last executing test programs: 17m13.491335039s ago: executing program 2 (id=77): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16, @ANYBLOB="0100000000003fc14d"], 0x134}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 17m13.200128422s ago: executing program 2 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x28a0, 0x0) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1400) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file1\x00') 17m13.056139027s ago: executing program 2 (id=81): socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0xffffffc0}], 0x1, 0x140, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r2, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40) 17m12.855821171s ago: executing program 2 (id=83): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000015000/0x1000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f", 0xdd}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32deb3a229be42837b0c57e0c60c042d83c7bf866828342f3e6e1bdef6", 0xe3}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce", 0x60}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0xfffffffffffffffe, 0x2, 0x3, 0x1, 0x6, 0x7ffffffc}) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4f, 0x0, 0x8000000000000001, 0x4, 0x10000, 0x3, 0x4002004c3, 0x10000, 0x5, 0x0, 0x40000000800001, 0xfffffffffffffffc, 0x100000401, 0xfffffffffffffffd, 0x9, 0x4010000008d], 0xddcd0000, 0x100000}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$cont(0x21, r5, 0x80000001, 0x4) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="f78d9ca38fff48f3be52163448412ba8d5c598fd04069053a701c17dbbe3e2c356ce929e3e65408b226a6988f7", 0x2d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb5172691dd13c8b77c0331e96a07b360fb", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000280)}], 0x1, 0x8800) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r8) 17m12.184024335s ago: executing program 2 (id=92): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b000000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000089000280dbc9a1269526b14d52ded9674c25f2eb8048dee770ab9906727db36922d862b76f18f6421423dfc6218aa2d86448d6f7dd073330f3807a3d4a47faae3463b78077bf9ff57303d2d35c09a97ad2aa59799e865f865a9723e6f3669765fdc1f8648e874904c66732f65f6d05b9ef84072ffa1044f4b462fd2800"/176], 0xb0}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 17m11.804905609s ago: executing program 2 (id=96): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32deb3a229be42837b0c57e0c60c042d83c7bf866828342f3e6e1bdef6", 0xe3}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d19", 0xab}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x6, {0x101, 0xb, 0x0, {0x4, 0x0, 0x100000000bdd6, 0x403, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0xa000, 0x8, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc879}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xee01) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00028008"], 0x34}, 0x1, 0x0, 0x0, 0x24040015}, 0xc000) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17m11.502600443s ago: executing program 32 (id=96): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32deb3a229be42837b0c57e0c60c042d83c7bf866828342f3e6e1bdef6", 0xe3}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d19", 0xab}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="bdf25e6f0d10668122f289a6bf3cc1c9476de5625a0271b8d988a9f5d5e0081242133ed6d905168ffd12a79b9d0245efce333b69021258af0b7f8fcc7b0ce9b48ff73dc5ebaa2a607033a6220a60c4e1348d92f8d0e9c79504518133021220077e1e0b4e0c8d373c779e03dd36c1f9667c8ee6aa56c2b97e9cded8b1738fea65774c4c5dedf7be75405218742aa9f5348129b9893ca01e43a8f648e689adb9776f9008596ca8a749e94b7d7b906945390e6c68fefd7364e749c35484b0a7b4569e8d5bf6fdc06c3ed56c599d61a21ed03ec5b61f74d9a7400e9a0999404ac63d7849d3f1bc1e777d2c180220c4227c492bd3ee3f854e846baf93fa9759ed96fb69c9bc2fca51d1f24a68e735ba5deeb0afc2b017849a1786574a50b6818e3ee1029b2257fe2ede4b065637fcb05632587600d1090b004d4fc3dc8d3576762d06a964bcc7d31f94e09ecec7a999717dd639a3db03df310a0a4f26134d982e80f00d3f1f20693cf36115046f52734d0bafab657131682c6c415168b87cabb42a125fdd6cb8a545b717e1fc301c0798515f201f7ff7bfd35db7605f4ef97a91a6da5d5f88d1455edce0e86ea60901ea22aee508a567dfcf0f3f630d4e8be3a312a5d997bbb8fcc319f32c45fc62b09778bcf810b48a863c1a0ffeac68af383d3bfb60ad9f69f50bb11557bb2e966bd231c49fee49ec8c2174fd3cfd245c56a1c982a1f818a50713df546cf9d01b70e165d371ce0d2ba41c6758c46da7eb8078d2c7f2a2462a32e37129dded20ec3f6169a33d136765d9ae28addf3fbecb633aee9a7ded0ec160b5ce35c92b855ba8362205017afaf9e45758d5e256e35452f6d03ac89712e81445b32dfdd8cdd28a5af8c75df2a27922dbf5cceabff945327b5f4ec2e93c4b367ebc6a54f903567ff1a3f9469a466ecbfef5c39671c9ac29f14de1575de46ba2e933cdeb068259593e73da67f05858ba0cf3e0316aa1a91c21f1a1ccf157b2f4160b86dd67ea854ddd098f34c0421a7ab541b6d105f76ff19afdef08456da28244b25b61162093592e72bc251936db09134f590ca0a1b844244aa054a748b695346a5d49b979b4c69cdad7ef09f615196bfa2918c07e81c325370461cdc50aeb105b3cc51e0a098d9e49118da9c1bb04da247fc4e7876136059fe1ed10042383502b54c6e26082eddf83196d6b2c9410e4217dc8c4c2de483e328ccfbea9c54ab549a23ec98c9db241a67ffd79af97822bcc0a784e8f4e61c83cfb637f4aa1a80027fb2322bca99b65d4d64e93f3484c83ce7f46e12f7accacf74c5d0362198d60de93925e1a631ea6c786843261c49cadf482f3ff541b88d92f801a8610c195ad6e09e4a1bc15f727d09d063e23bfde60585def96e3963978f0686ca079e86032cd23b30222ff0843fa1d0e883d2d75dffc12bab0109b25ff08cf1caeeb7c39e5f438c7b2a9a2a366d32fa9fa0e2885a473ce6b97455d58d941b46faac1f2d8335f276f14232e193be1301416584c47062059e92ece4347c89aa9bf2c12b7c7b5ef7b3bf27ef23367ca3fd037fd9145f84e6852ea3eb624b7622411851134a7ef388e7799df33bfae12a35bdde94de1b10e0e0fe6b40d158409992244a4e27af355aaf7983aceb0ca6c790ecbe5234fd0ad063ae2ee1fe48aff51c35c5553fd1ab998abcb3dd7b0efb2f9c658fc4671e536c0ea75b36d59efe1901e971a750a4fdaf15bc0d1de7681a18c73bd00329d8a7a59c8dde6ee9156759386428a593d9bcbac57f2ec6387dc713703b30e44e655f663947caf4bf15624517bf3f4df16a8ade7193d0a69d998d970c07406a5892dc625a2695bc5c495079f2100ac033f912b5135551c923b61687574b1c43ca81ae9312d668415c8162aea7582b8db90f96181700ac22771b985c0c3f6081cca160efb1bdcabc2177d081ee618ed92c5af569721cc9f0453fe8e512d089a2aa0a219504ff51ba258f6b3737120e7d55e3ceed42c1aef42ac5e969642e3ffa8bc9e7319927ff971d450ac5a8a12ef68747b2574e89a64dcff67a36cbcf0f166371f98825c6eaa8516e27b81b8701d47fbbb87748a771265afff6fdf0acd2e9da1d759523feb0f33a6b27c050cbd5ea833c4859d7c84878253652dc4277a8ad6dd0b1b118e866cb90f7f29cf3a65cd9ba5c5e888c2afdfcef2b9dca883dcb7908c0a2ba0e76d5992430819f4f7d0369c53f737abc75e7f52ed95320dde44bf8b6397ef1ae719eb550a2bcad515ed99246f753d9d344f668c58c2343873b2af2dbb8d0c1c3280a5e8267a89a16eae734102bf4ed6aec57f4e29eaadb118f5407337387ec12f6629f8de94b2fefceffb735effca8865722334dd3a27c789c96c2fdc7f96d702fa5e360a460856c3559ac65dac1aae0c10712cd99e8f7c9188a43460c2e3775f27518893628cb5f2cd25985570ad101b3ba16a342885d65ea1befef80aca975a3f8428eab9999124aeafa991f68151eb7ab9bffe132c8ad1f2e0ad79e0cbc0806aa46c0c53b6f1217dcd88f197a3c6ddcb5e1ca9c278d02736ab3f81db85d3fd751c38bdd449fb3f9e52c2e067fb8761b94ccf13e4958cb1f703d327cd510089ae4d10a96328b950689efd262f43470dd47c73327c63cd882432807a65d9d21ae39b57e27c14af2b6792c6d6687526593ce97e8000eb49157553fc6fc9e4f040098b43e4308aceb1c5f87f046389b3174cf96459460927b0fff05764d398c7c5e987ec4b08259c4a41a4fd293e0106e2c522cff08f07cb4dcb7165dd6ba7358bb7d389aae1bd76957e1b69e4b65a0443fe2ca48722b3babd8df8c53b6fc1fc0537defa60e79bf6f746771d3be7def7b14a813087804fdb7523566c47041014d0e4eb8e0faa6db79dc05a54299e54b34be446a3d3b0c073e212e305a78a190034885174fe25443061447ea7fa094f104b10dacc382cb353c96e3cf4993aba3b7271ecf3828feaa2490fa03697ac6bcd841130a175d7275033da3e7c094141d2ce798e8cf25b4b9d3356c0d74563ee9b81f9b18d10bf25988ce3f81ed002095c94b2cf2c8799f4e2194b11a6f4a774ac4fbf5c78d8163e681271505c17f47e71cd03a20490241c1f144ae59b19cce564475575e0af7f41984ffa6f5f8b365a338687ad494a79317679c00d74242b4155fb0a06fc735793d66bd6f252a26278896b6df70a393a21b0a9b80056c505f7266f296bbc3587af24c06476539cd1bfe1f20f818c778fd712300feab31861b31c254211c42d9f27ff3f41f5bb170c15b3daad6dda056065b24107ab3976549a353bd6f2859d84fba3d21f4377b1c5a0aa4fd039c485d1bdd8017817cdea1b8ba5b52c30ea06ae1abb942abd1917626deb37297d3df42cc848cd01622f13ad081f9d2c96384f6b4c72d4df9541b2cb36ec119e326f625aba6436dfa5d986cc8a6a15e082e2111c26a6da1d1e387445a7fe5a9ccf05dc01d08fd1b16f768b5b3b8b464976d480f4f1a44346ca5f01f29eff48e2ad585cc32f6c00e2c045c7015cb46f70052e4935c246ebcdbc7c3d091c825f864eea2dfe25459b6456f7b52c168fd565d250514261d171d65c8e9ef6fde70ff716b7c45a24f9666462a0919ed7a1a614df711c7f5b24dda275c71fbf973ed4f8cbbba5ea15bd7e5aaad972711159b20751f5fdb91a223f39cde6a83751a06c1ad0536d387bf3ea4a3d7e5e90bc52f4d101c045d5ad32fb58e45fd2fa2f5c8aa0bb40957465b87bef7fe6b76c16c8d07ecd51edb49faa5bb0070aba2dad3ca7eea1955d939cadb75286904a02db81fceb6b6b9b16ad84d373d33e134007fcdc02d40472fbbf70b57a53b6e5df122c0f8b3d44dc045104690f2d78b8cd2d0905d5d66830cb9125fa041d0fc2f08e20f9fa70bd17815cbb50f8019048d05df1673e9c8cc83e17dc91fd74b024b2b56b41bbff26016c6638b6ecc16deb349ee392776962746d62751b5672755a845b443c85d7c53605f274f3d5c3edd6ecd15e28545d2aea4df5d5e4eb169af361159249daf53f1339c1819370ad4d3ceafa7dc6a9118a2f1e69c4db409093eca05ec1cad8d606db1c5d3b58609eda4f1e71ae62765d79501ce8de42e60cfdc08517559f9c65e8dfbd73a5f971aa96f2cd20f1763e59d3b15367e0b206e97d5f5462e81299743e1959376fcdfac93855ebac2b5235b0f03c58eeaffcea40be5a9fe6bd290deddbb28db6539a72936a1953cb4a558dc93271a54d1e05cc3f4025c0ecca369b0d25d47c3e66049045d0daf9dc9fbe2c69d217d2e6939bf6d1875cd23b73d2e921aea9eee4f1f9b036e8f5cbb0100710c1dc27d1fb37ea26634dc827bfe42d094ce9576611a6bce6b67467f983a327e9dd34896672f257b41b8bee33a041ce2e83a65fad93e1a2a06854a40fe3751997c5233d397e5ce5ea676379527ad0e298fa62cd91ef89e9876db8e0909b60ff16c4a0ba01307826bf18c242e77af8ac40c681b8ae2cbd58c4eb4e6a580bd3f57bf1ffa44a1d080426d3f8c733568ccc75a61980ec92b5b0f4cf03e3ece177954c21b90b7828c9113da0fc53f6f5c5ea8bea08e14a12b889fc705ee44d834f184532421a584bd7301c9bc822deb7e71050a8cf0cd7f96dd2fd93b9d7306bb9702af5b88b2090d2b67bd88a299704e8c556b9066e35e4c864cf1775a6ed94a9685e996c4c671cc807f7c09b45559ee079d56547179e1b1af630c4ba04717cb5e88c0caadaf57964f5197d9d98a7f5b5e622c3eb5844645c4c2408806bbb4be5778925df16518c06597b243019bdc690a4723548a658529717360d474cfb6fcf30060b320cac29b2e42ec4f390a6c7a15274099a64a8d71c4a84e86d206cd2c7ee8125b19752a18dd2eb0dc643aa6b4494760f62acf187080281ec7d0a526374f69051e6aa13d8321372bea8d9e9c7fed4d0a48257e5c7463bc0a0165acc4712aec8cdd014de0b98d0de9b0dc3cc2d40c3be3ea3edb04b18f72209da21f5900a4ef002aeb88a364ed0bb102c2e164ac4f0dff7f082c3757b7ee1cd0e3b1ad45dd77553a4462c8f84ae21f8246281a02160bcf90c00b7816f93524d4d6577c6432d97da328757c3dc06c06760c82946f9f44e909cefaad0734094d8a9076abfc79c79bdb9bcdfa13697bff6f1a219653ac96882d615fe4757b76a8235f2f5e5978cdb5c5bacf4217a56fc6416943552d6e1d6c3f2e8801322368855aed0c5302d1445cbbeb5ef970abd8b5316f0c7cb7f5bd023c619ecf6b1714705a48b67e7a5c2f15bf9c90f6ada82d36484776d20f464d22b88b5d99dc2ba812b9f38754ac71499705f83875eee065482e2fed4c5f3537449857f409c635dbb2c0565ce9f23bbb5bde3ee0bb94f3fca1b5a0d78825c80f50a839a4b3fe6439fbef4190f8ddf1012990268aa8c87b91fdd210530e0bee9c17e35ee59e519801f7fdc72e5d1b96793ff13654b8eb28c2f1a702b1c5ed694d567e70981c596d9997a3e9133e3b623ea071bbd807c86ee191f02400c53851e567f2ceea1a80506af359cdf36c3cd9963d5cf3d32c64f4f7706c78a90d55f6cf12373fac70e17aa1bb6688710eb3b62ee809de762e5093cb326ed56c57b164fd73023021a4be32ec50bbed23bac420880af3a17a5f3502c95781e6251f88b17f83a02511ca782118f1bb07fe73d50fb70043734df8c82f07e74bb4500179d3c1e33d4075aa4a873eec1a34fd09bb3747825e1d821ce6e4f6b8270b0d1123499ca176ad47613bcd02b4825ad70ec79ecd1dbb496737d5258024898dde00e62b0b594f0e830f0c8475a3638ed4c438e87b6919314f9f2b5f81b2c42a9a0269477a637edc4b06486d41e093c65bb26acc7968320713fcf9551e9c6a855dbf7d3961bda89df32fbfb67bc285a1c14692afb72fbc6587e255627fed4971e8058248a926fd586bfa25aa19dc46b3f51d402f74724abcbbea314d8127c7e92ce0adf8af38b7047b8d5269e145c2d58158d178f0d91ed03a451e3a324b7add7377675ab8a56c5395efdaabaafcb6b1348e984677353e6f77296fe7e75a5afe6d2bd1e26be62ecb84801c20a462c4481762d2be207dce9c49e656133c605b16a1b4ff683983e3ececed23fb6540f0dd89776d525f5c4e07a3f50968f35b0bf92cd65514b1759918e333637d383a1810e28a822fb20151878461ff61cca3c340cb23f9602d03c10d4b05d4f712521921148c3e249358925f87d00a351ef7917b4e817a7a1d2191e6bb026dfb8e2ba08e52f1e43346cbab51a45dd2d8bfdd252ec79a7e9203e97a576a7db467def3ac0b789a6d52015712e89bb0df0879d2868d85e2f2d2c90547dae52500db275842eca910e48f0c43fc33fbd179d39ac9aab6e0f397f8eaca95793d8c196e49b050fd9815994f700ad4d22c07756fce9a755768be74dad0589411935de2dbfd10d200da75b4a4f9e523e763034820afc8c7d02132bde03108293263f84d7ed165e587733d255e4c11fffd52f72725fd0238dcd5ff815fd22c26126aae530a7d01e60c14f4f8e701ab527b6483fe78125c5e4402ff51c721cee92e5dd6db40e28b21532a21facbaf396d163237c5cad61a05e9c0c39d1ce99152687a16104787d87b092e9037f147da8bbc0c6456bbe7a2006742534010f507dca79ce8b59097e0cbbe312f48fc0a3ea84e7a484b266ee766a85849b464d93f872acae4af0ff5c7ea06dfb26a66674fba6e8a9481b49a41bed7becbfa680681834b1a3d7961d69d592fdb403d1566770e0173cbf8fa14956e0539a5a4eeae62cb6a7d1ec9e9d9a36b30b511a615395b470fccab197139818a30224c4f053d35e8d9897141c8a94012f8254f325b8ddec5c0e638c09e2cef80cb4e16bd9aea09b86bb48548b012145ef88932040d7cc59cb0265ee451e243c08d672ddc06de38dc15daf50a8ec1c18b9bbd87e2158ea8fd7a7559fe94d4c6680e304e2d500ca016e68d9f8a25271421b9deca3c8067f59a8f3edf2ad1cd20f15e4c820d703b6ffb6e368e8418bd392994c931c50cb4c858a7db9658e2a468fe06b416265b5e236fbcdaa86cee8ef146fe78628ed35c6aaad5bc455ecc2197ae951940e5bb64454b488a3b12e4b67e84f5a35a1daec5d95a33184f6c30fc553f5d0955a797831aeeed051fc7619471e77f5c5c8e40af7d6b354d039c4fcccc8624360cfc8b4a4a266e581f87b2822e1096741e804ad6a70973a3343822bc4138fdb2cac87fe7a74d0f71473668b3c62f00c622f8d9a25f6970700000000000000f412d53976b5fa199c0f85fcec7a6e8ba629b053f1a26597bdea2c53bc17fb1bca3d6ba561ddc17cee05ad161c20a24b420304b805733d613f8c67c6014a873f3d5f4ec973ebaf0078114db4fc6b607f2f9aefd61f439d80dca94c297081f005b63b26012d39d88b32e36d73b6dd5cc1838aed1d594bb3991f4a073330884eb07c2157f6864bec324ebcc8ce6a49c90cd2541323d95fff147ace0e70a86c6e5d758e37b12b6a280f72bdde00411c803607c4241a1d62b595925503636590b2a4fb910b1577026a83629fc039207b6d355e6a06353daf4a8b0f2e9c412044105df627e8686cc69e223b11c961eb00561144defd02ee6f5b8c0db6a314afe11cb68a66b01974c6dc9e685b013b654d9c7a450f7429cf2a26f6e34ea79895051d71b06b1903274f30fe2fd107b7e7bd477d70bd6324824d39d0e07b0f90e5152c562daddcb258a0faf8a9941868e7463910d35da02696ccb6b16567576bd8397337f20c5a5db9ac04fb302c513845883babdd345d7eebbd107fe0d2cdbbc01d5e40c56660eee85bba1c7317ec59a572a4eb9d1fea5d76dfb3e01f416ae4a0795eadd5f32b17dad816e37d630f9a433a05bbf091de03fdb0f4a5c8d74c0846d0fdec786a2adafd535d82401923eb5279009a2a247f41db21afc647b88c82529b65bec96dc5bd799264d32fc15de8a909946a939701d5c60269d0a631d4d9263ef527a69e5875339d5d2bdd0a2cbd5ccd58127b524bbb114b7a306ea220fe082db0e0db14d828cd72900c77dbcad0bb760e85b2986fc76d98e76a327253327bfb4d23aa1d45629ef71e30e453e19acc470538b95c3b77d84f376a5b485f2f5156392e22a99716dc90e653c1eb6343e647c41a60a2604b001f44c2e65c7f0d5040a405e948d9be5cad3aff848de9e9db6268a043c91e666226bcf9a8dadeeda32db2e14bece95d4925e06bf26cf6665000f98e47c4ca4b5a7859f28cca8c7f1b3340bcf616920c3cd53c2789364b03e6a291817766888425b0ec7ccc484d5474a02a7cbb821b058cc853fe830f86f6cb1ca73812dd919f1c79a7dfa13d310654176609f8ca482c3fee11dc8d843116f5a775fdeccbb975d7e833f081e16d914e0f7154a48668c2be7ccedccf2edb407975630e4ae24a16d818fea03b141dea14cbd404ac9b01dc8d0cba227cfbd33f33d20c9101a71f33d1fa832ce68868907be9fd8f9f6a76b03eb4eda0c55d83c57cedd17e3e96d267410287caa26984f84903b8748579a6879a301e7393ed1467cb98be15c34d6d5c0c957e1a7b941ecefe07b9954e207c76065c1f668ec143c533dd3d863fec137f2a00d746d349d8cf9fc438eb9aa22284f75f73891ede03d20757df1df054957ec94d551cfa56f10b2044e257e7d75470dfe0cc6094b8a1f2c6198cc89ba6df91e57fa87340edf426702aca7d2b3ef46b78335c2442b0d775405ad2569ad7ce46dd3494dab4d98d78e7f393ed6816a5b6c9356b7409a5cdc00b4ea99b7823c744e46e4215945cb02edbdf332d7c109fc4a83ceb2d6198fcc6f3a835679cad70c7dff7dc605450d5fa7e29f9b32f5a1d53d12e2561361346c55dd3fc79e2ea2588fbb8e55c42e55c8cf22ccdac9216be9fdad10efea56c393f6f58896a0df541141f829b50e5e7208f6218bb683208af0c542ac5636e5c2eeb15044072f28a9755c63ec67baeedf0941c6d0c5f2fd702ef1011539932368dbe1664de988efbed22a43b215ae69eeb5312ac5cc966ca12f12c034ddaaae340cd6e89e42621053db7969cd9753a72a6451f78fbd8b4840329b6c6eb9bdf365444276ab81251f6894fe3d125e8eecf30f3a98116c96d2de30a1b195c1d10ffdc731b78740a53f09bcb66b6b237bc56f9426135ca651d9329540c386dc5251b537c4b8317460b0dafbc3d4f1b8d6a939e51de59b22d32e5daafb5f0d469e58567cba1f327e67ee8d0f53b041fa643a4a594d4cf28a0004aace404ca95b58a1e26d601563b188fdd2c97b8d8714913c3564d0a445d35060ed2ce20daa4174cb92653626fa9bd10513c8006d757acecd7eda9d41393dfdd683ad50ab4de8cd832b26c82edeb4af5013f43f297dbf502b62fd6c2ced9641235838853c2aeb447fa06b6ecd1c11f17d3261e87aa1ec86ec8b23fd4281f33469d7c4414b60268367d38d9235dfe3ac4c7032e298d0cbee4b705f4085f5653b4637a80ae575b44c6f1a2374b899e061d03abad5770355673020afdb8fecf5be2a8617aab331646f05d49bf5beefd650bfd240ed3b5abadb21941c4a615004284ff7927ef9a745e3d4208dfabb0b04d04002bb7e449ca884373fe4ebe35e18ffd249e992ba779284b1064b1e27e6aa0c4c88e915246e029113b4d01b53583b8282ea1d5d4a305d3e20f894af640abf9e376d6b1c6fd3bf86821b4a57c5c22d8172ea40daf2b398dc0329d4b7dd08c75c902f0368def10217234bea599509a7e61b4a11915009680613bf69f2f4b38e7595449a20aee13949c688a69cfa73af328c7df7a494d0e8d249cb3c843149b11bdddf34282db31b156261254472fbc2e12c7b7133f7d273ef472761b58e7f8e54ea2861ebccfb141e3b245b5e4a75204d12ff5d7b0a44ae039b3cf79869d24f1602060f81785a851b996a3693856c6b2e90f27dbd4be518ae3065e692e5f2842380e4f5cf91582632e6d36b260c27a1e7ae80b47d14067db8720e619c7323f358098ef054fddde357f4453c6e7ace38833ed1c9bc9bf0c054564b79885cc7c8fc5d7ebde25f0307067816067a4a96ddedfbd268ca19a67207ecfec5598a442a1c0e823e012ced27c3266c6721aa5718dc076e7f50023a49a40980bc0fcd568295c8d4c59f1874aa944b88901e38c803ef52c226a7daf055f4ec3bbecd878654a456448e552a0fafa64124688dbd7f3787af8b3fdf661680ae309939542337ab22f510ba9ab1a7229f5244938e9324b0b1ad22ad9e16b84f93cea693186a5c76ad7f74e7c82ce6cb9a9ecf3a4a1a6d06a8fdd6474ae1aeddfcef270c6c637918b7aed3d5068e17d3642e9fa66c985b2dca5b38ffdb3545a4954d0a5813bfec99721259562b80696dadd921e9f18978d21dee1129a386623cf93c804aeb4e511ee8658fcef51746dbe1f87285eae850f008f3effdb78994e6eb370600c1855f672de0b750ad56c22aa937c1eaa8a7a333fc55f814e878bf71e8d9717a8f0854635554f07393ce04cb6d58e9ac0f5808d9158fd6320fdf75b2db9cd0380418e8664b5ccdde967b8a76e8002683849fa507d78e971f7118b2eba2c025dc359684cbd7b6b2e41ed0783da3fa2ae2de5dcb2db67d06a21aa419bd465ecc378842219a55f647535c7f4002061c65338d9c098ef31b77297c9905b91555cb436b83cb88e48821fe750dfcb4305e146b7f68265a35331017dcd902071a8b904534dc26a017f2bd14bcc65963efc9a8689298e039ac717fd460703e7d08ead0ca43c3c88ee423ed92a20e0b7dd6636313d057b97fbfead33d0aea2ff50c57df057bdd6c7470fde9bf9f1fbfc7ddcea22c1ce9273705be952464b3d48aacb7a96e5ddcab0b4d7b564d12b66c07663e05dff55d40d7a2371ead0f948e6921b8d271f8c710f526844db88102e68c3ae1a35a729af6d6521dc587f83ced8263d6d5801dc8b9c11659cca84c6e4076021f2747769cbf50d3362602f6491a1c3734a62aa024e060e69b32a5ca8f5ebdf8deeeda60405610fd182cef2e4cd534ee31db32bb13f0bdd53799dc438c38ac0a49be58f0dacb53286fb7f1648b8eaaf4c997689eb703594f55fdbac9840b91696f1f2ee8599cd84d3a904b3b7515fd22866cc0c2ef1f8db911593801474bc90bc8151ad4b0da717cba6b388440dbf85cfd6fdf874960712e93bfe9cb22bd84139c0e3badc70b36dfb9edb4f4d4b45514e826c5dc0972a9596f14c0b4de118253de91aaf7c6bec8f95ea509c374f35543f678f12e467c394d21f613b446607051943ebd5a49b729e91681f54215f9d1c330e264efd1f214b7196e72eeca6796ca35b17e27c10cb6171e7eb520fbe0394f7399b65fcb0014a5c3b9c9c10b14877520d0a572b8fdf5e0bccd328540422a4ad906e2e358a6916dbae6b36aa8c3bd4514c56fc2602bc84c7c571af4f667eb7c3015f3ff85a6a309db43c6c1dcc922951fbc65c659d4b9c65608086ee33151e02596976109e3e2de848dfcca7b771c1997b9fa6ccc7e0299303ad5d11700611ed70b809ea039b00", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x6, {0x101, 