ 722.619677][T11422] ? load_image+0x410/0x410 [ 722.624269][T11422] ? __might_sleep+0xd0/0xd0 [ 722.628913][T11422] ? __lock_acquire+0x7ea0/0x7ea0 [ 722.634010][T11422] should_fail_ex+0x390/0x4c0 [ 722.638750][T11422] should_failslab+0x5/0x20 [ 722.643475][T11422] slab_pre_alloc_hook+0x59/0x300 [ 722.648585][T11422] kmem_cache_alloc+0x56/0x2f0 [ 722.653400][T11422] ? mas_alloc_nodes+0x2ec/0x880 [ 722.658400][T11422] mas_alloc_nodes+0x2ec/0x880 [ 722.663212][T11422] mas_preallocate+0x162/0x3b0 [ 722.668019][T11422] mmap_region+0xdcb/0x1c50 [ 722.672659][T11422] ? file_mmap_ok+0x170/0x170 [ 722.677381][T11422] ? validate_mm+0x23f/0x2e0 [ 722.682019][T11422] ? arch_get_unmapped_area+0x640/0x640 [ 722.687604][T11422] ? cap_mmap_addr+0x153/0x2c0 [ 722.692421][T11422] do_mmap+0x9ce/0x10d0 [ 722.696622][T11422] ? mlock_future_check+0x100/0x100 [ 722.701874][T11422] ? ima_file_mmap+0xf7/0x140 [ 722.706586][T11422] ? ima_file_free+0x3e0/0x3e0 [ 722.711400][T11422] vm_mmap_pgoff+0x1c1/0x2d0 [ 722.716080][T11422] ? account_locked_vm+0xe0/0xe0 [ 722.721061][T11422] ? ksys_mmap_pgoff+0xef/0x720 [ 722.725949][T11422] ? lockdep_hardirqs_on+0x94/0x140 [ 722.731178][T11422] do_syscall_64+0x4c/0xa0 [ 722.735634][T11422] ? clear_bhb_loop+0x60/0xb0 [ 722.740353][T11422] ? clear_bhb_loop+0x60/0xb0 [ 722.745066][T11422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.751000][T11422] RIP: 0033:0x7fe00b79fb19 [ 722.755440][T11422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.775070][T11422] RSP: 002b:00007fe00c6b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 722.783518][T11422] RAX: ffffffffffffffda RBX: 00007fe00ba25fa0 RCX: 00007fe00b79fb19 [ 722.791525][T11422] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 722.799541][T11422] RBP: 00007fe00b837b70 R08: ffffffffffffffff R09: 000000004cec2000 [ 722.807537][T11422] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 722.815537][T11422] R13: 00007fe00ba26038 R14: 00007fe00ba25fa0 R15: 00007ffd45aff398 [ 722.823560][T11422] [ 722.849229][ T956] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 722.856587][ T956] cdc_ncm 3-1:1.0: bind() failure [ 722.867198][ T956] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 722.874125][ T956] cdc_ncm 3-1:1.1: bind() failure [ 722.911339][ T956] usb 3-1: USB disconnect, device number 11 [ 723.460548][T11426] bridge0: port 3(netdevsim0) entered blocking state [ 723.503693][T11426] bridge0: port 3(netdevsim0) entered disabled state [ 723.511235][T11426] device netdevsim0 entered promiscuous mode [ 723.720496][ T27] audit: type=1326 audit(1793929454.498:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.8.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef6d9fb19 code=0x7ffc0000 [ 723.751333][ T27] audit: type=1326 audit(1793929454.498:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.8.1547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef6d9fb19 code=0x7ffc0000 [ 724.519018][T11439] device-mapper: table: 248:8: crypt: Error allocating crypto tfm (-ENOENT) [ 724.587499][T11439] device-mapper: ioctl: error adding target to table [ 724.682457][ T4360] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 724.895928][ T4360] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 724.924019][ T4360] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 724.967692][ T4360] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.997276][ T4360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.030463][ T4360] usb 1-1: Product: syz [ 725.361589][ T4360] usb 1-1: Manufacturer: ᰉ [ 725.366930][ T4360] usb 1-1: SerialNumber: syz [ 725.607672][ T4360] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 725.621855][ T4360] cdc_ncm 1-1:1.0: bind() failure [ 725.661925][ T4360] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 725.701934][ T4360] cdc_ncm 1-1:1.1: bind() failure [ 725.738113][ T4360] usb 1-1: USB disconnect, device number 24 [ 727.138429][ T26] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 727.362395][ T26] usb 9-1: Using ep0 maxpacket: 16 [ 727.370360][ T26] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 727.402260][ T26] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.446901][ T26] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.620518][ T26] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.630572][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.639532][ T26] usb 9-1: Product: syz [ 727.661865][ T26] usb 9-1: Manufacturer: syz [ 727.701935][ T26] usb 9-1: SerialNumber: syz [ 728.203010][ T26] usb 9-1: 0:2 : does not exist [ 728.225859][ T26] usb 9-1: 1:0: failed to get current value for ch 0 (-22) [ 728.376020][ T26] usb 9-1: USB disconnect, device number 7 [ 728.426082][T11087] udevd[11087]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device [ 729.480210][T11551] Bluetooth: MGMT ver 1.22 [ 729.929215][ T5158] asus 0005:0B05:8502.0024: item fetching failed at offset 10/11 [ 729.946084][ T5158] asus 0005:0B05:8502.0024: Asus hid parse failed: -22 [ 730.364081][ T5158] asus: probe of 0005:0B05:8502.0024 failed with error -22 [ 731.192721][ T7] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 731.414782][ T7] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 731.469137][ T7] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 731.659449][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 731.779531][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.863592][ T7] usb 6-1: Product: syz [ 731.918839][ T7] usb 6-1: Manufacturer: ᰉ [ 731.959515][ T7] usb 6-1: SerialNumber: syz [ 733.755381][ T4428] rpcbind: server 127.0.0.1 not responding, timed out [ 734.233021][ T7] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 734.241210][ T7] cdc_ncm 6-1:1.0: bind() failure [ 734.285836][ T7] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 734.299653][ T7] cdc_ncm 6-1:1.1: bind() failure [ 734.344155][ T7] usb 6-1: USB disconnect, device number 27 [ 734.532839][ T4360] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 734.742512][ T4360] usb 7-1: Using ep0 maxpacket: 16 [ 734.749747][ T4360] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.768087][ T4360] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.780379][ T4360] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.793226][ T4360] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 734.806775][ T4360] usb 7-1: config 0 interface 0 has no altsetting 0 [ 734.813749][ T4360] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 734.824058][ T7] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 734.831820][ T4360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.853190][ T4360] usb 7-1: config 0 descriptor?? [ 735.047157][ T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.081174][ T7] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 735.090867][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.121838][ T7] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 735.135474][ T7] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 735.146367][ T7] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 735.165944][ T7] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 735.175908][ T7] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 735.200335][ T7] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 735.211709][ T7] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 735.220021][ T7] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 735.230797][ T7] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 735.437393][ T4360] logitech-djreceiver 0003:046D:C53A.0025: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 735.548979][ T4360] usb 7-1: USB disconnect, device number 20 [ 735.593373][ T7] usb 6-1: USB disconnect, device number 28 [ 735.628807][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 735.648392][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 735.661715][ T7] keyspan 6-1:1.0: device disconnected [ 735.767829][T11586] fido_id[11586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 737.743158][ T7] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 737.812422][ T22] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 739.127127][ T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 739.241359][ T7] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 739.527073][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 739.733449][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.840291][ T7] usb 1-1: Product: syz [ 739.893978][ T7] usb 1-1: Manufacturer: ᰉ [ 739.970325][ T7] usb 1-1: SerialNumber: syz [ 740.180138][ T22] usb 3-1: device descriptor read/all, error -71 [ 740.422776][ T7] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 740.429651][ T7] cdc_ncm 1-1:1.0: bind() failure [ 740.479803][ T7] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 740.514807][ T7] cdc_ncm 1-1:1.1: bind() failure [ 740.540484][ T7] usb 1-1: USB disconnect, device number 25 [ 740.560326][ T26] asus 0005:0B05:8502.0026: item fetching failed at offset 10/11 [ 740.583295][ T26] asus 0005:0B05:8502.0026: Asus hid parse failed: -22 [ 740.605786][ T26] asus: probe of 0005:0B05:8502.0026 failed with error -22 [ 740.742430][ T6084] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 740.825883][T11660] FAULT_INJECTION: forcing a failure. [ 740.825883][T11660] name failslab, interval 1, probability 0, space 0, times 0 [ 740.840503][T11660] CPU: 0 PID: 11660 Comm: syz.8.1605 Not tainted syzkaller #0 [ 740.848040][T11660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 740.858146][T11660] Call Trace: [ 740.861466][T11660] [ 740.864437][T11660] dump_stack_lvl+0x188/0x24e [ 740.869225][T11660] ? show_regs_print_info+0x12/0x12 [ 740.874495][T11660] ? load_image+0x410/0x410 [ 740.879066][T11660] ? __might_sleep+0xd0/0xd0 [ 740.883761][T11660] ? __lock_acquire+0x7ea0/0x7ea0 [ 740.888851][T11660] should_fail_ex+0x390/0x4c0 [ 740.893592][T11660] should_failslab+0x5/0x20 [ 740.898149][T11660] slab_pre_alloc_hook+0x59/0x300 [ 740.903235][T11660] ? kernfs_get_tree+0x74/0x710 [ 740.908148][T11660] __kmem_cache_alloc_node+0x4f/0x270 [ 740.913617][T11660] ? kernfs_get_tree+0x74/0x710 [ 740.918533][T11660] kmalloc_trace+0x26/0xe0 [ 740.923015][T11660] kernfs_get_tree+0x74/0x710 [ 740.927771][T11660] ? apparmor_capable+0x12c/0x190 [ 740.932859][T11660] sysfs_get_tree+0x42/0x110 [ 740.937508][T11660] vfs_get_tree+0x88/0x270 [ 740.941988][T11660] do_new_mount+0x247/0xa50 [ 740.946564][T11660] __se_sys_mount+0x2e3/0x3d0 [ 740.951284][T11660] ? __x64_sys_mount+0xc0/0xc0 [ 740.956080][T11660] ? lockdep_hardirqs_on+0x94/0x140 [ 740.961307][T11660] ? __x64_sys_mount+0x1c/0xc0 [ 740.966104][T11660] do_syscall_64+0x4c/0xa0 [ 740.970553][T11660] ? clear_bhb_loop+0x60/0xb0 [ 740.975262][T11660] ? clear_bhb_loop+0x60/0xb0 [ 740.979988][T11660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.985905][T11660] RIP: 0033:0x7f0ef6d9fb19 [ 740.990347][T11660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.009986][T11660] RSP: 002b:00007f0ef7ca3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 741.018437][T11660] RAX: ffffffffffffffda RBX: 00007f0ef7025fa0 RCX: 00007f0ef6d9fb19 [ 741.026434][T11660] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 741.034433][T11660] RBP: 00007f0ef6e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 741.042428][T11660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.050420][T11660] R13: 00007f0ef7026038 R14: 00007f0ef7025fa0 R15: 00007fffa0f8b518 [ 741.058432][T11660] [ 741.078690][ T6084] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 741.101156][ T6084] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.119396][ T6084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.128271][ T6084] usb 7-1: Product: syz [ 741.138639][ T6084] usb 7-1: Manufacturer: syz [ 741.143725][ T6084] usb 7-1: SerialNumber: syz [ 741.159335][ T6084] cdc_ncm 7-1:1.0: skipping garbage [ 741.952080][T11688] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(6) [ 742.177506][ T6084] cdc_ncm 7-1:1.0: bind() failure [ 742.212722][ T6084] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 742.240319][ T6084] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 742.260644][ T6084] usbtest: probe of 7-1:1.1 failed with error -71 [ 744.339251][T11710] netlink: 'syz.8.1618': attribute type 10 has an invalid length. [ 745.104147][ T6084] usb 7-1: USB disconnect, device number 21 [ 745.148840][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.156399][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.173599][ T4361] asus 0005:0B05:8502.0027: unbalanced collection at end of report description [ 745.205855][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.213019][T11710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.220460][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.227679][T11710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.257513][T11710] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 745.267492][ T4361] asus 0005:0B05:8502.0027: Asus hid parse failed: -22 [ 745.314293][ T4361] asus: probe of 0005:0B05:8502.0027 failed with error -22 [ 745.332560][ T4652] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 745.606513][ T4652] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 745.629415][ T4652] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 745.672629][ T4652] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 745.710703][ T4652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.731267][ T4652] usb 1-1: Product: syz [ 745.741304][ T4652] usb 1-1: Manufacturer: ᰉ [ 745.754659][ T4652] usb 1-1: SerialNumber: syz [ 745.987887][ T4652] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 746.011942][ T4652] cdc_ncm 1-1:1.0: bind() failure [ 746.044185][ T4652] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 746.067243][ T4652] cdc_ncm 1-1:1.1: bind() failure [ 746.100292][ T4652] usb 1-1: USB disconnect, device number 26 [ 746.242638][ T6084] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 746.285381][T11746] FAULT_INJECTION: forcing a failure. [ 746.285381][T11746] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 746.339973][T11746] CPU: 1 PID: 11746 Comm: syz.6.1630 Not tainted syzkaller #0 [ 746.347529][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 746.357633][T11746] Call Trace: [ 746.360960][T11746] [ 746.363952][T11746] dump_stack_lvl+0x188/0x24e [ 746.368705][T11746] ? show_regs_print_info+0x12/0x12 [ 746.373989][T11746] ? load_image+0x410/0x410 [ 746.378552][T11746] ? __lock_acquire+0x7ea0/0x7ea0 [ 746.383636][T11746] ? do_raw_spin_unlock+0x11d/0x230 [ 746.388890][T11746] should_fail_ex+0x390/0x4c0 [ 746.393658][T11746] _copy_from_user+0x2c/0x170 [ 746.398514][T11746] sync_file_ioctl+0x1e6/0xef0 [ 746.403408][T11746] ? sync_file_poll+0x230/0x230 [ 746.408352][T11746] ? __fget_files+0x28/0x460 [ 746.413063][T11746] ? bpf_lsm_file_ioctl+0x5/0x10 [ 746.418066][T11746] ? security_file_ioctl+0x7c/0xa0 [ 746.423249][T11746] ? sync_file_poll+0x230/0x230 [ 746.428168][T11746] __se_sys_ioctl+0xfa/0x170 [ 746.432831][T11746] do_syscall_64+0x4c/0xa0 [ 746.437325][T11746] ? clear_bhb_loop+0x60/0xb0 [ 746.442062][T11746] ? clear_bhb_loop+0x60/0xb0 [ 746.446843][T11746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.452803][T11746] RIP: 0033:0x7fe00b79fb19 [ 746.457301][T11746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.477003][T11746] RSP: 002b:00007fe00c6b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.485480][T11746] RAX: ffffffffffffffda RBX: 00007fe00ba25fa0 RCX: 00007fe00b79fb19 [ 746.493499][T11746] RDX: 0000200000000600 RSI: 00000000c0303e03 RDI: 0000000000000005 [ 746.501533][T11746] RBP: 00007fe00b837b70 R08: 0000000000000000 R09: 0000000000000000 [ 746.509597][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.517632][T11746] R13: 00007fe00ba26038 R14: 00007fe00ba25fa0 R15: 00007ffd45aff398 [ 746.525685][T11746] [ 746.538263][ T22] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 746.655143][ T6084] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 746.673475][ T6084] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 746.695911][ T6084] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 746.721633][ T6084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.742575][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 746.754929][ T22] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 746.787497][T11752] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 746.794062][T11752] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 746.819650][ T6084] usb 6-1: Found UVC 1.00 device (046d:0825) [ 746.830079][ T22] usb 3-1: config 0 has no interface number 0 [ 746.841296][ T22] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 746.861195][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.870301][T11752] vhci_hcd vhci_hcd.0: Device attached [ 746.883098][ T22] usb 3-1: Product: syz [ 746.889951][T11753] vhci_hcd: connection closed [ 746.890162][ T22] usb 3-1: Manufacturer: syz [ 746.899768][ T58] vhci_hcd: stop threads [ 746.904216][ T58] vhci_hcd: release socket [ 746.908900][ T58] vhci_hcd: disconnect device [ 746.914343][ T22] usb 3-1: SerialNumber: syz [ 746.931701][ T22] usb 3-1: config 0 descriptor?? [ 746.965567][ T22] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 746.998734][ T6084] usb 6-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -32 (exp. 1). [ 747.018976][ T6084] usb 6-1: No streaming interface found for terminal 2. [ 747.159270][ T22] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 747.181279][ T22] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 747.193437][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.199777][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.262681][ T4652] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 747.362053][ T22] usb 6-1: USB disconnect, device number 29 [ 747.452519][ T4652] usb 1-1: Using ep0 maxpacket: 32 [ 747.461714][ T4652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.498273][ T4652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.520849][ T4652] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 747.530536][ T4652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.553168][ T4652] usb 1-1: config 0 descriptor?? [ 747.674563][T11769] netlink: 'syz.8.1634': attribute type 10 has an invalid length. [ 