last executing test programs: 24m38.627850293s ago: executing program 2 (id=193): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x9, r1, 0x16, r2}, 0x10) 24m38.585089463s ago: executing program 2 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="150327bd7000fdeddf25040000000c0001800800030003"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507df75aaf", 0x3a}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000dc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0xf4}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {0x0}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f865fab513453ed3d95bd82ab0bb24a32", 0xc7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a3826524167885f2542b1bef1198ab8", 0xc3}], 0x9, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000050) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) pread64(r0, &(0x7f0000000000)=""/119, 0x77, 0x1) 24m38.351477496s ago: executing program 2 (id=197): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e23, 0x120, 0x4e21, 0x6a50, 0x2, 0x0, 0x80, 0x5c}, {0x4ba, 0x4, 0x6, 0x9a, 0x8, 0x3, 0x8, 0x6}, {0x6, 0x874, 0xfaf, 0xfffffffffffffff7}, 0x14, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x4d6, 0xff}, 0x2, @in=@remote, 0x3504, 0x0, 0x0, 0x10, 0x7, 0x400, 0x14}}, 0xe8) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 24m36.909577928s ago: executing program 2 (id=212): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}], 0x30, 0x589c9bd8c1bcd27f}, 0x4010) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000019600)=@newtaction={0x14, 0x30, 0x800, 0x70bd2b, 0xbc}, 0x14}}, 0x40) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r1, 0x0, 0x0, 0x0) (async) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}], 0x30, 0x589c9bd8c1bcd27f}, 0x4010) (async) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000019600)=@newtaction={0x14, 0x30, 0x800, 0x70bd2b, 0xbc}, 0x14}}, 0x40) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) accept(r0, 0x0, 0x0) (async) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) (async) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) (async) 24m36.807477162s ago: executing program 2 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80000, 0xfffffffb) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000000a01080000000000000000070000000900010073797a30000000000c00044000000000000000044c00060098d560227defe8a9e949f23891071949edba7a5b59dc884427bff96fac71f2db1e12bcef82bf040f716d96376fac5d28236b656fa5044c44e4dd9a2b37a2fe55337e1029dd978eb454000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000440ffffff"], 0x17c}}, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x80000, 0xfffffffb) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000000a01080000000000000000070000000900010073797a30000000000c00044000000000000000044c00060098d560227defe8a9e949f23891071949edba7a5b59dc884427bff96fac71f2db1e12bcef82bf040f716d96376fac5d28236b656fa5044c44e4dd9a2b37a2fe55337e1029dd978eb454000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000440ffffff"], 0x17c}}, 0x0) (async) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) 24m33.763736696s ago: executing program 2 (id=222): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000000200)={0x40, 0xfff, 0x2, 0x8, 0x1ff, 0x80000000, 0x7, 0x7, 0x9}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x80, 0x5, 0x4, 0x800, 0xc90, {}, {0x0, 0x2, 0x7, 0x5, 0x7, 0x3, "5c0ea75f"}, 0xff, 0x4, {}, 0x6}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x80, 0x5, 0x4, 0x800, 0xc90, {}, {0x0, 0x2, 0x7, 0x5, 0x7, 0x3, "5c0ea75f"}, 0xff, 0x4, {}, 0x6, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c00e3835b8b4cd523368e067da9ae7f177bbc29915304d066ce06660f8ddcce7b64435d73230790af9e1bc444a1feb6a95fc0062a1e9ecfd487627e52580db47dbcbd550d463e909dba4671bd0240ec3ad3dc5fd6f149e3e43eb1fd372c74363febd16b6c7f10a9fd4754c6b905d2"]) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c00e3835b8b4cd523368e067da9ae7f177bbc29915304d066ce06660f8ddcce7b64435d73230790af9e1bc444a1feb6a95fc0062a1e9ecfd487627e52580db47dbcbd550d463e909dba4671bd0240ec3ad3dc5fd6f149e3e43eb1fd372c74363febd16b6c7f10a9fd4754c6b905d2"]) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 24m18.320022475s ago: executing program 32 (id=222): quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0xffffffffffffffff, &(0x7f0000000200)={0x40, 0xfff, 0x2, 0x8, 0x1ff, 0x80000000, 0x7, 0x7, 0x9}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x80, 0x5, 0x4, 0x800, 0xc90, {}, {0x0, 0x2, 0x7, 0x5, 0x7, 0x3, "5c0ea75f"}, 0xff, 0x4, {}, 0x6}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x80, 0x5, 0x4, 0x800, 0xc90, {}, {0x0, 0x2, 0x7, 0x5, 0x7, 0x3, "5c0ea75f"}, 0xff, 0x4, {}, 0x6, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c00e3835b8b4cd523368e067da9ae7f177bbc29915304d066ce06660f8ddcce7b64435d73230790af9e1bc444a1feb6a95fc0062a1e9ecfd487627e52580db47dbcbd550d463e909dba4671bd0240ec3ad3dc5fd6f149e3e43eb1fd372c74363febd16b6c7f10a9fd4754c6b905d2"]) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c00e3835b8b4cd523368e067da9ae7f177bbc29915304d066ce06660f8ddcce7b64435d73230790af9e1bc444a1feb6a95fc0062a1e9ecfd487627e52580db47dbcbd550d463e909dba4671bd0240ec3ad3dc5fd6f149e3e43eb1fd372c74363febd16b6c7f10a9fd4754c6b905d2"]) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) 20m13.001079063s ago: executing program 1 (id=1363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) 20m12.747225043s ago: executing program 1 (id=1366): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e25, @empty}}}, 0x108) 20m12.671165675s ago: executing program 1 (id=1367): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) 20m12.586856528s ago: executing program 1 (id=1368): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 20m12.467197849s ago: executing program 1 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000300)='./bus\x00', 0x1c12c2, 0x1df2a23c5997fa5f) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 20m8.613663017s ago: executing program 1 (id=1379): ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20m8.328896831s ago: executing program 33 (id=1379): ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m43.011604902s ago: executing program 3 (id=4946): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x338000, 0x1000}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) (async) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) (async) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x10000) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0xfffffffe, 0x3, 0xfffffffc, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000005, 0x6, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0xb2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0xc474, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x40, 0xaad, 0xfffd, 0x80000, 0x0, 0x8, 0x0, 0x5, 0x8, 0x10000001, 0xffffffff, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xd, 0x0, 0x0, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000b02000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000003c0)=""/192, 0x6000, 0x1000, 0x8, 0x3}, 0x20) (async) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x5) (async) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x714, 0x0, 0xfffffffffffffd25) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x200, &(0x7f000083c000/0x4000)=nil, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x34, r8, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8040) (async) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, r8, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000000100)=0x14) (async) socket$can_j1939(0x1d, 0x2, 0x7) 8m42.801986567s ago: executing program 3 (id=4947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '@'}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) (async) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000100)=""/164, 0x80000000}) (async) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 8m42.683515339s ago: executing program 3 (id=4949): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x18, 0x0, 0x1, 0x8, 0x6, @random="36999adca36a"}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 8m42.652429204s ago: executing program 3 (id=4951): r0 = socket(0x10, 0x3, 0x80000) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)=""/20, &(0x7f0000000200)=0x14) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020004000c00060000000264bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x1af) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28004, 0x80) lseek(r3, 0x7, 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0xd, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000680)="a884ce7cdc7a0415aa46ffa88bfdb29a588fad4dfebb1deaa3aa0243389f1e111f62acec35ecf3b30e84fc61bc5b15cc00948c86e067042cee9ef73be7fe8c3c12302162071e2119714ccc8c34443eacc46e1f0b081c0fea09", 0x59, 0x4000, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e000000208000740000000000c00058008000100ec2ef451"], 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000600)={0x1, r6}) 8m42.540074315s ago: executing program 3 (id=4952): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd614, 0x9, 0x6, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x54a) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) move_pages(0x0, 0x1, &(0x7f00000021c0)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000001180), &(0x7f0000002180), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000540)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000001a) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYRES8=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x48854}, 0x24000040) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/117, 0x75}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000400)=""/249, 0xf9}, {&(0x7f00000014c0)=""/200, 0xc8}, {&(0x7f00000011c0)=""/172, 0xac}, {&(0x7f00000036c0)=""/4132, 0x1024}], 0x8}, 0x12100) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0xfffffffffffffff7, 0x4, 0x8000000000000002, 0x80000001, 0xb3, 0x200, 0x4, 0xffffffffffffffff, 0x9, 0x100000000032, 0x9, 0x9], 0x0, 0x2a80}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 8m42.109153439s ago: executing program 3 (id=4954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) recvmmsg(r5, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x103, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b522e4edad0f7d7800000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff00000000000000000000000002000000000000000006000000000000af8542ea9bcf84940000000000"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) 8m41.901246429s ago: executing program 34 (id=4954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) recvmmsg(r5, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x103, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b522e4edad0f7d7800000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff00000000000000000000000002000000000000000006000000000000af8542ea9bcf84940000000000"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) 6.167946337s ago: executing program 0 (id=7120): r0 = socket$netlink(0x10, 0x3, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000002500)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fa", 0x25, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES64=r1, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="be0700"], 0x2c}], 0x1}, 0x4000081) 5.563731705s ago: executing program 6 (id=7127): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setresgid(0xee00, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) 5.494610177s ago: executing program 6 (id=7129): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = timerfd_create(0x8, 0x80800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000080)="1291b6000000", 0x0, 0x1fc, 0x20, 0xfffffeff, 0x0}) write$binfmt_format(r2, &(0x7f0000000000)='0\x00', 0x2) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000640)=""/117, &(0x7f0000000440)=0x75) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000002ac0), 0x0, 0x0) read$hidraw(r7, 0x0, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r9, 0x1, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7fff, r8, &(0x7f0000001080)="7c27dde97271944fc4857a7a672371bcd6a886938b5cba80e2f6a45e92fd760b0b87c84ae2c6560790fb2f70f48c54687262a1b62c46e3a30893d7167de2184b14bf886980661fb8fa", 0x49, 0x2, 0x0, 0x2}]) sendmmsg$alg(r6, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e8", 0x10}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4088, 0xff8}], 0x1}, 0x20002140) read$usbfs(0xffffffffffffffff, &(0x7f0000000280)=""/155, 0x9b) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x4, "caa0"}, @local=@item_4={0x3, 0x2, 0x0, "6921db97"}]}}, 0x0}, 0x0) 5.211896695s ago: executing program 0 (id=7131): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sendfile(r1, r0, &(0x7f0000000040)=0x80, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000027c0)="e5", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xff0b, 0x1, [0x18b]}, 0xa) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 5.194261245s ago: executing program 0 (id=7132): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) pipe(&(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000001780)=""/4095, 0xfff}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000000)=""/55, 0x37}], 0x5}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@uuid_on}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) pipe(&(0x7f0000000000)) (async) fcntl$setpipe(r0, 0x407, 0x7000000) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) (async) pipe(&(0x7f00000001c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) (async) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000001780)=""/4095, 0xfff}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000000)=""/55, 0x37}], 0x5}, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@uuid_on}]}) (async) 5.138999838s ago: executing program 0 (id=7133): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x32300, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="1201100100000010341a05f7000000000001090224000100005007090400020d0300070009210000000122290009058103ff"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @isdn={0x22, 0x2c, 0x4, 0x6, 0x4}, @xdp={0x2c, 0x0, r4, 0x3c}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)='veth0_macvtap\x00', 0x3ff8000, 0xff0000, 0x2}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) r6 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(r5, r6, 0x31, &(0x7f0000000240)={0x4, 0x0, 0xffffff66}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) socket(0x5, 0x3, 0x3) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r8, 0x0, &(0x7f00000002c0)='L', 0x1, 0xfffffffffffffff9}) r9 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x83, &(0x7f0000000140), 0x8) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x3, r8, 0x0, &(0x7f0000000540)="7fe061e4", 0x4, 0x7f}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r8, 0x0, &(0x7f0000000380)='s', 0x1, 0x136}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r2, 0x3ba0, &(0x7f0000000300)={0x48, 0xb, r2, 0x0, r8}) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x30, 0x7f, 0x2}, 0x7) syz_io_uring_setup(0x47a7, &(0x7f0000000480)={0x0, 0x919c, 0x20, 0xfffffffb, 0x25a}, 0x0, 0x0) 3.126362719s ago: executing program 4 (id=7145): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) ioperm(0xc614, 0x1, 0x7) prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0xfffffffffffffe69) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000e01000/0x3000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000c5a000/0x2000)=nil, 0x6) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) acct(&(0x7f0000000040)='./file0\x00') (async) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) (async) ioperm(0xc614, 0x1, 0x7) (async) prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0xfffffffffffffe69) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000e01000/0x3000)=nil) (async) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000c5a000/0x2000)=nil, 0x6) (async) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) (async) 3.093312101s ago: executing program 4 (id=7146): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x6, 0x9, 0x1, 0xeb, 0x1, 0x0}) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000380)={0x1a8, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x183, 0x23, 0x0, 0x1, [@generic="23aab5e45e5ec43774898b87b851189b005ea5d389d32fcdf968e2eac6", @typed={0x8, 0x8d, 0x0, 0x0, @pid=r2}, @nested={0x103, 0x7c, 0x0, 0x1, [@nested={0x4, 0x19}, @nested={0x4, 0x15a}, @nested={0x4, 0xf2}, @generic="c75a467dbc17868aee4ea8f420f76d8b4b16d5ad29a373cae5f9ca223e480c2afd224f2c26e819442dfc763ade1372ba01f093ab99ed8d03647b1d97e7677d92e463340c7d3fa460c9fa51c91d248bb46a20889b2a3cb32a4abe0cfaf945ebe3aea7afa9390ee3bbd853de29c2ab563597b079438d10c39b0de8b261703af7329044fc824749b578ab876c90bb876278f5acf54c52a2c4917a52d7eddb158b0cc065ac519e859d7604b67ad81c207f30c5afd821030d8369b169c600e6d8e9bb001c6f992196be3f19d08b51518c3d9cd72f30d1fb3a9a08c097f2199361f458eed2bac09c4440ed3b6b77b8c1709c", @nested={0x4, 0x14}]}, @generic="7646e413d4f7e353d5f69dc25b4bf1360d72e803a337dfb54d91a5e4183a34199cec1f8ccba4ef161d5baa7c31278b13f4b5b7462398c5c4fd74cf91da59c48da65b", @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@private0}]}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}]}, 0x1a8}], 0x1}, 0x20000000) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)="4d01000080000000002c00e50414090b009200ff", 0x14, 0x40080, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0xc, 0x6, @random="645bcc77540e"}, 0x14) 3.023712958s ago: executing program 4 (id=7147): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setresgid(0xee00, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) 3.020327344s ago: executing program 4 (id=7148): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @null, @default, @rose, @netrom, @netrom, @rose, @rose]}, &(0x7f0000000080)=0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xc8, &(0x7f0000000100)=0x9, 0x4) timer_create(0x0, &(0x7f0000001240)={0x0, 0x17, 0x4, @thr={&(0x7f0000000140)="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", &(0x7f0000001140)="8c6a0caf1e82b6ca193ceb4a24196507e8b9f2483f11cfd16b71d9ccf8e3c9445bd2511848861393bf05096d8c6de88183bd5ec08a5dc6c7ba2a664d1fb9182fbe27cfba88e37b7e38a73a14296f2b35d361433a335de831d0521c240df8e7e35e34e2e9ef947336dbe2e122c96a92ce82dbb4de641c3f5c4eab8c1f28aa292e9a243bee9514b4782d92446b3af3f3df17d671e1e93837f3ed7d7e779d1a37bb4185a1a449aa2faf6eaeb137042dab4f98de795b5b8371f5d87f55f86f4e306a2637db460d545350815deea730fb"}}, &(0x7f0000001280)=0x0) r2 = getpgrp(0xffffffffffffffff) timer_create(0x6, &(0x7f00000012c0)={0x0, 0x3, 0x1, @tid=r2}, &(0x7f0000001300)=0x0) timer_getoverrun(r1) timer_getoverrun(r1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001340)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000001380)={@null, 0x3, 'pim6reg0\x00'}) timer_getoverrun(r3) clock_gettime(0x0, &(0x7f0000001480)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000014c0)={{0x77359400}, {r5, r6+60000000}}, &(0x7f0000001500)) syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r4) r7 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x32, &(0x7f0000001580)="ea926e9b4ed7e5d6f51574c695373e", 0xf) r8 = inotify_init() timer_create(0x5, &(0x7f00000015c0)={0x0, 0x16, 0x1, @tid=r2}, &(0x7f0000001600)=0x0) timer_settime(r9, 0x0, &(0x7f0000001640)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x58, r10, 0x5, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x79}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040004}, 0x40) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r4) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)={0x13c, r12, 0xb8ffdaaf49f78762, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99c0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb90656}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x157f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4ee0}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x90}, 0x804) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() mount$fuse(0x0, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), 0x40, &(0x7f0000001c00)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r14}, 0x2c, {'group_id', 0x3d, r16}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {}, {@allow_other}], [{@pcr={'pcr', 0x3d, 0x1d}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@obj_role={'obj_role', 0x3d, ')/P{:'}}, {@subj_type={'subj_type', 0x3d, 'L$&!^-v!