0xb, 0x0, {0x4, 0x0, 0x100000000bdd6, 0x403, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0xa000, 0x8, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc879}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xee01) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00028008"], 0x34}, 0x1, 0x0, 0x0, 0x24040015}, 0xc000) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m46.247363023s ago: executing program 1 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000980)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_delete_stored_link_key={{0xff}, {0x25, 0x1ff}}}}, 0x9) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xf6}, @l2cap_cid_signaling={{0xf2}, [@l2cap_move_chan_rsp={{0xf, 0x5a, 0x4}, {0x1, 0x7ff}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x6, 0x2}, {0x4}}, @l2cap_info_rsp={{0xb, 0x7f, 0xb2}, {0xeb6c, 0x6, "f7742ed7d9ab1418798fc6812a17afcd7feb8cf62ebbebdd865b504118f5f277464a865b0f16595a5e386aed0f23f554cef7ae38e1f1036c93861f95db7073e0976677a021bb265bac3b4047df53db0e4912eeae20a8f5617d95c6eb6df30bd43ed10388e7492b022c18e633e1f2c16f6b19e7fe1f43ca3f07e0315431037264ce7b49b2b3a33c2dd974cc11ca70729ae8db99aedf7590c6472d8d631ada65d4c733c1d9608f6c374ebed67292bc"}}, @l2cap_create_chan_req={{0xc, 0x3, 0x5}, {0xffff, 0x4}}, @l2cap_info_req={{0xa, 0xb, 0x2}, {0x9}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xf, 0xfff9, 0x9}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x8, 0xdba1}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x4db6, 0x7}}, @l2cap_cmd_rej_unk={{0x1, 0xa, 0x2}, {0x9}}]}}, 0xfb) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109026e000301d8100c080b"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x6, 0x30, 0x94, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x7, 0x4}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa5, 0x1, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xa5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x40, 0x1}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x20, &(0x7f0000000080)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0x6, 0xfffc}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0cf4436661357f744b7f9ec043ecc241"}]}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c74657200000900030073797a7200000000080007006e6174"], 0x330}}, 0x4008800) readahead(r0, 0x6, 0x100) 12m44.837864226s ago: executing program 1 (id=1175): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000540)="47fb110b1bc19e146a7c7e3e98f7a07d956df23e332134293fc6050a3557781049c4996139eb4358a76840d7be139170862dd7bc796a5c382097ab783cccb97409ceda674084560212d476f59c3c12d719c29576c9e304233a68de78f15e1deeac2af94b4b4650385223f879de6f8302175b2c602784c2a00e520c2d508ba48267dfb043f6a900cb9e95925cf0593302dfc79490a58772ef841fb0dcceca621d9fccaa25abaecf8ee3e0894c0c139c79e64ee0ea299790b3c2ab5727cb3dc95582d538c5f436c794cca6f2d69435b15c5c264e9f71969d984e277b6e90", &(0x7f0000000640)="212c0d8576ddc48957a8b963bdcf"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x2) fcntl$setlease(r1, 0x400, 0x1) r2 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae^\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa8\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x2) syz_clone(0x10000, &(0x7f00000001c0)="d4a1594aa1b37fc8eca42641f836521e4e9d19956bb921086abba1a00aca1c8ef2b8896da46fc3278182eeee07ddfea95686120b880847c65686ef6dfb261cb8f2015c54b21d899ec1aa5ab0670702250c0e3d1bfea6a898f916f5b3465e53cecca7a859d6f76f0d4b05476e5085f0955628f176c0805e6588f440bd01046887eb50e8feaa9ce921e3657409b54ddd7040dfa63a3a2284988d793b2cea9f69", 0x9f, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000440)="51e261a5de68641794a87d369c3b9ad867e21db939d75946e6e8d4a100c2a9f39a388f4c8e37255303f51162ee3c4ca6bcc1e98205459551fe8f573a322c5e883e08d281bb71ecf778c71bd32856db0206a39467bad8f05aeac3826be22ea3c0348ce268c0e87aa2be151a4992fa758fd19a3bc76f656bc92e7f7aa2333e6de67078bf83e096dc8cd0fe5f9356ef534aea4a0d5a2e7197062a36aa83f5e4e7b178745cc74ac93f7dc808a7f6b63586ebce193da8f3c27082527eaf3a69dbef7dbd1785dba6e901b3dc05698add37c594") creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000100)) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendto$packet(r3, &(0x7f0000000080)="330316148114140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x62, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) socket(0x3, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file2\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000580)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000440), 0x820021, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 12m44.311759126s ago: executing program 1 (id=1177): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000002000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 12m44.231978035s ago: executing program 1 (id=1178): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) sendto$inet6(r1, &(0x7f0000000100)="b826032de8131b727747e64f4b90205152bdc53ad6ffa65d5a494f95ac63a3d3fe55a63525905d16afc1bfb71eb25f3ab46ba55c95eecef53b91b58f90461e21115701ac42d107d5f9a19e8ef34cb9894435ef97706ab1008f3ea0eb627f90e0eec8f3ea06e13a972d5330eb25a5b0dcf4f60836b2d2fc07a8a6972b1601f5922d06459acaaebad924daa35c00599927e08fa48f555929c477b669433b722d98fa3711ab345576826102cc4d38eb36a7766ba33852647e2c79db281dc8f06a0edf10235510", 0xc5, 0x8850, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @private1, 0xa}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140100001f00010000000000000008000101"], 0x114}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m40.715197344s ago: executing program 1 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000040100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f080003400000000714000000020a01"], 0xa0}}, 0x0) 12m40.543003551s ago: executing program 33 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000040100000008000a40000000020900020073797a32000000000900010073797a3000000000080005400000001f080003400000000714000000020a01"], 0xa0}}, 0x0) 6m46.346086721s ago: executing program 4 (id=2649): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0", 0x29}, {&(0x7f0000001400)="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", 0x6ec}], 0x2, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x3, &(0x7f0000000140)=[@iv={0x0, 0x117, 0x2, 0x0, "34c608c978eb857980249c0b23bd326321a5935727bb0410897114155f2319455c029a2f1a8b8091febd5ff133b2a9d042009e89cb1936"}], 0x18, 0x40000}], 0x1, 0x405a814) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m46.183506496s ago: executing program 4 (id=2650): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x60) (async) r0 = syz_open_dev$vbi(&(0x7f0000000300), 0x0, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) ioctl$VIDIOC_G_STD(r0, 0x80085617, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 6m45.885127258s ago: executing program 4 (id=2652): syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x40002) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0xffffff7f, 0x1}) 6m45.536280469s ago: executing program 4 (id=2654): write$input_event(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$sock_proto_private(r0, 0x89e0, 0x0) syz_usb_connect(0x6, 0x90, &(0x7f0000000200)=ANY=[], 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x6d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/sockcreate\x00') write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000004c0)={r5}, &(0x7f0000000340)=0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0/../file0/file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x1008076, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x142c}, 0x1, 0x0, 0x0, 0x8000014}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r5, 0x7}, &(0x7f0000000080)=0x8) r6 = socket$rxrpc(0x21, 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x1c}], 0x1}, 0x4000084) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x110, 0x22, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 6m44.883768994s ago: executing program 4 (id=2656): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000980)={0x20, 0x0, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000040)={0x14, &(0x7f00000000c0)={0x20, 0x7, 0xf9, {0xf9, 0xf, "3ede74cfd18998dc091f2bf5ba5189799314a06c08b13ab1d22224e049cd632aebc90e5cb3e89736ed90c0bd1c503e5c4a28e641c16c1df66fa701d7e75247113dab52f07674edff13fe7f1386c20ee6d5daf0010ed638feee17c8fc0fb0a9881d54f981d085141b02bf4ae237253d17bcbd8a35f4ad2dd4384253230c2e8064549d5a3f302984cd2feeb9d1010e3976a42a612abe77b3d204ff9745fc17348ebfee1c02ec1b92eb4cab0049f6de37a5fcca08b44cd3cf0ba95fedff71b0686b63160b35d497d2690d8b76dd25a5c2b6814ff4efb8473dfd9e71590dce55a90df1bf99a4dc43b2750550b8c8fd81bbc53c5364d767bd90"}}, &(0x7f00000001c0)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "a28c1da79944b0856edf0e58449670dc30862701dbf499e90e049df0e0b78a9f3fc9ca1e8c0c1e2137538b70762b629d349c9b1df7661c1c14d5d2bdd44c37c874006154a90beab3ccead517f70aeccaf7a5bb44e2c396142e396df5cc64dc4f3a88489175a9c935112a40a744e5273563655864fbbf687b6aeebe165a706a7664506497297dcfe720d44ff044d96fec8be4331f1495e0fb2ce482520514bc5b1de12bf4584f25eea43b92413b6502e2fa16f7b22e582a4dda1436dc0db2c3e9b5a8530d"}}}, &(0x7f0000000340)={0x1c, &(0x7f00000002c0)={0x40, 0x28, 0xf, "b09568945c14cb0836b9c308e82aec"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000300)={0x21, 0x0, 0x1, "bd"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 6m43.099567289s ago: executing program 4 (id=2658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfffffffc, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f0000000640)={@fd={0x77682a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/73, 0x49, 0x0, 0x18}, @flat=@binder={0x73622a85, 0x1101}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 6m42.496803352s ago: executing program 34 (id=2658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfffffffc, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f0000000640)={@fd={0x77682a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/73, 0x49, 0x0, 0x18}, @flat=@binder={0x73622a85, 0x1101}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 3m11.860608822s ago: executing program 3 (id=3634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) (fail_nth: 7) 3m11.46029731s ago: executing program 3 (id=3635): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) close(0x4) 3m10.748829625s ago: executing program 3 (id=3641): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000980)={0x20, 0x0, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000340)={0x1c, &(0x7f00000002c0)={0x40, 0x28, 0xf, "b09568945c14cb0836b9c308e82aec"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000300)={0x21, 0x0, 0x1, "bd"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 3m10.115740551s ago: executing program 3 (id=3647): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000004000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 3m10.049767084s ago: executing program 3 (id=3648): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7d4a}, 0x18, 0x0) ioctl$TIOCCONS(r0, 0x541d) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/60) 3m8.520016311s ago: executing program 3 (id=3657): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0xfffffffc}}}, 0xd) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x5, 0x10, 0x7, 0x4, 0x4}], 0x1, 0x28, 0x3, 0x8000}) 3m7.795559599s ago: executing program 35 (id=3657): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0xfffffffc}}}, 0xd) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x5, 0x10, 0x7, 0x4, 0x4}], 0x1, 0x28, 0x3, 0x8000}) 3m3.670843771s ago: executing program 0 (id=3675): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xedf}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x78}, 0x0) 3m3.492000083s ago: executing program 0 (id=3676): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @p_u32=0x0}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @p_u32=0x0}}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x3, 0x1, 0x0, 0x4, 0x80, 0x8, 0x7, 0x1, 0x6, 0x60, 0x3, 0x8, 0x2, 0x6, 0xa, 0x1, 0x5, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0xaadfc000) 3m3.416397109s ago: executing program 0 (id=3677): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) mlockall(0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x20004041}, 0x800) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x61f0, 0x0) sendmsg$xdp(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="57fd02e71450ebf89b", 0x9}], 0x1, 0x0, 0x0, 0x40}, 0x4000010) 3m2.702409855s ago: executing program 0 (id=3678): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x2c000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000c2824f37fc2d4e450000400007012bbd7000fedbdf25035b000004b59e641d00018004000800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x98, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x40}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6c8907cc4c24fdfd33f3e32afb"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "ecbbb438e904"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3363ed8a9d"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0000}, 0x4000010) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") 3m2.432045307s ago: executing program 0 (id=3679): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e06ff7c0c"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 3m2.007894728s ago: executing program 0 (id=3680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newsa={0x17c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fff}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "eef89ea5a704fe10e7176f8ed24f53f91316a9d2a64430d328b2dc9d89e2c2e979c73326c56076926bdced2d552a1a39d4ab07009eea785ea9c7d758618f58ccca"}}]}, 0x17c}}, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r0) getresgid(&(0x7f00000003c0), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x181000d, &(0x7f0000000700)=ANY=[@ANYBLOB="000002", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030352c626c6b73697a653d3078303030303030303030303030303230302c6d61785f726561643d3078666666666666666666666666666666382c6f626a5f757365723d2d3c5c2c2f2b78372c7375626a5f726f6c653d5185305fb60afea12b427884679b913ab334d2d3b6f6e0f99cf13ede4ebc3f2676ed36d1e07955e571e176fb472d268fc11cf6784b6e0a11fd4f4178bb542c61707072616973652c7065726d69745f646972656374696f2c686173682c736d61636b66736465663d746c732c7375626a5f747970653d2c7375626a5f726f6c653d2c00"]) r4 = open$dir(&(0x7f0000000000)='./file1\x00', 0xa8840, 0x4) open_tree(r4, &(0x7f00000000c0)='./file0\x00', 0x80901) 3m1.697740922s ago: executing program 36 (id=3680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newsa={0x17c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fff}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "eef89ea5a704fe10e7176f8ed24f53f91316a9d2a64430d328b2dc9d89e2c2e979c73326c56076926bdced2d552a1a39d4ab07009eea785ea9c7d758618f58ccca"}}]}, 0x17c}}, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r0) getresgid(&(0x7f00000003c0), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x181000d, &(0x7f0000000700)=ANY=[@ANYBLOB="000002", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030352c626c6b73697a653d3078303030303030303030303030303230302c6d61785f726561643d3078666666666666666666666666666666382c6f626a5f757365723d2d3c5c2c2f2b78372c7375626a5f726f6c653d5185305fb60afea12b427884679b913ab334d2d3b6f6e0f99cf13ede4ebc3f2676ed36d1e07955e571e176fb472d268fc11cf6784b6e0a11fd4f4178bb542c61707072616973652c7065726d69745f646972656374696f2c686173682c736d61636b66736465663d746c732c7375626a5f747970653d2c7375626a5f726f6c653d2c00"]) r4 = open$dir(&(0x7f0000000000)='./file1\x00', 0xa8840, 0x4) open_tree(r4, &(0x7f00000000c0)='./file0\x00', 0x80901) 2m20.535603918s ago: executing program 6 (id=3780): r0 = syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905", @ANYRES32=r0], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) 2m17.456506378s ago: executing program 6 (id=3785): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 2m17.03670197s ago: executing program 6 (id=3787): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000025c0)="d3534a6f84c3fece8e4fcdb4a19a3719cf1ce6b1bc4b090a28b972457a4b29ff83fcadc619a0814033a3d3da41e0fde867956caf2466c623789b630672f23cd31f0d86e7ddc5c96b36eaf767a12ad6f7"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xc, 0xfffffffc, &(0x7f0000000340)=[@dead_binder_done], 0x0, 0x0, 0x0}) 2m16.94743898s ago: executing program 6 (id=3788): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7f, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x80, 0x2, 0x2, 0x2, 0x7, 0x1, 0x5, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x19, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m16.48414293s ago: executing program 6 (id=3790): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000200)="13e7f6b8fc09730d54f2f48f185f9e72989746e4b8d907b2371c16a719ea1aabb8cf46b6c8367666292c7f9411746fffc047066797ab4c5ad516aacc322c02a463e01d0f5c331b5371ee8133c0f156682969fb421ff43c8012947c96bf0a61a394f00699be1cb7bf26a56c83588a3aa0100aa594dfcc5bf21b6918c023b9a6e919f2ced2f72fe3770955df527a34f8fb146b6ed297bf8c6baea3b07bd7f49ed73bd600"/172, 0xac}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x3, 0xa, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000180), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000540)=[0x4e3, 0x8, 0x0, 0x100, 0xffffffff], &(0x7f0000000300)=[r3], &(0x7f0000000340), 0x0, 0x4}) 2m10.868030072s ago: executing program 6 (id=3794): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (fail_nth: 11) 2m10.420386303s ago: executing program 37 (id=3794): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) (fail_nth: 11) 34.896711181s ago: executing program 9 (id=4217): syz_emit_vhci(&(0x7f0000000f00)=ANY=[], 0xe) 34.885295477s ago: executing program 9 (id=4218): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 34.667428948s ago: executing program 7 (id=4220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b1a, &(0x7f0000000040)) 34.510139206s ago: executing program 7 (id=4222): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141641) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 33.556468917s ago: executing program 9 (id=4230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) 33.540355852s ago: executing program 9 (id=4231): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000300)={0x20, 0x16, 0x2, "fc81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) 32.188376821s ago: executing program 5 (id=4243): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="6006020106"], 0x6) 32.038349667s ago: executing program 8 (id=4244): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaffff"], 0xfdef) 31.878670899s ago: executing program 8 (id=4245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 31.811954s ago: executing program 8 (id=4246): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) 31.443859099s ago: executing program 7 (id=4247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 31.31792889s ago: executing program 7 (id=4248): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 31.289447151s ago: executing program 8 (id=4249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 31.278179975s ago: executing program 5 (id=4250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) 30.885373712s ago: executing program 5 (id=4251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000ee000000001300000008000300", @ANYRES32, @ANYBLOB="07001300850109000a00060008021100000100000600100080050000060012"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 30.884521592s ago: executing program 7 (id=4252): r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x80, 0x10}}, 0x0, 0x0, 0x0, 0x0}) 30.748806976s ago: executing program 5 (id=4253): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaffff"], 0xfdef) 30.516117206s ago: executing program 5 (id=4254): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 30.426905126s ago: executing program 5 (id=4255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001200)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x6}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "ab9400", 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @mcast2, [@dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}, @hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) 30.424965547s ago: executing program 9 (id=4256): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0) 30.28817566s ago: executing program 8 (id=4257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) 30.124134619s ago: executing program 7 (id=4258): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="6006020106"], 0x6) 29.927775855s ago: executing program 9 (id=4259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)={0x5c, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 29.889764977s ago: executing program 8 (id=4260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 0s ago: executing program 38 (id=4255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000001200)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x6}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "ab9400", 0xf08, 0x2f, 0xb9e02c7ea3376920, @mcast2, @mcast2, [@dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}, @hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) kernel console output (not intermixed with test programs): ticast mode [ 956.600131][T24038] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 956.676996][T30811] chnl_net:caif_netlink_parms(): no params data found [ 956.783870][T24038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 956.809436][T24038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.851272][T24038] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 956.872129][T24038] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 956.887762][T24038] usb 6-1: Manufacturer: syz [ 956.893196][T30950] syzkaller1: entered promiscuous mode [ 956.893223][T30950] syzkaller1: entered allmulticast mode [ 956.907644][ T60] ªªªªªª: left allmulticast mode [ 956.914176][ T60] veth0_vlan: left allmulticast mode [ 956.932558][T24038] usb 6-1: config 0 descriptor?? [ 957.284486][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.298108][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.315441][ T60] bond0 (unregistering): Released all slaves [ 957.340509][ T5160] Bluetooth: hci0: command tx timeout [ 957.385117][T30898] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3684'. [ 957.509789][ T5160] Bluetooth: hci3: command tx timeout [ 957.621349][T30811] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.628917][T30811] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.637117][T30811] bridge_slave_0: entered allmulticast mode [ 957.646350][T30811] bridge_slave_0: entered promiscuous mode [ 957.658370][ T60] tipc: Left network mode [ 957.669839][T30811] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.679532][T30811] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.687727][T30811] bridge_slave_1: entered allmulticast mode [ 957.696557][T30811] bridge_slave_1: entered promiscuous mode [ 957.764735][T24038] usbhid 6-1:0.0: can't add hid device: -71 [ 957.771268][T24038] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 957.794409][T24038] usb 6-1: USB disconnect, device number 2 [ 957.953456][T30811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.015130][T30811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.213714][T31074] netlink: 'syz.6.3691': attribute type 10 has an invalid length. [ 958.235762][T31074] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3691'. [ 958.288480][T30811] team0: Port device team_slave_0 added [ 958.322841][T31074] batman_adv: batadv0: Adding interface: vlan1 [ 958.340550][T31074] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.398444][T31074] batman_adv: batadv0: Interface activated: vlan1 [ 958.456612][T30811] team0: Port device team_slave_1 added [ 958.575436][ T60] hsr_slave_0: left promiscuous mode [ 958.593539][ T60] hsr_slave_1: left promiscuous mode [ 958.605142][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.622827][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.641943][ T60] batman_adv: batadv0: Interface deactivated: vlan1 [ 958.660237][ T60] batman_adv: batadv0: Removing interface: vlan1 [ 958.697688][ T60] veth1_macvtap: left promiscuous mode [ 958.711977][ T60] veth0_macvtap: left promiscuous mode [ 958.722593][ T60] veth1_vlan: left promiscuous mode [ 958.733004][ T5946] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 958.738798][ T60] veth0_vlan: left promiscuous mode [ 958.894490][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 958.912270][ T5946] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 958.927959][ T5946] usb 6-1: config 0 has no interface number 0 [ 958.943718][ T5946] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 958.967299][ T5946] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 958.986608][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.004053][ T5946] usb 6-1: Product: syz [ 959.014979][ T5946] usb 6-1: Manufacturer: syz [ 959.027721][ T5946] usb 6-1: SerialNumber: syz [ 959.057217][ T5946] usb 6-1: config 0 descriptor?? [ 959.069996][T31085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 959.293137][T31085] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 959.421914][ T5160] Bluetooth: hci0: command tx timeout [ 959.439460][ T60] team0 (unregistering): Port device team_slave_1 removed [ 959.471256][ T60] team0 (unregistering): Port device team_slave_0 removed [ 959.704393][T31102] syzkaller1: left promiscuous mode [ 959.709941][T31102] syzkaller1: left allmulticast mode [ 959.788837][T31120] syzkaller1: entered promiscuous mode [ 959.795724][T31120] syzkaller1: entered allmulticast mode [ 959.813651][T30811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.827762][T30811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.855726][T30811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.872100][T30811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.879605][T30811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.911407][T30811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.988065][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 959.996194][ C0] lec:lec_tx_timeout: lec0 [ 960.198431][T31166] binder: BINDER_SET_CONTEXT_MGR already set [ 960.206095][T31166] binder: 31147:31166 ioctl 4018620d 200000000100 returned -16 [ 960.227050][T30811] hsr_slave_0: entered promiscuous mode [ 960.260198][T30811] hsr_slave_1: entered promiscuous mode [ 960.293480][T30811] debugfs: 'hsr0' already exists in 'hsr' [ 960.306233][T30811] Cannot create hsr debugfs directory [ 961.302282][T30811] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 961.339001][T30811] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 961.368072][T30811] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 961.407313][T30811] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 961.500485][ T5160] Bluetooth: hci0: command tx timeout [ 961.657928][T30811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.674947][T31308] tipc: Started in network mode [ 961.681365][T31308] tipc: Node identity 8ad99f61b946, cluster identity 4711 [ 961.688705][T31308] tipc: Enabled bearer , priority 0 [ 961.760322][ T5946] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 961.787448][ T5946] asix 6-1:0.188: probe with driver asix failed with error -71 [ 961.815342][T31308] syzkaller0: entered promiscuous mode [ 961.824842][ T5946] usb 6-1: USB disconnect, device number 3 [ 961.831448][T31308] syzkaller0: entered allmulticast mode [ 961.837850][T31308] tipc: Resetting bearer [ 961.972052][ T49] tipc: Resetting bearer [ 961.979235][T31307] tipc: Resetting bearer [ 963.579861][ T5160] Bluetooth: hci0: command tx timeout [ 967.112657][T31307] tipc: Disabling bearer [ 967.128962][T24038] tipc: Node number set to 866099041 [ 967.301537][T30811] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.365221][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.372564][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.443202][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.450664][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.768564][T31381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.044442][T31401] tipc: Enabled bearer , priority 0 [ 968.117136][T31408] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3719'. [ 968.127290][T31408] FAULT_INJECTION: forcing a failure. [ 968.127290][T31408] name failslab, interval 1, probability 0, space 0, times 0 [ 968.144783][T31408] CPU: 0 UID: 0 PID: 31408 Comm: syz.7.3719 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.144817][T31408] Tainted: [L]=SOFTLOCKUP [ 968.144827][T31408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 968.144840][T31408] Call Trace: [ 968.144849][T31408] [ 968.144857][T31408] dump_stack_lvl+0xe8/0x150 [ 968.144896][T31408] should_fail_ex+0x412/0x560 [ 968.144929][T31408] should_failslab+0xa8/0x100 [ 968.144958][T31408] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 968.144996][T31408] ? __alloc_skb+0x1d0/0x7d0 [ 968.145020][T31408] ? __local_bh_enable_ip+0xd0/0x130 [ 968.145058][T31408] __alloc_skb+0x1d0/0x7d0 [ 968.145090][T31408] xfrm_alloc_compat+0x1a6/0x16f0 [ 968.145130][T31408] ? xfrm_get_translator+0x1b/0x240 [ 968.145164][T31408] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 968.145197][T31408] xfrm_alloc_userspi+0xa1a/0xd50 [ 968.145227][T31408] ? format_decode+0x60f/0xe10 [ 968.145277][T31408] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 968.145311][T31408] ? __nla_parse+0x40/0x60 [ 968.145346][T31408] xfrm_user_rcv_msg+0x7ae/0xc40 [ 968.145380][T31408] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 968.145442][T31408] ? __pfx___mutex_trylock_common+0x10/0x10 [ 968.145484][T31408] ? rcu_is_watching+0x15/0xb0 [ 968.145507][T31408] ? trace_contention_end+0x3d/0x140 [ 968.145535][T31408] ? __mutex_lock+0x320/0x1420 [ 968.145570][T31408] netlink_rcv_skb+0x232/0x4b0 [ 968.145597][T31408] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 968.145629][T31408] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 968.145669][T31408] ? netlink_deliver_tap+0x2e/0x1b0 [ 968.145695][T31408] ? netlink_deliver_tap+0x2e/0x1b0 [ 968.145723][T31408] xfrm_netlink_rcv+0x79/0x90 [ 968.145752][T31408] netlink_unicast+0x80f/0x9b0 [ 968.145782][T31408] ? __pfx_netlink_unicast+0x10/0x10 [ 968.145806][T31408] ? netlink_sendmsg+0x650/0xb40 [ 968.145829][T31408] ? skb_put+0x11b/0x210 [ 968.145858][T31408] netlink_sendmsg+0x813/0xb40 [ 968.145891][T31408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 968.145916][T31408] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 968.145949][T31408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 968.145974][T31408] sock_sendmsg_nosec+0x112/0x150 [ 968.145999][T31408] ____sys_sendmsg+0x589/0x8c0 [ 968.146026][T31408] ? __might_fault+0xaf/0x130 [ 968.146065][T31408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 968.146103][T31408] ? import_iovec+0x73/0xa0 [ 968.146136][T31408] ___sys_sendmsg+0x2a5/0x360 [ 968.146165][T31408] ? __lock_acquire+0x6b5/0x2cf0 [ 968.146202][T31408] ? __pfx____sys_sendmsg+0x10/0x10 [ 968.146268][T31408] ? __fget_files+0x2a/0x420 [ 968.146298][T31408] ? __fget_files+0x3a0/0x420 [ 968.146337][T31408] __x64_sys_sendmsg+0x1bd/0x2a0 [ 968.146370][T31408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 968.146411][T31408] ? __pfx_ksys_write+0x10/0x10 [ 968.146445][T31408] do_syscall_64+0x14d/0xf80 [ 968.146471][T31408] ? trace_irq_disable+0x3b/0x140 [ 968.146507][T31408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.146530][T31408] ? clear_bhb_loop+0x40/0x90 [ 968.146557][T31408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.146579][T31408] RIP: 0033:0x7f386719c799 [ 968.146599][T31408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.146618][T31408] RSP: 002b:00007f38653f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 968.146642][T31408] RAX: ffffffffffffffda RBX: 00007f3867415fa0 RCX: 00007f386719c799 [ 968.146659][T31408] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 968.146673][T31408] RBP: 00007f38653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 968.146686][T31408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.146700][T31408] R13: 00007f3867416038 R14: 00007f3867415fa0 R15: 00007fff632f9448 [ 968.146735][T31408] [ 968.382431][T31401] syzkaller0: entered promiscuous mode [ 968.578900][T31401] syzkaller0: entered allmulticast mode [ 968.588088][T31401] tipc: Resetting bearer [ 968.829562][T31422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.846164][ T96] tipc: Resetting bearer [ 968.871227][T31400] tipc: Resetting bearer [ 968.954772][T31432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.967113][T31432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.511126][T31451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3724'. [ 973.537899][T31400] tipc: Disabling bearer [ 973.714696][T30811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.779484][T31467] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.834253][T31472] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3727'. [ 973.860156][T31467] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.867431][T31467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.877234][T31472] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3727'. [ 973.909224][T31472] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3727'. [ 973.967472][T31477] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3727'. [ 974.399755][T24038] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 974.591309][T24038] usb 6-1: Using ep0 maxpacket: 32 [ 974.626571][T24038] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 974.669268][T24038] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 974.685010][T24038] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 974.685726][T30811] veth0_vlan: entered promiscuous mode [ 974.707721][T24038] usb 6-1: Product: syz [ 974.713680][T31496] dns_resolver: Unsupported content type (3) [ 974.720230][T24038] usb 6-1: Manufacturer: syz [ 974.727107][T24038] usb 6-1: SerialNumber: syz [ 974.742519][T24038] usb 6-1: config 0 descriptor?? [ 974.760476][T31486] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 974.779090][T30811] veth1_vlan: entered promiscuous mode [ 974.904751][T30811] veth0_macvtap: entered promiscuous mode [ 974.925259][T30811] veth1_macvtap: entered promiscuous mode [ 974.970205][T30811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.998539][T19367] usb 6-1: USB disconnect, device number 4 [ 975.020370][T30811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.092250][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.108273][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.126231][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.135531][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.257697][T31532] tipc: Started in network mode [ 975.292038][T31532] tipc: Node identity 727c99b4df8a, cluster identity 4711 [ 975.310541][T31532] tipc: Enabled bearer , priority 0 [ 975.411616][T31536] syzkaller0: entered promiscuous mode [ 975.417274][T31536] syzkaller0: entered allmulticast mode [ 975.424696][T31536] tipc: Resetting bearer [ 975.453733][T31531] tipc: Resetting bearer [ 980.260907][T31531] tipc: Disabling bearer [ 980.293689][T24038] tipc: Node number set to 2918619572 [ 980.317325][T31554] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.336043][T31555] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.343529][T31555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.391651][T23735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.411757][T23735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.607569][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.659801][ T5946] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 980.660439][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.863224][ T5946] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 980.883770][ T5946] usb 6-1: config 0 has no interface number 0 [ 980.900403][ T5946] usb 6-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 980.927944][ T5946] usb 6-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 980.950004][ T5946] usb 6-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 980.973222][ T5946] usb 6-1: config 0 interface 238 has no altsetting 0 [ 981.001249][ T5946] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 981.035656][ T5946] usb 6-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 981.044469][T31595] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 981.057373][T31595] overlayfs: missing 'lowerdir' [ 981.064698][ T5946] usb 6-1: Product: syz [ 981.078190][ T5946] usb 6-1: Manufacturer: syz [ 981.085715][ T5946] usb 6-1: SerialNumber: syz [ 981.086006][T31595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.113976][ T5946] usb 6-1: config 0 descriptor?? [ 981.353128][ T5946] ni6501 6-1:0.238: driver 'ni6501' failed to auto-configure device. [ 981.772647][ T5946] usb 6-1: USB disconnect, device number 5 [ 981.811551][T31642] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.827033][T31634] tipc: Enabled bearer , priority 0 [ 981.844739][T31642] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.852063][T31642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.989426][T31634] syzkaller0: entered promiscuous mode [ 981.995429][T31634] syzkaller0: entered allmulticast mode [ 982.003167][T31634] tipc: Resetting bearer [ 982.015740][T31633] tipc: Resetting bearer [ 982.194787][ T5946] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 982.376389][ T5946] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 982.386038][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.436397][ T5946] usb 6-1: config 0 descriptor?? [ 982.467315][ T5946] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 982.903447][ T5946] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 983.189905][ T5874] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 983.332055][ T5946] gspca_cpia1: usb_control_msg 02, error -71 [ 983.338626][ T5946] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 