last executing test programs: 21m59.976443527s ago: executing program 2 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@fuse={0xc, 0x81, {0x4, 0x5, 0x3}}, 0x6a000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0xac9b, 0x0, 0x32315852, 0x0, 0x500, [{0x0, 0xa2}, {}, {}, {}, {}, {0xfffffffc}], 0x0, 0x0, 0x0, 0x0, 0x5}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x100000000000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004800700"], 0xe0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x8000060000000000}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200), 0x2, 0x1) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e80000001000010000000000000000000200000a"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000080000b1d0c9a65c6b8900100004800900010073797a3100000000ea215fd8c0e71d61036f47fd1432541918283e87dd4ede1230f34879e70500587bbcc3ad8d532aaee59e517039a44509ebeab7eaf9fc94a6010a903e3ffc2fa7dd2b6f613cd7c0004716c66afc5c17be5964fc2878e10bb74d33759ea0b4605d0d077e2d0c3049ff7498c557448d2f4a53e659afcf29cfe1c302eb8c662e17b4dd2649f2795191dda61495e04497c5ddf16bd6699480f393ffda0b1b092495f9fb45311147891f48ef1cbd975b86edb294af9ae7f875e396b5b9b27677daba79"], 0x24}}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 21m59.24272439s ago: executing program 2 (id=701): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="010000201000"}) (fail_nth: 1) 21m58.998412135s ago: executing program 2 (id=702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xffffffffffff2232) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd10xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88c0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0xe0) (fail_nth: 12) 21m58.382639397s ago: executing program 2 (id=708): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x4, 0x0, 0x0, 0x7fc00100}]}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x6a) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x2042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/80, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80240, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b00020000000009046f0000aad823000904"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x80082102, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xa) ioctl$TCFLSH(r9, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x8) syz_open_dev$char_usb(0xc, 0xb4, 0xffa8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x3, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) 21m43.265338178s ago: executing program 32 (id=708): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x4, 0x0, 0x0, 0x7fc00100}]}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x6a) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x2042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/80, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80240, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b00020000000009046f0000aad823000904"], 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x80082102, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xa) ioctl$TCFLSH(r9, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x8) syz_open_dev$char_usb(0xc, 0xb4, 0xffa8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x3, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) 18m23.486174488s ago: executing program 1 (id=2013): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) 18m23.406262685s ago: executing program 1 (id=2014): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 18m23.406012252s ago: executing program 1 (id=2015): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001c40), &(0x7f0000001c80)=0xfd5b) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) 18m23.166209137s ago: executing program 1 (id=2018): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 18m23.095036208s ago: executing program 1 (id=2020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x0) 18m21.482490169s ago: executing program 1 (id=2033): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ppoll(&(0x7f0000000040)=[{r0, 0xd106}], 0x1, 0x0, 0x0, 0x0) 18m21.27112753s ago: executing program 33 (id=2033): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ppoll(&(0x7f0000000040)=[{r0, 0xd106}], 0x1, 0x0, 0x0, 0x0) 9m52.3582079s ago: executing program 5 (id=4985): r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0xffffffff, 0x2400) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x101501, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001400010000000000000000000a0000000557d1e42b1951a89200ff0004000100"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000002f5ba0857078992b2000c6d3e62c3421dd38ba15fd38814eb08dec9f952a3cb5dbdf0c8afb32d1358415589a53cba8be"], 0x48}}, 0x0) write$vga_arbiter(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7472796c6f636bc701c188b2b8f7ec96bd3f2f7e8c92cbe2c3b25b58f35c95de8932470b935d90899f39e1e64455a4ef5c84791077c65d21796d151880a303c132039d03aaf9d30af715135378db037cdb96de05a82689fdb5163327b8dad5c32db41284bf91db9a"], 0xb) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000000)={0x7}) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, &(0x7f00000037c0), 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xb01, 0x0, 0x0) connect$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x2}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000140)={0x62, @loopback, 0x4e21, 0x3, 'ovf\x00', 0x20, 0x6, 0x3a}, 0x2c) getsockname$netlink(r9, &(0x7f0000000940), &(0x7f0000000240)=0xc) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x1014, 0x9, 0x5, 0x4001c251, 0x7e}) 9m51.810372203s ago: executing program 5 (id=4989): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x10000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000280)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x8, 0xf7e, 0x60a2b637, 0x0, 0x5e8, 0x2, 0xbb3}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1b47f6f94007134cf6efb8000a007a290457f012d48433e0f2d4b09803d3cc5b88bf889b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb79122fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1ca2a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94148868e884acd5e", 0xd8}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r4}, @fd, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x23}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0xa20}], 0x0, 0x0, 0x0}) 9m49.702006125s ago: executing program 5 (id=5019): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000001800)={0x28, 0x4, r1, 0x0, &(0x7f0000000800)="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", 0x800, 0x1000000000000037}) 9m49.619668432s ago: executing program 5 (id=5020): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x20, 0x6, 0xc, 0x7}, 0xffffffffffffff18) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x1ffffd, 0x200000, 0x7}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2d430654, 0x22101) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000002c40)=""/4108, 0x100c}, {&(0x7f0000000280)=""/162, 0xa2}, {&(0x7f00000017c0)=""/78, 0x4e}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/154, 0x9a}], 0x9}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @none, 0x401}, 0xe) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000880)={0x1, 0x1, 0x8, 0xd, 0x191, 0x0}) 9m49.457071925s ago: executing program 5 (id=5021): io_setup(0x2, &(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = fanotify_init(0x40, 0x80000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r4, 0x1, 0x40001019, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f00001da000/0x1000)=nil, r7, 0x8, 0x4010, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) sendto$inet(r3, &(0x7f00000005c0)="4cff496e27", 0x5, 0x40080c0, 0x0, 0x0) eventfd(0x0) 9m49.030336051s ago: executing program 5 (id=5022): socket(0x1e, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000093, 0x0, 0xf}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x88c, 0x2, 0x248, 0x9b99}, 0x1f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x4, 0x4, 0x9, 0x1, 0xb4, 0xa, 0x20a2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x3, 0xd, 0x4, 0x12a3, 0x3, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x8, 0x9, 0x4, 0x5, 0xa8a9, 0x20000073, 0x8e, 0x10000d50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x74, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0xb7, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x8, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x8, 0x4, 0x463f, 0x2, 0xdab, 0x3, 0x8, 0x14000, 0x5, 0x9]}, 0x45c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 9m33.987514884s ago: executing program 34 (id=5022): socket(0x1e, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000093, 0x0, 0xf}]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x88c, 0x2, 0x248, 0x9b99}, 0x1f, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x4, 0x4, 0x9, 0x1, 0xb4, 0xa, 0x20a2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x3, 0xd, 0x4, 0x12a3, 0x3, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x8, 0x9, 0x4, 0x5, 0xa8a9, 0x20000073, 0x8e, 0x10000d50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x74, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0xb7, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0x8, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x8, 0x4, 0x463f, 0x2, 0xdab, 0x3, 0x8, 0x14000, 0x5, 0x9]}, 0x45c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 4m10.368963722s ago: executing program 3 (id=6956): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e1e, @remote}, 0x10) recvfrom$inet(r0, 0x0, 0xf, 0x40000003, 0x0, 0xf738) 4m10.319643725s ago: executing program 3 (id=6957): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000808021100000000000000000000000000640001000006020202020202010882848b960c12182400"/54], 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32, @ANYBLOB="415643ff9ff34c117714740e9f78f707ec7da6e8fb7b87a19d23f624f40c260db28bd225318108573fc159798c036d4935b95f12a2cc9bf2958d640ea1ea59f1a87a2dd5db2140984bc7f1ec4eb6a3cd36ae204ff19eb2f31445c2be11db26b9553439ab7a3e0398613df8df23e2d565863c8642089a7191d7f16eae9bc03e124fa0b0e9f838c72d442348126f188cc5ff480c392d9bd42231fde93368535810d751f3b805a37308dd521261f81fbb7906623a286ad0498c4a8a5ae47cd43edfcd8cefc77ea7f3634847c656f8f30c3413022796"], 0x24}}, 0x0) 4m9.702191377s ago: executing program 3 (id=6967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r1, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x800, 0x30}, &(0x7f00000003c0)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3a) r5 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000002c0)="00000000007a515ee8441f9d93c34d3992de6daac5ff22954e047520f2c97ac55de5d1cd1d0ef88f01a052c2b12e54f3e30bf2e61e54202b3b947b4b5816860ffb008859c56efebf538819c3a003b1053d86bacd163e318ddd16", 0x5a) r6 = accept4(r5, 0x0, 0x0, 0x800) ioctl$KVM_TDX_INIT_VCPU(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000280)={0x2, 0x0, 0x8000000000000000}) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m9.525701767s ago: executing program 3 (id=6970): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = getpid() syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m9.4598216s ago: executing program 3 (id=6972): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000040)=0x2, 0xf6) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}}, 0x0) r2 = syz_usb_connect$uac2(0x2, 0xdf, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x4, 0xd0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x3, 0x15, 0x80}, [@selector_unit={0xc, 0x24, 0xb, 0xa, 0x7, "7087e6146494b8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2000, 0x1, 0x3, 0xc0}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x1, 0xc2, "5d17f5"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa0, 0x1, 0x2e, 0x25, "", "7ef3"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0x6, 0x5, 0x82}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x5, 0x0, "c87e"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x9, 0x4, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x9, 0xf9, {0x8, 0x25, 0x1, 0x1, 0x30, 0xfe, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x3, 0xad, 0x0, "edd4048958bc8290"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xec56, 0x5, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x1, 0x5, {0x8, 0x25, 0x1, 0x0, 0x30, 0x8}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x5, 0x10, 0x6, 0x10, 0x2}, 0x5e, &(0x7f0000000580)={0x5, 0xf, 0x5e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0xf9, 0x6, 0x2, 0x16}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0xfb, 0x2, 0x3, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x1, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x1, 0x6, 0xfffa, 0xa}, @generic={0x27, 0x10, 0x1, "e77c37f3be1429eb28fb82c9d1731968311080b199998e653cce57571b77095ca46a37a6"}]}, 0x3, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x455}}, {0xc0, &(0x7f0000000640)=@string={0xc0, 0x3, "29b49a2164877a0452fc1cfbf9dedbdaaf3b7564b26dc2233382eabe80c218e31b82afa88cb035e1f8c37945624328594df96c6db45d31bf5ae3666d7a5884c1b4b037024f5afe409e8dc3c163bda15a7ce56a40827c1dabeb6755c5183719115216841cab62ef15ea5b154a1a0c33248f8fb3345634b33cc58e2e0aa59998ad5f465ada79efa319249a0a0c17d57d0acf16f7f2af79c2c6d5d7bfdfcc502a5afc640c9dbaec13c1cf079280dce382c2c830835076962deff22ea1d0b839"}}, {0x56, &(0x7f0000000700)=@string={0x56, 0x3, "2dca3e2741e8251b86a768f6f957402cc49be55e67d83159e68116d89cd1cebc5b299f41deaca8284a81ac20d735091f11cd6395f7368dcc38bd8d334ea263fc3520bcd408009d64897d09b3575a06b41396b440"}}]}) syz_usb_control_io$uac2(r2, &(0x7f00000009c0)={0x14, &(0x7f00000007c0)={0x20, 0x40fc0f06859676c5, 0xd5, {0xd5, 0x21, "8fdfe9f7c3934562cca8b8c08919ceae730c085b6c6e230c40503bcd70f60d1ab44f4a604a1be6d6fca4831219510f0204476f188f0a5e7394eeb4f8eac34ca2cc0b646ab257f28c0d016e9ba318971d08ca3c2749d32bb7a1daa7bf25aba89a6cb49b67f18bab12a3eb7545e0528e29dd923158af2701ca7d60ab04babe8a5ceda5d27b3b096d03ef160a01e75f9c0f4694de2630d938593918471ba2ede6d483256d73d7b8a1d57c529afa8e54215ee3f85efcfe0e7db96142749556e11d912c7b62208b1218e3734a508d7cc91a7bb07017"}}, &(0x7f00000008c0)={0x0, 0x3, 0xec, @string={0xec, 0x3, "ed3a66ee1004340c1398af0345867b8d07d3b9093aa9466cca98bd0072e0232de9f1229a441e711ef1e004babaae3855bdd396201d4d91591c7b08e5798d65b87c35dac8403bb2683dd948d7b2c38a9b159df4a505178a481e04d3eb1ff8b7b5ffb03ea577a1cc145400636a126de53923d06419ab588670d64ef522ea746fd5a78fb01727534e7916cb4382898cfc85059b46147483dc67f4501a08e149106cc6542378953a51cfc76b55f2bb6cc95c4762cbec8637dc364854fb989472237e56069b26ad494eb2faa1a929403c0c5de9c9cc7c71d7a1229a1254771871514e35c3ac74737df83a837e"}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x40, 0x8752d977acb918df, 0x54, "a4e367033a41eddc3c73dfd756ee4768dcdc4bb70298c41b3542091ebdb665a73224fe423980bb7e332c73f100844762eb2f92e51e646868da7a6e15b5be80a285494f4ac786d1924b09247a2ec0bf5e2c3d0244"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000b00)={0x20, 0x81, 0x3, "f50a11"}, &(0x7f0000000b40)={0x20, 0x82, 0x1, ','}, &(0x7f0000000b80)={0x20, 0x83, 0x2, "61d9"}, &(0x7f0000000bc0)={0x20, 0x84, 0x3, "8e51f4"}, &(0x7f0000000c00)={0x20, 0x85, 0x3, "b4c4d5"}}) syz_usb_control_io(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000000206012800000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a000000050004"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, &(0x7f0000000380)="8c78e9d0473d7f2d", 0x8) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2541, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r7], 0x108}}], 0x2, 0xc040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r8, 0x891c, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @empty}}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12019001000000007900431840000102030109022d00010100b00309040004020301030d092170eade28de6415af14e8b00200050100000000000000030000020809050203200007816f"], &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x2, 0x9, 0xff, 0x31}, 0x20, &(0x7f0000000140)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x5, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "7c7f87f19d940d71530a1af7ab2791fb"}]}, 0x3, [{0x51, &(0x7f00000001c0)=ANY=[@ANYBLOB="510341b15399a55967ef5211d255b643839f3a758f2fe0d36f749badaa6f011c939435b394cdd539bf6480186b04b6b0ddd0d3e120433fda33bb0225ab4399471500"/81]}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2409}}, {0x63, &(0x7f0000000280)=ANY=[@ANYBLOB="6303a14e90473a2dbad5af1ae33a6c0334d3ed2e352bba77ad4c4a4c34d4d1c823fb51f516cae9732692bce8616fd37fdb6d378194569c3cc9834e732157cb055e5830e7d76d22b02d6b1e356d5c8f71c5e6c86599047f7d3356eddd34eb808ba4f24c"]}]}) 4m8.662299622s ago: executing program 3 (id=6974): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0xed, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x0, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x5ab2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x21, 0x3, 0x8000, 0xfffffffd, 0x3, 0xfffffffe, 0xf9dc, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xe, 0x2, 0xfffffffe, 0x981, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x6, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x1000, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xd1c, 0x7, 0x1f, 0x404, 0x4, 0x6, 0xc, 0x7, 0x9, 0xe8b, 0x6, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0x1ea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413fd, 0x2, 0x20006, 0x8a5, 0x86, 0x1, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffefff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7f]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 4m8.278304886s ago: executing program 35 (id=6974): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0xed, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x0, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x5ab2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x21, 0x3, 0x8000, 0xfffffffd, 0x3, 0xfffffffe, 0xf9dc, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xe, 0x2, 0xfffffffe, 0x981, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x6, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x1000, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xd1c, 0x7, 0x1f, 0x404, 0x4, 0x6, 0xc, 0x7, 0x9, 0xe8b, 0x6, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0x1ea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413fd, 0x2, 0x20006, 0x8a5, 0x86, 0x1, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffefff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7f]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) 2m30.401621932s ago: executing program 7 (id=7568): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0x40046f41, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)={0x11, 0x7, 0x1, {{0x4, '@#:\xcc'}, 0x9}}, 0x11) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000695775d3cc00000000000f38bc347ea91de7c2623ab66983ad031a7bff92ead7c90b7bbedf5ca4cb498bf0444d6e458b04d86fa6fa0e6d4a28e1087056a4e549034d9c6a3130821ab3c92562c4b6868bb6e6f0385de835d38809633e94ece199dce1e8ac72448b76a618dbd86c72a0b9dc6f8190a8f0ffe4c6a93230ec3d500cd7a3b996416", @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000000800028004000380"], 0x34}}, 0x200c050) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2, @private=0xa010102}}}], 0x20}, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0fac93d711647e299f4e376fd", 0xf}, {&(0x7f00000000c0)="7c16c898a4c057d366d7bcc343e9f644b1cb8abfa04d0a3d7e1c9b05f5bbb3247c", 0x21}], 0x3, 0x0, 0x0, 0x4}], 0x1, 0x14851) 2m30.37618056s ago: executing program 7 (id=7569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m30.329179067s ago: executing program 7 (id=7570): socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474", 0x7d}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x49) 2m29.496331148s ago: executing program 7 (id=7574): r0 = socket$alg(0x26, 0x5, 0x0) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000005edfb45d41392e6820", @ANYRES16=0x0, @ANYBLOB="0001ffffffff000000000600000008000300", @ANYRES32=r2, @ANYBLOB="1c00e700982e8c064971fa39743a1ace3f26403399e15fc05ee7490d"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f00000001c0)='stack\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000a90000/0x2000)=nil, 