last executing test programs: 1m5.94853328s ago: executing program 2 (id=35): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xc8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="50000000130001002abd7000f8dbcf2504004f8008003300", @ANYRES32, @ANYBLOB="1800258014001c0020010000000000000000000000000001080013"], 0x50}], 0x1}, 0x8880) 1m5.814830975s ago: executing program 2 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1b2) (async) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x3, &(0x7f0000000600)=[{0x400, 0x47, 0x5, 0x7}, {0xd, 0xe, 0x7f, 0x400000}, {0x6, 0x4, 0x6, 0xeb78}]}, 0x10) (rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000640)={'wlan0\x00', 0xfffffffe}) (async) ioctl(r0, 0x8b22, &(0x7f0000000680)="0815eb29ebad9d024535172304c0090000002a397e33f0639506b5c6bbb5c32ca711577ebded2c4a3db2742814dff8308ae5a28a13f759cf945c791cc1ac05160aa9c1cfd877132364118299b1c9") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write$P9_RREADLINK(r1, &(0x7f00000003c0)={0x35, 0x17, 0x2, {0x2c, './sys/devices/system/cpu/cpu1/hotplug/target'}}, 0x35) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000580)={'pim6reg\x00', &(0x7f0000000540)=@ethtool_wolinfo={0x5, 0xffff7beb, 0x10001, "536d85a1e28f"}}) (rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7ff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x48000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000700), 0x88a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000740)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000780)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000007c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000840)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x7fffff, 0x0, 0x334e8b}) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010000112233445566778899aabb08004500e4140000000001170000010203040506070800000c00020006000600080000000e00030008001400040007"], 0x68}}, 0x0) (async, rerun: 32) r7 = fsmount(0xffffffffffffffff, 0x1, 0x81) (rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x4c}}, 0x4010) 1m5.431032661s ago: executing program 2 (id=39): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESHEX], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044007}, 0x20000040) 1m4.091810109s ago: executing program 2 (id=44): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x111) (async) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$bind(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x48401, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x400c6f02, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000040)={0x10002, 0x4, 0x6000, 0x1000, &(0x7f00003e7000/0x1000)=nil, 0x100000, r1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000002380)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f00000023c0)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bind$vsock_stream(r4, &(0x7f0000002400)={0x28, 0x0, 0x8703268b, @local}, 0x10) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m3.990265829s ago: executing program 2 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000000c0)) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1b6) acct(0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000140)=ANY=[]) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000180)=0x5) r5 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) r6 = fanotify_init(0x200, 0x1000) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r8 = dup(r5) fanotify_mark(r6, 0x1, 0x48001028, r8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101041, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1m3.775922331s ago: executing program 2 (id=46): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x40382, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(0x4) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000280)={'veth1_to_bond\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='cgroup2\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='300', 0x3) unshare(0x40000000) 1m3.47498835s ago: executing program 32 (id=46): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x40382, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(0x4) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000280)={'veth1_to_bond\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000180)='cgroup2\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='300', 0x3) unshare(0x40000000) 52.338092729s ago: executing program 3 (id=94): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) r1 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) (async) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000001c0)={0x77359400}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x1, 0x8, 0x3, 0x33a7}, {0x0, 0x2, 0x4, 0x84ae}, {0x1cf2, 0xea, 0x4, 0xffffffff}, {0x8, 0x7, 0x5, 0x7}]}, 0x10) (async) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = gettid() (async) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x480342, 0x0) ioctl$mixer_OSS_GETVERSION(r5, 0x80044d76, &(0x7f00000000c0)) (async) timer_create(0x200000000000000, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r6 = socket$kcm(0x28, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) close(r6) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x2000007, 0x8010, r7, 0x478f2000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r3, 0x3, 0x80000}) 51.449704051s ago: executing program 3 (id=98): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x401, [0x7, 0x1], 0x2}, 0x10) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x401, [0x7, 0x1], 0x2}, 0x10) execve(&(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x0, 0x0) 51.321855915s ago: executing program 3 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x18}}, 0x4000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000003640)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000003680)='./file1\x00', 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000003cc0)={0x6b, 0x6, 0x7f, 0x0, 0x3, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f00000036c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000003700)='./bus\x00', &(0x7f0000003740), 0x0, &(0x7f0000003780)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000037c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000003bc0)='./file7/file0\x00', 0x1be) renameat2(0xffffffffffffff9c, &(0x7f0000003840)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000003880)='./file7/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003800)='./mnt\x00', 0x1ff) mount$nfs(0x0, &(0x7f0000003c00)='./mnt\x00', &(0x7f0000003c40), 0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB='addr=127.0.0.1,port=202049']) mkdirat(0xffffffffffffff9c, &(0x7f00000038c0)='./file0\x00', 0x50) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000480)=""/4097, 0x1001}, {&(0x7f00000014c0)=""/151, 0xa6}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4072, 0xfe8}, {&(0x7f00000025c0)=""/4105, 0x1009}], 0x2}, 0x7}], 0x7, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000003b80)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000003900)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000003940)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003980)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x5) sendfile(r2, r3, 0x0, 0x7ffff006) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000003ac0)={@l2={0x1f, 0x6fa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffa6, 0x1}, {&(0x7f00000039c0)=""/170, 0xaa}, &(0x7f0000003a80), 0x49}, 0xa0) 51.098401689s ago: executing program 1 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x1, 0x7fffffff, 0x7, 0x4}, 0x10) sendto$inet6(r0, &(0x7f0000000040)="c687b3ba38fff506274d997eb3247e1af2ebca0eb9f1959101da8c40c73840edc6f6a019f7968d8e4717f6b3d91a819e61411679bee7d9268d9a183f3fbc4426d7f150c65e1437299102283700913dd5cd11f75a547a56bb9d963b322d68effdc62be81ab2ff27889b1ce575cf913ea47dbf8fa931ade3eb34eae789208434aa71bed4738c07bcabc164f28f7d9b957a0ad71d136e951d69919c31328dc03977885aba52", 0xa4, 0x1, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x40}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), 0x4) getsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={r1, 0x78, &(0x7f0000000200)=[@in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x9}, @in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x6, 0x0}}, @in6={0xa, 0x4e21, 0x10001, @private0, 0xc9c}]}, &(0x7f00000002c0)=0x10) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffff7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xedc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) r3 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000380)={r2, 0x401, 0x20}, 0xc) rt_sigtimedwait(&(0x7f00000003c0)={[0x9]}, 0x0, &(0x7f0000000400), 0x8) write$ublk_bdev(r3, &(0x7f0000000440)="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", 0x1000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000001440)=0x10, 0x4) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000001480)={0x1, 0x0, [{0x80000019, 0x4a, 0x3, 0x8, 0x3, 0xffffffff, 0xfffffff9}]}) sendto$inet6(r0, &(0x7f00000014c0)="c1d5be9d928be31cf61bf861180c4f92a6f01d0a7e95f86c30990d3bd899f7192a1c8c67beeb7d627a17ce0f63258506bc23a40bcb8dcc4ca475c2db5dd676943f6162f29165c58eee7beb6d27c1e9344a1047fb4ccef8", 0x57, 0x8041, &(0x7f0000001540)={0xa, 0x4e22, 0x4f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) r5 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000001580)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000015c0)={0x4, 0x0, 0x2, 0x0, 'syz1\x00', 0x7a9}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r6, &(0x7f0000004100)=[{{&(0x7f0000001600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001680)=""/37, 0x25}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2}, 0x10001}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002700)=""/181, 0xb5}, {&(0x7f00000027c0)=""/144, 0x90}], 0x2, &(0x7f00000028c0)=""/77, 0x4d}, 0x49}, {{&(0x7f0000002940)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004000)=[{&(0x7f00000029c0)=""/233, 0xe9}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/186, 0xba}, {&(0x7f0000003b80)=""/195, 0xc3}, {&(0x7f0000003c80)=""/231, 0xe7}, {&(0x7f0000003d80)=""/83, 0x53}, {&(0x7f0000003e00)=""/167, 0xa7}, {&(0x7f0000003ec0)=""/190, 0xbe}, {&(0x7f0000003f80)=""/83, 0x53}], 0x9, &(0x7f00000040c0)=""/4, 0x4}}], 0x3, 0x141, 0x0) io_setup(0x6, &(0x7f00000041c0)=0x0) io_submit(r7, 0x0, &(0x7f0000004200)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000004240), 0x10000, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000004280)={0xc7}, 0x1) syz_open_dev$sndctrl(&(0x7f00000042c0), 0x1, 0x80400) shutdown(r5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000004300)={0x9, 0x3, 0x8008, 0x4, 0xc, 0x1, 0x4, 0x0, r1}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000004340)={'HL\x00'}, &(0x7f0000004380)=0x1e) 50.122945605s ago: executing program 1 (id=104): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000240)={0x7, "a2d0cdd6817db2f3118bddc5f6c45a29996f1af8192a7ddcdd88e4822760ce2c26fd8ff3e63b86fd80cd6ec39a52deed455256c54baf22a3abe27dbacfb8befa98a43d62eac628e6847afcee97b056eb694ec0ddfd6be253a23793cf048511cbd0b8a38eec66dcee72543f23090018a8ca4830ab6cfc465117958440368a3382"}) 49.700375367s ago: executing program 1 (id=105): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffff8, @loopback, 0x10000}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x1}, 0x8) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x602901, 0x40) r3 = syz_open_dev$vim2m(&(0x7f0000000880), 0x800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000008c0)={0x8, 0x2, 0x2, 0x0, 0xb8}) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000900)={0xf0f022}) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000580)) r4 = syz_usb_connect(0x3, 0x50, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x2}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x64008000) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_write(r4, 0x83, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000080) syz_usb_ep_write(r4, 0x83, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_write(r4, 0x83, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_read(r4, 0x4, 0x0, 0x0) syz_usb_ep_write(r4, 0x83, 0x0, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x42, 0x28, {0x28, 0x11, "4f731e4ab956a64c9e8b59d8c6c98fde8768d73cd9a60e61d04ab8dbb8d4b2254f0dde5df200"}}, &(0x7f0000000180)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "6e2b262ec4fbd583d5402b7fa33ce676fe34566144dd3fed5fa8a27812cafc128d3614c73d58473ebde8f1577b058ddfffb8c40db4f43c0ea265df6a6922de7644f0d84c3b15104760d56761c18f1f978c22ac8fa33ee30b162f"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0xf, 0x81, "9b9c5c61f85045ac35b3e97804c2402dc55579b02e128f990ad037723e0c65d3f35892ea4fed1a74247523caa280794554079bd902c2dd2d3e5f948e02a0c19aaf016b7b73b4cdcc743a9fc370d1834d6334ec893020feeb218c8f39910532b71f8b526d0009ad6e07d0cac353f309db40a19c90a9992322d91f098a2c7e803dc8"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x81, 0x3, "7fc197"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "14"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'G'}, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/10], &(0x7f0000000480)={0x20, 0x85, 0x3, 'epc'}}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 48.090899095s ago: executing program 3 (id=112): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)={0x200000, 0x5, 0x0, 0x0, 0x400000}) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="ea117e7c21d7", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="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", 0x37c}, {&(0x7f0000000940)="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", 0x1d9}, {&(0x7f0000000b40)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a", 0x2f}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) mkdirat(r2, &(0x7f0000002300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002340)='./file0\x00', &(0x7f0000002380)='sysfs\x00', 0x1214040, 0x0) llistxattr(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)=""/6, 0x6) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000b80)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000021c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x8, 0x1c, 0x0, 0x0, @in6={0xa, 0x4e23, 0xb, @private2, 0x4}, @ib={0x1b, 0x0, 0x3, {"e100f7ff060000000000e3f0bd4500"}, 0xff, 0x7}}}, 0x118) recvmmsg(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000c00)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000c80)=[{&(0x7f0000000d00)=""/102, 0x365}, {&(0x7f0000000d80)=""/76, 0x14c}, {&(0x7f0000000e00)=""/4096, 0x197}, {&(0x7f0000001e00)=""/92, 0x645}, {&(0x7f0000001e80)=""/73, 0x1b}, {&(0x7f0000001f00)=""/77, 0x188}, {&(0x7f0000001f80)=""/154, 0x2c}, {&(0x7f0000002040)=""/17, 0x1d8}], 0x21, &(0x7f0000002080)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000002140)={0x77359400}) mkdir(&(0x7f0000002440)='./file0\x00', 0x10c) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)={0x2e, 0x20, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002a40)=@any_dev={0x1, 0x9f7, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x3a}}}, &(0x7f0000002b40)) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x3}}, 0x30) r6 = signalfd4(r0, &(0x7f0000000300)={[0xe]}, 0x8, 0x80800) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f00000024c0)="440f20c03509000000440f22c02e0f06ea0000c0fe82008fe978c78df40b688db80500000066b871000f00d8b805000000b9af8600000f01d90f20c035080000000f22c065650f3881af00000000c4c27d799313ceb0cf2e26670f01c3c4e1b1f989d1000000", 0x66}], 0x1, 0x60, &(0x7f0000000500)=[@dstype3={0x7, 0xd}, @vmwrite={0x8, 0x0, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r3, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f00000000c0)="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", 0x7f8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r8, 0x0, 0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000002480)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r9, 0x3304) 48.014374705s ago: executing program 3 (id=115): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d08001000fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a4000240a0000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b300277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dc7923fae94a2c5e23df63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ee4edef3d93452a92954b43370e0001000000000000", 0xd8}], 0x1}, 0x20040010) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f00000026c0)={&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)="b4dc7e9192606b6846c7f4894b6d930ea0090806946d709978139f7b5e5b0bfe0ff6fc1d2f47a14cefb47f20b13cbf44050e18dd16d5b00c9f8aa9da8e9b7c5721c46f5a2cb694463ae9d8e0ce08daf8206715325ce199ffd76c8e4b54200d0f8401f164b72ce982ecb00384a042782db29211e31fb2599efcf9cf4c83a56071ae", 0x81}, {&(0x7f0000000280)="048aaeb2e3f6af276deae24dc2b39c801b9249328be844d5eeec02b36193033830ec537aa6e1b189639cb7ac8c2c", 0x2e}, {&(0x7f00000002c0)="b58468d0313f77e16ef63487f8c4c886f6f9455003462fdb089b8cb73dd9ea4a7fe7e1ad6a878c0d2533dc2235d63fc27cfe5152", 0x34}], 0x3, &(0x7f00000003c0)=[{0xb8, 0x1, 0x5, "202f3e6720c65968d7f103009eb8526262f5e16d7d9f2277cfbb36b0dbe0b0277e8439410495e658953903c2d3b16fe4dea46f8b0a214dc285df09818debdc06c7fa9024c2974cf1d08482d364e799f427ba638a765b078ae30050097b646858b37473f1e03bd3bb2aaa40d36da909ce2cab38c7d8afaf48b0e33564e17d3e20eb1e0d438aee5b90b8121c3254ad3b8e58507aeb584bab57196e2a84e45e0d2d0154"}, {0x1010, 0x197, 0x5, "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"}, {0xa0, 0x0, 0x663, "e0163a6ab676622e2a1ad155cd96c5a5bc3be5747b3210f3514c2594f91acb1357865190a74a2117d2b8f15b9b7788be74fd25bacadf48dc3e55f53c0c1dbb626e785e795dfd2f937079887e325c7b7d03cee92b05e2c11283e378355a216da6ec4da9ff248964d1346151c105cdc364c50a346c80cf680607a0b754f235743fa8104d5c8fe7953b41b2e4d19ad68e"}, {0x1010, 0x109, 0x800, "bb1d28d9cad5d301d9f372a3f81c47e1d1be6588f7aea27af13866175ef4057bf75d9fb8345323d001ed4b66fb0deaafdffa778edb772a813308a39453eddbbd0136ef93b4cbc49e682ddadf18dd98d8cc487c4cd7c6391137d82b7a999e6aee8d2e28af36e0db20291f1331e6752a1740b1304861c59bc21be0239ae8b00dfc61a1094b3e8bac0222624804f6c7e55344afcdc74586aa5e2dc410cd7b2df918dba507bbea1da0872d67aff743ed06e2c52e0b092016b157abf93ea5e39f986f77b63b2584b9f6e81b216281aab694647ea6a96140780795598d36b801f11bf61d4b5f041cdd9baba1df641a6f9db8e7aaf58ad80015be9ea4ac18c34389039973e06b9e426c9e8c9c9ca8dea14bbf0e40c27be260d93afd05ca4536f4f0599ef02d28811b687a37e824238571e39cc0acb4e0dfc14babd749b0a31dee9fa32ec2e7af9796e4c76496cd1d574d57316e51f544c0617805e9f86802a67b5feeaff0d7e746feaac1567bec7b1bf2ed01012fd7a0996b3a538a38e8ff71cee37b079bccee978d73f1f7749c4bc6fd5737c9cb4f12491177ca9bdbbba75bffa5dca7fd8f84e0f60e407de84498012def08532d601fdf0e78dffac82b2f608e9c09bde677c09bea36511b0e215c6dcffe70ed3c0e7ce1e1bf9e6a644d3155d3f7dc295e9872bcb8c6ca973ca4af4d8bb9e3779294d31e781902567681284058c592f4f4c8b0ec47787338fba1dbac34bd1182cbd05be9a21056ca927e5eba6184c4f569622f22ceae823a218e2f166b56421ba3bef18d47269de6b8b78d2a8d129bf1b3e2281f88d29907663045de5fa18475c9997502104b53801e3bdeddbec495ed8b79cf0f96357adedd6b0bfbc2c340bf6e5660def4a125b38ee104da0ff769f95ece90d5ed8f0b5578844ffb7fb8925a01125bc90eb7f5250018319fb4d8143800bbe3c615d51533c9b69abf39977da9ef7adc5ca6301f775614be319f97de9681560f56c0e9980919db5c16d6b8b4496f17bf226085f96cfb32bc441dddfad28f465aba6c8ec1c1cdac52281db94b21d92b5fb7436225f85c4d722b7a84d2be1c9a50bd3b19a130bd25786b2d5fa85823ffd2d003f8d01e313a47bf4ccd2d893907f5e0a298f971ebf4000970f6e9429b12c4709ad643dbc757473008864c5f6603c20d6be3d23ec61cd2fdc745fa45e63dba283547703db37ff48967623af7553438b86faed8f01dc6197f287dd3d6af075c30e8d1327fa922a1ffec1c6131ed97d77c476fd80dd7b16775bdabb715ad3fae5121986655061ba13e9a22e75442b1a9f1add61c8bf31d6f7ff6e647652e447b443f1abf0e9bcb5c161f27476d81d7c1da0668869a64d230b01ea1980d6e22f07b901474d1f2194d2bf951c04f165dae4d95517d6d0947f9b99b55a6c621a18f6b3137299d7c740851cdf96149b15d0b55c583e00d3cf54e9f1a83d8ff1f3c7a5e351b13695cec860708371d8ecfe39bbc075414df3f8da717bdbcbb6a98b5e9d7a041035dbf1d4ad4004d2047da0ecf7d37656e808077a5d2e9ecfedff43a213b276d3948bfee5c2ac25a3aee0d972a02a1a87f6cdf8f2b294779e506c7b11edac8c5796b6e7b807b04ec723d38df292bde6a0b540ed8390c552e3705efde241ea3e45590c565dcf588589d6af7d65f3624baa0cd864bfa01df1e98b0eeb8b4ba3d01573ac6d1fa2d438cd4d2dffd54127ab9f89c79a7c71fd95fe7b5c3e1b6b67c2b1b147c69ac3fa8879bf7dbfef8dd0b9c69ed554215cce48bacc2627227bc048a767d863ae6ae92b08da7810568a441466af253173442e94aa351c38dbab286e5fb3722fb26ee36f91959552f923a48ce242d44b8025cc0bc818ca68f05fb4100c11011fcd1c5f5b88f4ab0f26f56656203d00a1245678e4b6ff9733ac512e05c5dcbcdf2a21f57bbaa1a7a44f85d55c99ef66e385a8a8a6bb25deedf682efb72c7b1a7274e77f774031e0ebd92c173c237645f6f84f171ed2e0e50fc4fc4012146d3ac56084293a28e9e09b2ec8f0175221cad9862a43a829e84a7b2ff947e95f7534c7ad562641a16ede52670246916f27400e05122ab176283da3b2d3ce3ac39a2bf1ba6b33b3b91d54c9b5efd255539f3c6e4de6aeb5f9d48378950197671f17008f780afefcbe0ee730c63d4932016699bf5b9dd94d915bbecfd4aa8bf015405beb02d536a31b824288568c01a0c80600952ab458fcf06877c46ab234fbd9f174792e4fcae800c98ea54dc9b4dbf6eca570bb56d1a9c7eb1ec405ea08d8f00804413631261ef9520577f908b95c06a99c01c91bda330bbca57f4a32d786832fbe2f43f62c1a7fa8241899b70820f51073e4e3e0c34b2df9bd3f7953202761ff781aa44853e9235091c1f7a862970a1c64a5129f22e928282d82bee14fd3abee10a09c325fe7570ab1bd2b4a03dfd02d7e377a41cdb4921de9f040039eae28161f0805b550f1d549b6204670ca6ef01487af828fce1724180b371ba01e17be5ff58a3d966c389ca951e96c074d4163f77bb03f960ce877bcfa628c6a1d6ea5adc3b9622fd6a69acf5b9400fc462b89eceac85cf07b351e67b05de3be4ec3621fcc9b59254cc2ac6e2867423b6bfb8aaf5595c5ec8885a436f0a1111e026c43df4053eb9481da74300b655e59fe7f782549778554d5d044058ae1132167090f78c94e60ac8b6bc8a11f9ea2fecfc9d9677b3e551ff1f4234a0124784dd7143206303101334c4c3fd8f8e424dfb9505462a09c612d2d1ae8ba943e2315ae3873b6fb8ec7180aed9adfcc7d08843dd9c302c1a65944d90b1d35f8b8400af1204aea9fe32ee9b91df672f9c31c573fb2246e1d07571cd433d2ca498b2c8692dedc2ad9e833bbb9e6f104b33a001bb7604979397ba4714e9610d72471e2a3f0acc6a8bf291655d7be47561f5164c2fb7c85f5abd8db9cd15ccec8631e77cf3719b5a5de953380b434427331763dc61392629e8e1a8207eb46a73fd6cd68e9928b129b3edd90c4d936849b77b6de6a4013c2ed8eabe1c4e2133632ffd00fda4a13bfd4004c5cbc07e152869de16d24c23f0f101df402b9a97bd440657a40d7ea99bb4de0998e100802cda1ef4eee3d29de00e786eb97e2dd04374ead0ece3db8b95858b3d6dd973c166cee228d46dc61a4d21fb8b49aa14b16aa304f06afe01ac0f97132159c755f58a3414e827f483bf640bedf83d3e234e707a3b273164c8ea1a19c88b14fbb05f794648c31239f2d9cfb30dfec776694e20f2e97621b4fff635e6a29d5adf46895a0d2944fcbe673c0da34d0296ad41a69cc21465f64f361138294fdb19e3c8eb6a684f8a98f323e372e3d556114f1a7e84c5daa5d165bedc1f26818bba0fe3077eff92942d4b62b06728e4b6e63adad40f38efdf420ebc8e5b19696f0cbc86b7cd281c6f0cc45f5c3f0aaac6d4cc7e1265902e4819fbbe8344edbab77194f8c55e9fca7b7b5bcd3753910d3a6860695bc39be42f06cf0996dad413b727019bd513432b3fb58ccad20dea1d0393ba367802bf7df35aebde5712dab6e1961161d13b7b9dee2056fa9e42874bf87259e798292a465c6d0565c6dfc70ffe0b7102e64bff087e752dfacd3045228f9de7cc5feb228a2bf56c1c7a143e6bfa70482543fb1cb9baff64919b2762000731a86ff75cb999ad44acd16cebb6a17ff1323e200ecb5f462b6a4a585819fac54de62605180f000153012110a61f825891cdee8a8fcff87ba68cdbc274b2bd3cd2cff84414f147b0bf6c552e1af31a761b43b5bf49712d062c72c685edb6d6f628dad253a3545903ec0035fbb79df3fdffe010c33998a792247b35e5ac2dce62d7f04862395b0ca10915837e60067ee746b5f4d2a47a175215aad146c5b3bfd2d37522cf3842402b3d592d06cf4eefe2cf53394ba16b9d93c6a70ece4814b9f70c30a91e1642d341fc9f0096522090e3d973da1473471f353f3fa246d55735c87c3941465b35d0f56150b88f53bb83906811a8332ecd4a5f98bb87699b0fc9b5a484f98fe7ff0d23b90010a1333a835acf879dfa2c71a1c0a2c76b3677d8aedebe1480af9b4af290abf354657221a50fc0fd469f4c61d3133b45daf0c3b31e49cffb1b0f7c78461a2fa58311a81650181c185852523d35436f27a862d268f6b1235cea51815ed624556384feaf3d91f0daf0c63cbbf3dff2f70fe3a8df8cf3054d195e9588143e78f7e258540b2eb88971baf7c762cbf039ec6cc5eba745bd6421218a030a93595961d2392c5f2e22cb8f5a2cf0f755b24df09cb66d107a15c3af4e659edccfb4b78f842a53bc02cb2b8b05f607bee1bd4e9dc9d65328605bf84443ce9daf5877250549d67c1ae80f5cc9180f5489877585812c22c67a71bf164a9f89abf2abc1a54a76139a4351f160c70555340a84ee2e7ab49f53287e33f6b4b61fc62573ce0ec5088e4bfd86d6ba50c1fbccafa4c867bea5c185ab95b043f68d5c31c2d78cc87f57c0ef2e2fae8e91f43f162c3532467fc041aa73a81d81c18b10b50bebea7aef4193931974e8e8e4627cf91de0a5018ea0bcdc18aa03dfd600f5de4bbbf532f3182089c761e485d23ba4ed64818fe405d3a5cc07c96a8a586aff0cb8a97cafa5419be0dfc2bbd8a7d7e0d474389986cc275827e336254aa661add04551599f4d26986d0a047714a3bf119f378362d832c46ad7808a65a21bd4672f63ca82c7632148375aa647a2ae38157218c7aa8dd0d68f9b30dabae2d2ece74897cab3b2dfaf32f21569548e6a84ea2a17903e874d58455baefd48fd9171246b77ddc6eacd7a4af174b9620d698ecb920e44a80d4e674e63a3334f53f4910757017f992ab7763514402e2519549fc08aff0c36258307c05bfef8e552128b8326163958ec468f6174e5f603ec085e863c27adab8d425b770a6cc853a6fc651117430f7150f5e3062efebdb9c3dd1da0423f1ece3078ce08e43de6abb480ee4b2065ab9bbe8a88e54de257e286a3b1bc5149eeedebd64da46d48d573df35912962324b5cefe9502608657526ff3a6c9e68c4244350af31ce78f9fd09c52e02549ab375fc5abb8b1875053814d75c139ccafb53036e33280cef7d180a69c3393c200572210c600903eeca52a5493cffdddf9d4a17a34e951c436c2a2c03ddd022c6facb48cd0c78ac015e7928d4038778e24d342c63b3a3cd7252cfb2a650372b7beb866aae5625e4694cb290186c04e591de76041b57da3daf86ff4570b8de4ab336c0b2809b97a104adef58ad5868c08eaa0468d3a0e6e38af318edb7a32825abaff5bc7195d1a775914383a368f831c0bb0c7730f5b668b2c3ae01af50394f6219cbe74e8738bd3613eb743da8bf04775598f11a7fcb3358f6ffd9a312b367c83c3469dd2d69e1bee131bd5842b28b4643d74deb90a52d3eb26854fd00304aea24b9573768cfba95d9de82dc01d2efb91b425a022e6057203e70c36c415b1f54737703a8afce08ecb139f1b241a30db0589ff8ed33b931e725f09d4cabead02231f6e965c9e7032648e43ed0c3ee6f5a4a5da47b91764f2c8cc41b44a96ab7dbaccffb8f84fcdb2819997160df66aa444296133a85e5c1144306956205544c7d5b9128e3ca89cd5218da8eb0f4a30861437548ffd9e1f34f01f6ede91e7cd4376c70ee354debd85743562557456ebb34f058030ad8e3354aa8e09778346f50333f55362fa62acba8e0e8c7554f11c44e6f50f06a554893bc2ff93d87c82ce51bb1ae8438aae140184ff9ece10299f08f75e7c1"}, {0xd0, 