983.349156][ T5946] usb 6-1: USB disconnect, device number 6 [ 983.363371][ T5874] usb 9-1: Using ep0 maxpacket: 16 [ 983.371566][ T5874] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.382912][ T5874] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.399359][ T5874] usb 9-1: config 0 interface 0 has no altsetting 0 [ 983.414413][ T5874] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 983.426817][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.443713][ T5874] usb 9-1: config 0 descriptor?? [ 984.394170][T31688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.436564][T31688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.690889][ T5874] usbhid 9-1:0.0: can't add hid device: -71 [ 984.726760][ T5874] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 984.759684][ T5874] usb 9-1: USB disconnect, device number 2 [ 984.807344][T31712] binder: 31700:31712 ioctl 4070aea0 200000000040 returned -22 [ 988.082616][T31633] tipc: Disabling bearer [ 988.247422][ T30] audit: type=1326 audit(1774069039.075:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31743 comm="syz.5.3758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc0bb9c799 code=0x0 [ 988.372022][T31750] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.396497][T31750] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.403782][T31750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.731877][T31760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3756'. [ 988.797469][T31763] netlink: 'syz.8.3761': attribute type 1 has an invalid length. [ 988.807408][T31763] netlink: 'syz.8.3761': attribute type 3 has an invalid length. [ 988.815566][T31763] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3761'. [ 989.008253][T31772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3763'. [ 989.312831][T31786] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.335038][T31787] tipc: Enabled bearer , priority 0 [ 989.347172][T23735] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.354481][T23735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.471700][T31787] syzkaller0: entered promiscuous mode [ 989.477470][T31787] syzkaller0: entered allmulticast mode [ 989.484709][T31787] tipc: Resetting bearer [ 989.505368][T31785] tipc: Resetting bearer [ 989.560542][ T5946] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 989.735404][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 989.742949][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 989.769764][ T5946] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 989.814166][ T5946] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 989.821996][ T5946] usb 6-1: can't read configurations, error -61 [ 989.984332][ T5946] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 990.167475][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 990.175321][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 990.184145][ T5946] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 990.193827][ T5946] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 990.201860][ T5946] usb 6-1: can't read configurations, error -61 [ 990.208859][ T5946] usb usb6-port1: attempt power cycle [ 990.549850][ T5946] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 990.570617][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 990.615974][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 990.624870][ T5946] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 990.688628][ T5946] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 990.696443][ T5946] usb 6-1: can't read configurations, error -61 [ 990.873702][ T5946] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 990.900487][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 990.908607][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 990.917178][ T5946] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 990.926971][ T5946] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 990.936973][ T5946] usb 6-1: can't read configurations, error -61 [ 990.952379][ T5946] usb usb6-port1: unable to enumerate USB device [ 992.489926][T31818] overlayfs: missing 'workdir' [ 992.858894][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 992.872988][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 992.911542][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 992.990888][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.001921][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.109668][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.120736][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.135243][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 994.776332][T31834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 994.935142][T31836] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 994.948644][T31836] FAULT_INJECTION: forcing a failure. [ 994.948644][T31836] name failslab, interval 1, probability 0, space 0, times 0 [ 994.961717][T31836] CPU: 1 UID: 0 PID: 31836 Comm: syz.6.3775 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.961747][T31836] Tainted: [L]=SOFTLOCKUP [ 994.961754][T31836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 994.961766][T31836] Call Trace: [ 994.961785][T31836] [ 994.961793][T31836] dump_stack_lvl+0xe8/0x150 [ 994.961828][T31836] should_fail_ex+0x412/0x560 [ 994.961856][T31836] should_failslab+0xa8/0x100 [ 994.961877][T31836] ? do_getname+0x2e/0x250 [ 994.961900][T31836] kmem_cache_alloc_noprof+0x87/0x650 [ 994.961937][T31836] do_getname+0x2e/0x250 [ 994.961959][T31836] ? __se_sys_rename+0x1f/0x2c0 [ 994.961986][T31836] __se_sys_rename+0x2b/0x2c0 [ 994.962013][T31836] do_syscall_64+0x14d/0xf80 [ 994.962035][T31836] ? trace_irq_disable+0x3b/0x140 [ 994.962058][T31836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.962077][T31836] ? clear_bhb_loop+0x40/0x90 [ 994.962100][T31836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.962119][T31836] RIP: 0033:0x7fb5a0f9c799 [ 994.962138][T31836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.962168][T31836] RSP: 002b:00007fb5a1dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 994.962188][T31836] RAX: ffffffffffffffda RBX: 00007fb5a1215fa0 RCX: 00007fb5a0f9c799 [ 994.962202][T31836] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 994.962214][T31836] RBP: 00007fb5a1dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 994.962231][T31836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.962242][T31836] R13: 00007fb5a1216038 R14: 00007fb5a1215fa0 R15: 00007ffeae4293c8 [ 994.962271][T31836] [ 995.100584][ T5160] Bluetooth: hci4: command tx timeout [ 995.223599][T31785] tipc: Disabling bearer [ 995.499067][T31822] lo speed is unknown, defaulting to 1000 [ 995.590219][ T5895] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 995.752970][ T5895] usb 9-1: config 0 interface 0 has no altsetting 0 [ 995.771932][ T5895] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 995.792981][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.819125][ T5895] usb 9-1: config 0 descriptor?? [ 995.912254][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.183483][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.252968][ T5895] video4linux radio48: keene_cmd_main failed (-71) [ 996.287404][ T5895] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 996.329916][ T5895] usb 9-1: USB disconnect, device number 3 [ 996.447268][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.507414][T31822] chnl_net:caif_netlink_parms(): no params data found [ 996.637320][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.787828][T31822] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.805398][T31822] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.817491][T31822] bridge_slave_0: entered allmulticast mode [ 996.827316][T31822] bridge_slave_0: entered promiscuous mode [ 996.852965][T31822] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.873113][T31822] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.884742][T31822] bridge_slave_1: entered allmulticast mode [ 996.910437][T31822] bridge_slave_1: entered promiscuous mode [ 997.092126][T31822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.107840][T31822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.180163][ T5160] Bluetooth: hci4: command tx timeout [ 997.314056][T31822] team0: Port device team_slave_0 added [ 997.366543][T31822] team0: Port device team_slave_1 added [ 997.493483][T31822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.503958][T31822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.530398][T31822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.542066][ T12] bridge_slave_1: left allmulticast mode [ 997.547980][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.559106][ T12] bridge_slave_0: left allmulticast mode [ 997.564949][ T12] bridge_slave_0: left promiscuous mode [ 997.571266][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.813525][T31822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.821451][T31822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.848018][T31822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.935762][ T12] : left promiscuous mode [ 997.994960][T31822] hsr_slave_0: entered promiscuous mode [ 998.011078][T31822] hsr_slave_1: entered promiscuous mode [ 998.024903][T31822] debugfs: 'hsr0' already exists in 'hsr' [ 998.051923][T31822] Cannot create hsr debugfs directory [ 998.132674][ T12] tipc: Left network mode [ 998.161184][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 998.169293][ C0] lec:lec_tx_timeout: lec0 [ 998.696143][ T5160] Bluetooth: hci0: Dropping invalid advertising data [ 999.260911][ T5160] Bluetooth: hci4: command tx timeout [ 999.470078][T32230] tipc: Started in network mode [ 999.475401][T32230] tipc: Node identity ced6d6a763e4, cluster identity 4711 [ 999.483608][T32230] tipc: Enabled bearer , priority 0 [ 999.654769][T32230] syzkaller0: entered promiscuous mode [ 999.667447][T32230] syzkaller0: entered allmulticast mode [ 999.674859][T32230] tipc: Resetting bearer [ 999.767279][T32229] tipc: Resetting bearer [ 1001.342126][ T5160] Bluetooth: hci4: command tx timeout [ 1001.713668][T32269] FAULT_INJECTION: forcing a failure. [ 1001.713668][T32269] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.735687][T32269] CPU: 1 UID: 0 PID: 32269 Comm: syz.7.3791 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.735721][T32269] Tainted: [L]=SOFTLOCKUP [ 1001.735730][T32269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.735744][T32269] Call Trace: [ 1001.735753][T32269] [ 1001.735762][T32269] dump_stack_lvl+0xe8/0x150 [ 1001.735799][T32269] should_fail_ex+0x412/0x560 [ 1001.735830][T32269] should_failslab+0xa8/0x100 [ 1001.735856][T32269] __kmalloc_noprof+0xe8/0x760 [ 1001.735879][T32269] ? __vb2_queue_alloc+0x29d/0x15a0 [ 1001.735910][T32269] __vb2_queue_alloc+0x29d/0x15a0 [ 1001.735943][T32269] ? vid_out_queue_setup+0xb1d/0x12b0 [ 1001.735981][T32269] vb2_core_reqbufs+0xc1f/0x1410 [ 1001.736028][T32269] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1001.736070][T32269] ? vb2_verify_memory_type+0x1fc/0x570 [ 1001.736115][T32269] vb2_ioctl_reqbufs+0x4c0/0x830 [ 1001.736161][T32269] __video_do_ioctl+0xadb/0xca0 [ 1001.736205][T32269] ? __pfx___video_do_ioctl+0x10/0x10 [ 1001.736253][T32269] video_usercopy+0x876/0x1450 [ 1001.736294][T32269] ? __pfx___video_do_ioctl+0x10/0x10 [ 1001.736329][T32269] ? __pfx_video_usercopy+0x10/0x10 [ 1001.736373][T32269] ? __fget_files+0x2a/0x420 [ 1001.736406][T32269] ? __fget_files+0x2a/0x420 [ 1001.736435][T32269] ? __fget_files+0x3a0/0x420 [ 1001.736474][T32269] v4l2_ioctl+0x18d/0x1e0 [ 1001.736527][T32269] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1001.736557][T32269] __se_sys_ioctl+0xfc/0x170 [ 1001.736584][T32269] do_syscall_64+0x14d/0xf80 [ 1001.736630][T32269] ? trace_irq_disable+0x3b/0x140 [ 1001.736656][T32269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.736678][T32269] ? clear_bhb_loop+0x40/0x90 [ 1001.736705][T32269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.736728][T32269] RIP: 0033:0x7f386719c799 [ 1001.736751][T32269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.736770][T32269] RSP: 002b:00007f38653f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.736793][T32269] RAX: ffffffffffffffda RBX: 00007f3867415fa0 RCX: 00007f386719c799 [ 1001.736809][T32269] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000003 [ 1001.736821][T32269] RBP: 00007f38653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.736832][T32269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.736843][T32269] R13: 00007f3867416038 R14: 00007f3867415fa0 R15: 00007fff632f9448 [ 1001.736872][T32269] [ 1005.229229][T32229] tipc: Disabling bearer [ 1005.265309][ T5895] tipc: Node number set to 2905790119 [ 1005.483350][ T12] hsr_slave_0: left promiscuous mode [ 1005.507674][ T12] hsr_slave_1: left promiscuous mode [ 1005.536777][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.568921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.610915][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.619512][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.641422][ T12] veth1_macvtap: left promiscuous mode [ 1005.662750][ T12] veth0_macvtap: left promiscuous mode [ 1005.675123][ T12] veth1_vlan: left promiscuous mode [ 1005.695628][T32304] netlink: zone id is out of range [ 1005.701601][ T12] veth0_vlan: left promiscuous mode [ 1005.718889][T32304] netlink: zone id is out of range [ 1005.744006][T32304] netlink: zone id is out of range [ 1005.768477][T32304] netlink: zone id is out of range [ 1005.787930][T32304] netlink: zone id is out of range [ 1005.807255][T32304] netlink: zone id is out of range [ 1005.830160][T32304] netlink: zone id is out of range [ 1005.847233][T32304] netlink: zone id is out of range [ 1005.863738][T32304] netlink: zone id is out of range [ 1005.878822][T32304] netlink: zone id is out of range [ 1006.425173][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1006.453769][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1006.473685][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1006.484606][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1006.497909][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1006.766112][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1006.787665][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1007.123808][ T5903] hid_parser_main: 5 callbacks suppressed [ 1007.123832][ T5903] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1007.198629][ T5903] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1007.272180][ T1007] smbdirect: ib_dev[syz0] removed [ 1007.493216][ T10] lo speed is unknown, defaulting to 1000 [ 1007.507734][ T10] infiniband syz0: ib_query_port failed (-19) [ 1007.983468][ T12] IPVS: stop unused estimator thread 0... [ 1008.169514][T32315] chnl_net:caif_netlink_parms(): no params data found [ 1008.394501][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.443816][T32291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1008.623026][ T5849] Bluetooth: hci1: command tx timeout [ 1008.693477][T32315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.703229][T32315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.711101][T32315] bridge_slave_0: entered allmulticast mode [ 1008.719702][T32315] bridge_slave_0: entered promiscuous mode [ 1008.733270][T31822] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1008.771656][T31822] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1008.796758][T32315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.817549][T32315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.841903][T32315] bridge_slave_1: entered allmulticast mode [ 1008.854610][T32315] bridge_slave_1: entered promiscuous mode [ 1009.014259][T32500] FAULT_INJECTION: forcing a failure. [ 1009.014259][T32500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.027596][T32500] CPU: 1 UID: 0 PID: 32500 Comm: syz.8.3801 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.027627][T32500] Tainted: [L]=SOFTLOCKUP [ 1009.027634][T32500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.027646][T32500] Call Trace: [ 1009.027657][T32500] [ 1009.027666][T32500] dump_stack_lvl+0xe8/0x150 [ 1009.027701][T32500] should_fail_ex+0x412/0x560 [ 1009.027730][T32500] _copy_to_user+0x31/0xb0 [ 1009.027758][T32500] video_usercopy+0xe0a/0x1450 [ 1009.027793][T32500] ? __pfx___video_do_ioctl+0x10/0x10 [ 1009.027824][T32500] ? __pfx_video_usercopy+0x10/0x10 [ 1009.027862][T32500] ? __fget_files+0x2a/0x420 [ 1009.027890][T32500] ? __fget_files+0x2a/0x420 [ 1009.027924][T32500] ? __fget_files+0x3a0/0x420 [ 1009.027958][T32500] v4l2_ioctl+0x18d/0x1e0 [ 1009.027986][T32500] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1009.028013][T32500] __se_sys_ioctl+0xfc/0x170 [ 1009.028036][T32500] do_syscall_64+0x14d/0xf80 [ 1009.028059][T32500] ? trace_irq_disable+0x3b/0x140 [ 1009.028082][T32500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.028101][T32500] ? clear_bhb_loop+0x40/0x90 [ 1009.028124][T32500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.028144][T32500] RIP: 0033:0x7fef3499c799 [ 1009.028162][T32500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.028178][T32500] RSP: 002b:00007fef32bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1009.028197][T32500] RAX: ffffffffffffffda RBX: 00007fef34c15fa0 RCX: 00007fef3499c799 [ 1009.028212][T32500] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1009.028224][T32500] RBP: 00007fef32bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.028235][T32500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.028246][T32500] R13: 00007fef34c16038 R14: 00007fef34c15fa0 R15: 00007ffda3a0ed38 [ 1009.028274][T32500] [ 1009.254127][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.283527][T31822] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1009.351562][T32315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.378906][T32315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.452356][T32502] tipc: Enabled bearer , priority 0 [ 1009.484236][T31822] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1009.762895][T32508] syzkaller0: entered promiscuous mode [ 1009.778709][T32508] syzkaller0: entered allmulticast mode [ 1009.788476][T32508] tipc: Resetting bearer [ 1009.845986][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.932135][ T1007] tipc: Resetting bearer [ 1009.939036][T32493] tipc: Resetting bearer [ 1010.706758][ T5849] Bluetooth: hci1: command tx timeout [ 1012.794710][ T5849] Bluetooth: hci1: command tx timeout [ 1014.434561][T32493] tipc: Disabling bearer [ 1014.447749][T32315] team0: Port device team_slave_0 added [ 1014.582440][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.696875][T32315] team0: Port device team_slave_1 added [ 1014.862950][ T5849] Bluetooth: hci1: command tx timeout [ 1014.881970][T32315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.921377][T32315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.987857][T32315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.045292][T32315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.069710][T32315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.122232][T32315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.134625][T32605] netlink: 