last executing test programs: 11.338532338s ago: executing program 2 (id=63): capset(&(0x7f0000000040)={0x20080522}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="479374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 11.059611247s ago: executing program 2 (id=67): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000040)=""/23, 0x17}], 0x10, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2100, &(0x7f0000003700)={0x77359400}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x000!\x00\x00\x00D'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="001611000000dc"], 0x0, 0x0, 0x0, 0x0}) 7.072107968s ago: executing program 2 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x0, @time={0xf5}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}], 0x70) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080), 0x4) 6.896006772s ago: executing program 2 (id=79): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002380)={'hsr0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000004c0)="20140000000000000000d7008100e53c892f", 0x12, 0x80800, &(0x7f0000000240)={0x11, 0x17, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x0) 5.53333901s ago: executing program 1 (id=88): ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000040)={0xefffffff, "a055babd9b8c29abbdd772a44c4518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x6, 0x5fe, 0x2, 0x4, 0xff7dfff6, 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f00000000c0)=0x18) r2 = socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=@newtaction={0x44, 0x31, 0x69b6754e5abcd1c9, 0x70bd28, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x3}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) read$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1000000000000104, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r7], 0x1, 0x800, 0x0, 0xffffffffffffffff}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000180)=0x3) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) 3.735969561s ago: executing program 2 (id=89): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819) sendto$inet6(r4, &(0x7f0000000400)="05", 0x1, 0x44000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xa000000003, 0x10000, 0x0, 0x52cd, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x400000000000e, 0x0, 0x7, 0x885110f, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4044004) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x30) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_usb_disconnect(r9) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[], 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1000, 0x1000000000}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) 3.167312753s ago: executing program 0 (id=92): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2c00) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 3) 3.057684046s ago: executing program 0 (id=93): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x600, 0x0, 0x0, 0x0}) 3.036468459s ago: executing program 3 (id=94): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="479374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.775392607s ago: executing program 0 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100030a01040000000000000000020000050900010073797a3000000000f8ff0940000000020900030073797a300000000014000000110001000000000000000000000000030000001efab48cd8f65721741aa7eb1c9e62e78ae824820633b0480682d7e98b070a"], 0x5c}}, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x204, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xc0, 0x5}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x40}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x68e389ac}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcdd}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4005}, 0x2000c100) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) (fail_nth: 3) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.665316105s ago: executing program 3 (id=96): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x20, r2, 0x201, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 2.599659634s ago: executing program 3 (id=97): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x98) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='befs\x00', 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x1, 0x9, 0x2e, @mcast2, @mcast2, 0x10, 0x700, 0x52c0, 0x7}}) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4004, r2, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000080)='\'\x00') read$FUSE(r5, &(0x7f0000004500)={0x2020}, 0x2020) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$unix(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1}, 0x20) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = accept4$inet6(r1, &(0x7f0000000140), &(0x7f0000000280)=0x1c, 0x80000) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x8) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000)) 2.383284059s ago: executing program 1 (id=98): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000007060306000000000000000000000004050001000700000009000200"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48440) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0xc0a85320, &(0x7f00000000c0)={0x80}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="8a746972294802a62c67", @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESOCT=r1]) syz_fuse_handle_req(r6, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x8000004, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x8ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r2) write$UHID_INPUT(r7, &(0x7f0000002040)={0x7, {"a2e3ad21ed0d52f91b5d360987f70e06d038e7ff7fc6e5539b0d47078b089b3907356d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ae96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9fcf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d70c00711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998e8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf25090000100e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000100800090001000000303c2fc987aaa4a93a964b4de543b02d863bd0347368f766f6c4d0d409fdaf898f107e3488e74a58f4481d92b41507703ca0c6071325e1cdf0b79ffce16af05475ae3e718432b8af4786a69eda59e378fcfbacba8229a5aca1572111cc336977c4da0e521d948319eb01d06921e8d89d77d9a9fa20e170382cc53d7454430121b68ab6c912f4188785a1d15c01a4869bb5c27a1e4d5f01bda5c493f4073ee8e0c2809880a3d2ae89b325d4541be06f6ff15e22d5b5d4923bf95c980428ddc2bfb825be8b5f81e6fa794f108e643a999ee4b73f4b9598486757affa0477a0074c78df55f8ec57cc97087d3d104565183dbb7a1aa53ddde85b31e155d41558a04be6d98e869529f57f3909967701f3c3f1730bf6f93c56dac3f2cfa0344bfcfada8143917d736b0b222af25b91411bf3b6ea6f7ed27c3a216d93058a7f3bbf0614af9bcb1ababe120f870ce2ef5165717781d8e1795ede41fdaab24afbec8373d19c64dbb37dee5743a387ec12e2fc1307d067f40ef573b82bdd926364f36e27886d9951525ccf3aecbd9aa246d83aa190fedb40909f8fa507016df18d0e8fca6f12d6b02661df1e58bc0687a026019de438ba8b8f3028c6f82ed17a8d8d933b9f262c1cf67a43c937e83ea7cb91671f28699eaff1594637c888ab7f6324e0a054a4654e567743281b4ce2743ade00128dc76529ec7cb07617cfba277e8c75d55c620912aaef94adc802b8884530"], 0x44}, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_STATFS(r8, &(0x7f00000003c0)={0x60, 0x8000000000000001, 0x0, {{0x6, 0x7, 0x3, 0x0, 0x171e, 0x10000, 0x7}}}, 0x60) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x80000001, 0xa2c65) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) r12 = syz_open_dev$video(&(0x7f0000000180), 0x42, 0x400001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r11, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r12, {0x8}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffff7, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 2.059987195s ago: executing program 0 (id=99): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0}, 0x40001) r1 = socket$inet(0x2, 0x800, 0x3ff) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000240)) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@allocspi={0x100, 0x16, 0x1, 0x40, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa0, 0xa0}, {@in6=@mcast2, 0x0, 0x33}, @in6=@remote, {0x0, 0xffffffffffffffff, 0x400, 0x0, 0x2, 0xfffffffffffffff1, 0x3}, {0xffffffffffffffff, 0xfffffffffffffffc, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x80000000}, [@proto={0x5, 0x19, 0x33}]}, 0x100}}, 0x0) (fail_nth: 11) 1.860167143s ago: executing program 0 (id=100): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x7ffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="c1", 0x1}], 0x1}}], 0x2, 0x0) 1.859892757s ago: executing program 3 (id=101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000400)={0x1000000, 0x0, 0x1000000, 0x0, 0x0, r1, &(0x7f0000000580)="d6", 0x1}]) 1.719389105s ago: executing program 0 (id=102): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000040)=""/23, 0x17}], 0x10, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2100, &(0x7f0000003700)={0x77359400}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x000!