0x800000}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r6, &(0x7f0000001f40)=[{&(0x7f0000001a00)="0aec58", 0x3}, {0x0, 0xfffffe5b}], 0x2) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) readv(r7, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0xffffff43}, {&(0x7f0000000540)=""/117, 0x75}], 0x2) 2m29.297977007s ago: executing program 7 (id=7575): r0 = socket$can_raw(0x1d, 0x3, 0x1) setreuid(0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x400e815}}], 0x2, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x0) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000b00)) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000380), 0x0, 0x9, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x41f8, 0x4, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000001c0)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000340), &(0x7f00000003c0)=0x4) sendto$packet(r6, &(0x7f0000000180)="0b03feff42000212020047880226000088ca1a00000000000000", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r7}, 0x10) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x800, 0x140, 0x0, 0x4df, 0x8, 0x0, {0x8, 0x40}, {0x0, 0x20000004}, {0x800000, 0x80000000}, {0x3, 0x0, 0x3}, 0x0, 0x100, 0x0, 0x1000, 0x1, 0xfffffffd, 0x0, 0xfffffc00, 0x0, 0x3fd, 0x0, 0x0, 0x30, 0x0, 0x2, 0x5}) r9 = socket$netlink(0x10, 0x3, 0x4) r10 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x280) ioctl$NBD_SET_BLKSIZE(r10, 0xab01, 0x4) write(r8, &(0x7f0000000240)="29000000150005b7ff000051917c1692fddd5f7aeb01010003a606a42e07fff024bb280815c483fe7ec9010000000876eaa435000000000000000040000000", 0xfffffffffffffe01) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) 2m27.761939589s ago: executing program 7 (id=7579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x7, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000180)="e87402720892e3e63fa8764354bcad90c979a9ab77c8f186ab2b81b31f8db7f085681ab1877ec2ef0e1c1e9c32cb2fbd7cd54d5a6da3bae27a974221ffb954aca969a698949e69d64348295ea97eccaa5e83fdd4bbb1bedc594d097f8fb018c9", 0x60}, {&(0x7f0000000700)="ef3977c0585e6989e498deca6dcbb1d05921c2f84a60a92927972b5576ede8646cfe1cc61e0ebc934e9bb2ab3acf5685269f0cbffc535d4af2c41e", 0x3b}, {&(0x7f0000000840)="939aeaef59a774373ca1deafd713507864ecee17abe72c65139c7e16f5b112d04ed2bcd3f59a294d30c5ddedd0b7d224080235d8c6bfcb542a16bf1e99c94fd5c1b82f900bb4ecf894cb4d394b699629f952afdcb1163eae21fe2c5ecf80ed94ef16922ef44c25f1b2345f44c18be584b04770dac660eceae3cae2846918d1861e5afe15f2988c86c237633c30fa8188f340b4b32e6233cf407f2012670ef7d7cfad22de4ed75254098203a3488bdfda9a4978b071910b3a1f7d99727b5d61461dad6d95f742e6a9cc84116416b9", 0xce}, {&(0x7f0000000080)="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", 0xff}, {&(0x7f0000000a00)="c15201ce48174582a6e74500940b786edd674ba0efddd23bf0c57244c50a2b3b748a2142813808288e2ef136d6c94558bf43af94e6e1bb3993b1f946f8053970a413f224283a8392e5", 0x49}, {&(0x7f0000000a80)="91081551cc85c81e1d7605d6b7e9a2ad97e1e96558810a6bc9b527132dfd1033f78bdea2a0d8264d39131c1b9fb6fa3a668273eb991b17fee4fb5b604fc093782620753c7a366ccfd8c9a29e", 0x4c}, {&(0x7f0000002240)="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", 0xb93}], 0x7, 0x0, 0x0, 0x20040854}], 0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x200, 0x1}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2}, 0x10000) 2m11.295813591s ago: executing program 36 (id=7579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x7, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000180)="e87402720892e3e63fa8764354bcad90c979a9ab77c8f186ab2b81b31f8db7f085681ab1877ec2ef0e1c1e9c32cb2fbd7cd54d5a6da3bae27a974221ffb954aca969a698949e69d64348295ea97eccaa5e83fdd4bbb1bedc594d097f8fb018c9", 0x60}, {&(0x7f0000000700)="ef3977c0585e6989e498deca6dcbb1d05921c2f84a60a92927972b5576ede8646cfe1cc61e0ebc934e9bb2ab3acf5685269f0cbffc535d4af2c41e", 0x3b}, {&(0x7f0000000840)="939aeaef59a774373ca1deafd713507864ecee17abe72c65139c7e16f5b112d04ed2bcd3f59a294d30c5ddedd0b7d224080235d8c6bfcb542a16bf1e99c94fd5c1b82f900bb4ecf894cb4d394b699629f952afdcb1163eae21fe2c5ecf80ed94ef16922ef44c25f1b2345f44c18be584b04770dac660eceae3cae2846918d1861e5afe15f2988c86c237633c30fa8188f340b4b32e6233cf407f2012670ef7d7cfad22de4ed75254098203a3488bdfda9a4978b071910b3a1f7d99727b5d61461dad6d95f742e6a9cc84116416b9", 0xce}, {&(0x7f0000000080)="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", 0xff}, {&(0x7f0000000a00)="c15201ce48174582a6e74500940b786edd674ba0efddd23bf0c57244c50a2b3b748a2142813808288e2ef136d6c94558bf43af94e6e1bb3993b1f946f8053970a413f224283a8392e5", 0x49}, {&(0x7f0000000a80)="91081551cc85c81e1d7605d6b7e9a2ad97e1e96558810a6bc9b527132dfd1033f78bdea2a0d8264d39131c1b9fb6fa3a668273eb991b17fee4fb5b604fc093782620753c7a366ccfd8c9a29e", 0x4c}, {&(0x7f0000002240)="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", 0xb93}], 0x7, 0x0, 0x0, 0x20040854}], 0x1, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x200, 0x1}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2}, 0x10000) 10.208929298s ago: executing program 6 (id=8293): syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000203512180301090212000101e55151ccbf7e65bfaf544206b1275321086008090400000001030003"], &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0}) 6.934099408s ago: executing program 6 (id=8322): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 6.8066196s ago: executing program 6 (id=8323): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x2, {0xfffffffe, 0x80000002, 0x358ed174, 0xffffffff, 0xd7, 0x3}}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, r4}) r5 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mprotect(&(0x7f0000297000/0x4000)=nil, 0x4000, 0x300000a) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, &(0x7f00000000c0)) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='erspan0\x00'}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(r5, r2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000180)="e2c722", 0x3}], 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)={0x50, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10050}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r11, &(0x7f0000000000), 0xffffff98) splice(r8, 0x0, r11, 0x0, 0x80000000, 0x3) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r12 = signalfd(r5, &(0x7f0000000180)={[0x3]}, 0x8) write$char_usb(r12, &(0x7f0000000080)="415530611f892c295a89", 0xa) 4.85359421s ago: executing program 8 (id=8343): r0 = socket$inet(0x2b, 0x801, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905"], 0x0) write$cgroup_pid(r3, &(0x7f0000000480)=r1, 0x12) listen(r0, 0x9) accept$inet(r0, 0x0, 0x0) 4.510051732s ago: executing program 0 (id=8348): socket$inet6(0xa, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6d4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) timer_create(0x3, &(0x7f0000000240)={0x0, 0x39, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0xa9f5, 0x85}) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010600000000000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) write(r0, &(0x7f00000001c0), 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, r6, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x11, 0x24, [{0xb}, {0x36, 0x1}, {0x12, 0x1}, {0x2, 0x1}, {0x12}, {0x18}, {0xc}, {0x16}, {0x1, 0x1}, {0x1b}, {0x4}, {0x2}, {0x36}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x9c, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0xa, 0x4, "00f872b0b443"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "596322d7a1d11fd2c0dd15de07"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b73da051b0"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x0, 0x4, 0x0, {0x5368, 0x5, 0x0, 0x1d2, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x4, 0x9}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080a0) 3.415652218s ago: executing program 6 (id=8361): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000480)={0x24, r2, 0x1, 0x80002, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20028057}, 0x400c804) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001600010a00"], 0x14}}, 0x0) 3.306397899s ago: executing program 0 (id=8362): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/262, 0x106}], 0x1}, 0x10100) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC], 0x238}}, 0x8001) socket$alg(0x26, 0x5, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) 3.2814564s ago: executing program 6 (id=8364): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'bridge_slave_1\x00', @ifru_addrs=@ax25={0x3, @bcast, 0x1}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) r1 = syz_open_dev$dri(0x0, 0xffff, 0x300) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r2, 0x409, 0x5) pwrite64(r2, &(0x7f0000000000)="93c7", 0x2, 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, 0x0, 0x0, 0x6, 0xfffffffffffffffc}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000380)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000140)={0x2, 0xc, 0x40000102, 0x0, 0x4}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb004}, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r6, &(0x7f0000000080)="1c0000001a007f0214f9f40700090408030000000000000000020000", 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0c03", 0x2, 0x40400c4, &(0x7f0000000340)={0x11, 0x4, r8, 0x1, 0x8, 0x6, @link_local}, 0x14) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000500)) r9 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000134000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f00000004c0)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0xfffffffffffffff9}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x76, 0x40, 0xe, 0x7}}, @wrmsr={0x65, 0x20, {0xa65, 0x6}}, @out_dx={0x6a, 0x28, {0x7ce3, 0x2, 0x3}}, @nested_load_syzos={0x136, 0x108, {0x1, 0x1, [@rdmsr={0x66, 0x18, {0x91b}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x9}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x8, 0x1}}, @uexit={0x0, 0x18, 0xffffffffffffff01}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_load_syzos={0x136, 0x20, {0x3, 0xe}}, @in_dx={0x69, 0x20, {0xde90, 0x3}}]}}, @nested_vmresume={0x130, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x3a}}, @nested_load_code={0x12e, 0x5e, {0x2, "416690c422b59a40acf3410f5a3b660f3880a65d030000c18db71a00000365420f01c536d858a2c4a131f80366baf80cb87a231f88ef66bafc0c66edc4e191d09c832d000000"}}, @nested_load_syzos={0x136, 0x50, {0x3, 0x5, [@nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0x6665}}]}}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x2e, 0x3}}, @nested_load_syzos={0x136, 0xd7, {0x2, 0x2cf, [@nested_create_vm={0x12d, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x7222, 0x4, 0xa44a}}, @code={0xa, 0x5f, {"c46275903c7c66baf80cb850161888ef66bafc0ced66baf80cb8ec7fa589ef66bafc0c66edc46209b60ef30fc7b7b45f7f6366b833008ee0c40258f3510e66ba2000ec66b8e2008ee067440f01c4"}}, @nested_amd_vmsave={0x183, 0x18}]}}], 0x38d}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) 3.077905435s ago: executing program 0 (id=8366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r4, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_int(r5, 0x1, 0x2f, 0x0, &(0x7f0000000240)) writev(r3, &(0x7f0000001380)=[{&(0x7f00000000c0)='d', 0x1}], 0x1) getpriority(0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x238, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x158, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xb0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x393e}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4222}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc22f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5a6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1f2}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x94}, 0x40048a4) 3.010847489s ago: executing program 8 (id=8367): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='geneve1\x00'}) 2.284592391s ago: executing program 8 (id=8372): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00004ba000/0x2000)=nil, &(0x7f0000f51000/0x2000)=nil, &(0x7f0000ef7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00001a7000/0x1000)=nil, &(0x7f0000ef5000/0x9000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000f4f000/0x4000)=nil, 0x0}, 0x68) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffc, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xa, 0x6c}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) io_setup(0x240000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20001, 0x9) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) 1.891993212s ago: executing program 4 (id=8375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x6a6, 0xec000000, 0x4}]}) (fail_nth: 4) 1.80259358s ago: executing program 0 (id=8376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xd3cb, 0x800) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000300)=@generic={0xf, "57f3680179a17f1507176d0d055e002ba4c87a837c31471cecddcce84f31eed66c5ddf7232b72ba72ca13dab270b4d46076a6265a7965d1108eff71760c467170b2119f4301ccf26b13e18e9bff10af9deb495adb591a35b710ec092794f146a9c1ccff1532b2362b7d05e97f73b453000e07be198c22cafb7ea4b2aebee"}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)="83bf637346a87360a7f57c7bfdca71a39e16c5d0ab0e63c3cf5c39f2bb7f11cf7c842fc7378a91781cdac46e31783955eccf8e3925090e70690806361867f046ad64564c28", 0x45}, {&(0x7f0000000440)="abcae2e72a6848263610437f7971a1482d24b6f5d72036087db1a3f7f6ecb66a32e7a407172e5c055ea02b6e31e6870b5fa491388bfaa33c213d1508641e1650f07335cf0cf67470e5c42607f56c4d842d346b4fb62dacdbd6ebf16ddbf921c919813ec35b8c77983e0500277d1fac334530fc0f5deb93eb83fde7c62f1b465ee8213451924644af5d450a553bea15692b8e191e32fabcc7995556267438d975201d3745678a94caa098de2f0d5bad0f9b89a3991c533a69dfac03c3f4a6f6d2bbc6ddb12d074e151d7b56e4bc89d6a6c0753be8b384f88ce11839b736f4c3a8603a9e9531d67a578cb53dea1765a3b82118af1dd7dfabc5", 0xf8}, {&(0x7f0000000540)="f360c243d07aff6e40e51e80c917340c893ad3160f802d9787cd2b4841660376c4fb48583bdfce440e96217244483bc2f8ea29dc0e4395877e55a9ab01e223977a32988af40c264df813547627fcac8c87b234c9096ab065a71b97f73cbf795d7c3aaad14dceb670b1a885c58fad25574a3ce9eeabfa3779b44c11eec7c507baf56e9e98986e7e4d11df6b403b07acc2bcd56712e189a6089ba886af", 0x9c}], 0x3}, 0x4) socket(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={'bond_slave_0\x00', {0x2, 0x4e21, @local}}) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r5, 0x0) listen(r6, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r7, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000680)={'pcl812\x00', [0x100, 0x1f, 0xcd, 0x2, 0x1, 0x100, 0x3, 0xfffffffa, 0x8, 0xb, 0x2, 0xb51, 0xffffffff, 0x401, 0x3, 0xf, 0x0, 0x3, 0xfe9, 0x401, 0x4, 0x2, 0x7, 0x9, 0x40048, 0x9, 0x2, 0x9, 0x8, 0x8, 0xa]}) writev(r2, &(0x7f00000013c0)=[{&(0x7f00000002c0)="3c2f81f21e34f4b1fa17076c9ad4846923", 0x11}], 0x1) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000040)="0b0322", 0x3, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) epoll_create(0x7fffffff) 1.465198678s ago: executing program 4 (id=8377): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r2, 0xa}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x2}, 0x8) 1.42280955s ago: executing program 4 (id=8378): personality(0x5400004) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYBLOB="545e9ad663766052c8ef666096d7e6a26abb7a668ff56706284a501369a55a94f3a454ce5dcd63de719d0066d872a5633e920821cfb5000000", @ANYRES16]) 1.3700124s ago: executing program 4 (id=8379): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002380)={'hsr0\x00'}) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x9, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000001640)={0x1, 0x10, 0xfa00, {&(0x7f0000001600), r3}}, 0x18) 1.367005699s ago: executing program 0 (id=8380): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f00000002c0)='geneve1\x00'}) 1.240258147s ago: executing program 4 (id=8381): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x20002, 0x0) mmap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xca267000) timer_create(0x7, &(0x7f0000000240)={0x0, 0x7, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="09000000010001", 0x7) r3 = socket(0x40000000015, 0x805, 0xfffffffc) getsockopt(r3, 0x114, 0x5, 0x0, &(0x7f0000000040)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @private}, &(0x7f00000002c0)=0xc) recvfrom$packet(r3, &(0x7f0000000940)=""/133, 0x85, 0x10000, &(0x7f00000003c0)={0x11, 0x18, r4, 0x1, 0xaa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x205, 0x101, 0x200}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, r5, 0x156e3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x12) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa050e0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b60008", @ANYRES64, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES16=r5, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff0100000000000000020000000000000001000000000000008000010000000000800acf2d01000000040000000000000053020000000000000a000000000000000100000000000000000000002000000001000000000000000600000006000000050000000020000008000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="ff01000006000000000000000300000000000000000000000000000002000000060000002e26000000000000"], 0x0, 0x0, 0x0}) getdents64(r9, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)="930ca33da43e2102d350c0a9815febb9cb7e172599d12b74385b7ef98b4811cdc144ca79260880ce114e703dcbebf53b3f36fed45cab0199e2ab", 0x3a}], 0x1, 0x7) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.239882331s ago: executing program 6 (id=8382): socket$xdp(0x2c, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) pivot_root(0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4", 0x1b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000800)=""/154, 0x9a}], 0x1}}], 0x1, 0x40002021, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r7, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002000)=0x0) sendmsg$nfc_llcp(r2, &(0x7f0000002540)={&(0x7f00000021c0)={0x27, r8, 0x0, 0x7, 0x4, 0x4, "c5b453a9a9d15fbf000d8ed73b2f62cdfeb2206988f54bdedbde997528dc72433781418a9b6a77927c605ea8e0c4ecd98f4debdfa6adda552bfb3a0e9af088", 0xf}, 0x60, &(0x7f0000002400)=[{&(0x7f0000002240)="20de6a61f273529aa9d76f7c1400688058f8c0b4a51d490720f42bff3606fa9bfc84cc3dbdf4ac609af37f9e5d6afc64cd243eee645e24ea4a8395b44edaefeb9b81dee2b86307d96ccf04", 0x4b}, {&(0x7f0000002340)="b5b5dccbfcda7e65c9eaca456f867fb4325ddf8303f6f0a8e7d3044ce75c6d46c0ffade6a8af289a1e7ff9ab86fc60d05083d372f46d720f09688f52583fa775812d58890339568a773abb47bb41371954fa2feb47e8d4750676f65f408570ca43ebf239661a6835ddff29ab0e78af1eaef0228fc262d153a2f55412ced113aa374e95348fec67c433f9d72ffc95683be17901395197a820e1278637fd7b4ba4c301c39661b9c8b91ac94096a7e8d9", 0xaf}], 0x2, &(0x7f0000002440)={0xd8, 0x6, 0x7, "cf36756163d781c297c08954695fdd3d80bf1e636bdb97e637418bdc1aa66b97e639cc0936911e9747b392ae1e2dd6588212216ee7c96c25004fe3001d8bf1c4a84e1c8aa28fb6c45f20c9278c4205e2ade0a16a1a40d7e4ee6d9ad8e7a5881407b3b27a534fa5f238d3d5a2329e0f74bda5fdba904ecffb5494464c213e90e824c7363d52bf52bd4864ea95f5e076ead85b12a7f536baa3031fd39fb6e035676f6de5297acae198b6058356be553e3fd05722f9470529d089a5aad4e9c93d78f1"}, 0xd8, 0xb62dfbee6890c593}, 0x20000000) ioctl$TUNSETGROUP(r0, 0x400454ce, r7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x2d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYRESHEX=r9, @ANYRES8=r3, @ANYRES16=r4], 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x218483, 0x0) 1.23694858s ago: executing program 4 (id=8383): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) (fail_nth: 8) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 1.109552691s ago: executing program 0 (id=8384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0xff0f, 0x0, @msi={0x0, 0x31, 0xfffffffc, 0x7}}]}) 185.609785ms ago: executing program 8 (id=8385): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) r1 = syz_clone(0x62021080, &(0x7f0000000200)="764690e5d554e24fce06658d7e6f92ceb2a7ce4302f49a507f2da6808bc3d0e5868a5f", 0x23, &(0x7f0000000180), &(0x7f0000000240), &(0x7f00000000c0)="b08f14d7cc7a") mq_notify(r0, &(0x7f0000000280)={0x0, 0x2c, 0x4, @tid=r1}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000004c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x2042, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x8, &(0x7f00000001c0)={0x77359400}) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000000)={0x3, 