0xdab19f39362ee792, 0x2, "bd54cace56b42842ce97d32bfc6b2c311ba1738909f3eacf0571b3f77c859303ca4cf35565b601e48a13ae397820f7661efdac68436163d9f6543c51c1251826446a0640fcb58fe13e5ac1965c4cf0d7b84953944774479896985ffd2451a96dd3188923d047b76006aaeb5564a09b78574534b22fb03d2fb891eb5840230335991b86b0b663a2744488d48b67e950d262e234eac773357779e6cd397c45dd6b80176a022d8c42557785e351c82acaf171965f216b98d4a2d91b"}, {0xb8, 0x1, 0x7, "ba5b075930bd4c81fd38f9037c1a002eaa44708d09e4da51a82558803399c4fb0f21d18c02f64c41ac87a696f088ba901f1981251e8d6b33303cb08f092745a0843158577de01906910ad740b3ef1586dacde41df8374997dafd1b7d6b6a048c55f0427108c3a8c6e2f0c23bc3cfc349ed56d180afbd6ca43951c30a1a86c6e99dac3f9043d8131e837e7d5bd9cfb049184aa11f866b9873ffb149f1080334784e9eacb06751"}], 0x2300}, 0x40005) (rerun: 32) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = dup(r1) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000002800)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002880)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) lstat(&(0x7f0000002900)='./dev\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000029c0)='./mnt\x00', &(0x7f0000002a00)='system.posix_acl_default\x00', &(0x7f0000002a40)={{}, {0x1, 0x1}, [{0x2, 0x0, r3}], {0x4, 0x6}, [{0x8, 0x1, r4}, {0x8, 0x5, r4}], {0x10, 0x2}, {0x20, 0x4}}, 0x3c, 0x1) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002a80)={0x9411, 0x5, {0xffffffffffffffff}, {0x0}, 0x6, 0xdb}) sendmsg$nl_netfilter(r2, &(0x7f0000002bc0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xb4, 0x5, 0x9, 0x101, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x1}, [@generic="8d39728d76344b0bb9d5f91690c58dc6b973d04132aa73dc770f276e366eaef35f4100731d647263019164", @nested={0x61, 0x73, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @fd=r0}, @generic="596029423bd71bf3024a5b187028c506d39541c553bf641adca286dc8ae15cacf11a1e3dc718a2b9095d1e84ea182896396a7d7abcebd1958669ab7de8788ab0fb7a641cc2ee93197d8a7f0845e944233fb6127f93"]}, @typed={0x8, 0xd6, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x120, 0x0, 0x0, @uid=r5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20044855}, 0x20008840) (async, rerun: 64) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000002700)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000002780)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f00000027c0)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000002740)={0x18, 0x0, 0x0, 0x0, &(0x7f0000002700)}) (rerun: 64) 47.756676526s ago: executing program 3 (id=117): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1,0x400000', 0xa) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 46.965734813s ago: executing program 1 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000128bd7000ffdbdf2572000000715390e7fc82dbec777af5dee11fb8f3cbd546b528"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0x551, 0x82, 0x200000, 0x100000002}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x3800) 46.723416661s ago: executing program 1 (id=122): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x9, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x34, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}]}]}, 0x34}}, 0x0) syz_emit_vhci(&(0x7f0000000ec0)=ANY=[], 0x17) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000780)=@encrypted_load={'load ', 'default', 0x20, 'user:', '{', 0x20, 0x400}, 0x2a, 0x0) add_key(&(0x7f00000007c0)='encrypted\x00', &(0x7f0000000800), &(0x7f0000000840), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000580)='ext4\x00', 0x8410, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x40806685, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x20, 0x14, 0x4, "c734ed3e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.6655627s ago: executing program 1 (id=129): sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0b4813b70400000029bd7000fddbdb2502000a04000001000000003300000000"], 0x20}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000004c0)={0x0, 0x697a, 0x80, 0xfffffffe, 0x1e5}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, 0x0}) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000006c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f00000007c0)) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='res', 0x3) (async) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000380)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000003c0), 0x2) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000019c0)='./mnt\x00', &(0x7f0000001a00)='ceph\x00', 0x0, &(0x7f0000001a40)='mount_timeout=1,osd_idle_ttl=0,osd_request_timeout=1\x00') ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000800)=""/218) (async) recvmmsg$unix(r7, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4097, 0x1001}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/18, 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000780)=""/26, 0x1a}], 0x1}}], 0x4, 0x400122a0, 0x0) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfffffffffffffffd, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f0000000180)={0x0, 0x10, 0x1005}) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000940)=0x7f, 0x78, 0x4) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x10000, 0x4c) fspick(r9, &(0x7f0000000900)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x5, 0x1000000, 0x142112, r0, 0x20000000) r11 = syz_clone(0x20112000, &(0x7f0000001a80)="457b28b6a597c9a8c63970853cac29fe84d466fdb12f7ae7c2436427709a73f248e989f21e7dd099a00af0fdfa6d95fbaf3777890d4f97237672ce0cf9fd1e61feb689a6f4a90de480e90b43e0341d5958e218bdd22d3307897d95fed44c032063d649", 0x63, &(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)="2903cd81a0bbe5b293398f5083395e8d425fd367f5d5ce39a08980f4b48033e94770f90ff6af8618c7e4ac8f302902159aa1a39c8145367cd902d18b8c0b319cfbd101") mkdirat(0xffffffffffffff9c, &(0x7f0000001d40)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001d80)='./sys\x00', &(0x7f0000001dc0)='sysfs\x00', 0x0, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='./sys/power/state\x00', 0x2, 0x0) write(r12, &(0x7f0000001e40)='mem\n', 0x4) (async) syz_ublk_add_dev(r0, r10, r2, r3, &(0x7f0000001c40)={0x2e, 0x2, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001c00)=@new_dev={0x2, 0x8dd, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x41}}}, &(0x7f0000001cc0)) 35.125254879s ago: executing program 4 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f00000000c0)={0x10001, 0xc, 0x4, 0x40, 0x7467, {r3, r4/1000+60000}, {0x1, 0x1, 0x7f, 0x4, 0x1, 0x7f, "b84558ff"}, 0x5, 0x4, {}, 0x40000, 0x0, r5}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503feffffff0000000016000000140001800d0001007564703a73797a506b"], 0x28}}, 0x0) 35.062687639s ago: executing program 4 (id=154): mkdir(&(0x7f0000000900)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='dir0\x00', &(0x7f0000000980)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000009c0)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x103a42, 0x4) syz_open_procfs(0x0, &(0x7f00000008c0)='fd/3\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000200)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f00000002c0)={'syzkaller0\x00', @random='\x00\a\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x8, 0x0) 33.249130504s ago: executing program 4 (id=157): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d00090509"], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 32.001418521s ago: executing program 33 (id=117): r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/core/rps_default_mask\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1,0x400000', 0xa) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 31.959320695s ago: executing program 4 (id=162): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc00000019000100000000000000400000000000000000000000000000000000ff02000000000000000000000000000100000008fffd00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000001c07000000000000ffffffffffffffff000000000000000002000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x18d002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002f010000100001800a000200766c616e30000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000480)={@rand_addr, 0x0}, &(0x7f00000004c0)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000580)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000600)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000640)={0x11, 0x0, r9}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x7, 0x1, {{0x26, 0x4, 0x3, 0x3, 0x98, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0xaa, 0x3, 0x0, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0xffffffff}, {@loopback, 0x7fffffff}, {@remote, 0x759}, {@empty, 0x3}, {@multicast1}, {@multicast2}, {@loopback}]}, @lsrr={0x83, 0x17, 0xda, [@dev={0xac, 0x14, 0x14, 0x1f}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @remote]}, @timestamp={0x44, 0x28, 0x15, 0x0, 0xb, [0x9, 0x100, 0xa0000000, 0x1, 0xc121, 0x18, 0xdf, 0x5, 0xa64f]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x10, 0x8, 0xff, 0x4b, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x64, 0x8, 0xd, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x2c, 0x0, [{0x2, 0xa, "9160fa8a02f58959"}, {0x6, 0xe, "93f4803d283574fd4ad0fe23"}, {0x6, 0x5, "b137ba"}, {0x2, 0x9, "09f1658a2477ce"}]}, @ssrr={0x89, 0xb, 0x38, [@multicast1, @private=0xa010100]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb4, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x32b1b1bb268d393f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x14004011}, 0x4000054) 31.671730368s ago: executing program 4 (id=163): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x4044094) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x100010000, 0x0, 0x1}, 0x18) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000380)='3', 0x4e) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) preadv2(r4, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 30.796855795s ago: executing program 4 (id=164): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r0, &(0x7f0000000500)=0x8000000001cb, 0x12) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f00000002c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000540)=0x8b4, 0x8) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x200000, 0x200000, 0x0, 0x0, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_adj\x00') writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(r4, 0x0, 0x20008000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$MRT(r6, 0x0, 0xcf, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800c21dc21d0005000000", 0x29}], 0x1) 27.697057578s ago: executing program 34 (id=129): sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0b4813b70400000029bd7000fddbdb2502000a04000001000000003300000000"], 0x20}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000004c0)={0x0, 0x697a, 0x80, 0xfffffffe, 0x1e5}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000600)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, 0x0}) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000006c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f00000007c0)) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='res', 0x3) (async) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000380)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000003c0), 0x2) (async) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000019c0)='./mnt\x00', &(0x7f0000001a00)='ceph\x00', 0x0, &(0x7f0000001a40)='mount_timeout=1,osd_idle_ttl=0,osd_request_timeout=1\x00') ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f0000000800)=""/218) (async) recvmmsg$unix(r7, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4097, 0x1001}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/18, 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000780)=""/26, 0x1a}], 0x1}}], 0x4, 0x400122a0, 0x0) (async) r8 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfffffffffffffffd, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r8, 0xc0305602, &(0x7f0000000180)={0x0, 0x10, 0x1005}) (async) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000940)=0x7f, 0x78, 0x4) (async) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x10000, 0x4c) fspick(r9, &(0x7f0000000900)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x5, 0x1000000, 0x142112, r0, 0x20000000) r11 = syz_clone(0x20112000, &(0x7f0000001a80)="457b28b6a597c9a8c63970853cac29fe84d466fdb12f7ae7c2436427709a73f248e989f21e7dd099a00af0fdfa6d95fbaf3777890d4f97237672ce0cf9fd1e61feb689a6f4a90de480e90b43e0341d5958e218bdd22d3307897d95fed44c032063d649", 0x63, &(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)="2903cd81a0bbe5b293398f5083395e8d425fd367f5d5ce39a08980f4b48033e94770f90ff6af8618c7e4ac8f302902159aa1a39c8145367cd902d18b8c0b319cfbd101") mkdirat(0xffffffffffffff9c, &(0x7f0000001d40)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001d80)='./sys\x00', &(0x7f0000001dc0)='sysfs\x00', 0x0, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='./sys/power/state\x00', 0x2, 0x0) write(r12, &(0x7f0000001e40)='mem\n', 0x4) (async) syz_ublk_add_dev(r0, r10, r2, r3, &(0x7f0000001c40)={0x2e, 0x2, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001c00)=@new_dev={0x2, 0x8dd, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x41}}}, &(0x7f0000001cc0)) 15.747238614s ago: executing program 35 (id=164): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r0, &(0x7f0000000500)=0x8000000001cb, 0x12) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r3, &(0x7f00000002c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r3, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000540)=0x8b4, 0x8) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000500060008"], 0x4a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x200000, 0x200000, 0x0, 0x0, 0x4}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_adj\x00') writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000600)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(r4, 0x0, 0x20008000) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$MRT(r6, 0x0, 0xcf, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800c21dc21d0005000000", 0x29}], 0x1) 8.567308236s ago: executing program 6 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'syz_tun\x00', {0x2, 0x4e24, @empty}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000000000)=0xffffffffffffffa2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0x50, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x83}]}]}, 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000240)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f0000000340)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000840)='27', 0x2) ioctl$LOOP_GET_STATUS(r7, 0x4c03, 0x0) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000880)=ANY=[], 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000140000000800050001000000400002801400010000000000000000000000000000000001f800020050000000080003000300000008000400010000000800001f000000000800060000000000"], 0x68}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 5.664909821s ago: executing program 0 (id=234): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x18) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000500080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7", 0x97}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) write(r1, &(0x7f0000000040)='27', 0x2) (async) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e) (async) bind$pptp(r3, &(0x7f0000000180)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) (async) lsm_set_self_attr(0x66, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x1001, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000280)=0x7) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) (async) landlock_restrict_self(r1, 0xc) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f00000000c0)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) 5.391076246s ago: executing program 6 (id=235): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x301, 0x0, 0x25dfdbfc, {0x4e}}, 0x14}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000040)={0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="2008230000002323f59d"], 0x0}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x0, 0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.826058264s ago: executing program 0 (id=237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x40000) 4.290686209s ago: executing program 7 (id=238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_dump={0x40, 0x10001, 0x4}}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x201, &(0x7f00000000c0)={&(0x7f0000000080)=""/39, 0x27}) 4.249713928s ago: executing program 5 (id=239): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000140081044e81f782db44b9040a1d08020a00000004001ca1180002000511000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e", 0xbe}, {&(0x7f0000000700)="1cc4488d5e4ef24d4c6afe6d614da92c05fc9b73d35c5a528052", 0x1a}], 0x2, 0x0, 0x0, 0x7400}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x183c81) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000380)={0x0, [[0x14, 0xffffffff, 0xffffffff, 0x7, 0x7, 0x85f, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x2, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x1b, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf423e, 0x0, 0x0, 0x1}, {0x400, 0xffe, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) r3 = syz_usb_connect(0x6, 0xb3, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x0, 0x16, 0x1a, "cbe5017622a6444d116f4af94a4a67b69b0995aed4fb9ae3e6cc"}, 0x0, 0x0}) 4.159085815s ago: executing program 7 (id=240): pipe2(&(0x7f00000007c0), 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000800)={0x0, 0x30b2, 0x0, 0x2, 0x158}, 0x0, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000940)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000009c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000a00)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000a40)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000d40)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 4.119824191s ago: executing program 7 (id=241): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8", 0x2d}], 0x1}, 0x20010) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="6564f30f09417701c226430f013b66baa000ed44d9f40fc758000f23a5c744240014000000c74424020e000000ff1c24c74424000c000000c7442402f7200000ff2c242e400f017f00", 0x49}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.917583447s ago: executing program 7 (id=242): r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x40042, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000001c0)={0x34, &(0x7f0000000200)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000300)=0xa40, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40010130, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00', 0xd}, @in6={0xa, 0x4e22, 0x8, @local, 0x5}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x7, @remote, 0x1}], 0x64) connect$inet6(r5, &(0x7f0000000d00)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000d40)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r5, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000007c0)={0x2c, &(0x7f0000000140)={0x0, 0xc, 0x2b, {0x2b, 0xb, "12dc5e1368176fdeb03bc6b5bd56e927b15bbf2be904c90372dbc940b17d48333fcc8414bd1b5bff97"}}, &(0x7f0000000640)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "dc2b1331fc6581ccfc3a8d59f5d0569f4ba712207830e23e9027d7d2da307bcb16a93190b5543bed3d15a2d378d85aa710603c9f32d91873edd04130a476c15e6c2045f4c1f632c612ba93f2309b1dc2abb855ab55eb138bf646eb27da28d72abde57bf7f8fabf888835f0543890b7c51b9a7bc725d526d209f4"}}, &(0x7f0000000540)={0x0, 0xf, 0x65, {0x5, 0xf, 0x65, 0x2, [@ptm_cap={0x3}, @generic={0x5d, 0x10, 0x0, "1003e427b7569c5b5b12cae7173aeae5f9627eecc0758e22048280828f46cbfff4ddd98b2f4be91e28ffa36a32a9efe0a9d5eb4bc2e8f6b31d9d9c1abc06e811a44ed13ba15589a1f2dc88a9bf9098d0f9dacac446234ad53934"}]}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x7, 0x37, 'Zn9d', "3cbe3d06"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x51, 0x18, 0x4, 0x3, 0x35, 0xb, 0x8}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x40, 0x15, 0x50, "3644939a3d8589c1d85d087fda468818eb0c0b5912675b18f3501bbcbdcc8910eeb9099fba02e9f18a6a11769c5b84fd1b58e8c68aacdae0d62f318a738c3e40a803ce470ba019b57b778416acb5a59b"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x4}, &(0x7f0000000940)={0x20, 0x0, 0x8, {0x800, 0x20, [0xf0]}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "0b85"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x341f}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, 'ZH'}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x8000}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x42}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io(r2, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r7 = openat(r6, &(0x7f0000000040)='auth.unix.gid/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000080)=' 2000000000 0\n', 0xf) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="200000800200"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) 3.766923404s ago: executing program 0 (id=243): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x7, 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0x4, 0x2e}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.737691013s ago: executing program 0 (id=244): r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x1, 0x100) statx(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x0, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0x2, r1, &(0x7f0000000640)={0x8, 0x7, 0xffffffffffffffff, 0x7ff, 0x80000000, 0x9, 0x3, 0x40, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='27', 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/132, 0x84, 0x1, 0x0}, &(0x7f00000004c0)=0x40) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000240), 0x418, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090577eb"], 0x0) pwrite64(r5, &(0x7f0000001004)="01", 0x1, 0x1004) 3.614724179s ago: executing program 5 (id=245): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000003140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000487000/0x400000)=nil) syz_io_uring_setup(0x5793, &(0x7f0000003180)={0x0, 0xca23, 0x0, 0x3, 0x212}, &(0x7f0000003200), &(0x7f0000003240), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000003280)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000032c0)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80000000000000) r4 = creat(&(0x7f0000002c40)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r4, &(0x7f0000002b00)=ANY=[], 0xb0) lsetxattr$security_capability(&(0x7f0000002f40)='./file0\x00', &(0x7f0000002f80), 0x0, 0x0, 0x0) close(r4) execve(&(0x7f0000002fc0)='./file0\x00', 0x0, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000002cc0)={0x0, 0xfffffffffffffe59, &(0x7f0000002d00)={&(0x7f0000005300)=ANY=[@ANYBLOB="9c000000290001002bbd7000fedbdf253300000064010102000000000000000000000000fc01000000000000000000000000000107ff00064e2300000000b0a02b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10004, 0x1, 0x7000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000002940)={0x0, [{0x1, 0x338, 0x2, &(0x7f00000001c0)="5a4c98bdd77f26b4db7be1a5390bebb47b63f2c319294f7f9df4a2d187abc94a2f70677fe4a51d0f07b5c31d6e97a907443b00c6f84d44fecb5f410ab9858f19315b37e7e329fcaaf63204da5f64ab064b36e32cf9560ce3a97d3b0415067ff88902eb7e457aba"}, {0x5236192907998dfe, 0x50, 0x4, &(0x7f0000000240)="959d00def95586c96c62"}, {0x3, 0x380, 0xa, &(0x7f0000000280)="8efd1ff31f125e2991e806dd74f96ebfac906486c07045dc9bc67835905c76aef4f4696e5d3ad0c8408ffb2ee423f43dfd3c03622421fd6be1ec49c3fd969c93a7958eafd0b1b566412b1b0a71a5d26344289518552f65178a57f74bc81464d660d3fd121c41fc5bc5968c49c8ea73fb"}, {0x3, 0x510, 0x10000, &(0x7f0000000340)="ff9f927300ee8207dde97097291f878c449ebe94dad47195a47f5937e690f771cfd4e61d2b49b02877838c90ceed9896a9a42893653fb6e2703ac2803683c18bffc0a587bda321f6281faa06665103f8c1ef0143a2ecf61d3e6c51c500e8b80480b30aa5e2039edf3637d65c824b3cf2681c6612446c6dcfd6c3ed7f48ba364afd9cc0a0852a4e812be605aa302f2378c218cea2d9054d83ad8e7a6494fd3c1f7e1b"}, {0x0, 0x278, 0x5e, &(0x7f0000000400)="443fe76a13f6b16a4bee51a992b5ffeb6c4827981b89609bbf1a9d182049169cd5b69c78ea4732353293c927745181e388dcbb0b941405dbf345986552c84c7ab346a5149e649dfa14dab685f90872"}, {0x1, 0x918, 0x8, &(0x7f0000003000)="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"/291}, {0x0, 0x60, 0x8, &(0x7f00000004c0)="5b25fd6d8ee6f72a2c1b2c7f"}, {0x1, 0x290, 0x3, &(0x7f0000000500)="3ab66f2c330f47b51c7b799152f2b6868bfebb4cb0a9d09dbc3bc34686968c085645309e5baab813c92fa6db26567c9d78334ddf508367d988d07177a6ba5b8330b4b341715e99d6a86d4389784cf04165ff"}, {0x1, 0x550, 0x2, &(0x7f0000000580)="d0fbdd178782b02f7b924bbaa49af4a9bb8b4870c41e38713d21e2112e74ec637b7bd9f0a1a16c7a28c1c877416e1db4034f6e2dde8a10089ba9ee456f728f02b584f5c5a0f0187816cd2aa6ee368a2721a969061bbd47b5bcce1e1f60f5c0b5be862883665193198ec4f1d2b2c77475661fe2916e318c955df8fd3a77bfff983fb29274c7f10fe2e0c8178e65476899a2d99afade2dda57ff7d2049b3a7701d98fa03e1a1ec0cd86a3a"}, {0x2, 0x140, 0xad, &(0x7f0000000640)="fb96de1af13e712e20e3931df2bf84d28557328f13e9519484ca63193080a9d3e7457ee11a1f44fd"}, {0x2, 0x8000, 0xc1, &(0x7f0000000680)="7080086608ad973525c37bdd1c5c0d785d644dbe48cbc7eca2b5df4d4df30711aec3c24d4ffacf6db11917bb805688c7f900d978cddbb99b50a8d9b1b799271d3ee49085bb8d30985fe4c77ba5d2021168dc9e38af866f290d4f02a73db0cb49d38c0377ace9f96b57106b86f86d8814cabddda649e7118e656a32c517506291997096447c094670f20fb88adc985f4d42b32c26897703a3ba9aed755011c7e004d7fd7d6fb2bc65658c60826e3b3467c41900ff6beab81c13c9effd505497dc46ad24320c5c2777881e97277fe2ebf03eea39e6bf236bc18d454bac29ad4d6e8b1071889d0d927534b3093fd6237aa71c973feb61695db2eaacbd0a713267f4560ff61bc93ce960b59516ccd75cbaccb0a11e6410c1c06164cb9ea13399f986abab449e41afa450bc132d8607a87638c5620433ace8d078daf4a28f087198edc6ac9c4f595a2d41265b2d8e8b626922fb566c1336ea08c3e41a8861704e8e8d5ad9a0bc7121c4900c1f7d7694a02b4723c42ea5e32712ba34ce51daa3ac70d882f79c67b65282ba7cabd9a5551a05e7875f11865df520149a98feee1404ba09b648cee96d3e33d2c2d9fae23506d04e09873e4e1188418057373e27f6e4a1534a5588318c0048b0194e41affde994496fba741641ee3cef8f1683de8f1884c48b39c966c11723e9e1d7f9f31d464648716cb15e957677cce23fbffb9557b1ea0d1cb79496f33da39d53bfe506081081e59581243cadcf0753741ae8512e8e49e099f3b3e9da24da91e47572887917daa0cbef422e326843d9763da9ae740e9f4a7eb425db425704a492741e7071c8ec9732cc089bfdd4fe116c9dfd4001cddaa304bc74c1cd1f2d875ff7a5be7ec7ebf2a897e888380d6646ec6dcb699bb1da0ae5117d9fb395c4d44b8ad2312b736ad95c6f694370edd363565d913f7c3744cc17e5cc148e8e80f86114a3c1171523e554807e70dc684122c4813793004fa4da0cfeeb380af49891c3bd37957ff86c1128fcd1199d8fae1a4c1459ff5f7a2eba06fff11f885e2fff47a06077ef65c777b75f52ddc5bbdd83ce4c4a05e5274a206fea211151dcdd5942c12d37c9bf75030d1c227f4e10516d8d510f3a9ee5562f0ac78d8163245725ea9b99cb3d1fcd341980b3d7549bb120dd919e20d6e7a2eb12538d4fc0a89cf6e3b513cd281c2a37896a168e39f542b0619de650d8651efb8d4d9644845e89942838755afbcd7d7cc268cc35812e83f925012b3fb70473973746d9982d89c97a74727473e0d4773d0f19bd66702c6fb977db9243c9193a1675abc8c370b1142f90e4e8f4a99f339a382b1bb71c51729a81c384f24fa570fc8611f19f356d75609f3a15d8bf47736808b2e2134ac52867e39e60e406577b64ad8fb2249c580b59f4f169730446018dcc8d5ce63f9cf9c7fd36b46432f81b0f46a1cd9110977db77db18150d53330d25fbdfba952d233149769b711d91d0acb8c3fa823c7fe299fae3c4ef8cee85411a320097bbd53b36ea9c82bb15001ab06fd8042cafa3e7d8919d0afe5661f590f9d70e903c78d8adcb6df4b6b7e122947ef1e000accdc93957047a4ef61594ab37cb28a44148bb2fdae118aa4e944ae176f7652a75a5cc0686f9889a45692a53e8779750b01706340b81e21e981801ff6f235f400be74d0022d954c030bb5b06ce27e46c6976fc280cc8e25e9c183423757acece8d64ad9d292278103b93b9718946f992aac9cb461cd6ba4b18a99525979865196a80f9974f1b6cf8c577031d7d317d222116fbb62b68630e5aa4812197398a1ea74bf955bdca0f7cb7a55de7090c412aafa52b94138b54482a0790e3dd14bf6069eeb64f6d2cfff370a452e32c75e5946b2761975b3073bae73fca35a10954091daec52fb0e0a401a1717796365505d0785d8c14bd564d5940db13fc8f9be813ae0a4e6cc9de416152bf4163763129d4f1a1e4a20e77f8142d4b888557b0a33ed686cb19c9947dcc7c4b679c798224da7420b7c9df90eb8608cf97eb79214c935b39d6746f6cceb4906acb8a86108c42ef6002532a014e624692ab13eba79c3cb252103eab942e920b73f0005a024e26e175a44fed3be6639072cd2cf5f6d07c6b4761628d442de858501d6627337ecc2c218c8115083f998a59186a6839cda43d4259f4c469e7ad985dde34b458e50be3ce75a171e61924770ea526481826447176fb2597c4d8e03c914e117efb35e41cbc752479533b3058e85a9dbc17a82f59fbecf0e671d7b3ff5758a6fe76d7b802ed3b45032c26e72133327bf0533e16e9e03903ffd57b5abc83d839f86f568d40d13b87e3655f5ef3235bfa3760b35654d44bdf85c3577502a28c92c758486f1401cda5b65c4f92cc96fbc7747daec48e5bf95966ea8f41e7fe5081b287b1890c23e791d2541376a5c2ff3a7c76113900b8a96957a4403487eb3de2ef144bdd757d71eb1fb44e6d26565576f7bf2cb3ccad7c2b4965d63bdccad6b5949d479083717b6cf46f52c6005a4f8c8976838aa36931bf5a79c87054e56fe6925ca6272b396a66cdb6c883c5dc8153bf73177260815baec3f9f644c820803e7d31bad10e3cbd180c420fe189d1c6e5b9d404a0750653b43fd64bf0b75bf5d7df2949d93655a20869498022588088efd088957f040c42e90f02a8ee9c8f1a3b78417dddcc05744c8f542d95524d77a54ea7cfb06bf720a8a4d358c003561678601d052e7db67ba710097e4eb4dcd83dac1b51560dd9318e965a5df104342d322c8a5e17220a70b6bfa433d01cfbead01d9aab6f834a80a17013c56625e726757b965b02dae55aa7d14fc87d70006095938253126440973b8f9d80cab88df2def91c8990e484775bbc24ebdefb74a65fd6e12092da69e5eac9b323f320cbd4d59d15b962fab5cc6bc098ec1f030ff95b8e3e8958893b68160aec48c407b5dcdb55fd99f8e804d148eaaa6d86c7855d86254dbe26287faf4a5c2a3a6841a747ee1938a020d2018768cc7f7fc659dfc66e019cdd871b905a767240f7188036c53d38c584794d89adc4cf18371ffd41b55253ae85ff54b73b1c1168346a36a06ee690849bdc6cd11b99fbe003b1b85df3d290183c6f1a5ab75218e7bd7d960d83d6b473d35443492e34aabd418f2446a01d855aa147f76b1e609c2b0ef063f535e34f6417ec40cec27416df72b89981e16dd62eecafe716c4d07b38c4cb200ca337eddbe1672431f64d87df204d51b445775c97e117fcedddde364b76d3cd5bf668d7987a3cc6b20bc84eed29c9b62006414bbe4eca1b941f240010dd63fa40e2d86fca0c0ed60b2687da49596f2a6d2cd48a72a166a664301abeb0d64a419e4af2236cee419793dc93a9bee03ab28123d1649cc3439a03c0e1e294efc4abb9b668caa7c408b08607182d3ad4ccf5018a74b05037e4fa992871bec56cff408d8022941e8f942c01cf375e2159ce4c0d8628caa52500e2c0955b7047d0bb0dbe25c30be9e172b4cc6310ab991a160e1efd545f49f2d76086323d3753abde0e3e82286ef3286d5d7bb79dc4c9c0613ddb9a848b0f2483e3617777477f9f761eaffa517aeb4d6a6652cdd4e9f9778998084a5f534f31ff4055b08c97e5c024817ee661f1baaf13226da48d827a2b83dfb83c13f372f80d7757638bec04535fb0ec9571d7a6c129bf663be073c88e4d646ad6866ab2ec604f6d36a6155b0401ed2d3c25e1141395eb1dcfec4faa9fd1bef7ee11e3440fb8bb8d8ea646cda211069756c0e71dffbe09667f818acea3f2d4a515349744005d44289c01f4660eec82d1dce0625a592ff9dbe2031c1c4c24849e03a5705244a803db4c2b6198899b6583eb9f516ad5f7126a3961daf00e2a8ad42c376fd960fd130f32d561a2b19a5cc35c3629e3c330610e4b01557e63992fb390e5d6e4e27d149887c905f923f701acc23b0916eb81650f0b73575b2157d402729a69a74a67c51db4d6cca7670d871bdf0ec3269375486e8a6b49d964e47b219c6bcc9302a67e30ce30b8816a8f89059b7b881b6f38dc49cb7a5b6eccece1924a7ba0c456a8408446b7193883ae5a1792c4524c1a10a235aace85359855c6329498bdd22c0073b8fbf637b67e6d2da550b5aa5d70d66ab755cd93709768310cd8a27f25e80b42188a7f9258229e43b77d750e9342e6586ab0765b5dd53949bfa6675313b0ff9429e690c3f2669db2cf9027125ea3dc3bd06ef5ea51c34c2c9955402c14be700ad35c1bf6cac4b9e4414ce6df33e221731a276010366fb6abe7480c8651d8cdd9897009c6b26da416afd634f456891e8ee3dfe5ea5fc7600487c58ce03e27ce520a5a8bbb38163f15f9d58e744b2a0f24283e607fd6bd752c74703e58b60df40b7a9bc1bee5b77312fd59fb5ee4f0502225de830a78f2a85b138a268aac9f429a53c112e9fae4db9cdbe3b556fe2ebd0b0e6930a090c22bb69466e603944b5a6652b242b4456a29d4aca486535ce55e6e18468e70534a4e1559c94438a26af82dde4331d1e6d04844c68eb049304fa7618e08fe38209597092a3dd837fb0392439f10c5c15f6fc25685d5977b76a99c1d5416263b53d4158590e1737b22075f69ca86b5c39c62c9d3736a4c6e1bc2b7d67a64d6daaabd996ef985d43aef81264a1f1c2bd62f22f29878c7aa56df81c299bb8c9c1612d6f2422a55468738fe8ce9db1f317e73fb3cf3e02716f7b6353a388b6c357bc962a10332214567e5483d0e570d900331711a4888aaaa121bf66f02568be130228ed736b3d320e0416214f8b9eed48c2e7ff4452d5e933d663e045195c7286e0b42b8ee1f764d6c9155e3dacfd525d8179e494785933a1ca71983c8e0cdfc1c2929e54b610861295603638f3c58ff1fdad2c353b0c5416fa7db3731f9489ea09ed3b1ea8f422f849fe8902bb8352236cbdeefbe9bee9024520ba5c7fe6d960b69b525f4eb2e8379a7772d55095a4decb9b0f1cad6569bc0fbf87216cf881a366af493d6ac25e972562714c050fa072f0d490140dc7e94777dd5e980fa857779ab586ca24ee02ace07df15fc704c509e8ca089c1d25167a52b152a6d58d1098341b017d65930533ba626401d84a752f0308346e2402900794a06cb5735c72dd672e81cf18085310bead9cfe882504293add6a5871ce8c777695ff108c89fd934539e748c1aaa3ec16534800ebc118250843a58b2c39dea9896907a1c0920550c958ccacdc7b3ebe01aab150e64a27ce1d39c4cd2a56c675629b625895dcf536802733de6ddd74fee0efa758b030c3289857a709dce44992db35cf39e84e8e5b2f8f785841581e2347fbc72088a4111db758389c2996171e05f05e5459b97caa13707d65b841a9f3e2be416405a015a0116a3496a656c6f19c1fd98a2d94f3227c4a4422b8eb4b68f8b002978a1c056c6d96daef277d66b9177a3ec7a12a687a46292262ab345cc89ac8a8ef4e41e9495f61b839b3095ae6f0e5dfcca726b81fdadd9e240682453f00a6050ea73519d4cf9657095b93aec008dbd637b751e76557a9018cfdc63700065f649cc280a1e4d2f809254a32191e5069f6d1b6ae19d5bb3254d9ae408f5dfe0c3aed129a933867dafc5537861c5f7e689ad6b8a45e2af70bac300a5c65ca8c84eaedf78324b81d7f6c85b356114b61c034c1b522b7a3ddc3e6880041bb13a739737b373bab0fd51324f1b174f9e894e037562c6866d4b055adefadb0a9ac7f3c28511ae8aa79583fa5b8720c58a371963260f88e8a1f8d4c89dd8ac84f"}, {0x1, 0x510, 0xff, &(0x7f0000001680)="ee9089b20d827e647cbc08c0f629a110b40031894f8f5c460933165645cfc814f16b8822e914e7d0e54ff9a99f23fb11a07f496132e4db4799a8f36af1acecf0c9bd1d5f3f15b6feacb38956607bf75d3f8e3dfa3b9e3c7c5bcf2f5f461fb214408ab259053929d219d500d3756eb95066d481b46bcf1b2cdd1cdef0a179db3f4824fe6bc1ad498477fa67e8a9145d8a96db0d1a6722fbbdce980761631efe97d4dc"}, {0x3, 0x610, 0x9e, &(0x7f0000001740)="dfeb447dafdb330e3c8b7567a2c0006cf033fb9245301da15437830d7522d84573250b47e195be2d0f1f2aa18b1e1296e70a389218eee291bcb62276345665c2d45a2a45bf5e0ae39cdae6ef58c38686ffc5358c50d3962690823415405c1fc0b82ebaf18fdda848d8f01ca393bbfd117107d42ac986eeb4fd70f6ba2d404579c2033c9f22ec6079ce6a15f3388daa983758c16e1ff6ca31bc6a1a4a644588f95d1756087cc1dcc9a4f7a1f851c2f1540edcda525a48547a131b7837b80d29781336"}, {0x0, 0x108, 0x400, &(0x7f0000001840)="7e49ca037968e262584791bef105a70c4b9fb6e3511e74e222254209ee60e43598"}, {0x1, 0x8000, 0xfffffffd, &(0x7f0000001880)="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"}, {0x2, 0x5a8, 0x6, &(0x7f0000002880)="15cc0baf20ff03c6e26c350d89f63cc598e0a5615b19c5eb7d27312eb09a8862528a51f450996c52bbc01fd59aeedd112f70fd23606ef5d99aa035f8122890c2d48221ba1661d1102c8564df958510ccd43b04fc0b3cdb1ac8ea123c68289749a89b5b9f9a39b3e74d84ccb95d76a7a6e29b7c61498a0234a515a1199cf248872eace5b420b1d92dc3ba93a0a9770e4f4a0466561f287ef89eca7470ee5d6fbef663cf1ff48b0f0bfdcf59dcb3b64b6dd996886187"}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000002bc0)={0x1f, 0x0, @none}, 0xe) 2.659091457s ago: executing program 5 (id=246): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000140)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="dc", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x5, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf6732a69cc5f"}, 0xffe0) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000206000040b9066140deff0002030109021b0002010080fa0904"], 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x30, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x34b}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040d0}, 0x20004004) 1.965685547s ago: executing program 6 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x8, "566a3842d1820407"}, 0x0}) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x2}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41, 0x2}, 0x1}}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000240)={0x2, 0x1, 0x7}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x292, 0x0, 0x6}]}) 1.331190029s ago: executing program 5 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x1, &(0x7f0000000900)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl(r3, 0x4048aecb, &(0x7f0000000880)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) (async) close(r1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x1, &(0x7f0000000900)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) ioctl(r3, 0x4048aecb, &(0x7f0000000880)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1.011017658s ago: executing program 5 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) r0 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x541b, 0x20000000000009) open$dir(0x0, 0x4523a0, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000136000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0x10d615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 589.340439ms ago: executing program 0 (id=250): pipe2(&(0x7f00000007c0), 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000800)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000880)=0x0, 0x0, &(0x7f0000000900)=0x0) syz_ublk_add_dev(r0, r1, 0x0, r2, &(0x7f0000000940)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000009c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000a00)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000a40)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000d40)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 509.589444ms ago: executing program 7 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 403.168603ms ago: executing program 0 (id=252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0x100000}) fallocate(r2, 0x1, 0x20, 0x100000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x181541) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x2, 0xac9}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000003c0)="8c", 0x1}, {&(0x7f0000000080)='j', 0x1}], 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00') read$eventfd(r6, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000100)={0x100000}) (async) fallocate(r2, 0x1, 0x20, 0x100000) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x181541) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x2, 0xac9}) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) writev(r5, &(0x7f00000001c0)=[{&(0x7f00000003c0)="8c", 0x1}, {&(0x7f0000000080)='j', 0x1}], 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00') (async) read$eventfd(r6, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) 306.627078ms ago: executing program 6 (id=253): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff, 0x6}}, './file0\x00'}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x4, 0x0, 0x7, 0x3, 0x0, "c0753bc93b16651a8df12f83e72a0a97a398d4", 0x5, 0x102000}) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x3, 0x7}, 0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0xe6f, 0x0, 0x17f40aa1, 0x4, 0x8, "e64de765653b5535bf224330941cb1f5a04e8d", 0x3, 0x8}) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xa8) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x18041, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000280)={0x3, 0x8}) write$P9_RWRITE(r0, &(0x7f00000002c0)={0xb, 0x77, 0x2, 0x8001}, 0xb) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x61}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0xc840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x508}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x11}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x206) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0), 0x440, 0x0) bind$phonet(r5, &(0x7f0000000600)={0x23, 0x0, 0x3d, 0x80}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb0, r6, 0x608, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6c3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd847}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x77}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2d9b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x50}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x60}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x58a}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x607c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2004c011}, 0x10) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000840)={&(0x7f0000000800)=[{0x81, 0xa}], 0x1, 0x10, 0xfffb, 0xfffffffffffffff7}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000880)=@assoc_id=r1, &(0x7f00000008c0)=0x4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000900)={r1}, &(0x7f0000000940)=0x8) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000980)=0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb0, r9, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0x81, 0x5b, "93cf3427ae2ed993b91e57ea97928b269d62543082f22eabe69b9b1f2a1bfee6301813789ef0383defb32f42a98cfe0e3deb6604fa725810a6f15d4fe65eea972c57ea44a2ddf2df43f7c66683d05d4c9659916f1ddeb1dfae26dc35add8bfae45bb591705fceb7bb8cfb8b6dbd4d42f884672a63c479de6494c2d0537"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x4010) 305.741103ms ago: executing program 7 (id=254): r0 = socket(0x11, 0x5, 0x3d) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000140)={0x3, 0x2, 0x73, 0x7, 0x4, 0x5}) syz_usb_connect(0x3, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x110, 0x1d, 0x23, 0x72, 0x20, 0x4b4, 0x6831, 0x4c9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5b, 0x9e, 0x0, 0x8, "", [{{0x9, 0x4, 0xe7, 0x3, 0x0, 0x49, 0xd, 0xbc, 0x9}}]}}]}}, 0x0) bind$inet6(r0, &(0x7f0000000d40)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000d80)=ANY=[], 0x8) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000dc0)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000e00), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000044, &(0x7f0000000e40)={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x14, 0x5, 0x41, 0x20, 0x19d2, 0x326, 0x51aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9d, 0x90, 0x2, "", [{{0x9, 0x4, 0xa1, 0x7, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x438}}, {0x9b, &(0x7f0000000080)=@string={0x9b, 0x3, "7e50197007944ce5d12ce6addca791c8a9b83960cba63c75735aea1655630017791292cb3ce2bb7142d9a98eb480d6b3af114b04fa82bc6367b0b64a03e42de8993768f4f220e34ecea38b86abe13255bd9d6023126733f04ad3a7275c82f7aa6489e99632af7326d1dc83bdc731eb121d3b2abcebf1dc0226efb7b11ad9807c10cacda947b9746e4ff715d981d06c8efadb46ad5e23cc403e"}}, {0x93, &(0x7f0000001340)=@string={0x93, 0x3, "fe56e4331d5a60e3d0c97fc1334ef9d4c654ae9e4deb56a686dd2347b0319e317725017893dc225161f154e41f126e5f33356ca585c1866f1bc0742ed39e6ca201c21157a1279a99d1f9f3a7e1134ee87d67382013e3efb24c713a71925dbdf133736967ad2a0c6fd5d45e1f7244da03a6ba359ee35dcf75a134b309ed383250d4d1e33b94b869d1866424966b1e781d73"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0xb4, &(0x7f0000000240)=@string={0xb4, 0x3, "f8d7691a3977d139f98811e9b2a9cf2d0151ef4b15ca0d774f56ba37ab184f88af931372998161697afdabc8e8fe001c19a6fcc46507f569a151dbf51df0bd802aacf293475c4413ecd7b18d0a8f8a3d55d36637d1a43a62995c28b05d17621819be6b79268687aae0f1e9de9b551863fa2c36273b48d3cd6582140067ddcbf7c9c404336337f0f0c119c5aa6b53ddb38956161e08137f3fef0f19c4651139dcb5433513988742d6c2e9c76146b164b2263e"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1401}}, {0x8, &(0x7f0000000340)=@string={0x8, 0x3, "13737314938a"}}]}) syz_usb_connect(0x0, 0x8c7, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0xed, 0x7f, 0x51, 0xff, 0x10c4, 0x8156, 0xbeb0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b5, 0x3, 0x81, 0x40, 0x90, 0x15, "", [{{0x9, 0x4, 0x41, 0x44, 0x6, 0xb2, 0x8e, 0xce, 0x4, [], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x4, 0x10, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x80}]}}, {{0x9, 0x5, 0x1, 0x2, 0x48, 0xe, 0x2d, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x800}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0xd, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x0, 0x7c, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x9, 0x72}}, {{0x9, 0x5, 0x80, 0x0, 0x3f7, 0x3, 0x81, 0x4, [@generic={0x3f, 0x30, "29beb32137f9c31014962e375beceb367fd2fb598dc9b719d8dae750bed372f31f0180a901d0ec82de634120433403721f56b7461bcd6ac7eb7d04d72d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3800}]}}]}}, {{0x9, 0x4, 0xf9, 0x5, 0xa, 0xff, 0xff, 0x0, 0x1, [], [{{0x9, 0x5, 0x8, 0x1, 0x40, 0x3, 0x1, 0x9c}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x6, 0x5, 0x54, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x8}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x3, 0x4, [@generic={0x9a, 0x6, "b99f823c399ce2b851bbd132a39414bc06739a48467ab1d6aaab6cfb3c32ccc526ef5ae9e3c5bf7696d10b5cca22cd1f2cf96bf2004c05c2d0ee87b290caca6d14ffc5dd713db1f3eb4a7b5ab64eeb4bf6e3e5f8cd7f5c951c3c1d2b379141fdf978743402ff4d8ec9e2584d020d3e70821b8bb48ddab5da63190e6bc0262710257c4804d70a5817595cfb72b3cdbc0acb57ab5f2537603e"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x4, 0xfc, 0x1, [@generic={0x17, 0x23, "62100b7b8a9f037c0052b8a37aacd8da30b23159f2"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x6}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x8, 0x6, 0xcb}}, {{0x9, 0x5, 0xb, 0x0, 0xc1a20e58d924d2b5, 0x1, 0x7, 0x6, [@generic={0xc9, 0x5, "3a3cec5d6d0e6a23a7a60f3463de6185a10f1a8f000001ea18a1aab0384545f816b4ce9bc2f6db73280588dfc9bd97593cbd30e9a8e60b872a7bd2c3d0f85dd515a9152c7e47a57fe1350c317fad8ca761fa797e6444d466c5cff633d8a26bdb7f53cc9a2d95bd7a4f521f0b8749fcf465b743e1dff733b9cc61fb5e845198f45a4f3fb5f92684d528ffa57b5c2bfe6c2ecc50d237f5819f36413138d12082393e9b79fb9980d6453ac081c9ff7af5a0fa3557adacf6fa25664a2790fc73af3c6c4f799d3735a2"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0xcb, 0x7, 0x40, [@generic={0xa8, 0x31, "ae0dd7272cefd7f8ad7e114bf3880c3fe9293df5635604263814cd8c7b93e962eddbe2b74b0718e2287c97f123e774ed35c8060ae312fe30041e5ccb64eefe9799f00738a4af2c2ffa372b73de7a9dcdd605776459bdb63396760ef59dbe83c57092f8f13ebe3b50ed91d7534ccdb9a0ccec79ca6a07a5544c8286fea20f80db44313dd7df89a9c4caadd55a7394f2d74ab010613b8d4ff5ea8d32efc54f926dcf8342b446b4"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xc, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x30}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x6, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}, @generic={0x9f, 0x22, "88436ea252f840ac2540a055b66fd96489b853eeddbc6d1bf8145f7fe938134a66e59dbc411b33d547fff18afc91b68256a4ac4962eefb19fbf6d283f3cdf08c016d5c1b7b19777c6cb4a6c83174c885b17aebbb27f790d4470c3a2a274ec630113f00a55113f8bfb2cd00075b6166e25f21f4b5b5d26fc8bb5ced7acc542047fffcbacc439b2634aae0f434b252b2af4caa7793f1ccd1b0083458f76c"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0xc, 0x8, 0x80}}]}}, {{0x9, 0x4, 0xe9, 0x2e, 0xc, 0x66, 0x53, 0xbd, 0xfc, [@hid_hid={0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x9c2}}, @uac_control={{0xa, 