\x00\x00\x00D'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1.421954179s ago: executing program 3 (id=103): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e1f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd340}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)={r1, 0xe23a, 0x20, 0x10001}, &(0x7f0000000840)=0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000640)="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", 0xd0f}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f00000018c0)}}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.331782974s ago: executing program 1 (id=104): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="479374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.231483643s ago: executing program 1 (id=105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x24, r2, 0x201, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 897.062141ms ago: executing program 1 (id=106): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = gettid() syz_clone3(&(0x7f0000006240)={0x1000000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000006200)=[r0], 0x1}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) 401.715517ms ago: executing program 1 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05", @ANYRES8=r0, @ANYRES16=r2], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x302, 0x0, {}, {}, {}, 0x1, @can={{}, 0x6, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "cd2984bd1ca44c226af51609de050000000000f2170e65e3f50327e42200000000000000000000020d000000001e00", 0x3c}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100001}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="2e003300d0000000ffffffffffff08021100000050505050505020000004"], 0x4c}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3000000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r5, 0x2}}, 0x18) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8002}, {{0x0, 0x0, 0x0}, 0x404}], 0x3, 0x0, 0x0) 127.256013ms ago: executing program 2 (id=108): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000040)=""/23, 0x17}], 0x10, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2100, &(0x7f0000003700)={0x77359400}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x000!\x00\x00\x00D'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="001611000000dc"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 0s ago: executing program 3 (id=109): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x18501, 0x0) brk(0x800000000002) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)={0x4, 0x0, [{0x0, 0x5, 0x7, 0xffffff04, 0x8000, 0x7fffffff, 0xfff}, {0xd, 0x101, 0x4, 0x6, 0x14b3614f, 0x7, 0x3}, {0x1, 0x2, 0x4, 0x1, 0xfffffffa, 0xf, 0x4}, {0xa821289f63345b4, 0x0, 0x7, 0x4, 0x1, 0x2, 0x6}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0xffffffff) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0xfff) syz_open_dev$ptys(0xc, 0x3, 0x1) openat$audio(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r6 = socket(0x1d, 0x2, 0x6) recvmsg$unix(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001e80)={'ip6tnl0\x00', &(0x7f0000001e00)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6, 0x6, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7, 0x8000, 0x0, 0x4dd}}) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0xdeef5fff, 0x1000, 0xe, 0x1}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 76.476754][ T5594] cgroup: Unknown subsys name 'net' [ 76.718108][ T5594] cgroup: Unknown subsys name 'cpuset' [ 76.773210][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.518245][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.904857][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.936090][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.938488][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.946354][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.951453][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.985605][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.995360][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.996906][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.002184][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.040049][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.200666][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.222004][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.238656][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.243417][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.244133][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.338017][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.366246][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.367343][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.380820][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.381987][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.117050][ T60] Bluetooth: hci0: command tx timeout [ 83.117519][ T60] Bluetooth: hci1: command tx timeout [ 83.216385][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.216690][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.219979][ T5610] bridge_slave_0: entered allmulticast mode [ 83.247686][ T5610] bridge_slave_0: entered promiscuous mode [ 83.295891][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.296127][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.296527][ T5610] bridge_slave_1: entered allmulticast mode [ 83.298472][ T5610] bridge_slave_1: entered promiscuous mode [ 83.335228][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.335391][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.335564][ T5606] bridge_slave_0: entered allmulticast mode [ 83.337318][ T5606] bridge_slave_0: entered promiscuous mode [ 83.354766][ T60] Bluetooth: hci2: command tx timeout [ 83.401412][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.401604][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.401802][ T5606] bridge_slave_1: entered allmulticast mode [ 83.424539][ T5606] bridge_slave_1: entered promiscuous mode [ 83.500851][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.512619][ T60] Bluetooth: hci3: command tx timeout [ 83.543406][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.564602][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.603570][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.786113][ T5610] team0: Port device team_slave_0 added [ 83.820070][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.820464][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.820736][ T5614] bridge_slave_0: entered allmulticast mode [ 83.830145][ T5614] bridge_slave_0: entered promiscuous mode [ 83.851012][ T5610] team0: Port device team_slave_1 added [ 83.851396][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.851569][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.851727][ T5613] bridge_slave_0: entered allmulticast mode [ 83.865157][ T5613] bridge_slave_0: entered promiscuous mode [ 83.882187][ T5606] team0: Port device team_slave_0 added [ 83.882866][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.883191][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.883479][ T5614] bridge_slave_1: entered allmulticast mode [ 83.891028][ T5614] bridge_slave_1: entered promiscuous mode [ 83.918246][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.918455][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.918654][ T5613] bridge_slave_1: entered allmulticast mode [ 83.923875][ T5613] bridge_slave_1: entered promiscuous mode [ 83.937607][ T5606] team0: Port device team_slave_1 added [ 84.039969][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.039981][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.039996][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.099581][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.101298][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.101309][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.101324][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.109239][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.117201][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.117219][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.117252][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.132239][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.156633][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.158829][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.158846][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.158870][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.298902][ T5614] team0: Port device team_slave_0 added [ 84.326606][ T5613] team0: Port device team_slave_0 added [ 84.331306][ T5614] team0: Port device team_slave_1 added [ 84.360300][ T5613] team0: Port device team_slave_1 added [ 84.401070][ T5610] hsr_slave_0: entered promiscuous mode [ 84.408597][ T5610] hsr_slave_1: entered promiscuous mode [ 84.478302][ T5606] hsr_slave_0: entered promiscuous mode [ 84.479782][ T5606] hsr_slave_1: entered promiscuous mode [ 84.481001][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 84.481101][ T5606] Cannot create hsr debugfs directory [ 84.505481][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.505493][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.505508][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.508305][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.508317][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.508332][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.511449][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.511460][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.511475][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.539994][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.540013][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.540038][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.192615][ T60] Bluetooth: hci1: command tx timeout [ 85.193355][ T60] Bluetooth: hci0: command tx timeout [ 85.241100][ T5614] hsr_slave_0: entered promiscuous mode [ 85.242500][ T5614] hsr_slave_1: entered promiscuous mode [ 85.244744][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 85.244770][ T5614] Cannot create hsr debugfs directory [ 85.271544][ T5613] hsr_slave_0: entered promiscuous mode [ 85.273735][ T5613] hsr_slave_1: entered promiscuous mode [ 85.276057][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 85.276084][ T5613] Cannot create hsr debugfs directory [ 85.432685][ T60] Bluetooth: hci2: command tx timeout [ 85.603557][ T60] Bluetooth: hci3: command tx timeout [ 86.000467][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.055204][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.064681][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.107501][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.111738][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.151963][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.185980][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.228460][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.380203][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.410279][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.425179][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.486088][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.489575][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.528133][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.558898][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.586821][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.733852][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.775253][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.789911][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.827824][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.830911][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.856249][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.974669][ T10] cfg80211: failed to load regulatory.db [ 86.997495][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.049818][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.272594][ T60] Bluetooth: hci0: command tx timeout [ 87.272622][ T60] Bluetooth: hci1: command tx timeout [ 87.330997][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.360345][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.376619][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.407355][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.418865][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.464579][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.470967][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.499301][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.522705][ T5607] Bluetooth: hci2: command tx timeout [ 87.660176][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.683889][ T5607] Bluetooth: hci3: command tx timeout [ 87.788467][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.831496][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.859579][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.859756][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.948448][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.950565][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.040279][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.078159][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.123999][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.126496][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.187503][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.187634][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.274556][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.308138][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.339451][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.341898][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.401089][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.401214][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.548611][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.620568][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.620661][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.719416][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.719631][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.352574][ T5607] Bluetooth: hci1: command tx timeout [ 89.352607][ T5607] Bluetooth: hci0: command tx timeout [ 89.596501][ T60] Bluetooth: hci2: command tx timeout [ 89.611757][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.752947][ T60] Bluetooth: hci3: command tx timeout [ 90.084155][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.119784][ T5610] veth0_vlan: entered promiscuous mode [ 90.229189][ T5610] veth1_vlan: entered promiscuous mode [ 90.254795][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.483503][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.525820][ T5606] veth0_vlan: entered promiscuous mode [ 90.548024][ T5610] veth0_macvtap: entered promiscuous mode [ 90.578129][ T5610] veth1_macvtap: entered promiscuous mode [ 90.607997][ T5606] veth1_vlan: entered promiscuous mode [ 90.616630][ T5613] veth0_vlan: entered promiscuous mode [ 90.686294][ T5613] veth1_vlan: entered promiscuous mode [ 90.695057][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.735185][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.784587][ T5614] veth0_vlan: entered promiscuous mode [ 90.791233][ T1126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.810996][ T1126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.835824][ T1126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.842633][ T1126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.844701][ T5606] veth0_macvtap: entered promiscuous mode [ 90.936407][ T5614] veth1_vlan: entered promiscuous mode [ 90.952156][ T5606] veth1_macvtap: entered promiscuous mode [ 91.069517][ T5613] veth0_macvtap: entered promiscuous mode [ 91.210940][ T5613] veth1_macvtap: entered promiscuous mode [ 91.326893][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.423240][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.497475][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.497501][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.506348][ T5614] veth0_macvtap: entered promiscuous mode [ 91.521287][ T4639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.534876][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.549812][ T4639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.557493][ T4639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.576854][ T4639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.587522][ T5614] veth1_macvtap: entered promiscuous mode [ 91.608409][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.707590][ T4639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.707670][ T4639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.707684][ T4639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.739095][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.760740][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.848777][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.867800][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.038650][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.235765][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.283534][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.287236][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.290279][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.586584][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.586603][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.913331][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.913350][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.166032][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.166052][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.411058][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.411074][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.524946][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.524965][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.839815][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.839837][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.116375][ T5767] IPVS: Unknown mcast interface: nr0 [ 94.402272][ T5772] tipc: Started in network mode [ 94.402301][ T5772] tipc: Node identity 2, cluster identity 3142 [ 94.402315][ T5772] tipc: Node number set to 2 [ 94.437326][ T5772] tipc: Cannot configure node identity twice [ 94.607106][ T5770] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.143241][ T5773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5'. [ 95.779679][ T5701] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.852636][ T5619] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.157045][ T5701] usb 1-1: Using ep0 maxpacket: 8 [ 96.210260][ T38] audit: type=1326 audit(1778897970.585:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5796 comm="syz.3.9" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5922ace59 code=0x0 [ 96.280679][ T5619] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.280713][ T5619] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.280734][ T5619] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.280804][ T5619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 96.280835][ T5619] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 96.287124][ T5701] usb 1-1: config 133 has an invalid interface number: 54 but max is 0 [ 96.287166][ T5701] usb 1-1: config 133 has no interface number 0 [ 96.287200][ T5701] usb 1-1: config 133 interface 54 has no altsetting 0 [ 96.336732][ T5701] usb 1-1: New USB device found, idVendor=0930, idProduct=0227, bcdDevice=46.61 [ 96.336790][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.336811][ T5701] usb 1-1: Product: syz [ 96.336828][ T5701] usb 1-1: Manufacturer: syz [ 96.336844][ T5701] usb 1-1: SerialNumber: syz [ 96.368426][ T5619] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.368484][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.368507][ T5619] usb 3-1: Product: syz [ 96.368522][ T5619] usb 3-1: Manufacturer: syz [ 97.089633][ T5619] cdc_wdm 3-1:1.0: skipping garbage [ 97.089655][ T5619] cdc_wdm 3-1:1.0: skipping garbage [ 97.160405][ T5619] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 97.160443][ T5619] cdc_wdm 3-1:1.0: Unknown control protocol [ 98.118243][ T32] usb 3-1: USB disconnect, device number 2 [ 98.639180][ T5701] usb 1-1: USB disconnect, device number 2 [ 98.990045][ T5619] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.264256][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 99.266416][ T5619] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 99.266447][ T5619] usb 4-1: config 0 has no interface number 0 [ 99.266488][ T5619] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.266518][ T5619] usb 4-1: config 0 interface 85 has no altsetting 0 [ 99.345002][ T5619] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 99.345046][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.345065][ T5619] usb 4-1: Product: syz [ 99.345079][ T5619] usb 4-1: Manufacturer: syz [ 99.345094][ T5619] usb 4-1: SerialNumber: syz [ 99.516897][ T5619] usb 4-1: config 0 descriptor?? [ 99.524338][ T5340] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 99.884843][ T5340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 99.884893][ T5340] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 99.884917][ T5340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.954806][ T5619] appletouch 4-1:0.85: Geyser mode initialized. [ 100.000480][ T5619] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input5 [ 100.048062][ T5340] usb 2-1: config 0 descriptor?? [ 100.049307][ T5821] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 100.342513][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.343071][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.737427][ T5619] usb 4-1: USB disconnect, device number 2 [ 101.213909][ T5340] ath6kl: Failed to submit usb control message: -110 [ 101.213974][ T5340] ath6kl: unable to send the bmi data to the device: -110 [ 101.213988][ T5340] ath6kl: Unable to send get target info: -110 [ 101.265072][ T5340] ath6kl: Failed to init ath6kl core: -110 [ 101.281202][ T5340] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 101.576880][ T5619] appletouch 4-1:0.85: input: appletouch disconnected [ 101.861275][ T5701] usb 2-1: USB disconnect, device number 2 [ 101.881174][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.881337][ T5847] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.930326][ T5853] netlink: 'syz.3.24': attribute type 1 has an invalid length. [ 101.930354][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24'. [ 102.045844][ T5847] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.171410][ T5847] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 102.171575][ T5847] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.275817][ T5847] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 102.279665][ T5860] FAULT_INJECTION: forcing a failure. [ 102.279665][ T5860] name failslab, interval 1, probability 0, space 0, times 1 [ 