747.692851][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.700183][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.774158][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 747.783168][ T4361] usb 3-1: USB disconnect, device number 14 [ 747.798038][ T4361] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 747.836485][ T4361] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 747.859511][ T4361] quatech2 3-1:0.51: device disconnected [ 747.975428][ T4652] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 748.007074][ T4652] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 748.035918][ T4652] ft260 0003:0403:6030.0028: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 748.178041][ T4652] ft260 0003:0403:6030.0028: chip code: 0000 0000 [ 748.445597][T11795] sg_write: data in/out 328924/136 bytes for SCSI command 0x0-- guessing data in; [ 748.445597][T11795] program syz.2.1643 not setting count and/or reply_len properly [ 748.581670][T11801] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 748.588275][T11801] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 748.652856][T11801] vhci_hcd vhci_hcd.0: Device attached [ 748.672729][T11802] vhci_hcd: connection closed [ 748.673131][ T48] vhci_hcd: stop threads [ 748.692054][ T48] vhci_hcd: release socket [ 748.707819][ T48] vhci_hcd: disconnect device [ 748.800520][ T4652] ft260 0003:0403:6030.0028: failed to retrieve status: -71 [ 748.818860][ T4652] ft260 0003:0403:6030.0028: failed to reset I2C controller: -71 [ 748.861289][ T4652] usb 1-1: USB disconnect, device number 27 [ 749.119981][T11809] fido_id[11809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 749.412422][ T22] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 749.550809][T11832] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 749.584906][T11834] FAULT_INJECTION: forcing a failure. [ 749.584906][T11834] name failslab, interval 1, probability 0, space 0, times 0 [ 749.590281][T11832] device-mapper: raid: Choosing default region size of 4MiB [ 749.601854][T11834] CPU: 1 PID: 11834 Comm: syz.0.1653 Not tainted syzkaller #0 [ 749.612885][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 749.622990][T11834] Call Trace: [ 749.626321][T11834] [ 749.629298][T11834] dump_stack_lvl+0x188/0x24e [ 749.634042][T11834] ? show_regs_print_info+0x12/0x12 [ 749.639342][T11834] ? load_image+0x410/0x410 [ 749.643905][T11834] ? __might_sleep+0xd0/0xd0 [ 749.648619][T11834] ? __lock_acquire+0x7ea0/0x7ea0 [ 749.653714][T11834] should_fail_ex+0x390/0x4c0 [ 749.658438][T11834] should_failslab+0x5/0x20 [ 749.662976][T11834] slab_pre_alloc_hook+0x59/0x300 [ 749.668039][T11834] ? kobject_uevent_env+0x278/0x890 [ 749.673274][T11834] __kmem_cache_alloc_node+0x4f/0x270 [ 749.678702][T11834] ? kobject_uevent_env+0x278/0x890 [ 749.683983][T11834] kmalloc_trace+0x26/0xe0 [ 749.688434][T11834] kobject_uevent_env+0x278/0x890 [ 749.693501][T11834] ? rpc_sysfs_client_setup+0x1f3/0x310 [ 749.699127][T11834] rpc_sysfs_client_setup+0x267/0x310 [ 749.704533][T11834] ? __lock_acquire+0x7ea0/0x7ea0 [ 749.709594][T11834] ? rpc_sysfs_exit+0x30/0x30 [ 749.714316][T11834] ? rpc_net_ns+0x1a/0x230 [ 749.718873][T11834] ? rpc_net_ns+0x1a/0x230 [ 749.723328][T11834] rpc_new_client+0x7d2/0xe20 [ 749.728053][T11834] rpc_create_xprt+0x29c/0x9c0 [ 749.732876][T11834] ? rpc_create+0x7e0/0x7e0 [ 749.737425][T11834] ? __kmem_cache_alloc_node+0x19d/0x270 [ 749.743084][T11834] ? xprt_create_transport+0x380/0x630 [ 749.748569][T11834] ? rcu_is_watching+0x11/0xa0 [ 749.753371][T11834] ? kstrdup+0x52/0x70 [ 749.757577][T11834] ? memcpy+0x3c/0x60 [ 749.761587][T11834] ? xprt_create_transport+0x43b/0x630 [ 749.767080][T11834] rpc_create+0x55f/0x7e0 [ 749.771458][T11834] ? rpc_cleanup_clids+0x20/0x20 [ 749.776432][T11834] ? __lock_acquire+0x7ea0/0x7ea0 [ 749.781486][T11834] ? do_raw_spin_lock+0x128/0x2f0 [ 749.786550][T11834] rpcb_create_local+0x37e/0x8f0 [ 749.791603][T11834] ? net_generic+0x240/0x240 [ 749.796237][T11834] ? lockdep_softirqs_off+0x430/0x430 [ 749.801651][T11834] ? free_zapped_rcu+0x1f0/0x1f0 [ 749.806624][T11834] ? __kmem_cache_alloc_node+0x19d/0x270 [ 749.812333][T11834] ? __svc_create+0x8de/0x9d0 [ 749.817044][T11834] ? i_am_nfsd+0x20/0x20 [ 749.821318][T11834] svc_bind+0x178/0x1d0 [ 749.825507][T11834] nfsd_create_serv+0x34e/0x700 [ 749.830394][T11834] ? nfsd+0x2d0/0x2d0 [ 749.834407][T11834] ? sscanf+0xdf/0x130 [ 749.838516][T11834] ? net_generic+0x1e/0x240 [ 749.843047][T11834] ? net_generic+0x1e/0x240 [ 749.847582][T11834] write_ports+0x560/0xb80 [ 749.852038][T11834] ? write_versions+0xbb0/0xbb0 [ 749.856930][T11834] ? __lock_acquire+0x7ea0/0x7ea0 [ 749.861995][T11834] ? __virt_addr_valid+0x188/0x540 [ 749.867231][T11834] ? __might_fault+0xc2/0x120 [ 749.871937][T11834] ? __might_fault+0xa6/0x120 [ 749.876659][T11834] ? _copy_from_user+0x10b/0x170 [ 749.881628][T11834] ? simple_transaction_get+0x119/0x140 [ 749.887325][T11834] nfsctl_transaction_write+0x105/0x150 [ 749.892938][T11834] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 749.898606][T11834] vfs_write+0x2dc/0x9a0 [ 749.902889][T11834] ? file_end_write+0x250/0x250 [ 749.907760][T11834] ? __fget_files+0x28/0x460 [ 749.912383][T11834] ? __fget_files+0x3fc/0x460 [ 749.917101][T11834] ? __fdget_pos+0x2ae/0x360 [ 749.921724][T11834] ? ksys_write+0x70/0x260 [ 749.926168][T11834] ksys_write+0x14d/0x260 [ 749.930543][T11834] ? __ia32_sys_read+0x80/0x80 [ 749.935332][T11834] ? lockdep_hardirqs_on+0x94/0x140 [ 749.940563][T11834] do_syscall_64+0x4c/0xa0 [ 749.945034][T11834] ? clear_bhb_loop+0x60/0xb0 [ 749.949780][T11834] ? clear_bhb_loop+0x60/0xb0 [ 749.954491][T11834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.960423][T11834] RIP: 0033:0x7fc91bb9fb19 [ 749.964866][T11834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.984516][T11834] RSP: 002b:00007fc919df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 749.992960][T11834] RAX: ffffffffffffffda RBX: 00007fc91be25fa0 RCX: 00007fc91bb9fb19 [ 750.001137][T11834] RDX: 0000000000000005 RSI: 0000200000000580 RDI: 0000000000000006 [ 750.009307][T11834] RBP: 