0x24, 0x1, 0x1000, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x400, 0x2, 0x5, 0x4}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xac, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x4}, @generic={0xa3, 0xb, "2dfcc287b84b33b9b915f944f0299e01bd48dbd2b0c2db8622c990a22ace4c268943dbd3b8096d7604c2c5df44343679fd84029d812b74fe44dfcc7c383b75e69b94844c0e74448f5ff713179c29bfa491c167d08dca8524655bc81fba4133bf25b21898e4df81ace6781d550d8f99a8b67f98b2b422f74e41d5a2fbe9d060d5cd7aed4149951783149d051922cee2c9687b02502a26a7e136367628a44bb0f42c"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x408, 0x2, 0x7, 0x6, [@generic={0x45, 0x23, "1e5374718a2cec239ce27ad8bbe4742c8f38abb42d67a76eed0c3c30c1cecdc3d928e8ff6d58eb980a80b7facce245811a295b55d7c82358e73237b0f0f43d208a0601"}, @generic={0x8b, 0x11, "de38596047a39452b1eda26cd9a76611c125963464c9906be39a6b7b72662a999243916df72e57b0a39bb2502f8e5c04ebd69476dae3e29b0d976c10bde68d1f81ddc4f69a330b4175069842bb9b64445a9e7e568692c176433832be9f74cb7a490dac643326d234454c9d63e1b5f0aabf007a53088d427bf40ee29012a2ce8149a3af7877a50952bb"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0x5, 0x6, 0x1, [@generic={0x98, 0x4, "e436906881435472b9328399dec245dba3a685360115f32f0ff6b8b7eaa889b387a8ed5a8206fc2b509924a415cd7689dd62298fbbf3ff9ca8508e0493a77baf57d027207ef4cec0ced6a98a941835ea42436c3d09f75deb74c5e80c61f4adeb95dc5f7e700f7c99203ba7945e9012a3d4f0270fe58fafedb33d27b60c7903d78de07f4553c2e96e19b5f911e21f4ebec56fe5c5daf1"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0xfe, 0xd, 0x25}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0xd, 0x0, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xfc, 0x5, 0xfe}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x7, 0x6, 0x7, [@generic={0x25, 0x31, "965111685cd33122d332cf5b1a3d71c139d28fe98868636ccd5b8026a0c0ba00388bf8"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x0, 0xd, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}, @generic={0x78, 0x23, "7616509f0ce75cc226ebfffc4e8fcbb39bcf226d37f716e21d5617fd8be11b60a72fc031fcfdcf10fec06136884d302d59224502df3cd40b7e416615395c8c51dece0abb05fd0c8ef8be737ce2e2c5c07251c0a6904d2acab3a5bc69a264c0624f5c7a836757204141aeb9c7a9f855b48172e2b02e27"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x10, 0x80, 0xb}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x80, 0x0, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5, 0x9, 0xb8}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x2f, 0x8, 0x3, [@generic={0xeb, 0x21, "f4cb0e5ea25d26643ba2223a5a4f5a600e5a7655e048b491b5dee892ac707c3171b2216e6cd4ed80d5158211c4338e26f5c5260fc97994db83bfdd8bed0d3d12356550fc7aba8334e0f44e1399af797fae90c5eb651c7fd14c911da55c7ffb58cd9e7509d46431a032e2cecd22266b49c298053f05680123f81afcce4802784f0fba8a41a957aae287a33acceddfd9f96ce6aca9ec635aef7788616c56d2f6435d122bcd4cd82df135985c9b941692058fe0c3a4eb637db6d11dd0f8c7e69f9469b7bdea558b4232238a494d2c23d9f5adb0d40ab6dd5a8f0eaeddea73bb72d7866c52e913d3eceed2"}, @generic={0xa0, 0x5, "7917494eca8d0c1d1e78d56d6b5e5a018cb780544e6f1c69b31bf4c9255e4e97ea018b18f89ea93892420fb79c4731d27f2b54cec385356434b8c04b25b2757b3c142fbb37b42d94938ecd53a268d93d4543e085e0c934e76b1c9fb1d80d3a60c53103984addf06cd70b3030f0c7760b8fab259395ddb0ce4a612ea31de032e01bcfa362f6a934806eb7d94b638d80821f24571dd472bd29f6268bc70776"}]}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x69, 0x7b, 0x8, 0xff, 0x2}, 0x5, &(0x7f0000000d00)={0x5, 0xf, 0x5}, 0x5, [{0xf4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"]}, {0xb6, &(0x7f0000000e80)=@string={0xb6, 0x3, "7d0b12d8d0d31d76b3c8c88888b4ce9ae6976199a632eca63f7a718c858645e3289bcf51f218577b6f1ed97f8850a20929e875d1a2162302dc3d742a05c132eeb4e05c78c776a738ee3284f34bb1bb8c163ae53728b05d03fc475962a226e01a9ba0bcde31bae143df063e23728459e1b693da60c41096e1ecbeb16e508787e7b25c7b4f476009081ac2e04d1043ce0338b677163ca5eaf83075b630f7f3b32c7d3006ab5b32ef772c6a2eea20bf9cde15bc338a"}}, {0x70, &(0x7f0000000f40)=@string={0x70, 0x3, "88d23ba0055eae6d542529f25a61cb3f68396a2afd0665da9a54dc186fb0f1dc0ea7301d3d9ed6596716c8bd55310dfef111857286a8faa0dace385f2034e21cb79853efc1b3e05ebd770182fd86554bffbae60893f18a8e613b414212fa5907d8b8069ab2b6585c353b0be2302a"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x2409}}, {0xe9, &(0x7f0000001000)=@string={0xe9, 0x3, "2ae0b672a4a851409fbf0bf698ca9cb89f52de41367254c13ffd667c11a96dfee3dcf3d55132ba33dab3e21c646b839341674bc1b578af57c8475da75e1012e162a446e5b3f48db368fa309efd730d26074e66e6baf43a482010aa9508e7d4734aa693f2ceb96de9b774342a9bdff34953606ccaac005f12cc2916fa3de0148e5d40f903ce58e5a8cdb9fa2497d8eaccde951c293a619feff90c03ccda9bcc9c1783cb583e3656abc6264b363f1bc2e34c6bffb9785977d05afb98e94cdc70a3fa874733ece55ac57253d5ba6ca436ef29a039a4157749dd05f666b699a144785f819451b15446"}}]}) 242.745225ms ago: executing program 6 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = gettid() syz_pidfd_open(r1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x8000, 0xfffffffffffffffa}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = geteuid() mount$9p_unix(&(0x7f0000000080)='./sys\x00', &(0x7f0000000240)='./sys\x00', &(0x7f0000000280), 0x800, &(0x7f00000004c0)={'trans=unix,', {[{@cache_readahead}, {@privport}, {@fscache}, {@access_user}, {@cache_fscache}, {@cache_mmap}, {@cache_readahead}, {@access_any}], [{@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)={0x1c, 0x20, 0x1, 0x0, 0x8000, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=' \x00\x00\x01\x01b'}]}, 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'dvmrp1\x00', 0x0}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x4, 0x101000) write(r5, &(0x7f00000002c0)="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", 0xfb) 147.531092ms ago: executing program 5 (id=256): prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000240)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffb800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) 0s ago: executing program 6 (id=257): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000ac0)) kernel console output (not intermixed with test programs): 07fdf25226038 R14: 00007fdf25225fa0 R15: 00007ffd192df378 [ 94.724915][ T5846] [ 94.869306][ T5846] Mem-Info: [ 94.869354][ T5846] active_anon:5723 inactive_anon:0 isolated_anon:0 [ 94.869354][ T5846] active_file:0 inactive_file:42302 isolated_file:0 [ 94.869354][ T5846] unevictable:0 dirty:1760 writeback:0 [ 94.869354][ T5846] slab_reclaimable:10219 slab_unreclaimable:91951 [ 94.869354][ T5846] mapped:24491 shmem:527 pagetables:1171 [ 94.869354][ T5846] sec_pagetables:0 bounce:0 [ 94.869354][ T5846] kernel_misc_reclaimable:0 [ 94.869354][ T5846] free:1339763 free_pcp:12229 free_cma:0 [ 94.869527][ T5846] Node 0 active_anon:22892kB inactive_anon:0kB active_file:0kB inactive_file:169004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97964kB dirty:7028kB writeback:0kB shmem:2108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11672kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 94.869705][ T5846] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 94.869862][ T5846] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.870058][ T5846] lowmem_reserve[]: 0 2462 2463 2463 2463 [ 94.870178][ T5846] Node 0 DMA32 free:1405068kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22892kB inactive_anon:0kB active_file:0kB inactive_file:169004kB unevictable:0kB writepending:7028kB zspages:0kB present:3129332kB managed:2521304kB mlocked:0kB bounce:0kB free_pcp:48912kB local_pcp:23824kB free_cma:0kB [ 94.870362][ T5846] lowmem_reserve[]: 0 0 1 1 1 [ 94.870472][ T5846] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 94.870658][ T5846] lowmem_reserve[]: 0 0 0 0 0 [ 94.870772][ T5846] Node 1 Normal free:3938624kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:12kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.878373][ T5846] lowmem_reserve[]: 0 0 0 0 0 [ 94.878510][ T5846] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 94.878870][ T5846] Node 0 DMA32: 495*4kB (UME) 163*8kB (UME) 37*16kB (UME) 20*32kB (M) 8*64kB (UME) 8*128kB (UM) 3*256kB (UM) 5*512kB (M) 5*1024kB (ME) 5*2048kB (UME) 337*4096kB (M) = 1405092kB [ 94.879366][ T5846] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 94.879691][ T5846] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 10*16kB (UM) 9*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 960*4096kB (M) = 3938624kB [ 94.898780][ T5846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.898832][ T5846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.898954][ T5846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.898998][ T5846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.899068][ T5846] 42825 total pagecache pages [ 94.899097][ T5846] 0 pages in swap cache [ 94.899118][ T5846] Free swap = 124996kB [ 94.899139][ T5846] Total swap = 124996kB [ 94.899167][ T5846] 2097051 pages RAM [ 94.899187][ T5846] 0 pages HighMem/MovableOnly [ 94.899212][ T5846] 434763 pages reserved [ 94.899219][ T5846] 0 pages cma reserved [ 94.990271][ T193] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.043088][ T193] usb 4-1: device descriptor read/8, error -71 [ 95.578120][ T193] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.664203][ T193] usb 4-1: device descriptor read/8, error -71 [ 95.784703][ T193] usb usb4-port1: unable to enumerate USB device [ 95.803633][ T5713] usb 1-1: USB disconnect, device number 3 [ 95.976546][ T5342] usb 3-1: USB disconnect, device number 3 [ 96.264919][ T193] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.428441][ T193] usb 2-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 96.431931][ T193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.431954][ T193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.431982][ T193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.434511][ T193] usb 2-1: config 0 descriptor?? [ 96.534443][ T5342] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.646051][ T5869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.900597][ T193] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 96.900645][ T193] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 96.900674][ T193] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 96.900701][ T193] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 96.900727][ T193] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 96.936426][ T5869] netlink: 296 bytes leftover after parsing attributes in process `syz.2.31'. [ 96.971390][ T193] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 97.092722][ T5342] usb 2-1: USB disconnect, device number 6 [ 97.363561][ T5879] fido_id[5879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 97.693757][ T5894] qrtr: Invalid version 0 [ 97.694710][ T5894] netlink: 'syz.2.35': attribute type 28 has an invalid length. [ 97.694732][ T5894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 97.840911][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.841751][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.881927][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.882310][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.882753][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.883110][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.883532][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.883898][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 98.335958][ T5342] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.528057][ T5342] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.528114][ T5342] usb 2-1: New USB device found: idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 98.529291][ T5342] usb 2-1: config 160 has an invalid interface number: 168 but max is 0 [ 98.529318][ T5342] usb 2-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 98.529338][ T5342] usb 2-1: config 160 has no interface number 0 [ 98.529412][ T5342] usb 2-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 98.529440][ T5342] usb 2-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 65077, setting to 1024 [ 98.529469][ T5342] usb 2-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 98.529495][ T5342] usb 2-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0x23, changing to 0x3 [ 98.529522][ T5342] usb 2-1: config 160 interface 168 altsetting 8 endpoint 0x3 has an invalid bInterval 57, changing to 9 [ 98.529549][ T5342] usb 2-1: config 160 interface 168 altsetting 8 endpoint 0x3 has invalid maxpacket 2046, setting to 1024 [ 98.529577][ T5342] usb 2-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 98.529601][ T5342] usb 2-1: config 160 interface 168 altsetting 8 bulk endpoint 0xA has invalid maxpacket 920 [ 98.529626][ T5342] usb 2-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 98.529652][ T5342] usb 2-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 98.529677][ T5342] usb 2-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0 [ 98.529699][ T5342] usb 2-1: config 160 interface 168 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 98.529736][ T5342] usb 2-1: config 160 interface 168 has no altsetting 0 [ 98.545518][ T5342] usb 2-1: string descriptor 0 read error: -22 [ 98.738973][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.743786][ T5906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.744059][ T5906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.744327][ T5906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.781693][ T5342] io_edgeport 2-1:160.168: EPiC device converter detected [ 98.782264][ T5342] usb 2-1: detected [ 99.089371][ T5342] usb 2-1: error in getting manufacturer descriptor: -32 [ 99.090682][ T5342] usb 2-1: error in getting boot descriptor: -32 [ 99.090713][ T5342] usb 2-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information. [ 99.140158][ T5342] usb 2-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 99.140187][ T5342] usb 2-1: Falling back to sysfs fallback for: edgeport/down.fw [ 99.425113][ T5613] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.610068][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.610118][ T5613] usb 4-1: New USB device found: idVendor=0ead, idProduct=0263, bcdDevice=1d.cd [ 99.611521][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 99.611555][ T5613] usb 4-1: can't read configurations, error -61 [ 99.744949][ T5613] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.863622][ T1182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.917646][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.917705][ T5613] usb 4-1: New USB device found: idVendor=0ead, idProduct=0263, bcdDevice=1d.cd [ 99.919687][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 99.919724][ T5613] usb 4-1: can't read configurations, error -61 [ 99.920223][ T5613] usb usb4-port1: attempt power cycle [ 99.999032][ T1182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.077965][ T1182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.189823][ T1182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.263646][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.271721][ T5613] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 100.274753][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.290481][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.302897][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.303686][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.312114][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.312159][ T5613] usb 4-1: New USB device found: idVendor=0ead, idProduct=0263, bcdDevice=1d.cd [ 100.314470][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 100.314572][ T5613] usb 4-1: can't read configurations, error -61 [ 100.450563][ T5613] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 100.483762][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.483813][ T5613] usb 4-1: New USB device found: idVendor=0ead, idProduct=0263, bcdDevice=1d.cd [ 100.487808][ T5613] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 100.487939][ T5613] usb 4-1: can't read configurations, error -61 [ 100.491067][ T5613] usb usb4-port1: unable to enumerate USB device [ 100.530377][ T1182] bridge_slave_1: left allmulticast mode [ 100.530415][ T1182] bridge_slave_1: left promiscuous mode [ 100.531216][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.560453][ T1182] bridge_slave_0: left allmulticast mode [ 100.560479][ T1182] bridge_slave_0: left promiscuous mode [ 100.561541][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.611764][ T33] audit: type=1326 audit(1792328961.164:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.611820][ T33] audit: type=1326 audit(1792328961.164:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.612114][ T33] audit: type=1326 audit(1792328961.164:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.612338][ T33] audit: type=1326 audit(1792328961.164:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.612613][ T33] audit: type=1326 audit(1792328961.164:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.612930][ T33] audit: type=1326 audit(1792328961.164:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.621114][ T33] audit: type=1326 audit(1792328961.174:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.621261][ T33] audit: type=1326 audit(1792328961.174:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.621367][ T33] audit: type=1326 audit(1792328961.174:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 100.632512][ T33] audit: type=1326 audit(1792328961.174:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5936 comm="syz.0.48" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x7fc00000 [ 101.023309][ T1182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.037484][ T1182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.039908][ T1182] bond0 (unregistering): Released all slaves [ 101.401478][ T5949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.401675][ T5949] block device autoloading is deprecated and will be removed. [ 101.588785][ T5958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.939820][ T5933] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.131634][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.248966][ T1182] hsr_slave_0: left promiscuous mode [ 102.261626][ T1182] hsr_slave_1: left promiscuous mode [ 102.262894][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.262926][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.286830][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.286850][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.316076][ T5753] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.331442][ T1182] veth1_macvtap: left promiscuous mode [ 102.331587][ T1182] veth0_macvtap: left promiscuous mode [ 102.331834][ T1182] veth1_vlan: left promiscuous mode [ 102.332039][ T1182] veth0_vlan: left promiscuous mode [ 102.365340][ T5623] Bluetooth: hci0: command tx timeout [ 102.445019][ T5753] usb 1-1: device descriptor read/64, error -71 [ 102.559417][ T5986] input: syz1 as /devices/virtual/input/input6 [ 102.592306][ T5986] 0x000000000000-0x000000010000 : "" [ 102.688203][ T5753] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.702389][ T5986] ftl_cs: FTL header not found. [ 102.816753][ T5753] usb 1-1: device descriptor read/64, error -71 [ 102.935330][ T5753] usb usb1-port1: attempt power cycle [ 103.163606][ T1182] team0 (unregistering): Port device team_slave_1 removed [ 103.200444][ T1182] team0 (unregistering): Port device team_slave_0 removed [ 103.275027][ T5753] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.307738][ T5753] usb 1-1: device descriptor read/8, error -71 [ 103.383787][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 103.556521][ T5753] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 103.578016][ T5753] usb 1-1: device descriptor read/8, error -71 [ 103.686346][ T5753] usb usb1-port1: unable to enumerate USB device [ 104.081922][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.083639][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.083770][ T5933] bridge_slave_0: entered allmulticast mode [ 104.099389][ T5753] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 104.118843][ T5933] bridge_slave_0: entered promiscuous mode [ 104.130552][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.132224][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.132424][ T5933] bridge_slave_1: entered allmulticast mode [ 104.158084][ T5933] bridge_slave_1: entered promiscuous mode [ 104.248759][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.266790][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.285827][ T5753] usb 4-1: New USB device found: idVendor=05ac, idProduct=0265, bcdDevice=0.00 [ 104.304215][ T5753] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.304253][ T5753] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.304289][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.336923][ T5753] usb 4-1: config 0 descriptor?? [ 104.386101][ T5933] team0: Port device team_slave_0 added [ 104.389442][ T5933] team0: Port device team_slave_1 added [ 104.390864][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.437070][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.437089][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.437125][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.439300][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.439315][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.439342][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.444981][ T5623] Bluetooth: hci0: command tx timeout [ 104.571325][ T6035] input: syz0 as /devices/virtual/input/input7 [ 104.604281][ T5753] magicmouse 0003:05AC:0265.0003: hiddev0,hidraw0: USB HID v2.53 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 104.604644][ T5753] magicmouse 0003:05AC:0265.0003: magicmouse input not registered [ 104.639634][ T6035] overlayfs: failed to resolve './file1': -2 [ 104.653994][ T5753] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -12 [ 104.672373][ T6035] __nla_validate_parse: 26 callbacks suppressed [ 104.672392][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 104.748216][ T5933] hsr_slave_0: entered promiscuous mode [ 104.752339][ T5933] hsr_slave_1: entered promiscuous mode [ 104.771950][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 104.771970][ T5933] Cannot create hsr debugfs directory [ 104.786540][ T5753] usb 4-1: USB disconnect, device number 10 [ 105.249522][ T5933] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.272540][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.275262][ T5933] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.298911][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.308296][ T5933] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.330239][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.350308][ T5933] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.379858][ T5933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.608566][ T6068] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.687617][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.717128][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.738803][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.738910][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.763312][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.763408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.854876][ T193] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.873257][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 105.912480][ T6074] netlink: 'syz.3.67': attribute type 5 has an invalid length. [ 106.014893][ T193] usb 1-1: Using ep0 maxpacket: 32 [ 106.016212][ T193] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 106.023022][ T193] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.023049][ T193] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.023070][ T193] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.023121][ T193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.023143][ T193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.023168][ T193] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.023209][ T193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.054464][ T193] usb 1-1: config 0 descriptor?? [ 106.339451][ T193] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 106.535297][ T5623] Bluetooth: hci0: command tx timeout [ 106.542957][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.549315][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.574032][ T5613] usb 1-1: USB disconnect, device number 8 [ 106.624227][ T5613] usblp0: removed [ 106.676429][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.713185][ T6103] sctp: [Deprecated]: syz.3.71 (pid 6103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.713185][ T6103] Use struct sctp_sack_info instead [ 106.994732][ T5933] veth0_vlan: entered promiscuous mode [ 107.007678][ T5933] veth1_vlan: entered promiscuous mode [ 107.051178][ T5933] veth0_macvtap: entered promiscuous mode [ 107.057061][ T5933] veth1_macvtap: entered promiscuous mode [ 107.081591][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.106068][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.179933][ T6111] syz.3.72 uses obsolete (PF_INET,SOCK_PACKET) [ 107.227387][ T6111] dvmrp16: entered allmulticast mode [ 107.253011][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.253029][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.301712][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.301729][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.309398][ T1182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.315883][ T1182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.315992][ T1182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.316084][ T1182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.465617][ T5713] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.615209][ T5713] usb 1-1: Using ep0 maxpacket: 16 [ 107.618487][ T5713] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.618537][ T5713] usb 1-1: New USB device found: idVendor=1397, idProduct=00bd, bcdDevice=0.40 [ 107.621308][ T5713] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 107.628484][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.628548][ T5713] usb 1-1: Product: syz [ 107.628660][ T5713] usb 1-1: Manufacturer: syz [ 107.628703][ T5713] usb 1-1: SerialNumber: syz [ 107.837866][ T6121] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 107.837933][ T6121] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 107.837977][ T6121] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 107.896194][ T6122] tipc: Started in network mode [ 107.896218][ T6122] tipc: Node identity 1001001, cluster identity 4711 [ 107.896232][ T6122] tipc: Node number set to 16781313 [ 107.942584][ T5713] usb 1-1: failed to read device descriptor: -71 [ 107.942639][ T5713] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 107.974906][ T5713] usb 1-1: invalid MIDI EP [ 107.974924][ T5713] usb 1-1: snd-bcd2000: error during probing [ 107.983644][ T5713] snd-bcd2000 1-1:1.0: probe with driver snd-bcd2000 failed with error -22 [ 108.015542][ T5713] usb 1-1: invalid MIDI EP [ 108.015562][ T5713] usb 1-1: snd-bcd2000: error during probing [ 108.018457][ T5713] snd-bcd2000 1-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 108.061948][ T5713] usb 1-1: invalid MIDI EP [ 108.063965][ T5713] usb 1-1: snd-bcd2000: error during probing [ 108.064636][ T5713] snd-bcd2000 1-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 108.092590][ T5713] usb 1-1: USB disconnect, device number 9 [ 108.149980][ T1182] smbdirect: ib_dev[syz2] removed [ 108.301156][ T6124] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.449478][ T6124] dvmrp0: entered allmulticast mode [ 108.518407][ T6124] syz.4.75 (6124) used greatest stack depth: 19232 bytes left [ 108.614879][ T5623] Bluetooth: hci0: command tx timeout [ 108.795064][ T946] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 108.946329][ T946] usb 1-1: New USB device found: idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 108.947523][ T946] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 108.947549][ T946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.947568][ T946] usb 1-1: config 0 has no interface number 0 [ 108.947610][ T946] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 108.947637][ T946] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 108.947659][ T946] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.950519][ T946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.950542][ T946] usb 1-1: Product: syz [ 108.950556][ T946] usb 1-1: Manufacturer: syz [ 108.950570][ T946] usb 1-1: SerialNumber: syz [ 108.964400][ T946] usb 1-1: config 0 descriptor?? [ 109.115598][ T193] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.254931][ T193] usb 5-1: device descriptor read/64, error -71 [ 109.380702][ T946] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 109.396660][ T946] usb 1-1: USB disconnect, device number 10 [ 109.446459][ T5715] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 109.504982][ T193] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.594865][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 109.596797][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.596841][ T5715] usb 4-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.54 [ 109.597870][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.597912][ T5715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.599961][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.599985][ T5715] usb 4-1: Product: syz [ 109.599999][ T5715] usb 4-1: Manufacturer: syz [ 109.600013][ T5715] usb 4-1: SerialNumber: syz [ 109.665969][ T193] usb 5-1: device descriptor read/64, error -71 [ 109.775525][ T193] usb usb5-port1: attempt power cycle [ 109.896007][ T5715] usb 4-1: unit 0 not found! [ 109.961523][ T5715] usb 4-1: USB disconnect, device number 11 [ 110.004522][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.115509][ T193] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.135468][ T193] usb 5-1: device descriptor read/8, error -71 [ 110.285018][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 110.374888][ T193] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.397295][ T193] usb 5-1: device descriptor read/8, error -71 [ 110.436410][ T10] usb 1-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 110.440072][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.440096][ T10] usb 1-1: Product: syz [ 110.440111][ T10] usb 1-1: Manufacturer: syz [ 110.440126][ T10] usb 1-1: SerialNumber: syz [ 110.505338][ T193] usb usb5-port1: unable to enumerate USB device [ 110.675549][ T6160] netlink: 'syz.3.87': attribute type 6 has an invalid length. [ 110.741898][ T6160] Zero length message leads to an empty skb [ 110.852274][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 110.852356][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 110.931118][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 110.998705][ T51] IPVS: starting estimator thread 0... [ 111.000247][ T6170] IPVS: set_ctl: invalid protocol: 32 127.0.0.1:20003 [ 111.064070][ T6173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.92'. [ 111.085528][ T6171] IPVS: using max 29 ests per chain, 69600 per kthread [ 111.460036][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 111.460116][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 111.461522][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 111.503857][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 111.529495][ T10] usb 1-1: USB disconnect, device number 11 [ 111.879057][ T1182] IPVS: starting estimator thread 0... [ 111.880700][ T6190] device-mapper: ioctl: name not supplied when creating device [ 111.974929][ T6194] IPVS: using max 27 ests per chain, 64800 per kthread [ 112.165815][ T5713] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.266761][ T5613] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 112.283674][ T6198] tmpfs: Too few inodes for current use [ 112.284032][ T6199] tmpfs: Too few inodes for current use [ 112.316221][ T5713] usb 5-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 112.318466][ T5713] usb 5-1: config 0 has no interfaces? [ 112.318503][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.350584][ T5713] usb 5-1: config 0 descriptor?? [ 112.415422][ T5613] usb 1-1: New USB device found: idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 112.416497][ T5613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.416516][ T5613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 112.416546][ T5613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.418833][ T5613] usb 1-1: config 0 descriptor?? [ 112.630433][ T5613] ath6kl: Failed to submit usb control message: -71 [ 112.630489][ T5613] ath6kl: unable to send the bmi data to the device: -71 [ 112.630505][ T5613] ath6kl: Unable to send get target info: -71 [ 112.634009][ T5613] ath6kl: Failed to init ath6kl core: -71 [ 112.660633][ T5613] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 112.673408][ T5613] usb 1-1: USB disconnect, device number 12 [ 112.715500][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.845398][ T10] usb 4-1: device descriptor read/64, error -71 [ 113.085437][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 113.216453][ T10] usb 4-1: device descriptor read/64, error -71 [ 113.335387][ T10] usb usb4-port1: attempt power cycle [ 113.378380][ T6220] fuse: Bad value for 'rootmode' [ 113.678280][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 113.695464][ T10] usb 4-1: device descriptor read/8, error -71 [ 113.905337][ T193] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 113.934943][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 113.956333][ T10] usb 4-1: device descriptor read/8, error -71 [ 114.055043][ T193] usb 1-1: Using ep0 maxpacket: 8 [ 114.055826][ T193] usb 1-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.40 [ 114.058578][ T193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.058596][ T193] usb 1-1: Product: syz [ 114.058606][ T193] usb 1-1: Manufacturer: syz [ 114.058617][ T193] usb 1-1: SerialNumber: syz [ 114.070426][ T10] usb usb4-port1: unable to enumerate USB device [ 114.274757][ T193] snd-ua101 1-1:1.1: invalid format type [ 114.275012][ T193] snd-ua101 1-1:1.0: invalid num_altsetting [ 114.300591][ T193] usb 1-1: USB disconnect, device number 13 [ 114.812433][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 114.812523][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 114.917571][ T10] usb 5-1: USB disconnect, device number 6 [ 115.074972][ T193] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.121424][ T6238] netlink: 'syz.4.110': attribute type 4 has an invalid length. [ 115.121440][ T6238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 115.122370][ T6238] FAULT_INJECTION: forcing a failure. [ 115.122370][ T6238] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 115.122399][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.4.110 Not tainted syzkaller #0 PREEMPT(full) [ 115.122417][ T6238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.122427][ T6238] Call Trace: [ 115.122433][ T6238] [ 115.122440][ T6238] dump_stack_lvl+0xe8/0x150 [ 115.122476][ T6238] should_fail_ex+0x3eb/0x540 [ 115.122502][ T6238] prepare_alloc_pages+0x21e/0x5f0 [ 115.122533][ T6238] __alloc_frozen_pages_noprof+0x17c/0x410 [ 115.122592][ T6238] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 115.122639][ T6238] ? policy_nodemask+0x2cc/0x8e0 [ 115.122662][ T6238] ? lock_acquire+0x115/0x350 [ 115.122690][ T6238] alloc_pages_mpol+0x21e/0x390 [ 115.122713][ T6238] alloc_pages_noprof+0xb1/0x2b0 [ 115.122733][ T6238] __pud_alloc+0x3a/0x460 [ 115.122750][ T6238] ? rcu_is_watching+0x16/0xb0 [ 115.122773][ T6238] walk_to_pmd+0x303/0x450 [ 115.122799][ T6238] get_locked_pte+0x27/0xd0 [ 115.122825][ T6238] map_ldt_struct+0x4e1/0xb50 [ 115.122848][ T6238] ? rcu_is_watching+0x16/0xb0 [ 115.122872][ T6238] ? __pfx_map_ldt_struct+0x10/0x10 [ 115.122892][ T6238] ? alloc_pages_noprof+0x140/0x2b0 [ 115.122914][ T6238] write_ldt+0x768/0x930 [ 115.122931][ T6238] ? __se_sys_futex+0x3a8/0x450 [ 115.122956][ T6238] ? __pfx_write_ldt+0x10/0x10 [ 115.122972][ T6238] ? ksys_write+0x242/0x270 [ 115.122997][ T6238] ? __pfx___se_sys_futex+0x10/0x10 [ 115.123019][ T6238] ? __pfx_ksys_write+0x10/0x10 [ 115.123048][ T6238] __se_sys_modify_ldt+0x6c/0x310 [ 115.123069][ T6238] do_syscall_64+0x166/0x520 [ 115.123091][ T6238] ? trace_irq_disable+0x3b/0x140 [ 115.123108][ T6238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.123124][ T6238] ? clear_bhb_loop+0x70/0xc0 [ 115.123144][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.123204][ T6238] RIP: 0033:0x7fea7319e559 [ 115.123224][ T6238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.123237][ T6238] RSP: 002b:00007fea713f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 115.123257][ T6238] RAX: ffffffffffffffda RBX: 00007fea73425fa0 RCX: 00007fea7319e559 [ 115.123269][ T6238] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000011 [ 115.123280][ T6238] RBP: 00007fea73235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 115.123289][ T6238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.123299][ T6238] R13: 00007fea73426038 R14: 00007fea73425fa0 R15: 00007ffc233d95b8 [ 115.123324][ T6238] [ 115.299316][ T193] usb 1-1: Using ep0 maxpacket: 8 [ 115.320735][ T193] usb 1-1: New USB device found: idVendor=041e, idProduct=30df, bcdDevice=0.40 [ 115.426012][ T193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.426039][ T193] usb 1-1: Product: syz [ 115.426055][ T193] usb 1-1: Manufacturer: syz [ 115.426070][ T193] usb 1-1: SerialNumber: syz [ 115.613109][ T6246] binder: BINDER_SET_CONTEXT_MGR already set [ 115.619060][ T6245] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 115.659993][ T6250] netlink: 'syz.3.115': attribute type 21 has an invalid length. [ 115.660171][ T6250] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 115.660435][ T6250] netlink: 'syz.3.115': attribute type 21 has an invalid length. [ 115.660509][ T6250] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 115.660740][ T6250] netlink: 'syz.3.115': attribute type 21 has an invalid length. [ 115.660814][ T6250] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 115.661038][ T6250] netlink: 'syz.3.115': attribute type 21 has an invalid length. [ 115.661116][ T6250] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 115.661393][ T6250] netlink: 'syz.3.115': attribute type 21 has an invalid length. [ 115.742453][ T193] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 115.753621][ T193] usb 1-1: unit 3 not found! [ 115.850419][ T193] usb 1-1: USB disconnect, device number 14 [ 115.948255][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.963109][ T6281] tipc: Started in network mode [ 116.963141][ T6281] tipc: Node identity ac1414aa, cluster identity 4711 [ 116.964169][ T6281] tipc: New replicast peer: 172.20.20.187 [ 116.990552][ T6281] tipc: Enabled bearer , priority 10 [ 117.636039][ T6298] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 117.668523][ T6298] kvm: pic: level sensitive irq not supported [ 118.078251][ T5613] tipc: Node number set to 2886997162 [ 118.227064][ T5713] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 118.359937][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.360517][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.360769][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.361020][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.362558][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.362813][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.363067][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.363311][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.363554][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.363801][ T6326] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.127'. [ 118.389185][ T5713] usb 5-1: New USB device found: idVendor=1044, idProduct=7001, bcdDevice=5.20 [ 118.407898][ T5713] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 118.407972][ T5713] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 118.408032][ T5713] usb 5-1: config 4 has no interface number 0 [ 118.408155][ T5713] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.449214][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.449304][ T5713] usb 5-1: Product: syz [ 118.449340][ T5713] usb 5-1: Manufacturer: syz [ 118.449368][ T5713] usb 5-1: SerialNumber: syz [ 118.941134][ T5713] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 118.973313][ T5713] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 118.974484][ T5713] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 118.974537][ T5713] usb 5-1: media controller created [ 119.013889][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.133086][ T5713] DVB: Unable to find symbol dib7000p_attach() [ 119.133109][ T5713] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 119.175430][ T6323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.285983][ T5713] rc_core: IR keymap rc-dib0700-rc5 not found [ 119.286002][ T5713] Registered IR keymap rc-empty [ 119.286952][ T5713] dvb-usb: could not initialize remote control. [ 119.286965][ T5713] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 119.400614][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.412830][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.444511][ T5713] usb 5-1: USB disconnect, device number 7 [ 119.511440][ T5713] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 120.073681][ T6357] libceph: osd_idle_ttl out of range [ 120.160044][ T6357] PM: suspend entry (deep) [ 120.256309][ T1182] Filesystems sync: 0.094 seconds [ 120.661273][ T6356] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 120.984969][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 121.066343][ T6357] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.066507][ T6357] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.105256][ T6357] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.127705][ T6357] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.127941][ T6357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.148511][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 121.154759][ T9] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 121.156574][ T6357] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.157151][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 121.157177][ T9] usb 5-1: config 0 has no interface number 0 [ 121.157218][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.157241][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 121.157267][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.157293][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.157336][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.247623][ T9] usb 5-1: config 0 descriptor?? [ 121.273773][ T6357] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.273890][ T6357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.275669][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 121.316928][ T6357] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.320072][ T6357] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.320968][ T6357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.362694][ T6357] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.471958][ T6380] sg_write: data in/out 942092/136 bytes for SCSI command 0x0-- guessing data in; [ 121.471958][ T6380] program syz.0.135 not setting count and/or reply_len properly [ 121.512886][ T5715] usb 5-1: USB disconnect, device number 8 [ 121.537093][ T5715] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 122.294765][ T6378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.334945][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.445111][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.484913][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 122.485707][ T9] usb 5-1: New USB device found: idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 122.486942][ T9] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 122.486967][ T9] usb 5-1: config 0 has no interface number 0 [ 122.487018][ T9] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 102, changing to 10 [ 122.487047][ T9] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid maxpacket 24624, setting to 1024 [ 122.489316][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.489342][ T9] usb 5-1: Product: syz [ 122.489359][ T9] usb 5-1: Manufacturer: syz [ 122.489374][ T9] usb 5-1: SerialNumber: syz [ 122.492524][ T9] usb 5-1: config 0 descriptor?? [ 122.578928][ T9] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 122.728764][ T9] usb 5-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 122.748287][ T9] usb 5-1: USB disconnect, device number 9 [ 122.771767][ T9] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 122.774332][ T9] cypress_m8 5-1:0.35: device disconnected [ 122.931103][ T6387] overlay: Unknown parameter 'defcontext' [ 123.166400][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.325941][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.325973][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.490932][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.491421][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.520746][ T6405] Bluetooth: MGMT ver 1.23 [ 123.715278][ T5713] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.865951][ T5713] usb 5-1: New USB device found: idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 123.867029][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.871029][ T5713] usb 5-1: config 0 descriptor?? [ 123.897545][ T193] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 123.899905][ T5713] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 124.034890][ T193] usb 1-1: device descriptor read/64, error -71 [ 124.090660][ T5713] usb 5-1: USB disconnect, device number 10 [ 124.285836][ T193] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 124.425044][ T193] usb 1-1: device descriptor read/64, error -71 [ 124.524878][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.545313][ T193] usb usb1-port1: attempt power cycle [ 124.859862][ T6419] gfs2: error -5 reading superblock [ 124.895126][ T193] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 124.916500][ T193] usb 1-1: device descriptor read/8, error -71 [ 125.156444][ T193] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 125.180220][ T193] usb 1-1: device descriptor read/8, error -71 [ 125.245112][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.285639][ T5713] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.286567][ T193] usb usb1-port1: unable to enumerate USB device [ 125.405193][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.405293][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.434920][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 125.437780][ T5713] usb 5-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 125.442196][ T5713] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 125.442329][ T5713] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 125.442412][ T5713] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.442499][ T5713] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 125.458685][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.458761][ T5713] usb 5-1: Product: syz [ 125.458803][ T5713] usb 5-1: Manufacturer: syz [ 125.458846][ T5713] usb 5-1: SerialNumber: syz [ 125.527277][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 125.546416][ T5713] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input12 [ 125.714898][ T5713] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 125.714920][ T5713] (id 0x00) [ 125.794894][ T5713] rc_core: IR keymap rc-imon-pad not found [ 125.794914][ T5713] Registered IR keymap rc-empty [ 125.795048][ T5713] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 125.795068][ T5713] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 125.918784][ T5713] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 125.922100][ T5713] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input13 [ 125.944123][ T5713] imon 5-1:155.0: iMON device (15c2:ffdc) on usb<5:11> initialized [ 126.128536][ T5713] usb 5-1: USB disconnect, device number 11 [ 126.614968][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.904895][ T5713] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.045125][ T193] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 127.063420][ T5713] usb 5-1: New USB device found: idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.074903][ T5713] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.074950][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.074977][ T5713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.075000][ T5713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.076436][ T5713] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.076461][ T5713] usb 5-1: Manufacturer: syz [ 127.080281][ T5713] usb 5-1: config 0 descriptor?? [ 127.194934][ T193] usb 1-1: Using ep0 maxpacket: 16 [ 127.195816][ T193] usb 1-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 127.197295][ T193] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.197327][ T193] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.200304][ T193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.200331][ T193] usb 1-1: Product: syz [ 127.200346][ T193] usb 1-1: Manufacturer: syz [ 127.200362][ T193] usb 1-1: SerialNumber: syz [ 127.203319][ T193] usb 1-1: config 0 descriptor?? [ 127.324986][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.418909][ T193] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 127.485039][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.485079][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.493210][ T5713] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 127.531062][ T5713] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 127.736229][ T193] rc_core: IR keymap rc-imon-pad not found [ 127.736249][ T193] Registered IR keymap rc-empty [ 127.736331][ T193] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 127.736378][ T193] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 127.781785][ T5713] usb 5-1: USB disconnect, device number 12 [ 127.828389][ T193] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 127.846795][ T193] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 127.871552][ T193] imon 1-1:0.0: iMON device (15c2:0045) on usb<1:19> initialized [ 128.043279][ T6435] imon:lcd_write: invalid payload size: 0 (expected 8) [ 128.089947][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.100799][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.115317][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 128.119256][ T193] usb 1-1: USB disconnect, device number 19 [ 128.749661][ T6447] __nla_validate_parse: 55 callbacks suppressed [ 128.749682][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 130.455978][ T6450] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 130.456009][ T6450] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 130.456040][ T6450] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 130.456060][ T6450] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 130.456090][ T6450] page dumped because: unmovable page [ 130.456118][ T6450] page_owner info is not present (never set?) [ 130.572756][ T6456] sit0: entered promiscuous mode [ 130.587513][ T6456] validate_nla: 122 callbacks suppressed [ 130.587534][ T6456] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 130.587550][ T6456] netlink: 1 bytes leftover after parsing attributes in process `syz.0.158'. [ 130.589875][ T6456] netlink: 822 bytes leftover after parsing attributes in process `syz.0.158'. [ 130.590990][ T6456] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 130.645907][ T193] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.796936][ T193] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.799312][ T193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.799365][ T193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.799389][ T193] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.804020][ T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.804048][ T193] usb 5-1: Product: syz [ 130.804065][ T193] usb 5-1: Manufacturer: syz [ 130.804081][ T193] usb 5-1: SerialNumber: syz [ 130.822834][ T193] usb 5-1: config 0 descriptor?? [ 131.174058][ T193] usb 5-1: USB disconnect, device number 13 [ 131.299082][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.678673][ T6464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.160'. [ 131.693184][ T6464] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 131.708813][ T6464] Error validating options; rc = [-22] [ 131.929117][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.933440][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.950270][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.951542][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.952635][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.122023][ T6475] FAULT_INJECTION: forcing a failure. [ 132.122023][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 132.122058][ T6475] CPU: 1 UID: 0 PID: 6475 Comm: syz.4.163 Not tainted syzkaller #0 PREEMPT(full) [ 132.122082][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.122095][ T6475] Call Trace: [ 132.122104][ T6475] [ 132.122113][ T6475] dump_stack_lvl+0xe8/0x150 [ 132.122149][ T6475] should_fail_ex+0x3eb/0x540 [ 132.122186][ T6475] should_failslab+0xa8/0x100 [ 132.122214][ T6475] ? do_getname+0x2e/0x250 [ 132.122237][ T6475] kmem_cache_alloc_noprof+0x9c/0x600 [ 132.122261][ T6475] ? do_futex+0x3e7/0x4e0 [ 132.122286][ T6475] ? do_getname+0x2e/0x250 [ 132.122313][ T6475] do_getname+0x2e/0x250 [ 132.122333][ T6475] ? getname_flags+0x11/0x20 [ 132.122356][ T6475] do_sys_openat2+0xce/0x200 [ 132.122379][ T6475] ? __se_sys_futex+0x3a8/0x450 [ 132.122402][ T6475] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.122429][ T6475] ? rcu_is_watching+0x16/0xb0 [ 132.122455][ T6475] __x64_sys_openat+0x138/0x170 [ 132.122482][ T6475] do_syscall_64+0x166/0x520 [ 132.122506][ T6475] ? trace_irq_disable+0x3b/0x140 [ 132.122525][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.122543][ T6475] ? clear_bhb_loop+0x70/0xc0 [ 132.122565][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.122583][ T6475] RIP: 0033:0x7fea7319e559 [ 132.122600][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.122614][ T6475] RSP: 002b:00007fea713d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.122633][ T6475] RAX: ffffffffffffffda RBX: 00007fea73426090 RCX: 00007fea7319e559 [ 132.122646][ T6475] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 132.122658][ T6475] RBP: 00007fea73235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 132.122668][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.122678][ T6475] R13: 00007fea73426128 R14: 00007fea73426090 R15: 00007ffc233d95b8 [ 132.122705][ T6475] [ 132.773490][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773576][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.969708][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.045832][ T5621] Bluetooth: hci2: command tx timeout [ 134.066926][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.100120][ T6469] rxe_eth0 speed is unknown, defaulting to 1000 [ 134.133415][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.155530][ T193] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 134.222425][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.305820][ T193] usb 1-1: Invalid ep0 maxpacket: 16 [ 134.434895][ T193] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 134.472803][ T12] bridge_slave_1: left allmulticast mode [ 134.472830][ T12] bridge_slave_1: left promiscuous mode [ 134.473058][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.499553][ T12] bridge_slave_0: left allmulticast mode [ 134.499581][ T12] bridge_slave_0: left promiscuous mode [ 134.499827][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.528237][ T12] dvmrp16: left allmulticast mode [ 134.584941][ T193] usb 1-1: Invalid ep0 maxpacket: 16 [ 134.587928][ T193] usb usb1-port1: attempt power cycle [ 134.694131][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.706986][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.714061][ T12] bond0 (unregistering): Released all slaves [ 134.925837][ T193] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 134.947432][ T193] usb 1-1: Invalid ep0 maxpacket: 16 [ 135.075340][ T193] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 135.095596][ T193] usb 1-1: Invalid ep0 maxpacket: 16 [ 135.095864][ T193] usb usb1-port1: unable to enumerate USB device [ 135.123838][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.123973][ T6469] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.124141][ T6469] bridge_slave_0: entered allmulticast mode [ 135.149019][ T6469] bridge_slave_0: entered promiscuous mode [ 135.158789][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.158969][ T6469] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.159119][ T6469] bridge_slave_1: entered allmulticast mode [ 135.160941][ T6469] bridge_slave_1: entered promiscuous mode [ 135.290404][ T6469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.313494][ T6469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.402441][ T6469] team0: Port device team_slave_0 added [ 135.421428][ T6469] team0: Port device team_slave_1 added [ 135.519567][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.519587][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.519612][ T6469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.525392][ T6469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.525411][ T6469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.525437][ T6469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.717727][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 135.734090][ T12] hsr_slave_0: left promiscuous mode [ 135.734639][ T12] hsr_slave_1: left promiscuous mode [ 135.748652][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.748671][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.749444][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.749469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.753876][ T12] veth1_macvtap: left promiscuous mode [ 135.753906][ T12] veth0_macvtap: left promiscuous mode [ 135.754045][ T12] veth1_vlan: left promiscuous mode [ 135.754092][ T12] veth0_vlan: left promiscuous mode [ 136.093714][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.103001][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.112446][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.113414][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.114069][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.129517][ T5621] Bluetooth: hci2: command tx timeout [ 136.175160][ T12] team0 (unregistering): Port device team_slave_1 removed [ 136.192767][ T12] team0 (unregistering): Port device team_slave_0 removed [ 136.362168][ T6469] hsr_slave_0: entered promiscuous mode [ 136.363021][ T6469] hsr_slave_1: entered promiscuous mode [ 136.363574][ T6469] debugfs: 'hsr0' already exists in 'hsr' [ 136.363595][ T6469] Cannot create hsr debugfs directory [ 136.672871][ T12] IPVS: stop unused estimator thread 0... [ 136.782991][ T6469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.801174][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.803519][ T6469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.826639][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.829686][ T6469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.852528][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.856323][ T6469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.879341][ T6469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.058169][ T6520] rxe_eth0 speed is unknown, defaulting to 1000 [ 137.144682][ T6469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.191621][ T6469] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.216114][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.216225][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.240814][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.240927][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.344918][ T5613] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 137.474915][ T5613] usb 1-1: device descriptor read/64, error -71 [ 137.512968][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 137.716229][ T5613] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 137.845307][ T5613] usb 1-1: device descriptor read/64, error -71 [ 137.957765][ T5613] usb usb1-port1: attempt power cycle [ 138.152644][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.154284][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.154444][ T6520] bridge_slave_0: entered allmulticast mode [ 138.162588][ T6520] bridge_slave_0: entered promiscuous mode [ 138.184084][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.184191][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.184358][ T6520] bridge_slave_1: entered allmulticast mode [ 138.194949][ T6520] bridge_slave_1: entered promiscuous mode [ 138.208191][ T5623] Bluetooth: hci4: command tx timeout [ 138.208868][ T5623] Bluetooth: hci2: command tx timeout [ 138.296522][ T5613] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 138.312184][ T6520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.324568][ T5613] usb 1-1: device descriptor read/8, error -71 [ 138.332238][ T6520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.376087][ T6469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.393248][ T6520] team0: Port device team_slave_0 added [ 138.408921][ T6520] team0: Port device team_slave_1 added [ 138.448811][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.448830][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.448857][ T6520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.451108][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.451121][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.451144][ T6520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.564976][ T5613] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 138.585973][ T5613] usb 1-1: device descriptor read/8, error -71 [ 138.618550][ T6520] hsr_slave_0: entered promiscuous mode [ 138.621208][ T6520] hsr_slave_1: entered promiscuous mode [ 138.623580][ T6520] debugfs: 'hsr0' already exists in 'hsr' [ 138.623602][ T6520] Cannot create hsr debugfs directory [ 138.679412][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 138.696322][ T5613] usb usb1-port1: unable to enumerate USB device [ 138.936135][ T6520] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.942046][ T6520] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 138.944150][ T6520] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.975021][ T6520] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.976114][ T6520] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 139.009266][ T6520] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 139.011874][ T6520] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 139.030607][ T6520] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 139.138657][ T6469] veth0_vlan: entered promiscuous mode [ 139.179437][ T6469] veth1_vlan: entered promiscuous mode [ 139.272429][ T6469] veth0_macvtap: entered promiscuous mode [ 139.289948][ T6469] veth1_macvtap: entered promiscuous mode [ 139.312671][ T6520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.364476][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.373514][ T6520] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.396549][ T6469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.408894][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.409184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.451175][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.451283][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.562239][ T1182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.562542][ T1182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.562949][ T1182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.681149][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.681171][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.687714][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.755319][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.755341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.819543][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 140.146019][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.286012][ T5621] Bluetooth: hci2: command tx timeout [ 140.286047][ T5621] Bluetooth: hci4: command tx timeout [ 140.312285][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 140.312341][ T10] usb 6-1: New USB device found: idVendor=2b53, idProduct=0024, bcdDevice=0.40 [ 140.313738][ T10] usb 6-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 140.313763][ T10] usb 6-1: config 136 has 3 interfaces, different from the descriptor's value: 14 [ 140.313830][ T10] usb 6-1: config 136 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 140.368356][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.368385][ T10] usb 6-1: Product: syz [ 140.368401][ T10] usb 6-1: Manufacturer: syz [ 140.368417][ T10] usb 6-1: SerialNumber: syz [ 140.439448][ T6626] rxe_eth0 speed is unknown, defaulting to 1000 [ 140.497213][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.631168][ T10] snd-usb-audio 6-1:136.0: probe with driver snd-usb-audio failed with error -22 [ 140.664158][ T10] snd-usb-audio 6-1:136.1: probe with driver snd-usb-audio failed with error -22 [ 140.868802][ T10] snd-usb-audio 6-1:136.2: probe with driver snd-usb-audio failed with error -22 [ 140.875111][ T10] usb 6-1: USB disconnect, device number 2 [ 140.965966][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:136.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.120056][ T6520] veth0_vlan: entered promiscuous mode [ 141.133752][ T6520] veth1_vlan: entered promiscuous mode [ 141.191134][ T6520] veth0_macvtap: entered promiscuous mode [ 141.207829][ T6520] veth1_macvtap: entered promiscuous mode [ 141.272834][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.370929][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.502047][ T63] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.502491][ T63] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.502530][ T63] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.502574][ T63] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.669321][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.669345][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.695261][ T946] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 141.763642][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.763659][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.871996][ T946] usb 6-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 141.873348][ T946] usb 6-1: config 127 has an invalid interface number: 57 but max is 0 [ 141.873374][ T946] usb 6-1: config 127 has no interface number 0 [ 141.873418][ T946] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 141.887413][ T946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.887488][ T946] usb 6-1: Product: syz [ 141.887509][ T946] usb 6-1: Manufacturer: syz [ 141.887545][ T946] usb 6-1: SerialNumber: syz [ 141.946669][ T6655] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 142.104736][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.174'. [ 142.247190][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.247670][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.312562][ T6671] netlink: 830 bytes leftover after parsing attributes in process `syz.0.177'. [ 142.365710][ T5623] Bluetooth: hci4: command tx timeout [ 142.462723][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.480693][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.481524][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.482122][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.580487][ T5715] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 142.737572][ T5715] usb 7-1: New USB device found: idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 142.738946][ T5715] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.743555][ T5715] usb 7-1: config 0 descriptor?? [ 142.785801][ T5715] pwc: Samsung MPC-C10 USB webcam detected. [ 142.788284][ T6653] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 142.991020][ T946] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 142.991645][ T946] asix 6-1:127.57: probe with driver asix failed with error -32 [ 143.029229][ T946] usb 6-1: USB disconnect, device number 3 [ 143.033781][ T5715] pwc: send_video_command error -71 [ 143.033797][ T5715] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 143.033899][ T5715] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 143.070888][ T5715] usb 7-1: USB disconnect, device number 2 [ 143.364950][ T32] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 143.515680][ T32] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 143.516698][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.516744][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 143.516770][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 143.516796][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 143.516818][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.517836][ T32] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.517860][ T32] usb 1-1: Manufacturer: syz [ 143.521696][ T32] usb 1-1: config 0 descriptor?? [ 143.736805][ T6691] netlink: 'syz.6.182': attribute type 12 has an invalid length. [ 143.736835][ T6691] netlink: 132 bytes leftover after parsing attributes in process `syz.6.182'. [ 143.915272][ T5715] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 143.971622][ T9] usb 1-1: USB disconnect, device number 28 [ 143.976752][ T946] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 144.065691][ T5715] usb 6-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=0.9c [ 144.066774][ T5715] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 144.066799][ T5715] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.068902][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.068927][ T5715] usb 6-1: Product: syz [ 144.068941][ T5715] usb 6-1: Manufacturer: syz [ 144.068956][ T5715] usb 6-1: SerialNumber: syz [ 144.071543][ T5715] usb 6-1: config 0 descriptor?? [ 144.102759][ T5715] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 144.102900][ T5715] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 144.147640][ T946] usb 7-1: not running at top speed; connect to a high speed hub [ 144.147679][ T946] usb 7-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 144.148899][ T946] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.148948][ T946] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.148971][ T946] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 144.151861][ T946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.151888][ T946] usb 7-1: Product: syz [ 144.151903][ T946] usb 7-1: Manufacturer: syz [ 144.151925][ T946] usb 7-1: SerialNumber: syz [ 144.201857][ T946] keyspan 7-1:1.0: Keyspan 4 port adapter converter detected [ 144.209377][ T946] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 144.209586][ T946] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 144.251946][ T946] keyspan 7-1:1.0: unsupported endpoint type 0 [ 144.261536][ T946] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 144.263027][ T946] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 144.290368][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.290734][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.292635][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.293022][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.293946][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.297284][ T946] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 144.340225][ T946] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 4 [ 144.356549][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.357415][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.358865][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.360822][ T946] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 144.398806][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.399223][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.401310][ T946] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 144.416258][ T946] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 144.446880][ T946] usb 7-1: USB disconnect, device number 3 [ 144.447118][ T5623] Bluetooth: hci4: command tx timeout [ 144.478677][ T5753] usb 6-1: USB disconnect, device number 4 [ 144.493092][ T946] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 144.520444][ T946] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 144.535667][ T946] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 144.541748][ T946] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 144.543521][ T946] keyspan 7-1:1.0: device disconnected [ 144.648702][ T6693] FAULT_INJECTION: forcing a failure. [ 144.648702][ T6693] name fail_futex, interval 1, probability 0, space 0, times 1 [ 144.648729][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT(full) [ 144.648747][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.648756][ T6693] Call Trace: [ 144.648763][ T6693] [ 144.648770][ T6693] dump_stack_lvl+0xe8/0x150 [ 144.648796][ T6693] should_fail_ex+0x3eb/0x540 [ 144.648823][ T6693] get_futex_key+0x1ab/0x1410 [ 144.648852][ T6693] ? __pfx_get_futex_key+0x10/0x10 [ 144.648878][ T6693] futex_wake+0x119/0x5f0 [ 144.648910][ T6693] ? __pfx_futex_wake+0x10/0x10 [ 144.648937][ T6693] ? fd_install+0x95/0x4e0 [ 144.648958][ T6693] ? fd_install+0x39e/0x4e0 [ 144.648987][ T6693] do_futex+0x458/0x4e0 [ 144.649013][ T6693] ? __pfx_do_futex+0x10/0x10 [ 144.649032][ T6693] ? lock_acquire+0x115/0x350 [ 144.649047][ T6693] ? __pfx_do_fcntl+0x10/0x10 [ 144.649067][ T6693] __se_sys_futex+0x3a8/0x450 [ 144.649104][ T6693] ? __fget_files+0x2a/0x420 [ 144.649127][ T6693] ? __pfx___se_sys_futex+0x10/0x10 [ 144.649154][ T6693] ? __x64_sys_futex+0x21/0xf0 [ 144.649183][ T6693] do_syscall_64+0x166/0x520 [ 144.649206][ T6693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.649221][ T6693] ? clear_bhb_loop+0x70/0xc0 [ 144.649241][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.649256][ T6693] RIP: 0033:0x7f6c9939e559 [ 144.649270][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.649283][ T6693] RSP: 002b:00007f6c9a2550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 144.649299][ T6693] RAX: ffffffffffffffda RBX: 00007f6c99625fa8 RCX: 00007f6c9939e559 [ 144.649311][ T6693] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6c99625fac [ 144.649321][ T6693] RBP: 00007f6c99625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 144.649331][ T6693] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 144.649340][ T6693] R13: 00007f6c99626038 R14: 00007ffc72891b70 R15: 00007ffc72891c58 [ 144.649364][ T6693] [ 145.384890][ T5753] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 145.447020][ T6728] FAULT_INJECTION: forcing a failure. [ 145.447020][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 145.447045][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 145.447063][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.447073][ T6728] Call Trace: [ 145.447079][ T6728] [ 145.447086][ T6728] dump_stack_lvl+0xe8/0x150 [ 145.447111][ T6728] should_fail_ex+0x3eb/0x540 [ 145.447138][ T6728] should_failslab+0xa8/0x100 [ 145.447156][ T6728] ? skb_clone+0x212/0x3a0 [ 145.447181][ T6728] kmem_cache_alloc_noprof+0x9c/0x600 [ 145.447213][ T6728] ? skb_clone+0x212/0x3a0 [ 145.447244][ T6728] skb_clone+0x212/0x3a0 [ 145.447266][ T6728] ? __tcp_transmit_skb+0x2a0/0x47c0 [ 145.447291][ T6728] __tcp_transmit_skb+0x37c/0x47c0 [ 145.447312][ T6728] ? __alloc_skb+0x27a/0x7a0 [ 145.447334][ T6728] ? skb_copy_bits+0x100/0x8e0 [ 145.447356][ T6728] ? __asan_memcpy+0x40/0x70 [ 145.447380][ T6728] ? __copy_skb_header+0xa3/0x4a0 [ 145.447405][ T6728] ? __asan_memcpy+0x40/0x70 [ 145.447429][ T6728] ? skb_release_data+0x2f7/0xa80 [ 145.447454][ T6728] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 145.447482][ T6728] ? tcp_send_synack+0x543/0xe80 [ 145.447510][ T6728] tcp_rcv_state_process+0x1773/0x48d0 [ 145.447546][ T6728] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 145.447569][ T6728] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 145.447608][ T6728] tcp_v4_do_rcv+0x9fd/0x13b0 [ 145.447624][ T6728] ? __local_bh_enable_ip+0xd6/0x140 [ 145.447673][ T6728] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 145.447694][ T6728] __release_sock+0x256/0x390 [ 145.447742][ T6728] release_sock+0x190/0x260 [ 145.447774][ T6728] __inet_stream_connect+0x8e7/0xf50 [ 145.447811][ T6728] ? __pfx___inet_stream_connect+0x10/0x10 [ 145.447833][ T6728] ? __pfx_woken_wake_function+0x10/0x10 [ 145.447857][ T6728] ? inet_stream_connect+0x51/0xa0 [ 145.447880][ T6728] ? __local_bh_enable_ip+0xd6/0x140 [ 145.447902][ T6728] inet_stream_connect+0x66/0xa0 [ 145.447925][ T6728] __sys_connect+0x316/0x450 [ 145.447948][ T6728] ? __pfx___sys_connect+0x10/0x10 [ 145.447977][ T6728] ? rcu_is_watching+0x16/0xb0 [ 145.448003][ T6728] __x64_sys_connect+0x7a/0x90 [ 145.448024][ T6728] do_syscall_64+0x166/0x520 [ 145.448047][ T6728] ? trace_irq_disable+0x3b/0x140 [ 145.448064][ T6728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.448081][ T6728] ? clear_bhb_loop+0x70/0xc0 [ 145.448101][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.448118][ T6728] RIP: 0033:0x7f6c9939e559 [ 145.448133][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.448146][ T6728] RSP: 002b:00007f6c9a255028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 145.448163][ T6728] RAX: ffffffffffffffda RBX: 00007f6c99625fa0 RCX: 00007f6c9939e559 [ 145.448175][ T6728] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000005 [ 145.448185][ T6728] RBP: 00007f6c99435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 145.448195][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.448209][ T6728] R13: 00007f6c99626038 R14: 00007f6c99625fa0 R15: 00007ffc72891c58 [ 145.448234][ T6728] [ 145.610463][ T5753] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.748320][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.748348][ T5753] usb 6-1: Product: syz [ 145.748364][ T5753] usb 6-1: Manufacturer: syz [ 145.748380][ T5753] usb 6-1: SerialNumber: syz [ 145.823299][ T5753] usb 6-1: config 0 descriptor?? [ 146.034297][ T5753] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 146.065024][ T946] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 146.215808][ T946] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 146.217251][ T946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.217305][ T946] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 146.217334][ T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 146.217363][ T946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 146.217388][ T946] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 146.218847][ T946] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.218874][ T946] usb 1-1: Manufacturer: syz [ 146.223584][ T946] usb 1-1: config 0 descriptor?? [ 146.535336][ T946] usb 1-1: USB disconnect, device number 29 [ 146.538077][ T6741] netlink: 'syz.6.194': attribute type 3 has an invalid length. [ 146.538098][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.194'. [ 146.600093][ T5688] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0005/input/input16 [ 146.629654][ T5688] hid-generic 0005:FFFD057E:0305.0005: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 146.846257][ T5715] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 147.003433][ T5715] usb 7-1: unable to get BOS descriptor or descriptor too short [ 147.008054][ T5715] usb 7-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 147.008154][ T5715] usb 7-1: no configurations [ 147.008194][ T5715] usb 7-1: can't read configurations, error -22 [ 147.355241][ T5688] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 147.505876][ T5688] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 147.507291][ T5688] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.507337][ T5688] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.507383][ T5688] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.507406][ T5688] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 147.507430][ T5688] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.507460][ T5688] usb 1-1: config 1 interface 1 has no altsetting 0 [ 147.510083][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.510109][ T5688] usb 1-1: Product: syz [ 147.510125][ T5688] usb 1-1: Manufacturer: syz [ 147.510140][ T5688] usb 1-1: SerialNumber: syz [ 147.613289][ T5688] cdc_ncm 1-1:1.0: skipping garbage [ 147.613334][ T5688] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 147.613399][ T5688] cdc_ncm 1-1:1.0: bind() failure [ 147.635060][ T5753] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 147.640917][ T5753] usb 6-1: USB disconnect, device number 5 [ 147.964208][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.977967][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.980648][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.981308][ T193] usb 1-1: USB disconnect, device number 30 [ 147.983344][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.984179][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.145083][ T5715] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 148.274947][ T5715] usb 7-1: device descriptor read/64, error -71 [ 148.374882][ T5753] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.488609][ T6756] rxe_eth0 speed is unknown, defaulting to 1000 [ 148.517569][ T5715] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 148.535721][ T5753] usb 6-1: Using ep0 maxpacket: 32 [ 148.541858][ T5753] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.541896][ T5753] usb 6-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=37.6a [ 148.543639][ T5753] usb 6-1: config 8 has an invalid interface number: 131 but max is 0 [ 148.543666][ T5753] usb 6-1: config 8 has no interface number 0 [ 148.584408][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.584438][ T5753] usb 6-1: Product: syz [ 148.584455][ T5753] usb 6-1: Manufacturer: syz [ 148.584471][ T5753] usb 6-1: SerialNumber: syz [ 148.645265][ T5715] usb 7-1: device descriptor read/64, error -71 [ 148.742013][ T6771] netlink: 495 bytes leftover after parsing attributes in process `syz.0.202'. [ 148.757116][ T5715] usb usb7-port1: attempt power cycle [ 148.844156][ T5753] usb_ehset_test 6-1:8.131: probe with driver usb_ehset_test failed with error -32 [ 148.859533][ T5753] usb 6-1: USB disconnect, device number 6 [ 149.096873][ T5715] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 149.115566][ T5715] usb 7-1: device descriptor read/8, error -71 [ 149.162654][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.162786][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.162939][ T6756] bridge_slave_0: entered allmulticast mode [ 149.164137][ T6756] bridge_slave_0: entered promiscuous mode [ 149.178961][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.179274][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.179609][ T6756] bridge_slave_1: entered allmulticast mode [ 149.181662][ T6756] bridge_slave_1: entered promiscuous mode [ 149.220200][ T193] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 149.257464][ T6756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.261027][ T6756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.299890][ T6756] team0: Port device team_slave_0 added [ 149.302225][ T6756] team0: Port device team_slave_1 added [ 149.337945][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.337966][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.337995][ T6756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.339412][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.339426][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.339452][ T6756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.379060][ T5715] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 149.392589][ T193] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 149.403748][ T193] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.403916][ T193] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 149.404114][ T193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 149.404187][ T193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 149.404249][ T193] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.415296][ T193] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.415372][ T193] usb 1-1: Manufacturer: syz [ 149.457099][ T193] usb 1-1: config 0 descriptor?? [ 149.491450][ T5715] usb 7-1: device descriptor read/8, error -71 [ 149.572271][ T6756] hsr_slave_0: entered promiscuous mode [ 149.573451][ T6756] hsr_slave_1: entered promiscuous mode [ 149.574355][ T6756] debugfs: 'hsr0' already exists in 'hsr' [ 149.574386][ T6756] Cannot create hsr debugfs directory [ 149.601691][ T5715] usb usb7-port1: unable to enumerate USB device [ 149.675614][ T193] usb 1-1: USB disconnect, device number 31 [ 149.749470][ T6783] rxe_eth0 speed is unknown, defaulting to 1000 [ 149.868282][ T6756] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 149.874269][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.897066][ T6756] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 149.914237][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.922895][ T6756] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 149.937695][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.941200][ T6756] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 149.962509][ T6756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.048024][ T5621] Bluetooth: hci5: command tx timeout [ 150.137134][ T6756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.161444][ T6756] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.173809][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.173884][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.200085][ T3369] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.200179][ T3369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.043181][ T33] kauditd_printk_skb: 104 callbacks suppressed [ 151.043201][ T33] audit: type=1326 audit(1792329011.594:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.211" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c9939e559 code=0x0 [ 151.104543][ T6820] FAULT_INJECTION: forcing a failure. [ 151.104543][ T6820] name failslab, interval 1, probability 0, space 0, times 0 [ 151.104578][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.6.212 Not tainted syzkaller #0 PREEMPT(full) [ 151.104606][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.104620][ T6820] Call Trace: [ 151.104630][ T6820] [ 151.104640][ T6820] dump_stack_lvl+0xe8/0x150 [ 151.104690][ T6820] should_fail_ex+0x3eb/0x540 [ 151.104732][ T6820] should_failslab+0xa8/0x100 [ 151.104757][ T6820] ? skb_clone+0x212/0x3a0 [ 151.104792][ T6820] kmem_cache_alloc_noprof+0x9c/0x600 [ 151.104826][ T6820] ? skb_clone+0x212/0x3a0 [ 151.104867][ T6820] skb_clone+0x212/0x3a0 [ 151.104900][ T6820] ? __tcp_transmit_skb+0x2a0/0x47c0 [ 151.104934][ T6820] __tcp_transmit_skb+0x37c/0x47c0 [ 151.104964][ T6820] ? __alloc_skb+0x27a/0x7a0 [ 151.104996][ T6820] ? skb_copy_bits+0x100/0x8e0 [ 151.105028][ T6820] ? __asan_memcpy+0x40/0x70 [ 151.105063][ T6820] ? __copy_skb_header+0xa3/0x4a0 [ 151.105098][ T6820] ? __asan_memcpy+0x40/0x70 [ 151.105141][ T6820] ? skb_release_data+0x2f7/0xa80 [ 151.105179][ T6820] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 151.105218][ T6820] ? tcp_send_synack+0x543/0xe80 [ 151.105258][ T6820] tcp_rcv_state_process+0x1773/0x48d0 [ 151.105307][ T6820] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 151.105340][ T6820] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 151.105397][ T6820] tcp_v4_do_rcv+0x9fd/0x13b0 [ 151.105421][ T6820] ? __local_bh_enable_ip+0xd6/0x140 [ 151.105451][ T6820] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 151.105472][ T6820] __release_sock+0x256/0x390 [ 151.105519][ T6820] release_sock+0x190/0x260 [ 151.105550][ T6820] __inet_stream_connect+0x8e7/0xf50 [ 151.105597][ T6820] ? __pfx___inet_stream_connect+0x10/0x10 [ 151.105628][ T6820] ? __pfx_woken_wake_function+0x10/0x10 [ 151.105664][ T6820] ? inet_stream_connect+0x51/0xa0 [ 151.105694][ T6820] ? __local_bh_enable_ip+0xd6/0x140 [ 151.105724][ T6820] inet_stream_connect+0x66/0xa0 [ 151.105758][ T6820] __sys_connect+0x316/0x450 [ 151.105791][ T6820] ? __pfx___sys_connect+0x10/0x10 [ 151.105833][ T6820] ? rcu_is_watching+0x16/0xb0 [ 151.105871][ T6820] __x64_sys_connect+0x7a/0x90 [ 151.105903][ T6820] do_syscall_64+0x166/0x520 [ 151.105933][ T6820] ? trace_irq_disable+0x3b/0x140 [ 151.105958][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.105982][ T6820] ? clear_bhb_loop+0x70/0xc0 [ 151.106011][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.106035][ T6820] RIP: 0033:0x7fc118f9e559 [ 151.106058][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.106077][ T6820] RSP: 002b:00007fc119dd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 151.106102][ T6820] RAX: ffffffffffffffda RBX: 00007fc119225fa0 RCX: 00007fc118f9e559 [ 151.106119][ T6820] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000005 [ 151.106142][ T6820] RBP: 00007fc119035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 151.106156][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.106170][ T6820] R13: 00007fc119226038 R14: 00007fc119225fa0 R15: 00007ffc69a74648 [ 151.106207][ T6820] [ 151.760719][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 151.762211][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 151.785523][ T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 151.808753][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 151.808916][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 151.830335][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 151.830460][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 151.851409][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 151.851529][ T6837] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 151.851565][ T6837] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 151.859109][ T5753] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 151.949401][ T6756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.963266][ T9] usb 7-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 151.982939][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.982982][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 151.983009][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 151.983037][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 151.983060][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 151.984516][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.984543][ T9] usb 7-1: Manufacturer: syz [ 151.995439][ T5713] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 152.045433][ T5753] usb 6-1: Using ep0 maxpacket: 32 [ 152.050033][ T5753] usb 6-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 152.058501][ T9] usb 7-1: config 0 descriptor?? [ 152.076043][ T5753] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 152.108229][ T5753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.108262][ T5753] usb 6-1: Product: syz [ 152.108278][ T5753] usb 6-1: Manufacturer: syz [ 152.108295][ T5753] usb 6-1: SerialNumber: syz [ 152.128135][ T5621] Bluetooth: hci5: command tx timeout [ 152.133240][ T5753] usb 6-1: config 0 descriptor?? [ 152.170613][ T5753] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 152.192058][ T5753] dvb-usb: bulk message failed: -22 (2/0) [ 152.228763][ T5753] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.230313][ T5753] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 152.230370][ T5753] usb 6-1: media controller created [ 152.244919][ T5713] usb 1-1: New USB device found: idVendor=0552, idProduct=5510, bcdDevice=0.00 [ 152.271952][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 152.271982][ T5713] usb 1-1: Product: syz [ 152.271999][ T5713] usb 1-1: Manufacturer: syz [ 152.330144][ T9] usb 7-1: USB disconnect, device number 10 [ 152.375195][ T5753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.453959][ T5753] usb 6-1: selecting invalid altsetting 7 [ 152.453983][ T5753] cxusb: set interface failed [ 152.453996][ T5753] dvb-usb: bulk message failed: -22 (1/0) [ 152.534473][ T5713] scsi host1: uas [ 152.569513][ T5753] DVB: Unable to find symbol lgdt330x_attach() [ 152.569532][ T5753] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 152.698687][ T5753] rc_core: IR keymap rc-dvico-portable not found [ 152.698708][ T5753] Registered IR keymap rc-empty [ 152.705867][ T5753] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 152.734159][ T6840] netlink: 'syz.0.215': attribute type 2 has an invalid length. [ 152.744263][ T5753] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input17 [ 152.774849][ T5753] dvb-usb: schedule remote query interval to 100 msecs. [ 152.774875][ T5753] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 152.808344][ T5753] usb 6-1: USB disconnect, device number 7 [ 152.881084][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.918883][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.049029][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.049522][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.099627][ T6868] netlink: 'syz.0.215': attribute type 2 has an invalid length. [ 153.127083][ T6840] : entered promiscuous mode [ 153.143507][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.144125][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.255918][ T5753] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 153.300470][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 153.364447][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 153.390421][ T6756] veth0_vlan: entered promiscuous mode [ 153.406196][ T6756] veth1_vlan: entered promiscuous mode [ 153.490726][ T6756] veth0_macvtap: entered promiscuous mode [ 153.513735][ T6756] veth1_macvtap: entered promiscuous mode [ 153.553116][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.602293][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.632300][ T5753] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 153.638631][ T1182] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.642499][ T63] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.642695][ T63] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.649759][ T63] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.802072][ T6893] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 153.802363][ T6893] CIFS: VFS: Malformed UNC in devname [ 153.874269][ T6823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.874304][ T6823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.956653][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.956676][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.153402][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 154.205190][ T5621] Bluetooth: hci5: command tx timeout [ 154.360992][ T946] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 154.446121][ T6864] ceph: No mds server is up or the cluster is laggy [ 154.506604][ T946] usb 8-1: Using ep0 maxpacket: 32 [ 154.509668][ T946] usb 8-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 154.512811][ T946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.512842][ T946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.512880][ T946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.566465][ T946] usb 8-1: config 0 descriptor?? [ 154.571803][ T946] hub 8-1:0.0: USB hub found [ 155.010666][ T946] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 155.202684][ T6929] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 155.202758][ T6929] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 155.202804][ T6929] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 155.250355][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.265649][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.272035][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.294976][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.326568][ T946] usbhid 8-1:0.0: can't add hid device: -71 [ 155.326681][ T946] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 