+'}}]}}) getresgid(&(0x7f0000004080)=0x0, &(0x7f00000040c0), &(0x7f0000004100)) sendmsg$unix(r4, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000001d80)="77df5de5136bc62f90ede917b53d203e35ae65bf5c", 0x15}, {&(0x7f0000001dc0)="e8719e5667e4f3e6a3d404eb7322518b59f3c298192e734753a913cf77ddd6d52f76ee622a33955d7648d508a129077c4e5c7736152724c15aaf0002d800877c83ed38a1950c3b139ea741c6644b18d55f", 0x51}, {&(0x7f0000001e40)="9580764ddbb52d62ad7c4c7c0f65869b7544b76d2a5939e4b25ef4556fd7044b3c63b05c70e542fb4bb547aa0c10420c052218d67810c12a0e6acf0e3bddfbe1f00a20812dbc1dc21fc4c6e6aee8d6055c64adabf4b724d87d99fa7a51ed0e52ae7fca481410310ddff97d62b352a940138775fa4a2185af0610e910ca360211837451b7c9c6c2da7e4b294b87ea12d2df8142eb8e1fa970747b2b07ceb5abd060c6f69d9d491df4fe9635a3394d30f1910d50ce6fcbf2cd2aa5fc3d2c03c2d2f8671d4e8646dca8c440df2f675569b798b2eca1a5e7c48d0204c7855adb514d09391fa97e75285a04fdda3d4060669a3d3254c6a777b6c92d04748eab2509372add9d416efe3c0afe1fcaea4be83e44f210ada1354d85f77f1374ada101be9fbc865635e9e942d345c0e66ae23e72d0325e2d847b2c826f85c40f2f6da7c901bd4cc9fbaf36a60b60d867a070a18d99c99eace48d99a557e88c743f505d3b205d18fbad30f49c2719f4b21af93f2e0a78890f133d8e069e9cca91c6fb61ea30befbd12057ebb614b8759fb3a6236836b068f4e5b0e0389e379cdd864f24449a5a6663721ba89a57ca1af6c52d32b9fc91133b38afa014673fae3870fc86971d5e37db764b9c389436c4ea47ebb10d39dc58ec160b02451729b5405ca39f8a7dda9e3a7ac09f5807c3f5f70ce853bd7e9fae4f9689dc5a3bc5cb2d6b2a29781cd75d7089740d3713e968555d004a7b711b1dc4401672e9b02d50ab23dd0d8058736558004b481dfdd555e9a3239063e9d352e4cc7ebff1e4fd4c3c34c75a7588f8562087347c2e5b6f0d41921ca6485f0ef96067a2f0fc0a5779adc6023666221940eb879abafc53d4350884a4d6f8b065148626076ad84e850e4922f1fd8a6b6e29e680f97f895153e3749dd73d6eef52d7d24a311916c47f8784da91a1055841d1ea22a1cea35863fe828c6e2629a1fe0811582a3f8017f1c49447b23b85687c5b5b4f49e1adf461bc10ecc3a6c7aba5d3312698d14b3fa41fd5b47eeec290ae2e0fb5dccdddc3635301c847b5716afe1c89c8996a10cc83effdc6c294231d45964cede0a7d059d2fb6e66b95b1b0a29282bdf5467da61b9e5a68261c21d73d8396b4a86f31baef10d7f127947c4180b6007fde810d51f019ddb437f75de6c22f2fb6341a61af6e1d8897c952df4b3ba4c1dc7ffeb465c60e49bedb726dd723dab3bce65dffbfb2a2263f8af417a5833c6e120d51fb27b6648e2aa856376b537bb4a6f0f4a3d1e0e6c782b6064cdbdc99bae62ac7cee0f166212e244a13f2c3b1bd28180d725769ce628f47c1e3acef6edb577bb46268ce4d83ed3eaa94686bafab5424cc667990ca3de8e86e145fef28b6f99de4f7f49bef2830b4dadd685a777f488114fe603b544d37bd8e62573f8a213bf96156c146040d950ec8c4fccd0618fa47133c2dae779b52af87c91b43080cefb8df50e10070a6b6bed51797941059f777c8dfc1026a32c92336efcfacbc54f764ccc0a4563316922b104c49fb745dac79d40179914f9a9c4963df47e1b728885409ce2e0c10e43b4a50d49cb102ad592d436fe2fc5b5429b383297f98f01eb52414f8f284cd54640052f99eebe8bc72d69f21c87d150ec063ae84c49071b88c82f012e3b6b4aa13f85d6ecc613ea23e3dedbd85e1c58f42f888d004d259c8374717de27def4aad2a2ae241530ee1754f32b899fac1ed5ce2a9e25aab9b4020bcac2514eca755c6d08c104cb428d80c691968a1d22d32905a49bc9d295c79c125a22714668a391e641cde3e6644e3c5b48d3a6ecf13e3cd4776162d4ed5e2b9b9e4f14bb39e7bc068657ee40d108cd018dc3be96fcc18f62f11b4fd1e4c722b3749c7cca130fc58ab81f6feaa28da7b2c44298f6e9864fab1d8236ec2bb400d7432ad0d9b8912bf6c59ba5a3914685f692c10f6b5db3075fd10c01773f43c0a2af9af98b8156b37a35e55a67033fb4b72455dfd8035cbe7bf88ca48a44ec689b03e3f121e24ac936c7b19556f3b037fc96f49f70f13f5c7366d7a89a61231b223ce25383842b845ac5566ff3df8606be9546d790c9f52425c6ca53b751af0014a6fe4330043a498e14620989267e5b03007e94423592080273459ce164fd63bb8e50777b8344014d4fc88e8d9442efa42fdc79eb14db32d9b8357ad3553fa5a80fbb4c652a751b6b7f1bd9de8488b2406804b8a57577d0a4649ab7cd7998026ae675b84a762502344dce739a49641fb3d862fca81e503773191a66af74c3b9a1142b03eefaf71b5e63e27f03e244ae57ea8f487f4143e3cb7e8ea6e8bbae363ed5e3b21fdc0479b624e8939587993b486b7f5c0bf5b42fe6b115a4f71358272983e50a260b29fee99c34d69ffe9288e27f156d82617ce712aa96f9771e1c488bf665229b91e56a96c44b6469ad1e8c38759cd54fded84547ddeec608f3fe3b2ad39e495c5e2e693488c0593fa01e21e6b3d8b6c055030aad2ca9369a0adefaedf313525af6efa6006fd201fe10173b91994be669410296f9d61fcd50d75c8a36cc0df448efbfade587ec5aabb16c9498d3994ae87400434609a4c6938286948d02c953832ad1d4e96579660a4afa5e93f17082eb2daf2ab6d007910961d57669d659a9555bb0468940fd00cafda11f0284bb07f52d37cb92cfc6c75c620de04ca70f4a72670d5a7a236cdf77f188afb402847abee16b776ad174ca886cba4cbfd4e8397f0bbb3ed7f621004784cb0aeb6c2cdbe3ac5ac51c6bd32102540f79dc0d4fff16239d63acae404a9acd9412db5d05c0805e99354b92d5b2a3ad7db12bc36f28569682527b2d3855d938a8a55f80a3664cb91caa61c13d4aae1c08a925caa4fa991b2e49c26eb2002a5a32db91e29294438a43530cd8087c73212b396883eccf6a94d56d5c404613ace6ee0b2f7d939ece4e13e574afdba3ac5ac1814b9716c95f22cd8e57b8033ded01ed8994fba70b891532d4482f026adaf7bea5ecf468ec162f2eec7a7f6e95255c5179a6364034ce208e89fecebbc0560a93592ecdc120327a48934abe99954be5144e58416fb4bfea37b1cf04eb2a491ff3e39639cadef0d3e39fc539551f03ec7c6e2512d18057cf433e57e25cc0751b4e7c2f16600bd6dac7a9390eeae703470257645b45cf306a1758e23b45290638f3d2f8bf1f15ac84d85f6a34367b4a3cd8b62c9b2f7b2e1ab6791390d23f79315fc239449ac97176b7f6469697dd3940a4eb283b28276c060230e46968392e4692cec1f7152e2628f4ea27484c622981ad63af05593c9e42da1d4b4b164f079b1218debdb6ffececa7486e45091b43ba7ca835144de72e622d6abb00ee9d38cc0ccb7cb84df1f268bb33441a31007ae233504f38dad23d28b628b29a4cbf6c81e68835a42a99147dde6411eb196781c29f3c2cb818b9a432bd9eacff752d27c27991511194e2df81bf2117487ae575437e87d506cca60c9ffe9a7fccda6e70d962e6347ecc26dc0805dc7f44f327be263a5100ea1e65390ea66a68ffc6474911374efe6395b8264db4818c4f0acd1a9ee8b7e58d39cdf707fc3330defecee7f489888b04d4ae76d9598e7f349129b4444c4b2e56107e75cc3bc46219c79a2138ca70e8683a4e5af979aedf24b402f6c2697e2bc7c7958ccf6e308d0d0ae01f9732d9371e3dbfd32095554a8390ff77a04071a9721403a8f9870919ab8fb7374c63a272da1ee6f24cabffd97d1118f76b979ebe0f5c917c45cbc81b5c96a421a61b9bd43bf8456702861268f8ade9965a9d1605d932e8d728535313fd8ec5b24353dac3438167dc61c11546a02d523f055c1e8cf81d2e081265f74019a345ed23e96b8c4df2d2d52b7c7919de620fcac253191c74a38a576a92049b2b054922517f691ed20a40df71a1e1190295122c5d5f8f905e2855a26e0f8396676943ed1e727ef1a06c2a91daa7b17c85fdf2ab5452aeab6c952c6dca07a170cbf5164502b06b618e61f7593d7574c35d00cae123903ecc2e377aa862525bea245dba3bfaa5523d3aed641a552ed864c378552ce84d6f6456895bca89a9b8f61cb30a20d77279c6344b957a50ffcdafb178c907dc378bedab018afcf47d806931a64f5f8a3a6995c33d72ca613fe31057beb025df09caa13d789688411fd15d8f47b584b8736bc3ccc92fd58e70c1981d08c2703efb88ff112aafca09dc7c26354d562e3bd0d8d6dafa1f96c345ba11812a2e381084389457102ffb8b443f03569dde81a15a88bd471dc80835dea3ffb482970bc18dac21278bae839d104ee09e3fcce4a5feb0913540f7e7518f16cc015cee875b965785be5668ba9075178e46e46edc1e3a971d7783613473a676e663f3b33c7f53b1557ff39b05ff97ee74999449dc28729e9261e66db86ce3deaae4f1784924b28adf66f8d46c16885fb763826059a670d86448f50035241818ed8736774e6d22a0cfe6b2b151b62561e7675b9a01c25d1ff417e96c7466a35ca51d349d01b90856315d58ba4238a1bce02b47ce4768a840e8defd4bc72da66a54ee7ebf55c53a1cede7d072296c879a6d27c4301ed3d17e631df82cfc6609a5f9374e34c1b5da8ee8236c6655628b6106a8254bd453bc58749c9c773281adbd37a14034291eb75061f03fe4e06b88e2917e7a44ea5fac50efb29f681044a256ff0df06ec230b48ba8ae63591a4d48df307f573a1270b712a578812b8437099ee5f046af312f27571bb101eacbd68841a1fbbd2604bbe862836fc0c30cb7e0b0e109abc0a73ba802ecbab788dbb7f07a361438de86cb93a43b3b919abf13d804d5a5662db4bc452c34f97562da4cc598e4e2ad7b7a0ed8842f21de0bfed72ae8bee8324ccd91f1294e2b8291ced6c29d80f2d77097a70b35811eb1730f61011670687064b694c81c97623ab7d560d69c7707f8af96d83f0041397d5ac3192a374be5e0dc0c466fcf197498e52169f662e79f769dcf0c2f604215a636d78545abc8c5585b1aee1e6d95ed2324c85252fb4c7f56c4fc9c8a8b2d2b201573613d210faa40fa73d5e8ab620a625961ecc0d89c3c641eaa93098b56a2bdfa1c50076a505a9d8f5a96b95b79b5988cb6d8661ce583cec8508bb7e4ae29891a109a7a87f62482c8e79258099a1f0e44602cf6c14f10c68066a5ec49483db29eda6adebc8b92f2c03a1d23295281944c3b343b664bca14324bff435293c86aa9e670c3bbfcd895d9faddb02e0422bce40b86b59f7253320e653020938b24994afeb2a56d72726b10a54a21eaac89f32d9997b0b879f2d8da0b377d3c559c627fdbed79b423bd8f370cb978fee703eadf00e88b119e977fe29e695653d702d11d5bc4c6ab702c3c8856c75250cdaadfe86f794235c70093afb3c32ef74c8338ea426ebca7e9bb3ebc8a36b97872fd9d49720afb9a48c3da6fde55445bb96a375ecf6b82ba0fda7125c48511e1bec309135ca7c10e0285a661e306ef2de8163ccb0e5495adbe35b7e7e717ec19e4ee1e6975998d1bf670696d2893f347bc29772e991283e5df3f8f98c12b2194e7ab86ccec233a0f3be2cd0530f13fc891e3ad288344c321568269455163565f13a5a336707eb265a7b9feaa95d340438dc4f5c99bec47a6a92e23e94a0d431d5e32ad6502ff2ceb71bb40f1ec48ee6d263e14a241619c965dd0208d865053b235cb0f4cbca1765e96c138f935d54da820b50fd9b63bd13a09c0d44d849f82a48f69949fe42e6247ae479cc42f520ce37f8f1def49609fb2ae47754a447", 0x1000}, {&(0x7f0000002e40)="9774b0e5b18fb23bfd25ac594c9370aa1f04860629c32378029afe6a63e146dc0525f58b8b5de7a5986783031f3f564075509e0a8a24389c36ad0c1400164751b0b3af51d615fd21d14faa48471a3093504f381daa2ba8cc6476aed43013f65521e82e90b59eb1022334e2a2bdab68837a5a5932ce39d9a69d972179bfa4cb98e2a606400f951b8a5155ab9d10947f4889cbfb3d0faf6b89a3a72e64cfdecda629c0955e692bd86c77fae9a8f36468b5b10d187cfd1bbb87e747b7b0f0f6240eeca8a4fd67cd7e85062026c8cd9b2f78aa074e5bd705d73373cab33d6f5f341caeda91b607bdb539d4bdf397db5330dc918a49342998bd4ba1968321e514ca96d62acb7770a2909b577118071c1b82552dbe726ebd4cd1ee13f19678f0db81e0e8cdf5958edbdd0df001c3e400c81eb60916fbb2d8f615e96960ecf078444b31ed74d6969eae81a8a571a84847f08b10843f57d63da09399d5bd184db3dea15f6d24e658cc64cf35090a73932976cf8cf896d42549e13fafa936912bf4dbc655b40c8f24aede19010003b552e8b2824cfcaf56ec8a6971fee5d0d41d1bd132cd29706255d5e16fd2903a79b8a3035a8f3e9ba92686a788cc647087fb5b0cb3e26d1edbdbb09e0e79b3b89bc6c4ec7f4249bf30d84a99e3e6ac9b763dfe328c69d3dd6e5646fe5f52d35e7311717498106b0b734f7a8128471b1251946b0d28140767da7827f750d900b0b547afcbe62d78214fe2913a076e9e60497d0d573ede06218a3c8622363e02a384f3cdca5e8d31e6685952a27b791a34da0ddd2a11144f53153d98fc70f96335a3e211477c4323cb696d9f9ad86520fa16f0054356228434250965efdc91bf821664e02488c164f32b0f1bf0dcd2cf0875d7746f52d4b2ed2260823086d8162d39b16a4b1c3ca553161a49e67b50ae0d18b56930033300ac012c01888b434d8f191b374c65831c628d0d817dadd3493e0eaacc99587c776c2b5fc538aaab01471344a7c4902e3cc751aa148944ab10d5315a6b908562e850ff3f6e6523353c583886d27e7b1634cf1a7e05b18703fa01c242ef3e1bc1d1006adc7b53eea04205bb45f9d4c2da2220e4d793e37e3820b861a53ed3dad2d61c1fb6af0fbf0e8fc42916183cd0e8e5557c61415e56aa08b5e1f45301e70c67c29c701607dc4f370ecbb5600d07a29f99883ed656481190e75789f6dbdd526eee43d90f303530d73802320c889883e1f6a3e25637def08256fa07406104718e5988baebf8fdccd492ed759f93265cebad9ffb569719ef39031eb1f5b67c0ab07ce9b4c8ca8f20c257555fa5f440887257823ecd9522600065ddcdf9d9abd2a703ba5a7151b2b7debdd138209b2650134c92744004e754e1937208206d19443accecff882e8b45afc5271a0ceddc81123f3c8aa9df63080510755458054ca4879724f05f7484173d73ba66454ace595d7a27f18403205210c9001651adb730f8fdfb9476a15c32f0bb7f2692bd16249206f5694f92f66baa05022749a5a5a3c654abc260a1b129087bc65268ec125217db1117f13f4ef86289a337c389220e0a7911b035272f48c1452f0754dd095574bdd0d513179ed39020b60f8a4a679ea56b322a048c75e094074ac8d29eef3558f7b2da5c67721800aea0caa0b1a876b000ea38f8c7917c25dce52ff871f99fd619ea894fa130af1bd8475ba2fc16c4bc9760e72eaa26e1e317c9bdf1829a10c5d312d64a4e2382bf539445a87270d83e36ac15a5c7dcfe811b44dd533caabf9851e635e6047f3953c77b904a0f20dd2d136c3d123522b1981e2baca0bd88690715a4a56d0d48cd554c1d86ff9ec646c689d9ec292faf219a240ea8dbe2dbf3f84aa8101ebb4d6d082215eab6171ffe74914663ce72c733c3e38cd4a5c5bcda72e1d3b074e7a4ab2bcbbeb69084aee35382b78d6adfdf91fd1dce9c0b8663442fee51a594b45f500123eb6dda2fb0e07293737fe5d3262d98ba37cf4c5a334df421cd74895a377d9575fb9dc9b9ab56f7f467c9e239b7aa26cc6400d8a853470f393fc18e40d822637d65dc0bd6c4688d19f3fab984d107e81d0b53e43b7ff8ba607ab71f0c9aa938dd1e0a1ff5f329694d8dfecf471af814adc934d8cecf5c86dd3103acbeb71501a0cc3a93d0475a3c8106af0076254191a82720848a979334af523ad23495231775ec25854c8f306cc26f16f720c4268a27843e2226eed99258fe1af1118391b50d2c2e16f42716c0e44a313ea901fc332f3c22d79298313eb01cf043317bcd433937e4d9f26a437296d13225f8ffe21fe53104005fdd0b5d7b733c908a32f05afe342049c2b65c422a83c847f0e7500b80497e2af15342e668fcc312dc3fd0329ae18174f2fdfaa19fe42d153a843ff95cc7648adb0cc331090c590831311933ca042889fbb65ec121e975e8bd899a689284baba152c38265eef0711575862289f2d959e4bda2564ec8a7e4395ed2fb082a5f0a80e2b4c211b28ea65425f1ba7b5786ae58145805d701529ca3e3bdcf2e7cfc5ac8d6f1d74260b55503026401ad904ca1c9b4f542b959780e4f916783ae133dda7205c54037f98b9641ba284791e6c2cb193ff2c0f3f6da3e1cd0f04acf9ea806bc0b4bf67a71a3035bde354c4aec08631f86fc645abed2e2565e214ec6fe5d8a2625b7158173c3e406dc5552e3d6c31a2c6a5a39437679c6b3faccc1568a60f0225b6afa6ea3aa183945ef072216aff9549efc7d42dccca36da0f03b4be6f874630cc6fdb74505915bae6af0ab81258e838bf6045e9967739e8c22e3702660faeed3fe64d13c67e2a470d8abd53ff5fe96bf59ecb9addd4da3784f11c606e79f0d298ce47316013d97b1383a4ac206faa5365224089e50a231cec86e80bb5501239c855b99c31a46aa3609e5957c4db9c71f5fd376720c4d922380e5e252de8059c9409b5a54cb78d7fa34e5658eb53d39b49c6a2907d68017f13b732435245fb80ef850a41431a6298e311a479347d50b21bf1416d561aa75aff74fdebcf4511c98ba47597e5c063ba88f98ad8946b253192c733c72d335f0493507cb37b8e5791a038fc935158adeed162d94297bc04293b7794f11b794a84909120ae4342922e7b2e77f01d0ffcb2a7533ceba34879b0743f06aca77551159c05943cbc13b8c6431cdbb82527026cd91c2d6c22b0d2644a8210d0db0e6e1198190a06d129503caddc07c85df0b01a08b78cfee1e26cedcd3a6e2c5f764e5eba0ddf6c11aa4bb617972c4de3ee3b54361f51ec343f4cc8978a76a3111a62f43ec831de127ff0c8a91b5b266e321c328460ae8cbbcc34e0c2f8f64024904c7aae53d1fc499362fee76be1cb7be2aa619bba6caaad38c640004cf5206b0e599d75d5f9743fe00bc0d08f184cc2a74bcd9a194d01b6ece1601eb73a0d18caba7933c2dabeb53c8c81869646cc81924e02890d6fe9df2c2256beaf786a363326bdf37d5cc4c2037db9e8a31eae2251372dd85540e035753a02f5c0d9651f4274dfc694c222c445aad522cd5643ebe7e2176acb43006d5fd95d6ad85443559067ae39ee85d37b24d58914f16d4b725ea2cd010a3b750667734004820ad39294cbc01dbc76fb862813395da8afbe857531340dc5c5f2c5f9e20a175c80c2c41cd6fd836d21b7fce22d8caee49d3d213b61707efb1c303dfbeae66775b639fb496aa124a1c11c06ab9ecdae092a5753fe0b5ffe5300f16cf3e7c82028f4c6d69eff96e883c622fbbf718f96bae927c4d5b1ba3bcf2dbe4fdb5100bd07f739119cc984dcf93f7aeabc89756ad35c87c4a54a5dc88a1bc61188d7d6472927c334821262b9bb50c22edbad11dbc8f1bb8598cb0ace98f6904213b598ab291175c9c9ab36a2d5410f26473fc6a66a58bf2682fdfdd9516c578ee9763d9c559483774aec7667e77ebe8fc5f07996666ba69c027f381013301d90804e1100a8e289c5bce3335f22b97eb79896ef6e7c7327e28e4672135aa8194400d9887864555733d78bce3aa20181057dbf2627f315a5eac689af1ab0d94468ce47770ebfb5784c904df9898902ee5a8d3898c36e3d1329ac637359b09fa3ff72996c071c358acea25cc66dddc0119bb7aafe5f4d75d7b411f235b6396ffa61478808190d5dfa4127c9ef836dad403d40a4fb1c182d666b2dcf4ee58a85fa461e9c4b6e601381181020f9b1998765597487be4129f4a2a6dfe3ad1d2665fdfaf51cae5ed1e95ccade3541e0c80c35714dd38528c376d31c15974650efd7f7fc07a85e7de177708ae0fc31c0b40f22931a6bfdd3e2221616c64d7583d7d05eebb11bae290ed1a2d9c3c072b56dd7f3200d3a36b51f5704dafceabc889f02eff4f29a8bb048e2926a576e0d07d67c6d5fefd5fc55cea7403f16eef6997da26fe0dfdb29fe7b366a365175c29ea08455693e575b697c0b27d7ee5d4f04c4ff0856cecd3d1acd41d0a7f46c8130cfac25cb12abf714b7dbbaffffd6698c32d0850b7ec2c25bdf103af48b0f76a2d8f16bdc8fd337edb64a7e36a39748eb9f9eea3b27270b71d25229afd6cff3efa6a78ba5e5eb4b5499b8677f24701e4cb18bf358413ca7e735f0ca40a676cc31e34960bd6b84b26847f9ae317b9871100e865c11c34d918d1ffc8770e699743f8f6ac1b3857d1231da693c16d43ec4bcdc7a21ab6bf0b326faa6579828280730d499ff3998c3f7771bca573ba5cd8e0aacfd1906d6a5e560c69421ce85338c92c9af293633b941f6080708146855475e732d0b57d62d7152ea511f8b2b8c56dd183c3234d15971906a22d36cb58986d5cebd14d6b75058044b05d0e4bb21bc71bd43b6a0edbe3bb98df5235fee677fdbd9e9f026a59b235b690e0e918bcd110b8db3d502caa4e9b57085fa007d3b2a267c1d593a2406e2f7a22f960f839d21d1ed8ef97774c0ea79aee67bd5134928a38e49a6fd3f51f3688a238609dbeaddfc0dc227ab03409bf55c0da5dc32db2c05a0deaba845749dbfc5423bd5fb6b1bdfbe4ec39db5bf6aaaba8568b53f347ffec48ab1e050d1ec73455b814d37cdef5e4341d396322a31dc1b9c4d367cd5452d96d293f4564621c96177943671e6ae5717e26f66da5ccda8d69ab13765cb847c69c0ab30df9137226e7891e9119915fb6e96c125c2d30054740067e5d8a10f2dae7627e4507f8380620cfb972c283ff3acc2dd2110ed05775b50dfcdce77aa5c74ad37a93a796e839b205f7bcdfb6e55584648e0fba1f0f103aa4d258081678eaefc94b4ddf4a365ecdabc4b763fd9caaad18698927f6f5e02ca06856cd3a2e5d0f6e5c845b1dab7bb7f8e7041957af850b415b9a83666aa43452385e0457710cc92cda56ec59b7b05960130eca87e05f60cbb3a7b7c61540a4478df6d4357bb7da889ebc4c0303dfce4353f84332325a54f3096cc9c26852baddba6bd561aa1e9379a15d2da1167cde5dcf4ac48062977f68fff7908af69c30fa910cee3f7bcdd74f332b46ce9eca55e0a98d1d90b14e62b7431aef2c3118caa8f6628d556f2758f412c1675fafafbcb99900edfd1e3c7adb0bfa848f79e4bb947a165bb32ecf1c6c9b3c6f54ecb0c7d1e65015b0a730b9de46a627c6f768ba435c7d01459e283649d1e0d6df3da43223579b1d75e80cae131650d4f850d87bf4772d5fc15a887bea73de8ea83bb63d3aec2a7294560298797d286806a68acdfde7cd8c17153e140daba54cb92d0b952d7ae53f25005c3a294984a577a0c01ff977e6c16cffa224f46df415d740483", 0x1000}, {&(0x7f0000003e40)="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", 0xfc}, {&(0x7f0000003f40)="0dbe45e17acca8e8d95eb0bc76ce8a26c1cf1f73e63b2f3e65af8667f65eb2e9fade02a527678405f6a54f6a48f5cc3798fc08ab1fba31b65162f1ead40575a3aeb84edf44b3c35c1a51d5", 0x4b}, {&(0x7f0000003fc0)}], 0x7, &(0x7f0000004440)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, r17}}}, @rights={{0x20, 0x1, 0x1, [r8, r7, r4, r13]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r13]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r8, r13, 0xffffffffffffffff, r0, r4, r13, r13]}}, @cred={{0x1c, 0x1, 0x2, {r2, r14, r16}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r2, r14, r15}}}], 0xf0, 0x20000004}, 0x20000081) 2.933095492s ago: executing program 4 (id=7149): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x6, 0x1000, 0x6e, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x4, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x22, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) close(r1) 2.859904371s ago: executing program 4 (id=7150): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4008444}, 0x4000000) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) syz_usb_connect$uac2(0x3, 0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="120150020000004082057d004000010203010902740003012b4006080b0201010320080904000000010120000924010080090900090904010000010220000904010101010220000b2401020003310b068d9a09050109000232000908250102300001000904020000010220000904"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2.187940116s ago: executing program 6 (id=7152): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xfffffffffffffff7, 0x400) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x141000, 0x0, 0x20}, 0x18) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000007c0)={{r1}, 0x0, 0x4, @inherit={0x90, &(0x7f0000000280)={0x0, 0x9, 0x5b9e, 0x2, {0x1c, 0x3, 0x2, 0x6000000000000000, 0x3}, [0x9, 0x2, 0x0, 0x5, 0x4, 0x6, 0xa3, 0x1, 0x80000000]}}, @name="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"}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000000)={&(0x7f0000000780)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285628, &(0x7f0000000080)={0x3, @pix_mp={0x70ce, 0x2, 0x30314142, 0x8, 0x14, [{0x3, 0x8}, {0x3, 0x32}, {0x3, 0x1}, {0xab6, 0xfbe}, {0x1, 0x10101}, {0x1, 0x5}, {0xc, 0x7}, {0x8, 0x48d9}], 0x8, 0x8, 0x8, 0x1, 0x3}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={r5}, &(0x7f0000000000)=0x8) 2.007696239s ago: executing program 6 (id=7153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xe, 0x14001) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x1000000}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, &(0x7f0000000240)={@my=0x0, 0x3}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80000) sendto$inet(r5, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r5], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.774649935s ago: executing program 0 (id=7154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f58}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x916}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000153}, 0x40140) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="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", 0xfd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x51) (async, rerun: 32) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd0, r7, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xbc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '<\'\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x67, 0x5, "be7e949017f6ab83276ea576c06ffb883c52953e16e234b34f8db1149246aed7f120ed51f6e30731753234d2aed6b8afec5e4b6163f98e848570b7b481001c1875b018ea0ac72da90917cf8178244e11e08578dbc70dcda5e09193ea2f87fc245aaef2"}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, r9, 0x408, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40005}, 0x20004800) (async) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) (async) ioctl$FIONCLEX(r0, 0x5450) setsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000c00)=0x6, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r2, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), r6) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000001000)={&(0x7f0000000d40), 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1f8, r11, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf43}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x4}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000001}, 0x2) (async, rerun: 64) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r12, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r13, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.774170753s ago: executing program 6 (id=7155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)=0x12) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0xc4e4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1.749801991s ago: executing program 5 (id=7156): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setresgid(0xee00, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) 1.637348758s ago: executing program 0 (id=7157): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast2, 0xa3c}, {0xa, 0xfffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x4}, 0x1001, {[0x6, 0x4, 0xfffffffc, 0xfffffaf9, 0x0, 0x0, 0x101]}}, 0x5c) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040f204211400000000000109022400010900000000000000010300020d0021fd770071"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000c40)={0x44, &(0x7f00000006c0)={0x40, 0x11, 0x1, "b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x82, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x8, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc01, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x5, 0x400000000008061f, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332d, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcd, 0x8, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) fcntl$setpipe(r1, 0x407, 0x3) r6 = socket(0x10, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="02030109021200012c0809044e0b00a0786c9900000e91207f8d8fdd94f5c87e6ec5b59fc8662d1fa333ee16bafe2ea10d1a8aa62aa73b01102a6c7735"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0) getdents64(r7, &(0x7f00000003c0)=""/202, 0xca) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000100)=0x9) 1.544306489s ago: executing program 5 (id=7158): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sockstat6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x7fa, {{0x2, 0x4e22, @broadcast}}}, 0x88) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/20, 0x14}], 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.447353272s ago: executing program 6 (id=7159): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = timerfd_create(0x8, 0x80800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x6, 0x1d, @scatter={0x0, 0x91ff, 0x0}, &(0x7f0000000080)="1291b6000000", 0x0, 0x1fc, 0x20, 0xfffffeff, 0x0}) write$binfmt_format(r2, &(0x7f0000000000)='0\x00', 0x2) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000640)=""/117, &(0x7f0000000440)=0x75) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000002ac0), 0x0, 0x0) read$hidraw(r7, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x1, &(0x7f0000000b80)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r6, &(0x7f000001ea00)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e8", 0x10}], 0x1, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c4}], 0x1, 0x804) recvmsg(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002c00)=""/4088, 0xff8}], 0x1}, 0x20002140) read$usbfs(0xffffffffffffffff, &(0x7f0000000280)=""/155, 0x9b) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x4, "caa0"}, @local=@item_4={0x3, 0x2, 0x0, "6921db97"}]}}, 0x0}, 0x0) 516.978837ms ago: executing program 5 (id=7160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x8000, 0x0, 0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000007c0)={'sit0\x00', 0x1}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000080)=ANY=[@ANYBLOB="01564eb0dfa6a067a37f12d65b163068171cd26eaa6d764f6f25ea5b564d9ccebe91e55ad8e348fcb9e58f134af2dbe92d776988611a82fb0a1efbedb7a349df5f892c829c12d901111239e7a75f3077b32565"]) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x4, [@local, @remote, @dev={0xac, 0x14, 0x14, 0xc}, @empty]}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000000)) 359.499461ms ago: executing program 5 (id=7161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000000c0)=@s={0x5, @generic}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x0, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24044000}, 0x20008000) 231.514818ms ago: executing program 5 (id=7162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a48000000090a010400000000000000000100001508000a40000000000900020073797a32000100000900010073797a30000000000800054000000022040009800800034000001e"], 0x70}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000012c0), 0xd, 0x8000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000001640)={0x5, [[0xa3, 0xffffffff, 0x0, 0x1ff, 0x7ff, 0x1, 0x0, 0x1f2], [0x9, 0x746e, 0x2, 0x2, 0x2, 0x800, 0x9, 0x200], [0x1f99, 0x8, 0x7f, 0x2, 0x6, 0x2, 0xffffffff, 0x81]], '\x00', [{0x3, 0x6, 0x0, 0x1}, {0x800, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x16, 0x0, 0x1, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x800, 0x8, 0x0, 0x0, 0x1}, {0x7ff, 0x7f, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x3, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x1}, {0x6, 0xb, 0x0, 0x0, 0x0, 0x1}, {0xcf, 0x4, 0x0, 0x1, 0x1}, {0x9, 0x5ba8, 0x0, 0x1, 0x1, 0x1}, {0xd94, 0xd2, 0x1, 0x0, 0x1}], '\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ptrace$setregs(0xd, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x7ff, 0xd, 0x800, 0x3, 0x9, 0x6, 0x0, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x5, 0x9, 0x9, 0x7, 0x8}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000240)={r4, 0x1000, "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"}, &(0x7f0000001280)=0x1008) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000001140)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0x8) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) 0s ago: executing program 5 (id=7163): r0 = creat(&(0x7f0000000000)='\x00', 0x5) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x9, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xb, 0x1a, '\'#(@}.