00007fc91bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 750.017299][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.025296][T11834] R13: 00007fc91be26038 R14: 00007fc91be25fa0 R15: 00007ffc33364f28 [ 750.033316][T11834] [ 750.059907][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 750.102848][ T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 750.138375][ T22] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 750.186542][T11832] block device autoloading is deprecated and will be removed. [ 750.194661][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.281626][ T22] usb 6-1: Found UVC 1.00 device (046d:0825) [ 750.471003][T11832] md: pers->run() failed ... [ 750.481080][ T22] usb 6-1: Failed to query (GET_INFO) UVC control 14 on unit 1: -32 (exp. 1). [ 750.510674][ T22] usb 6-1: No streaming interface found for terminal 2. [ 750.574461][T11832] device-mapper: table: 248:9: raid: Failed to run raid array (-EINVAL) [ 750.584339][T11832] device-mapper: ioctl: error adding target to table [ 750.861388][ T22] usb 6-1: USB disconnect, device number 30 [ 751.423339][ T7] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 751.622539][ T7] usb 9-1: Using ep0 maxpacket: 32 [ 751.631828][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.680126][ T7] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.710963][ T7] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 751.733785][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.775508][ T7] usb 9-1: config 0 descriptor?? [ 752.193213][T11902] FAULT_INJECTION: forcing a failure. [ 752.193213][T11902] name failslab, interval 1, probability 0, space 0, times 0 [ 752.220255][ T7] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 752.237984][ T7] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 752.254149][T11902] CPU: 0 PID: 11902 Comm: syz.0.1674 Not tainted syzkaller #0 [ 752.261697][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 752.271797][T11902] Call Trace: [ 752.275118][T11902] [ 752.278097][T11902] dump_stack_lvl+0x188/0x24e [ 752.282846][T11902] ? show_regs_print_info+0x12/0x12 [ 752.288098][T11902] ? load_image+0x410/0x410 [ 752.292656][T11902] ? __lock_acquire+0x7ea0/0x7ea0 [ 752.297741][T11902] ? percpu_ref_put+0x12/0x100 [ 752.302563][T11902] should_fail_ex+0x390/0x4c0 [ 752.307305][T11902] should_failslab+0x5/0x20 [ 752.311863][T11902] slab_pre_alloc_hook+0x59/0x300 [ 752.316956][T11902] kmem_cache_alloc+0x56/0x2f0 [ 752.321770][T11902] ? anon_vma_fork+0x1eb/0x520 [ 752.326599][T11902] anon_vma_fork+0x1eb/0x520 [ 752.331252][T11902] copy_mm+0xc29/0x16e0 [ 752.335573][T11902] ? copy_signal+0x640/0x640 [ 752.340235][T11902] ? __init_rwsem+0x11e/0x160 [ 752.344968][T11902] ? copy_signal+0x51f/0x640 [ 752.349616][T11902] copy_process+0x1952/0x4070 [ 752.354350][T11902] ? plist_add+0x3d7/0x490 [ 752.358845][T11902] ? copy_process+0x974/0x4070 [ 752.363664][T11902] ? futex_wait+0x525/0x640 [ 752.368250][T11902] ? idle_dummy+0x10/0x10 [ 752.372643][T11902] kernel_clone+0x24b/0x900 [ 752.377206][T11902] ? create_io_thread+0x170/0x170 [ 752.382281][T11902] ? do_futex+0x310/0x320 [ 752.386757][T11902] __x64_sys_clone+0x1a7/0x220 [ 752.391555][T11902] ? __ia32_sys_vfork+0x140/0x140 [ 752.396620][T11902] ? lock_chain_count+0x20/0x20 [ 752.401504][T11902] ? lockdep_hardirqs_on+0x94/0x140 [ 752.406813][T11902] do_syscall_64+0x4c/0xa0 [ 752.411256][T11902] ? clear_bhb_loop+0x60/0xb0 [ 752.415968][T11902] ? clear_bhb_loop+0x60/0xb0 [ 752.420684][T11902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 752.426709][T11902] RIP: 0033:0x7fc91bb9fb19 [ 752.431148][T11902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.450785][T11902] RSP: 002b:00007fc919df5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 752.459241][T11902] RAX: ffffffffffffffda RBX: 00007fc91be25fa0 RCX: 00007fc91bb9fb19 [ 752.467239][T11902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 752.475233][T11902] RBP: 00007fc91bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 752.483231][T11902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 752.491220][T11902] R13: 00007fc91be26038 R14: 00007fc91be25fa0 R15: 00007ffc33364f28 [ 752.499235][T11902] [ 752.522580][ T7] ft260 0003:0403:6030.0029: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 752.583882][T11902] input: syz0 as /devices/virtual/input/input34 [ 752.618011][T11908] netlink: 'syz.5.1677': attribute type 10 has an invalid length. [ 752.626640][ T7] ft260 0003:0403:6030.0029: chip code: 0000 0000 [ 753.028538][ T7] ft260 0003:0403:6030.0029: failed to retrieve status: -71, no wakeup [ 753.125595][ T7] ft260 0003:0403:6030.0029: failed to retrieve status: -71 [ 753.134225][ T7] ft260 0003:0403:6030.0029: failed to reset I2C controller: -71 [ 753.158477][ T7] usb 9-1: USB disconnect, device number 8 [ 753.459459][T11925] fido_id[11925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 754.382380][ T7] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 754.474559][ T4429] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 756.489038][ T26] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 756.562777][ T4429] usb 7-1: device descriptor read/64, error -71 [ 756.728928][ T26] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 756.763437][ T26] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 756.842426][ T4429] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 756.970452][ T26] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 756.988245][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.028578][ T26] usb 9-1: Product: syz [ 757.042606][ T4429] usb 7-1: device descriptor read/64, error -71 [ 757.060074][ T26] usb 9-1: Manufacturer: ᰉ [ 757.069752][ T26] usb 9-1: SerialNumber: syz [ 757.102725][ T7] usb 6-1: device not accepting address 31, error -71 [ 757.178686][ T4429] usb usb7-port1: attempt power cycle [ 757.190692][T11971] FAULT_INJECTION: forcing a failure. [ 757.190692][T11971] name failslab, interval 1, probability 0, space 0, times 0 [ 757.232541][T11971] CPU: 0 PID: 11971 Comm: syz.2.1694 Not tainted syzkaller #0 [ 