last executing test programs: 14m22.850838453s ago: executing program 32 (id=1500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e00000010000000000000000000000000a0100000000000000000000000000004e22000bffff00000a00808000000000ded4a81e805e6230b41dddc80c8c3321b0a8542e365580cc64d2a2e511b39d3693f0eda4bf7b7b1c47d28374b254fe814a291e32effebd08bd5469d05c78f36af8c7dc99ae60f987ba72286f7cc203fc9363658381753aff000854ff9b1067bc994774c4d560cd299f3d8cbf464bb9cc29580a8ff8889967062d3e8b1abd7aa805463174a6dfb6ee02ac9b49d7b98e9f865f33daffd0e02882", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x80c4) 13m17.698993979s ago: executing program 33 (id=1797): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x320b013, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_open_dev$admmidi(&(0x7f0000009300), 0xc, 0xa000) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000009340), 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000094c0), 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20902, 0x0) write$sequencer(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="810100000000000081", @ANYRES32=r2], 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 13m8.925101493s ago: executing program 34 (id=1833): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x74) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000140)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x53, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0xdd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129a42, 0x5) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x13, @local, 0x10}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r6, 0x9dff7ffc}}, 0x4d) r7 = openat$cgroup_int(r4, &(0x7f00000002c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c270d0976cb2ddea7205dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r2, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800", 0x2}], 0x1) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4092, 0xffc}], 0x1) 11m23.152289896s ago: executing program 35 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000340)={0x0, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x67) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 11m15.785622145s ago: executing program 36 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}) write$tun(r0, &(0x7f0000001bc0)={@val={0xa, 0x8808}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x0, 0x3c, 0xff, @private2={0xfc, 0x2, '\x00', 0x6}, @mcast2}}}}}, 0x3a) 10m22.541111061s ago: executing program 7 (id=2357): r0 = eventfd(0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000100)="1e314065512e862552a7b4", 0xb}], 0x1) 10m22.337728326s ago: executing program 7 (id=2359): openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x31d, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 10m21.458409496s ago: executing program 7 (id=2364): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa000000a}) read$FUSE(r1, &(0x7f0000001a00)={0x2020}, 0x2020) 10m20.916142871s ago: executing program 7 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x7, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) 10m20.485763476s ago: executing program 7 (id=2368): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 10m19.874919467s ago: executing program 6 (id=2370): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x26041814) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_cancel(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xeb, 0x0, 0x1}, 0x0) 10m19.349603826s ago: executing program 7 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 10m18.893838134s ago: executing program 6 (id=2373): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 10m18.489636991s ago: executing program 6 (id=2374): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0xffffff3c) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000000c0)={0x3, 0x9, 0x61e, 0x384, 0x5ca, 0xfffffffc}) 10m17.52079329s ago: executing program 6 (id=2376): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) setuid(0xee00) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 10m17.392120852s ago: executing program 6 (id=2377): r0 = epoll_create1(0x0) eventfd(0xfffffffd) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f00000000c0)={0xa000000a}) ppoll(&(0x7f0000000000)=[{r0, 0x1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) 10m16.341530769s ago: executing program 6 (id=2380): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m3.636805008s ago: executing program 37 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 10m0.167211059s ago: executing program 38 (id=2380): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m10.548434295s