\x00'}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="25024df6ae26"}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9c}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000280)=""/4096) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) read$FUSE(0xffffffffffffffff, &(0x7f00000045c0)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000300)='\x00', 0x1, 0x2002c144, &(0x7f00000001c0)={0xa, 0x2, 0x0, @loopback, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) kernel console output (not intermixed with test programs): he interface descriptor's value: 2 [ 1451.229300][ T807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1451.236124][ T5933] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1451.243765][ T807] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1451.254896][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.265575][ T807] usb 6-1: config 0 descriptor?? [ 1451.418234][ T5933] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1451.427118][ T5933] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1451.437595][ T5933] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1451.447432][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1451.458735][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1451.471641][ T5933] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1451.480850][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1451.489426][ T5933] usb 5-1: Product: syz [ 1451.493840][ T5933] usb 5-1: Manufacturer: syz [ 1451.506269][ T5933] cdc_wdm 5-1:1.0: skipping garbage [ 1451.511584][ T5933] cdc_wdm 5-1:1.0: skipping garbage [ 1451.520697][ T5933] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1451.526876][ T5933] cdc_wdm 5-1:1.0: Unknown control protocol [ 1451.721243][ T807] holtek 0003:1241:5015.006F: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 1451.734085][ T807] holtek 0003:1241:5015.006F: no inputs found [ 1451.929711][ T5926] usb 6-1: USB disconnect, device number 17 [ 1451.961192][ T5161] Bluetooth: hci4: command 0x0406 tx timeout [ 1452.690317][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6404'. [ 1452.727128][ T4382] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6404'. [ 1452.816302][ T5161] Bluetooth: hci5: command 0x0c1a tx timeout [ 1452.901682][ T5161] Bluetooth: hci2: command 0x0c1a tx timeout [ 1453.324277][ T4395] : renamed from bridge0 (while UP) [ 1453.628311][ T807] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1453.788512][ T807] usb 6-1: Using ep0 maxpacket: 16 [ 1453.795592][ T807] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1453.804410][ T807] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1453.817560][ T807] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1453.827402][ T807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.835697][ T807] usb 6-1: Product: syz [ 1453.839892][ T807] usb 6-1: Manufacturer: syz [ 1453.844907][ T807] usb 6-1: SerialNumber: syz [ 1454.075369][ T807] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1454.084171][ T807] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1454.184151][ T5926] usb 5-1: USB disconnect, device number 77 [ 1454.288866][ T4398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.298743][ T4398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.312473][ T4398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.324107][ T4398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.335182][ T807] usb 6-1: 2:1 : can't get High Capability descriptor [ 1454.430970][ T4435] fuse: Bad value for 'user_id' [ 1454.444483][ T4435] fuse: Bad value for 'user_id' [ 1454.559601][ T5892] usb 6-1: USB disconnect, device number 18 [ 1454.600900][ T5926] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1454.785022][ T5926] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1454.796753][ T5926] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.807304][ T5926] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1454.820188][ T5926] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1454.827087][ T5926] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1454.836265][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.849103][ T5926] usb 5-1: config 0 descriptor?? [ 1455.184346][ T4462] netlink: 348 bytes leftover after parsing attributes in process `syz.5.6410'. [ 1455.382820][ T5926] holtek 0003:1241:5015.0070: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.4-1/input0 [ 1455.403828][ T5926] holtek 0003:1241:5015.0070: no inputs found [ 1455.590687][ T5926] usb 5-1: USB disconnect, device number 78 [ 1455.732357][ T4492] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6412'. [ 1456.054048][ T5892] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1456.114978][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6414'. [ 1456.248412][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 1456.260699][ T5892] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1456.281365][ T5892] usb 6-1: config 4 has an invalid interface number: 112 but max is 0 [ 1456.299620][ T5892] usb 6-1: config 4 has no interface number 0 [ 1456.309775][ T5892] usb 6-1: config 4 interface 112 has no altsetting 0 [ 1456.320896][ T5892] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40 [ 1456.337145][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.347061][ T5892] usb 6-1: Product: syz [ 1456.351402][ T5892] usb 6-1: Manufacturer: syz [ 1456.356489][ T5892] usb 6-1: SerialNumber: syz [ 1456.596356][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.608089][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.628794][ T5892] pcwd_usb: This driver only supports 1 device [ 1456.646417][ T5892] usb 6-1: USB disconnect, device number 19 [ 1457.178064][ T5197] block nbd1: Possible stuck request ffff888028067000: control (read@0,1024B). Runtime 120 seconds [ 1457.189315][ T5197] block nbd1: Possible stuck request ffff8880280671c0: control (read@1024,1024B). Runtime 120 seconds [ 1457.201191][ T5197] block nbd1: Possible stuck request ffff888028067380: control (read@2048,1024B). Runtime 120 seconds [ 1457.218758][ T5197] block nbd1: Possible stuck request ffff888028067540: control (read@3072,1024B). Runtime 120 seconds [ 1457.830895][ T5933] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1458.000894][ T5933] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1458.013021][ T5933] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.022999][ T5933] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.036520][ T5933] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1458.043313][ T5933] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1458.053310][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.064351][ T5933] usb 6-1: config 0 descriptor?? [ 1458.503435][ T4568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.512384][ T4568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.523697][ T4568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.535338][ T4568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.566912][ T5933] usbhid 6-1:0.0: can't add hid device: -71 [ 1458.580705][ T5933] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1458.605218][ T5933] usb 6-1: USB disconnect, device number 20 [ 1458.658264][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6430'. [ 1459.174889][T15221] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1459.355966][T15221] usb 5-1: Using ep0 maxpacket: 8 [ 1459.363211][T15221] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1459.372589][T15221] usb 5-1: config 8 has an invalid interface number: 10 but max is 0 [ 1459.380913][T15221] usb 5-1: config 8 has no interface number 0 [ 1459.387180][T15221] usb 5-1: config 8 interface 10 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1459.398325][T15221] usb 5-1: config 8 interface 10 altsetting 9 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1459.411589][T15221] usb 5-1: config 8 interface 10 has no altsetting 0 [ 1459.420835][T15221] usb 5-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice= 7.52 [ 1459.430046][T15221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.438158][T15221] usb 5-1: Product: syz [ 1459.442451][T15221] usb 5-1: Manufacturer: syz [ 1459.447058][T15221] usb 5-1: SerialNumber: syz [ 1459.473489][ T5933] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1459.614010][ T5933] usb 6-1: device descriptor read/64, error -71 [ 1459.879664][ T5933] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1459.895292][T15221] sisusb 5-1:8.10: Invalid USB2VGA device [ 1459.901785][T15221] sisusb 5-1:8.10: probe with driver sisusb failed with error -22 [ 1459.917515][T15221] usb 5-1: USB disconnect, device number 80 [ 1460.029229][ T5933] usb 6-1: device descriptor read/64, error -71 [ 1460.147524][ T5933] usb usb6-port1: attempt power cycle [ 1460.493260][ T4664] netlink: 'syz.4.6437': attribute type 1 has an invalid length. [ 1460.501209][ T4664] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6437'. [ 1460.510175][ T5933] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1460.533367][ T5933] usb 6-1: device descriptor read/8, error -71 [ 1460.798608][ T5933] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1460.821696][ T5933] usb 6-1: device descriptor read/8, error -71 [ 1460.938462][ T5933] usb usb6-port1: unable to enumerate USB device [ 1461.001759][T13451] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 1461.161826][T13451] usb 5-1: device descriptor read/64, error -71 [ 1461.418294][T13451] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 1461.568129][T13451] usb 5-1: device descriptor read/64, error -71 [ 1461.697084][T13451] usb usb5-port1: attempt power cycle [ 1462.071155][T13451] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 1462.103137][T13451] usb 5-1: device descriptor read/8, error -71 [ 1462.358787][T13451] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 1462.392665][T13451] usb 5-1: device descriptor read/8, error -71 [ 1462.531456][T13451] usb usb5-port1: unable to enumerate USB device [ 1462.860969][T15221] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 1463.022960][T15221] usb 6-1: LPM exit latency is zeroed, disabling LPM. [ 1463.031107][T15221] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1463.042071][T15221] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1463.051875][T15221] usb 6-1: string descriptor 0 read error: -22 [ 1463.058550][T15221] usb 6-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.40 [ 1463.067897][T15221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.080100][ T4695] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1463.505020][T15221] usbhid 6-1:1.0: can't add hid device: -71 [ 1463.511349][T15221] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1463.522500][T15221] usb 6-1: USB disconnect, device number 25 [ 1463.595503][ T4715] could not open pipe file descriptor [ 1464.003188][ T4737] netlink: 'syz.4.6448': attribute type 17 has an invalid length. [ 1464.012162][ T4737] netlink: 'syz.4.6448': attribute type 16 has an invalid length. [ 1464.023829][ T4737] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6448'. [ 1464.878004][ T4735] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1464.884874][ T4735] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1464.891070][ T4735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1465.148882][ T807] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1465.251168][ T4767] netlink: 277 bytes leftover after parsing attributes in process `syz.5.6457'. [ 1465.353154][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1465.367338][ T807] usb 5-1: not running at top speed; connect to a high speed hub [ 1465.377658][ T807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.408003][ T807] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 1465.424882][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.427050][ T4780] sctp: [Deprecated]: syz.5.6459 (pid 4780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1465.427050][ T4780] Use struct sctp_sack_info instead [ 1465.433794][ T807] usb 5-1: Product: syz [ 1465.459773][ T4780] IPVS: length: 75 != 24 [ 1465.465163][ T807] usb 5-1: Manufacturer: syz [ 1465.472863][ T807] usb 5-1: SerialNumber: syz [ 1465.736472][ T807] usb 5-1: interface 3 not found [ 1465.760727][ T807] usb 5-1: USB disconnect, device number 85 [ 1465.778289][ T5944] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1465.939332][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 1465.946204][ T5944] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1465.954961][ T5944] usb 6-1: config 0 has no interface number 0 [ 1465.961316][ T5944] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.972731][ T5944] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.982616][ T5944] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1465.991685][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.002235][ T5944] usb 6-1: config 0 descriptor?? [ 1466.248380][ T5161] Bluetooth: hci4: command 0x0406 tx timeout [ 1466.547666][T13451] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1466.665529][ T5944] usbhid 6-1:0.4: can't add hid device: -71 [ 1466.673282][ T5944] usbhid 6-1:0.4: probe with driver usbhid failed with error -71 [ 1466.685072][ T5944] usb 6-1: USB disconnect, device number 26 [ 1466.710156][T13451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1466.722931][T13451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.732849][T13451] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1466.742121][T13451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.756788][T13451] usb 5-1: config 0 descriptor?? [ 1466.991436][ T4806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.001426][ T4806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.092700][ T5161] Bluetooth: hci2: command 0x0c1a tx timeout [ 1467.092734][T14493] Bluetooth: hci5: command 0x0c1a tx timeout [ 1467.249074][T13451] aquacomputer_d5next 0003:0C70:F0B6.0071: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 1467.446842][ T5944] usb 5-1: USB disconnect, device number 86 [ 1467.520195][ T807] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1467.701921][ T807] usb 6-1: Using ep0 maxpacket: 32 [ 1467.710636][ T807] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32 [ 1467.720860][ T807] usb 6-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1467.731031][ T807] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1467.739514][ T807] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1467.748705][ T807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.756933][ T807] usb 6-1: Product: syz [ 1467.761114][ T807] usb 6-1: Manufacturer: syz [ 1467.765781][ T807] usb 6-1: SerialNumber: syz [ 1467.773662][ T4825] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1467.781461][ T4825] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1468.017426][ T4825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.031655][ T4825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.059014][ T807] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1468.076573][ T807] usb 6-1: USB disconnect, device number 27 [ 1468.385647][T13451] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1468.432133][ T4870] netlink: 'syz.6.6465': attribute type 1 has an invalid length. [ 1468.442266][ T4870] netlink: 476 bytes leftover after parsing attributes in process `syz.6.6465'. [ 1468.452976][ T4870] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.6465'. [ 1468.553980][T13451] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1468.575719][T13451] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1468.589228][T13451] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1468.598493][T13451] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1468.610533][T13451] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1468.623799][T13451] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1468.654154][T13451] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1468.662226][T13451] usb 5-1: Product: syz [ 1468.680780][T13451] usb 5-1: Manufacturer: syz [ 1468.698178][T13451] cdc_wdm 5-1:1.0: skipping garbage [ 1468.711887][T13451] cdc_wdm 5-1:1.0: skipping garbage [ 1468.734241][T13451] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1468.744631][T13451] cdc_wdm 5-1:1.0: Unknown control protocol [ 1469.470549][ T4942] netlink: 'syz.5.6476': attribute type 2 has an invalid length. [ 1469.512787][ T4948] netlink: 'syz.6.6477': attribute type 2 has an invalid length. [ 1469.521808][ T4948] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.6477'. [ 1469.742781][T13451] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1469.881743][T13451] usb 6-1: device descriptor read/64, error -71 [ 1470.138105][T13451] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1470.298554][T13451] usb 6-1: device descriptor read/64, error -71 [ 1470.417111][T13451] usb usb6-port1: attempt power cycle [ 1470.790205][T13451] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1470.812645][T13451] usb 6-1: device descriptor read/8, error -71 [ 1471.099920][T13451] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1471.132633][T13451] usb 6-1: device descriptor read/8, error -71 [ 1471.250870][T13451] usb usb6-port1: unable to enumerate USB device [ 1471.321488][T13451] usb 5-1: USB disconnect, device number 87 [ 1472.755511][ T5018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6483'. [ 1472.765869][ T5018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6483'. [ 1472.849386][ T5025] 8021q: VLANs not supported on dvmrp0 [ 1472.999713][ T5035] netlink: 'syz.0.6487': attribute type 3 has an invalid length. [ 1473.010643][ T5036] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6486'. [ 1473.760792][T14493] Bluetooth: hci4: command 0x0406 tx timeout [ 1473.761543][ T4975] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1474.652437][ T4975] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1474.659498][ T4975] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1474.925475][ T807] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1475.087167][ T807] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1475.095934][ T807] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1475.106688][ T807] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1475.115929][ T807] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1475.127801][ T807] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1475.142370][ T807] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1475.152258][ T807] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1475.160303][ T807] usb 6-1: Product: syz [ 1475.164703][ T807] usb 6-1: Manufacturer: syz [ 1475.175223][ T807] cdc_wdm 6-1:1.0: skipping garbage [ 1475.180830][ T807] cdc_wdm 6-1:1.0: skipping garbage [ 1475.187975][ T807] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1475.194599][ T807] cdc_wdm 6-1:1.0: Unknown control protocol [ 1475.288935][ T5944] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1475.427724][ T5944] usb 5-1: device descriptor read/64, error -71 [ 1475.684238][ T5944] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 1475.823135][ T5944] usb 5-1: device descriptor read/64, error -71 [ 1475.940900][ T5944] usb usb5-port1: attempt power cycle [ 1475.983460][T14493] Bluetooth: hci5: command 0x0c1a tx timeout [ 1476.304045][ T5944] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 1476.337089][ T5944] usb 5-1: device descriptor read/8, error -71 [ 1476.401969][ T5095] ISOFS: Unable to identify CD-ROM format. [ 1476.603967][ T5944] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 1476.625511][ T5944] usb 5-1: device descriptor read/8, error -71 [ 1476.743162][ T5944] usb usb5-port1: unable to enumerate USB device [ 1476.838417][T14493] Bluetooth: hci2: command 0x0c1a tx timeout [ 1477.069259][ T5944] usb 6-1: USB disconnect, device number 32 [ 