'syz.7.3807': attribute type 1 has an invalid length. [ 1015.142990][T32605] netlink: 'syz.7.3807': attribute type 3 has an invalid length. [ 1015.158927][T32605] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3807'. [ 1015.598945][T32315] hsr_slave_0: entered promiscuous mode [ 1015.616901][T32315] hsr_slave_1: entered promiscuous mode [ 1015.626097][T32315] debugfs: 'hsr0' already exists in 'hsr' [ 1015.633180][T32315] Cannot create hsr debugfs directory [ 1015.901899][ T12] bridge_slave_1: left allmulticast mode [ 1015.908797][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.925015][ T12] bridge_slave_0: left allmulticast mode [ 1015.935066][ T12] bridge_slave_0: left promiscuous mode [ 1015.941575][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.387772][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.399376][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.416438][ T12] bond0 (unregistering): Released all slaves [ 1016.603994][T32685] tipc: Enabled bearer , priority 0 [ 1016.646937][ T12] tipc: Left network mode [ 1016.681046][ T12] IPVS: stopping master sync thread 24724 ... [ 1016.776607][T32697] syzkaller0: entered promiscuous mode [ 1016.783610][T32697] syzkaller0: entered allmulticast mode [ 1016.790690][T32697] tipc: Resetting bearer [ 1016.827360][T32676] tipc: Resetting bearer [ 1019.835732][T32734] net_ratelimit: 30 callbacks suppressed [ 1019.835755][T32734] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1019.853054][T32734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.863689][T32734] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1019.871337][T32734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.881540][T32734] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1019.888885][T32734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.899426][T32734] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1019.907202][T32734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1019.918836][T32734] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1019.945105][T32734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1021.720170][T32676] tipc: Disabling bearer [ 1022.156935][T31822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.207674][ T12] hsr_slave_0: left promiscuous mode [ 1022.225874][ T12] hsr_slave_1: left promiscuous mode [ 1022.241286][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.248786][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.260648][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.270340][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.278784][ T12] batman_adv: batadv0: Interface deactivated: vlan1 [ 1022.286755][ T12] batman_adv: batadv0: Removing interface: vlan1 [ 1022.309069][ T12] veth1_macvtap: left promiscuous mode [ 1022.315065][ T12] veth0_macvtap: left promiscuous mode [ 1022.321898][ T12] veth1_vlan: left promiscuous mode [ 1022.327379][ T12] veth0_vlan: left promiscuous mode [ 1022.349959][ T5895] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1022.538237][ T5895] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.565450][ T5895] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1022.586155][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.602393][ T5895] usb 9-1: config 0 descriptor?? [ 1022.635667][ T5895] pwc: Askey VC010 type 2 USB webcam detected. [ 1022.815660][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1022.843518][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1023.032421][ T5895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1023.053731][ T5895] pwc: recv_control_msg error -32 req 02 val 2700 [ 1023.085629][ T5895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1023.107868][ T5895] pwc: recv_control_msg error -32 req 04 val 1000 [ 1023.137856][ T5895] pwc: recv_control_msg error -32 req 04 val 1300 [ 1023.228106][ T5895] pwc: recv_control_msg error -32 req 04 val 1400 [ 1023.229057][ T310] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3816'. [ 1023.253735][ T5895] pwc: recv_control_msg error -32 req 02 val 2000 [ 1023.266856][T12016] lec:lec_start_xmit: lec0:No lecd attached [ 1023.268366][ T5895] pwc: recv_control_msg error -32 req 02 val 2100 [ 1023.281760][ T5895] pwc: recv_control_msg error -32 req 04 val 1500 [ 1023.332660][ T5895] pwc: recv_control_msg error -32 req 02 val 2500 [ 1023.353429][ T5895] pwc: recv_control_msg error -32 req 02 val 2400 [ 1023.402372][ T5895] pwc: recv_control_msg error -32 req 02 val 2600 [ 1023.410951][ T5895] pwc: recv_control_msg error -32 req 02 val 2900 [ 1023.423038][ T5895] pwc: recv_control_msg error -32 req 02 val 2800 [ 1023.565125][T31822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.624592][T32315] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1023.661154][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.668625][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.704496][ T5895] pwc: Registered as video103. [ 1023.721317][ T5895] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input154 [ 1023.732114][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.732266][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.770440][T32315] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1023.797813][T32315] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1023.883337][T32315] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1023.898486][ T5895] usb 9-1: USB disconnect, device number 4 [ 1023.996810][ T12] IPVS: stop unused estimator thread 0... [ 1024.500574][T32315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.658694][T24038] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1024.679307][T32315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.757584][T24038] hid-generic 0000:0000:0000.0020: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1024.791779][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.799020][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.842036][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.849316][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.956290][ T402] tipc: Enabled bearer , priority 0 [ 1025.144802][ T406] syzkaller0: entered promiscuous mode [ 1025.154121][ T406] syzkaller0: entered allmulticast mode [ 1025.163776][ T406] tipc: Resetting bearer [ 1025.206973][ T400] tipc: Resetting bearer [ 1028.429880][ T5903] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1028.631589][ T5903] usb 9-1: Using ep0 maxpacket: 16 [ 1028.638960][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1028.652058][ T5903] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1028.661236][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.669278][ T5903] usb 9-1: Product: syz [ 1028.673823][ T5903] usb 9-1: Manufacturer: syz [ 1028.679020][ T5903] usb 9-1: SerialNumber: syz [ 1028.693982][ T5903] usb 9-1: config 0 descriptor?? [ 1028.704422][ T5903] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1028.713775][ T5903] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1028.904682][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.918991][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.949487][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.960333][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.975052][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.987368][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.999404][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.008907][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.023225][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.035217][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.049780][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 1029.057863][ C0] lec:lec_tx_timeout: lec0 [ 1029.171419][ T5903] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1029.283059][ T5903] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1029.312221][ T5903] em28xx 9-1:0.0: board has no eeprom [ 1029.456997][ T5903] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1029.467587][ T5903] em28xx 9-1:0.0: dvb set to bulk mode. [ 1029.474219][T19367] em28xx 9-1:0.0: Binding DVB extension [ 1029.534278][ T5903] usb 9-1: USB disconnect, device number 5 [ 1029.562251][ T5903] em28xx 9-1:0.0: Disconnecting em28xx [ 1029.576375][T19367] em28xx 9-1:0.0: Registering input extension [ 1029.583575][ T5903] em28xx 9-1:0.0: Closing input extension [ 1029.780411][ T5903] em28xx 9-1:0.0: Freeing device [ 1030.599435][ T400] tipc: Disabling bearer [ 1030.632700][T31822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.172012][ T518] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3832'. [ 1031.183577][ T519] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3832'. [ 1031.342729][T32315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.394136][ T527] FAULT_INJECTION: forcing a failure. [ 1031.394136][ T527] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.407031][ T527] CPU: 0 UID: 0 PID: 527 Comm: syz.8.3833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.407065][ T527] Tainted: [L]=SOFTLOCKUP [ 1031.407073][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.407086][ T527] Call Trace: [ 1031.407095][ T527] [ 1031.407105][ T527] dump_stack_lvl+0xe8/0x150 [ 1031.407144][ T527] should_fail_ex+0x412/0x560 [ 1031.407178][ T527] should_failslab+0xa8/0x100 [ 1031.407206][ T527] __kmalloc_noprof+0xe8/0x760 [ 1031.407229][ T527] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1031.407258][ T527] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1031.407283][ T527] ? tomoyo_domain+0xd7/0x130 [ 1031.407311][ T527] ? tomoyo_path_number_perm+0x219/0x630 [ 1031.407342][ T527] tomoyo_path_number_perm+0x246/0x630 [ 1031.407375][ T527] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1031.407404][ T527] ? __lock_acquire+0x6b5/0x2cf0 [ 1031.407453][ T527] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1031.407503][ T527] ? __fget_files+0x2a/0x420 [ 1031.407537][ T527] ? __fget_files+0x2a/0x420 [ 1031.407565][ T527] ? __fget_files+0x3a0/0x420 [ 1031.407594][ T527] ? __fget_files+0x2a/0x420 [ 1031.407628][ T527] security_file_ioctl+0xc3/0x2a0 [ 1031.407659][ T527] __se_sys_ioctl+0x47/0x170 [ 1031.407686][ T527] do_syscall_64+0x14d/0xf80 [ 1031.407712][ T527] ? trace_irq_disable+0x3b/0x140 [ 1031.407738][ T527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.407761][ T527] ? clear_bhb_loop+0x40/0x90 [ 1031.407789][ T527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.407812][ T527] RIP: 0033:0x7fef3499c799 [ 1031.407833][ T527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.407852][ T527] RSP: 002b:00007fef32bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1031.407876][ T527] RAX: ffffffffffffffda RBX: 00007fef34c15fa0 RCX: 00007fef3499c799 [ 1031.407892][ T527] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1031.407906][ T527] RBP: 00007fef32bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.407921][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.407951][ T527] R13: 00007fef34c16038 R14: 00007fef34c15fa0 R15: 00007ffda3a0ed38 [ 1031.407986][ T527] [ 1031.407995][ T527] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1031.849514][T31822] veth0_vlan: entered promiscuous mode [ 1031.899449][T31822] veth1_vlan: entered promiscuous mode [ 1032.028254][T31822] veth0_macvtap: entered promiscuous mode [ 1032.068992][T31822] veth1_macvtap: entered promiscuous mode [ 1032.144465][T31822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.187908][T31822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.219899][ T5844] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1032.236207][ T1007] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.247907][ T1007] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.265922][ T1007] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.275671][ T1007] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.380946][ T5844] usb 9-1: Using ep0 maxpacket: 16 [ 1032.388568][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1032.404267][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1032.421154][ T5844] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1032.453182][ T5844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.475187][ T5844] usb 9-1: Product: syz [ 1032.498225][T32315] veth0_vlan: entered promiscuous mode [ 1032.510742][ T5844] usb 9-1: Manufacturer: syz [ 1032.534612][ T5844] usb 9-1: SerialNumber: syz [ 1032.562622][ T5844] usb 9-1: config 0 descriptor?? [ 1032.613768][ T5844] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1032.623773][ T5844] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1032.661538][T32315] veth1_vlan: entered promiscuous mode [ 1032.692465][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.714934][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.775497][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.803924][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.852144][T32315] veth0_macvtap: entered promiscuous mode [ 1032.896277][T32315] veth1_macvtap: entered promiscuous mode [ 1032.961339][T32315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.995260][T32315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.083254][ T1019] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.110832][T23735] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.147305][T23735] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.158249][T23735] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.205188][ T575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.229747][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.237007][ T575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.245553][ T5844] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1033.266229][ T5844] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1033.508985][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.522589][ T587] tipc: Started in network mode [ 1033.531844][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.542127][ T587] tipc: Node identity 4ae0b40830c6, cluster identity 4711 [ 1033.554430][ T587] tipc: Enabled bearer , priority 0 [ 1033.702936][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.717501][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.732178][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.749328][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.760400][ T587] syzkaller0: entered promiscuous mode [ 1033.780830][ T587] syzkaller0: entered allmulticast mode [ 1033.788142][ T587] tipc: Resetting bearer [ 1033.926918][ T12] tipc: Resetting bearer [ 1033.949531][ T584] tipc: Resetting bearer [ 1033.975189][ T5844] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1033.989033][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.012922][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.037761][ T542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.074841][ T542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.095589][ T5844] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1034.126120][ T5844] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1034.158993][ T5844] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1034.176422][ T5844] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1034.190070][ T5844] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 1034.204263][ T5844] usb 9-1: USB disconnect, device number 6 [ 1034.997389][ T5896] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1035.191462][ T5896] usb 9-1: Using ep0 maxpacket: 8 [ 1035.201580][ T5896] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1035.210962][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.249464][ T5896] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1035.266337][ T5896] pvrusb2: ********** [ 1035.295515][ T5896] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1035.310771][ T5896] pvrusb2: Important functionality might not be entirely working. [ 1035.318705][ T5896] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1035.330119][ T5896] pvrusb2: ********** [ 1035.468347][ T2364] pvrusb2: Invalid write control endpoint [ 1035.623945][ T2364] pvrusb2: Invalid write control endpoint [ 1035.632524][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1035.642232][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1035.650031][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1035.660735][ T2364] pvrusb2: Device being rendered inoperable [ 1035.666810][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1035.683511][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1035.691665][ T3438] usb 9-1: USB disconnect, device number 7 [ 1035.751332][ T2364] pvrusb2: Attached sub-driver cx25840 [ 1035.769336][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1035.782238][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1039.488280][ T584] tipc: Disabling bearer [ 1039.525935][T19367] tipc: Node number set to 2049356808 [ 1039.605048][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.644292][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.813623][ T685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.858420][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.865848][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.002170][ T704] nci: nci_send_cmd: no memory for command [ 1040.570825][T19367] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1040.765324][T19367] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1040.800549][T19367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.814378][T19367] usb 6-1: Product: syz [ 1040.818613][T19367] usb 6-1: Manufacturer: syz [ 1040.828943][T19367] usb 6-1: SerialNumber: syz [ 1041.171399][T19367] rtl8150 6-1:1.0: couldn't reset the device [ 1041.182815][T19367] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 1041.213030][T19367] usb 6-1: USB disconnect, device number 11 [ 1041.334085][ T797] tipc: Started in network mode [ 1041.339074][ T797] tipc: Node identity 66b1be3004f7, cluster identity 4711 [ 1041.354656][ T797] tipc: Enabled bearer , priority 0 [ 1041.450945][ T797] syzkaller0: entered promiscuous mode [ 1041.456584][ T797] syzkaller0: entered allmulticast mode [ 1041.466737][ T797] tipc: Resetting bearer [ 1041.479996][ T796] tipc: Resetting bearer [ 1042.131385][T19367] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1042.337909][T19367] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.358599][T19367] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1042.379454][T19367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.425741][T19367] usb 6-1: config 0 descriptor?? [ 1042.465843][T19367] pwc: Askey VC010 type 2 USB webcam detected. [ 1042.887215][T19367] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1042.896996][T19367] pwc: recv_control_msg error -32 req 02 val 2700 [ 1042.924520][T19367] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1042.932722][T19367] pwc: recv_control_msg error -32 req 04 val 1000 [ 1042.941447][T19367] pwc: recv_control_msg error -32 req 04 val 1300 [ 1043.063779][T19367] pwc: recv_control_msg error -32 req 04 val 1400 [ 1043.075554][T19367] pwc: recv_control_msg error -32 req 02 val 2000 [ 1043.084386][T19367] pwc: recv_control_msg error -32 req 02 val 2100 [ 1043.114081][T19367] pwc: recv_control_msg error -32 