155.351452][ T946] usb 8-1: USB disconnect, device number 2 [ 155.737602][ C0] usb 1-1: stat urb: status -71 [ 155.737968][ C0] usb 1-1: cmd cmplt err -71 [ 155.738058][ T5713] usb 1-1: USB disconnect, device number 32 [ 155.764755][ T5713] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 155.764856][ T5713] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 155.790679][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 155.844948][ T946] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 155.935076][ T10] usb 7-1: device descriptor read/64, error -71 [ 155.996870][ T946] usb 6-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 155.998246][ T946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.998299][ T946] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 155.998326][ T946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 155.998353][ T946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 155.998374][ T946] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.000245][ T946] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.000270][ T946] usb 6-1: Manufacturer: syz [ 156.003362][ T946] usb 6-1: config 0 descriptor?? [ 156.176145][ T10] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 156.287177][ T5621] Bluetooth: hci5: command tx timeout [ 156.305143][ T10] usb 7-1: device descriptor read/64, error -71 [ 156.333907][ T6959] fuse: Unknown parameter '0x0000000000000003' [ 156.427189][ T10] usb usb7-port1: attempt power cycle [ 156.674894][ T5805] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 156.766492][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 156.785678][ T10] usb 7-1: device descriptor read/8, error -71 [ 156.825567][ T5805] usb 1-1: New USB device found: idVendor=0d8c, idProduct=0014, bcdDevice=0.40 [ 156.826658][ T5805] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.826684][ T5805] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.828742][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.828766][ T5805] usb 1-1: Product: syz [ 156.828782][ T5805] usb 1-1: Manufacturer: syz [ 156.828797][ T5805] usb 1-1: SerialNumber: syz [ 157.024884][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 157.044457][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.045956][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.062441][ T10] usb 7-1: device descriptor read/8, error -71 [ 157.063026][ T6962] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.0.230:6962 [ 157.091156][ T5805] usb 1-1: 0:1 : does not exist [ 157.091213][ T5805] usb 1-1: BAAD GENERIC IO: no channels? [ 157.141671][ T5805] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 157.147934][ T5805] usb 1-1: USB disconnect, device number 33 [ 157.165379][ T10] usb usb7-port1: unable to enumerate USB device [ 157.186702][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.168511][ T1160] smbdirect: ib_dev[syz2] removed [ 158.545560][ T5805] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 158.568878][ T946] usb 6-1: USB disconnect, device number 8 [ 158.673775][ T6981] netlink: 68 bytes leftover after parsing attributes in process `syz.5.236'. [ 158.693053][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.693280][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.693475][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.693746][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.693928][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.694449][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.694637][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.702591][ T5805] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 158.727577][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.727658][ T5805] usb 7-1: Product: syz [ 158.727700][ T5805] usb 7-1: Manufacturer: syz [ 158.727751][ T5805] usb 7-1: SerialNumber: syz [ 158.751011][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.751532][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.752054][ T6985] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6469] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6985] [ 158.943822][ T6987] FAULT_INJECTION: forcing a failure. [ 158.943822][ T6987] name failslab, interval 1, probability 0, space 0, times 0 [ 158.943860][ T6987] CPU: 1 UID: 0 PID: 6987 Comm: syz.0.237 Not tainted syzkaller #0 PREEMPT(full) [ 158.943891][ T6987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.943906][ T6987] Call Trace: [ 158.943916][ T6987] [ 158.943925][ T6987] dump_stack_lvl+0xe8/0x150 [ 158.943962][ T6987] should_fail_ex+0x3eb/0x540 [ 158.944001][ T6987] should_failslab+0xa8/0x100 [ 158.944027][ T6987] ? skb_clone+0x212/0x3a0 [ 158.944071][ T6987] kmem_cache_alloc_noprof+0x9c/0x600 [ 158.944107][ T6987] ? skb_clone+0x212/0x3a0 [ 158.944149][ T6987] skb_clone+0x212/0x3a0 [ 158.944182][ T6987] ? __tcp_transmit_skb+0x2a0/0x47c0 [ 158.944217][ T6987] __tcp_transmit_skb+0x37c/0x47c0 [ 158.944246][ T6987] ? __alloc_skb+0x27a/0x7a0 [ 158.944279][ T6987] ? skb_copy_bits+0x100/0x8e0 [ 158.944312][ T6987] ? __asan_memcpy+0x40/0x70 [ 158.944347][ T6987] ? __copy_skb_header+0xa3/0x4a0 [ 158.944381][ T6987] ? __asan_memcpy+0x40/0x70 [ 158.944416][ T6987] ? skb_release_data+0x2f7/0xa80 [ 158.944453][ T6987] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 158.944494][ T6987] ? tcp_send_synack+0x543/0xe80 [ 158.944534][ T6987] tcp_rcv_state_process+0x1773/0x48d0 [ 158.944583][ T6987] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 158.944618][ T6987] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 158.944674][ T6987] tcp_v4_do_rcv+0x9fd/0x13b0 [ 158.944698][ T6987] ? __local_bh_enable_ip+0xd6/0x140 [ 158.944729][ T6987] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 158.944750][ T6987] __release_sock+0x256/0x390 [ 158.944796][ T6987] release_sock+0x190/0x260 [ 158.944826][ T6987] __inet_stream_connect+0x8e7/0xf50 [ 158.944875][ T6987] ? __pfx___inet_stream_connect+0x10/0x10 [ 158.944907][ T6987] ? __pfx_woken_wake_function+0x10/0x10 [ 158.944941][ T6987] ? inet_stream_connect+0x51/0xa0 [ 158.944974][ T6987] ? __local_bh_enable_ip+0xd6/0x140 [ 158.945005][ T6987] inet_stream_connect+0x66/0xa0 [ 158.945041][ T6987] __sys_connect+0x316/0x450 [ 158.945082][ T6987] ? __pfx___sys_connect+0x10/0x10 [ 158.945125][ T6987] ? rcu_is_watching+0x16/0xb0 [ 158.945164][ T6987] __x64_sys_connect+0x7a/0x90 [ 158.945196][ T6987] do_syscall_64+0x166/0x520 [ 158.945228][ T6987] ? trace_irq_disable+0x3b/0x140 [ 158.945253][ T6987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.945277][ T6987] ? clear_bhb_loop+0x70/0xc0 [ 158.945308][ T6987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.945331][ T6987] RIP: 0033:0x7f6c9939e559 [ 158.945353][ T6987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.945374][ T6987] RSP: 002b:00007f6c9a255028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 158.945401][ T6987] RAX: ffffffffffffffda RBX: 00007f6c99625fa0 RCX: 00007f6c9939e559 [ 158.945418][ T6987] RDX: 0000000000000010 RSI: 00002000000002c0 RDI: 0000000000000004 [ 158.945434][ T6987] RBP: 00007f6c99435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 158.945450][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.945464][ T6987] R13: 00007f6c99626038 R14: 00007f6c99625fa0 R15: 00007ffc72891c58 [ 158.945502][ T6987] [ 159.410132][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.5.239'. [ 159.483585][ T5805] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 159.483655][ T5805] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 159.822244][ T7002] netlink: 'syz.0.243': attribute type 46 has an invalid length. [ 159.956420][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 160.105759][ T10] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 160.108518][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.108538][ T10] usb 8-1: Product: syz [ 160.108549][ T10] usb 8-1: Manufacturer: syz [ 160.108560][ T10] usb 8-1: SerialNumber: syz [ 160.205049][ T5713] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 160.367069][ T5713] usb 1-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 160.368533][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.368587][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 160.368616][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 160.368645][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 160.368668][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.370318][ T5713] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.370344][ T5713] usb 1-1: Manufacturer: syz [ 160.373393][ T5713] usb 1-1: config 0 descriptor?? [ 160.523781][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 160.523851][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 161.100018][ T5805] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 161.100646][ T5805] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 161.101401][ T5805] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 161.101459][ T5805] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 161.118733][ T5805] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 161.169506][ T5805] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 161.188467][ T5805] usb 7-1: USB disconnect, device number 15 [ 161.304892][ T5713] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 161.456374][ T5713] usb 6-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=ff.de [ 161.457590][ T5713] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.457616][ T5713] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 161.459183][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 161.459209][ T5713] usb 6-1: Product: syz [ 161.459226][ T5713] usb 6-1: SerialNumber: syz [ 161.667661][ T5713] speedtch 6-1:1.0: speedtch_bind: wrong device class 6 [ 161.667694][ T5713] speedtch 6-1:1.0: usbatm_usb_probe: bind failed: -19! [ 161.686041][ T5713] usb 6-1: USB disconnect, device number 9 [ 161.955010][ T5753] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 162.026481][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 162.105509][ T5753] usb 7-1: New USB device found: idVendor=054c, idProduct=09cc, bcdDevice=0.00 [ 162.106585][ T5753] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.106609][ T5753] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.106629][ T5753] usb 7-1: config 0 interface 0 has no altsetting 0 [ 162.106654][ T5753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.109206][ T5753] usb 7-1: config 0 descriptor?? [ 162.333561][ T5753] playstation 0003:054C:09CC.0006: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.6-1/input0 [ 162.408506][ T5753] playstation 0003:054C:09CC.0006: Invalid byte count transferred, expected 16 got 8 [ 162.408538][ T5753] playstation 0003:054C:09CC.0006: Failed to retrieve DualShock4 pairing info: -22 [ 162.408642][ T5753] playstation 0003:054C:09CC.0006: Failed to get MAC address from DualShock4 [ 162.408660][ T5753] playstation 0003:054C:09CC.0006: Failed to create dualshock4. [ 162.457104][ T5753] playstation 0003:054C:09CC.0006: probe with driver playstation failed with error -22 [ 162.677210][ T5753] usb 7-1: USB disconnect, device number 16 [ 162.758214][ T33] audit: type=1800 audit(1792329023.314:117): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.249" name="file0" dev="overlay" ino=138 res=0 errno=-22 [ 162.990604][ T5753] usb 1-1: USB disconnect, device number 34 [ 163.080381][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 163.081001][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 163.081058][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 163.081803][ T10] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 163.132784][ T10] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 163.156823][ T10] usb 8-1: USB disconnect, device number 3 [ 163.315732][ T7038] sctp: [Deprecated]: syz.6.253 (pid 7038) Use of int in maxseg socket option. [ 163.315732][ T7038] Use struct sctp_assoc_value instead [ 163.501544][ T5342] usb 2-1: Failed to load image "edgeport/down.fw" err -110 [ 163.504386][ T5342] usb 2-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 163.504414][ T5342] usb 2-1: Falling back to sysfs fallback for: edgeport/boot.fw [ 163.505521][ T5753] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 163.546105][ T6357] Freezing user space processes [ 163.560097][ T6357] Freezing user space processes completed (elapsed 0.013 seconds) [ 163.561445][ T5342] ------------[ cut here ]------------ [ 163.561455][ T5342] ret [ 163.561465][ T5342] WARNING: drivers/base/firmware_loader/fallback.c:158 at firmware_fallback_sysfs+0x76d/0xa50, CPU#1: kworker/1:3/5342 [ 163.571390][ T6357] OOM killer disabled. [ 163.571403][ T6357] Freezing remaining freezable tasks [ 163.606110][ T5342] Modules linked in: [ 163.611097][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 163.620606][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.630883][ T5342] Workqueue: usb_hub_wq hub_event [ 163.636129][ T5342] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50 [ 163.642437][ T5342] Code: 76 fb e9 48 fc ff ff e8 d1 95 76 fb c6 05 f7 54 54 0b 01 48 c7 c7 c0 4c ba 8c e8 ae 4c d5 fa e9 70 fc ff ff e8 b4 95 76 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 4d ba 8c 4c 89 e2 e8 7e ff d9 fa e9 [ 163.662616][ T5342] RSP: 0018:ffffc9000357e860 EFLAGS: 00010283 [ 163.668787][ T5342] RAX: ffffffff865271ec RBX: dffffc0000000000 RCX: 0000000000100000 [ 163.678441][ T5342] RDX: ffffc90016f75000 RSI: 00000000000139b2 RDI: 00000000000139b3 [ 163.686101][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 163.693141][ T5342] RBP: 0000000000000001 R08: ffffffff91bd56bf R09: 1ffffffff237aad7 [ 163.701178][ T5342] R10: dffffc0000000000 R11: fffffbfff237aad8 R12: ffffffff8cefe1e0 [ 163.709212][ T5342] R13: 0000000000001770 R14: ffff88806982d0b0 R15: 00000000fffffff5 [ 163.717296][ T5342] FS: 0000000000000000(0000) GS:ffff8881234f7000(0000) knlGS:0000000000000000 [ 163.726478][ T5342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.733100][ T5342] CR2: 000055559378fa38 CR3: 000000002235a000 CR4: 00000000003526f0 [ 163.741221][ T5342] Call Trace: [ 163.744543][ T5342] [ 163.747546][ T5342] ? kfree+0x1c5/0x650 [ 163.751682][ T5342] _request_firmware+0x1021/0x1750 [ 163.756935][ T5342] ? __pfx__request_firmware+0x10/0x10 [ 163.762449][ T5342] ? kfree+0x1c5/0x650 [ 163.766639][ T5342] ? rom_read+0x19e/0x1c0 [ 163.771035][ T5342] request_firmware+0x36/0x50 [ 163.778698][ T5342] edge_startup+0x262b/0x6730 [ 163.783497][ T5342] ? __kmalloc_noprof+0x387/0x710 [ 163.790527][ T5342] ? __pfx_edge_startup+0x10/0x10 [ 163.795744][ T5342] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 163.801785][ T5342] usb_serial_probe+0x2523/0x2e50 [ 163.807012][ T5342] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 163.813426][ T5342] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 163.819961][ T5342] usb_probe_interface+0x751/0xe00 [ 163.825192][ T5342] ? __pfx_usb_probe_interface+0x10/0x10 [ 163.830876][ T5342] ? kernfs_create_link+0x1cd/0x240 [ 163.836192][ T5342] ? sysfs_do_create_link_sd+0xe0/0x110 [ 163.841780][ T5342] ? driver_sysfs_add+0x1fe/0x210 [ 163.846883][ T5342] ? __pfx_usb_probe_interface+0x10/0x10 [ 163.852582][ T5342] really_probe+0x254/0xae0 [ 163.857189][ T5342] __driver_probe_device+0x1e8/0x360 [ 163.862523][ T5342] driver_probe_device+0x4f/0x240 [ 163.867638][ T5342] __device_attach_driver+0x270/0x410 [ 163.873059][ T5342] bus_for_each_drv+0x258/0x2f0 [ 163.880604][ T5342] ? __pfx___device_attach_driver+0x10/0x10 [ 163.888244][ T5342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 163.893695][ T5342] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.899606][ T5342] __device_attach+0x2c4/0x450 [ 163.904421][ T5342] ? __pfx___device_attach+0x10/0x10 [ 163.909797][ T5342] ? do_raw_spin_unlock+0xf5/0x200 [ 163.915013][ T5342] ? _raw_spin_unlock+0x28/0x50 [ 163.919932][ T5342] device_initial_probe+0xa1/0xd0 [ 163.925046][ T5342] bus_probe_device+0x12a/0x220 [ 163.929952][ T5342] device_add+0x7d7/0xb80 [ 163.934318][ T5342] usb_set_configuration+0x1bb5/0x2260 [ 163.939895][ T5342] usb_generic_driver_probe+0x8d/0x150 [ 163.945556][ T5342] usb_probe_device+0x1c3/0x3b0 [ 163.950470][ T5342] ? __pfx_usb_probe_device+0x10/0x10 [ 163.955987][ T5342] really_probe+0x254/0xae0 [ 163.960560][ T5342] __driver_probe_device+0x1e8/0x360 [ 163.966128][ T5342] driver_probe_device+0x4f/0x240 [ 163.971216][ T5342] __device_attach_driver+0x270/0x410 [ 163.976725][ T5342] bus_for_each_drv+0x258/0x2f0 [ 163.984025][ T5342] ? __pfx___device_attach_driver+0x10/0x10 [ 163.991637][ T5342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 163.997132][ T5342] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.002994][ T5342] __device_attach+0x2c4/0x450 [ 164.007882][ T5342] ? __pfx___device_attach+0x10/0x10 [ 164.013220][ T5342] ? do_raw_spin_unlock+0xf5/0x200 [ 164.018422][ T5342] ? _raw_spin_unlock+0x28/0x50 [ 164.023324][ T5342] device_initial_probe+0xa1/0xd0 [ 164.028506][ T5342] bus_probe_device+0x12a/0x220 [ 164.033428][ T5342] device_add+0x7d7/0xb80 [ 164.037852][ T5342] usb_new_device+0x9aa/0x1690 [ 164.042667][ T5342] ? __pfx_usb_new_device+0x10/0x10 [ 164.048427][ T5342] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.053681][ T5342] hub_event+0x28e8/0x4d30 [ 164.058253][ T5342] ? __pfx_hub_event+0x10/0x10 [ 164.063072][ T5342] ? rcu_is_watching+0x16/0xb0 [ 164.067940][ T5342] ? process_scheduled_works+0x97a/0x1630 [ 164.073710][ T5342] process_scheduled_works+0xc3d/0x1630 [ 164.079402][ T5342] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.087937][ T5342] ? assign_work+0x3cf/0x5d0 [ 164.092577][ T5342] worker_thread+0xa47/0xfb0 [ 164.098814][ T5342] kthread+0x38b/0x480 [ 164.102953][ T5342] ? __pfx_worker_thread+0x10/0x10 [ 164.108179][ T5342] ? __pfx_kthread+0x10/0x10 [ 164.112828][ T5342] ret_from_fork+0x514/0xb70 [ 164.117541][ T5342] ? __pfx_ret_from_fork+0x10/0x10 [ 164.122720][ T5342] ? __switch_to+0xc78/0x1410 [ 164.131005][ T5342] ? __pfx_kthread+0x10/0x10 [ 164.136935][ T5342] ret_from_fork_asm+0x1a/0x30 [ 164.141785][ T5342] [ 164.144896][ T5342] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 164.152201][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 164.161592][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.171678][ T5342] Workqueue: usb_hub_wq hub_event [ 164.176753][ T5342] Call Trace: [ 164.180073][ T5342] [ 164.183029][ T5342] vpanic+0x26f/0x710 [ 164.187072][ T5342] panic+0xc5/0xd0 [ 164.190852][ T5342] ? __pfx_panic+0x10/0x10 [ 164.195334][ T5342] ? ret_from_fork_asm+0x1a/0x30 [ 164.200332][ T5342] __warn+0x315/0x4c0 [ 164.204363][ T5342] ? firmware_fallback_sysfs+0x76d/0xa50 [ 164.210040][ T5342] ? firmware_fallback_sysfs+0x76d/0xa50 [ 164.215713][ T5342] __report_bug+0x276/0x570 [ 164.220272][ T5342] ? firmware_fallback_sysfs+0x76d/0xa50 [ 164.225948][ T5342] ? __pfx___report_bug+0x10/0x10 [ 164.231026][ T5342] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 164.236466][ T5342] ? firmware_fallback_sysfs+0x76d/0xa50 [ 164.242165][ T5342] report_bug+0x16b/0x220 [ 164.246553][ T5342] ? firmware_fallback_sysfs+0x76d/0xa50 [ 164.252224][ T5342] ? firmware_fallback_sysfs+0x76f/0xa50 [ 164.257895][ T5342] handle_bug+0x9c/0x200 [ 164.262187][ T5342] exc_invalid_op+0x1a/0x50 [ 164.266743][ T5342] asm_exc_invalid_op+0x1a/0x20 [ 164.271627][ T5342] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50 [ 164.277913][ T5342] Code: 76 fb e9 48 fc ff ff e8 d1 95 76 fb c6 05 f7 54 54 0b 01 48 c7 c7 c0 4c ba 8c e8 ae 4c d5 fa e9 70 fc ff ff e8 b4 95 76 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 4d ba 8c 4c 89 e2 e8 7e ff d9 fa e9 [ 164.297564][ T5342] RSP: 0018:ffffc9000357e860 EFLAGS: 00010283 [ 164.303759][ T5342] RAX: ffffffff865271ec RBX: dffffc0000000000 RCX: 0000000000100000 [ 164.311766][ T5342] RDX: ffffc90016f75000 RSI: 00000000000139b2 RDI: 00000000000139b3 [ 164.319764][ T5342] RBP: 0000000000000001 R08: ffffffff91bd56bf R09: 1ffffffff237aad7 [ 164.327784][ T5342] R10: dffffc0000000000 R11: fffffbfff237aad8 R12: ffffffff8cefe1e0 [ 164.335790][ T5342] R13: 0000000000001770 R14: ffff88806982d0b0 R15: 00000000fffffff5 [ 164.343812][ T5342] ? firmware_fallback_sysfs+0x76c/0xa50 [ 164.349496][ T5342] ? kfree+0x1c5/0x650 [ 164.353643][ T5342] _request_firmware+0x1021/0x1750 [ 164.358826][ T5342] ? __pfx__request_firmware+0x10/0x10 [ 164.364329][ T5342] ? kfree+0x1c5/0x650 [ 164.368453][ T5342] ? rom_read+0x19e/0x1c0 [ 164.372829][ T5342] request_firmware+0x36/0x50 [ 164.377561][ T5342] edge_startup+0x262b/0x6730 [ 164.382315][ T5342] ? __kmalloc_noprof+0x387/0x710 [ 164.387389][ T5342] ? __pfx_edge_startup+0x10/0x10 [ 164.392475][ T5342] ? __pfx_edge_interrupt_callback+0x10/0x10 [ 164.398498][ T5342] usb_serial_probe+0x2523/0x2e50 [ 164.403572][ T5342] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 164.409962][ T5342] ? __pfx_edge_bulk_out_data_callback+0x10/0x10 [ 164.416344][ T5342] usb_probe_interface+0x751/0xe00 [ 164.421525][ T5342] ? __pfx_usb_probe_interface+0x10/0x10 [ 164.427196][ T5342] ? kernfs_create_link+0x1cd/0x240 [ 164.432440][ T5342] ? sysfs_do_create_link_sd+0xe0/0x110 [ 164.438031][ T5342] ? driver_sysfs_add+0x1fe/0x210 [ 164.443129][ T5342] ? __pfx_usb_probe_interface+0x10/0x10 [ 164.448808][ T5342] really_probe+0x254/0xae0 [ 164.453364][ T5342] __driver_probe_device+0x1e8/0x360 [ 164.458694][ T5342] driver_probe_device+0x4f/0x240 [ 164.463763][ T5342] __device_attach_driver+0x270/0x410 [ 164.469177][ T5342] bus_for_each_drv+0x258/0x2f0 [ 164.474083][ T5342] ? __pfx___device_attach_driver+0x10/0x10 [ 164.480023][ T5342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 164.485456][ T5342] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.491313][ T5342] __device_attach+0x2c4/0x450 [ 164.496120][ T5342] ? __pfx___device_attach+0x10/0x10 [ 164.501438][ T5342] ? do_raw_spin_unlock+0xf5/0x200 [ 164.506602][ T5342] ? _raw_spin_unlock+0x28/0x50 [ 164.511503][ T5342] device_initial_probe+0xa1/0xd0 [ 164.516567][ T5342] bus_probe_device+0x12a/0x220 [ 164.521490][ T5342] device_add+0x7d7/0xb80 [ 164.525859][ T5342] usb_set_configuration+0x1bb5/0x2260 [ 164.531379][ T5342] usb_generic_driver_probe+0x8d/0x150 [ 164.536872][ T5342] usb_probe_device+0x1c3/0x3b0 [ 164.541769][ T5342] ? __pfx_usb_probe_device+0x10/0x10 [ 164.547183][ T5342] really_probe+0x254/0xae0 [ 164.551748][ T5342] __driver_probe_device+0x1e8/0x360 [ 164.557077][ T5342] driver_probe_device+0x4f/0x240 [ 164.562153][ T5342] __device_attach_driver+0x270/0x410 [ 164.567572][ T5342] bus_for_each_drv+0x258/0x2f0 [ 164.572475][ T5342] ? __pfx___device_attach_driver+0x10/0x10 [ 164.578416][ T5342] ? __pfx_bus_for_each_drv+0x10/0x10 [ 164.583836][ T5342] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 164.589685][ T5342] __device_attach+0x2c4/0x450 [ 164.594489][ T5342] ? __pfx___device_attach+0x10/0x10 [ 164.599816][ T5342] ? do_raw_spin_unlock+0xf5/0x200 [ 164.604979][ T5342] ? _raw_spin_unlock+0x28/0x50 [ 164.609880][ T5342] device_initial_probe+0xa1/0xd0 [ 164.614961][ T5342] bus_probe_device+0x12a/0x220 [ 164.619875][ T5342] device_add+0x7d7/0xb80 [ 164.624251][ T5342] usb_new_device+0x9aa/0x1690 [ 164.629087][ T5342] ? __pfx_usb_new_device+0x10/0x10 [ 164.634344][ T5342] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.639581][ T5342] hub_event+0x28e8/0x4d30 [ 164.644104][ T5342] ? __pfx_hub_event+0x10/0x10 [ 164.648904][ T5342] ? rcu_is_watching+0x16/0xb0 [ 164.653717][ T5342] ? process_scheduled_works+0x97a/0x1630 [ 164.659471][ T5342] process_scheduled_works+0xc3d/0x1630 [ 164.665089][ T5342] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.671112][ T5342] ? assign_work+0x3cf/0x5d0 [ 164.675745][ T5342] worker_thread+0xa47/0xfb0 [ 164.680409][ T5342] kthread+0x38b/0x480 [ 164.684545][ T5342] ? __pfx_worker_thread+0x10/0x10 [ 164.689695][ T5342] ? __pfx_kthread+0x10/0x10 [ 164.694340][ T5342] ret_from_fork+0x514/0xb70 [ 164.698988][ T5342] ? __pfx_ret_from_fork+0x10/0x10 [ 164.704148][ T5342] ? __switch_to+0xc78/0x1410 [ 164.708863][ T5342] ? __pfx_kthread+0x10/0x10 [ 164.713490][ T5342] ret_from_fork_asm+0x1a/0x30 [ 164.718311][ T5342] [ 164.721950][ T5342] Kernel Offset: disabled [ 164.726302][ T5342] Rebooting in 86400 seconds..