ago: executing program 1 (id=4579): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semctl$GETZCNT(r2, 0x1, 0xf, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) dup3(r1, r1, 0x80000) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYRESHEX=r3, @ANYRES64=r3, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3m9.971048224s ago: executing program 1 (id=4582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x1, {0x2, 0xf0, 0x2}, 0xff}, 0x18) 3m9.878081942s ago: executing program 8 (id=4584): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) 3m9.784751438s ago: executing program 1 (id=4585): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "7a57f497"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 3m9.71023122s ago: executing program 8 (id=4586): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x80, 0x6, 0x6, 0x400, 0x0, 0x6, 0x0}) 3m9.678183001s ago: executing program 8 (id=4587): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) (async) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x80015b12, 0x0) (async) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x8, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="8401000019000100000109eeb8ef2010ad0884198306b26c698f40e32aff16e0d606c9b5fef7013155c0d8858042d207f0ee7c39b6281c929ad7661404bf55756be04106276bd8a5c8c8c60313d0fdbdfe9763b748e29ec5652ab917083eaa87d812bdbb60b29a11cbbd"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x24002, &(0x7f0000000000)=ANY=[]) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001500)={0x8, {"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", 0x1000}}, 0x1006) r5 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) write$P9_RREAD(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xd4) (async) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2c0200, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) r7 = userfaultfd(0x80000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 3m9.153256046s ago: executing program 1 (id=4588): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x80, 0x6, 0x6, 0x400, 0x0, 0x6, 0x0}) (fail_nth: 1) 3m8.002093213s ago: executing program 1 (id=4589): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x50) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000780)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x8, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000880)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000008c0)={0xdf, r1, r2, 0xe0e0e0e0}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000280)={0x80, 0x6, 0x6, 0x400, 0x0, 0x6, 0x0}) 3m6.756862765s ago: executing program 9 (id=4597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x6000000, 0x1000, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x0, 0x23d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 3m6.521563239s ago: executing program 8 (id=4598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x1}, {r0, 0xe286}, {r0, 0xc200}], 0x3, &(0x7f0000000180)={r1, r2+60000000}, &(0x7f00000001c0)={[0x28]}, 0x8) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000d1) listns(&(0x7f0000000080)={0x20, 0x0, 0xa, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000203010f00010002000002db000000080000000000000000bff9915ec4d1779731afe577a515cfdf2400877fc4"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 3m5.482258043s ago: executing program 9 (id=4599): setfsuid(0xee01) r0 = syz_usb_connect(0x4, 0x419, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xd7, 0x2, 0x43, 0x8, 0x2304, 0x208, 0xdf5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x407, 0x1, 0x4, 0x9, 0x40, 0x3, "", [{{0x9, 0x4, 0x33, 0x35, 0xe, 0xf2, 0x2f, 0x75, 0xc1, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "08b5"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x80, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x100, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x3}, @country_functional={0x12, 0x24, 0x7, 0x6, 0xf415, [0xf5f, 0x7, 0x8, 0x3, 0x1ff, 0x8]}, @obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0xa, 0xc, 0x10, 0xff, 0x6d, 0x6, [@generic={0x6, 0x30, "4655995b"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x1, 0xd, 0x8, [@generic={0x36, 0x21, "8500c0d1d4f138f4f4528bef67e3035412409f61213ce31e12a5dbc50ef243e1e5c5b2c570c843e64f4ba6421a009d7f2401d7d2"}, @generic={0x2a, 0xc, "b98e83ee75f6deedbbe4a84194f38e8023e050152aa8ea15c43f07f3c776ced41923fbcbdbfc2d8f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x40, 0x8c, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0xff, 0x8, 0x0, [@generic={0x9d, 