102.279718][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 102.279736][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 102.279751][ T5860] Call Trace: [ 102.279758][ T5860] [ 102.279765][ T5860] dump_stack_lvl+0xe8/0x150 [ 102.279784][ T5860] should_fail_ex+0x46b/0x600 [ 102.279803][ T5860] should_failslab+0xa8/0x100 [ 102.279822][ T5860] kmem_cache_alloc_noprof+0x87/0x680 [ 102.279838][ T5860] ? __kernfs_new_node+0xea/0x980 [ 102.279857][ T5860] __kernfs_new_node+0xea/0x980 [ 102.279875][ T5860] ? __pfx___kernfs_new_node+0x10/0x10 [ 102.279889][ T5860] ? kernfs_root+0x1c/0x230 [ 102.279906][ T5860] ? kernfs_root+0x1c/0x230 [ 102.279919][ T5860] ? kernfs_root+0x1c/0x230 [ 102.279935][ T5860] kernfs_new_node+0x102/0x210 [ 102.279952][ T5860] kernfs_create_link+0xa7/0x200 [ 102.279965][ T5860] sysfs_do_create_link_sd+0x83/0x110 [ 102.279981][ T5860] device_add_class_symlinks+0xb9/0x240 [ 102.280000][ T5860] device_add+0x475/0xb90 [ 102.280020][ T5860] ? device_initialize+0x3ac/0x490 [ 102.280036][ T5860] netdev_register_kobject+0x178/0x310 [ 102.280052][ T5860] register_netdevice+0x14b6/0x1f10 [ 102.280077][ T5860] ? __pfx_register_netdevice+0x10/0x10 [ 102.280092][ T5860] ? alloc_netdev_mqs+0xd33/0x1260 [ 102.280107][ T5860] ? alloc_netdev_mqs+0xee1/0x1260 [ 102.280117][ T5860] ? __ip_tunnel_create+0x3bb/0x560 [ 102.280132][ T5860] __ip_tunnel_create+0x3e8/0x560 [ 102.280145][ T5860] ? __pfx___ip_tunnel_create+0x10/0x10 [ 102.280156][ T5860] ? bpf_lsm_capable+0x9/0x20 [ 102.280170][ T5860] ? security_capable+0x7e/0x2c0 [ 102.280189][ T5860] ip_tunnel_ctl+0x4e2/0xc30 [ 102.280210][ T5860] ipgre_tunnel_ctl+0x2ef/0x5d0 [ 102.280229][ T5860] ip_tunnel_siocdevprivate+0x125/0x1d0 [ 102.280242][ T5860] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 102.280253][ T5860] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.280272][ T5860] ? full_name_hash+0x92/0xe0 [ 102.280289][ T5860] dev_ifsioc+0xb6b/0x1330 [ 102.280308][ T5860] dev_ioctl+0x84c/0x1150 [ 102.280324][ T5860] sock_ioctl+0x762/0x7f0 [ 102.280337][ T5860] ? __pfx_sock_ioctl+0x10/0x10 [ 102.280350][ T5860] ? __fget_files+0x3a6/0x420 [ 102.280363][ T5860] ? __fget_files+0x2a/0x420 [ 102.280378][ T5860] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.280390][ T5860] ? __pfx_sock_ioctl+0x10/0x10 [ 102.280402][ T5860] __se_sys_ioctl+0xff/0x170 [ 102.280418][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.280430][ T5860] do_syscall_64+0x15f/0xf80 [ 102.280442][ T5860] ? trace_irq_disable+0x3b/0x140 [ 102.280459][ T5860] ? clear_bhb_loop+0x40/0x90 [ 102.280473][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.280484][ T5860] RIP: 0033:0x7fd5922ace59 [ 102.280501][ T5860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.280511][ T5860] RSP: 002b:00007fd5904fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.280525][ T5860] RAX: ffffffffffffffda RBX: 00007fd592525fa0 RCX: 00007fd5922ace59 [ 102.280533][ T5860] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 102.280541][ T5860] RBP: 00007fd5904fe090 R08: 0000000000000000 R09: 0000000000000000 [ 102.280548][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.280555][ T5860] R13: 00007fd592526038 R14: 00007fd592525fa0 R15: 00007ffe9c48efb8 [ 102.280571][ T5860] [ 102.315204][ T60] Bluetooth: hci3: command tx timeout [ 102.601802][ T5847] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 102.601923][ T5847] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.770304][ T5847] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 102.891995][ T5847] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.892113][ T5847] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.961274][ T5847] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.370506][ T5701] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.523550][ T5701] usb 4-1: device descriptor read/64, error -71 [ 103.676586][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.724606][ T5881] capability: warning: `syz.0.33' uses deprecated v2 capabilities in a way that may be insecure [ 103.834433][ T5701] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.897735][ T5883] netlink: 260 bytes leftover after parsing attributes in process `syz.1.34'. [ 103.962510][ T5701] usb 4-1: device descriptor read/64, error -71 [ 103.985817][ T5619] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.075261][ T5701] usb usb4-port1: attempt power cycle [ 104.135579][ T5619] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.135613][ T5619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.135633][ T5619] usb 1-1: config 0 has no interface number 0 [ 104.162636][ T5619] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 104.162673][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.162694][ T5619] usb 1-1: Product: syz [ 104.162708][ T5619] usb 1-1: Manufacturer: syz [ 104.162723][ T5619] usb 1-1: SerialNumber: syz [ 104.221804][ T5619] usb 1-1: config 0 descriptor?? [ 104.232578][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.249815][ T5619] cx231xx 1-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 104.249851][ T5619] cx231xx 1-1:0.1: Not found matching IAD interface [ 104.466164][ T5619] usb 1-1: USB disconnect, device number 3 [ 104.488548][ T10] IPVS: starting estimator thread 0... [ 104.492731][ T5701] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.514860][ T5701] usb 4-1: device descriptor read/8, error -71 [ 104.582753][ T5891] IPVS: using max 15 ests per chain, 36000 per kthread [ 104.612574][ T5340] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 104.632630][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.785364][ T5701] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 104.804168][ T5701] usb 4-1: device descriptor read/8, error -71 [ 104.828328][ T5340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 104.828379][ T5340] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 104.828403][ T5340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.867578][ T5340] usb 3-1: config 0 descriptor?? [ 104.879294][ T5889] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 104.921306][ T5701] usb usb4-port1: unable to enumerate USB device [ 104.952978][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.101486][ T5889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.112599][ T5889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.263920][ T5340] ath6kl: Failed to submit usb control message: -71 [ 105.263975][ T5340] ath6kl: unable to send the bmi data to the device: -71 [ 105.263993][ T5340] ath6kl: Unable to send get target info: -71 [ 105.304935][ T5340] ath6kl: Failed to init ath6kl core: -71 [ 105.306346][ T5340] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 105.394735][ T5340] usb 3-1: USB disconnect, device number 3 [ 105.493651][ T5903] IPVS: Unknown mcast interface: nr0 [ 105.755723][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.313518][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.497401][ T32] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 106.624992][ T32] usb 1-1: device descriptor read/64, error -71 [ 106.719628][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.753680][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.51'. [ 106.882588][ T32] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 107.032641][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.032775][ T32] usb 1-1: device descriptor read/64, error -71 [ 107.143905][ T32] usb usb1-port1: attempt power cycle [ 107.169413][ T5943] IPVS: Unknown mcast interface: nr0 [ 107.194773][ T5701] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 107.344418][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 107.344474][ T5701] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 107.344493][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.381262][ T5701] usb 4-1: config 0 descriptor?? [ 107.406821][ T5935] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 107.512763][ T32] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 107.533462][ T32] usb 1-1: device descriptor read/8, error -71 [ 107.554207][ T5779] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.586427][ T5949] netlink: 'syz.1.58': attribute type 5 has an invalid length. [ 107.586449][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 107.633267][ T5935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.636151][ T5935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.702498][ T5779] usb 3-1: Using ep0 maxpacket: 16 [ 107.704709][ T5779] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 107.707742][ T5779] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 107.707772][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.707791][ T5779] usb 3-1: Product: syz [ 107.707806][ T5779] usb 3-1: Manufacturer: syz [ 107.707820][ T5779] usb 3-1: SerialNumber: syz [ 107.741068][ T5779] usb 3-1: config 0 descriptor?? [ 107.785071][ T32] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 107.803677][ T32] usb 1-1: device descriptor read/8, error -71 [ 107.834118][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.834391][ T5779] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 107.859949][ T5779] usb 3-1: Detected FT232B [ 107.912941][ T32] usb usb1-port1: unable to enumerate USB device [ 108.085070][ T5779] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 108.095279][ T5779] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 108.326244][ T5779] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 108.370397][ T5701] ath6kl: Failed to submit usb control message: -71 [ 108.370445][ T5701] ath6kl: unable to send the bmi data to the device: -71 [ 108.370460][ T5701] ath6kl: Unable to send get target info: -71 [ 108.394881][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.408777][ T5701] ath6kl: Failed to init ath6kl core: -71 [ 108.419522][ T5779] usb 3-1: USB disconnect, device number 4 [ 108.427664][ T5701] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 108.465116][ T5701] usb 4-1: USB disconnect, device number 7 [ 108.609876][ T5954] Bluetooth: MGMT ver 1.23 [ 108.701712][ T5779] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 108.708499][ T5779] ftdi_sio 3-1:0.0: device disconnected [ 108.792943][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.920066][ T5960] ======================================================= [ 108.920066][ T5960] WARNING: The mand mount option has been deprecated and [ 108.920066][ T5960] and is ignored by this kernel. Remove the mand [ 108.920066][ T5960] option from the mount to silence this warning. [ 108.920066][ T5960] ======================================================= [ 109.116612][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.138228][ T5965] IPVS: Unknown mcast interface: nr0 [ 109.224562][ T5968] process 'syz.3.65' launched '/dev/fd/4' with NULL argv: empty string added [ 109.782620][ T5619] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.918949][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.933828][ T5619] usb 3-1: Using ep0 maxpacket: 32 [ 109.940325][ T5619] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 109.940354][ T5619] usb 3-1: config 0 has no interface number 0 [ 109.940401][ T5619] usb 3-1: config 0 interface 12 has no altsetting 0 [ 109.969679][ T5619] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.969768][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.969789][ T5619] usb 3-1: Product: syz [ 109.969804][ T5619] usb 3-1: Manufacturer: syz [ 109.969819][ T5619] usb 3-1: SerialNumber: syz [ 109.987210][ T5619] usb 3-1: config 0 descriptor?? [ 110.072950][ T5340] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 110.222471][ T5340] usb 2-1: Invalid ep0 maxpacket: 32 [ 110.362514][ T5340] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 110.462563][ T5700] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 110.472567][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.512494][ T5340] usb 2-1: Invalid ep0 maxpacket: 32 [ 110.517225][ T5340] usb usb2-port1: attempt power cycle [ 110.615183][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 110.615242][ T5700] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 110.615267][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.650453][ T5700] usb 4-1: config 0 descriptor?? [ 110.658155][ T5982] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 110.879957][ T5982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.882091][ T5982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.882708][ T5340] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 110.906683][ T5340] usb 2-1: Invalid ep0 maxpacket: 32 [ 111.065993][ T5340] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 111.114186][ T5340] usb 2-1: Invalid ep0 maxpacket: 32 [ 111.214820][ T5340] usb usb2-port1: unable to enumerate USB device [ 111.355391][ T5700] ath6kl: Failed to submit usb control message: -71 [ 111.355443][ T5700] ath6kl: unable to send the bmi data to the device: -71 [ 111.355457][ T5700] ath6kl: Unable to send get target info: -71 [ 111.382913][ T5700] ath6kl: Failed to init ath6kl core: -71 [ 111.384354][ T5700] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 111.467637][ T5700] usb 4-1: USB disconnect, device number 8 [ 111.772465][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 111.944094][ T5982] syz.3.70 (5982) used greatest stack depth: 18784 bytes left [ 112.480336][ T37] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.596642][ T5619] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 112.596704][ T5619] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 112.596825][ T5619] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 112.596920][ T5619] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 112.645733][ T5619] usb 3-1: USB disconnect, device number 5 [ 112.664412][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 112.667583][ T37] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.667613][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 112.667630][ T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59378, setting to 1024 [ 112.671116][ T37] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 112.671145][ T37] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 112.671158][ T37] usb 4-1: Product: syz [ 112.671168][ T37] usb 4-1: SerialNumber: syz [ 112.822272][ T37] usb 4-1: config 0 descriptor?? [ 112.827852][ T5988] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 112.858425][ T37] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 112.882535][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.030744][ T5700] usb 4-1: USB disconnect, device number 9 [ 113.574609][ T6003] could not allocate digest TFM handle tgr128 [ 113.725353][ T6014] binder: 6012:6014 ioctl c0306201 200000000680 returned -14 [ 113.852640][ T37] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 113.893788][ T5619] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.982598][ T37] usb 3-1: device descriptor read/64, error -71 [ 114.052478][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 114.057075][ T5619] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 114.057114][ T5619] usb 1-1: config 0 has no interface number 0 [ 114.057162][ T5619] usb 1-1: config 0 interface 12 has no altsetting 0 [ 114.059320][ T5619] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 114.059350][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.059369][ T5619] usb 1-1: Product: syz [ 114.059383][ T5619] usb 1-1: Manufacturer: syz [ 114.059398][ T5619] usb 1-1: SerialNumber: syz [ 114.084661][ T5619] usb 1-1: config 0 descriptor?? [ 114.212495][ T32] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 114.222861][ T37] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 114.407916][ T37] usb 3-1: device descriptor read/64, error -71 [ 114.422558][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 114.439697][ T32] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 114.439784][ T32] usb 4-1: config 0 has no interface number 0 [ 114.439836][ T32] usb 4-1: config 0 interface 12 has no altsetting 0 [ 114.454489][ T32] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 