757.240087][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 757.250185][T11971] Call Trace: [ 757.253598][T11971] [ 757.256574][T11971] dump_stack_lvl+0x188/0x24e [ 757.261313][T11971] ? show_regs_print_info+0x12/0x12 [ 757.266588][T11971] ? load_image+0x410/0x410 [ 757.271154][T11971] ? __might_sleep+0xd0/0xd0 [ 757.275794][T11971] ? __lock_acquire+0x7ea0/0x7ea0 [ 757.280888][T11971] ? __register_sysctl_table+0xdfd/0xed0 [ 757.286599][T11971] should_fail_ex+0x390/0x4c0 [ 757.291336][T11971] should_failslab+0x5/0x20 [ 757.295891][T11971] slab_pre_alloc_hook+0x59/0x300 [ 757.301060][T11971] ? ops_init+0x8a/0x5e0 [ 757.305363][T11971] __kmem_cache_alloc_node+0x4f/0x270 [ 757.310784][T11971] ? _raw_spin_unlock+0x24/0x40 [ 757.315698][T11971] ? ops_init+0x8a/0x5e0 [ 757.320083][T11971] __kmalloc+0xa3/0x240 [ 757.324299][T11971] ops_init+0x8a/0x5e0 [ 757.328438][T11971] setup_net+0x4f2/0xbd0 [ 757.332743][T11971] ? copy_net_ns+0x5b0/0x5b0 [ 757.337389][T11971] ? copy_net_ns+0x324/0x5b0 [ 757.342039][T11971] ? down_read_killable+0x1cc/0x340 [ 757.347299][T11971] copy_net_ns+0x33e/0x5b0 [ 757.351777][T11971] create_new_namespaces+0x3ce/0x700 [ 757.357138][T11971] unshare_nsproxy_namespaces+0x116/0x160 [ 757.362911][T11971] ksys_unshare+0x4f6/0x8e0 [ 757.367458][T11971] ? sighand_ctor+0x40/0x40 [ 757.372036][T11971] ? lock_chain_count+0x20/0x20 [ 757.376929][T11971] ? syscall_enter_from_user_mode+0x21/0x80 [ 757.382861][T11971] __x64_sys_unshare+0x34/0x40 [ 757.387664][T11971] do_syscall_64+0x4c/0xa0 [ 757.392112][T11971] ? clear_bhb_loop+0x60/0xb0 [ 757.396821][T11971] ? clear_bhb_loop+0x60/0xb0 [ 757.401534][T11971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.407466][T11971] RIP: 0033:0x7fb4a379fb19 [ 757.411907][T11971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.431627][T11971] RSP: 002b:00007fb4a4616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 757.440066][T11971] RAX: ffffffffffffffda RBX: 00007fb4a3a25fa0 RCX: 00007fb4a379fb19 [ 757.448147][T11971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 757.456147][T11971] RBP: 00007fb4a3837b70 R08: 0000000000000000 R09: 0000000000000000 [ 757.464139][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.472136][T11971] R13: 00007fb4a3a26038 R14: 00007fb4a3a25fa0 R15: 00007ffc1f8a2538 [ 757.480146][T11971] [ 757.492336][ T6084] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 757.559580][ T26] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 757.573703][ T26] cdc_ncm 9-1:1.0: bind() failure [ 757.598055][ T26] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 757.620730][ T26] cdc_ncm 9-1:1.1: bind() failure [ 757.650424][ T26] usb 9-1: USB disconnect, device number 9 [ 757.734174][ T6084] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.753980][ T6084] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.782657][ T6084] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 757.792449][ T6084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.801810][ T6084] usb 1-1: Product: syz [ 757.807114][ T6084] usb 1-1: Manufacturer: syz [ 757.811929][ T6084] usb 1-1: SerialNumber: syz [ 758.247404][ T8296] usb 1-1: USB disconnect, device number 28 [ 761.052388][ T128] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 761.212442][ T128] usb 6-1: device descriptor read/64, error -71 [ 761.252398][ T4652] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 761.446333][ T4652] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 761.466102][ T4652] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 761.509394][ T4652] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 761.527900][ T128] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 761.539816][ T4652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.569134][ T4652] usb 3-1: Product: syz [ 761.578900][ T4652] usb 3-1: Manufacturer: ᰉ [ 761.602438][ T4652] usb 3-1: SerialNumber: syz [ 761.702531][ T128] usb 6-1: device descriptor read/64, error -71 [ 762.188216][ T128] usb usb6-port1: attempt power cycle [ 762.962696][ T4652] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 762.996844][ T4652] cdc_ncm 3-1:1.0: bind() failure [ 763.045840][ T4652] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 763.100408][ T4652] cdc_ncm 3-1:1.1: bind() failure [ 763.146703][ T4652] usb 3-1: USB disconnect, device number 15 [ 763.363005][T12065] usb0: HOST MAC 5e:93:70:43:f6:4e [ 763.372567][T12065] usb0: MAC 0e:68:cf:ef:60:c6 [ 763.652526][ T5158] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 763.688567][T12079] FAULT_INJECTION: forcing a failure. [ 763.688567][T12079] name failslab, interval 1, probability 0, space 0, times 0 [ 763.769957][T12079] CPU: 0 PID: 12079 Comm: syz.2.1720 Not tainted syzkaller #0 [ 763.777492][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 763.787565][T12079] Call Trace: [ 763.790853][T12079] [ 763.793813][T12079] dump_stack_lvl+0x188/0x24e [ 763.798512][T12079] ? show_regs_print_info+0x12/0x12 [ 763.803732][T12079] ? load_image+0x410/0x410 [ 763.808263][T12079] ? __might_sleep+0xd0/0xd0 [ 763.812880][T12079] ? __lock_acquire+0x7ea0/0x7ea0 [ 763.817939][T12079] should_fail_ex+0x390/0x4c0 [ 763.822658][T12079] should_failslab+0x5/0x20 [ 763.827236][T12079] slab_pre_alloc_hook+0x59/0x300 [ 763.832311][T12079] kmem_cache_alloc+0x56/0x2f0 [ 763.837100][T12079] ? sk_prot_alloc+0x57/0x210 [ 763.841798][T12079] sk_prot_alloc+0x57/0x210 [ 763.846330][T12079] ? sk_alloc+0x20/0x330 [ 763.850581][T12079] sk_alloc+0x36/0x330 [ 763.854664][T12079] inet6_create+0x7ad/0x11b0 [ 763.859297][T12079] ? inet6_create+0x7c/0x11b0 [ 763.863998][T12079] __sock_create+0x49a/0x940 [ 763.868635][T12079] __sys_socket+0xc4/0x190 [ 763.873099][T12079] __x64_sys_socket+0x76/0x80 [ 763.877815][T12079] do_syscall_64+0x4c/0xa0 [ 763.882250][T12079] ? clear_bhb_loop+0x60/0xb0 [ 763.886976][T12079] ? clear_bhb_loop+0x60/0xb0 [ 763.891666][T12079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.897578][T12079] RIP: 0033:0x7fb4a379fb19 [ 763.902005][T12079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.921622][T12079] RSP: 002b:00007fb4a4616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 