0x0, 0x2016, 0x2, 0xf, {0x1, 0xee4}, 0x1}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 67.740985ms ago: executing program 8 (id=8386): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r2, 0xa}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x2}, 0x8) 0s ago: executing program 8 (id=8387): personality(0x5400004) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYBLOB="545e9ad663766052c8ef666096d7e6a26abb7a668ff56706284a501369a55a94f3a454ce5dcd63de719d0066d872a5633e920821cfb5000000", @ANYRES16]) kernel console output (not intermixed with test programs): otal pagecache pages [ 1459.075242][T29650] 0 pages in swap cache [ 1459.075250][T29650] Free swap = 124996kB [ 1459.075258][T29650] Total swap = 124996kB [ 1459.075267][T29650] 2097051 pages RAM [ 1459.075275][T29650] 0 pages HighMem/MovableOnly [ 1459.075283][T29650] 427025 pages reserved [ 1459.075290][T29650] 0 pages cma reserved [ 1459.349937][ T1241] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1459.423395][T29662] FAULT_INJECTION: forcing a failure. [ 1459.423395][T29662] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.423444][T29662] CPU: 1 UID: 0 PID: 29662 Comm: syz.4.7888 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1459.423472][T29662] Tainted: [L]=SOFTLOCKUP [ 1459.423480][T29662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1459.423492][T29662] Call Trace: [ 1459.423501][T29662] [ 1459.423510][T29662] dump_stack_lvl+0xe8/0x150 [ 1459.423539][T29662] should_fail_ex+0x46b/0x600 [ 1459.423567][T29662] should_failslab+0xa8/0x100 [ 1459.423598][T29662] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1459.423626][T29662] ? __alloc_skb+0x1d0/0x7d0 [ 1459.423650][T29662] ? lockdep_hardirqs_on+0x7a/0x110 [ 1459.423685][T29662] __alloc_skb+0x1d0/0x7d0 [ 1459.423722][T29662] netlink_sendmsg+0x5d4/0xb40 [ 1459.423759][T29662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.423787][T29662] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1459.423824][T29662] ? aa_sock_msg_perm+0x122/0x200 [ 1459.423853][T29662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1459.423879][T29662] sock_sendmsg_nosec+0x112/0x150 [ 1459.423906][T29662] ____sys_sendmsg+0x55c/0x870 [ 1459.423940][T29662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1459.423976][T29662] ? import_iovec+0x73/0xa0 [ 1459.424009][T29662] ___sys_sendmsg+0x2a5/0x360 [ 1459.424037][T29662] ? __lock_acquire+0x6b5/0x2d10 [ 1459.424061][T29662] ? __pfx____sys_sendmsg+0x10/0x10 [ 1459.424123][T29662] ? __fget_files+0x2a/0x420 [ 1459.424145][T29662] ? __fget_files+0x3a6/0x420 [ 1459.424194][T29662] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1459.424225][T29662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1459.424262][T29662] ? __pfx_ksys_write+0x10/0x10 [ 1459.424298][T29662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.424320][T29662] do_syscall_64+0x15f/0xf80 [ 1459.424338][T29662] ? trace_irq_disable+0x3b/0x140 [ 1459.424366][T29662] ? clear_bhb_loop+0x40/0x90 [ 1459.424391][T29662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.424411][T29662] RIP: 0033:0x7f1fff33ce59 [ 1459.424430][T29662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.424449][T29662] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1459.424471][T29662] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1459.424486][T29662] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1459.424499][T29662] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1459.424512][T29662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.424524][T29662] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1459.424555][T29662] [ 1459.563296][ T1241] usb 9-1: Using ep0 maxpacket: 32 [ 1459.615609][T29666] random: crng reseeded on system resumption [ 1459.729206][ T1241] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1459.769554][ T1241] usb 9-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 1459.808390][ T1241] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1459.808424][ T1241] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.808446][ T1241] usb 9-1: Product: syz [ 1459.808462][ T1241] usb 9-1: Manufacturer: syz [ 1459.808478][ T1241] usb 9-1: SerialNumber: syz [ 1460.011326][T29682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7896'. [ 1461.034867][ T1241] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1461.034925][ T1241] usb 9-1: MIDIStreaming interface descriptor not found [ 1461.160054][T29309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.183116][ T1241] usb 9-1: USB disconnect, device number 15 [ 1461.367476][T29023] udevd[29023]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.382437][T29715] FAULT_INJECTION: forcing a failure. [ 1461.382437][T29715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.382475][T29715] CPU: 1 UID: 0 PID: 29715 Comm: syz.6.7905 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1461.382502][T29715] Tainted: [L]=SOFTLOCKUP [ 1461.382510][T29715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1461.382522][T29715] Call Trace: [ 1461.382530][T29715] [ 1461.382538][T29715] dump_stack_lvl+0xe8/0x150 [ 1461.382575][T29715] should_fail_ex+0x46b/0x600 [ 1461.382606][T29715] _copy_to_user+0x31/0xb0 [ 1461.382638][T29715] simple_read_from_buffer+0xe1/0x170 [ 1461.382667][T29715] proc_fail_nth_read+0x1be/0x230 [ 1461.382696][T29715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1461.382725][T29715] ? rw_verify_area+0x2ac/0x4e0 [ 1461.382751][T29715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1461.382777][T29715] vfs_read+0x212/0xa80 [ 1461.382812][T29715] ? __pfx_vfs_read+0x10/0x10 [ 1461.382840][T29715] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1461.382881][T29715] ? lockdep_hardirqs_on+0x7a/0x110 [ 1461.382913][T29715] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1461.382943][T29715] ? mutex_lock_nested+0x152/0x1d0 [ 1461.382966][T29715] ? fdget_pos+0x252/0x320 [ 1461.382998][T29715] ksys_read+0x156/0x270 [ 1461.383026][T29715] ? __pfx_ksys_read+0x10/0x10 [ 1461.383052][T29715] ? __pfx_media_ioctl+0x10/0x10 [ 1461.383080][T29715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.383103][T29715] do_syscall_64+0x15f/0xf80 [ 1461.383122][T29715] ? trace_irq_disable+0x3b/0x140 [ 1461.383151][T29715] ? clear_bhb_loop+0x40/0x90 [ 1461.383174][T29715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.383195][T29715] RIP: 0033:0x7f8baa05d68e [ 1461.383214][T29715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1461.383232][T29715] RSP: 002b:00007f8ba82edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1461.383254][T29715] RAX: ffffffffffffffda RBX: 00007f8ba82ee6c0 RCX: 00007f8baa05d68e [ 1461.383269][T29715] RDX: 000000000000000f RSI: 00007f8ba82ee0a0 RDI: 0000000000000005 [ 1461.383283][T29715] RBP: 00007f8ba82ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.383296][T29715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.383309][T29715] R13: 00007f8baa316038 R14: 00007f8baa315fa0 R15: 00007ffd55c8c6e8 [ 1461.383340][T29715] [ 1461.557527][ T5614] Bluetooth: hci5: Malformed LE Event: 0x0b [ 1461.715565][T29309] veth0_vlan: entered promiscuous mode [ 1461.761708][T29309] veth1_vlan: entered promiscuous mode [ 1461.956226][T29309] veth0_macvtap: entered promiscuous mode [ 1461.973638][T29309] veth1_macvtap: entered promiscuous mode [ 1462.046391][T29309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.071121][T29309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1462.101315][T18726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.101981][T18726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.103983][T18726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.105217][T18726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.160813][ T8203] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1462.191638][T29734] new mount options do not match the existing superblock, will be ignored [ 1462.202180][T29735] new mount options do not match the existing superblock, will be ignored [ 1462.246291][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1462.392931][ T8203] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1462.419875][ T8203] usb 7-1: config 114 has an invalid interface number: 240 but max is 0 [ 1462.419906][ T8203] usb 7-1: config 114 has no interface number 0 [ 1462.419948][ T8203] usb 7-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1462.419973][ T8203] usb 7-1: config 114 interface 240 has no altsetting 0 [ 1462.515627][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1462.521645][ T8203] usb 7-1: string descriptor 0 read error: -22 [ 1462.539668][ T8203] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1462.539783][ T8203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.543189][T29735] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1462.680231][T29724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1462.704695][ T8203] ir_usb 7-1:114.240: required endpoints missing [ 1462.707326][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1462.707357][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.707379][ T9] usb 9-1: Product: syz [ 1462.707395][ T9] usb 9-1: Manufacturer: syz [ 1462.707410][ T9] usb 9-1: SerialNumber: syz [ 1462.784751][ T9] usb 9-1: config 0 descriptor?? [ 1462.818003][ T9] radio-usb-si4713 9-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1463.588252][ T9] radio-usb-si4713 9-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1463.588797][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1463.646698][ T9] usb 9-1: USB disconnect, device number 16 [ 1463.987370][T18726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1463.987390][T18726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.213077][ T821] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1464.213415][T23959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.213432][T23959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.406617][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1464.427845][ T821] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.427874][ T821] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 1464.465955][ T821] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 1464.465988][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.466009][ T821] usb 5-1: Product: syz [ 1464.466025][ T821] usb 5-1: Manufacturer: syz [ 1464.466041][ T821] usb 5-1: SerialNumber: syz [ 1464.641896][T29751] 9p: Could not find request transport: tcpport=0x000000000004eA3 [ 1464.791188][ T821] usb 5-1: USB disconnect, device number 41 [ 1464.798285][T29757] [U]  [ 1464.912293][T29760] FAULT_INJECTION: forcing a failure. [ 1464.912293][T29760] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.912323][T29760] CPU: 1 UID: 0 PID: 29760 Comm: syz.8.7921 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1464.912341][T29760] Tainted: [L]=SOFTLOCKUP [ 1464.912346][T29760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1464.912353][T29760] Call Trace: [ 1464.912358][T29760] [ 1464.912364][T29760] dump_stack_lvl+0xe8/0x150 [ 1464.912382][T29760] should_fail_ex+0x46b/0x600 [ 1464.912400][T29760] should_failslab+0xa8/0x100 [ 1464.912419][T29760] __kmalloc_noprof+0xdf/0x7b0 [ 1464.912436][T29760] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1464.912452][T29760] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1464.912470][T29760] genl_family_rcv_msg_doit+0xd9/0x330 [ 1464.912483][T29760] ? __asan_memcpy+0x40/0x70 [ 1464.912499][T29760] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1464.912514][T29760] ? __pfx_genl_get_cmd+0x10/0x10 [ 1464.912525][T29760] ? __pfx_tipc_nl_node_get_link+0x10/0x10 [ 1464.912539][T29760] ? __pfx_tipc_nl_node_dump_link+0x10/0x10 [ 1464.912554][T29760] ? lockdep_hardirqs_on+0x7a/0x110 [ 1464.912572][T29760] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1464.912596][T29760] genl_rcv_msg+0x61c/0x7a0 [ 1464.912612][T29760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1464.912624][T29760] ? ref_tracker_free+0x673/0x820 [ 1464.912639][T29760] ? __pfx_tipc_nl_node_get_link+0x10/0x10 [ 1464.912653][T29760] ? ____sys_sendmsg+0x55c/0x870 [ 1464.912669][T29760] ? ___sys_sendmsg+0x2a5/0x360 [ 1464.912685][T29760] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 1464.912700][T29760] ? do_syscall_64+0x15f/0xf80 [ 1464.912711][T29760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.912728][T29760] netlink_rcv_skb+0x232/0x4b0 [ 1464.912747][T29760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1464.912761][T29760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1464.912783][T29760] ? netlink_deliver_tap+0x2e/0x1b0 [ 1464.912799][T29760] ? netlink_deliver_tap+0x2e/0x1b0 [ 1464.912817][T29760] genl_rcv+0x28/0x40 [ 1464.912828][T29760] netlink_unicast+0x780/0x920 [ 1464.912848][T29760] netlink_sendmsg+0x813/0xb40 [ 1464.912869][T29760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.912886][T29760] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1464.912908][T29760] ? aa_sock_msg_perm+0x122/0x200 [ 1464.912926][T29760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.912942][T29760] sock_sendmsg_nosec+0x112/0x150 [ 1464.912957][T29760] ____sys_sendmsg+0x55c/0x870 [ 1464.912976][T29760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1464.912998][T29760] ? import_iovec+0x73/0xa0 [ 1464.913017][T29760] ___sys_sendmsg+0x2a5/0x360 [ 1464.913034][T29760] ? __lock_acquire+0x6b5/0x2d10 [ 1464.913048][T29760] ? __pfx____sys_sendmsg+0x10/0x10 [ 1464.913082][T29760] ? __fget_files+0x2a/0x420 [ 1464.913096][T29760] ? __fget_files+0x3a6/0x420 [ 1464.913115][T29760] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1464.913133][T29760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1464.913155][T29760] ? __pfx_ksys_write+0x10/0x10 [ 1464.913176][T29760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.913188][T29760] do_syscall_64+0x15f/0xf80 [ 1464.913200][T29760] ? trace_irq_disable+0x3b/0x140 [ 1464.913216][T29760] ? clear_bhb_loop+0x40/0x90 [ 1464.913231][T29760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.913248][T29760] RIP: 0033:0x7fbe9f1ace59 [ 1464.913261][T29760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.913271][T29760] RSP: 002b:00007fbe9d406028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.913285][T29760] RAX: ffffffffffffffda RBX: 00007fbe9f425fa0 RCX: 00007fbe9f1ace59 [ 1464.913294][T29760] RDX: 0000000000044080 RSI: 0000200000000340 RDI: 0000000000000003 [ 1464.913303][T29760] RBP: 00007fbe9d406090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.913311][T29760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.913319][T29760] R13: 00007fbe9f426038 R14: 00007fbe9f425fa0 R15: 00007ffe02b403d8 [ 1464.913337][T29760] [ 1465.176045][ T5717] usb 7-1: USB disconnect, device number 124 [ 1465.849454][T29783] [U]  [ 1466.506844][T29800] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1466.506873][T29800] overlayfs: failed to set xattr on upper [ 1466.506882][T29800] overlayfs: ...falling back to redirect_dir=nofollow. [ 1466.506891][T29800] overlayfs: ...falling back to index=off. [ 1466.506898][T29800] overlayfs: ...falling back to uuid=null. [ 1466.506908][T29800] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1466.876740][T29796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1466.876879][T29796] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1467.227940][T29796] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1467.228030][T29796] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1467.365719][T29796] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1467.365822][T29796] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1467.509747][T29796] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1467.583983][T29796] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1467.584079][T29796] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1467.611855][T29829] netlink: 277 bytes leftover after parsing attributes in process `syz.4.7948'. [ 1467.611950][T29829] FAULT_INJECTION: forcing a failure. [ 1467.611950][T29829] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.611969][T29829] CPU: 1 UID: 0 PID: 29829 Comm: syz.4.7948 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1467.611986][T29829] Tainted: [L]=SOFTLOCKUP [ 1467.611990][T29829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1467.611998][T29829] Call Trace: [ 1467.612003][T29829] [ 1467.612008][T29829] dump_stack_lvl+0xe8/0x150 [ 1467.612025][T29829] should_fail_ex+0x46b/0x600 [ 1467.612043][T29829] should_failslab+0xa8/0x100 [ 1467.612065][T29829] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1467.612088][T29829] ? __alloc_skb+0x1d0/0x7d0 [ 1467.612110][T29829] ? lockdep_hardirqs_on+0x7a/0x110 [ 1467.612144][T29829] __alloc_skb+0x1d0/0x7d0 [ 1467.612173][T29829] xfrm_alloc_compat+0x1a6/0x16f0 [ 1467.612199][T29829] ? xfrm_get_translator+0x1b/0x240 [ 1467.612229][T29829] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1467.612252][T29829] xfrm_nlmsg_multicast+0xda/0x1f0 [ 1467.612282][T29829] xfrm_send_policy_notify+0xb54/0x1c10 [ 1467.612318][T29829] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1467.612345][T29829] ? km_policy_notify+0x28/0x200 [ 1467.612372][T29829] ? km_policy_notify+0x28/0x200 [ 1467.612406][T29829] ? __nla_validate_parse+0x258e/0x2dc0 [ 1467.612438][T29829] ? km_policy_notify+0x28/0x200 [ 1467.612464][T29829] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1467.612492][T29829] km_policy_notify+0x121/0x200 [ 1467.612518][T29829] ? km_policy_notify+0x28/0x200 [ 1467.612546][T29829] xfrm_get_policy+0x7ff/0xc20 [ 1467.612597][T29829] ? __pfx_xfrm_get_policy+0x10/0x10 [ 1467.612633][T29829] ? apparmor_capable+0x126/0x170 [ 1467.612661][T29829] ? __nla_parse+0x40/0x60 [ 1467.612693][T29829] xfrm_user_rcv_msg+0x7ae/0xc40 [ 1467.612728][T29829] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1467.612789][T29829] ? __lock_acquire+0x6b5/0x2d10 [ 1467.612815][T29829] ? netlink_deliver_tap+0x19c/0x1b0 [ 1467.612841][T29829] ? netlink_unicast+0x754/0x920 [ 1467.612862][T29829] ? netlink_sendmsg+0x813/0xb40 [ 1467.612888][T29829] ? sock_sendmsg_nosec+0x112/0x150 [ 1467.612908][T29829] ? ____sys_sendmsg+0x55c/0x870 [ 1467.612935][T29829] ? ___sys_sendmsg+0x2a5/0x360 [ 1467.612961][T29829] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 1467.612995][T29829] netlink_rcv_skb+0x232/0x4b0 [ 1467.613024][T29829] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1467.613055][T29829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1467.613093][T29829] ? lockdep_hardirqs_on+0x7a/0x110 [ 1467.613125][T29829] ? mutex_lock_nested+0x152/0x1d0 [ 1467.613150][T29829] ? xfrm_netlink_rcv+0x6a/0x90 [ 1467.613178][T29829] xfrm_netlink_rcv+0x79/0x90 [ 1467.613198][T29829] netlink_unicast+0x780/0x920 [ 1467.613218][T29829] netlink_sendmsg+0x813/0xb40 [ 1467.613239][T29829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.613257][T29829] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1467.613278][T29829] ? aa_sock_msg_perm+0x122/0x200 [ 1467.613296][T29829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.613312][T29829] sock_sendmsg_nosec+0x112/0x150 [ 1467.613327][T29829] ____sys_sendmsg+0x55c/0x870 [ 1467.613347][T29829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1467.613369][T29829] ? import_iovec+0x73/0xa0 [ 1467.613388][T29829] ___sys_sendmsg+0x2a5/0x360 [ 1467.613404][T29829] ? __lock_acquire+0x6b5/0x2d10 [ 1467.613419][T29829] ? __pfx____sys_sendmsg+0x10/0x10 [ 1467.613453][T29829] ? __fget_files+0x2a/0x420 [ 1467.613467][T29829] ? __fget_files+0x3a6/0x420 [ 1467.613485][T29829] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1467.613504][T29829] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1467.613526][T29829] ? __pfx_ksys_write+0x10/0x10 [ 1467.613547][T29829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.613561][T29829] do_syscall_64+0x15f/0xf80 [ 1467.613584][T29829] ? trace_irq_disable+0x3b/0x140 [ 1467.613604][T29829] ? clear_bhb_loop+0x40/0x90 [ 1467.613618][T29829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.613631][T29829] RIP: 0033:0x7f1fff33ce59 [ 