114.454521][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.455270][ T32] usb 4-1: Product: syz [ 114.455287][ T32] usb 4-1: Manufacturer: syz [ 114.455301][ T32] usb 4-1: SerialNumber: syz [ 114.468657][ T32] usb 4-1: config 0 descriptor?? [ 114.529030][ T37] usb usb3-port1: attempt power cycle [ 114.768374][ T6024] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 114.768390][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.87'. [ 114.912641][ T37] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 114.933495][ T37] usb 3-1: device descriptor read/8, error -71 [ 115.088742][ T6026] Zero length message leads to an empty skb [ 115.182644][ T37] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 115.203210][ T37] usb 3-1: device descriptor read/8, error -71 [ 115.317953][ T37] usb usb3-port1: unable to enumerate USB device [ 115.322524][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.462467][ T10] usb 2-1: device descriptor read/64, error -71 [ 115.702543][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.832576][ T10] usb 2-1: device descriptor read/64, error -71 [ 115.945668][ T10] usb usb2-port1: attempt power cycle [ 116.115605][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 116.282565][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.303236][ T10] usb 2-1: device descriptor read/8, error -71 [ 116.340130][ T5619] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 116.340183][ T5619] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 116.340198][ T5619] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 116.340312][ T5619] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 116.391731][ T5619] usb 1-1: USB disconnect, device number 8 [ 116.542543][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.564730][ T10] usb 2-1: device descriptor read/8, error -71 [ 116.675066][ T10] usb usb2-port1: unable to enumerate USB device [ 116.756759][ T32] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 116.756814][ T32] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 116.756836][ T32] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 116.756917][ T32] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 116.801146][ T32] usb 4-1: USB disconnect, device number 10 [ 117.093028][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.236710][ T6041] FAULT_INJECTION: forcing a failure. [ 117.236710][ T6041] name failslab, interval 1, probability 0, space 0, times 0 [ 117.236743][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.236756][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.236764][ T6041] Call Trace: [ 117.236768][ T6041] [ 117.236774][ T6041] dump_stack_lvl+0xe8/0x150 [ 117.236793][ T6041] should_fail_ex+0x46b/0x600 [ 117.236811][ T6041] should_failslab+0xa8/0x100 [ 117.236835][ T6041] __kmalloc_cache_noprof+0x84/0x690 [ 117.236852][ T6041] ? __se_sys_mount+0x166/0x420 [ 117.236865][ T6041] ? memdup_user+0x99/0xd0 [ 117.236881][ T6041] __se_sys_mount+0x166/0x420 [ 117.236896][ T6041] ? __pfx___se_sys_mount+0x10/0x10 [ 117.236909][ T6041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.236923][ T6041] ? __x64_sys_mount+0x20/0xc0 [ 117.236936][ T6041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.236948][ T6041] do_syscall_64+0x15f/0xf80 [ 117.236960][ T6041] ? trace_irq_disable+0x3b/0x140 [ 117.236976][ T6041] ? clear_bhb_loop+0x40/0x90 [ 117.236990][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.237001][ T6041] RIP: 0033:0x7fc3da6fce59 [ 117.237030][ T6041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.237040][ T6041] RSP: 002b:00007fc3d894e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.237059][ T6041] RAX: ffffffffffffffda RBX: 00007fc3da975fa0 RCX: 00007fc3da6fce59 [ 117.237067][ T6041] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 0000000000000000 [ 117.237075][ T6041] RBP: 00007fc3d894e090 R08: 0000200000000000 R09: 0000000000000000 [ 117.237082][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.237089][ T6041] R13: 00007fc3da976038 R14: 00007fc3da975fa0 R15: 00007fff9007ac88 [ 117.237106][ T6041] [ 117.262528][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 117.265288][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.266604][ T10] usb 3-1: config 140 has an invalid interface number: 182 but max is 1 [ 117.266628][ T10] usb 3-1: config 140 has no interface number 1 [ 117.266671][ T10] usb 3-1: config 140 interface 182 has no altsetting 0 [ 117.380924][ T10] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 117.380961][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.380981][ T10] usb 3-1: Product: syz [ 117.380996][ T10] usb 3-1: Manufacturer: syz [ 117.381012][ T10] usb 3-1: SerialNumber: syz [ 117.656803][ T10] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 117.960090][ T6046] FAULT_INJECTION: forcing a failure. [ 117.960090][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.960208][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.960232][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.960244][ T6046] Call Trace: [ 117.960252][ T6046] [ 117.960260][ T6046] dump_stack_lvl+0xe8/0x150 [ 117.960290][ T6046] should_fail_ex+0x46b/0x600 [ 117.960338][ T6046] _copy_from_user+0x2d/0xb0 [ 117.960375][ T6046] restore_altstack+0xab/0x4c0 [ 117.960395][ T6046] ? reacquire_held_locks+0x104/0x190 [ 117.960420][ T6046] ? rt_spin_lock+0x1e0/0x400 [ 117.960448][ T6046] ? __pfx_restore_altstack+0x10/0x10 [ 117.960469][ T6046] ? rt_spin_unlock+0x14f/0x200 [ 117.960497][ T6046] ? rt_spin_unlock+0x160/0x200 [ 117.960522][ T6046] __ia32_sys_rt_sigreturn+0x2bd/0x8e0 [ 117.960543][ T6046] ? __lock_acquire+0x6b5/0x2d10 [ 117.960561][ T6046] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 117.960576][ T6046] ? signal_setup_done+0x22f/0x310 [ 117.960599][ T6046] ? arch_do_signal_or_restart+0x4e7/0x840 [ 117.960618][ T6046] ? __task_pid_nr_ns+0x28/0x470 [ 117.960640][ T6046] ? __task_pid_nr_ns+0x28/0x470 [ 117.960660][ T6046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.960677][ T6046] do_syscall_64+0x15f/0xf80 [ 117.960695][ T6046] ? clear_bhb_loop+0x40/0x90 [ 117.960714][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.960731][ T6046] RIP: 0033:0x7fc3da69e1d9 [ 117.960749][ T6046] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 117.960762][ T6046] RSP: 002b:00007fc3d894da80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 117.960779][ T6046] RAX: ffffffffffffffda RBX: 00007fc3da975fa0 RCX: 00007fc3da69e1d9 [ 117.960802][ T6046] RDX: 00007fc3d894da80 RSI: 00007fc3d894dbb0 RDI: 0000000000000021 [ 117.960812][ T6046] RBP: 00007fc3d894e090 R08: 000000000000000d R09: 0000000000000000 [ 117.960822][ T6046] R10: 0000000000000001 R11: 0000000000000202 R12: 0000000000000001 [ 117.960831][ T6046] R13: 00007fc3da976038 R14: 00007fc3da975fa0 R15: 00007fff9007ac88 [ 117.960853][ T6046] [ 118.089917][ T6054] befs: (nbd3): No write support. Marking filesystem read-only [ 118.179002][ T6060] fuse: Bad value for 'fd' [ 118.379667][ T10] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 118.952700][ T5619] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.123876][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 119.126401][ T5619] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 119.126431][ T5619] usb 1-1: config 0 has no interface number 0 [ 119.166573][ T5619] usb 1-1: config 0 interface 12 has no altsetting 0 [ 119.178784][ T5619] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 119.178817][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.178836][ T5619] usb 1-1: Product: syz [ 119.178850][ T5619] usb 1-1: Manufacturer: syz [ 119.178864][ T5619] usb 1-1: SerialNumber: syz [ 119.245360][ T5619] usb 1-1: config 0 descriptor?? [ 119.770549][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.886369][ T10] usb 3-1: device firmware changed [ 120.009475][ T10] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 120.059800][ T10] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 120.086390][ T10] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 120.086426][ T10] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 120.086502][ T10] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 120.177641][ T10] usb 3-1: USB disconnect, device number 10 [ 120.255993][ T10] usb 3-1: [ueagle-atm] ADSL device removed [ 120.379431][ T5340] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 120.379458][ T5340] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 120.527056][ T5340] ------------[ cut here ]------------ [ 120.527077][ T5340] !atomic_read(&kn->count) [ 120.527094][ T5340] WARNING: fs/kernfs/dir.c:560 at kernfs_new_node+0x1b5/0x210, CPU#0: kworker/0:3/5340 [ 120.527148][ T5340] Modules linked in: [ 120.527172][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.527196][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.527212][ T5340] Workqueue: events request_firmware_work_func [ 120.527240][ T5340] RIP: 0010:kernfs_new_node+0x1b5/0x210 [ 120.527266][ T5340] Code: 74 08 4c 89 ff e8 4b c0 c5 ff 49 89 1f 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c2 76 ce 08 cc e8 3c 25 5c ff 90 <0f> 0b 90 eb 97 89 e9 80 e1 07 fe c1 38 c1 0f 8c 85 fe ff ff 48 89 [ 120.527284][ T5340] RSP: 0000:ffffc90003f17578 EFLAGS: 00010293 [ 120.527303][ T5340] RAX: ffffffff8268f6e4 RBX: ffff88803a084c30 RCX: ffff888025015c40 [ 120.527318][ T5340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.527330][ T5340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.527343][ T5340] R10: dffffc0000000000 R11: ffffed1007410987 R12: 00000000000041ed [ 120.527357][ T5340] R13: 0000000000000000 R14: ffff888033f0f4b0 R15: dffffc0000000000 [ 120.527370][ T5340] FS: 0000000000000000(0000) GS:ffff888125cc7000(0000) knlGS:0000000000000000 [ 120.527386][ T5340] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.527401][ T5340] CR2: 00007ffe31883ff8 CR3: 0000000040bd0000 CR4: 00000000003526f0 [ 120.527421][ T5340] Call Trace: [ 120.527429][ T5340] [ 120.527445][ T5340] kernfs_create_dir_ns+0x44/0x130 [ 120.527480][ T5340] sysfs_create_dir_ns+0x12f/0x2a0 [ 120.527516][ T5340] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.527545][ T5340] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 120.527573][ T5340] ? rt_spin_unlock+0x160/0x200 [ 120.527600][ T5340] kobject_add_internal+0x631/0xd10 [ 120.527636][ T5340] kobject_add+0x163/0x240 [ 120.527668][ T5340] ? __pfx_kobject_add+0x10/0x10 [ 120.527699][ T5340] ? kobject_init+0x83/0x1e0 [ 120.527727][ T5340] get_device_parent+0x31d/0x3a0 [ 120.527763][ T5340] device_add+0x2e1/0xb90 [ 120.527797][ T5340] firmware_fallback_sysfs+0x2e4/0xa30 [ 120.527829][ T5340] ? kfree+0x1c5/0x6c0 [ 120.527864][ T5340] _request_firmware+0x1052/0x1780 [ 120.527910][ T5340] ? __pfx__request_firmware+0x10/0x10 [ 120.527935][ T5340] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 120.527968][ T5340] ? process_one_work+0x8be/0x1630 [ 120.527998][ T5340] ? process_one_work+0x8be/0x1630 [ 120.528028][ T5340] request_firmware_work_func+0xba/0x2e0 [ 120.528063][ T5340] ? process_one_work+0x8be/0x1630 [ 120.528090][ T5340] process_one_work+0x98b/0x1630 [ 120.528141][ T5340] ? __pfx_process_one_work+0x10/0x10 [ 120.528167][ T5340] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.528211][ T5340] worker_thread+0xb49/0x1140 [ 120.528249][ T5340] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.528295][ T5340] kthread+0x388/0x470 [ 120.528339][ T5340] ? __pfx_worker_thread+0x10/0x10 [ 120.528362][ T5340] ? __pfx_kthread+0x10/0x10 [ 120.528383][ T5340] ret_from_fork+0x514/0xb70 [ 120.528412][ T5340] ? __pfx_ret_from_fork+0x10/0x10 [ 120.528435][ T5340] ? __switch_to+0xc79/0x1410 [ 120.528471][ T5340] ? __pfx_kthread+0x10/0x10 [ 120.528503][ T5340] ret_from_fork_asm+0x1a/0x30 [ 120.528548][ T5340] [ 120.528568][ T5340] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.528584][ T5340] CPU: 0 UID: 0 PID: 5340 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 120.528608][ T5340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.528621][ T5340] Workqueue: events request_firmware_work_func [ 120.528648][ T5340] Call Trace: [ 120.528657][ T5340] [ 120.528665][ T5340] vpanic+0x56c/0xa60 [ 120.528695][ T5340] ? __pfx__printk+0x10/0x10 [ 120.528716][ T5340] ? __pfx_vpanic+0x10/0x10 [ 120.528742][ T5340] ? is_bpf_text_address+0x292/0x2b0 [ 120.528765][ T5340] ? is_bpf_text_address+0x26/0x2b0 [ 120.528796][ T5340] panic+0xc5/0xd0 [ 120.528823][ T5340] ? __pfx_panic+0x10/0x10 [ 120.528860][ T5340] ? ret_from_fork_asm+0x1a/0x30 [ 120.528892][ T5340] __warn+0x315/0x4c0 [ 120.528920][ T5340] ? kernfs_new_node+0x1b5/0x210 [ 120.528949][ T5340] ? kernfs_new_node+0x1b5/0x210 [ 120.528978][ T5340] __report_bug+0x29a/0x540 [ 120.529005][ T5340] ? kernfs_new_node+0x1b5/0x210 [ 120.529032][ T5340] ? __pfx___report_bug+0x10/0x10 [ 120.529054][ T5340] ? __rcu_read_unlock+0x83/0xe0 [ 120.529086][ T5340] ? rt_spin_unlock+0x160/0x200 [ 120.529111][ T5340] ? bpf_lsm_kernfs_init_security+0x9/0x20 [ 120.529136][ T5340] ? security_kernfs_init_security+0x76/0x270 [ 120.529167][ T5340] ? __kernfs_new_node+0x69e/0x980 [ 120.529197][ T5340] ? kernfs_new_node+0x1b5/0x210 [ 120.529224][ T5340] report_bug+0x16a/0x220 [ 120.529246][ T5340] ? kernfs_new_node+0x1b5/0x210 [ 120.529271][ T5340] ? kernfs_new_node+0x1b7/0x210 [ 120.529297][ T5340] handle_bug+0x9c/0x200 [ 120.529322][ T5340] exc_invalid_op+0x1a/0x50 [ 120.529346][ T5340] asm_exc_invalid_op+0x1a/0x20 [ 120.529367][ T5340] RIP: 0010:kernfs_new_node+0x1b5/0x210 [ 120.529395][ T5340] Code: 74 08 4c 89 ff e8 4b c0 c5 ff 49 89 1f 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c2 76 ce 08 cc e8 3c 25 5c ff 90 <0f> 0b 90 eb 97 89 e9 80 e1 07 fe c1 38 c1 0f 8c 85 fe ff ff 48 89 [ 120.529412][ T5340] RSP: 0000:ffffc90003f17578 EFLAGS: 00010293 [ 120.529430][ T5340] RAX: ffffffff8268f6e4 RBX: ffff88803a084c30 RCX: ffff888025015c40 [ 120.529447][ T5340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 120.529460][ T5340] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.529473][ T5340] R10: dffffc0000000000 R11: ffffed1007410987 R12: 00000000000041ed [ 120.529496][ T5340] R13: 0000000000000000 R14: ffff888033f0f4b0 R15: dffffc0000000000 [ 120.529520][ T5340] ? kernfs_new_node+0x1b4/0x210 [ 120.529555][ T5340] ? kernfs_new_node+0x1b4/0x210 [ 120.529586][ T5340] kernfs_create_dir_ns+0x44/0x130 [ 120.529619][ T5340] sysfs_create_dir_ns+0x12f/0x2a0 [ 120.529646][ T5340] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 120.529674][ T5340] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 120.529705][ T5340] ? rt_spin_unlock+0x160/0x200 [ 120.529735][ T5340] kobject_add_internal+0x631/0xd10 [ 120.529770][ T5340] kobject_add+0x163/0x240 [ 120.529801][ T5340] ? __pfx_kobject_add+0x10/0x10 [ 120.529831][ T5340] ? kobject_init+0x83/0x1e0 [ 120.529859][ T5340] get_device_parent+0x31d/0x3a0 [ 120.529894][ T5340] device_add+0x2e1/0xb90 [ 120.529927][ T5340] firmware_fallback_sysfs+0x2e4/0xa30 [ 120.529958][ T5340] ? kfree+0x1c5/0x6c0 [ 120.529990][ T5340] _request_firmware+0x1052/0x1780 [ 120.530036][ T5340] ? __pfx__request_firmware+0x10/0x10 [ 120.530061][ T5340] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 120.530094][ T5340] ? process_one_work+0x8be/0x1630 [ 120.530122][ T5340] ? process_one_work+0x8be/0x1630 [ 120.530150][ T5340] request_firmware_work_func+0xba/0x2e0 [ 120.530182][ T5340] ? process_one_work+0x8be/0x1630 [ 120.530207][ T5340] process_one_work+0x98b/0x1630 [ 120.530258][ T5340] ? __pfx_process_one_work+0x10/0x10 [ 120.530283][ T5340] ? do_raw_spin_lock+0x12b/0x2f0 [ 120.530327][ T5340] worker_thread+0xb49/0x1140 [ 120.530365][ T5340] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.530413][ T5340] kthread+0x388/0x470 [ 120.530436][ T5340] ? __pfx_worker_thread+0x10/0x10 [ 120.530461][ T5340] ? __pfx_kthread+0x10/0x10 [ 120.530484][ T5340] ret_from_fork+0x514/0xb70 [ 120.530524][ T5340] ? __pfx_ret_from_fork+0x10/0x10 [ 120.530548][ T5340] ? __switch_to+0xc79/0x1410 [ 120.530576][ T5340] ? __pfx_kthread+0x10/0x10 [ 120.530592][ T5340] ret_from_fork_asm+0x1a/0x30 [ 120.530628][ T5340] [ 120.533331][ T5340] Kernel Offset: disabled