req 04 val 1500 [ 1043.144541][T19367] pwc: recv_control_msg error -32 req 02 val 2500 [ 1043.152429][T19367] pwc: recv_control_msg error -32 req 02 val 2400 [ 1043.183067][T19367] pwc: recv_control_msg error -32 req 02 val 2600 [ 1043.192783][T19367] pwc: recv_control_msg error -32 req 02 val 2900 [ 1043.222094][T19367] pwc: recv_control_msg error -32 req 02 val 2800 [ 1047.563502][ T796] tipc: Disabling bearer [ 1047.588150][T31740] tipc: Node number set to 1648803376 [ 1047.766511][T19367] pwc: recv_control_msg error -71 req 04 val 1200 [ 1047.828249][T19367] pwc: Registered as video103. [ 1047.886850][T19367] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input156 [ 1047.974705][T19367] usb 6-1: USB disconnect, device number 12 [ 1048.520563][T19367] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1048.680363][T19367] usb 6-1: Using ep0 maxpacket: 16 [ 1048.699551][T19367] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1048.699588][T19367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1048.718524][T19367] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1048.718557][T19367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.718580][T19367] usb 6-1: Product: syz [ 1048.718595][T19367] usb 6-1: Manufacturer: syz [ 1048.718610][T19367] usb 6-1: SerialNumber: syz [ 1048.766414][T19367] usb 6-1: config 0 descriptor?? [ 1048.804695][T19367] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1048.804737][T19367] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1048.893578][ T5946] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1049.061178][ T5946] usb 10-1: Using ep0 maxpacket: 32 [ 1049.089928][ T5946] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1049.128423][ T5946] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1049.152668][ T5946] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1049.166176][ T5946] usb 10-1: config 1 has no interface number 0 [ 1049.188508][ T5946] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1049.218932][ T5946] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1049.257706][ T5946] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1049.283606][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.330786][ T5946] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1049.380153][T24038] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1049.417132][T19367] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1049.445408][T19367] em28xx 6-1:0.0: Config register raw data: 0x40 [ 1049.519426][ T1003] ALSA: mixer_oss: invalid OSS volume '' [ 1049.542043][ T1003] random: crng reseeded on system resumption [ 1049.552642][ T5946] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1049.563313][T24038] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.609042][T24038] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1049.623290][T24038] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.658857][T24038] usb 9-1: config 0 descriptor?? [ 1049.678489][T24038] pwc: Askey VC010 type 2 USB webcam detected. [ 1050.080023][T24038] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1050.101736][T24038] pwc: recv_control_msg error -32 req 02 val 2700 [ 1050.123269][T24038] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1050.139092][T24038] pwc: recv_control_msg error -32 req 04 val 1000 [ 1050.147861][T24038] pwc: recv_control_msg error -32 req 04 val 1300 [ 1050.178260][ T980] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3868'. [ 1050.184227][ T5895] usb 10-1: USB disconnect, device number 2 [ 1050.201913][ T5895] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1050.225488][T24038] pwc: recv_control_msg error -32 req 04 val 1400 [ 1050.241378][T24038] pwc: recv_control_msg error -32 req 02 val 2000 [ 1050.259954][T24038] pwc: recv_control_msg error -32 req 02 val 2100 [ 1050.269144][T24038] pwc: recv_control_msg error -32 req 04 val 1500 [ 1050.277914][T24038] pwc: recv_control_msg error -32 req 02 val 2500 [ 1050.287252][T24038] pwc: recv_control_msg error -32 req 02 val 2400 [ 1050.295359][T24038] pwc: recv_control_msg error -32 req 02 val 2600 [ 1050.303103][T24038] pwc: recv_control_msg error -32 req 02 val 2900 [ 1050.313379][T24038] pwc: recv_control_msg error -32 req 02 val 2800 [ 1050.528182][T24038] pwc: recv_control_msg error -71 req 04 val 1200 [ 1050.587583][T24038] pwc: Registered as video103. [ 1050.605062][T24038] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input157 [ 1050.664970][T24038] usb 9-1: USB disconnect, device number 8 [ 1050.971804][ T582] usb 6-1: USB disconnect, device number 13 [ 1051.007143][ T582] em28xx 6-1:0.0: Disconnecting em28xx [ 1051.069211][ T582] em28xx 6-1:0.0: Freeing device [ 1051.145343][ T1117] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3878'. [ 1051.225851][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.256688][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.264227][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.274792][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.282644][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.289542][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.299561][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.307023][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.312493][ T1117] QAT: Invalid ioctl 1075883590 [ 1051.327066][ T1117] QAT: Invalid ioctl 1075883590 [ 1052.347021][ T1147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3882'. [ 1052.469779][ T582] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1052.641865][ T582] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.662478][ T582] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1052.691059][ T582] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1052.706448][ T582] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1052.752572][ T582] usb 10-1: SerialNumber: syz [ 1053.281499][ T8270] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1053.315895][ T1187] FAULT_INJECTION: forcing a failure. [ 1053.315895][ T1187] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.370800][ T1187] CPU: 1 UID: 0 PID: 1187 Comm: syz.7.3888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.370837][ T1187] Tainted: [L]=SOFTLOCKUP [ 1053.370846][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.370860][ T1187] Call Trace: [ 1053.370869][ T1187] [ 1053.370879][ T1187] dump_stack_lvl+0xe8/0x150 [ 1053.370918][ T1187] should_fail_ex+0x412/0x560 [ 1053.370956][ T1187] should_failslab+0xa8/0x100 [ 1053.370982][ T1187] ? ptlock_alloc+0x20/0x70 [ 1053.371015][ T1187] kmem_cache_alloc_noprof+0x87/0x650 [ 1053.371047][ T1187] ? alloc_pages_mpol+0x3c0/0x490 [ 1053.371082][ T1187] ptlock_alloc+0x20/0x70 [ 1053.371116][ T1187] pte_alloc_one+0x7a/0x370 [ 1053.371142][ T1187] __pte_alloc+0x25/0x1a0 [ 1053.371170][ T1187] do_pte_missing+0x2cd2/0x33f0 [ 1053.371208][ T1187] ? __pmd_alloc+0x40a/0x5c0 [ 1053.371243][ T1187] handle_mm_fault+0x1bd7/0x3170 [ 1053.371292][ T1187] ? handle_mm_fault+0xee/0x3170 [ 1053.371331][ T1187] ? __pfx_handle_mm_fault+0x10/0x10 [ 1053.371378][ T1187] ? __lock_acquire+0x6b5/0x2cf0 [ 1053.371416][ T1187] ? lock_mm_and_find_vma+0xa7/0x340 [ 1053.371454][ T1187] do_user_addr_fault+0x75b/0x1340 [ 1053.371503][ T1187] exc_page_fault+0x6a/0xc0 [ 1053.371541][ T1187] asm_exc_page_fault+0x26/0x30 [ 1053.371564][ T1187] RIP: 0010:__put_user_4+0xd/0x20 [ 1053.371590][ T1187] Code: 66 89 01 31 c9 0f 01 ca e9 d0 79 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1053.371609][ T1187] RSP: 0018:ffffc900038f7cd8 EFLAGS: 00050206 [ 1053.371630][ T1187] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000200000000000 [ 1053.371645][ T1187] RDX: 0000000000000000 RSI: ffffffff8e2d5414 RDI: ffffffff8c2a8e80 [ 1053.371661][ T1187] RBP: ffffc900038f7e68 R08: ffffffff82179bff R09: ffff888099fb0338 [ 1053.371677][ T1187] R10: dffffc0000000000 R11: fffffbfff1cfd3dc R12: 1ffff9200071efa4 [ 1053.371694][ T1187] R13: 00000000000000a0 R14: 0000200000000000 R15: 0000000000000001 [ 1053.371717][ T1187] ? __might_fault+0xaf/0x130 [ 1053.371757][ T1187] vt_ioctl+0x193b/0x20c0 [ 1053.371792][ T1187] ? __pfx_vt_ioctl+0x10/0x10 [ 1053.371833][ T1187] ? __fget_files+0x2a/0x420 [ 1053.371870][ T1187] ? __fget_files+0x3a0/0x420 [ 1053.371899][ T1187] ? __fget_files+0x2a/0x420 [ 1053.371933][ T1187] tty_ioctl+0x928/0xde0 [ 1053.371967][ T1187] ? __pfx_tty_ioctl+0x10/0x10 [ 1053.372016][ T1187] __se_sys_ioctl+0xfc/0x170 [ 1053.372045][ T1187] do_syscall_64+0x14d/0xf80 [ 1053.372070][ T1187] ? trace_irq_disable+0x3b/0x140 [ 1053.372097][ T1187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.372120][ T1187] ? clear_bhb_loop+0x40/0x90 [ 1053.372149][ T1187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.372171][ T1187] RIP: 0033:0x7f386719c799 [ 1053.372191][ T1187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.372209][ T1187] RSP: 002b:00007f38653f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1053.372231][ T1187] RAX: ffffffffffffffda RBX: 00007f3867415fa0 RCX: 00007f386719c799 [ 1053.372248][ T1187] RDX: 0000200000000000 RSI: 0000000000005600 RDI: 0000000000000003 [ 1053.372263][ T1187] RBP: 00007f38653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.372277][ T1187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.372290][ T1187] R13: 00007f3867416038 R14: 00007f3867415fa0 R15: 00007fff632f9448 [ 1053.372324][ T1187] [ 1053.494099][ T8270] usb 6-1: Using ep0 maxpacket: 32 [ 1053.502868][ T8270] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1053.502907][ T8270] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1053.502936][ T8270] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1053.502962][ T8270] usb 6-1: config 1 has no interface number 0 [ 1053.503013][ T8270] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.503047][ T8270] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1053.503097][ T8270] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1053.503128][ T8270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.515992][ T8270] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1053.594539][T19367] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1053.823830][ T8270] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1054.036126][T19367] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.071116][T19367] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1054.108585][T19367] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.154231][T19367] usb 9-1: config 0 descriptor?? [ 1054.206220][T19367] pwc: Askey VC010 type 2 USB webcam detected. [ 1054.429004][ T8270] usb 6-1: USB disconnect, device number 14 [ 1054.449223][ T8270] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1054.547407][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.554183][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.569027][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1054.588103][T19367] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1054.626756][T19367] pwc: recv_control_msg error -32 req 02 val 2700 [ 1054.660593][T19367] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1054.674993][ T582] usb 10-1: 0:2 : does not exist [ 1054.686086][T19367] pwc: recv_control_msg error -32 req 04 val 1000 [ 1054.718216][ T1190] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1054.731919][T19367] pwc: recv_control_msg error -32 req 04 val 1300 [ 1054.774060][T19367] pwc: recv_control_msg error -32 req 04 val 1400 [ 1054.819802][T19367] pwc: recv_control_msg error -32 req 02 val 2000 [ 1054.845784][T19367] pwc: recv_control_msg error -32 req 02 val 2100 [ 1054.878985][T19367] pwc: recv_control_msg error -32 req 04 val 1500 [ 1054.896820][ T582] usb 10-1: USB disconnect, device number 3 [ 1054.903794][T19367] pwc: recv_control_msg error -32 req 02 val 2500 [ 1054.920658][T19367] pwc: recv_control_msg error -32 req 02 val 2400 [ 1054.936848][T19367] pwc: recv_control_msg error -32 req 02 val 2600 [ 1054.951202][T19367] pwc: recv_control_msg error -32 req 02 val 2900 [ 1054.969389][T19367] pwc: recv_control_msg error -32 req 02 val 2800 [ 1055.044954][ T914] udevd[914]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1055.185341][T19367] pwc: recv_control_msg error -71 req 04 val 1200 [ 1055.217170][T19367] pwc: Registered as video103. [ 1055.244260][T19367] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input158 [ 1055.291038][ T582] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1055.326377][T19367] usb 9-1: USB disconnect, device number 9 [ 1055.495528][ T582] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1055.517184][ T582] usb 10-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1055.534631][ T582] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.565317][ T582] usb 10-1: config 0 descriptor?? [ 1055.600859][ T1303] FAULT_INJECTION: forcing a failure. [ 1055.600859][ T1303] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.616287][ T1303] CPU: 0 UID: 0 PID: 1303 Comm: syz.7.3897 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.616320][ T1303] Tainted: [L]=SOFTLOCKUP [ 1055.616329][ T1303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.616342][ T1303] Call Trace: [ 1055.616351][ T1303] [ 1055.616363][ T1303] dump_stack_lvl+0xe8/0x150 [ 1055.616400][ T1303] should_fail_ex+0x412/0x560 [ 1055.616432][ T1303] should_failslab+0xa8/0x100 [ 1055.616457][ T1303] ? __skb_ext_alloc+0x1a/0x90 [ 1055.616484][ T1303] kmem_cache_alloc_noprof+0x87/0x650 [ 1055.616519][ T1303] ? __alloc_skb+0x55c/0x7d0 [ 1055.616547][ T1303] __skb_ext_alloc+0x1a/0x90 [ 1055.616574][ T1303] mptcp_sendmsg_frag+0x673/0x2d60 [ 1055.616615][ T1303] __subflow_push_pending+0x283/0xb40 [ 1055.616673][ T1303] __mptcp_push_pending+0x362/0x8e0 [ 1055.616716][ T1303] ? __pfx___mptcp_push_pending+0x10/0x10 [ 1055.616755][ T1303] ? __sk_mem_schedule+0x7f/0xf0 [ 1055.616786][ T1303] ? skb_page_frag_refill+0x119/0x460 [ 1055.616821][ T1303] mptcp_sendmsg+0x174b/0x1ab0 [ 1055.616878][ T1303] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1055.616907][ T1303] ? inet_send_prepare+0x5c/0x270 [ 1055.616939][ T1303] ? inet6_sendmsg+0x101/0x120 [ 1055.616969][ T1303] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1055.616997][ T1303] sock_sendmsg_nosec+0x90/0x150 [ 1055.617032][ T1303] ____sys_sendmsg+0x589/0x8c0 [ 1055.617062][ T1303] ? __might_fault+0xaf/0x130 [ 1055.617101][ T1303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.617140][ T1303] ? import_iovec+0x73/0xa0 [ 1055.617175][ T1303] ___sys_sendmsg+0x2a5/0x360 [ 1055.617203][ T1303] ? __lock_acquire+0x6b5/0x2cf0 [ 1055.617240][ T1303] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.617275][ T1303] ? kstrtouint+0x6e/0xe0 [ 1055.617328][ T1303] ? __fget_files+0x2a/0x420 [ 1055.617358][ T1303] ? __fget_files+0x3a0/0x420 [ 1055.617401][ T1303] __sys_sendmmsg+0x27c/0x4e0 [ 1055.617434][ T1303] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1055.617460][ T1303] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1055.617514][ T1303] ? ksys_write+0x242/0x270 [ 1055.617540][ T1303] ? __pfx_ksys_write+0x10/0x10 [ 1055.617571][ T1303] __x64_sys_sendmmsg+0xa0/0xc0 [ 1055.617603][ T1303] do_syscall_64+0x14d/0xf80 [ 1055.617630][ T1303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.617652][ T1303] ? clear_bhb_loop+0x40/0x90 [ 1055.617680][ T1303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.617702][ T1303] RIP: 0033:0x7f386719c799 [ 1055.617723][ T1303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.617742][ T1303] RSP: 002b:00007f38653f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1055.617766][ T1303] RAX: ffffffffffffffda RBX: 00007f3867415fa0 RCX: 00007f386719c799 [ 1055.617781][ T1303] RDX: 0000000000000001 RSI: 0000200000003180 RDI: 0000000000000003 [ 1055.617796][ T1303] RBP: 00007f38653f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.617810][ T1303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.617822][ T1303] R13: 00007f3867416038 R14: 00007f3867415fa0 R15: 00007fff632f9448 [ 1055.617857][ T1303] [ 1056.382253][ T5849] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1056.394743][ T5849] Bluetooth: hci4: Injecting HCI hardware error event [ 1056.404622][ T5849] Bluetooth: hci4: hardware error 0x00 [ 1056.478501][ T582] usbhid 10-1:0.0: can't add hid device: -71 [ 1056.485117][ T582] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1056.496420][ T582] usb 10-1: USB disconnect, device number 4 [ 1057.205884][ T30] audit: type=1326 audit(1774069108.035:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1375 comm="syz.7.3906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f386719c799 code=0x0 [ 1057.839340][ T1427] FAULT_INJECTION: forcing a failure. [ 1057.839340][ T1427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.895644][ T1427] CPU: 0 UID: 0 PID: 1427 Comm: syz.5.3916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1057.895679][ T1427] Tainted: [L]=SOFTLOCKUP [ 1057.895688][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.895701][ T1427] Call Trace: [ 1057.895710][ T1427] [ 1057.895720][ T1427] dump_stack_lvl+0xe8/0x150 [ 1057.895772][ T1427] should_fail_ex+0x412/0x560 [ 1057.895805][ T1427] _copy_to_user+0x31/0xb0 [ 1057.895838][ T1427] simple_read_from_buffer+0xe1/0x170 [ 1057.895875][ T1427] proc_fail_nth_read+0x1bb/0x230 [ 1057.895909][ T1427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1057.895944][ T1427] ? rw_verify_area+0x2a6/0x4d0 [ 1057.895964][ T1427] ? dput+0x37/0x1a0 [ 1057.895991][ T1427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1057.896034][ T1427] vfs_read+0x20c/0xa70 [ 1057.896054][ T1427] ? fdget_pos+0x246/0x320 [ 1057.896089][ T1427] ? __pfx___mutex_lock+0x10/0x10 [ 1057.896119][ T1427] ? __pfx_vfs_read+0x10/0x10 [ 1057.896146][ T1427] ? __fget_files+0x2a/0x420 [ 1057.896181][ T1427] ? __fget_files+0x3a0/0x420 [ 1057.896208][ T1427] ? __fget_files+0x2a/0x420 [ 1057.896247][ T1427] ksys_read+0x150/0x270 [ 1057.896271][ T1427] ? __pfx_ksys_read+0x10/0x10 [ 1057.896292][ T1427] ? __pfx_autofs_root_ioctl+0x10/0x10 [ 1057.896420][ T1427] do_syscall_64+0x14d/0xf80 [ 1057.896445][ T1427] ? trace_irq_disable+0x3b/0x140 [ 1057.896469][ T1427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.896491][ T1427] ? clear_bhb_loop+0x40/0x90 [ 1057.896518][ T1427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.896541][ T1427] RIP: 0033:0x7f9b9a75cfce [ 1057.896561][ T1427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1057.896579][ T1427] RSP: 002b:00007f9b9b72afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1057.896602][ T1427] RAX: ffffffffffffffda RBX: 00007f9b9b72b6c0 RCX: 00007f9b9a75cfce [ 1057.896618][ T1427] RDX: 000000000000000f RSI: 00007f9b9b72b0a0 RDI: 0000000000000004 [ 1057.896633][ T1427] RBP: 00007f9b9b72b090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.896646][ T1427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.896660][ T1427] R13: 00007f9b9aa16038 R14: 00007f9b9aa15fa0 R15: 00007fff9b49eac8 [ 1057.896693][ T1427] [ 1058.007641][ T1428] mkiss: ax0: crc mode is auto. [ 1058.276941][ T1442] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1415315873 (2830631746 ns) > initial count (1854604918 ns). Using initial count to start timer. [ 1058.297735][ T1442] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1058.466862][ T1446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 1058.543991][ T5849] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1058.929816][T30816] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1059.085073][T30816] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1059.094653][T30816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.106762][T30816] usb 9-1: Product: syz [ 1059.112227][T30816] usb 9-1: Manufacturer: syz [ 1059.117197][T30816] usb 9-1: SerialNumber: syz [ 1059.145307][T30816] usb 9-1: config 0 descriptor?? [ 1059.361860][T30816] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1059.979660][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1059.987774][ C0] lec:lec_tx_timeout: lec0 [ 1060.144218][ T1535] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3927'. [ 1060.200227][T24038] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1060.260852][ T1535] netlink: 'syz.9.3927': attribute type 13 has an invalid length. [ 1060.386997][T24038] usb 6-1: not running at top speed; connect to a high speed hub [ 1060.398559][T24038] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1060.418513][T24038] usb 6-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 1060.428255][T24038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.442812][T24038] usb 6-1: Product: syz [ 1060.447131][T24038] usb 6-1: Manufacturer: syz [ 1060.452994][T24038] usb 6-1: SerialNumber: syz [ 1060.580830][ T1470] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.3922'. [ 1060.841348][T30816] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1060.851769][T19367] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1060.892086][T30816] usb 9-1: USB disconnect, device number 11 [ 1060.930578][T24038] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1060.969413][T24038] usb 6-1: MIDIStreaming interface descriptor not found [ 1061.020215][T19367] usb 10-1: Using ep0 maxpacket: 32 [ 1061.042896][T19367] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1061.080149][T19367] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1061.125666][T19367] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1061.161752][T19367] usb 10-1: config 1 has no interface number 0 [ 1061.185256][T19367] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.221863][T24038] usb 6-1: USB disconnect, device number 15 [ 1061.233091][T19367] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1061.285973][T19367] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1061.319712][T19367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.388008][T19367] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1061.531995][ T1612] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3931'. [ 1061.578549][T19367] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1062.220852][T19367] usb 10-1: USB disconnect, device number 5 [ 1062.277653][T19367] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1063.019769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #14a!!! [ 1063.135269][ T1667] Bluetooth: MGMT ver 1.23 [ 1063.223563][ T1670] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3940'. [ 1063.933153][ T1704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1064.678278][ T1750] tipc: Enabled bearer , priority 0 [ 1064.741304][ T1750] syzkaller0: entered promiscuous mode [ 1064.752505][ T1750] syzkaller0: entered allmulticast mode [ 1064.779363][ T1755] tipc: Resetting bearer [ 1064.826942][ T1748] tipc: Resetting bearer [ 1064.942137][ T1748] tipc: Disabling bearer [ 1065.603405][T19367] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1065.786548][T19367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1065.828064][T19367] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 47675, setting to 64 [ 1066.049503][T19367] usb 9-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 1066.063504][T19367] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.071693][T19367] usb 9-1: Product: syz [ 1066.075976][T19367] usb 9-1: Manufacturer: syz [ 1066.080917][T19367] usb 9-1: SerialNumber: syz [ 1066.094831][T19367] usb 9-1: config 0 descriptor?? [ 1066.181446][ T1807] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.3963'. [ 1066.191091][ T1807] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1066.628618][T19367] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 1066.725530][ T1807] 0ªX¹¦Dö»: entered allmulticast mode [ 1066.771385][T19367] usb 9-1: Detected SIO [ 1066.904116][T19367] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 1066.926574][T19367] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1066.962142][T19367] usb 9-1: USB disconnect, device number 12 [ 1066.992980][T19367] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1067.032182][T19367] ftdi_sio 9-1:0.0: device disconnected [ 1067.418344][ T1839] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1069.262328][ T5896] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1070.012698][ T5896] usb 10-1: config 0 has an invalid interface number: 13 but max is 0 [ 1070.021538][ T5896] usb 10-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 1070.033167][ T5896] usb 10-1: config 0 has no interface number 0 [ 1070.039480][ T5896] usb 10-1: config 0 interface 13 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1070.054345][ T5896] usb 10-1: config 0 interface 13 has no altsetting 0 [ 1070.061926][ T5896] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1070.071550][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.088314][ T5896] usb 10-1: config 0 descriptor?? [ 1070.221159][T31740] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1070.306669][ T5896] usb 10-1: string descriptor 0 read error: -71 [ 1070.340318][ T5896] usb 10-1: USB disconnect, device number 6 [ 1070.409985][T31740] usb 9-1: Using ep0 maxpacket: 8 [ 1070.417782][T31740] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1070.427872][T31740] usb 9-1: config 0 has no interface number 0 [ 1070.439808][T31740] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1070.449153][T31740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.457681][T31740] usb 9-1: Product: syz [ 1070.462563][T31740] usb 9-1: Manufacturer: syz [ 1070.467517][T31740] usb 9-1: SerialNumber: syz [ 1070.477340][T31740] usb 9-1: config 0 descriptor?? [ 1070.912714][T31740] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1070.924512][ T1956] pim6reg: entered allmulticast mode [ 1070.930542][T31740] uvcvideo 9-1:0.31: No valid video chain found. [ 1070.943283][ T1956] pim6reg: left allmulticast mode [ 1071.118635][T24038] usb 9-1: USB disconnect, device number 13 [ 1071.239743][T31740] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1071.399755][T31740] usb 6-1: Using ep0 maxpacket: 16 [ 1071.407058][T31740] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1071.420391][T31740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1071.434665][T31740] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1071.444181][T31740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.452373][T31740] usb 6-1: Product: syz [ 1071.456629][T31740] usb 6-1: Manufacturer: syz [ 1071.462121][T31740] usb 6-1: SerialNumber: syz [ 1071.469410][T31740] usb 6-1: config 0 descriptor?? [ 1071.480893][T31740] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1071.490799][T31740] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1071.499866][ T5903] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1071.655167][ T5903] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.672345][ T5903] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1071.696987][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.705791][ T5903] usb 10-1: Product: syz [ 1071.712507][ T5903] usb 10-1: Manufacturer: syz [ 1071.717356][ T5903] usb 10-1: SerialNumber: syz [ 1071.999556][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.107178][T31740] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1072.122462][T31740] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1072.330084][ T2019] syzkaller0: entered promiscuous mode [ 1072.335779][ T2019] syzkaller0: entered allmulticast mode [ 1072.587406][ T5903] cdc_ncm 10-1:1.0: SET_CRC_MODE failed [ 1072.611777][ T5903] cdc_ncm 10-1:1.0: bind() failure [ 1072.627105][ T5903] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1072.634857][ T5903] cdc_ncm 10-1:1.1: bind() failure [ 1072.655756][ T5903] usb 10-1: USB disconnect, device number 7 [ 1072.749761][T31740] em28xx 6-1:0.0: AC97 command still being executed: not handled properly! [ 1072.758577][T31740] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1072.760018][T19367] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1072.919730][T19367] usb 9-1: Using ep0 maxpacket: 32 [ 1072.928884][T19367] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1072.942852][T31740] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1072.946994][T19367] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1072.972003][T19367] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1072.978446][T31740] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1072.983687][T19367] usb 9-1: Product: syz [ 1072.991877][T19367] usb 9-1: Manufacturer: syz [ 1072.996769][T19367] usb 9-1: SerialNumber: syz [ 1073.004353][T31740] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1073.013166][T31740] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1073.018827][T19367] usb 9-1: config 0 descriptor?? [ 1073.026301][ T2026] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 1073.044618][T31740] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1073.063231][T31740] usb 6-1: USB disconnect, device number 16 [ 1073.230026][ T2063] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4016'. [ 1073.276645][ T5160] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1073.287088][ T5160] CPU: 1 UID: 0 PID: 5160 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.287124][ T5160] Tainted: [L]=SOFTLOCKUP [ 1073.287133][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1073.287150][ T5160] Workqueue: hci3 hci_rx_work [ 1073.287183][ T5160] Call Trace: [ 1073.287193][ T5160] [ 1073.287203][ T5160] dump_stack_lvl+0xe8/0x150 [ 1073.287241][ T5160] sysfs_create_dir_ns+0x271/0x2a0 [ 1073.287278][ T5160] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1073.287312][ T5160] ? do_raw_spin_unlock+0xf5/0x210 [ 1073.287346][ T5160] kobject_add_internal+0x62b/0xd00 [ 1073.287389][ T5160] kobject_add+0x163/0x240 [ 1073.287444][ T5160] ? __pfx_kobject_add+0x10/0x10 [ 1073.287476][ T5160] ? _raw_spin_unlock+0x28/0x50 [ 1073.287505][ T5160] ? get_device_parent+0x366/0x3a0 [ 1073.287534][ T5160] device_add+0x408/0xb70 [ 1073.287575][ T5160] hci_conn_add_sysfs+0xd5/0x210 [ 1073.287604][ T5160] le_conn_complete_evt+0xf1d/0x1430 [ 1073.287650][ T5160] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1073.287681][ T5160] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1073.287715][ T5160] ? __pfx___mutex_lock+0x10/0x10 [ 1073.287744][ T5160] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1073.287771][ T5160] ? skb_pull_data+0xfb/0x200 [ 1073.287811][ T5160] hci_le_conn_complete_evt+0x187/0x470 [ 1073.287851][ T5160] hci_event_packet+0x7af/0x12c0 [ 1073.287884][ T5160] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1073.287915][ T5160] ? __pfx_hci_event_packet+0x10/0x10 [ 1073.287945][ T5160] ? kcov_remote_start+0x49a/0x7a0 [ 1073.287975][ T5160] ? hci_send_to_monitor+0xe2/0x590 [ 1073.288012][ T5160] hci_rx_work+0x3ee/0x1040 [ 1073.288050][ T5160] ? process_one_work+0x8b7/0x1710 [ 1073.288081][ T5160] process_one_work+0x9a3/0x1710 [ 1073.288137][ T5160] ? __pfx_process_one_work+0x10/0x10 [ 1073.288166][ T5160] ? do_raw_spin_lock+0x12b/0x2f0 [ 1073.288210][ T5160] worker_thread+0xba8/0x11e0 [ 1073.288241][ T5160] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1073.288267][ T5160] ? __kthread_parkme+0x7a/0x1f0 [ 1073.288290][ T5160] ? __kthread_parkme+0x19c/0x1f0 [ 1073.288325][ T5160] kthread+0x388/0x470 [ 1073.288351][ T5160] ? __pfx_worker_thread+0x10/0x10 [ 1073.288370][ T5160] ? __pfx_kthread+0x10/0x10 [ 1073.288397][ T5160] ret_from_fork+0x51e/0xb90 [ 1073.288441][ T5160] ? __pfx_ret_from_fork+0x10/0x10 [ 1073.288472][ T5160] ? __switch_to+0xc7d/0x1420 [ 1073.288504][ T5160] ? __pfx_kthread+0x10/0x10 [ 1073.288531][ T5160] ret_from_fork_asm+0x1a/0x30 [ 1073.288571][ T5160] [ 1073.288635][ T5160] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1073.558997][ T5160] Bluetooth: hci3: failed to register connection device [ 1073.660153][ T2077] netlink: 'syz.5.4019': attribute type 2 has an invalid length. [ 1074.422945][ T2105] input: syz0 as /devices/virtual/input/input159 [ 1074.489824][T19367] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1074.646626][ T2118] netlink: 'syz.7.4029': attribute type 2 has an invalid length. [ 1074.659707][T19367] usb 6-1: Using ep0 maxpacket: 32 [ 1074.678026][T19367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.696199][T19367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.706820][T19367] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1074.717705][T19367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.749116][T19367] usb 6-1: config 0 descriptor?? [ 1075.172793][ T5946] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1075.201424][T19367] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1075.226729][T19367] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1075.381428][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1075.404501][T19367] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 1075.429936][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1075.452556][ T5946] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1075.478669][ T5946] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1075.540850][ T5946] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1075.575281][ T5946] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.886237][ T5903] usb 9-1: USB disconnect, device number 14 [ 1076.042815][T19367] usb 6-1: USB disconnect, device number 17 [ 1076.070923][ T5946] usb 10-1: config 0 descriptor?? [ 1076.712110][ T2186] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4038'. [ 1076.806683][ T5946] plantronics 0003:047F:FFFF.0022: ignoring exceeding usage max [ 1076.891077][ T5946] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1077.301205][ T2223] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4045'. [ 1078.511657][ T2244] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1078.520062][ T2244] kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 1078.528348][ T2244] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 1078.538187][ T2244] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1078.546352][ T2244] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 1078.554510][ T2244] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1079.029749][T24038] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1079.192119][T24038] usb 9-1: Using ep0 maxpacket: 16 [ 1079.211251][T24038] usb 9-1: config 0 has no interfaces? [ 1079.222202][T24038] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1079.245520][T24038] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.275565][T24038] usb 9-1: config 0 descriptor?? [ 1079.444301][ T3438] usb 10-1: USB disconnect, device number 8 [ 1079.520999][T31740] usb 9-1: USB disconnect, device number 15 [ 1079.580050][T19367] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1079.602922][ T2316] netlink: 'syz.9.4055': attribute type 10 has an invalid length. [ 1079.613592][ T2316] macvlan0: entered allmulticast mode [ 1079.627525][ T2316] veth1_vlan: entered allmulticast mode [ 1079.645143][ T2316] team0: Port device macvlan0 added [ 1079.740010][ T5160] Bluetooth: hci3: command 0x0406 tx timeout [ 1079.746695][T19367] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1079.761397][T19367] usb 6-1: config 0 has no interface number 0 [ 1079.777919][T19367] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1079.807595][T19367] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1079.830644][T19367] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.855161][T19367] usb 6-1: Product: syz [ 1079.866290][T19367] usb 6-1: Manufacturer: syz [ 1079.879184][T19367] usb 6-1: SerialNumber: syz [ 1079.906056][T19367] usb 6-1: config 0 descriptor?? [ 1079.945241][T19367] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1080.213340][ T3438] usb 6-1: USB disconnect, device number 18 [ 1080.237929][ T2349] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4060'. [ 1080.254928][ T2349] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4060'. [ 1080.268671][ T3438] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1080.402227][ T2362] input: syz0 as /devices/virtual/input/input160 [ 1080.419881][T31740] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1080.622730][T31740] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.672173][T31740] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.695139][T31740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.703977][T31740] usb 9-1: Product: syz [ 1080.708294][T31740] usb 9-1: Manufacturer: syz [ 1080.724655][T31740] usb 9-1: SerialNumber: syz [ 1081.973968][T31740] cdc_ncm 9-1:1.0: SET_CRC_MODE failed [ 1082.011173][T31740] cdc_ncm 9-1:1.0: bind() failure [ 1082.032693][T31740] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1082.044656][T31740] cdc_ncm 9-1:1.1: bind() failure [ 1082.079750][T19367] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1082.084767][T31740] usb 9-1: USB disconnect, device number 16 [ 1082.231480][ T2227] Bluetooth: hci0: command 0x0406 tx timeout [ 1082.269676][T19367] usb 10-1: Using ep0 maxpacket: 32 [ 1082.291034][ T2436] input: syz0 as /devices/virtual/input/input161 [ 1082.307966][T19367] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1082.354647][T19367] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1082.393000][T19367] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1082.423542][T19367] usb 10-1: Product: syz [ 1082.445767][T19367] usb 10-1: Manufacturer: syz [ 1082.462418][T19367] usb 10-1: SerialNumber: syz [ 1082.487251][T19367] usb 10-1: config 0 descriptor?? [ 1082.504157][ T2403] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1082.734837][ T5895] usb 10-1: USB disconnect, device number 9 [ 1082.756192][ T2462] netlink: 'syz.8.4073': attribute type 1 has an invalid length. [ 1082.785991][ T2462] netlink: 'syz.8.4073': attribute type 3 has an invalid length. [ 1082.812155][ T2462] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4073'. [ 1086.035417][ T2490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1086.258847][ T2547] tipc: Enabled bearer , priority 0 [ 1086.291079][ T2547] tipc: Enabled bearer , priority 0 [ 1086.489035][ T2568] netlink: 'syz.8.4090': attribute type 10 has an invalid length. [ 1086.512191][ T2568] macvlan0: entered allmulticast mode [ 1086.531252][ T2568] veth1_vlan: entered allmulticast mode [ 1086.563826][ T2568] team0: Port device macvlan0 added [ 1086.775933][ T2585] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4093'. [ 1086.919983][ T5896] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1087.069825][ T5896] usb 9-1: Using ep0 maxpacket: 8 [ 1087.077663][ T5896] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1087.089370][ T5896] usb 9-1: config 179 has no interface number 0 [ 1087.097294][ T5896] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1087.110681][ T5896] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1087.122533][ T5896] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1087.134061][ T5896] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1087.146172][ T5896] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1087.163566][ T5896] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1087.173108][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.190527][ T2580] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1087.348882][T12016] lec:lec_start_xmit: lec0:No lecd attached [ 1087.539813][ T582] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1087.693621][T31740] usb 9-1: USB disconnect, device number 17 [ 1087.699844][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1087.699913][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1087.737090][ T582] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1087.762960][ T582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1087.775144][ T582] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1087.813307][ T582] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1087.846897][ T582] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1087.856476][ T582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.878870][ T582] usb 6-1: config 0 descriptor?? [ 1088.308877][ T582] plantronics 0003:047F:FFFF.0023: ignoring exceeding usage max [ 1088.362094][ T5160] Bluetooth: min 6 > max 0 [ 1088.382437][T31740] libceph: connect (1)[c::]:6789 error -101 [ 1088.401187][ T582] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1088.436511][T31740] libceph: mon0 (1)[c::]:6789 connect error [ 1088.446516][ T582] libceph: connect (1)[c::]:6789 error -101 [ 1088.452953][ T582] libceph: mon0 (1)[c::]:6789 connect error [ 1088.645766][ T2675] tipc: Enabled bearer , priority 10 [ 1088.729016][ T582] libceph: connect (1)[c::]:6789 error -101 [ 1088.748680][ T582] libceph: mon0 (1)[c::]:6789 connect error [ 1088.763322][T31740] libceph: connect (1)[c::]:6789 error -101 [ 1088.770150][T31740] libceph: mon0 (1)[c::]:6789 connect error [ 1088.847265][ T2683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4109'. [ 1089.158262][ T2661] ceph: No mds server is up or the cluster is laggy [ 1089.175448][ T582] usb 6-1: USB disconnect, device number 19 [ 1089.188313][ T2651] ceph: No mds server is up or the cluster is laggy [ 1089.264507][T19367] libceph: connect (1)[c::]:6789 error -101 [ 1089.272782][T19367] libceph: mon0 (1)[c::]:6789 connect error [ 1089.290329][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 1089.318117][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 1089.443309][ T5160] Bluetooth: hci3: command 0x0406 tx timeout [ 1089.600067][ T1811] tipc: Resetting bearer [ 1089.799740][T31740] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1089.949787][T31740] usb 10-1: Using ep0 maxpacket: 8 [ 1089.964745][T31740] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1089.974962][T31740] usb 10-1: config 179 has no interface number 0 [ 1089.982434][T31740] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1089.994936][T31740] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1090.008596][T31740] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1090.020148][T31740] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1090.033099][T31740] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1090.047666][T31740] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1090.063862][T31740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.091628][ T2742] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1090.374014][ T2734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1090.388771][ T5160] Bluetooth: hci0: command 0x0406 tx timeout [ 1090.562761][ T3438] usb 10-1: USB disconnect, device number 10 [ 1090.562783][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1090.577786][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1090.646171][ T2793] tipc: Enabled bearer , priority 0 [ 1091.632014][ T2841] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4130'. [ 1092.177310][ T2891] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 1092.187239][ T2891] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 1092.195635][ T2891] kvm: requested 62019 ns i8254 timer period limited to 200000 ns [ 1092.205216][ T2891] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 1092.214545][ T2891] kvm: requested 139123 ns i8254 timer period limited to 200000 ns [ 1092.223022][ T2891] kvm: requested 35200 ns i8254 timer period limited to 200000 ns [ 1092.231925][ T2891] kvm: requested 192762 ns i8254 timer period limited to 200000 ns [ 1092.241263][ T2891] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 1092.253824][ T2891] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 1092.262156][ T2891] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 1092.371000][T31740] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1092.541797][T31740] usb 6-1: Using ep0 maxpacket: 8 [ 1092.548826][T31740] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1092.557792][T31740] usb 6-1: config 179 has no interface number 0 [ 1092.564480][T31740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1092.575768][T31740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1092.587273][T31740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1092.598551][T31740] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1092.610118][T31740] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1092.624744][T31740] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1092.633974][T31740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.646123][ T2883] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1093.029784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 1093.037897][ C0] lec:lec_tx_timeout: lec0 [ 1093.085006][ T582] usb 6-1: USB disconnect, device number 20 [ 1093.085253][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1093.099347][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1094.063808][ T2944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.079833][ T3438] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1094.091388][T24038] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1094.128108][ T2944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.155424][ T2944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.243402][ T3438] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.260592][T24038] usb 6-1: Using ep0 maxpacket: 32 [ 1094.272520][T24038] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1094.282575][T24038] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1094.292481][T24038] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1094.301750][T24038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1094.303747][ T3438] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1094.312049][T24038] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1094.331872][T24038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1094.340354][ T3438] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.352739][T24038] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1094.361618][ T3438] usb 9-1: Product: syz [ 1094.367037][T24038] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1094.373527][ T3438] usb 9-1: Manufacturer: syz [ 1094.381979][T24038] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1094.397730][T24038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.399977][ T3438] usb 9-1: SerialNumber: syz [ 1094.417944][T24038] usb 6-1: config 0 descriptor?? [ 1094.642313][T24038] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1094.664846][T24038] usb 6-1: USB disconnect, device number 21 [ 1094.692364][T24038] usblp0: removed [ 1095.005225][ T3006] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4158'. [ 1095.081960][ T3438] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 1095.102589][ T3438] cdc_ncm 9-1:1.0: bind() failure [ 1095.118879][ T3438] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1095.128186][ T3438] cdc_ncm 9-1:1.1: bind() failure [ 1095.144570][ T3438] usb 9-1: USB disconnect, device number 18 [ 1095.191211][T24038] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1095.403442][T24038] usb 6-1: Using ep0 maxpacket: 32 [ 1095.410890][T24038] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1095.419571][T24038] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1095.430785][T24038] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1095.442071][T24038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1095.453716][T24038] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1095.469824][T31740] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1095.515273][T24038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1095.536017][T24038] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1095.558419][T24038] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1095.619094][T24038] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1095.642272][T24038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.662769][T24038] usb 6-1: config 0 descriptor?? [ 1095.681971][T31740] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1095.705985][T31740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1095.738538][T31740] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1095.784502][T31740] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1095.827233][T31740] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1095.849141][T31740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.865921][T31740] usb 10-1: config 0 descriptor?? [ 1095.918849][T24038] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1095.981019][T24038] usb 6-1: USB disconnect, device number 22 [ 1096.028725][T24038] usblp0: removed [ 1096.297232][ T3087] tipc: Enabling of bearer rejected, already enabled [ 1096.323741][T31740] plantronics 0003:047F:FFFF.0024: ignoring exceeding usage max [ 1096.364273][T31740] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1096.832808][ T3121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4171'. [ 1096.999736][ T5946] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1097.111296][ T3136] tipc: Enabling of bearer rejected, already enabled [ 1097.175272][ T5946] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1097.197543][ T5946] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.207610][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.216580][ T5946] usb 6-1: Product: syz [ 1097.222349][ T5946] usb 6-1: Manufacturer: syz [ 1097.227116][ T5946] usb 6-1: SerialNumber: syz [ 1097.640872][ T3159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4180'. [ 1097.849994][ T5946] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1097.869891][ T5946] cdc_ncm 6-1:1.0: bind() failure [ 1097.885068][ T5946] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1097.895694][ T5946] cdc_ncm 6-1:1.1: bind() failure [ 1097.919328][ T5946] usb 6-1: USB disconnect, device number 23 [ 1098.404352][ T3186] tipc: Enabled bearer , priority 0 [ 1098.616544][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4189'. [ 1098.762894][ T582] usb 10-1: USB disconnect, device number 11 [ 1099.172049][ T582] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1099.252622][T24038] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1099.352851][ T582] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.383388][ T582] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.398857][ T582] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.416724][ T582] usb 10-1: Product: syz [ 1099.428800][ T582] usb 10-1: Manufacturer: syz [ 1099.429281][T24038] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1099.443338][ T582] usb 10-1: SerialNumber: syz [ 1099.450825][T24038] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1099.466648][T24038] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1099.495647][T24038] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1099.535114][T24038] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1099.544830][T24038] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.563288][T24038] usb 9-1: config 0 descriptor?? [ 1099.829718][T31740] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1099.985557][T24038] plantronics 0003:047F:FFFF.0025: ignoring exceeding usage max [ 1099.987924][T31740] usb 6-1: Using ep0 maxpacket: 16 [ 1100.013268][T31740] usb 6-1: config 0 has no interfaces? [ 1100.020632][T31740] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1100.030515][T24038] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1100.046924][T31740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.074701][T31740] usb 6-1: config 0 descriptor?? [ 1100.089867][ T582] cdc_ncm 10-1:1.0: failed GET_NTB_PARAMETERS [ 1100.099439][ T582] cdc_ncm 10-1:1.0: bind() failure [ 1100.122667][ T582] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1100.132196][ T582] cdc_ncm 10-1:1.1: bind() failure [ 1100.164580][ T582] usb 10-1: USB disconnect, device number 12 [ 1100.286211][ T3438] usb 6-1: USB disconnect, device number 24 [ 1101.176619][ T3327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.244896][ T3327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.271791][ T3327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.969770][ T582] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1102.149847][ T582] usb 10-1: Using ep0 maxpacket: 16 [ 1102.157065][ T582] usb 10-1: config 0 has no interfaces? [ 1102.164211][ T582] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1102.186187][ T582] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.216617][ T582] usb 10-1: config 0 descriptor?? [ 1102.421165][T24038] usb 9-1: USB disconnect, device number 19 [ 1102.442054][ T582] usb 10-1: USB disconnect, device number 13 [ 1103.000111][ T3460] wlan1: No legacy rates in association response [ 1103.309856][ T582] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1103.506239][ T582] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1103.531643][ T582] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1103.562680][ T582] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1103.584846][ T582] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1103.601229][ T582] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1103.611069][ T582] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.641064][ T582] usb 10-1: config 0 descriptor?? [ 1104.074282][ T582] plantronics 0003:047F:FFFF.0026: ignoring exceeding usage max [ 1104.119050][ T582] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1104.263612][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4241'. [ 1105.190763][ T3513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1105.393282][ T3552] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4250'. [ 1105.775086][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4251'. [ 1106.118606][ T5895] usb 10-1: USB disconnect, device number 14 [ 1109.762053][ T3593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.879622][ C1] sched: DL replenish lagged too much [ 1116.613179][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.648135][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.633731][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1129.892150][ T1313] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1132.007054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 1132.015187][ C0] lec:lec_tx_timeout: lec0 [ 1137.079462][ T5160] Bluetooth: hci1: command 0x0406 tx timeout [ 1182.223542][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.601309][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1197.138328][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1201.629712][ T1313] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1202.177557][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1202.185676][ C0] lec:lec_tx_timeout: lec0 [ 1246.912010][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.950437][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1261.992522][ T1313] lec:lec_start_xmit: lec0:No lecd attached [ 1267.023710][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1267.031888][ C0] lec:lec_tx_timeout: lec0 [ 1269.459548][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1269.466564][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3438/1:b..l [ 1269.475407][ C1] rcu: (detected by 1, t=10503 jiffies, g=214997, q=502522 ncpus=2) [ 1269.483540][ C1] task:kworker/0:2 state:R running task stack:20328 pid:3438 tgid:3438 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1269.499702][ C1] Workqueue: events_power_efficient gc_worker [ 1269.505853][ C1] Call Trace: [ 1269.509192][ C1] [ 1269.512238][ C1] __schedule+0x165c/0x5560 [ 1269.516922][ C1] ? netlink_broadcast_filtered+0xee4/0x1020 [ 1269.523044][ C1] ? send_dm_alert+0xae/0xf0 [ 1269.527727][ C1] ? __pfx___schedule+0x10/0x10 [ 1269.532632][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1269.537658][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1269.542758][ C1] irqentry_exit+0x5e4/0x700 [ 1269.547409][ C1] ? trace_irq_disable+0x3b/0x140 [ 1269.552495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1269.558625][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 1269.565533][ C1] Code: 38 2a 7c 11 65 8b 0d 59 2a 7c 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 8c 16 00 00 00 74 52 8b 8a 68 16 00 00 <83> f9 03 75 47 48 8b 8a 70 16 00 00 44 8b 8a 6c 16 00 00 49 c1 e1 [ 1269.585280][ C1] RSP: 0018:ffffc9000e31f9d8 EFLAGS: 00000246 [ 1269.591433][ C1] RAX: ffffffff89d86088 RBX: 0000000000000001 RCX: 0000000000000000 [ 1269.599545][ C1] RDX: ffff8880339edb80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1269.607606][ C1] RBP: ffffc9000e31fb30 R08: ffffffff903444f7 R09: 1ffffffff206889e [ 1269.615632][ C1] R10: dffffc0000000000 R11: fffffbfff206889f R12: dffffc0000000000 [ 1269.623659][ C1] R13: ffff888033a2eb18 R14: 0000000000000000 R15: 000000000000ec8e [ 1269.631688][ C1] ? gc_worker+0x318/0x1290 [ 1269.636288][ C1] gc_worker+0x318/0x1290 [ 1269.640853][ C1] ? gc_worker+0x25d/0x1290 [ 1269.645437][ C1] ? __pfx_gc_worker+0x10/0x10 [ 1269.650261][ C1] ? process_one_work+0x8b7/0x1710 [ 1269.655438][ C1] process_one_work+0x9a3/0x1710 [ 1269.660459][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1269.665904][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1269.671006][ C1] worker_thread+0xba8/0x11e0 [ 1269.675856][ C1] kthread+0x388/0x470 [ 1269.680075][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1269.685232][ C1] ? __pfx_kthread+0x10/0x10 [ 1269.689882][ C1] ret_from_fork+0x51e/0xb90 [ 1269.694538][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1269.699709][ C1] ? __switch_to+0xc7d/0x1420 [ 1269.704452][ C1] ? __pfx_kthread+0x10/0x10 [ 1269.709105][ C1] ret_from_fork_asm+0x1a/0x30 [ 1269.713936][ C1] [ 1275.782644][ T31] INFO: task kworker/0:5:19367 blocked for more than 147 seconds. [ 1275.935460][ T31] Tainted: G L syzkaller #0 [ 1275.972254][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1278.946851][ T1313] clip:clip_start_xmit: skb_dst(skb) == NULL