1467.613644][T29829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.613655][T29829] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1467.613668][T29829] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1467.613678][T29829] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1467.613686][T29829] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.613694][T29829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.613702][T29829] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1467.613720][T29829] [ 1467.786607][T29796] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1468.499514][ T821] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1468.617852][T17581] Bluetooth: hci2: command 0x0406 tx timeout [ 1468.668491][ T821] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1468.707741][ T821] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.707769][ T821] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1468.707818][ T821] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1468.707858][ T821] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1468.707900][ T821] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1468.707928][ T821] usb 9-1: config 1 interface 1 has no altsetting 0 [ 1468.711586][ T821] usb 9-1: string descriptor 0 read error: -22 [ 1468.711724][ T821] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1468.711750][ T821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.844455][ T5717] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1469.015065][ T5717] usb 7-1: Using ep0 maxpacket: 16 [ 1469.030969][ T5717] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.031027][ T5717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1469.031121][ T5717] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1469.031145][ T5717] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1469.031170][ T5717] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1469.032433][ T5717] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1469.032461][ T5717] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1469.032538][ T5717] usb 7-1: Manufacturer: syz [ 1469.068346][ T5717] usb 7-1: config 0 descriptor?? [ 1469.386722][T17581] Bluetooth: hci4: command 0x0406 tx timeout [ 1469.558572][T17581] Bluetooth: hci5: command 0x0c1a tx timeout [ 1469.597608][ T5717] rc_core: IR keymap rc-hauppauge not found [ 1469.597629][ T5717] Registered IR keymap rc-empty [ 1469.597796][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.611234][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.633547][ T5717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1469.635511][ T5717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input89 [ 1469.731547][T17581] Bluetooth: hci1: command 0x0c1a tx timeout [ 1469.731795][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.756801][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.772034][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.792989][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.815814][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.835780][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.842274][ T821] usb 9-1: 2:0: failed to get current value for ch 1 (-71) [ 1469.858259][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.879120][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.903543][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1469.921320][ T5717] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1470.002371][ T5717] mceusb 7-1:0.0: Registered ꕹ괙㚆 with mce emulator interface version 1 [ 1470.002399][ T5717] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1470.441262][ T821] usb 9-1: USB disconnect, device number 17 [ 1470.851522][T17581] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.163928][ T8207] usb 7-1: USB disconnect, device number 125 [ 1471.602855][T29896] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7977'. [ 1471.611913][T17581] Bluetooth: hci4: command 0x0406 tx timeout [ 1471.705460][T29901] FAULT_INJECTION: forcing a failure. [ 1471.705460][T29901] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.705498][T29901] CPU: 1 UID: 0 PID: 29901 Comm: syz.4.7979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1471.705526][T29901] Tainted: [L]=SOFTLOCKUP [ 1471.705534][T29901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1471.705547][T29901] Call Trace: [ 1471.705555][T29901] [ 1471.705564][T29901] dump_stack_lvl+0xe8/0x150 [ 1471.705594][T29901] should_fail_ex+0x46b/0x600 [ 1471.705625][T29901] should_failslab+0xa8/0x100 [ 1471.705654][T29901] kmem_cache_alloc_noprof+0x87/0x680 [ 1471.705682][T29901] ? ptlock_alloc+0x20/0x70 [ 1471.705713][T29901] ptlock_alloc+0x20/0x70 [ 1471.705741][T29901] pte_alloc_one+0x7e/0x380 [ 1471.705771][T29901] do_pte_missing+0x126d/0x2940 [ 1471.705808][T29901] ? __pmd_alloc+0x41b/0x5e0 [ 1471.705839][T29901] handle_mm_fault+0xdb5/0x14c0 [ 1471.705875][T29901] ? handle_mm_fault+0xed/0x14c0 [ 1471.705907][T29901] ? __pfx_handle_mm_fault+0x10/0x10 [ 1471.705947][T29901] ? __lock_acquire+0x6b5/0x2d10 [ 1471.705973][T29901] ? lock_mm_and_find_vma+0xa7/0x340 [ 1471.706010][T29901] do_user_addr_fault+0x75b/0x1340 [ 1471.706048][T29901] exc_page_fault+0x6a/0xc0 [ 1471.706080][T29901] asm_exc_page_fault+0x26/0x30 [ 1471.706104][T29901] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 1471.706131][T29901] Code: c4 10 e9 d4 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 1471.706149][T29901] RSP: 0018:ffffc90005e27cb8 EFLAGS: 00050202 [ 1471.706169][T29901] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1471.706183][T29901] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffc90005e27d70 [ 1471.706198][T29901] RBP: ffffc90005e27e68 R08: 0000000000000003 R09: 0000000000000004 [ 1471.706211][T29901] R10: dffffc0000000000 R11: fffff52000bc4fae R12: 1ffff92000bc4fa4 [ 1471.706227][T29901] R13: 0000200000000180 R14: ffffc90005e27d70 R15: 0000200000000180 [ 1471.706259][T29901] _copy_from_user+0x7a/0xb0 [ 1471.706291][T29901] do_sock_getsockopt+0x200/0x7e0 [ 1471.706327][T29901] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1471.706372][T29901] ? __fget_files+0x3a6/0x420 [ 1471.706396][T29901] ? __fget_files+0x2a/0x420 [ 1471.706427][T29901] __x64_sys_getsockopt+0x1aa/0x250 [ 1471.706462][T29901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.706484][T29901] do_syscall_64+0x15f/0xf80 [ 1471.706503][T29901] ? trace_irq_disable+0x3b/0x140 [ 1471.706532][T29901] ? clear_bhb_loop+0x40/0x90 [ 1471.706557][T29901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.706578][T29901] RIP: 0033:0x7f1fff33ce59 [ 1471.706597][T29901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.706615][T29901] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1471.706635][T29901] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1471.706651][T29901] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 1471.706664][T29901] RBP: 00007f1ffd58e090 R08: 0000200000000180 R09: 0000000000000000 [ 1471.706679][T29901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.706692][T29901] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1471.706725][T29901] [ 1471.793244][T17581] Bluetooth: hci5: command 0x0c1a tx timeout [ 1471.953547][T17581] Bluetooth: hci1: command 0x0c1a tx timeout [ 1472.339567][T29917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7984'. [ 1472.363099][T29917] lo speed is unknown, defaulting to 1000 [ 1472.365598][T29917] lo speed is unknown, defaulting to 1000 [ 1472.367686][T29917] lo speed is unknown, defaulting to 1000 [ 1472.379927][ T821] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1472.463717][T29917] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1472.463759][T29917] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1472.463802][T29917] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1472.493309][T29917] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1472.736450][T29917] lo speed is unknown, defaulting to 1000 [ 1472.753477][T29917] lo speed is unknown, defaulting to 1000 [ 1472.771669][T29917] lo speed is unknown, defaulting to 1000 [ 1472.791833][T29917] lo speed is unknown, defaulting to 1000 [ 1472.805115][T29917] lo speed is unknown, defaulting to 1000 [ 1472.820555][T29917] lo speed is unknown, defaulting to 1000 [ 1472.945641][T29931] pim6reg: entered allmulticast mode [ 1474.015163][T17581] Bluetooth: hci5: command 0x0c1a tx timeout [ 1474.175489][T17581] Bluetooth: hci1: command 0x0c1a tx timeout [ 1474.280987][T29968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8008'. [ 1474.343157][T29971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.387609][T29971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.455203][ T8207] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1474.603631][ T5703] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1474.624343][ T8207] usb 7-1: Using ep0 maxpacket: 8 [ 1474.626265][ T8207] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1474.626297][ T8207] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1474.626332][ T8207] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1474.626461][ T8207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.631634][ T8207] usb 7-1: config 0 descriptor?? [ 1474.774105][ T5703] usb 5-1: Using ep0 maxpacket: 32 [ 1474.791076][ T5703] usb 5-1: config 5 has an invalid interface number: 211 but max is 0 [ 1474.791104][ T5703] usb 5-1: config 5 has no interface number 0 [ 1474.791137][ T5703] usb 5-1: config 5 interface 211 has no altsetting 0 [ 1474.812918][ T5703] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= e.aa [ 1474.813003][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.813026][ T5703] usb 5-1: Product: syz [ 1474.813041][ T5703] usb 5-1: Manufacturer: syz [ 1474.813052][ T5703] usb 5-1: SerialNumber: syz [ 1475.082668][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x3 [ 1475.082708][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 1475.082739][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 1475.082767][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 1475.082813][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 1475.082842][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 1475.082872][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 1475.082900][ T8207] kovaplus 0003:1E7D:2D50.003B: unknown main item tag 0x0 [ 1475.149594][ T5703] gspca_main: spca500-2.14.0 probing 046d:0900 [ 1475.150468][ T5703] gspca_spca500: reg write: error -71 [ 1475.151231][ T5703] gspca_spca500: reg write: error -71 [ 1475.151624][ T5703] gspca_spca500: reg write: error -71 [ 1475.152011][ T5703] gspca_spca500: reg write: error -71 [ 1475.152791][ T5703] gspca_spca500: reg write: error -71 [ 1475.153176][ T5703] gspca_spca500: reg write: error -71 [ 1475.153507][ T5703] gspca_spca500: reg write: error -71 [ 1475.153948][ T5703] gspca_spca500: reg write: error -71 [ 1475.154326][ T5703] gspca_spca500: reg write: error -71 [ 1475.154666][ T5703] gspca_spca500: reg write: error -71 [ 1475.155004][ T5703] gspca_spca500: reg write: error -71 [ 1475.155657][ T5703] gspca_spca500: reg write: error -71 [ 1475.156080][ T5703] gspca_spca500: reg write: error -71 [ 1475.156970][ T8207] kovaplus 0003:1E7D:2D50.003B: hidraw0: USB HID v0.04 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 1475.157608][ T5703] gspca_spca500: reg write: error -71 [ 1475.284082][ T5703] usb 5-1: USB disconnect, device number 42 [ 1475.455561][ T821] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1475.456586][ T821] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1475.456621][ T821] usb 9-1: can't read configurations, error -71 [ 1475.749865][T29981] : renamed from virt_wifi0 [ 1475.917413][ T821] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1476.102240][ T821] usb 9-1: not running at top speed; connect to a high speed hub [ 1476.103444][ T821] usb 9-1: config 11 has an invalid interface number: 95 but max is 0 [ 1476.103471][ T821] usb 9-1: config 11 has no interface number 0 [ 1476.103518][ T821] usb 9-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1476.103549][ T821] usb 9-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1476.103574][ T821] usb 9-1: config 11 interface 95 has no altsetting 0 [ 1476.104828][ T821] usb 9-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 1476.104858][ T821] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1476.104881][ T821] usb 9-1: Manufacturer: syz [ 1476.115421][T29978] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1476.385769][ T821] usbtouchscreen 9-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 1476.398931][ T821] usb 9-1: USB disconnect, device number 19 [ 1476.554251][T30024] FAULT_INJECTION: forcing a failure. [ 1476.554251][T30024] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.554279][T30024] CPU: 1 UID: 0 PID: 30024 Comm: syz.4.8030 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1476.554296][T30024] Tainted: [L]=SOFTLOCKUP [ 1476.554301][T30024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1476.554308][T30024] Call Trace: [ 1476.554313][T30024] [ 1476.554319][T30024] dump_stack_lvl+0xe8/0x150 [ 1476.554337][T30024] should_fail_ex+0x46b/0x600 [ 1476.554356][T30024] should_failslab+0xa8/0x100 [ 1476.554374][T30024] __kmalloc_noprof+0xdf/0x7b0 [ 1476.554391][T30024] ? tomoyo_encode+0x28b/0x550 [ 1476.554411][T30024] tomoyo_encode+0x28b/0x550 [ 1476.554431][T30024] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1476.554454][T30024] ? tomoyo_path_number_perm+0x219/0x630 [ 1476.554470][T30024] tomoyo_path_number_perm+0x246/0x630 [ 1476.554486][T30024] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1476.554501][T30024] ? __lock_acquire+0x6b5/0x2d10 [ 1476.554516][T30024] ? do_raw_spin_lock+0x12b/0x2f0 [ 1476.554546][T30024] ? __fget_files+0x2a/0x420 [ 1476.554562][T30024] ? __fget_files+0x2a/0x420 [ 1476.554575][T30024] ? __fget_files+0x3a6/0x420 [ 1476.554588][T30024] ? __fget_files+0x2a/0x420 [ 1476.554604][T30024] security_file_ioctl+0xc3/0x2a0 [ 1476.554620][T30024] __se_sys_ioctl+0x47/0x170 [ 1476.554637][T30024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.554650][T30024] do_syscall_64+0x15f/0xf80 [ 1476.554662][T30024] ? trace_irq_disable+0x3b/0x140 [ 1476.554679][T30024] ? clear_bhb_loop+0x40/0x90 [ 1476.554696][T30024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.554709][T30024] RIP: 0033:0x7f1fff33ce59 [ 1476.554721][T30024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.554732][T30024] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1476.554745][T30024] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1476.554754][T30024] RDX: 00002000000000c0 RSI: 0000000040085618 RDI: 0000000000000003 [ 1476.554763][T30024] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.554771][T30024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.554778][T30024] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1476.554796][T30024] [ 1476.554807][T30024] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1477.229966][T30051] FAULT_INJECTION: forcing a failure. [ 1477.229966][T30051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.230002][T30051] CPU: 0 UID: 0 PID: 30051 Comm: syz.4.8042 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1477.230031][T30051] Tainted: [L]=SOFTLOCKUP [ 1477.230038][T30051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1477.230052][T30051] Call Trace: [ 1477.230060][T30051] [ 1477.230070][T30051] dump_stack_lvl+0xe8/0x150 [ 1477.230098][T30051] should_fail_ex+0x46b/0x600 [ 1477.230137][T30051] _copy_from_iter+0x1d3/0x1670 [ 1477.230170][T30051] ? rcu_is_watching+0x15/0xb0 [ 1477.230201][T30051] ? __pfx__copy_from_iter+0x10/0x10 [ 1477.230227][T30051] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 1477.230265][T30051] ? netlink_sendmsg+0x650/0xb40 [ 1477.230292][T30051] ? skb_put+0x11b/0x210 [ 1477.230321][T30051] netlink_sendmsg+0x6c0/0xb40 [ 1477.230358][T30051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1477.230387][T30051] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1477.230423][T30051] ? aa_sock_msg_perm+0x122/0x200 [ 1477.230453][T30051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1477.230480][T30051] sock_sendmsg_nosec+0x112/0x150 [ 1477.230507][T30051] ____sys_sendmsg+0x55c/0x870 [ 1477.230540][T30051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1477.230576][T30051] ? import_iovec+0x73/0xa0 [ 1477.230607][T30051] ___sys_sendmsg+0x2a5/0x360 [ 1477.230635][T30051] ? __lock_acquire+0x6b5/0x2d10 [ 1477.230658][T30051] ? __pfx____sys_sendmsg+0x10/0x10 [ 1477.230717][T30051] ? __fget_files+0x2a/0x420 [ 1477.230739][T30051] ? __fget_files+0x3a6/0x420 [ 1477.230771][T30051] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1477.230801][T30051] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1477.230838][T30051] ? __pfx_ksys_write+0x10/0x10 [ 1477.230870][T30051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.230891][T30051] do_syscall_64+0x15f/0xf80 [ 1477.230911][T30051] ? trace_irq_disable+0x3b/0x140 [ 1477.230933][T30051] ? clear_bhb_loop+0x40/0x90 [ 1477.230948][T30051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.230960][T30051] RIP: 0033:0x7f1fff33ce59 [ 1477.230973][T30051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.230983][T30051] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.230996][T30051] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1477.231005][T30051] RDX: 0000000060000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 1477.231013][T30051] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.231021][T30051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.231029][T30051] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1477.231046][T30051] [ 1477.471545][T30057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8045'. [ 1477.604148][ T5703] usb 7-1: USB disconnect, device number 126 [ 1477.638999][T30063] sg_write: data in/out 11359336/108 bytes for SCSI command 0x0-- guessing data in; [ 1477.638999][T30063] program syz.6.8049 not setting count and/or reply_len properly [ 1477.991514][ T8207] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1478.058390][ T5703] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1478.183668][ T8207] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1478.183699][ T8207] usb 9-1: config 1 has no interface number 0 [ 1478.183758][ T8207] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1478.185956][ T8207] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1478.185988][ T8207] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.225132][ T8207] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1478.225164][ T8207] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.225185][ T8207] usb 9-1: Product: syz [ 1478.225201][ T8207] usb 9-1: Manufacturer: syz [ 1478.225216][ T8207] usb 9-1: SerialNumber: syz [ 1478.231725][ T5703] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1478.231753][ T5703] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1478.235185][ T5703] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1478.235212][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.235233][ T5703] usb 7-1: Product: syz [ 1478.235249][ T5703] usb 7-1: Manufacturer: syz [ 1478.235264][ T5703] usb 7-1: SerialNumber: syz [ 1478.241366][T30066] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1478.246166][ T5703] usb 7-1: config 0 descriptor?? [ 1478.261749][ T5703] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1478.501804][ T8207] usb 9-1: Error in usbnet_get_endpoints (-71) [ 1478.545681][ T8207] usb 9-1: USB disconnect, device number 20 [ 1478.825474][ T821] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1478.987587][ T821] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1478.987623][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1478.987652][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 16384, setting to 64 [ 1478.987679][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 1478.989971][ T821] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1478.990002][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.990023][ T821] usb 5-1: Product: syz [ 1478.990039][ T821] usb 5-1: Manufacturer: syz [ 1478.990055][ T821] usb 5-1: SerialNumber: syz [ 1478.995513][ T821] usb 5-1: config 0 descriptor?? [ 1479.338971][ T5703] gspca_sunplus: reg_r err -71 [ 1479.339065][ T5703] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1479.365992][ T5703] usb 7-1: USB disconnect, device number 127 [ 1479.548768][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.549560][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.549999][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.550525][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.550951][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.551698][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.552236][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.552673][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.553192][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.553776][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.554225][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.554657][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.555081][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.555527][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.555979][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.556514][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.556851][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.557177][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.557639][ T821] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1479.557763][ T821] input input91: Timeout waiting for response from device. [ 1479.576062][ T821] usb 5-1: USB disconnect, device number 43 [ 1479.658592][T30108] (syz.8.8068,30108,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1479.658623][T30108] (syz.8.8068,30108,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1479.813324][T30115] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8071'. [ 1480.099592][T30128] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 1480.099592][T30128] program syz.6.8076 not setting count and/or reply_len properly [ 1480.345455][ T821] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1480.486532][T30133] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8078'. [ 1480.617946][ T821] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1480.617984][ T821] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.618011][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1480.618043][ T821] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1480.618069][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.625554][ T821] usb 5-1: config 0 descriptor?? [ 1480.626559][T30125] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1481.299233][T30123] syz.8.8073 (30123): drop_caches: 2 [ 1481.450455][T30141] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8081'. [ 1481.709926][T30152] FAULT_INJECTION: forcing a failure. [ 1481.709926][T30152] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.709958][T30152] CPU: 0 UID: 0 PID: 30152 Comm: syz.8.8084 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1481.709980][T30152] Tainted: [L]=SOFTLOCKUP [ 1481.709986][T30152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1481.709996][T30152] Call Trace: [ 1481.710002][T30152] [ 1481.710009][T30152] dump_stack_lvl+0xe8/0x150 [ 1481.710033][T30152] should_fail_ex+0x46b/0x600 [ 1481.710057][T30152] should_failslab+0xa8/0x100 [ 1481.710080][T30152] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1481.710101][T30152] ? __alloc_skb+0x1d0/0x7d0 [ 1481.710124][T30152] __alloc_skb+0x1d0/0x7d0 [ 1481.710148][T30152] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1481.710168][T30152] tcp_sendmsg_locked+0x134b/0x5370 [ 1481.710221][T30152] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1481.710248][T30152] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1481.710271][T30152] ? lockdep_hardirqs_on+0x7a/0x110 [ 1481.710299][T30152] tcp_sendmsg+0x2f/0x50 [ 1481.710316][T30152] ? __pfx_inet_sendmsg+0x10/0x10 [ 1481.710332][T30152] sock_sendmsg_nosec+0xf9/0x150 [ 1481.710353][T30152] __sys_sendto+0x402/0x590 [ 1481.710379][T30152] ? __pfx___sys_sendto+0x10/0x10 [ 1481.710421][T30152] ? ksys_write+0x248/0x270 [ 1481.710444][T30152] ? __pfx_ksys_write+0x10/0x10 [ 1481.710468][T30152] __x64_sys_sendto+0xde/0x100 [ 1481.710488][T30152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.710505][T30152] do_syscall_64+0x15f/0xf80 [ 1481.710520][T30152] ? trace_irq_disable+0x3b/0x140 [ 1481.710541][T30152] ? clear_bhb_loop+0x40/0x90 [ 1481.710560][T30152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.710581][T30152] RIP: 0033:0x7fbe9f1ace59 [ 1481.710600][T30152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.710614][T30152] RSP: 002b:00007fbe9d406028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1481.710631][T30152] RAX: ffffffffffffffda RBX: 00007fbe9f425fa0 RCX: 00007fbe9f1ace59 [ 1481.710642][T30152] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 1481.710652][T30152] RBP: 00007fbe9d406090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.710661][T30152] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000002 [ 1481.710671][T30152] R13: 00007fbe9f426038 R14: 00007fbe9f425fa0 R15: 00007ffe02b403d8 [ 1481.710695][T30152] [ 1481.723509][ T821] usbhid 5-1:0.0: can't add hid device: -71 [ 1481.723632][ T821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1481.733021][ T821] usb 5-1: USB disconnect, device number 44 [ 1482.076319][T30156] tipc: Started in network mode [ 1482.076352][T30156] tipc: Node identity 52f76d796ac3, cluster identity 4711 [ 1482.076546][T30156] tipc: Enabled bearer , priority 0 [ 1482.078584][T30156] syzkaller0: entered promiscuous mode [ 1482.078608][T30156] syzkaller0: entered allmulticast mode [ 1482.206996][T30167] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8090'. [ 1482.299371][ T821] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1482.342101][T26940] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1482.466566][ T821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1482.469859][ T821] usb 5-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1482.469890][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.469912][ T821] usb 5-1: Product: syz [ 1482.469928][ T821] usb 5-1: Manufacturer: syz [ 1482.469940][ T821] usb 5-1: SerialNumber: syz [ 1482.529653][ T821] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1482.543059][T26940] usb 9-1: not running at top speed; connect to a high speed hub [ 1482.558873][T26940] usb 9-1: config 2 has an invalid interface number: 48 but max is 0 [ 1482.558893][T26940] usb 9-1: config 2 has an invalid interface descriptor of length 6, skipping [ 1482.558905][T26940] usb 9-1: config 2 has an invalid descriptor of length 229, skipping remainder of the config [ 1482.558917][T26940] usb 9-1: config 2 has no interface number 0 [ 1482.558945][T26940] usb 9-1: config 2 interface 48 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1482.558958][T26940] usb 9-1: config 2 interface 48 altsetting 1 endpoint 0x88 has invalid maxpacket 1024, setting to 1023 [ 1482.558974][T26940] usb 9-1: config 2 interface 48 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1482.558986][T26940] usb 9-1: config 2 interface 48 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1482.559000][T26940] usb 9-1: config 2 interface 48 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1482.559012][T26940] usb 9-1: config 2 interface 48 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1482.559025][T26940] usb 9-1: config 2 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1482.559037][T26940] usb 9-1: config 2 interface 48 altsetting 1 endpoint 0xB has invalid maxpacket 1088, setting to 64 [ 1482.559052][T26940] usb 9-1: config 2 interface 48 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 1482.559068][T26940] usb 9-1: config 2 interface 48 has no altsetting 0 [ 1482.590122][T26940] usb 9-1: New USB device found, idVendor=10c4, idProduct=81a6, bcdDevice= b.c2 [ 1482.590155][T26940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.590175][T26940] usb 9-1: Product: ㄳ鿉뒲❑䴶졀딫ᨑ㐍蟌ᶇ躧ᴽᴹ绪箄췮趽쾗౗ဥ﬍◯ڥ⼟ꮔ楊섴셸뼾㘸廘ᡯ蝌娵디蛀あꪬꆶೠ觌홞䧍譎튰㎺끃떤넧캸邶៛䬎㸀䇝뵁甓시㛓ᮨᘎ誮᡽뚒굺ﯳ럛짾ᢵἤⷢ㽣몞ꨱⷽẘ襞逄픛ꖘ [ 1482.590205][T26940] usb 9-1: Manufacturer: 읂࿰轥顟뗿롈啀墪틢ፅ莦ｬ觲낼⡤骙緭줖譞絭峪蓎警输 [ 1482.590225][T26940] usb 9-1: SerialNumber: У [ 1482.870693][T26940] cp210x 9-1:2.48: cp210x converter detected [ 1482.873539][T26940] cp210x 9-1:2.48: failed to get vendor val 0x370b size 1: -71 [ 1482.873557][T26940] cp210x 9-1:2.48: querying part number failed [ 1482.879805][ T821] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1482.898641][T30155] tipc: Resetting bearer [ 1482.899432][T26940] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1483.019037][T26940] usb 9-1: USB disconnect, device number 21 [ 1483.121021][T26940] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1483.151671][T26940] cp210x 9-1:2.48: device disconnected [ 1483.233598][T30155] tipc: Disabling bearer [ 1483.424630][ T8207] tipc: Node number set to 942959993 [ 1483.725218][ T821] usb 5-1: can't set first interface for hiFace device. [ 1483.725262][ T821] snd-usb-hiface 5-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1483.740055][ T821] usb 5-1: can't set first interface for hiFace device. [ 1483.740092][ T821] snd-usb-hiface 5-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1483.748832][ T821] usb 5-1: can't set first interface for hiFace device. [ 1483.748869][ T821] snd-usb-hiface 5-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1483.781254][ T821] usb 5-1: USB disconnect, device number 45 [ 1483.861565][T29717] udevd[29717]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1484.163640][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8099'. [ 1484.883801][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1484.987438][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1484.991796][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1485.007494][ T38] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1485.010133][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1485.014418][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1485.174740][ T38] usb 9-1: device descriptor read/64, error -71 [ 1485.441990][ T38] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1485.530381][T30226] fuse: Unknown parameter '' [ 1485.531408][T23855] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.580947][ T38] usb 9-1: device descriptor read/64, error -71 [ 1485.713216][ T38] usb usb9-port1: attempt power cycle [ 1486.080889][ T38] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1486.098909][ T38] usb 9-1: device descriptor read/8, error -71 [ 1486.271702][T23855] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.361267][ T38] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1486.391054][ T38] usb 9-1: device descriptor read/8, error -71 [ 1486.442955][T30258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8128'. [ 1486.504551][ T38] usb usb9-port1: unable to enumerate USB device [ 1486.536711][T30212] lo speed is unknown, defaulting to 1000 [ 1486.897369][T23855] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.355430][T17581] Bluetooth: hci0: command tx timeout [ 1487.485458][T23855] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.845879][T30212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.850161][T30212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.850449][T30212] bridge_slave_0: entered allmulticast mode [ 1487.880417][T30212] bridge_slave_0: entered promiscuous mode [ 1487.897466][T30212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.897777][T30212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.898144][T30212] bridge_slave_1: entered allmulticast mode [ 1487.934835][T30212] bridge_slave_1: entered promiscuous mode [ 1488.203068][ T38] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1488.242649][T30212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1488.289962][T30212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.360134][ T38] usb 5-1: Using ep0 maxpacket: 16 [ 1488.363325][ T38] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 131, changing to 7 [ 1488.363376][ T38] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 1488.369482][ T38] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 1488.369526][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.369549][ T38] usb 5-1: Product: syz [ 1488.369565][ T38] usb 5-1: Manufacturer: syz [ 1488.369704][ T38] usb 5-1: SerialNumber: syz [ 1488.395262][ T38] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1488.395292][ T38] usb 5-1: no configuration chosen from 1 choice [ 1488.526578][T30212] team0: Port device team_slave_0 added [ 1488.536206][T30212] team0: Port device team_slave_1 added [ 1488.586333][T18730] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1488.633997][T30212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.634009][T30212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.634026][T30212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1488.636654][T30212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1488.636669][T30212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.636691][T30212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.744952][T18730] usb 9-1: Using ep0 maxpacket: 32 [ 1488.774663][T18730] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1488.775992][T18730] usb 9-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 1488.780005][T18730] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1488.780034][T18730] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.780056][T18730] usb 9-1: Product: syz [ 1488.780071][T18730] usb 9-1: Manufacturer: syz [ 1488.780087][T18730] usb 9-1: SerialNumber: syz [ 1488.889736][T23855] bridge_slave_1: left allmulticast mode [ 1488.890484][T23855] bridge_slave_1: left promiscuous mode [ 1488.892175][T23855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.025365][T23855] bridge_slave_0: left allmulticast mode [ 1489.025401][T23855] bridge_slave_0: left promiscuous mode [ 1489.025938][T23855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.076897][T18730] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1489.076955][T18730] usb 9-1: MIDIStreaming interface descriptor not found [ 1489.116751][T23855] dvmrp2: left allmulticast mode [ 1489.153457][T18730] usb 9-1: USB disconnect, device number 26 [ 1489.248965][T29021] udevd[29021]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1489.605131][T17581] Bluetooth: hci0: command tx timeout [ 1489.680291][ T37] audit: type=1326 audit(1482.122:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30331 comm="syz.8.8152" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe9f1ace59 code=0x0 [ 1490.466846][T23855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.552290][T23855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.574571][T23855] bond0 (unregistering): Released all slaves [ 1490.628461][T30212] hsr_slave_0: entered promiscuous mode [ 1490.630709][T30212] hsr_slave_1: entered promiscuous mode [ 1490.632533][T30212] debugfs: 'hsr0' already exists in 'hsr' [ 1490.632556][T30212] Cannot create hsr debugfs directory [ 1490.749516][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1490.899341][ T38] usb 5-1: USB disconnect, device number 46 [ 1490.906350][T23855] tipc: Left network mode [ 1491.250751][T30343] tipc: Enabled bearer , priority 0 [ 1491.252051][T30343] syzkaller0: entered promiscuous mode [ 1491.252074][T30343] syzkaller0: entered allmulticast mode [ 1491.602904][ T5703] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1491.771888][ T5703] usb 9-1: not running at top speed; connect to a high speed hub [ 1491.773663][ T5703] usb 9-1: config 2 has an invalid interface number: 48 but max is 0 [ 1491.773693][ T5703] usb 9-1: config 2 has an invalid interface descriptor of length 6, skipping [ 1491.773713][ T5703] usb 9-1: config 2 has an invalid descriptor of length 229, skipping remainder of the config [ 1491.773733][ T5703] usb 9-1: config 2 has no interface number 0 [ 1491.773783][ T5703] usb 9-1: config 2 interface 48 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1491.773806][ T5703] usb 9-1: config 2 interface 48 altsetting 1 endpoint 0x88 has invalid maxpacket 1024, setting to 1023 [ 1491.773835][ T5703] usb 9-1: config 2 interface 48 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1491.773858][ T5703] usb 9-1: config 2 interface 48 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1491.773883][ T5703] usb 9-1: config 2 interface 48 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1491.773904][ T5703] usb 9-1: config 2 interface 48 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1491.773927][ T5703] usb 9-1: config 2 interface 48 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1491.773950][ T5703] usb 9-1: config 2 interface 48 altsetting 1 endpoint 0xB has invalid maxpacket 1088, setting to 64 [ 1491.773986][ T5703] usb 9-1: config 2 interface 48 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 16 [ 1491.774016][ T5703] usb 9-1: config 2 interface 48 has no altsetting 0 [ 1491.776871][ T5703] usb 9-1: New USB device found, idVendor=10c4, idProduct=81a6, bcdDevice= b.c2 [ 1491.776901][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.776920][ T5703] usb 9-1: Product: ㄳ鿉뒲❑䴶졀딫ᨑ㐍蟌ᶇ躧ᴽᴹ绪箄췮趽쾗౗ဥ﬍◯ڥ⼟ꮔ楊섴셸뼾㘸廘ᡯ蝌娵디蛀あꪬꆶೠ觌홞䧍譎튰㎺끃떤넧캸邶៛䬎㸀䇝뵁甓시㛓ᮨᘎ誮᡽뚒굺ﯳ럛짾ᢵἤⷢ㽣몞ꨱⷽẘ襞逄픛ꖘ [ 1491.776950][ T5703] usb 9-1: Manufacturer: 읂࿰轥顟뗿롈啀墪틢ፅ莦ｬ觲낼⡤骙緭줖譞絭峪蓎警输 [ 1491.776979][ T5703] usb 9-1: SerialNumber: У [ 1491.805317][T17581] Bluetooth: hci0: command tx timeout [ 1492.052679][ T5703] cp210x 9-1:2.48: cp210x converter detected [ 1492.062895][ T5703] cp210x 9-1:2.48: failed to get vendor val 0x370b size 1: -71 [ 1492.062925][ T5703] cp210x 9-1:2.48: querying part number failed [ 1492.087593][ T5703] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1492.346346][ T5703] usb 9-1: USB disconnect, device number 27 [ 1492.453599][ T5703] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1492.455434][ T5703] cp210x 9-1:2.48: device disconnected [ 1493.000037][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.020972][T30342] tipc: Resetting bearer [ 1493.114143][T30390] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 1493.114143][T30390] program syz.4.8172 not setting count and/or reply_len properly [ 1493.328224][T30342] tipc: Disabling bearer [ 1493.871874][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1493.952816][ T821] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1494.028703][T17581] Bluetooth: hci0: command tx timeout [ 1494.228495][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 1494.232873][ T821] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1494.232904][ T821] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1494.232931][ T821] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1494.232957][ T821] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1494.232989][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1494.236726][ T821] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1494.236757][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.236778][ T821] usb 5-1: Product: syz [ 1494.236790][ T821] usb 5-1: Manufacturer: syz [ 1494.236825][ T821] usb 5-1: SerialNumber: syz [ 1494.243875][ T821] usb 5-1: config 0 descriptor?? [ 1494.568027][ T821] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input92 [ 1494.587789][ T4963] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1494.682699][ T4963] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1494.767423][T29019] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1494.809961][ T4963] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1494.926853][ T4963] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1494.945318][T30421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.947133][T30421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.030610][ T4963] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1495.116135][ T4963] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1495.420493][ T9] usb 5-1: USB disconnect, device number 47 [ 1495.468223][T30449] FAULT_INJECTION: forcing a failure. [ 