763.930063][T12079] RAX: ffffffffffffffda RBX: 00007fb4a3a25fa0 RCX: 00007fb4a379fb19 [ 763.938057][T12079] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 763.946074][T12079] RBP: 00007fb4a3837b70 R08: 0000000000000000 R09: 0000000000000000 [ 763.954070][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.962145][T12079] R13: 00007fb4a3a26038 R14: 00007fb4a3a25fa0 R15: 00007ffc1f8a2538 [ 763.970189][T12079] [ 763.981244][ T5158] usb 1-1: Dual-Role OTG device on HNP port [ 763.994369][ T5158] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 764.038945][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.240851][ T5158] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 5e:93:70:43:f6:4e [ 764.600707][T12091] netlink: 'syz.5.1723': attribute type 10 has an invalid length. [ 764.872360][ T4359] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 766.962519][ T4359] usb 9-1: Using ep0 maxpacket: 32 [ 766.974653][ T4359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.008944][ T4359] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.067588][ T4359] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 767.095643][ T4359] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.134862][ T4359] usb 9-1: config 0 descriptor?? [ 767.415600][ T7] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 767.551329][ T4359] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 767.568916][ T4359] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 767.592170][ T4359] ft260 0003:0403:6030.002A: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 767.616955][ T7] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 767.627813][ T7] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 767.642415][ T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 767.651905][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.675786][ T7] usb 6-1: Product: syz [ 767.693886][ T7] usb 6-1: Manufacturer: ᰉ [ 767.699281][T12136] FAULT_INJECTION: forcing a failure. [ 767.699281][T12136] name failslab, interval 1, probability 0, space 0, times 0 [ 767.713090][ T7] usb 6-1: SerialNumber: syz [ 767.723434][T12136] CPU: 0 PID: 12136 Comm: syz.0.1734 Not tainted syzkaller #0 [ 767.731040][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 767.741171][T12136] Call Trace: [ 767.744492][T12136] [ 767.747551][T12136] dump_stack_lvl+0x188/0x24e [ 767.752296][T12136] ? show_regs_print_info+0x12/0x12 [ 767.757558][T12136] ? load_image+0x410/0x410 [ 767.762132][T12136] ? __lock_acquire+0x7ea0/0x7ea0 [ 767.767220][T12136] ? ksys_write+0x14d/0x260 [ 767.771770][T12136] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 767.777902][T12136] should_fail_ex+0x390/0x4c0 [ 767.782634][T12136] should_failslab+0x5/0x20 [ 767.787194][T12136] slab_pre_alloc_hook+0x59/0x300 [ 767.792275][T12136] ? kobject_get_path+0xac/0x220 [ 767.797268][T12136] __kmem_cache_alloc_node+0x4f/0x270 [ 767.802713][T12136] ? kobject_get_path+0xac/0x220 [ 767.807708][T12136] __kmalloc+0xa3/0x240 [ 767.811922][T12136] kobject_get_path+0xac/0x220 [ 767.816740][T12136] kobject_uevent_env+0x28d/0x890 [ 767.821834][T12136] rpc_sysfs_xprt_switch_destroy+0x4d/0x90 [ 767.827715][T12136] xprt_switch_put+0x330/0x3b0 [ 767.832549][T12136] rpc_release_client+0x377/0x740 [ 767.837632][T12136] rpc_shutdown_client+0x2f9/0x500 [ 767.842804][T12136] ? rpc_clnt_disconnect+0x1b0/0x1b0 [ 767.848147][T12136] ? slab_free_freelist_hook+0x133/0x1b0 [ 767.853847][T12136] ? rpc_create_xprt+0x447/0x9c0 [ 767.858856][T12136] ? kmem_cache_free+0xf7/0x2a0 [ 767.863796][T12136] rpc_create_xprt+0x5b9/0x9c0 [ 767.868620][T12136] ? rpc_create+0x7e0/0x7e0 [ 767.873222][T12136] ? xprt_create_transport+0x380/0x630 [ 767.878749][T12136] ? xprt_create_transport+0x43b/0x630 [ 767.884260][T12136] rpc_create+0x55f/0x7e0 [ 767.888641][T12136] ? rpc_cleanup_clids+0x20/0x20 [ 767.893668][T12136] ? __lock_acquire+0x7ea0/0x7ea0 [ 767.898766][T12136] ? do_raw_spin_lock+0x128/0x2f0 [ 767.903861][T12136] rpcb_create_local+0x37e/0x8f0 [ 767.908861][T12136] ? net_generic+0x240/0x240 [ 767.913520][T12136] ? lockdep_softirqs_off+0x430/0x430 [ 767.918947][T12136] ? free_zapped_rcu+0x1f0/0x1f0 [ 767.923943][T12136] ? __kmem_cache_alloc_node+0x19d/0x270 [ 767.929642][T12136] ? __svc_create+0x8de/0x9d0 [ 767.934389][T12136] ? i_am_nfsd+0x20/0x20 [ 767.938716][T12136] svc_bind+0x178/0x1d0 [ 767.942935][T12136] nfsd_create_serv+0x34e/0x700 [ 767.947864][T12136] ? nfsd+0x2d0/0x2d0 [ 767.951890][T12136] ? sscanf+0xdf/0x130 [ 767.956014][T12136] ? __lock_acquire+0x7ea0/0x7ea0 [ 767.961121][T12136] ? skip_atoi+0xe0/0xe0 [ 767.965418][T12136] ? net_generic+0x1e/0x240 [ 767.969968][T12136] ? net_generic+0x1e/0x240 [ 767.974552][T12136] write_ports+0x560/0xb80 [ 767.979031][T12136] ? write_versions+0xbb0/0xbb0 [ 767.983942][T12136] ? __lock_acquire+0x7ea0/0x7ea0 [ 767.989083][T12136] ? __virt_addr_valid+0x188/0x540 [ 767.994257][T12136] ? __might_fault+0xc2/0x120 [ 767.998982][T12136] ? __might_fault+0xa6/0x120 [ 768.003714][T12136] ? _copy_from_user+0x10b/0x170 [ 768.008717][T12136] ? simple_transaction_get+0x119/0x140 [ 768.014320][T12136] nfsctl_transaction_write+0x105/0x150 [ 768.019946][T12136] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 768.025642][T12136] vfs_write+0x2dc/0x9a0 [ 768.029944][T12136] ? file_end_write+0x250/0x250 [ 768.034841][T12136] ? __fget_files+0x28/0x460 [ 768.039498][T12136] ? __fget_files+0x3fc/0x460 [ 768.044254][T12136] ? __fdget_pos+0x2ae/0x360 [ 768.048898][T12136] ? ksys_write+0x70/0x260 [ 768.053365][T12136] ksys_write+0x14d/0x260 [ 768.057741][T12136] ? __ia32_sys_read+0x80/0x80 [ 768.062552][T12136] ? lockdep_hardirqs_on+0x94/0x140 [ 768.067805][T12136] do_syscall_64+0x4c/0xa0 [ 768.072280][T12136] ? clear_bhb_loop+0x60/0xb0 [ 768.077014][T12136] ? clear_bhb_loop+0x60/0xb0 [ 768.081746][T12136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.087716][T12136] RIP: 0033:0x7fc91bb9fb19 [ 768.092175][T12136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.111816][T12136] RSP: 002b:00007fc919df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.120246][T12136] RAX: ffffffffffffffda RBX: 00007fc91be25fa0 RCX: 00007fc91bb9fb19 [ 768.128249][T12136] RDX: 0000000000000005 RSI: 0000200000000580 RDI: 0000000000000005 [ 768.136268][T12136] RBP: 00007fc91bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 768.144279][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.152295][T12136] R13: 00007fc91be26038 R14: 00007fc91be25fa0 R15: 00007ffc33364f28 [ 768.160333][T12136] [ 768.194186][ T4359] ft260 0003:0403:6030.002A: chip code: 0000 0000 [ 768.272225][T12136] ------------[ cut here ]------------ [ 768.278210][T12136] kernel BUG at net/sunrpc/svc.c:605! [ 768.322513][T12136] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 768.328853][T12136] CPU: 1 PID: 12136 Comm: syz.0.1734 Not tainted syzkaller #0 [ 768.336352][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 768.346450][T12136] RIP: 0010:svc_destroy+0x184/0x190 [ 768.351728][T12136] Code: 5f 5d e9 7f dd 5e f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 74 77 f8 e9 17 ff ff ff e8 9c 10 26 f8 <0f> 0b e8 95 10 26 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 768.371407][T12136] RSP: 0018:ffffc90017d7fb10 EFLAGS: 00010283 [ 768.377522][T12136] RAX: ffffffff895c5804 RBX: ffff88801aaa2850 RCX: 0000000000080000 [ 768.385534][T12136] RDX: ffffc900140ec000 RSI: 000000000007794e RDI: 000000000007794f [ 768.393545][T12136] RBP: ffffc90017d7fcb8 R08: ffffffff91b623ff R09: 1ffffffff236c47f [ 768.401550][T12136] R10: dffffc0000000000 R11: fffffbfff236c480 R12: dffffc0000000000 [ 768.409591][T12136] R13: dffffc0000000000 R14: ffff88801aaa2868 R15: 0000000000000001 [ 768.417591][T12136] FS: 00007fc919df66c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 768.426548][T12136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 768.433170][T12136] CR2: 000056110f428618 CR3: 0000000064408000 CR4: 00000000003506e0 [ 768.441175][T12136] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 768.449184][T12136] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 768.457184][T12136] Call Trace: [ 768.460484][T12136] [ 768.463440][T12136] write_ports+0xa26/0xb80 [ 768.467882][T12136] ? write_versions+0xbb0/0xbb0 [ 768.472756][T12136] ? __lock_acquire+0x7ea0/0x7ea0 [ 768.477806][T12136] ? __virt_addr_valid+0x188/0x540 [ 768.482942][T12136] ? __might_fault+0xc2/0x120 [ 768.487653][T12136] ? __might_fault+0xa6/0x120 [ 768.492350][T12136] ? _copy_from_user+0x10b/0x170 [ 768.497314][T12136] ? simple_transaction_get+0x119/0x140 [ 768.502882][T12136] nfsctl_transaction_write+0x105/0x150 [ 768.508451][T12136] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 768.514115][T12136] vfs_write+0x2dc/0x9a0 [ 768.518391][T12136] ? file_end_write+0x250/0x250 [ 768.523266][T12136] ? __fget_files+0x28/0x460 [ 768.527882][T12136] ? __fget_files+0x3fc/0x460 [ 768.532631][T12136] ? __fdget_pos+0x2ae/0x360 [ 768.537249][T12136] ? ksys_write+0x70/0x260 [ 768.541685][T12136] ksys_write+0x14d/0x260 [ 768.546038][T12136] ? __ia32_sys_read+0x80/0x80 [ 768.550822][T12136] ? lockdep_hardirqs_on+0x94/0x140 [ 768.556048][T12136] do_syscall_64+0x4c/0xa0 [ 768.560492][T12136] ? clear_bhb_loop+0x60/0xb0 [ 768.565201][T12136] ? clear_bhb_loop+0x60/0xb0 [ 768.569914][T12136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 768.575834][T12136] RIP: 0033:0x7fc91bb9fb19 [ 768.580272][T12136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.599916][T12136] RSP: 002b:00007fc919df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 768.608352][T12136] RAX: ffffffffffffffda RBX: 00007fc91be25fa0 RCX: 00007fc91bb9fb19 [ 768.616343][T12136] RDX: 0000000000000005 RSI: 0000200000000580 RDI: 0000000000000005 [ 768.624330][T12136] RBP: 00007fc91bc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 768.632324][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.640320][T12136] R13: 00007fc91be26038 R14: 00007fc91be25fa0 R15: 00007ffc33364f28 [ 768.648318][T12136] [ 768.651369][T12136] Modules linked in: [ 768.670755][ T4359] ft260 0003:0403:6030.002A: failed to retrieve status: -71, no wakeup [ 768.685863][ T7] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 768.695119][ T7] cdc_ncm 6-1:1.0: bind() failure [ 768.703883][ T4359] ft260 0003:0403:6030.002A: failed to retrieve status: -71 [ 768.725410][ T7] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 768.733924][ T4359] ft260 0003:0403:6030.002A: failed to reset I2C controller: -71 [ 768.748296][T12136] ---[ end trace 0000000000000000 ]--- [ 768.748553][ T7] cdc_ncm 6-1:1.1: bind() failure [ 768.765704][T12136] RIP: 0010:svc_destroy+0x184/0x190 [ 768.780419][ T4359] usb 9-1: USB disconnect, device number 10 [ 768.796579][T12136] Code: 5f 5d e9 7f dd 5e f8 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 24 ff ff ff 4c 89 ff e8 66 74 77 f8 e9 17 ff ff ff e8 9c 10 26 f8 <0f> 0b e8 95 10 26 f8 0f 0b 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 768.818768][ T7] usb 6-1: USB disconnect, device number 36 [ 768.855218][T12136] RSP: 0018:ffffc90017d7fb10 EFLAGS: 00010283 [ 768.878465][T12136] RAX: ffffffff895c5804 RBX: ffff88801aaa2850 RCX: 0000000000080000 [ 768.903053][T12136] RDX: ffffc900140ec000 RSI: 000000000007794e RDI: 000000000007794f [ 768.914197][T12145] fido_id[12145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 768.922664][T12136] RBP: ffffc90017d7fcb8 R08: ffffffff91b623ff R09: 1ffffffff236c47f [ 768.956854][T12136] R10: dffffc0000000000 R11: fffffbfff236c480 R12: dffffc0000000000 [ 768.977897][T12136] R13: dffffc0000000000 R14: ffff88801aaa2868 R15: 0000000000000001 [ 768.986319][T12136] FS: 00007fc919df66c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 769.001362][T12136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 769.008286][T12136] CR2: 00007ffdea26ecc4 CR3: 0000000064408000 CR4: 00000000003506e0 [ 769.018878][T12136] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 769.027309][T12136] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 769.037493][T12136] Kernel panic - not syncing: Fatal exception [ 769.044177][T12136] Kernel Offset: disabled [ 769.048523][T12136] Rebooting in 86400 seconds..