1477.532861][T13451] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1477.697795][T13451] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1477.706122][T13451] usb 6-1: config 1 has no interface number 0 [ 1477.712246][T13451] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1477.724028][T13451] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1477.735040][T13451] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.748655][T13451] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1477.758123][T13451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.766502][T13451] usb 6-1: Product: syz [ 1477.770765][T13451] usb 6-1: Manufacturer: syz [ 1477.775415][T13451] usb 6-1: SerialNumber: syz [ 1477.783319][ T5120] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1478.007303][ T5120] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1478.232446][T13451] usb 6-1: Incompatible driver and firmware versions [ 1479.184806][ T5132] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1479.191255][ T5132] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1479.197407][ T5132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1479.206201][ T5120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.218867][ T5120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.287415][T13451] usb 6-1: USB disconnect, device number 33 [ 1479.537765][ T5157] qnx4: no qnx4 filesystem (no root dir). [ 1479.583882][ T5163] netlink: 172 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1479.595021][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1479.605755][ T5163] netlink: 388 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1479.621839][ T5163] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1479.664786][ T5165] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6503'. [ 1479.864593][ T5182] netlink: 'syz.6.6506': attribute type 58 has an invalid length. [ 1479.984085][ T5195] netlink: 'syz.6.6509': attribute type 4 has an invalid length. [ 1479.992893][ T5195] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6509'. [ 1480.291206][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6512'. [ 1480.369291][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6512'. [ 1480.514292][T14493] Bluetooth: hci4: command 0x0406 tx timeout [ 1480.974743][ T5926] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1481.166793][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 1481.173775][ T5926] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1481.185959][ T5926] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1481.196406][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.207694][ T5926] usb 6-1: Product: syz [ 1481.212842][ T5926] usb 6-1: Manufacturer: syz [ 1481.217502][ T5926] usb 6-1: SerialNumber: syz [ 1481.224586][ T5926] usb 6-1: config 0 descriptor?? [ 1481.230747][ T5242] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1481.245178][ T5926] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1481.369887][T14493] Bluetooth: hci2: command 0x0c1a tx timeout [ 1481.369924][ T5161] Bluetooth: hci5: command 0x0c1a tx timeout [ 1481.460095][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.471310][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.481469][ T7959] usb 6-1: Failed to submit usb control message: -71 [ 1481.482978][ T807] usb 6-1: USB disconnect, device number 34 [ 1481.497770][ T7959] usb 6-1: unable to send the bmi data to the device: -71 [ 1481.504899][ T7959] usb 6-1: unable to get target info from device [ 1481.511525][ T7959] usb 6-1: could not get target info (-71) [ 1481.517378][ T7959] usb 6-1: could not probe fw (-71) [ 1481.614883][T15221] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1481.785983][T15221] usb 5-1: Using ep0 maxpacket: 16 [ 1481.794074][T15221] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1481.806559][T15221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.817690][T15221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1481.827751][T15221] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1481.840867][T15221] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1481.850300][T15221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.860739][T15221] usb 5-1: config 0 descriptor?? [ 1482.305735][T15221] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0072/input/input121 [ 1482.396261][T15221] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0072/input/input122 [ 1482.483004][ T5926] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1482.489651][T15221] kye 0003:0458:5013.0072: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 1482.532553][T15221] usb 5-1: USB disconnect, device number 92 [ 1482.583751][ T5309] fido_id[5309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1482.651543][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 1482.658176][ T5926] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1482.668376][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1482.679858][ T5926] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1482.690504][ T5926] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1482.704210][ T5926] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1482.713322][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.941872][ T5926] usb 6-1: GET_CAPABILITIES returned 0 [ 1482.947495][ T5926] usbtmc 6-1:16.0: can't read capabilities [ 1483.108611][ T5346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1483.209780][ T5297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.222022][ T5297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.235050][ T5926] usb 6-1: USB disconnect, device number 35 [ 1483.442239][ T5892] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1483.602570][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 1483.609196][ T5892] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1483.620465][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.631684][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.642227][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1483.655332][ T5892] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1483.665090][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.675773][ T5892] usb 5-1: config 0 descriptor?? [ 1483.992953][ T5381] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.6531'. [ 1484.134198][ T5892] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0073/input/input123 [ 1484.171610][ T5892] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5013.0073/input/input124 [ 1484.254184][ T5892] kye 0003:0458:5013.0073: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 1484.345284][ T5892] usb 5-1: USB disconnect, device number 93 [ 1484.425630][T15221] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1484.598456][T15221] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1484.607308][T15221] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1484.617493][T15221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1484.627234][T15221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1484.638867][T15221] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1484.652212][T15221] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1484.661583][T15221] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1484.669625][T15221] usb 6-1: Product: syz [ 1484.673862][T15221] usb 6-1: Manufacturer: syz [ 1484.684069][T15221] cdc_wdm 6-1:1.0: skipping garbage [ 1484.690662][T15221] cdc_wdm 6-1:1.0: skipping garbage [ 1484.698601][T15221] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1484.704780][T15221] cdc_wdm 6-1:1.0: Unknown control protocol [ 1485.356119][ T5892] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1485.494480][ T5892] usb 5-1: device descriptor read/64, error -71 [ 1485.761115][ T5892] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1485.901768][ T5892] usb 5-1: device descriptor read/64, error -71 [ 1486.018338][ T5892] usb usb5-port1: attempt power cycle [ 1486.380911][ T5892] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1486.402799][ T5892] usb 5-1: device descriptor read/8, error -71 [ 1486.658868][ T5892] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1486.682096][ T5892] usb 5-1: device descriptor read/8, error -71 [ 1486.800493][ T5892] usb usb5-port1: unable to enumerate USB device [ 1487.348164][ T5892] usb 6-1: USB disconnect, device number 36 [ 1487.759479][ T5892] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1487.941786][ T5892] usb 6-1: too many configurations: 87, using maximum allowed: 8 [ 1487.958381][ T5892] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1487.967753][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.977270][ T5892] usb 6-1: Product: syz [ 1487.981482][ T5892] usb 6-1: Manufacturer: syz [ 1487.986289][ T5892] usb 6-1: SerialNumber: syz [ 1487.998683][ T5892] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1488.042902][T13451] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1488.499192][T15221] usb 6-1: USB disconnect, device number 37 [ 1488.966623][ T5560] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6548'. [ 1489.149944][T13451] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1489.163052][T13451] ath9k_htc: Failed to initialize the device [ 1489.171568][T15221] usb 6-1: ath9k_htc: USB layer deinitialized [ 1489.191327][ T807] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1489.330534][ T5197] block nbd1: Possible stuck request ffff888028067000: control (read@0,1024B). Runtime 150 seconds [ 1489.341542][ T5197] block nbd1: Possible stuck request ffff8880280671c0: control (read@1024,1024B). Runtime 150 seconds [ 1489.353532][ T5197] block nbd1: Possible stuck request ffff888028067380: control (read@2048,1024B). Runtime 150 seconds [ 1489.362371][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 1489.366452][ T5197] block nbd1: Possible stuck request ffff888028067540: control (read@3072,1024B). Runtime 150 seconds [ 1489.374362][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1489.378395][ T807] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 1489.402840][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.411062][ T807] usb 5-1: Product: syz [ 1489.415324][ T807] usb 5-1: Manufacturer: syz [ 1489.420091][ T807] usb 5-1: SerialNumber: syz [ 1489.434736][ T807] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1489.512030][T15221] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1489.673147][T15221] usb 6-1: Using ep0 maxpacket: 16 [ 1489.684308][T15221] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1489.715016][T15221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1489.740300][T15221] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1489.757685][T15221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.768469][T15221] usb 6-1: Product: syz [ 1489.779018][T15221] usb 6-1: Manufacturer: syz [ 1489.789742][T15221] usb 6-1: SerialNumber: syz [ 1489.803575][T15221] usb 6-1: config 0 descriptor?? [ 1489.825210][T15221] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1489.843721][T15221] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1490.121774][T15221] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1490.132347][T15221] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1490.135320][ T5603] netlink: 'syz.5.6553': attribute type 29 has an invalid length. [ 1490.148146][ T5603] netlink: 'syz.5.6553': attribute type 29 has an invalid length. [ 1490.151775][T15221] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1490.173289][ T5603] netlink: 500 bytes leftover after parsing attributes in process `syz.5.6553'. [ 1490.174626][T15221] em28xx 6-1:0.0: No AC97 audio processor [ 1490.203750][T15221] usb 6-1: USB disconnect, device number 38 [ 1490.226593][T15221] em28xx 6-1:0.0: Disconnecting em28xx [ 1490.311292][T15221] em28xx 6-1:0.0: Freeing device [ 1490.368091][ T5623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1490.655440][T15221] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1490.794316][ T807] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1490.827157][T15221] usb 6-1: Using ep0 maxpacket: 8 [ 1490.834831][ T807] usb 5-1: USB disconnect, device number 98 [ 1490.842081][T15221] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.853207][T15221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1490.863769][T15221] usb 6-1: config 1 has no interface number 0 [ 1490.891820][T15221] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1490.901764][T15221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.909801][T15221] usb 6-1: Product: syz [ 1490.916793][T15221] usb 6-1: Manufacturer: syz [ 1490.921463][T15221] usb 6-1: SerialNumber: syz [ 1491.155896][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.165829][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.176369][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.186856][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.200947][T15221] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1491.238603][T15221] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1491.252042][T15221] usb 6-1: USB disconnect, device number 39 [ 1491.271149][ T7355] udevd[7355]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.087280][ T5962] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1492.258247][ T5962] usb 6-1: Using ep0 maxpacket: 16 [ 1492.267240][ T5962] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1492.276995][ T5962] usb 6-1: config 1 has an invalid interface number: 187 but max is 0 [ 1492.287130][ T5962] usb 6-1: config 1 has no interface number 0 [ 1492.293875][ T5962] usb 6-1: config 1 interface 187 altsetting 6 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1492.305403][ T5962] usb 6-1: config 1 interface 187 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 32 [ 1492.321565][ T5962] usb 6-1: config 1 interface 187 has no altsetting 0 [ 1492.330432][ T5962] usb 6-1: New USB device found, idVendor=2dee, idProduct=4d57, bcdDevice=ac.8d [ 1492.340561][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.348790][ T5962] usb 6-1: Product: syz [ 1492.353275][ T5962] usb 6-1: Manufacturer: syz [ 1492.358384][ T5962] usb 6-1: SerialNumber: syz [ 1492.368859][ T5703] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1492.377410][ T5703] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1492.479922][ T5718] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1492.492437][ T5718] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1492.501106][ T5718] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1492.606441][ T5962] option 6-1:1.187: GSM modem (1-port) converter detected [ 1492.618966][ T5962] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1492.632681][ T5962] usb 6-1: USB disconnect, device number 40 [ 1492.645837][ T5962] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1492.657688][ T5962] option 6-1:1.187: device disconnected [ 1493.572675][ T5905] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1493.745642][ T5905] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1493.754268][ T5905] usb 6-1: config 0 has no interface number 0 [ 1493.760394][ T5905] usb 6-1: too many endpoints for config 0 interface 105 altsetting 109: 105, using maximum allowed: 30 [ 1493.772145][ T5905] usb 6-1: config 0 interface 105 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 1493.786074][ T5905] usb 6-1: config 0 interface 105 has no altsetting 0 [ 1493.797374][ T5905] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1493.806623][ T5905] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1493.824135][ T5905] usb 6-1: Product: syz [ 1493.832966][ T5905] usb 6-1: Manufacturer: syz [ 1493.844306][ T5905] usb 6-1: SerialNumber: syz [ 1493.863279][ T5905] usb 6-1: config 0 descriptor?? [ 1494.096665][ T5905] peak_usb 6-1:0.105 can0: unable to request usb[type=0 value=1] err=-71 [ 1494.107372][ T5905] peak_usb 6-1:0.105: unable to read PCAN-Chip USB firmware info (err -71) [ 1494.171614][ T5905] peak_usb 6-1:0.105: probe with driver peak_usb failed with error -71 [ 1494.185521][ T5905] usb 6-1: USB disconnect, device number 41 [ 1494.384529][ T5811] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1494.786785][ T5832] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6583'. [ 1494.847545][ T5837] overlayfs: failed to resolve '/@': -2 [ 1495.487362][ T5905] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1495.656477][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 1495.666576][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1495.675544][ T5905] usb 6-1: config 1 has an invalid interface number: 17 but max is 0 [ 1495.683852][ T5905] usb 6-1: config 1 has no interface number 0 [ 1495.690071][ T5905] usb 6-1: config 1 interface 17 has no altsetting 0 [ 1495.698896][ T5905] usb 6-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=82.16 [ 1495.708109][ T5905] usb 6-1: New USB device strings: Mfr=217, Product=48, SerialNumber=3 [ 1495.716708][ T5905] usb 6-1: Product: syz [ 1495.721062][ T5905] usb 6-1: Manufacturer: syz [ 1495.725674][ T5905] usb 6-1: SerialNumber: syz [ 1496.180664][ T5905] quatech2 6-1:1.17: Quatech 2nd gen USB to Serial Driver converter detected [ 1496.190261][ T5905] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1496.200684][ T5905] quatech2 6-1:1.17: probe with driver quatech2 failed with error -71 [ 1496.216135][ T5905] usb 6-1: USB disconnect, device number 42 [ 1496.333671][ T5915] netlink: 'syz.4.6595': attribute type 4 has an invalid length. [ 1496.851028][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.992252][ T5905] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1497.152578][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 1497.160170][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1497.169485][ T5905] usb 6-1: config 14 has an invalid interface number: 180 but max is 0 [ 1497.178112][ T5905] usb 6-1: config 14 has no interface number 0 [ 1497.184759][ T5905] usb 6-1: config 14 interface 180 has no altsetting 0 [ 1497.194474][ T5905] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=da.db [ 1497.204030][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.212195][ T5905] usb 6-1: Product: syz [ 1497.217608][ T5905] usb 6-1: Manufacturer: syz [ 1497.222452][ T5905] usb 6-1: SerialNumber: syz [ 1497.288534][ T5945] netlink: 'syz.4.6600': attribute type 1 has an invalid length. [ 1497.656704][ T5905] ath6kl: Failed to submit usb control message: -71 [ 1497.665900][ T5905] ath6kl: unable to send the bmi data to the device: -71 [ 1497.673085][ T5905] ath6kl: Unable to send get target info: -71 [ 1497.685739][ T5905] ath6kl: Failed to init ath6kl core: -71 [ 1497.693930][ T5905] ath6kl_usb 6-1:14.180: probe with driver ath6kl_usb failed with error -71 [ 1497.708431][ T5905] usb 6-1: USB disconnect, device number 43 [ 1497.830414][ T5161] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1498.498900][ T5944] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1498.661281][ T5944] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1498.670155][ T5944] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1498.680685][ T5944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1498.689754][ T5944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1498.700821][ T5944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1498.714358][ T5944] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1498.734567][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1498.743407][ T5944] usb 6-1: Product: syz [ 1498.748057][ T5944] usb 6-1: Manufacturer: syz [ 1498.759606][ T5944] cdc_wdm 6-1:1.0: skipping garbage [ 1498.765289][ T5944] cdc_wdm 6-1:1.0: skipping garbage [ 1498.773016][ T5944] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1498.781851][ T5944] cdc_wdm 6-1:1.0: Unknown control protocol [ 1501.095136][ T6052] netlink: 37 bytes leftover after parsing attributes in process `syz.4.6614'. [ 1501.463611][ T5962] usb 6-1: USB disconnect, device number 44 [ 1502.014631][ T5962] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1502.188641][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.210219][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.221152][ T5962] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1502.234463][ T5962] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1502.244280][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.258606][ T5962] usb 6-1: config 0 descriptor?? [ 1502.707350][ T5962] plantronics 0003:047F:FFFF.0074: reserved main item tag 0xd [ 1502.723489][ T5962] plantronics 0003:047F:FFFF.0074: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1503.863268][T14493] Bluetooth: hci2: command 0x0c1a tx timeout [ 1504.151803][ T5962] usb 6-1: reset high-speed USB device number 45 using dummy_hcd [ 1504.514478][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6629'. [ 1504.515218][ T6127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6629'. [ 1505.284602][ T5962] usb 6-1: device descriptor read/64, error -71 [ 1505.573171][ T5962] usb 6-1: reset high-speed USB device number 45 using dummy_hcd [ 1505.611114][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1505.645752][ T6149] FAULT_INJECTION: forcing a failure. [ 1505.645752][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.663946][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.0.6635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1505.663967][ T6149] Tainted: [L]=SOFTLOCKUP [ 1505.663971][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1505.663979][ T6149] Call Trace: [ 1505.663985][ T6149] [ 1505.663990][ T6149] dump_stack_lvl+0xe8/0x150 [ 1505.664014][ T6149] should_fail_ex+0x412/0x560 [ 1505.664031][ T6149] should_failslab+0xa8/0x100 [ 1505.664045][ T6149] __kmalloc_noprof+0xe8/0x760 [ 1505.664057][ T6149] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1505.664071][ T6149] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1505.664082][ T6149] ? tomoyo_domain+0xd7/0x130 [ 1505.664095][ T6149] ? tomoyo_path_number_perm+0x219/0x630 [ 1505.664109][ T6149] tomoyo_path_number_perm+0x246/0x630 [ 1505.664125][ T6149] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1505.664138][ T6149] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.664162][ T6149] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1505.664186][ T6149] ? __fget_files+0x2a/0x420 [ 1505.664204][ T6149] ? __fget_files+0x2a/0x420 [ 1505.664217][ T6149] ? __fget_files+0x3a0/0x420 [ 1505.664230][ T6149] ? __fget_files+0x2a/0x420 [ 1505.664246][ T6149] security_file_ioctl+0xc3/0x2a0 [ 1505.664261][ T6149] __se_sys_ioctl+0x47/0x170 [ 1505.664274][ T6149] do_syscall_64+0x14d/0xf80 [ 1505.664287][ T6149] ? trace_irq_disable+0x3b/0x140 [ 1505.664299][ T6149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.664310][ T6149] ? clear_bhb_loop+0x40/0x90 [ 1505.664323][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.664333][ T6149] RIP: 0033:0x7fccfdd9c799 [ 1505.664345][ T6149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.664355][ T6149] RSP: 002b:00007fccfec69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1505.664367][ T6149] RAX: ffffffffffffffda RBX: 00007fccfe015fa0 RCX: 00007fccfdd9c799 [ 1505.664375][ T6149] RDX: 0000200000000180 RSI: 0000000000008982 RDI: 0000000000000004 [ 1505.664381][ T6149] RBP: 00007fccfec69090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.664388][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.664394][ T6149] R13: 00007fccfe016038 R14: 00007fccfe015fa0 R15: 00007fffb8aa3f48 [ 1505.664409][ T6149] [ 1505.664414][ T6149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1505.928181][ T5962] usb 6-1: device firmware changed [ 1505.933754][ T5926] usb 6-1: USB disconnect, device number 45 [ 1506.096774][ T5926] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1506.258450][ T5926] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1506.266497][ T5926] usb 6-1: config 1 has no interface number 0 [ 1506.272951][ T5926] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1506.283767][ T5926] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 1506.293625][ T5926] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x8 has an invalid bInterval 143, changing to 11 [ 1506.307067][ T5926] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1506.317095][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.325225][ T5926] usb 6-1: Product: syz [ 1506.329419][ T5926] usb 6-1: Manufacturer: syz [ 1506.334637][ T5926] usb 6-1: SerialNumber: syz [ 1506.343452][ T6133] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1506.350934][ T6133] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1506.360672][ T5926] usb 6-1: Expected 3 endpoints, found: 2 [ 1506.578340][ T6133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.590195][ T6133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.607777][ T5926] usb 6-1: USB disconnect, device number 46 [ 1507.195898][ T6205] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1507.248486][ T6208] FAULT_INJECTION: forcing a failure. [ 1507.248486][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.264907][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.5.6646 Tainted: G L syzkaller #0 PREEMPT(full) [ 1507.264937][ T6208] Tainted: [L]=SOFTLOCKUP [ 1507.264945][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1507.264957][ T6208] Call Trace: [ 1507.264964][ T6208] [ 1507.264973][ T6208] dump_stack_lvl+0xe8/0x150 [ 1507.265008][ T6208] should_fail_ex+0x412/0x560 [ 1507.265037][ T6208] should_failslab+0xa8/0x100 [ 1507.265061][ T6208] __kmalloc_noprof+0xe8/0x760 [ 1507.265081][ T6208] ? tomoyo_encode+0x28b/0x550 [ 1507.265105][ T6208] tomoyo_encode+0x28b/0x550 [ 1507.265128][ T6208] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1507.265148][ T6208] ? tomoyo_domain+0xd7/0x130 [ 1507.265172][ T6208] ? tomoyo_path_number_perm+0x219/0x630 [ 1507.265202][ T6208] tomoyo_path_number_perm+0x246/0x630 [ 1507.265229][ T6208] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1507.265252][ T6208] ? __lock_acquire+0x6b5/0x2cf0 [ 1507.265282][ T6208] ? clockevents_program_event+0x3ba/0x4b0 [ 1507.265330][ T6208] ? __fget_files+0x2a/0x420 [ 1507.265359][ T6208] ? __fget_files+0x2a/0x420 [ 1507.265382][ T6208] ? __fget_files+0x3a0/0x420 [ 1507.265405][ T6208] ? __fget_files+0x2a/0x420 [ 1507.265432][ T6208] security_file_ioctl+0xc3/0x2a0 [ 1507.265459][ T6208] __se_sys_ioctl+0x47/0x170 [ 1507.265481][ T6208] do_syscall_64+0x14d/0xf80 [ 1507.265503][ T6208] ? trace_irq_disable+0x3b/0x140 [ 1507.265525][ T6208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.265543][ T6208] ? clear_bhb_loop+0x40/0x90 [ 1507.265565][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.265584][ T6208] RIP: 0033:0x7fb3b9f9c799 [ 1507.265602][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.265617][ T6208] RSP: 002b:00007fb3bae82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.265641][ T6208] RAX: ffffffffffffffda RBX: 00007fb3ba215fa0 RCX: 00007fb3b9f9c799 [ 1507.265656][ T6208] RDX: 0000200000000180 RSI: 0000000000008982 RDI: 0000000000000004 [ 1507.265667][ T6208] RBP: 00007fb3bae82090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.265679][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.265690][ T6208] R13: 00007fb3ba216038 R14: 00007fb3ba215fa0 R15: 00007ffe5dff0948 [ 1507.265719][ T6208] [ 1507.266024][ T6208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1507.817269][ T5926] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1508.020086][ T5926] usb 6-1: Using ep0 maxpacket: 8 [ 1508.027821][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1508.036727][ T5926] usb 6-1: config 14 has an invalid interface number: 180 but max is 0 [ 1508.045139][ T5926] usb 6-1: config 14 has no interface number 0 [ 1508.051421][ T5926] usb 6-1: config 14 interface 180 has no altsetting 0 [ 1508.061355][ T5926] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=da.db [ 1508.070778][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.078846][ T5926] usb 6-1: Product: syz [ 1508.083014][ T5926] usb 6-1: Manufacturer: syz [ 1508.087642][ T5926] usb 6-1: SerialNumber: syz [ 1508.322073][ T5926] ath6kl: Failed to submit usb control message: -71 [ 1508.328804][ T5926] ath6kl: unable to send the bmi data to the device: -71 [ 1508.336000][ T5926] ath6kl: Unable to send get target info: -71 [ 1508.343529][ T5926] ath6kl: Failed to init ath6kl core: -71 [ 1508.371410][ T5926] ath6kl_usb 6-1:14.180: probe with driver ath6kl_usb failed with error -71 [ 1508.385116][ T5926] usb 6-1: USB disconnect, device number 47 [ 1509.142239][ T5905] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1509.304405][ T5905] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 1509.314164][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.333396][ T5905] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 1509.425009][ T6255] trusted_key: encrypted_key: insufficient parameters specified [ 1509.466217][ T6257] FAULT_INJECTION: forcing a failure. [ 1509.466217][ T6257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.480477][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.0.6655 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.480498][ T6257] Tainted: [L]=SOFTLOCKUP [ 1509.480502][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1509.480509][ T6257] Call Trace: [ 1509.480516][ T6257] [ 1509.480521][ T6257] dump_stack_lvl+0xe8/0x150 [ 1509.480545][ T6257] should_fail_ex+0x412/0x560 [ 1509.480562][ T6257] _copy_from_user+0x2d/0xb0 [ 1509.480579][ T6257] vlan_ioctl_handler+0xbd/0x630 [ 1509.480595][ T6257] ? __pfx___mutex_lock+0x10/0x10 [ 1509.480610][ T6257] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1509.480619][ T6257] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1509.480638][ T6257] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1509.480649][ T6257] sock_ioctl+0x668/0x7f0 [ 1509.480668][ T6257] ? __pfx_sock_ioctl+0x10/0x10 [ 1509.480690][ T6257] ? __fget_files+0x2a/0x420 [ 1509.480707][ T6257] ? __fget_files+0x3a0/0x420 [ 1509.480720][ T6257] ? __fget_files+0x2a/0x420 [ 1509.480735][ T6257] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1509.480747][ T6257] ? __pfx_sock_ioctl+0x10/0x10 [ 1509.480762][ T6257] __se_sys_ioctl+0xfc/0x170 [ 1509.480775][ T6257] do_syscall_64+0x14d/0xf80 [ 1509.480789][ T6257] ? trace_irq_disable+0x3b/0x140 [ 1509.480802][ T6257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.480813][ T6257] ? clear_bhb_loop+0x40/0x90 [ 1509.480826][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.480836][ T6257] RIP: 0033:0x7fccfdd9c799 [ 1509.480848][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.480858][ T6257] RSP: 002b:00007fccfec69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.480870][ T6257] RAX: ffffffffffffffda RBX: 00007fccfe015fa0 RCX: 00007fccfdd9c799 [ 1509.480877][ T6257] RDX: 0000200000000180 RSI: 0000000000008982 RDI: 0000000000000004 [ 1509.480885][ T6257] RBP: 00007fccfec69090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.480891][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.480897][ T6257] R13: 00007fccfe016038 R14: 00007fccfe015fa0 R15: 00007fffb8aa3f48 [ 1509.480912][ T6257] [ 1509.712755][ T5905] gspca_sn9c20x: Write register 1000 failed -71 [ 1509.719288][ T5905] gspca_sn9c20x: Device initialization failed [ 1509.725489][ T5905] gspca_sn9c20x 6-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 1509.737448][ T5905] usb 6-1: USB disconnect, device number 48 [ 1510.228133][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6660'. [ 1510.242091][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.259359][ T6284] bridge_slave_1 (unregistering): left allmulticast mode [ 1510.266809][ T6284] bridge_slave_1 (unregistering): left promiscuous mode [ 1510.274199][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.445577][ T6298] netlink: 'syz.5.6662': attribute type 21 has an invalid length. [ 1510.456802][ T6300] netlink: 'syz.6.6663': attribute type 11 has an invalid length. [ 1510.469183][ T6300] openvswitch: netlink: IP tunnel dst address not specified [ 1510.762983][ T5926] libceph: connect (1)[c::]:6789 error -22 [ 1510.776129][ T9] libceph: connect (1)[c::]:6789 error -22 [ 1510.784341][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 1510.789026][ T6336] ceph: No mds server is up or the cluster is laggy [ 1510.799596][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1510.802783][ T6335] ceph: No mds server is up or the cluster is laggy [ 1510.844673][ T5962] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1511.078242][ T5962] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1511.087148][ T5962] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1511.097459][ T5962] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1511.107132][ T5962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1511.118749][ T5962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1511.133348][ T5962] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1511.142474][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1511.150495][ T5962] usb 6-1: Product: syz [ 1511.154703][ T5962] usb 6-1: Manufacturer: syz [ 1511.165093][ T5962] cdc_wdm 6-1:1.0: skipping garbage [ 1511.171267][ T5962] cdc_wdm 6-1:1.0: skipping garbage [ 1511.178280][ T5962] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1511.184269][ T5962] cdc_wdm 6-1:1.0: Unknown control protocol [ 1511.544820][ T6365] netlink: 'syz.4.6674': attribute type 4 has an invalid length. [ 1512.189242][ T29] audit: type=1400 audit(1774661615.992:19731): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=6369 comm="syz.4.6676" [ 1513.238801][ T6391] macvlan1: entered promiscuous mode [ 1513.244390][ T6391] macvlan1: entered allmulticast mode [ 1513.250003][ T6391] veth1_vlan: entered allmulticast mode [ 1513.337854][ T6398] netlink: 'syz.0.6683': attribute type 28 has an invalid length. [ 1513.422477][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1513.432324][ C1] buffer_io_error: 28 callbacks suppressed [ 1513.432342][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1513.776257][ T5926] usb 6-1: USB disconnect, device number 49 [ 1514.309650][ T6449] netlink: 'syz.6.6693': attribute type 28 has an invalid length. [ 1514.336053][ T5926] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1514.498029][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1514.509272][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.520095][ T5926] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1514.529225][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.539850][ T5926] usb 6-1: config 0 descriptor?? [ 1514.976959][ T6436] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6691'. [ 1514.986976][ T6436] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6691'. [ 1515.000113][ T5926] hid_parser_main: 28 callbacks suppressed [ 1515.000134][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.013908][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.021135][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.028360][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.035690][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.043149][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.050277][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.057489][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.067043][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.075291][ T5926] petalynx 0003:18B1:0037.0075: unknown main item tag 0x0 [ 1515.082825][ T5926] petalynx 0003:18B1:0037.0075: nested delimiters [ 1515.089507][ T5926] petalynx 0003:18B1:0037.0075: item 0 2 2 10 parsing failed [ 1515.099531][ T5926] petalynx 0003:18B1:0037.0075: parse failed [ 1515.106144][ T5926] petalynx 0003:18B1:0037.0075: probe with driver petalynx failed with error -22 [ 1515.301623][ T5926] usb 6-1: USB disconnect, device number 50 [ 1516.142376][ T5905] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1516.319692][ T5905] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1516.330840][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.339415][ T5905] usb 6-1: Product: syz [ 1516.344155][ T5905] usb 6-1: Manufacturer: syz [ 1516.349257][ T5905] usb 6-1: SerialNumber: syz [ 1516.367668][ T5905] usb 6-1: config 0 descriptor?? [ 1516.377795][ T5905] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1516.593611][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1516.603561][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.613346][ T5905] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1516.625967][ T5905] sq905c 6-1:0.0: Get version command failed [ 1516.632099][ T5905] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 1516.646283][ T5905] usb 6-1: USB disconnect, device number 51 [ 1517.311176][ T29] audit: type=1800 audit(1774661620.783:19732): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6703" name="bus" dev="overlay" ino=2000 res=0 errno=0 [ 1517.417406][ T6568] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1517.477706][T13451] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 1517.650640][T13451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1517.661952][T13451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.673389][T13451] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1517.682581][T13451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.693739][T13451] usb 6-1: config 0 descriptor?? [ 1517.748352][ T6589] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6710'. [ 1517.758910][ T6590] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6710'. [ 1517.826703][ T6592] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6711'. [ 1518.241504][T13451] aquacomputer_d5next 0003:0C70:F0B6.0076: item fetching failed at offset 3/7 [ 1518.251550][T13451] aquacomputer_d5next 0003:0C70:F0B6.0076: probe with driver aquacomputer_d5next failed with error -22 [ 1520.505524][ T5962] usb 6-1: USB disconnect, device number 52 [ 1520.595682][ T6668] xt_NFQUEUE: number of total queues is 0 [ 1520.962583][ T5962] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1521.146284][ T5962] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1521.155180][ T5962] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1521.168196][ T5962] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1521.178690][ T5962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1521.190032][ T5962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1521.204177][ T5962] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1521.220543][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1521.229411][ T5962] usb 6-1: Product: syz [ 1521.233808][ T5962] usb 6-1: Manufacturer: syz [ 1521.247522][ T5962] cdc_wdm 6-1:1.0: skipping garbage [ 1521.252975][ T5962] cdc_wdm 6-1:1.0: skipping garbage [ 1521.259512][ T5962] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1521.266198][ T5962] cdc_wdm 6-1:1.0: Unknown control protocol [ 1521.463987][ T5197] block nbd1: Possible stuck request ffff888028067000: control (read@0,1024B). Runtime 180 seconds [ 1521.475897][ T5197] block nbd1: Possible stuck request ffff8880280671c0: control (read@1024,1024B). Runtime 180 seconds [ 1521.487219][ T5197] block nbd1: Possible stuck request ffff888028067380: control (read@2048,1024B). Runtime 180 seconds [ 1521.498656][ T5197] block nbd1: Possible stuck request ffff888028067540: control (read@3072,1024B). Runtime 180 seconds [ 1521.778270][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1521.867834][ T29] audit: type=1326 audit(1774661625.041:19733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6742 comm="syz.4.6750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa8f79c799 code=0x0 [ 1521.981996][ T6747] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6750'. [ 1522.139962][ T6758] fuse: Unknown parameter 'audit' [ 1522.791816][ T6769] veth1_macvtap: left promiscuous mode [ 1522.800940][ T6769] macsec0: entered allmulticast mode [ 1522.811880][ T6769] veth1_macvtap: entered promiscuous mode [ 1522.818087][ T6769] veth1_macvtap: entered allmulticast mode [ 1522.826449][ T6769] macsec0: left allmulticast mode [ 1522.832609][ T6769] veth1_macvtap: left allmulticast mode [ 1523.595235][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6761'. [ 1523.747313][ T6790] FAULT_INJECTION: forcing a failure. [ 1523.747313][ T6790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.764779][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.4.6762 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.764811][ T6790] Tainted: [L]=SOFTLOCKUP [ 1523.764818][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1523.764829][ T6790] Call Trace: [ 1523.764836][ T6790] [ 1523.764843][ T6790] dump_stack_lvl+0xe8/0x150 [ 1523.764884][ T6790] should_fail_ex+0x412/0x560 [ 1523.764912][ T6790] _copy_from_user+0x2d/0xb0 [ 1523.764935][ T6790] do_sock_getsockopt+0x165/0x3f0 [ 1523.764960][ T6790] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1523.764983][ T6790] ? __fget_files+0x3a0/0x420 [ 1523.765008][ T6790] ? __fget_files+0x2a/0x420 [ 1523.765035][ T6790] __x64_sys_getsockopt+0x1a4/0x240 [ 1523.765066][ T6790] do_syscall_64+0x14d/0xf80 [ 1523.765087][ T6790] ? trace_irq_disable+0x3b/0x140 [ 1523.765108][ T6790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.765127][ T6790] ? clear_bhb_loop+0x40/0x90 [ 1523.765149][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.765168][ T6790] RIP: 0033:0x7faa8f79c799 [ 1523.765187][ T6790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.765203][ T6790] RSP: 002b:00007faa9072e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1523.765224][ T6790] RAX: ffffffffffffffda RBX: 00007faa8fa15fa0 RCX: 00007faa8f79c799 [ 1523.765238][ T6790] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 1523.765249][ T6790] RBP: 00007faa9072e090 R08: 0000200000000080 R09: 0000000000000000 [ 1523.765262][ T6790] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1523.765272][ T6790] R13: 00007faa8fa16038 R14: 00007faa8fa15fa0 R15: 00007ffe60181328 [ 1523.765300][ T6790] [ 1523.776346][ T6792] netlink: 'syz.0.6763': attribute type 29 has an invalid length. [ 1523.883416][ T5944] usb 6-1: USB disconnect, device number 53 [ 1524.348713][ T5944] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1524.547925][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.564116][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.585508][ T5944] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1524.604941][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.621254][ T5944] usb 6-1: config 0 descriptor?? [ 1524.861128][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.875892][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.897800][ T5944] arvo 0003:1E7D:30D4.0077: item fetching failed at offset 5/7 [ 1524.907395][ T5944] arvo 0003:1E7D:30D4.0077: parse failed [ 1524.914591][ T5944] arvo 0003:1E7D:30D4.0077: probe with driver arvo failed with error -22 [ 1525.038127][ T6852] FAULT_INJECTION: forcing a failure. [ 1525.038127][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1525.052253][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.4.6772 Tainted: G L syzkaller #0 PREEMPT(full) [ 1525.052274][ T6852] Tainted: [L]=SOFTLOCKUP [ 1525.052278][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1525.052286][ T6852] Call Trace: [ 1525.052290][ T6852] [ 1525.052295][ T6852] dump_stack_lvl+0xe8/0x150 [ 1525.052319][ T6852] should_fail_ex+0x412/0x560 [ 1525.052336][ T6852] _copy_from_user+0x2d/0xb0 [ 1525.052352][ T6852] do_ip_getsockopt+0x292/0x1d40 [ 1525.052375][ T6852] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 1525.052393][ T6852] ? __lock_acquire+0x6b5/0x2cf0 [ 1525.052414][ T6852] ? __mutex_trylock_common+0x158/0x260 [ 1525.052427][ T6852] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1525.052439][ T6852] ? rcu_is_watching+0x15/0xb0 [ 1525.052450][ T6852] ? trace_contention_end+0x3d/0x140 [ 1525.052462][ T6852] ? __mutex_lock+0x320/0x1420 [ 1525.052486][ T6852] ? __lock_acquire+0x6b5/0x2cf0 [ 1525.052504][ T6852] ? smc_getsockopt+0x14d/0x3c0 [ 1525.052521][ T6852] ip_getsockopt+0xbb/0x230 [ 1525.052539][ T6852] ? __pfx_ip_getsockopt+0x10/0x10 [ 1525.052555][ T6852] ? __might_fault+0xaf/0x130 [ 1525.052571][ T6852] ? sock_common_getsockopt+0x2d/0xb0 [ 1525.052584][ T6852] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1525.052594][ T6852] smc_getsockopt+0x1e4/0x3c0 [ 1525.052606][ T6852] ? __pfx_smc_getsockopt+0x10/0x10 [ 1525.052619][ T6852] ? __pfx_smc_getsockopt+0x10/0x10 [ 1525.052630][ T6852] do_sock_getsockopt+0x2d3/0x3f0 [ 1525.052646][ T6852] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1525.052660][ T6852] ? __fget_files+0x3a0/0x420 [ 1525.052675][ T6852] ? __fget_files+0x2a/0x420 [ 1525.052693][ T6852] __x64_sys_getsockopt+0x1a4/0x240 [ 1525.052710][ T6852] do_syscall_64+0x14d/0xf80 [ 1525.052728][ T6852] ? trace_irq_disable+0x3b/0x140 [ 1525.052741][ T6852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.052752][ T6852] ? clear_bhb_loop+0x40/0x90 [ 1525.052765][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.052775][ T6852] RIP: 0033:0x7faa8f79c799 [ 1525.052787][ T6852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1525.052796][ T6852] RSP: 002b:00007faa9072e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1525.052808][ T6852] RAX: ffffffffffffffda RBX: 00007faa8fa15fa0 RCX: 00007faa8f79c799 [ 1525.052816][ T6852] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 1525.052822][ T6852] RBP: 00007faa9072e090 R08: 0000200000000080 R09: 0000000000000000 [ 1525.052829][ T6852] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1525.052836][ T6852] R13: 00007faa8fa16038 R14: 00007faa8fa15fa0 R15: 00007ffe60181328 [ 1525.052851][ T6852] [ 1525.332764][ T5962] usb 6-1: USB disconnect, device number 54 [ 1525.932339][ T6870] : renamed from bond_slave_0 (while UP) [ 1526.261282][T15221] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1526.422382][T15221] usb 6-1: Using ep0 maxpacket: 32 [ 1526.429682][T15221] usb 6-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 1526.440279][T15221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1526.453377][T15221] usb 6-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 1526.462878][T15221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.471162][T15221] usb 6-1: Product: syz [ 1526.475474][T15221] usb 6-1: Manufacturer: syz [ 1526.480088][T15221] usb 6-1: SerialNumber: syz [ 1526.724365][T15221] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1526.799129][T15221] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1526.818798][T15221] usb 6-1: USB disconnect, device number 55 [ 1526.847369][ T7355] udevd[7355]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1526.999229][ T6885] cgroup: fork rejected by pids controller in /syz6 [ 1527.219467][ T6948] FAULT_INJECTION: forcing a failure. [ 1527.219467][ T6948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.238354][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.4.6781 Tainted: G L syzkaller #0 PREEMPT(full) [ 1527.238387][ T6948] Tainted: [L]=SOFTLOCKUP [ 1527.238394][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1527.238406][ T6948] Call Trace: [ 1527.238414][ T6948] [ 1527.238422][ T6948] dump_stack_lvl+0xe8/0x150 [ 1527.238458][ T6948] should_fail_ex+0x412/0x560 [ 1527.238486][ T6948] _copy_from_user+0x2d/0xb0 [ 1527.238513][ T6948] do_ip_vs_get_ctl+0x2d2/0xe80 [ 1527.238543][ T6948] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 1527.238583][ T6948] ? nf_getsockopt+0x224/0x290 [ 1527.238612][ T6948] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1527.238639][ T6948] ? __pfx___mutex_lock+0x10/0x10 [ 1527.238661][ T6948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1527.238689][ T6948] ? __might_fault+0xaf/0x130 [ 1527.238724][ T6948] nf_getsockopt+0x26e/0x290 [ 1527.238762][ T6948] ip_getsockopt+0x19e/0x230 [ 1527.238794][ T6948] ? __pfx_ip_getsockopt+0x10/0x10 [ 1527.238820][ T6948] ? __might_fault+0xaf/0x130 [ 1527.238845][ T6948] ? sock_common_getsockopt+0x2d/0xb0 [ 1527.238868][ T6948] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1527.238886][ T6948] smc_getsockopt+0x1e4/0x3c0 [ 1527.238910][ T6948] ? __pfx_smc_getsockopt+0x10/0x10 [ 1527.238935][ T6948] ? __pfx_smc_getsockopt+0x10/0x10 [ 1527.238956][ T6948] do_sock_getsockopt+0x2d3/0x3f0 [ 1527.238983][ T6948] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1527.239007][ T6948] ? __fget_files+0x3a0/0x420 [ 1527.239036][ T6948] ? __fget_files+0x2a/0x420 [ 1527.239066][ T6948] __x64_sys_getsockopt+0x1a4/0x240 [ 1527.239098][ T6948] do_syscall_64+0x14d/0xf80 [ 1527.239120][ T6948] ? trace_irq_disable+0x3b/0x140 [ 1527.239142][ T6948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.239161][ T6948] ? clear_bhb_loop+0x40/0x90 [ 1527.239185][ T6948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.239203][ T6948] RIP: 0033:0x7faa8f79c799 [ 1527.239222][ T6948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.239238][ T6948] RSP: 002b:00007faa9072e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1527.239260][ T6948] RAX: ffffffffffffffda RBX: 00007faa8fa15fa0 RCX: 00007faa8f79c799 [ 1527.239274][ T6948] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 1527.239286][ T6948] RBP: 00007faa9072e090 R08: 0000200000000080 R09: 0000000000000000 [ 1527.239299][ T6948] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1527.239312][ T6948] R13: 00007faa8fa16038 R14: 00007faa8fa15fa0 R15: 00007ffe60181328 [ 1527.239342][ T6948] [ 1527.575780][ T6952] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6782'. [ 1527.853619][ T5962] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1527.952562][ T6972] netlink: 'syz.0.6786': attribute type 27 has an invalid length. [ 1528.027999][ T5962] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1528.047395][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1528.067209][ T5962] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1528.077862][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.104566][ T5962] usb 6-1: config 0 descriptor?? [ 1528.330365][ T5962] ath6kl: Failed to submit usb control message: -71 [ 1528.344170][ T5962] ath6kl: unable to send the bmi data to the device: -71 [ 1528.366256][ T5962] ath6kl: Unable to send get target info: -71 [ 1528.389239][ T5962] ath6kl: Failed to init ath6kl core: -71 [ 1528.421238][ T5962] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1528.445968][ T5962] usb 6-1: USB disconnect, device number 56 [ 1528.710336][ T6998] fuse: Bad value for 'fd' [ 1528.791895][ T7004] FAULT_INJECTION: forcing a failure. [ 1528.791895][ T7004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.807940][ T7004] CPU: 0 UID: 0 PID: 7004 Comm: syz.6.6792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1528.807960][ T7004] Tainted: [L]=SOFTLOCKUP [ 1528.807964][ T7004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1528.807971][ T7004] Call Trace: [ 1528.807976][ T7004] [ 1528.807985][ T7004] dump_stack_lvl+0xe8/0x150 [ 1528.808009][ T7004] should_fail_ex+0x412/0x560 [ 1528.808027][ T7004] _copy_to_user+0x31/0xb0 [ 1528.808044][ T7004] do_ip_vs_get_ctl+0x701/0xe80 [ 1528.808061][ T7004] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 1528.808083][ T7004] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1528.808100][ T7004] ? __pfx___mutex_lock+0x10/0x10 [ 1528.808113][ T7004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1528.808128][ T7004] ? __might_fault+0xaf/0x130 [ 1528.808150][ T7004] nf_getsockopt+0x26e/0x290 [ 1528.808169][ T7004] ip_getsockopt+0x19e/0x230 [ 1528.808189][ T7004] ? __pfx_ip_getsockopt+0x10/0x10 [ 1528.808204][ T7004] ? __might_fault+0xaf/0x130 [ 1528.808219][ T7004] ? sock_common_getsockopt+0x2d/0xb0 [ 1528.808232][ T7004] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1528.808242][ T7004] smc_getsockopt+0x1e4/0x3c0 [ 1528.808257][ T7004] ? __pfx_smc_getsockopt+0x10/0x10 [ 1528.808270][ T7004] ? __pfx_smc_getsockopt+0x10/0x10 [ 1528.808281][ T7004] do_sock_getsockopt+0x2d3/0x3f0 [ 1528.808297][ T7004] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1528.808311][ T7004] ? __fget_files+0x3a0/0x420 [ 1528.808327][ T7004] ? __fget_files+0x2a/0x420 [ 1528.808345][ T7004] __x64_sys_getsockopt+0x1a4/0x240 [ 1528.808363][ T7004] do_syscall_64+0x14d/0xf80 [ 1528.808375][ T7004] ? trace_irq_disable+0x3b/0x140 [ 1528.808390][ T7004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.808402][ T7004] ? clear_bhb_loop+0x40/0x90 [ 1528.808423][ T7004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.808440][ T7004] RIP: 0033:0x7f1721d9c799 [ 1528.808457][ T7004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1528.808473][ T7004] RSP: 002b:00007f1722b6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1528.808492][ T7004] RAX: ffffffffffffffda RBX: 00007f1722015fa0 RCX: 00007f1721d9c799 [ 1528.808501][ T7004] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 1528.808507][ T7004] RBP: 00007f1722b6e090 R08: 0000200000000080 R09: 0000000000000000 [ 1528.808514][ T7004] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1528.808520][ T7004] R13: 00007f1722016038 R14: 00007f1722015fa0 R15: 00007ffd47717d48 [ 1528.808536][ T7004] [ 1529.092292][ T7006] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6793'. [ 1529.493110][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6800'. [ 1529.605878][ T5962] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1529.779620][ T5962] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1529.788423][ T5962] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1529.800548][ T5962] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1529.809794][ T5962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1529.821068][ T5962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1529.833603][ T5962] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1529.844392][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1529.852619][ T5962] usb 6-1: Product: syz [ 1529.856807][ T5962] usb 6-1: Manufacturer: syz [ 1529.867334][ T5962] cdc_wdm 6-1:1.0: skipping garbage [ 1529.873691][ T5962] cdc_wdm 6-1:1.0: skipping garbage [ 1529.880120][ T5962] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1529.886239][ T5962] cdc_wdm 6-1:1.0: Unknown control protocol [ 1531.250231][ T7045] FAULT_INJECTION: forcing a failure. [ 1531.250231][ T7045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.264185][ T7045] CPU: 1 UID: 0 PID: 7045 Comm: syz.0.6801 Tainted: G L syzkaller #0 PREEMPT(full) [ 1531.264215][ T7045] Tainted: [L]=SOFTLOCKUP [ 1531.264222][ T7045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1531.264233][ T7045] Call Trace: [ 1531.264240][ T7045] [ 1531.264247][ T7045] dump_stack_lvl+0xe8/0x150 [ 1531.264270][ T7045] should_fail_ex+0x412/0x560 [ 1531.264287][ T7045] _copy_to_user+0x31/0xb0 [ 1531.264302][ T7045] simple_read_from_buffer+0xe1/0x170 [ 1531.264320][ T7045] proc_fail_nth_read+0x1bb/0x230 [ 1531.264337][ T7045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1531.264352][ T7045] ? rw_verify_area+0x2a6/0x4d0 [ 1531.264362][ T7045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1531.264377][ T7045] vfs_read+0x20c/0xa70 [ 1531.264387][ T7045] ? fdget_pos+0x246/0x320 [ 1531.264404][ T7045] ? __pfx___mutex_lock+0x10/0x10 [ 1531.264418][ T7045] ? __pfx_vfs_read+0x10/0x10 [ 1531.264429][ T7045] ? __fget_files+0x2a/0x420 [ 1531.264444][ T7045] ? __fget_files+0x3a0/0x420 [ 1531.264458][ T7045] ? __fget_files+0x2a/0x420 [ 1531.264476][ T7045] ksys_read+0x150/0x270 [ 1531.264493][ T7045] ? __pfx_ksys_read+0x10/0x10 [ 1531.264502][ T7045] ? fput+0xa0/0xd0 [ 1531.264520][ T7045] do_syscall_64+0x14d/0xf80 [ 1531.264533][ T7045] ? trace_irq_disable+0x3b/0x140 [ 1531.264545][ T7045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.264556][ T7045] ? clear_bhb_loop+0x40/0x90 [ 1531.264568][ T7045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.264579][ T7045] RIP: 0033:0x7fccfdd5cfce [ 1531.264589][ T7045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1531.264599][ T7045] RSP: 002b:00007fccfec68fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1531.264610][ T7045] RAX: ffffffffffffffda RBX: 00007fccfec696c0 RCX: 00007fccfdd5cfce [ 1531.264618][ T7045] RDX: 000000000000000f RSI: 00007fccfec690a0 RDI: 0000000000000004 [ 1531.264624][ T7045] RBP: 00007fccfec69090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.264630][ T7045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.264637][ T7045] R13: 00007fccfe016038 R14: 00007fccfe015fa0 R15: 00007fffb8aa3f48 [ 1531.264652][ T7045] [ 1532.510752][T13451] usb 6-1: USB disconnect, device number 57 [ 1532.908015][T13451] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1533.089953][T13451] usb 6-1: Using ep0 maxpacket: 32 [ 1533.097197][T13451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1533.106585][T13451] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024 [ 1533.121176][T13451] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 1533.130532][T13451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.138903][T13451] usb 6-1: Product: syz [ 1533.143478][T13451] usb 6-1: Manufacturer: syz [ 1533.148151][T13451] usb 6-1: SerialNumber: syz [ 1533.381647][T13451] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1533.395625][T13451] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1533.447345][T13451] usb 6-1: USB disconnect, device number 58 [ 1533.490190][ T7355] udevd[7355]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.962820][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6815'. [ 1533.974092][ T7126] netlink: 332 bytes leftover after parsing attributes in process `syz.5.6815'. [ 1534.318538][ T5962] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1534.491032][ T5962] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1534.500250][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.510540][ T5962] usb 6-1: config 0 descriptor?? [ 1534.521617][ T5962] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1534.907774][ T7156] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20004 [ 1534.920976][ T7156] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1535.032412][ T7160] /dev/nullb0: Can't lookup blockdev [ 1535.078781][ T7163] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6825'. [ 1535.651955][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.663944][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.703206][ T5962] gspca_sunplus: reg_w_riv err -71 [ 1535.720823][ T5962] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1535.743806][ T5962] usb 6-1: USB disconnect, device number 59 [ 1536.148451][ T5962] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1536.316726][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 1536.323348][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.334616][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.344463][ T5962] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1536.353924][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.366087][ T5962] usb 6-1: config 0 descriptor?? [ 1536.374804][ T5962] hub 6-1:0.0: USB hub found [ 1536.813753][ T5962] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1536.934892][ T7240] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6840'. [ 1537.033600][ T5962] usbhid 6-1:0.0: can't add hid device: -71 [ 1537.039714][ T5962] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1537.065787][ T5962] usb 6-1: USB disconnect, device number 60 [ 1537.884087][ T7262] netlink: 'syz.4.6845': attribute type 2 has an invalid length. [ 1537.892531][ T7262] netlink: 'syz.4.6845': attribute type 1 has an invalid length. [ 1537.962415][T15221] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1538.124257][T15221] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1538.136047][T15221] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.146680][T15221] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1538.156332][T15221] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1538.169336][T15221] usb 6-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 1538.178564][T15221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.187017][T15221] usb 6-1: Product: syz [ 1538.191407][T15221] usb 6-1: Manufacturer: syz [ 1538.196110][T15221] usb 6-1: SerialNumber: syz [ 1538.422225][ T7265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.431327][ T7265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.453557][T15221] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1538.512733][T15221] usb 6-1: USB disconnect, device number 61 [ 1538.551204][ T7286] netlink: 'syz.4.6847': attribute type 1 has an invalid length. [ 1538.556212][ T7355] udevd[7355]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1538.559855][ T7286] netlink: 'syz.4.6847': attribute type 2 has an invalid length. [ 1538.592030][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6847'. [ 1538.607852][ T7287] netlink: 'syz.4.6847': attribute type 10 has an invalid length. [ 1538.619483][ T7287] veth1_macvtap: left promiscuous mode [ 1539.048320][ T7303] netlink: 'syz.5.6848': attribute type 10 has an invalid length. [ 1539.144543][ T7309] overlay: ./file0 is not a directory [ 1539.167397][ T7309] netlink: 'syz.5.6850': attribute type 9 has an invalid length. [ 1539.175263][ T7309] netlink: 'syz.5.6850': attribute type 11 has an invalid length. [ 1539.183406][ T7309] netlink: 'syz.5.6850': attribute type 12 has an invalid length. [ 1539.191621][ T7309] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.6850'. [ 1539.201182][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6850'. [ 1539.242859][ T7313] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6851'. [ 1539.446539][ T7316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1539.489448][ T7327] netlink: 'syz.0.6854': attribute type 5 has an invalid length. [ 1539.500526][ T7327] tmpfs: Unknown parameter '' [ 1539.537342][ T7332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1539.604459][ T7332] nvme_fabrics: missing parameter 'transport=%s' [ 1539.614641][ T7332] nvme_fabrics: missing parameter 'nqn=%s' [ 1539.810789][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6860'. [ 1539.868932][ T7364] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1539.908186][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1540.001282][ T7371] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1540.078225][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1540.086426][ T9] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1540.096600][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.104991][ T9] usb 6-1: Product: syz [ 1540.109189][ T9] usb 6-1: Manufacturer: syz [ 1540.113930][ T9] usb 6-1: SerialNumber: syz [ 1540.121119][ T9] usb 6-1: config 0 descriptor?? [ 1540.343294][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.353425][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.369690][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.378907][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.389308][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.398341][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.407561][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.418817][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.428106][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.437202][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.461270][ T9] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1540.470439][ T9] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1540.511396][ T9] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 1540.529804][ T9] usb 6-1: USB disconnect, device number 62 [ 1540.619106][ T7406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6866'. [ 1541.409606][ T7442] veth1_macvtap: left promiscuous mode [ 1541.418060][ T7442] macsec0: entered allmulticast mode [ 1541.429561][ T7442] veth1_macvtap: entered promiscuous mode [ 1541.436780][ T7442] veth1_macvtap: entered allmulticast mode [ 1541.443095][ T7442] macsec0: left allmulticast mode [ 1541.448600][ T7442] veth1_macvtap: left allmulticast mode [ 1542.728456][T15221] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1542.867383][T15221] usb 6-1: device descriptor read/64, error -71 [ 1543.123853][T15221] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1543.263043][T15221] usb 6-1: device descriptor read/64, error -71 [ 1543.380525][T15221] usb usb6-port1: attempt power cycle [ 1543.743568][T15221] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1543.772632][T15221] usb 6-1: device descriptor read/8, error -71 [ 1544.034574][T15221] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1544.064910][T15221] usb 6-1: device descriptor read/8, error -71 [ 1544.182820][T15221] usb usb6-port1: unable to enumerate USB device [ 1544.571854][ T7511] btrfs: Unknown parameter 'discardllb0' [ 1544.744115][ T7520] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6895'. [ 1544.788070][ T7522] AppArmor: change_hat: Invalid input '' [ 1545.183040][ T7543] tmpfs: Bad value for 'mpol' [ 1545.875535][ T7565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1546.308270][T15221] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1546.481233][T15221] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.491658][T15221] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1546.502326][T15221] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1546.512027][T15221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1546.520146][T15221] usb 6-1: SerialNumber: syz [ 1546.710708][ T7587] fuse: Bad value for 'fd' [ 1546.760243][T15221] usb 6-1: 0:2 : does not exist [ 1546.806183][T15221] usb 6-1: USB disconnect, device number 67 [ 1546.848845][ T7355] udevd[7355]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1547.460956][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.466790][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.472595][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.478373][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.484004][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.489663][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.495895][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.501484][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.507536][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.513153][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.524161][ T7634] /dev/nullb0: Can't lookup blockdev [ 1547.579877][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1547.718977][ T9] usb 6-1: device descriptor read/64, error -71 [ 1547.975460][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1548.114159][ T9] usb 6-1: device descriptor read/64, error -71 [ 1548.232213][ T9] usb usb6-port1: attempt power cycle [ 1548.595116][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1548.618115][ T9] usb 6-1: device descriptor read/8, error -71 [ 1548.872844][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1548.895277][ T9] usb 6-1: device descriptor read/8, error -71 [ 1548.944502][ T7665] netlink: 'syz.4.6924': attribute type 4 has an invalid length. [ 1548.953914][ T7665] /dev/nullb0: Can't lookup blockdev [ 1549.013453][ T9] usb usb6-port1: unable to enumerate USB device [ 1549.072118][ T7669] netlink: 'syz.4.6926': attribute type 23 has an invalid length. [ 1550.968278][ T5944] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1551.125649][ T7708] overlayfs: failed to clone upperpath [ 1551.134540][ T5944] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1551.145558][ T5944] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1551.156322][ T5944] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1551.166643][ T5944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1551.179741][ T5944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1551.196688][ T5944] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1551.207400][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1551.217454][ T5944] usb 6-1: Product: syz [ 1551.221693][ T5944] usb 6-1: Manufacturer: syz [ 1551.235060][ T5944] cdc_wdm 6-1:1.0: skipping garbage [ 1551.240783][ T5944] cdc_wdm 6-1:1.0: skipping garbage [ 1551.248846][ T5944] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1551.255178][ T5944] cdc_wdm 6-1:1.0: Unknown control protocol [ 1553.607962][ T5197] block nbd1: Possible stuck request ffff888028067000: control (read@0,1024B). Runtime 210 seconds [ 1553.618855][ T5197] block nbd1: Possible stuck request ffff8880280671c0: control (read@1024,1024B). Runtime 210 seconds [ 1553.630029][ T5197] block nbd1: Possible stuck request ffff888028067380: control (read@2048,1024B). Runtime 210 seconds [ 1553.642982][ T5197] block nbd1: Possible stuck request ffff888028067540: control (read@3072,1024B). Runtime 210 seconds [ 1553.811378][ T5944] usb 6-1: USB disconnect, device number 72 [ 1554.258725][ T5944] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 1554.422737][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1554.449721][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.470221][ T5944] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1554.493080][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.516975][ T5944] usb 6-1: config 0 descriptor?? [ 1554.554051][ T7771] xt_NFQUEUE: number of total queues is 0 [ 1555.033255][ T5944] aquacomputer_d5next 0003:0C70:F0B6.0078: item fetching failed at offset 3/7 [ 1555.042749][ T5944] aquacomputer_d5next 0003:0C70:F0B6.0078: probe with driver aquacomputer_d5next failed with error -22 [ 1557.241493][ T9] usb 6-1: USB disconnect, device number 73 [ 1557.342031][ T7817] QAT: failed to copy from user cfg_data. [ 1557.353347][ T7817] netlink: 'syz.5.6955': attribute type 11 has an invalid length. [ 1557.963588][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6961'. [ 1558.077077][ T7849] delete_channel: no stack [ 1558.081594][ T7849] delete_channel: no stack [ 1558.397287][ T7866] netlink: 770 bytes leftover after parsing attributes in process `syz.6.6964'. [ 1558.426214][ T5944] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 1558.588809][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1558.599976][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.609843][ T5944] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1558.619685][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.630117][ T5944] usb 6-1: config 0 descriptor?? [ 1559.100333][ T5944] aquacomputer_d5next 0003:0C70:F0B6.0079: item fetching failed at offset 3/7 [ 1559.108150][ T7890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1559.115235][ T5944] aquacomputer_d5next 0003:0C70:F0B6.0079: probe with driver aquacomputer_d5next failed with error -22 [ 1559.204722][ T7897] fuse: Bad value for 'fd' [ 1559.213332][ T7897] fuse: Bad value for 'fd' [ 1559.312387][ T5905] usb 6-1: USB disconnect, device number 74 [ 1559.523413][ T7920] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1559.529955][ T7920] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1559.538653][ T7920] vhci_hcd vhci_hcd.0: Device attached [ 1559.828196][ T5905] usb 46-1: SetAddress Request (2) to port 0 [ 1559.843058][ T5905] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1559.873958][ T7921] vhci_hcd: connection closed [ 1559.874173][ T1169] vhci_hcd vhci_hcd.6: stop threads [ 1559.885195][ T1169] vhci_hcd vhci_hcd.6: release socket [ 1559.892722][ T1169] vhci_hcd vhci_hcd.6: disconnect device [ 1560.242848][ T5944] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1560.405568][ T5944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.424500][ T5944] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 100, using maximum allowed: 30 [ 1560.435877][ T5944] usb 6-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1560.452559][ T5944] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1560.476610][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.485309][ T5944] usb 6-1: Product: syz [ 1560.493973][ T5944] usb 6-1: Manufacturer: syz [ 1560.498612][ T5944] usb 6-1: SerialNumber: syz [ 1560.725981][ T5944] cdc_ncm 6-1:1.0: bind() failure [ 1560.736605][ T5944] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1560.743613][ T5944] cdc_ncm 6-1:1.1: bind() failure [ 1560.753467][ T5944] usb 6-1: USB disconnect, device number 75 [ 1561.319100][ T5161] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 1561.329016][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6982'. [ 1561.339042][ T7963] openvswitch: netlink: Unknown nsh attribute 0 [ 1561.357877][ T7967] netlink: 'syz.0.6989': attribute type 3 has an invalid length. [ 1561.410256][ T7971] 9p: Bad value for 'rfdno' [ 1561.916820][ T7979] /dev/nullb0: Can't lookup blockdev [ 1562.501373][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1564.998134][T13451] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1565.171492][T13451] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1565.181151][T13451] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1565.191823][T13451] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1565.201387][T13451] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1565.214154][T13451] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1565.227361][T13451] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1565.233329][ T5905] usb 46-1: device descriptor read/8, error -110 [ 1565.237005][T13451] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1565.251218][T13451] usb 6-1: Product: syz [ 1565.255480][T13451] usb 6-1: Manufacturer: syz [ 1565.267534][T13451] cdc_wdm 6-1:1.0: skipping garbage [ 1565.272788][T13451] cdc_wdm 6-1:1.0: skipping garbage [ 1565.279930][T13451] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1565.285876][T13451] cdc_wdm 6-1:1.0: Unknown control protocol [ 1565.662040][ T5905] usb usb46-port1: attempt power cycle [ 1566.260988][ T5905] usb usb46-port1: unable to enumerate USB device [ 1567.070196][ T8052] netlink: 'syz.6.7001': attribute type 64 has an invalid length. [ 1567.078302][ T8052] netlink: 'syz.6.7001': attribute type 4 has an invalid length. [ 1567.087379][ T8052] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7001'. [ 1567.731667][ T29] audit: type=1326 audit(1774661667.966:19734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.4.7003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa8f79c799 code=0x0 [ 1567.818727][ T8065] fuse: Bad value for 'fd' [ 1567.898220][ T8074] netlink: 348 bytes leftover after parsing attributes in process `syz.0.7006'. [ 1567.944969][ T5892] usb 6-1: USB disconnect, device number 76 [ 1568.213984][ T8097] netlink: 'syz.5.7009': attribute type 5 has an invalid length. [ 1568.588719][ T5933] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1568.753950][ T5933] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1568.763376][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.771896][ T5933] usb 6-1: Product: syz [ 1568.776398][ T5933] usb 6-1: Manufacturer: syz [ 1568.782259][ T5933] usb 6-1: SerialNumber: syz [ 1568.792482][ T5933] usb 6-1: config 0 descriptor?? [ 1568.803875][ T5933] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1568.831615][ T8124] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7012'. [ 1568.994054][ T8132] fuse: Bad value for 'fd' [ 1569.018295][ T8112] batadv_slave_0: entered promiscuous mode [ 1569.032493][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1569.262407][ T8110] batadv_slave_0: left promiscuous mode [ 1569.279407][ T5933] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1569.290211][ T5933] sq905c 6-1:0.0: Reading version command failed [ 1569.296899][ T5933] sq905c 6-1:0.0: probe with driver sq905c failed with error -71 [ 1569.308045][ T5933] usb 6-1: USB disconnect, device number 77 [ 1569.697524][ T8153] Invalid source name [ 1569.702439][ T8153] UBIFS error (pid: 8153): cannot open "./file0", error -22 [ 1569.704272][ T8153] netlink: 57 bytes leftover after parsing attributes in process `syz.4.7018'. [ 1570.138133][ T807] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1570.277003][ T807] usb 6-1: device descriptor read/64, error -71 [ 1570.534472][ T807] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1570.537728][ T8178] loop4: detected capacity change from 0 to 1 [ 1570.618443][ T8178] Dev loop4: unable to read RDB block 1 [ 1570.625038][ T8178] loop4: unable to read partition table [ 1570.633799][ T8178] loop4: partition table beyond EOD, truncated [ 1570.642003][ T8178] loop_reread_partitions: partition scan of loop4 (ݷU@:B${Wɴ) failed (rc=-5) [ 1570.683488][ T807] usb 6-1: device descriptor read/64, error -71 [ 1570.802410][ T807] usb usb6-port1: attempt power cycle [ 1571.166305][ T807] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1571.196775][ T807] usb 6-1: device descriptor read/8, error -71 [ 1571.238206][ T8213] fuse: Bad value for 'fd' [ 1571.452503][ T807] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1571.477655][ T807] usb 6-1: device descriptor read/8, error -71 [ 1571.603281][ T807] usb usb6-port1: unable to enumerate USB device [ 1573.536710][T13451] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1573.739291][T13451] usb 6-1: Using ep0 maxpacket: 16 [ 1573.748237][T13451] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1573.757824][T13451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.766136][T13451] usb 6-1: Product: syz [ 1573.770428][T13451] usb 6-1: Manufacturer: syz [ 1573.775158][T13451] usb 6-1: SerialNumber: syz [ 1573.782633][T13451] usb 6-1: config 0 descriptor?? [ 1574.018938][ T8243] max out of range [ 1574.247296][T13451] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1574.257574][T13451] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1574.268749][T13451] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1574.276880][T13451] usb 6-1: media controller created [ 1574.289184][T13451] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1574.473331][T13451] zl10353_read_register: readreg error (reg=127, ret==0) [ 1574.488757][T13451] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1574.506145][T13451] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1574.525630][T13451] usb 6-1: USB disconnect, device number 82 [ 1574.599637][T13451] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1574.639013][ T8267] netlink: 'syz.4.7041': attribute type 39 has an invalid length. [ 1574.979787][ T29] audit: type=1326 audit(1774661674.751:19735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8292 comm="syz.6.7047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1721d9c799 code=0x0 [ 1575.331499][ T9] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1575.493041][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1575.499869][ T9] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 1575.508362][ T9] usb 6-1: config 210 has an invalid descriptor of length 251, skipping remainder of the config [ 1575.518974][ T9] usb 6-1: config 210 has 0 interfaces, different from the descriptor's value: 30 [ 1575.531412][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1575.540707][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.549024][ T9] usb 6-1: Product: syz [ 1575.553325][ T9] usb 6-1: Manufacturer: syz [ 1575.558065][ T9] usb 6-1: SerialNumber: syz [ 1575.795231][ T9] usb 6-1: USB disconnect, device number 83 [ 1575.996810][ T5161] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 1576.699310][ T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1576.873313][ T9] usb 6-1: config 0 has an invalid interface number: 238 but max is 0 [ 1576.881555][ T9] usb 6-1: config 0 has no interface number 0 [ 1576.887716][ T9] usb 6-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1576.898494][ T9] usb 6-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 1576.908569][ T9] usb 6-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1576.918732][ T9] usb 6-1: config 0 interface 238 has no altsetting 0 [ 1576.928115][ T9] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 1576.937387][ T9] usb 6-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 1576.946118][ T9] usb 6-1: Product: syz [ 1576.950303][ T9] usb 6-1: Manufacturer: syz [ 1576.954880][ T9] usb 6-1: SerialNumber: syz [ 1576.961939][ T9] usb 6-1: config 0 descriptor?? [ 1576.975339][ T9] ni6501 6-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1577.732052][T13451] usb 6-1: USB disconnect, device number 84 [ 1578.101521][T13451] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1578.283035][T13451] usb 6-1: Using ep0 maxpacket: 32 [ 1578.296011][T13451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1578.310162][T13451] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1578.327655][T13451] usb 6-1: can't read configurations, error -61 [ 1578.483991][T13451] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1578.645118][T13451] usb 6-1: Using ep0 maxpacket: 32 [ 1578.652525][T13451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1578.662912][T13451] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1578.670923][T13451] usb 6-1: can't read configurations, error -61 [ 1578.677868][T13451] usb usb6-port1: attempt power cycle [ 1578.959888][ T8382] 9p: Bad value for 'rfdno' [ 1579.050497][T13451] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1579.084410][T13451] usb 6-1: Using ep0 maxpacket: 32 [ 1579.092122][T13451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1579.101941][T13451] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1579.109666][T13451] usb 6-1: can't read configurations, error -61 [ 1579.267752][T13451] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1579.297114][T13451] usb 6-1: Using ep0 maxpacket: 32 [ 1579.304216][T13451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1579.314212][T13451] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1579.322556][T13451] usb 6-1: can't read configurations, error -61 [ 1579.331461][T13451] usb usb6-port1: unable to enumerate USB device [ 1579.531224][ T8389] nbd2: detected capacity change from 0 to 63 [ 1579.564197][ T5161] block nbd2: Receive control failed (result -104) [ 1579.565066][T14493] block nbd2: Receive control failed (result -32) [ 1579.582894][ T7355] block nbd2: Dead connection, failed to find a fallback [ 1579.616995][ T7355] block nbd2: shutting down sockets [ 1579.651263][ T7355] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1579.664094][ T7355] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1579.684558][ T8401] netlink: 'syz.4.7069': attribute type 10 has an invalid length. [ 1579.693186][ T8401] team0: Device wlan1 is up. Set it down before adding it as a team port [ 1580.946377][ T8416] Invalid ELF header len 7 [ 1581.001079][ T8418] fuse: Bad value for 'fd' [ 1581.130937][ T8434] x_tables: duplicate underflow at hook 1 [ 1581.216445][ T8443] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 1581.227551][ T8443] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 1581.424480][ T8456] fuse: Unknown parameter 'groZ`Y00000000000000000000' [ 1581.591044][T13451] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1581.697432][ T8479] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7084'. [ 1581.787671][T13451] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1581.813423][T13451] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1581.840723][T13451] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1581.872359][T13451] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1581.897833][T13451] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1581.941020][T13451] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1581.951555][T13451] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1581.969861][T13451] usb 6-1: Product: syz [ 1581.974344][T13451] usb 6-1: Manufacturer: syz [ 1582.008230][T13451] cdc_wdm 6-1:1.0: skipping garbage [ 1582.022943][T13451] cdc_wdm 6-1:1.0: skipping garbage [ 1582.045095][T13451] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1582.055833][T13451] cdc_wdm 6-1:1.0: Unknown control protocol [ 1584.477966][T13451] usb 6-1: USB disconnect, device number 89 [ 1584.751996][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7092'. [ 1585.055803][ T5905] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1585.217875][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.228550][ T5905] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1585.237760][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.248316][ T5905] usb 6-1: config 0 descriptor?? [ 1585.257240][ T5905] pwc: Askey VC010 type 2 USB webcam detected. [ 1585.684010][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1585.704034][ T5905] pwc: recv_control_msg error -71 req 02 val 2700 [ 1585.714302][ T5905] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1585.729050][ T5905] pwc: recv_control_msg error -71 req 04 val 1000 [ 1585.736159][ T5905] pwc: recv_control_msg error -71 req 04 val 1300 [ 1585.743885][ T5905] pwc: recv_control_msg error -71 req 04 val 1400 [ 1585.751088][ T5197] block nbd1: Possible stuck request ffff888028067000: control (read@0,1024B). Runtime 240 seconds [ 1585.764719][ T5197] block nbd1: Possible stuck request ffff8880280671c0: control (read@1024,1024B). Runtime 240 seconds [ 1585.776968][ T5905] pwc: recv_control_msg error -71 req 02 val 2000 [ 1585.777655][ T5905] pwc: recv_control_msg error -71 req 02 val 2100 [ 1585.784669][ T5197] block nbd1: Possible stuck request ffff888028067380: control (read@2048,1024B). Runtime 240 seconds [ 1585.802437][ T5197] block nbd1: Possible stuck request ffff888028067540: control (read@3072,1024B). Runtime 240 seconds [ 1585.803192][ T5905] pwc: recv_control_msg error -71 req 04 val 1500 [ 1585.822878][ T5905] pwc: recv_control_msg error -71 req 02 val 2500 [ 1585.830218][ T5905] pwc: recv_control_msg error -71 req 02 val 2400 [ 1585.838692][ T5905] pwc: recv_control_msg error -71 req 02 val 2600 [ 1585.846069][ T5905] pwc: recv_control_msg error -71 req 02 val 2900 [ 1585.854025][ T5905] pwc: recv_control_msg error -71 req 02 val 2800 [ 1585.872434][ T8577] netlink: 'syz.4.7098': attribute type 2 has an invalid length. [ 1585.885393][ T5905] pwc: recv_control_msg error -71 req 04 val 1100 [ 1585.893814][ T5905] pwc: recv_control_msg error -71 req 04 val 1200 [ 1585.901937][ T8577] netlink: 'syz.4.7098': attribute type 2 has an invalid length. [ 1585.919444][ T5905] pwc: Registered as video103. [ 1585.937970][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input128 [ 1585.990599][ T5905] usb 6-1: USB disconnect, device number 90 [ 1586.184804][ T5161] Bluetooth: hci2: unexpected event 0x09 length: 12 > 3 [ 1586.207452][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1586.382613][ T5905] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1586.387086][ T8623] netlink: 'syz.4.7105': attribute type 1 has an invalid length. [ 1586.564263][ T5905] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1586.573015][ T5905] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1586.583356][ T5905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1586.592775][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1586.603948][ T5905] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1586.617984][ T5905] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1586.628385][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1586.636420][ T5905] usb 6-1: Product: syz [ 1586.640731][ T5905] usb 6-1: Manufacturer: syz [ 1586.653110][ T5905] cdc_wdm 6-1:1.0: skipping garbage [ 1586.658448][ T5905] cdc_wdm 6-1:1.0: skipping garbage [ 1586.665637][ T5905] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1586.671929][ T5905] cdc_wdm 6-1:1.0: Unknown control protocol [ 1586.969570][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7107'. [ 1589.048209][T13450] usb 6-1: USB disconnect, device number 91 [ 1589.608016][T13450] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1589.779361][T13450] usb 6-1: Using ep0 maxpacket: 32 [ 1589.786708][T13450] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1589.798882][T13450] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1589.809438][T13450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.817840][T13450] usb 6-1: Product: syz [ 1589.822502][T13450] usb 6-1: Manufacturer: syz [ 1589.827136][T13450] usb 6-1: SerialNumber: syz [ 1589.846737][T13450] usb 6-1: found format II with max.bitrate = 1625, frame size=3 [ 1589.861958][T13450] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1590.001827][ T8718] overlayfs: failed to resolve '/lʥ޽a}/pvC [ 1590.001827][ T8718] ': -2 [ 1590.030446][ T8721] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7126'. [ 1590.053688][T13450] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1590.116803][ T8729] fuse: Bad value for 'fd' [ 1590.138405][ T8731] tmpfs: Bad value for 'mpol' [ 1590.151665][T13450] usb 6-1: USB disconnect, device number 92 [ 1590.241086][ T7298] udevd[7298]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1590.319790][ T8755] overlayfs: failed lookup in lower (newroot/583, name='file1', err=-40): overlapping layers [ 1590.334172][ T8755] overlayfs: failed lookup in lower (newroot/583, name='bus', err=-40): overlapping layers [ 1590.351085][ T8755] overlayfs: failed lookup in lower (newroot/583, name='file1', err=-40): overlapping layers [ 1590.384708][ T8755] overlayfs: failed lookup in lower (newroot/583, name='bus', err=-40): overlapping layers [ 1590.481013][ T8759] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1590.490327][ T8759] overlayfs: missing 'lowerdir' [ 1590.532596][ T8764] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7133'. [ 1590.543512][ T8764] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1590.912369][ T807] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1591.019897][ T8775] tipc: Enabling of bearer rejected, media not registered [ 1591.073739][ T807] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1591.085199][ T807] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1591.096074][ T807] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1591.105450][ T807] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1591.117447][ T807] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1591.131857][ T807] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1591.142942][ T807] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1591.151048][ T807] usb 6-1: Product: syz [ 1591.155301][ T807] usb 6-1: Manufacturer: syz [ 1591.166771][ T807] cdc_wdm 6-1:1.0: skipping garbage [ 1591.173101][ T807] cdc_wdm 6-1:1.0: skipping garbage [ 1591.181003][ T807] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1591.187351][ T807] cdc_wdm 6-1:1.0: Unknown control protocol [ 1591.706418][ T8789] fuse: Bad value for 'fd' [ 1592.427589][ T8800] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7142'. [ 1592.437526][ T8801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7142'. [ 1592.617083][ T8814] fuse: Bad value for 'fd' [ 1593.601262][T14493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1593.617813][T14493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1593.632106][T14493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1593.654531][T14493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1593.665702][T14493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1593.890338][T13451] usb 6-1: USB disconnect, device number 93 [ 1594.341553][ T8830] chnl_net:caif_netlink_parms(): no params data found [ 1594.586921][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.595340][ T8830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.603032][ T8830] bridge_slave_0: entered allmulticast mode [ 1594.612002][ T8830] bridge_slave_0: entered promiscuous mode [ 1594.623324][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.630637][ T8830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.637970][ T8830] bridge_slave_1: entered allmulticast mode [ 1594.648142][ T8830] bridge_slave_1: entered promiscuous mode [ 1594.684206][ T8830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.699539][ T8830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.741053][ T8830] team0: Port device team_slave_0 added [ 1594.750147][ T8830] team0: Port device team_slave_1 added [ 1594.783993][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.792508][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.820354][ T8830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.833591][ T8830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.840896][ T8830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.867387][ T8830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.928029][ T8830] hsr_slave_0: entered promiscuous mode [ 1594.935792][ T8830] hsr_slave_1: entered promiscuous mode [ 1594.945918][ T8830] debugfs: 'hsr0' already exists in 'hsr' [ 1594.952568][ T8830] Cannot create hsr debugfs directory [ 1595.227430][ T8830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.483323][ T8830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.618651][ T8830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.739046][ T8830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.922362][ T8830] [ 1595.924708][ T8830] ====================================================== [ 1595.931708][ T8830] WARNING: possible circular locking dependency detected [ 1595.938719][ T8830] syzkaller #0 Tainted: G L [ 1595.944679][ T8830] ------------------------------------------------------ [ 1595.951689][ T8830] syz-executor/8830 is trying to acquire lock: [ 1595.957823][ T8830] ffffffff8ea843c0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 1595.967111][ T8830] [ 1595.967111][ T8830] but task is already holding lock: [ 1595.974455][ T8830] ffff88807bf96530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 1595.983658][ T8830] [ 1595.983658][ T8830] which lock already depends on the new lock. [ 1595.983658][ T8830] [ 1595.994043][ T8830] [ 1595.994043][ T8830] the existing dependency chain (in reverse order) is: [ 1596.003040][ T8830] [ 1596.003040][ T8830] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 1596.010605][ T8830] __mutex_lock+0x19e/0x1420 [ 1596.015798][ T8830] __ipv6_dev_mc_inc+0x4e/0xa50 [ 1596.021164][ T8830] __ipv6_sock_mc_join+0x51c/0x770 [ 1596.026786][ T8830] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 1596.033012][ T8830] do_ipv6_setsockopt+0x16e9/0x3150 [ 1596.038720][ T8830] ipv6_setsockopt+0x59/0x170 [ 1596.043904][ T8830] do_sock_setsockopt+0x17c/0x1b0 [ 1596.049440][ T8830] __x64_sys_setsockopt+0x13d/0x1b0 [ 1596.055155][ T8830] do_syscall_64+0x14d/0xf80 [ 1596.060258][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.066667][ T8830] [ 1596.066667][ T8830] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1596.074394][ T8830] lock_sock_nested+0x41/0x100 [ 1596.079662][ T8830] inet_shutdown+0x6a/0x390 [ 1596.084674][ T8830] nbd_mark_nsock_dead+0x2e9/0x560 [ 1596.090298][ T8830] recv_work+0x1c2e/0x1d40 [ 1596.095219][ T8830] process_one_work+0x9a3/0x1710 [ 1596.100754][ T8830] worker_thread+0xba8/0x11e0 [ 1596.105932][ T8830] kthread+0x388/0x470 [ 1596.110534][ T8830] ret_from_fork+0x51e/0xb90 [ 1596.115652][ T8830] ret_from_fork_asm+0x1a/0x30 [ 1596.120933][ T8830] [ 1596.120933][ T8830] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1596.128744][ T8830] __mutex_lock+0x19e/0x1420 [ 1596.133870][ T8830] nbd_queue_rq+0x37b/0x1100 [ 1596.139004][ T8830] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1596.145077][ T8830] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1596.152009][ T8830] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1596.158507][ T8830] blk_mq_run_hw_queue+0x348/0x4f0 [ 1596.164128][ T8830] blk_mq_dispatch_list+0xd16/0xe10 [ 1596.169837][ T8830] blk_mq_flush_plug_list+0x48d/0x570 [ 1596.175722][ T8830] __blk_flush_plug+0x3ed/0x4d0 [ 1596.181084][ T8830] __submit_bio+0x28d/0x580 [ 1596.186121][ T8830] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1596.192315][ T8830] block_read_full_folio+0x599/0x830 [ 1596.198132][ T8830] filemap_read_folio+0x137/0x3b0 [ 1596.203861][ T8830] do_read_cache_folio+0x358/0x590 [ 1596.209484][ T8830] read_part_sector+0xb6/0x2b0 [ 1596.214759][ T8830] adfspart_check_ICS+0xa5/0xa40 [ 1596.220296][ T8830] bdev_disk_changed+0x7ba/0x1550 [ 1596.225836][ T8830] blkdev_get_whole+0x380/0x510 [ 1596.231195][ T8830] bdev_open+0x31e/0xd30 [ 1596.235945][ T8830] blkdev_open+0x470/0x610 [ 1596.240871][ T8830] do_dentry_open+0x785/0x14e0 [ 1596.246147][ T8830] vfs_open+0x3b/0x340 [ 1596.250723][ T8830] path_openat+0x2e08/0x3860 [ 1596.255817][ T8830] do_file_open+0x23e/0x4a0 [ 1596.260828][ T8830] do_sys_openat2+0x113/0x200 [ 1596.266019][ T8830] __x64_sys_openat+0x138/0x170 [ 1596.271378][ T8830] do_syscall_64+0x14d/0xf80 [ 1596.276474][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.282875][ T8830] [ 1596.282875][ T8830] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1596.290070][ T8830] __mutex_lock+0x19e/0x1420 [ 1596.295169][ T8830] nbd_queue_rq+0xc6/0x1100 [ 1596.300188][ T8830] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1596.306245][ T8830] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1596.313083][ T8830] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1596.319623][ T8830] blk_mq_run_hw_queue+0x348/0x4f0 [ 1596.325247][ T8830] blk_mq_dispatch_list+0xd16/0xe10 [ 1596.330957][ T8830] blk_mq_flush_plug_list+0x48d/0x570 [ 1596.336837][ T8830] __blk_flush_plug+0x3ed/0x4d0 [ 1596.342201][ T8830] __submit_bio+0x28d/0x580 [ 1596.347304][ T8830] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1596.353444][ T8830] block_read_full_folio+0x599/0x830 [ 1596.359236][ T8830] filemap_read_folio+0x137/0x3b0 [ 1596.364781][ T8830] do_read_cache_folio+0x358/0x590 [ 1596.370433][ T8830] read_part_sector+0xb6/0x2b0 [ 1596.375707][ T8830] adfspart_check_ICS+0xa5/0xa40 [ 1596.381156][ T8830] bdev_disk_changed+0x7ba/0x1550 [ 1596.386695][ T8830] blkdev_get_whole+0x380/0x510 [ 1596.392057][ T8830] bdev_open+0x31e/0xd30 [ 1596.396807][ T8830] blkdev_open+0x470/0x610 [ 1596.401738][ T8830] do_dentry_open+0x785/0x14e0 [ 1596.407010][ T8830] vfs_open+0x3b/0x340 [ 1596.411636][ T8830] path_openat+0x2e08/0x3860 [ 1596.416732][ T8830] do_file_open+0x23e/0x4a0 [ 1596.421739][ T8830] do_sys_openat2+0x113/0x200 [ 1596.426924][ T8830] __x64_sys_openat+0x138/0x170 [ 1596.432286][ T8830] do_syscall_64+0x14d/0xf80 [ 1596.437382][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.443782][ T8830] [ 1596.443782][ T8830] -> #3 (set->srcu){.+.+}-{0:0}: [ 1596.450976][ T8830] __synchronize_srcu+0xca/0x3e0 [ 1596.456436][ T8830] elevator_switch+0x1e8/0x7a0 [ 1596.461711][ T8830] elevator_change+0x2cc/0x450 [ 1596.466999][ T8830] elevator_set_default+0x36c/0x430 [ 1596.472709][ T8830] blk_register_queue+0x3e9/0x4e0 [ 1596.478338][ T8830] __add_disk+0x677/0xd50 [ 1596.483196][ T8830] add_disk_fwnode+0xfb/0x480 [ 1596.488391][ T8830] nbd_dev_add+0x72c/0xb50 [ 1596.493320][ T8830] nbd_init+0x168/0x1f0 [ 1596.498067][ T8830] do_one_initcall+0x250/0x870 [ 1596.503343][ T8830] do_initcall_level+0x104/0x190 [ 1596.508842][ T8830] do_initcalls+0x59/0xa0 [ 1596.513685][ T8830] kernel_init_freeable+0x2a6/0x3e0 [ 1596.519409][ T8830] kernel_init+0x1d/0x1d0 [ 1596.524274][ T8830] ret_from_fork+0x51e/0xb90 [ 1596.529376][ T8830] ret_from_fork_asm+0x1a/0x30 [ 1596.534645][ T8830] [ 1596.534645][ T8830] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1596.542571][ T8830] __mutex_lock+0x19e/0x1420 [ 1596.547683][ T8830] elevator_change+0x1b3/0x450 [ 1596.552956][ T8830] elevator_set_none+0xb5/0x140 [ 1596.558317][ T8830] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1596.564629][ T8830] nbd_start_device+0x17f/0xb10 [ 1596.570026][ T8830] nbd_genl_connect+0x165b/0x1cf0 [ 1596.575568][ T8830] genl_family_rcv_msg_doit+0x22a/0x330 [ 1596.581718][ T8830] genl_rcv_msg+0x61c/0x7a0 [ 1596.586732][ T8830] netlink_rcv_skb+0x232/0x4b0 [ 1596.592004][ T8830] genl_rcv+0x28/0x40 [ 1596.596492][ T8830] netlink_unicast+0x80f/0x9b0 [ 1596.601764][ T8830] netlink_sendmsg+0x813/0xb40 [ 1596.607033][ T8830] sock_sendmsg_nosec+0x112/0x150 [ 1596.612562][ T8830] ____sys_sendmsg+0x589/0x8c0 [ 1596.617858][ T8830] ___sys_sendmsg+0x2a5/0x360 [ 1596.623053][ T8830] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1596.628497][ T8830] do_syscall_64+0x14d/0xf80 [ 1596.633594][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.640005][ T8830] [ 1596.640005][ T8830] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1596.648616][ T8830] blk_alloc_queue+0x546/0x680 [ 1596.653922][ T8830] __blk_mq_alloc_disk+0x197/0x390 [ 1596.659552][ T8830] nbd_dev_add+0x499/0xb50 [ 1596.664481][ T8830] nbd_init+0x168/0x1f0 [ 1596.669147][ T8830] do_one_initcall+0x250/0x870 [ 1596.674420][ T8830] do_initcall_level+0x104/0x190 [ 1596.679947][ T8830] do_initcalls+0x59/0xa0 [ 1596.684780][ T8830] kernel_init_freeable+0x2a6/0x3e0 [ 1596.690487][ T8830] kernel_init+0x1d/0x1d0 [ 1596.695328][ T8830] ret_from_fork+0x51e/0xb90 [ 1596.700431][ T8830] ret_from_fork_asm+0x1a/0x30 [ 1596.705701][ T8830] [ 1596.705701][ T8830] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1596.712900][ T8830] __lock_acquire+0x15a5/0x2cf0 [ 1596.718272][ T8830] lock_acquire+0x106/0x350 [ 1596.723296][ T8830] fs_reclaim_acquire+0x71/0x100 [ 1596.728823][ T8830] __kmalloc_cache_noprof+0x40/0x660 [ 1596.734610][ T8830] __ipv6_dev_mc_inc+0x44f/0xa50 [ 1596.740063][ T8830] ipv6_add_dev+0xe52/0x13c0 [ 1596.745161][ T8830] addrconf_notify+0x771/0x1050 [ 1596.750515][ T8830] notifier_call_chain+0x1ad/0x3d0 [ 1596.756133][ T8830] register_netdevice+0x173a/0x1cf0 [ 1596.761847][ T8830] nsim_create+0xb92/0x1100 [ 1596.766872][ T8830] __nsim_dev_port_add+0x72a/0xb50 [ 1596.772578][ T8830] nsim_dev_port_add_all+0x37/0xf0 [ 1596.778196][ T8830] nsim_drv_probe+0x905/0xc20 [ 1596.783386][ T8830] really_probe+0x267/0xaf0 [ 1596.788484][ T8830] __driver_probe_device+0x18c/0x320 [ 1596.794271][ T8830] driver_probe_device+0x4f/0x240 [ 1596.799801][ T8830] __device_attach_driver+0x279/0x430 [ 1596.805777][ T8830] bus_for_each_drv+0x258/0x2f0 [ 1596.811146][ T8830] __device_attach+0x2c5/0x450 [ 1596.816416][ T8830] device_initial_probe+0xa1/0xd0 [ 1596.821947][ T8830] bus_probe_device+0x12a/0x220 [ 1596.827318][ T8830] device_add+0x7b6/0xb70 [ 1596.832159][ T8830] new_device_store+0x37b/0x710 [ 1596.837606][ T8830] kernfs_fop_write_iter+0x3af/0x540 [ 1596.843407][ T8830] vfs_write+0x61d/0xb90 [ 1596.848150][ T8830] ksys_write+0x150/0x270 [ 1596.852985][ T8830] do_syscall_64+0x14d/0xf80 [ 1596.858088][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.864494][ T8830] [ 1596.864494][ T8830] other info that might help us debug this: [ 1596.864494][ T8830] [ 1596.874703][ T8830] Chain exists of: [ 1596.874703][ T8830] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 1596.874703][ T8830] [ 1596.887302][ T8830] Possible unsafe locking scenario: [ 1596.887302][ T8830] [ 1596.894733][ T8830] CPU0 CPU1 [ 1596.900088][ T8830] ---- ---- [ 1596.905457][ T8830] lock(&idev->mc_lock); [ 1596.909872][ T8830] lock(sk_lock-AF_INET6); [ 1596.916888][ T8830] lock(&idev->mc_lock); [ 1596.923732][ T8830] lock(fs_reclaim); [ 1596.927701][ T8830] [ 1596.927701][ T8830] *** DEADLOCK *** [ 1596.927701][ T8830] [ 1596.935827][ T8830] 9 locks held by syz-executor/8830: [ 1596.941093][ T8830] #0: ffff8880363ec410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1596.949971][ T8830] #1: ffff888075454c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1596.959707][ T8830] #2: ffff88802a37bd28 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1596.969700][ T8830] #3: ffffffff8f667de0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 1596.980042][ T8830] #4: ffff88803337c128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1596.989339][ T8830] #5: ffff888033378258 (&devlink->lock_key#15){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc20 [ 1596.999339][ T8830] #6: ffffffff8fdf6540 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x839/0x1100 [ 1597.008291][ T8830] #7: ffff888077d28d98 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: register_netdevice+0x1707/0x1cf0 [ 1597.019249][ T8830] #8: ffff88807bf96530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 1597.028901][ T8830] [ 1597.028901][ T8830] stack backtrace: [ 1597.034781][ T8830] CPU: 0 UID: 0 PID: 8830 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1597.034805][ T8830] Tainted: [L]=SOFTLOCKUP [ 1597.034811][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1597.034821][ T8830] Call Trace: [ 1597.034828][ T8830] [ 1597.034836][ T8830] dump_stack_lvl+0xe8/0x150 [ 1597.034862][ T8830] print_circular_bug+0x2e1/0x300 [ 1597.034881][ T8830] check_noncircular+0x12e/0x150 [ 1597.034900][ T8830] __lock_acquire+0x15a5/0x2cf0 [ 1597.034927][ T8830] ? rcu_is_watching+0x15/0xb0 [ 1597.034943][ T8830] ? trace_contention_end+0x3d/0x140 [ 1597.034960][ T8830] ? __mutex_lock+0x320/0x1420 [ 1597.034980][ T8830] ? __kmalloc_cache_noprof+0x40/0x660 [ 1597.034994][ T8830] lock_acquire+0x106/0x350 [ 1597.035013][ T8830] ? __kmalloc_cache_noprof+0x40/0x660 [ 1597.035029][ T8830] ? __pfx___mutex_lock+0x10/0x10 [ 1597.035047][ T8830] fs_reclaim_acquire+0x71/0x100 [ 1597.035062][ T8830] ? __kmalloc_cache_noprof+0x40/0x660 [ 1597.035076][ T8830] __kmalloc_cache_noprof+0x40/0x660 [ 1597.035090][ T8830] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 1597.035111][ T8830] __ipv6_dev_mc_inc+0x44f/0xa50 [ 1597.035132][ T8830] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 1597.035150][ T8830] ipv6_add_dev+0xe52/0x13c0 [ 1597.035171][ T8830] addrconf_notify+0x771/0x1050 [ 1597.035188][ T8830] notifier_call_chain+0x1ad/0x3d0 [ 1597.035207][ T8830] register_netdevice+0x173a/0x1cf0 [ 1597.035227][ T8830] ? dput+0x37/0x1a0 [ 1597.035250][ T8830] ? __pfx_register_netdevice+0x10/0x10 [ 1597.035269][ T8830] ? __debugfs_create_file+0x34f/0x400 [ 1597.035290][ T8830] ? debugfs_create_file_full+0x3f/0x60 [ 1597.035309][ T8830] nsim_create+0xb92/0x1100 [ 1597.035328][ T8830] __nsim_dev_port_add+0x72a/0xb50 [ 1597.035349][ T8830] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 1597.035372][ T8830] ? queue_delayed_work_on+0x171/0x1e0 [ 1597.035390][ T8830] nsim_dev_port_add_all+0x37/0xf0 [ 1597.035408][ T8830] nsim_drv_probe+0x905/0xc20 [ 1597.035425][ T8830] ? up_write+0x1ab/0x410 [ 1597.035443][ T8830] ? __pfx_nsim_drv_probe+0x10/0x10 [ 1597.035460][ T8830] ? kernfs_put+0x4bf/0x520 [ 1597.035479][ T8830] ? kernfs_create_link+0x187/0x200 [ 1597.035498][ T8830] ? driver_sysfs_add+0x1fe/0x210 [ 1597.035513][ T8830] ? __pfx_nsim_bus_probe+0x10/0x10 [ 1597.035527][ T8830] really_probe+0x267/0xaf0 [ 1597.035545][ T8830] __driver_probe_device+0x18c/0x320 [ 1597.035561][ T8830] driver_probe_device+0x4f/0x240 [ 1597.035577][ T8830] __device_attach_driver+0x279/0x430 [ 1597.035594][ T8830] bus_for_each_drv+0x258/0x2f0 [ 1597.035613][ T8830] ? __pfx___device_attach_driver+0x10/0x10 [ 1597.035629][ T8830] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1597.035651][ T8830] __device_attach+0x2c5/0x450 [ 1597.035671][ T8830] ? __pfx___device_attach+0x10/0x10 [ 1597.035687][ T8830] ? _raw_spin_unlock+0x28/0x50 [ 1597.035703][ T8830] device_initial_probe+0xa1/0xd0 [ 1597.035718][ T8830] bus_probe_device+0x12a/0x220 [ 1597.035736][ T8830] ? device_add+0x726/0xb70 [ 1597.035756][ T8830] device_add+0x7b6/0xb70 [ 1597.035778][ T8830] new_device_store+0x37b/0x710 [ 1597.035794][ T8830] ? __pfx_new_device_store+0x10/0x10 [ 1597.035808][ T8830] ? sysfs_file_kobj+0x1a/0x230 [ 1597.035825][ T8830] ? sysfs_file_kobj+0x1e4/0x230 [ 1597.035840][ T8830] ? sysfs_kf_write+0x166/0x260 [ 1597.035857][ T8830] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1597.035873][ T8830] kernfs_fop_write_iter+0x3af/0x540 [ 1597.035891][ T8830] vfs_write+0x61d/0xb90 [ 1597.035907][ T8830] ? __pfx_vfs_write+0x10/0x10 [ 1597.035921][ T8830] ? do_sys_openat2+0x14c/0x200 [ 1597.035939][ T8830] ? kmem_cache_free+0x182/0x650 [ 1597.035952][ T8830] ? fd_install+0x94/0x3d0 [ 1597.035975][ T8830] ksys_write+0x150/0x270 [ 1597.035989][ T8830] ? __pfx_ksys_write+0x10/0x10 [ 1597.036006][ T8830] do_syscall_64+0x14d/0xf80 [ 1597.036023][ T8830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.036038][ T8830] ? clear_bhb_loop+0x40/0x90 [ 1597.036054][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1597.036068][ T8830] RIP: 0033:0x7efd6475cfce [ 1597.036083][ T8830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1597.036096][ T8830] RSP: 002b:00007fff05751918 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1597.036112][ T8830] RAX: ffffffffffffffda RBX: 0000555589bce500 RCX: 00007efd6475cfce [ 1597.036123][ T8830] RDX: 0000000000000003 RSI: 00007fff057519a0 RDI: 0000000000000005 [ 1597.036133][ T8830] RBP: 00007efd64833540 R08: 0000000000000000 R09: 0000000000000000 [ 1597.036143][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1597.036152][ T8830] R13: 00007fff057519a0 R14: 00007efd65544620 R15: 0000000000000003 [ 1597.036168][ T8830] [ 1597.499571][ T5161] Bluetooth: hci0: command tx timeout [ 1597.508881][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.517583][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1597.528223][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.531640][ T8830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1597.536863][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.554338][ T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1597.582583][ T8830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1597.615532][ T8830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1597.637451][ T8830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1597.689808][ T8830] kthread_run failed with err -4 [ 1598.545547][ T9] usb 6-1: device descriptor read/all, error -71 [ 1598.725137][ T35] bridge_slave_1: left allmulticast mode [ 1598.731631][ T35] bridge_slave_1: left promiscuous mode [ 1598.738487][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.754967][ T35] bridge_slave_0: left allmulticast mode [ 1598.762180][ T35] bridge_slave_0: left promiscuous mode [ 1598.768800][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.861029][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.871833][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.884609][ T35] bond0 (unregistering): Released all slaves [ 1599.029395][ T35] hsr_slave_0: left promiscuous mode [ 1599.036712][ T35] hsr_slave_1: left promiscuous mode [ 1599.042704][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.051477][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.143965][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1599.157047][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1599.624931][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.658390][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.738980][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.787581][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.893553][ T35] bond0: left allmulticast mode [ 1599.898919][ T35] : left allmulticast mode [ 1599.903595][ T35] bond_slave_1: left allmulticast mode [ 1599.909314][ T35] : port 3(bond0) entered disabled state [ 1599.918558][ T35] bridge_slave_1: left allmulticast mode [ 1599.924427][ T35] bridge_slave_1: left promiscuous mode [ 1599.930162][ T35] : port 2(bridge_slave_1) entered disabled state [ 1599.939066][ T35] bridge_slave_0: left allmulticast mode [ 1599.945699][ T35] bridge_slave_0: left promiscuous mode [ 1599.951481][ T35] : port 1(bridge_slave_0) entered disabled state [ 1599.960289][ T35] dvmrp0: left allmulticast mode [ 1600.037311][ T35] bond0 (unregistering): (slave 30): Releasing backup interface [ 1600.045934][ T35] : left promiscuous mode [ 1600.052209][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.061417][ T35] bond_slave_1: left promiscuous mode [ 1600.067478][ T35] bond0 (unregistering): Released all slaves [ 1600.199030][ T35] IPVS: stopping backup sync thread 29087 ... [ 1600.331489][ T35] hsr_slave_0: left promiscuous mode [ 1600.338039][ T35] hsr_slave_1: left promiscuous mode [ 1600.344074][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1600.351976][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.362471][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1600.370229][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1600.378924][ T35] veth1_macvtap: left promiscuous mode [ 1600.384643][ T35] veth0_macvtap: left promiscuous mode [ 1600.390248][ T35] veth1_vlan: left promiscuous mode [ 1600.395490][ T35] veth0_vlan: left promiscuous mode [ 1600.495527][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1600.506645][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1600.889447][ T35] IPVS: stop unused estimator thread 0... [ 1604.148325][ T5213] udevd[5213]: worker [8139] /devices/virtual/block/nbd1 timeout; kill it [ 1604.157363][ T5213] udevd[5213]: seq 44982 '/devices/virtual/block/nbd1' killed