1495.468223][T30449] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.468252][T30449] CPU: 0 UID: 0 PID: 30449 Comm: syz.4.8194 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1495.468269][T30449] Tainted: [L]=SOFTLOCKUP [ 1495.468276][T30449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1495.468288][T30449] Call Trace: [ 1495.468296][T30449] [ 1495.468305][T30449] dump_stack_lvl+0xe8/0x150 [ 1495.468333][T30449] should_fail_ex+0x46b/0x600 [ 1495.468361][T30449] should_failslab+0xa8/0x100 [ 1495.468391][T30449] __kmalloc_cache_noprof+0x84/0x690 [ 1495.468418][T30449] ? sctp_stream_init_ext+0x57/0x180 [ 1495.468449][T30449] sctp_stream_init_ext+0x57/0x180 [ 1495.468478][T30449] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 1495.468507][T30449] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1495.468541][T30449] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 1495.468564][T30449] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1495.468594][T30449] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1495.468622][T30449] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1495.468650][T30449] ? lockdep_hardirqs_on+0x7a/0x110 [ 1495.468679][T30449] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1495.468698][T30449] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1495.468724][T30449] sctp_sendmsg+0x170d/0x2990 [ 1495.468757][T30449] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1495.468788][T30449] ? aa_sk_perm+0x703/0x950 [ 1495.468820][T30449] ? __pfx_aa_sk_perm+0x10/0x10 [ 1495.468843][T30449] ? sock_rps_record_flow+0x19/0x350 [ 1495.468864][T30449] ? inet_sendmsg+0x2f4/0x370 [ 1495.468885][T30449] ? __pfx_inet_sendmsg+0x10/0x10 [ 1495.468902][T30449] sock_sendmsg_nosec+0xf9/0x150 [ 1495.468927][T30449] ____sys_sendmsg+0x55c/0x870 [ 1495.468959][T30449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.468993][T30449] ? import_iovec+0x73/0xa0 [ 1495.469023][T30449] ___sys_sendmsg+0x2a5/0x360 [ 1495.469050][T30449] ? __lock_acquire+0x6b5/0x2d10 [ 1495.469073][T30449] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.469103][T30449] ? kstrtouint+0x6e/0xe0 [ 1495.469148][T30449] ? __fget_files+0x2a/0x420 [ 1495.469170][T30449] ? __fget_files+0x3a6/0x420 [ 1495.469200][T30449] __sys_sendmmsg+0x282/0x4e0 [ 1495.469232][T30449] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1495.469267][T30449] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1495.469306][T30449] ? ksys_write+0x248/0x270 [ 1495.469334][T30449] ? __pfx_ksys_write+0x10/0x10 [ 1495.469368][T30449] __x64_sys_sendmmsg+0xa0/0xc0 [ 1495.469396][T30449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.469419][T30449] do_syscall_64+0x15f/0xf80 [ 1495.469438][T30449] ? trace_irq_disable+0x3b/0x140 [ 1495.469467][T30449] ? clear_bhb_loop+0x40/0x90 [ 1495.469493][T30449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.469514][T30449] RIP: 0033:0x7f1fff33ce59 [ 1495.469534][T30449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.469553][T30449] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1495.469575][T30449] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1495.469600][T30449] RDX: 0000000000000001 RSI: 0000200000006e80 RDI: 0000000000000003 [ 1495.469613][T30449] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.469627][T30449] R10: 0000000020002845 R11: 0000000000000246 R12: 0000000000000002 [ 1495.469641][T30449] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1495.469678][T30449] [ 1495.575483][T23855] hsr_slave_0: left promiscuous mode [ 1495.598411][T23855] hsr_slave_1: left promiscuous mode [ 1495.599548][T23855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.599573][T23855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.740831][T30457] FAULT_INJECTION: forcing a failure. [ 1495.740831][T30457] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.740866][T30457] CPU: 1 UID: 0 PID: 30457 Comm: syz.4.8198 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1495.740894][T30457] Tainted: [L]=SOFTLOCKUP [ 1495.740902][T30457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1495.740915][T30457] Call Trace: [ 1495.740923][T30457] [ 1495.740933][T30457] dump_stack_lvl+0xe8/0x150 [ 1495.740963][T30457] should_fail_ex+0x46b/0x600 [ 1495.741018][T30457] should_failslab+0xa8/0x100 [ 1495.741050][T30457] __kmalloc_noprof+0xdf/0x7b0 [ 1495.741078][T30457] ? tomoyo_encode+0x28b/0x550 [ 1495.741112][T30457] tomoyo_encode+0x28b/0x550 [ 1495.741148][T30457] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1495.741181][T30457] ? tomoyo_domain+0xd7/0x130 [ 1495.741206][T30457] ? tomoyo_path_number_perm+0x219/0x630 [ 1495.741232][T30457] tomoyo_path_number_perm+0x246/0x630 [ 1495.741257][T30457] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1495.741282][T30457] ? __lock_acquire+0x6b5/0x2d10 [ 1495.741306][T30457] ? do_raw_spin_lock+0x12b/0x2f0 [ 1495.741365][T30457] ? __fget_files+0x2a/0x420 [ 1495.741392][T30457] ? __fget_files+0x2a/0x420 [ 1495.741414][T30457] ? __fget_files+0x3a6/0x420 [ 1495.741436][T30457] ? __fget_files+0x2a/0x420 [ 1495.741463][T30457] security_file_ioctl+0xc3/0x2a0 [ 1495.741490][T30457] __se_sys_ioctl+0x47/0x170 [ 1495.741518][T30457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.741541][T30457] do_syscall_64+0x15f/0xf80 [ 1495.741560][T30457] ? trace_irq_disable+0x3b/0x140 [ 1495.741588][T30457] ? clear_bhb_loop+0x40/0x90 [ 1495.741613][T30457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.741634][T30457] RIP: 0033:0x7f1fff33ce59 [ 1495.741652][T30457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.741671][T30457] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.741692][T30457] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1495.741708][T30457] RDX: 0000000000000000 RSI: 00000000c048aec8 RDI: 0000000000000004 [ 1495.741721][T30457] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.741734][T30457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.741747][T30457] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1495.741778][T30457] [ 1495.741820][T30457] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1495.867765][T23855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.867793][T23855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.186664][T23855] veth1_macvtap: left promiscuous mode [ 1496.186765][T23855] veth0_macvtap: left promiscuous mode [ 1496.187051][T23855] veth1_vlan: left promiscuous mode [ 1496.187243][T23855] veth0_vlan: left promiscuous mode [ 1496.444659][ T821] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1496.593658][ T821] usb 9-1: device descriptor read/64, error -71 [ 1496.890122][ T821] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1497.061226][ T821] usb 9-1: device descriptor read/64, error -71 [ 1497.180387][ T821] usb usb9-port1: attempt power cycle [ 1497.446744][T23855] team0 (unregistering): Port device team_slave_1 removed [ 1497.510656][T23855] team0 (unregistering): Port device team_slave_0 removed [ 1497.544491][ T821] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1497.566474][ T821] usb 9-1: device descriptor read/8, error -71 [ 1497.784848][T30522] Bluetooth: hci5: Frame reassembly failed (-84) [ 1497.833025][ T821] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1497.879225][ T821] usb 9-1: device descriptor read/8, error -71 [ 1497.886462][T18726] Bluetooth: hci5: Frame reassembly failed (-84) [ 1497.904482][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8228'. [ 1497.991414][T18726] smbdirect: ib_dev[syz2] removed [ 1497.991560][ T821] usb usb9-port1: unable to enumerate USB device [ 1498.332730][ T38] lo speed is unknown, defaulting to 1000 [ 1498.332762][ T38] infiniband syz2: ib_query_port failed (-19) [ 1498.693077][T30542] FAULT_INJECTION: forcing a failure. [ 1498.693077][T30542] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.693117][T30542] CPU: 0 UID: 0 PID: 30542 Comm: syz.4.8234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1498.693145][T30542] Tainted: [L]=SOFTLOCKUP [ 1498.693154][T30542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1498.693166][T30542] Call Trace: [ 1498.693174][T30542] [ 1498.693184][T30542] dump_stack_lvl+0xe8/0x150 [ 1498.693214][T30542] should_fail_ex+0x46b/0x600 [ 1498.693246][T30542] should_failslab+0xa8/0x100 [ 1498.693278][T30542] kmem_cache_alloc_noprof+0x87/0x680 [ 1498.693314][T30542] ? __pmd_alloc+0xa4/0x5e0 [ 1498.693345][T30542] __pmd_alloc+0xa4/0x5e0 [ 1498.693374][T30542] huge_pte_alloc+0x532/0x630 [ 1498.693401][T30542] ? hugetlb_fault+0x3e9/0x1530 [ 1498.693432][T30542] hugetlb_fault+0x53c/0x1530 [ 1498.693471][T30542] ? __pfx_hugetlb_fault+0x10/0x10 [ 1498.693509][T30542] ? mt_find+0x481/0x630 [ 1498.693539][T30542] handle_mm_fault+0xed5/0x14c0 [ 1498.693569][T30542] ? handle_mm_fault+0xed/0x14c0 [ 1498.693598][T30542] ? __pfx_handle_mm_fault+0x10/0x10 [ 1498.693629][T30542] ? find_vma+0xed/0x160 [ 1498.693654][T30542] ? __pfx_find_vma+0x10/0x10 [ 1498.693683][T30542] ? __lock_acquire+0x6b5/0x2d10 [ 1498.693706][T30542] ? lock_mm_and_find_vma+0xa7/0x340 [ 1498.693737][T30542] do_user_addr_fault+0x75b/0x1340 [ 1498.693774][T30542] exc_page_fault+0x6a/0xc0 [ 1498.693804][T30542] asm_exc_page_fault+0x26/0x30 [ 1498.693824][T30542] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1498.693850][T30542] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1498.693866][T30542] RSP: 0018:ffffc90004597d58 EFLAGS: 00050216 [ 1498.693885][T30542] RAX: 00007ffffffff001 RBX: 0000000000000014 RCX: 0000000000000014 [ 1498.693899][T30542] RDX: 0000000000000001 RSI: 0000200000000580 RDI: ffffc90004597dc0 [ 1498.693913][T30542] RBP: ffffc90004597eb8 R08: ffffc90004597dd3 R09: 1ffff920008b2fba [ 1498.693928][T30542] R10: dffffc0000000000 R11: fffff520008b2fbb R12: 0000200000000580 [ 1498.693941][T30542] R13: ffffc90004597dc0 R14: ffffc90004597dc0 R15: 0000200000000580 [ 1498.693972][T30542] _copy_from_user+0x7a/0xb0 [ 1498.694002][T30542] __sys_bind+0x1cc/0x410 [ 1498.694028][T30542] ? __pfx___sys_bind+0x10/0x10 [ 1498.694074][T30542] ? __pfx_ksys_write+0x10/0x10 [ 1498.694111][T30542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.694133][T30542] __x64_sys_bind+0x7a/0x90 [ 1498.694158][T30542] do_syscall_64+0x15f/0xf80 [ 1498.694178][T30542] ? trace_irq_disable+0x3b/0x140 [ 1498.694206][T30542] ? clear_bhb_loop+0x40/0x90 [ 1498.694232][T30542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.694253][T30542] RIP: 0033:0x7f1fff33ce59 [ 1498.694272][T30542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.694290][T30542] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1498.694318][T30542] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1498.694334][T30542] RDX: 0000000000000014 RSI: 0000200000000580 RDI: 0000000000000003 [ 1498.694347][T30542] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.694361][T30542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.694374][T30542] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1498.694408][T30542] [ 1500.031495][T17581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1500.707527][T30587] FAULT_INJECTION: forcing a failure. [ 1500.707527][T30587] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.707565][T30587] CPU: 0 UID: 0 PID: 30587 Comm: syz.8.8247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1500.707593][T30587] Tainted: [L]=SOFTLOCKUP [ 1500.707601][T30587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1500.707613][T30587] Call Trace: [ 1500.707620][T30587] [ 1500.707629][T30587] dump_stack_lvl+0xe8/0x150 [ 1500.707662][T30587] should_fail_ex+0x46b/0x600 [ 1500.707693][T30587] should_failslab+0xa8/0x100 [ 1500.707724][T30587] __kmalloc_noprof+0xdf/0x7b0 [ 1500.707750][T30587] ? kfree+0x4d/0x6c0 [ 1500.707773][T30587] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1500.707808][T30587] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1500.707840][T30587] ? tomoyo_domain+0xd7/0x130 [ 1500.707866][T30587] ? tomoyo_path_number_perm+0x219/0x630 [ 1500.707892][T30587] tomoyo_path_number_perm+0x246/0x630 [ 1500.707922][T30587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1500.707947][T30587] ? __lock_acquire+0x6b5/0x2d10 [ 1500.707971][T30587] ? do_raw_spin_lock+0x12b/0x2f0 [ 1500.708028][T30587] ? __fget_files+0x2a/0x420 [ 1500.708056][T30587] ? __fget_files+0x2a/0x420 [ 1500.708079][T30587] ? __fget_files+0x3a6/0x420 [ 1500.708102][T30587] ? __fget_files+0x2a/0x420 [ 1500.708138][T30587] security_file_ioctl+0xc3/0x2a0 [ 1500.708166][T30587] __se_sys_ioctl+0x47/0x170 [ 1500.708194][T30587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.708216][T30587] do_syscall_64+0x15f/0xf80 [ 1500.708236][T30587] ? trace_irq_disable+0x3b/0x140 [ 1500.708264][T30587] ? clear_bhb_loop+0x40/0x90 [ 1500.708286][T30587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.708307][T30587] RIP: 0033:0x7fbe9f1ace59 [ 1500.708326][T30587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.708344][T30587] RSP: 002b:00007fbe9d406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1500.708367][T30587] RAX: ffffffffffffffda RBX: 00007fbe9f425fa0 RCX: 00007fbe9f1ace59 [ 1500.708382][T30587] RDX: 0000200000000880 RSI: 0000000000004b72 RDI: 0000000000000006 [ 1500.708396][T30587] RBP: 00007fbe9d406090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.708410][T30587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.708423][T30587] R13: 00007fbe9f426038 R14: 00007fbe9f425fa0 R15: 00007ffe02b403d8 [ 1500.708456][T30587] [ 1500.708465][T30587] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1501.872552][ T5703] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1501.893590][T30212] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1502.008177][T30212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1502.017882][T30212] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1502.098160][ T5703] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1502.098191][ T5703] usb 9-1: config 1 has no interface number 0 [ 1502.098237][ T5703] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1502.098265][ T5703] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1502.098291][ T5703] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.151867][ T5703] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1502.151899][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.151920][ T5703] usb 9-1: Product: syz [ 1502.151934][ T5703] usb 9-1: Manufacturer: syz [ 1502.151948][ T5703] usb 9-1: SerialNumber: syz [ 1502.281035][T30609] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1502.291381][T30212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1502.309222][T30212] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1502.352058][T30212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1502.356490][T30212] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1502.437264][T30626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8260'. [ 1502.475709][T30212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1502.500833][ T5703] usb 9-1: Error in usbnet_get_endpoints (-71) [ 1502.535734][ T5703] usb 9-1: USB disconnect, device number 32 [ 1502.800723][T30642] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1502.871224][T30212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.911620][T30212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.937201][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.937460][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.991283][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.010912][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.186067][T30212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1504.310834][T30695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.311423][T30695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.524408][T18730] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1504.705751][T18730] usb 5-1: Using ep0 maxpacket: 16 [ 1504.720850][T18730] usb 5-1: config 2 has an invalid interface number: 183 but max is 3 [ 1504.720868][T18730] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1504.720880][T18730] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1504.720891][T18730] usb 5-1: config 2 has an invalid interface number: 123 but max is 3 [ 1504.720904][T18730] usb 5-1: config 2 has an invalid interface number: 162 but max is 3 [ 1504.720915][T18730] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1504.720926][T18730] usb 5-1: config 2 has an invalid interface number: 189 but max is 3 [ 1504.720938][T18730] usb 5-1: config 2 has no interface number 0 [ 1504.720948][T18730] usb 5-1: config 2 has no interface number 1 [ 1504.720958][T18730] usb 5-1: config 2 has no interface number 2 [ 1504.720968][T18730] usb 5-1: config 2 has no interface number 3 [ 1504.721014][T18730] usb 5-1: config 2 interface 183 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1504.721030][T18730] usb 5-1: config 2 interface 183 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1504.721043][T18730] usb 5-1: config 2 interface 183 altsetting 1 endpoint 0xF has invalid maxpacket 1072, setting to 64 [ 1504.721058][T18730] usb 5-1: config 2 interface 183 altsetting 1 endpoint 0xA has invalid maxpacket 479, setting to 64 [ 1504.721074][T18730] usb 5-1: config 2 interface 183 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1504.721087][T18730] usb 5-1: config 2 interface 183 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1504.721098][T18730] usb 5-1: config 2 interface 183 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1504.721112][T18730] usb 5-1: config 2 interface 183 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 16 [ 1504.721125][T18730] usb 5-1: config 2 interface 183 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1504.721139][T18730] usb 5-1: config 2 interface 183 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1504.721151][T18730] usb 5-1: config 2 interface 183 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 1504.721172][T18730] usb 5-1: config 2 interface 123 altsetting 0 endpoint 0x8B has invalid maxpacket 512, setting to 64 [ 1504.721188][T18730] usb 5-1: config 2 interface 123 altsetting 0 endpoint 0x9 has an invalid bInterval 72, changing to 10 [ 1504.721202][T18730] usb 5-1: config 2 interface 123 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 1504.721215][T18730] usb 5-1: config 2 interface 123 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1504.721230][T18730] usb 5-1: config 2 interface 123 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 1504.721243][T18730] usb 5-1: config 2 interface 123 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1504.721255][T18730] usb 5-1: config 2 interface 123 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1504.721267][T18730] usb 5-1: config 2 interface 123 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1504.721279][T18730] usb 5-1: config 2 interface 123 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1504.721293][T18730] usb 5-1: config 2 interface 123 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1504.721305][T18730] usb 5-1: config 2 interface 123 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 1504.721317][T18730] usb 5-1: config 2 interface 123 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 1504.721338][T18730] usb 5-1: config 2 interface 162 altsetting 3 bulk endpoint 0xE has invalid maxpacket 1024 [ 1504.721351][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1504.721363][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1504.721376][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1504.721389][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 1504.721401][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1504.721414][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1504.721426][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1504.721439][T18730] usb 5-1: config 2 interface 162 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1504.721450][T18730] usb 5-1: config 2 interface 162 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1504.721469][T18730] usb 5-1: config 2 interface 189 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1504.721482][T18730] usb 5-1: config 2 interface 189 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 1504.721495][T18730] usb 5-1: config 2 interface 189 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 1504.721508][T18730] usb 5-1: config 2 interface 189 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 1504.721521][T18730] usb 5-1: config 2 interface 189 altsetting 128 has a duplicate endpoint with address 0x8A, skipping [ 1504.721534][T18730] usb 5-1: config 2 interface 189 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 1504.721546][T18730] usb 5-1: config 2 interface 189 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 1504.721559][T18730] usb 5-1: config 2 interface 183 has no altsetting 0 [ 1504.721569][T18730] usb 5-1: config 2 interface 162 has no altsetting 0 [ 1504.721580][T18730] usb 5-1: config 2 interface 189 has no altsetting 0 [ 1504.750094][T18730] usb 5-1: Dual-Role OTG device on HNP port [ 1504.750413][T18730] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0124, bcdDevice=53.f5 [ 1504.750440][T18730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.750461][T18730] usb 5-1: Product: 묇울Ḳ먍雨铍棫㄂敁创窈鬍￮ꠞԗ婱ꤏ刋魻꽭뷇뙔恣楀⸹뮃갭퓒犹꘬᫩鰶㉈꘱갨痰똹忢ᷜ璉缽뺾㍤⑉荂쁩᝻旚鞖慺矀቙厝緹红຺際僴㜔⮨ཿ内ⴷ疛微锉鬛⪈ů騑 [ 1504.750490][T18730] usb 5-1: Manufacturer: 䴠܅ꌧ葋ྱ앏䓥ꍟ徘懥醳ꍭ璬滻댢顲䣋勯୦鰷ﲮﭞ⽒氧ဠ鞵貪揯ࣞ谤酄춈ᾘ牠萸㝱芹吕㵆之⍞ꌡ౫棕࿢뗒㢈씯詎㍆徊啛芮㘁봕஼逌㭆黜κ䒰סּ䣦፵恫쁥맢堧Ϊ뭅뜥暝둷↋槭ϡ孿봧卖아迲늜塌릧饌棲틢䅴픉먗껯捯鹳틷༺ꐐ磃 [ 1504.750523][T18730] usb 5-1: SerialNumber: 甯Ҧ鬁尡㿰냠ౙ낆㎨깩靛孯ট䲜№ᣖⵒ圩骸ᚶ琢끾ꏵꙐ⎘ꬬﺌ膾됇ﱁ瞪얩첱ㅢ特셇▻䇟阜붡옼鄈㺾ꉉ袍澠讼䜄퓈䅗ﰿꂝ [ 1504.926267][ T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1505.011789][T18730] option 5-1:2.183: GSM modem (1-port) converter detected [ 1505.136164][T30212] veth0_vlan: entered promiscuous mode [ 1505.161508][T30212] veth1_vlan: entered promiscuous mode [ 1505.184973][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1505.201831][T18730] usb 5-1: USB disconnect, device number 48 [ 1505.277435][T18730] option 5-1:2.183: device disconnected [ 1505.426319][ T9] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1505.426351][ T9] usb 9-1: config 0 has no interface number 0 [ 1505.426401][ T9] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1505.429430][ T9] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1505.429461][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.429473][ T9] usb 9-1: Product: syz [ 1505.429482][ T9] usb 9-1: Manufacturer: syz [ 1505.429491][ T9] usb 9-1: SerialNumber: syz [ 1505.487034][ T9] usb 9-1: config 0 descriptor?? [ 1505.548727][T30212] veth0_macvtap: entered promiscuous mode [ 1505.571550][T30212] veth1_macvtap: entered promiscuous mode [ 1505.663789][T30212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1505.715087][T30700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.715797][T30212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1505.724443][T30700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.749080][T23959] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.749339][T23959] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.749380][T23959] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.749416][T23959] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.050797][T30700] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8279'. [ 1507.113974][ T1463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.113994][ T1463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.173494][ T9] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1508.173632][ T9] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1508.173687][ T9] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1508.173777][ T9] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1508.204916][ T9] usb 9-1: USB disconnect, device number 33 [ 1508.307070][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.307091][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.530718][ T5703] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1508.693199][ T5703] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1508.696539][ T5703] usb 5-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 1508.696570][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.696592][ T5703] usb 5-1: Product: syz [ 1508.696603][ T5703] usb 5-1: Manufacturer: Э [ 1508.696612][ T5703] usb 5-1: SerialNumber: syz [ 1508.819339][ T821] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1508.830735][T30743] netlink: 'syz.8.8294': attribute type 11 has an invalid length. [ 1508.830758][T30743] netlink: 168 bytes leftover after parsing attributes in process `syz.8.8294'. [ 1508.986881][ T5703] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1508.986930][ T5703] usb 5-1: MIDIStreaming interface descriptor not found [ 1509.001075][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1509.031887][ T821] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1509.047853][T30749] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8297'. [ 1509.058482][T30750] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8297'. [ 1509.068973][ T821] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1509.069009][ T821] usb 7-1: can't read configurations, error -61 [ 1509.197847][ T5703] usb 5-1: USB disconnect, device number 49 [ 1509.213515][ T821] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1509.375161][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1509.383872][ T821] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1509.395243][ T821] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1509.395282][ T821] usb 7-1: can't read configurations, error -61 [ 1509.395655][ T821] usb usb7-port1: attempt power cycle [ 1509.475324][T29023] udevd[29023]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1509.611550][T30764] comedi comedi2: pcl711: I/O port conflict (0x100,16) [ 1509.611613][T30764] FAULT_INJECTION: forcing a failure. [ 1509.611613][T30764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.611643][T30764] CPU: 1 UID: 0 PID: 30764 Comm: syz.4.8302 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1509.611664][T30764] Tainted: [L]=SOFTLOCKUP [ 1509.611668][T30764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1509.611676][T30764] Call Trace: [ 1509.611681][T30764] [ 1509.611687][T30764] dump_stack_lvl+0xe8/0x150 [ 1509.611715][T30764] should_fail_ex+0x46b/0x600 [ 1509.611747][T30764] _copy_from_user+0x2d/0xb0 [ 1509.611778][T30764] kstrtouint_from_user+0xd6/0x180 [ 1509.611806][T30764] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1509.611873][T30764] proc_fail_nth_write+0x8e/0x210 [ 1509.611898][T30764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1509.611916][T30764] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1509.611931][T30764] vfs_write+0x2a3/0xba0 [ 1509.611957][T30764] ? __pfx_vfs_write+0x10/0x10 [ 1509.611987][T30764] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1509.612018][T30764] ? lockdep_hardirqs_on+0x7a/0x110 [ 1509.612049][T30764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1509.612079][T30764] ? mutex_lock_nested+0x152/0x1d0 [ 1509.612103][T30764] ? fdget_pos+0x252/0x320 [ 1509.612122][T30764] ksys_write+0x156/0x270 [ 1509.612139][T30764] ? __pfx_ksys_write+0x10/0x10 [ 1509.612155][T30764] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1509.612178][T30764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.612191][T30764] do_syscall_64+0x15f/0xf80 [ 1509.612202][T30764] ? trace_irq_disable+0x3b/0x140 [ 1509.612219][T30764] ? clear_bhb_loop+0x40/0x90 [ 1509.612233][T30764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.612246][T30764] RIP: 0033:0x7f1fff2fd68e [ 1509.612259][T30764] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1509.612271][T30764] RSP: 002b:00007f1ffd58dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1509.612285][T30764] RAX: ffffffffffffffda RBX: 00007f1ffd58e6c0 RCX: 00007f1fff2fd68e [ 1509.612294][T30764] RDX: 0000000000000001 RSI: 00007f1ffd58e0a0 RDI: 000000000000000b [ 1509.612302][T30764] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.612311][T30764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.612321][T30764] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1509.612338][T30764] [ 1509.685160][T18730] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1509.760134][ T821] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1509.782305][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1509.784655][ T821] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1509.786609][ T821] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1509.786643][ T821] usb 7-1: can't read configurations, error -61 [ 1509.814320][T30768] FAULT_INJECTION: forcing a failure. [ 1509.814320][T30768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.814357][T30768] CPU: 1 UID: 0 PID: 30768 Comm: syz.4.8304 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1509.814385][T30768] Tainted: [L]=SOFTLOCKUP [ 1509.814393][T30768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1509.814405][T30768] Call Trace: [ 1509.814413][T30768] [ 1509.814422][T30768] dump_stack_lvl+0xe8/0x150 [ 1509.814451][T30768] should_fail_ex+0x46b/0x600 [ 1509.814483][T30768] _copy_from_user+0x2d/0xb0 [ 1509.814514][T30768] video_usercopy+0x36f/0x1450 [ 1509.814550][T30768] ? __pfx___video_do_ioctl+0x10/0x10 [ 1509.814581][T30768] ? __pfx_video_usercopy+0x10/0x10 [ 1509.814618][T30768] ? __fget_files+0x2a/0x420 [ 1509.814645][T30768] ? __fget_files+0x2a/0x420 [ 1509.814667][T30768] ? __fget_files+0x3a6/0x420 [ 1509.814693][T30768] v4l2_ioctl+0x190/0x1e0 [ 1509.814720][T30768] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1509.814751][T30768] __se_sys_ioctl+0xff/0x170 [ 1509.814779][T30768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.814826][T30768] do_syscall_64+0x15f/0xf80 [ 1509.814846][T30768] ? trace_irq_disable+0x3b/0x140 [ 1509.814874][T30768] ? clear_bhb_loop+0x40/0x90 [ 1509.814899][T30768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.814919][T30768] RIP: 0033:0x7f1fff33ce59 [ 1509.814938][T30768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.814955][T30768] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.814977][T30768] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1509.814993][T30768] RDX: 0000200000000380 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1509.815007][T30768] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.815020][T30768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.815033][T30768] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1509.815064][T30768] [ 1509.890485][T18730] usb 9-1: Using ep0 maxpacket: 16 [ 1509.893273][T18730] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1509.894978][T18730] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1509.931038][ T821] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1509.934463][T18730] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1509.934491][T18730] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.934513][T18730] usb 9-1: Product: syz [ 1509.934529][T18730] usb 9-1: Manufacturer: syz [ 1509.934544][T18730] usb 9-1: SerialNumber: syz [ 1509.955132][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1509.958537][ T821] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1509.961391][ T821] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1509.961426][ T821] usb 7-1: can't read configurations, error -61 [ 1509.962792][ T821] usb usb7-port1: unable to enumerate USB device [ 1510.195853][T18730] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1510.196315][T18730] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1510.602898][T18730] usb 9-1: 2:1 : can't get Cluster Descriptor [ 1510.727251][T30786] FAULT_INJECTION: forcing a failure. [ 1510.727251][T30786] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1510.727276][T30786] CPU: 0 UID: 0 PID: 30786 Comm: syz.4.8313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.727293][T30786] Tainted: [L]=SOFTLOCKUP [ 1510.727298][T30786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1510.727306][T30786] Call Trace: [ 1510.727311][T30786] [ 1510.727316][T30786] dump_stack_lvl+0xe8/0x150 [ 1510.727335][T30786] should_fail_ex+0x46b/0x600 [ 1510.727354][T30786] prepare_alloc_pages+0x22a/0x6b0 [ 1510.727375][T30786] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1510.727405][T30786] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1510.727432][T30786] ? __alloc_frozen_pages_noprof+0x1de/0x380 [ 1510.727451][T30786] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1510.727471][T30786] ? __pfx_policy_nodemask+0x10/0x10 [ 1510.727492][T30786] __alloc_pages_noprof+0x10/0x100 [ 1510.727510][T30786] alloc_pages_bulk_noprof+0x67e/0x890 [ 1510.727527][T30786] ? alloc_pages_mpol+0x2ae/0x380 [ 1510.727546][T30786] ? alloc_pages_noprof+0x161/0x2f0 [ 1510.727566][T30786] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1510.727581][T30786] ? rt_spin_unlock+0x160/0x200 [ 1510.727599][T30786] alloc_vmap_area+0xd47/0x1480 [ 1510.727621][T30786] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1510.727641][T30786] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 1510.727669][T30786] ? __get_vm_area_node+0x171/0x350 [ 1510.727698][T30786] ? copy_process+0x89b/0x4450 [ 1510.727725][T30786] __get_vm_area_node+0x226/0x350 [ 1510.727754][T30786] __vmalloc_node_range_noprof+0x36a/0x1750 [ 1510.727779][T30786] ? copy_process+0x89b/0x4450 [ 1510.727795][T30786] ? percpu_ref_get_many+0x19/0x140 [ 1510.727827][T30786] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1510.727845][T30786] ? rcu_is_watching+0x15/0xb0 [ 1510.727859][T30786] ? memcpy_and_pad+0x48/0x80 [ 1510.727876][T30786] __vmalloc_node_noprof+0xc2/0x100 [ 1510.727891][T30786] ? copy_process+0x89b/0x4450 [ 1510.727910][T30786] ? copy_process+0x89b/0x4450 [ 1510.727939][T30786] dup_task_struct+0x298/0x840 [ 1510.727963][T30786] ? rt_spin_unlock+0x160/0x200 [ 1510.727990][T30786] copy_process+0x89b/0x4450 [ 1510.728041][T30786] ? __pfx_copy_process+0x10/0x10 [ 1510.728080][T30786] vhost_task_create+0x1f9/0x380 [ 1510.728100][T30786] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1510.728118][T30786] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1510.728135][T30786] ? __pfx_vhost_task_create+0x10/0x10 [ 1510.728152][T30786] ? __pfx_vhost_task_fn+0x10/0x10 [ 1510.728167][T30786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1510.728185][T30786] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.728209][T30786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.728227][T30786] ? mutex_lock_nested+0x152/0x1d0 [ 1510.728241][T30786] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 1510.728260][T30786] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1510.728279][T30786] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1510.728300][T30786] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1510.728315][T30786] ? do_raw_spin_lock+0x12b/0x2f0 [ 1510.728338][T30786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1510.728356][T30786] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.728373][T30786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.728390][T30786] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1510.728408][T30786] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1510.728424][T30786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1510.728441][T30786] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.728458][T30786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.728476][T30786] ? rt_write_unlock+0x190/0x230 [ 1510.728492][T30786] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1510.728512][T30786] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.728538][T30786] ? __fget_files+0x2a/0x420 [ 1510.728554][T30786] ? __fget_files+0x2a/0x420 [ 1510.728567][T30786] ? __fget_files+0x3a6/0x420 [ 1510.728580][T30786] ? __fget_files+0x2a/0x420 [ 1510.728595][T30786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1510.728608][T30786] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.728625][T30786] __se_sys_ioctl+0xff/0x170 [ 1510.728642][T30786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.728655][T30786] do_syscall_64+0x15f/0xf80 [ 1510.728667][T30786] ? trace_irq_disable+0x3b/0x140 [ 1510.728683][T30786] ? clear_bhb_loop+0x40/0x90 [ 1510.728706][T30786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.728718][T30786] RIP: 0033:0x7f1fff33ce59 [ 1510.728731][T30786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.728742][T30786] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.728756][T30786] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1510.728766][T30786] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1510.728773][T30786] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.728782][T30786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.728789][T30786] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1510.728807][T30786] [ 1510.728894][T30786] syz.4.8313: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1510.728934][T30786] CPU: 0 UID: 0 PID: 30786 Comm: syz.4.8313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.728950][T30786] Tainted: [L]=SOFTLOCKUP [ 1510.728955][T30786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1510.728963][T30786] Call Trace: [ 1510.728968][T30786] [ 1510.728972][T30786] dump_stack_lvl+0xe8/0x150 [ 1510.728989][T30786] warn_alloc+0x24c/0x270 [ 1510.729005][T30786] ? kasan_quarantine_put+0xbb/0x1f0 [ 1510.729022][T30786] ? __pfx_warn_alloc+0x10/0x10 [ 1510.729039][T30786] ? __get_vm_area_node+0x23f/0x350 [ 1510.729053][T30786] ? __get_vm_area_node+0x171/0x350 [ 1510.729068][T30786] ? copy_process+0x89b/0x4450 [ 1510.729084][T30786] ? __get_vm_area_node+0x23f/0x350 [ 1510.729103][T30786] __vmalloc_node_range_noprof+0x38f/0x1750 [ 1510.729118][T30786] ? percpu_ref_get_many+0x19/0x140 [ 1510.729150][T30786] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1510.729168][T30786] ? rcu_is_watching+0x15/0xb0 [ 1510.729182][T30786] ? memcpy_and_pad+0x48/0x80 [ 1510.729200][T30786] __vmalloc_node_noprof+0xc2/0x100 [ 1510.729216][T30786] ? copy_process+0x89b/0x4450 [ 1510.729230][T30786] ? copy_process+0x89b/0x4450 [ 1510.729247][T30786] dup_task_struct+0x298/0x840 [ 1510.729263][T30786] ? rt_spin_unlock+0x160/0x200 [ 1510.729279][T30786] copy_process+0x89b/0x4450 [ 1510.729310][T30786] ? __pfx_copy_process+0x10/0x10 [ 1510.729333][T30786] vhost_task_create+0x1f9/0x380 [ 1510.729345][T30786] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1510.729362][T30786] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1510.729379][T30786] ? __pfx_vhost_task_create+0x10/0x10 [ 1510.729395][T30786] ? __pfx_vhost_task_fn+0x10/0x10 [ 1510.729410][T30786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1510.729427][T30786] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.729444][T30786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.729462][T30786] ? mutex_lock_nested+0x152/0x1d0 [ 1510.729484][T30786] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 1510.729512][T30786] kvm_mmu_post_init_vm+0x147/0x2d0 [ 1510.729531][T30786] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 1510.729552][T30786] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1510.729567][T30786] ? do_raw_spin_lock+0x12b/0x2f0 [ 1510.729589][T30786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1510.729607][T30786] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.729624][T30786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.729642][T30786] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1510.729660][T30786] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1510.729675][T30786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1510.729698][T30786] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.729716][T30786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1510.729733][T30786] ? rt_write_unlock+0x190/0x230 [ 1510.729750][T30786] kvm_vcpu_ioctl+0xa65/0xfe0 [ 1510.729770][T30786] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.729796][T30786] ? __fget_files+0x2a/0x420 [ 1510.729812][T30786] ? __fget_files+0x2a/0x420 [ 1510.729825][T30786] ? __fget_files+0x3a6/0x420 [ 1510.729838][T30786] ? __fget_files+0x2a/0x420 [ 1510.729853][T30786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1510.729866][T30786] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1510.729882][T30786] __se_sys_ioctl+0xff/0x170 [ 1510.729899][T30786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.729912][T30786] do_syscall_64+0x15f/0xf80 [ 1510.729922][T30786] ? trace_irq_disable+0x3b/0x140 [ 1510.729939][T30786] ? clear_bhb_loop+0x40/0x90 [ 1510.729953][T30786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.729965][T30786] RIP: 0033:0x7f1fff33ce59 [ 1510.729976][T30786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.729986][T30786] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.729998][T30786] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1510.730007][T30786] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1510.730015][T30786] RBP: 00007f1ffd58e090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.730022][T30786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.730030][T30786] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1510.730047][T30786] [ 1510.730053][T30786] Mem-Info: [ 1510.730059][T30786] active_anon:14584 inactive_anon:0 isolated_anon:0 [ 1510.730059][T30786] active_file:0 inactive_file:59030 isolated_file:0 [ 1510.730059][T30786] unevictable:768 dirty:64 writeback:0 [ 1510.730059][T30786] slab_reclaimable:12927 slab_unreclaimable:106630 [ 1510.730059][T30786] mapped:33002 shmem:1933 pagetables:1792 [ 1510.730059][T30786] sec_pagetables:0 bounce:0 [ 1510.730059][T30786] kernel_misc_reclaimable:0 [ 1510.730059][T30786] free:1285232 free_pcp:1165 free_cma:0 [ 1510.730088][T30786] Node 0 active_anon:58336kB inactive_anon:0kB active_file:0kB inactive_file:235888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131980kB dirty:256kB writeback:0kB shmem:6196kB kernel_stack:14428kB pagetables:7048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1510.730116][T30786] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1510.730141][T30786] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.730173][T30786] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1510.730193][T30786] Node 0 DMA32 free:1186752kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58336kB inactive_anon:0kB active_file:0kB inactive_file:235888kB unevictable:1536kB writepending:256kB zspages:0kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:4648kB local_pcp:2280kB free_cma:0kB [ 1510.730226][T30786] lowmem_reserve[]: 0 0 0 0 0 [ 1510.730245][T30786] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:896kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1510.730275][T30786] lowmem_reserve[]: 0 0 0 0 0 [ 1510.730293][T30786] Node 1 Normal free:3938816kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:232kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.730326][T30786] lowmem_reserve[]: 0 0 0 0 0 [ 1510.730344][T30786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1510.730408][T30786] Node 0 DMA32: 163*4kB (ME) 1269*8kB (UME) 724*16kB (UME) 963*32kB (UME) 385*64kB (UME) 225*128kB (UME) 161*256kB (UME) 63*512kB (UME) 33*1024kB (ME) 17*2048kB (UME) 229*4096kB (UM) = 1186708kB [ 1510.730494][T30786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1510.730548][T30786] Node 1 Normal: 6*4kB (UM) 13*8kB (UM) 14*16kB (UM) 11*32kB (UM) 7*64kB (UM) 9*128kB (UM) 1*256kB (M) 2*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 959*4096kB (M) = 3938816kB [ 1510.730631][T30786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.730641][T30786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1510.730650][T30786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1510.730660][T30786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1510.730669][T30786] 60959 total pagecache pages [ 1510.730674][T30786] 0 pages in swap cache [ 1510.730679][T30786] Free swap = 124996kB [ 1510.730684][T30786] Total swap = 124996kB [ 1510.730694][T30786] 2097051 pages RAM [ 1510.730699][T30786] 0 pages HighMem/MovableOnly [ 1510.730704][T30786] 427025 pages reserved [ 1510.730708][T30786] 0 pages cma reserved [ 1510.894963][ T821] usb 9-1: USB disconnect, device number 34 [ 1511.373990][T17581] Bluetooth: hci0: command 0x0405 tx timeout [ 1511.825827][ T821] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1511.994013][ T821] usb 9-1: Using ep0 maxpacket: 16 [ 1511.995948][ T821] usb 9-1: config index 0 descriptor too short (expected 4495, got 71) [ 1511.995975][ T821] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1511.995996][ T821] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.996015][ T821] usb 9-1: config 0 has no interface number 0 [ 1512.006987][ T821] usb 9-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1512.007016][ T821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.007037][ T821] usb 9-1: Product: syz [ 1512.007052][ T821] usb 9-1: Manufacturer: syz [ 1512.007068][ T821] usb 9-1: SerialNumber: syz [ 1512.012610][ T821] usb 9-1: config 0 descriptor?? [ 1512.030596][ T821] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1512.030719][ T821] uvcvideo 9-1:0.105: No valid video chain found. [ 1512.268671][T30802] netlink: 'syz.8.8320': attribute type 6 has an invalid length. [ 1512.273048][ T821] usb 9-1: USB disconnect, device number 35 [ 1512.321507][T26940] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1512.475088][T26940] usb 7-1: Using ep0 maxpacket: 32 [ 1512.479013][T26940] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1512.479040][T26940] usb 7-1: config 0 has no interface number 0 [ 1512.500639][T26940] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1512.500670][T26940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.500692][T26940] usb 7-1: Product: syz [ 1512.500707][T26940] usb 7-1: Manufacturer: syz [ 1512.500721][T26940] usb 7-1: SerialNumber: syz [ 1512.511640][T26940] usb 7-1: config 0 descriptor?? [ 1512.552873][T26940] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1512.801085][T26940] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1513.073056][T26940] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1513.189690][T30810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1513.297135][T30844] bond0: (slave erspan0): Opening slave failed [ 1513.326208][T30842] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1513.422946][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1513.994383][T30851] comedi comedi2: pcl711: I/O base address not correctly aligned [ 1514.372903][T19196] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1514.538467][T19196] usb 9-1: Using ep0 maxpacket: 32 [ 1514.550938][T19196] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 1514.550964][T19196] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.550976][T19196] usb 9-1: config 0 has no interface number 0 [ 1514.551024][T19196] usb 9-1: config 0 interface 196 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1514.551048][T19196] usb 9-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.551076][T19196] usb 9-1: config 0 interface 196 has no altsetting 0 [ 1514.558432][T19196] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1514.558466][T19196] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.558488][T19196] usb 9-1: Product: syz [ 1514.558503][T19196] usb 9-1: Manufacturer: syz [ 1514.558519][T19196] usb 9-1: SerialNumber: syz [ 1514.569286][T19196] usb 9-1: config 0 descriptor?? [ 1515.039684][T19196] ipheth 9-1:0.196: Unable to find endpoints [ 1515.055789][T19196] usb 9-1: USB disconnect, device number 36 [ 1515.280987][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1515.283448][T19196] usb 7-1: USB disconnect, device number 6 [ 1515.315001][T19196] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1515.353036][T19196] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1515.377061][T19196] quatech2 7-1:0.51: device disconnected [ 1515.488955][T30900] FAULT_INJECTION: forcing a failure. [ 1515.488955][T30900] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.488990][T30900] CPU: 1 UID: 0 PID: 30900 Comm: syz.4.8363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1515.489016][T30900] Tainted: [L]=SOFTLOCKUP [ 1515.489024][T30900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1515.489036][T30900] Call Trace: [ 1515.489044][T30900] [ 1515.489052][T30900] dump_stack_lvl+0xe8/0x150 [ 1515.489080][T30900] should_fail_ex+0x46b/0x600 [ 1515.489110][T30900] should_failslab+0xa8/0x100 [ 1515.489141][T30900] kmem_cache_alloc_noprof+0x87/0x680 [ 1515.489169][T30900] ? skb_clone+0x212/0x3a0 [ 1515.489206][T30900] skb_clone+0x212/0x3a0 [ 1515.489239][T30900] __netlink_deliver_tap+0x424/0x8b0 [ 1515.489277][T30900] ? netlink_deliver_tap+0x2e/0x1b0 [ 1515.489306][T30900] netlink_deliver_tap+0x19c/0x1b0 [ 1515.489335][T30900] netlink_dump+0x8ed/0xe10 [ 1515.489374][T30900] ? __pfx_netlink_dump+0x10/0x10 [ 1515.489413][T30900] ? netlink_recvmsg+0x5d6/0xa50 [ 1515.489439][T30900] ? kmem_cache_free+0x187/0x6c0 [ 1515.489467][T30900] ? netlink_recvmsg+0x5d6/0xa50 [ 1515.489500][T30900] netlink_recvmsg+0x690/0xa50 [ 1515.489537][T30900] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1515.489569][T30900] ? __pfx_aa_sk_perm+0x10/0x10 [ 1515.489602][T30900] ? aa_sock_msg_perm+0x122/0x200 [ 1515.489631][T30900] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1515.489660][T30900] sock_recvmsg_nosec+0x10c/0x140 [ 1515.489688][T30900] ____sys_recvmsg+0x23d/0x4f0 [ 1515.489728][T30900] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1515.489774][T30900] ? import_iovec+0x73/0xa0 [ 1515.489814][T30900] ___sys_recvmsg+0x215/0x590 [ 1515.489850][T30900] ? __pfx____sys_recvmsg+0x10/0x10 [ 1515.489885][T30900] ? __fget_files+0x2a/0x420 [ 1515.489927][T30900] ? __fget_files+0x3a6/0x420 [ 1515.489961][T30900] do_recvmmsg+0x33a/0x800 [ 1515.490000][T30900] ? __pfx_do_recvmmsg+0x10/0x10 [ 1515.490044][T30900] ? _copy_from_user+0x94/0xb0 [ 1515.490090][T30900] __x64_sys_recvmmsg+0x1b7/0x250 [ 1515.490124][T30900] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1515.490165][T30900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.490188][T30900] do_syscall_64+0x15f/0xf80 [ 1515.490208][T30900] ? trace_irq_disable+0x3b/0x140 [ 1515.490237][T30900] ? clear_bhb_loop+0x40/0x90 [ 1515.490262][T30900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.490283][T30900] RIP: 0033:0x7f1fff33ce59 [ 1515.490304][T30900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.490322][T30900] RSP: 002b:00007f1ffd58e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1515.490344][T30900] RAX: ffffffffffffffda RBX: 00007f1fff5b5fa0 RCX: 00007f1fff33ce59 [ 1515.490360][T30900] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 1515.490375][T30900] RBP: 00007f1ffd58e090 R08: 0000200000003700 R09: 0000000000000000 [ 1515.490389][T30900] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 1515.490403][T30900] R13: 00007f1fff5b6038 R14: 00007f1fff5b5fa0 R15: 00007ffe94740ad8 [ 1515.490436][T30900] [ 1515.963062][T19196] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1516.123886][T19196] usb 7-1: Using ep0 maxpacket: 16 [ 1516.126191][T19196] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.136676][T19196] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1516.136706][T19196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.136727][T19196] usb 7-1: Product: syz [ 1516.136743][T19196] usb 7-1: Manufacturer: syz [ 1516.136758][T19196] usb 7-1: SerialNumber: syz [ 1516.149920][T19196] usb 7-1: config 0 descriptor?? [ 1516.180199][T19196] pegasus_notetaker 7-1:0.0: Invalid number of endpoints [ 1516.180238][T19196] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1516.319109][T30920] input: syz0 as /devices/virtual/input/input94 [ 1516.766505][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8373'. [ 1516.864240][ T821] usb 7-1: USB disconnect, device number 7 [ 1516.901875][T19196] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1517.076429][T19196] usb 9-1: Using ep0 maxpacket: 16 [ 1517.078350][T19196] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1517.078398][T19196] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1517.078415][T19196] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.201272][T19196] usb 9-1: config 0 descriptor?? [ 1517.698946][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.698972][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.698990][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699007][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699024][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699041][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699058][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699075][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699114][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699131][T19196] logitech 0003:046D:C29C.003C: unknown main item tag 0x0 [ 1517.699500][T19196] logitech 0003:046D:C29C.003C: reserved main item tag 0xd [ 1517.699517][T19196] logitech 0003:046D:C29C.003C: unexpected long global item [ 1517.699900][T19196] logitech 0003:046D:C29C.003C: parse failed [ 1517.700001][T19196] logitech 0003:046D:C29C.003C: probe with driver logitech failed with error -22 [ 1517.953485][ T821] usb 9-1: USB disconnect, device number 37 [ 1520.182973][T17581] Bluetooth: hci2: command 0x0406 tx timeout [ 1520.183148][ T5703] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1520.183167][ T5703] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1523.602624][T17581] Bluetooth: hci4: command 0x0406 tx timeout [ 1523.602809][ T5703] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1523.602827][ T5703] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1526.511486][ T5703] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1526.511517][ T5703] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1526.511716][ C1] ------------[ cut here ]------------ [ 1526.511725][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 1526.511757][ C1] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd67/0x1010, CPU#1: ktimers/1/30 [ 1526.511791][ C1] Modules linked in: [ 1526.511809][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1526.511830][ C1] Tainted: [L]=SOFTLOCKUP [ 1526.511836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1526.511845][ C1] RIP: 0010:__queue_work+0xd87/0x1010 [ 1526.511869][ C1] Code: 01 00 00 4c 8d 35 19 1a 22 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 43 23 a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 1526.511885][ C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010046 [ 1526.511901][ C1] RAX: 1ffff11008506153 RBX: 0000000000000008 RCX: ffff88801dec9ec0 [ 1526.511916][ C1] RDX: ffff88801b6f1968 RSI: ffffffff8a25cdb0 RDI: ffffffff8faface0 [ 1526.511931][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1526.511945][ C1] R10: dffffc0000000000 R11: ffffffff818d9940 R12: dffffc0000000000 [ 1526.511961][ C1] R13: ffff888042830a98 R14: ffffffff8faface0 R15: ffff88801b6f1968 [ 1526.511976][ C1] FS: 0000000000000000(0000) GS:ffff888125dc7000(0000) knlGS:0000000000000000 [ 1526.511993][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1526.512007][ C1] CR2: 00007ff29ca1fe9c CR3: 000000000dfb6000 CR4: 00000000003526f0 [ 1526.512025][ C1] Call Trace: [ 1526.512034][ C1] [ 1526.512047][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1526.512086][ C1] call_timer_fn+0x192/0x5e0 [ 1526.512110][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1526.512138][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1526.512161][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1526.512194][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1526.512221][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1526.512252][ C1] __run_timer_base+0x764/0x9f0 [ 1526.512277][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1526.512311][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1526.512339][ C1] run_timer_softirq+0xb7/0x170 [ 1526.512355][ C1] handle_softirqs+0x1de/0x6d0 [ 1526.512382][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1526.512411][ C1] run_ktimerd+0x69/0x100 [ 1526.512433][ C1] smpboot_thread_fn+0x541/0xa50 [ 1526.512454][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1526.512481][ C1] kthread+0x388/0x470 [ 1526.512497][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1526.512516][ C1] ? __pfx_kthread+0x10/0x10 [ 1526.512533][ C1] ret_from_fork+0x514/0xb70 [ 1526.512553][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1526.512570][ C1] ? __switch_to+0xc79/0x1410 [ 1526.512595][ C1] ? __pfx_kthread+0x10/0x10 [ 1526.512611][ C1] ret_from_fork_asm+0x1a/0x30 [ 1526.512643][ C1] [ 1526.512660][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1526.512674][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1526.512694][ C1] Tainted: [L]=SOFTLOCKUP [ 1526.512700][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1526.512708][ C1] Call Trace: [ 1526.512715][ C1] [ 1526.512721][ C1] vpanic+0x56c/0xa60 [ 1526.512743][ C1] ? __pfx__printk+0x10/0x10 [ 1526.512759][ C1] ? __pfx_vpanic+0x10/0x10 [ 1526.512778][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1526.512793][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1526.512815][ C1] panic+0xc5/0xd0 [ 1526.512835][ C1] ? __pfx_panic+0x10/0x10 [ 1526.512862][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1526.512885][ C1] __warn+0x315/0x4c0 [ 1526.512906][ C1] ? __queue_work+0xd67/0x1010 [ 1526.512927][ C1] ? __queue_work+0xd67/0x1010 [ 1526.512948][ C1] __report_bug+0x29a/0x540 [ 1526.512969][ C1] ? __queue_work+0xd67/0x1010 [ 1526.512989][ C1] ? __pfx___report_bug+0x10/0x10 [ 1526.513004][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1526.513029][ C1] ? register_lock_class+0x31/0x2e0 [ 1526.513048][ C1] ? __lock_acquire+0x6b5/0x2d10 [ 1526.513066][ C1] report_bug_entry+0x19a/0x290 [ 1526.513082][ C1] ? __queue_work+0xd87/0x1010 [ 1526.513100][ C1] ? __queue_work+0xd8c/0x1010 [ 1526.513119][ C1] handle_bug+0xce/0x200 [ 1526.513137][ C1] exc_invalid_op+0x1a/0x50 [ 1526.513153][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1526.513169][ C1] RIP: 0010:__queue_work+0xd87/0x1010 [ 1526.513190][ C1] Code: 01 00 00 4c 8d 35 19 1a 22 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 43 23 a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 1526.513203][ C1] RSP: 0018:ffffc90000a4f9b0 EFLAGS: 00010046 [ 1526.513216][ C1] RAX: 1ffff11008506153 RBX: 0000000000000008 RCX: ffff88801dec9ec0 [ 1526.513227][ C1] RDX: ffff88801b6f1968 RSI: ffffffff8a25cdb0 RDI: ffffffff8faface0 [ 1526.513239][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1526.513249][ C1] R10: dffffc0000000000 R11: ffffffff818d9940 R12: dffffc0000000000 [ 1526.513260][ C1] R13: ffff888042830a98 R14: ffffffff8faface0 R15: ffff88801b6f1968 [ 1526.513276][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1526.513299][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1526.513326][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1526.513353][ C1] call_timer_fn+0x192/0x5e0 [ 1526.513370][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1526.513397][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1526.513413][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1526.513437][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1526.513457][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1526.513480][ C1] __run_timer_base+0x764/0x9f0 [ 1526.513507][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1526.513534][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1526.513562][ C1] run_timer_softirq+0xb7/0x170 [ 1526.513578][ C1] handle_softirqs+0x1de/0x6d0 [ 1526.513605][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1526.513626][ C1] run_ktimerd+0x69/0x100 [ 1526.513648][ C1] smpboot_thread_fn+0x541/0xa50 [ 1526.513671][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1526.513700][ C1] kthread+0x388/0x470 [ 1526.513716][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1526.513737][ C1] ? __pfx_kthread+0x10/0x10 [ 1526.513755][ C1] ret_from_fork+0x514/0xb70 [ 1526.513776][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1526.513794][ C1] ? __switch_to+0xc79/0x1410 [ 1526.513820][ C1] ? __pfx_kthread+0x10/0x10 [ 1526.513837][ C1] ret_from_fork_asm+0x1a/0x30 [ 1526.513869][ C1] [ 1526.515695][ C1] Kernel Offset: disabled