0x0, "fa13c0ddec8afa8f439e759bb94d5d7820e4b5130ad1fe566144cf5246186923b2dc3096547464959e2c8676399f3ebcd73f1fe1c0b56a02a1fb406795c549f2b9b7c4528be685392630dc06df40f51a97e6235190f70c383e23552d91147cbd5e7bae7af4d330dff30f93e15405ae242fbf11c1ffc646ec78c9c89dce395c6677afe4aad4c2de6416c89025a334a47e36f748f961eded1b4ea879"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x7, 0xb9, 0x80, [@generic={0x21, 0x3, "8f27c22431249c03ddbc042a4891326d740bf20a444317fd36c8b56a26652a"}, @uac_iso={0x7, 0x25, 0x1, 0x28b30c6205d8bc2b, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x7be, 0x5, 0x1, 0x1, [@generic={0x5, 0x4, "981013"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xcd}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0x9, 0x2, 0x0, [@generic={0xd6, 0x3, "2f58ab464a0abd6ab5af3fc23d264e8b9aeb3fcc190b3c5fa71ef04dbfcaf3efaa30ee3d4ad88e412c085460a1e84a8675c4ed135a89719effaac417be3a0b721807da00c9dfd2a3809b97d9e25f33adff3cb482e4ed067038203ff4d3bbfc289460ea66ad5d11008f8bedb30d5031bf35c30c8e7e4cd30e126fd766b6047a3b282c20636830b420b153b27bd08bb9b72b600553e51259a3b0a2ef72f6853f8cb6308b5c3d56d149fa58a8021abdcf849301e1289814722ead9da53d4f9ddcdd5810b6e27fc91707c935d3f1e85124be87f1541d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xff, 0x80, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x7, 0x70, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x1ff}]}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x9, 0x4, 0x2, [@generic={0x87, 0xe, "56d1d92cd719cf8d6f2073062e307de2d44d3b7c7e949fdf5cd09e9a6078ae819f40cec97904f5abdc70012061572757b50dc66cca075ed8bbbdab8a1fd4b65be85707f0f80dcdde5c0f65b8bfd7975fd239a91a0ba20626e94223578bbc214c0d4cd028b0078fe5ec1b82cee7c010a3d28c655cc576572f2743ea06b94999867219a0f3cc"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x8, 0xc, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x59, 0x3}]}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0x7, 0x17, 0x1, [@generic={0x5f, 0x21, "54990e37333fbdbae7e0a68638e1f436784769fd9e46ff541ab8d3733be5f76690504d7fdfd37d1dc0439f555a10e9dbd1f80e6bd858e724af9bdc55b773c2775d8e947b827bfc78cc3028a7eb0c7688f1aca6b95c9a7e6d03f94a1978"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x9, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x8}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x4, 0x7d, 0x4c, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x4}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x200, 0x2, 0xb, 0x7, 0x10, 0x1}, 0xab, &(0x7f0000000540)={0x5, 0xf, 0xab, 0x2, [@generic={0x9c, 0x10, 0x1, "3c614155cca21419ef7d83278915fbb33be5f9b0b95dabce0031830e582a1d9ba768efbe803e3fbcb9f608575a716f8826835b86aafe8272cf3160c9bcc31f210576bf258e3f81095f67ed066103a2e25dc9b8f1746022db46fc3a45fa437d16ede2df95b07d4facba10eb2978c8a25c4e8c4a3cf61558a529fb8e994304a3adf44b81923771f2ea9028e35f6616ebd13fb58aa9369d99b591"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0xb, 0x4}]}, 0x6, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x401}}, {0x19, &(0x7f00000006c0)=@string={0x19, 0x3, "9660d7130f60ec6062ec4ee125c159b04df2fa29e94566"}}, {0x22, &(0x7f0000000000)=@string={0x22, 0x3, "b0ecf022590b9aa280fa4b60e83b1b0db6ef36ee03c564512ee13346ba9d4cc4"}}, {0xd3, &(0x7f0000000740)=@string={0xd3, 0x3, "2c6c903061c777c51e6fe84be9989007ec2b35218898170313117f3ca1f18eec59ceb04de54fddc4232252f89e2f7a75b5f4da57b059e5b9f42e93372b764cc1cda3393e3df0a07b65d1b00030cf2b0fd63c4d95237aface0e4eca717cbef86e79a2a2d0957bdc011761a87839e015bef70f382ed8dc7024623efd96244d9aadd80b3d1e48905482fe4104addbac4b529f648438b0fbe11a08742be27d4e3a9a6074d50341a3e9ad49663a66aaacd7e1f6b933ace5f6be4f5d75cd488bf7aa9f6c95c855dc0e26badc88144c757186e33f"}}]}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000a00)={0x14, &(0x7f0000000940)={0x20, 0x4, 0x3e, {0x3e, 0x10, "db88347c9778cfa2db19408db9ec0bb170aabf78d0a5c7ad8e87e4ae221c4d552951ec59ef8221893e9c33f66868d6446b0fbe7ff53b290feacec101"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}}, &(0x7f0000000f80)={0x1c, &(0x7f0000000a40)={0x0, 0x5, 0xb6, "d92690f7718567a1aaaa841fa8f1504a4f38cd51e80fe71eb0b53ed1dba388cf024f2cfee36f304167bf90e19bd62c8cb73e436c2d4a8d53d093411f984e298b18551d12f85b41f24ecc30e763683be438bc71bdc142ec9765425bf7bff6a8382265758f1e2965ef1e6bfb2930992262a9606c6ef47ae8b40c3fcefd1b374ec75488084eea2e6b673ea7d9b1900bd3f3fb08997138919b212b96cf6911c8281e82b9a6a780288afdd45c78d7a4f37e8d79e9e5e84638"}, &(0x7f0000000b00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000f40)}) setresuid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 3m4.821127739s ago: executing program 1 (id=4600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(0x3) 3m4.742122404s ago: executing program 9 (id=4601): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000300)={0xa, @raw_data="5c1c5d0c087cc72766724ecc0b0e7acbb3751c709c364d6edc7696e278d9b8617b5c18dc7bfddf6e0db0d57ace49ed695ef3a4dd72f34022e3a73fe0c1ab3e3a130970ccc0e640616cb6ba261a301883ccea1e00ea1b74de3451b2c4dd81cf772d39a4ec15ea5e6c1809284a9e3f990ffa6d1c8fe9009e309795ae0d1264968c30468c700b2ce4ebbe2f55ea95bc873e8044b3bfe52363fcbf312ef7f5661cf1e2c62ad23168ca1181b2a64989d3b28003cc15d3309446ec6980132caf961606b506fa151858c695"}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x3, @multicast1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x8a040, 0x188) read$proc_mixer(r2, &(0x7f0000000940)=""/133, 0x85) 3m4.32413929s ago: executing program 8 (id=4602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x107, 0x3, 0xc}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001a00)={0x3, &(0x7f0000001980)=[{0x7f, 0x0, 0x0, 0x1}, {0xb063, 0x0, 0x0}, {0x0, 0x7c0, &(0x7f0000000840)="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", 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m4.004732944s ago: executing program 9 (id=4603): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 3m3.907901037s ago: executing program 9 (id=4604): socketpair$unix(0x1, 0x4, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r0) 3m3.817301241s ago: executing program 9 (id=4605): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x0, 0x78}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r5, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) r8 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r9 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r10, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xfffffffffffffcea, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x2}}]}, 0x4c}}, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) 3m3.676158815s ago: executing program 8 (id=4607): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001002235a8261f1252176cda00000000000000000100000a40000000030a010200000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000140000000030800024054dd5e541400000011000100000000000000de38177bc5d8be6bb912d54e633ac84785838a12"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x36) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000775e85b34d2288"], 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20000040) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x18, 0x15, 0x301, 0x70bd29, 0x0, {0xc}, [@typed={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xf}], 0x1c) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000600030001a12c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) 3m1.754985065s ago: executing program 0 (id=4612): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x2}}, 0x10) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000080)) 3m1.008840539s ago: executing program 0 (id=4613): socketpair$unix(0x1, 0x4, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r0) 3m0.915579454s ago: executing program 0 (id=4614): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "7a57f497"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 2m57.685490407s ago: executing program 0 (id=4615): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x1801088, 0x0) 2m57.606105788s ago: executing program 0 (id=4616): io_submit(0x0, 0x0, &(0x7f0000000500)) socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, 0x0) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x8000000}, 0x0) 2m57.443818437s ago: executing program 0 (id=4617): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x5, 0x3ff, {{0x2a, 0x4, 0x3, 0x6, 0xa8, 0x68, 0x0, 0xf7, 0x4, 0x0, @loopback, @local, {[@rr={0x7, 0x1b, 0xad, [@local, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @timestamp={0x44, 0x24, 0x99, 0x0, 0x2, [0xfffffff8, 0x5, 0x80000000, 0x5, 0x1, 0x2, 0x4, 0x3e255bc4]}, @timestamp_prespec={0x44, 0xc, 0x90, 0x3, 0xd, [{@rand_addr=0x64010100, 0x1}]}, @generic={0x83, 0xc, "e23e9b90792f97a71b1b"}, @end, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x1e, 0x3, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x10000}, {@private=0xa010101, 0xfb9}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x91, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="000001000401"], 0x20) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0xa, {0x76, 0x8001, 0x5, 0x8}, {0x4, 0x4ad, 0xe5a, 0x8001}, {0x2e340000, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="747a653d3078303007303030303030d97e2d8b6e2f19408b1a3d30303030303030302c1e0000"]) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000000000000000000000050005000a0000000500010007520000050004000000000009000200686173683a6e65742c706f72742c6e6574000000"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendto$inet(r4, &(0x7f0000002300)="2a9f", 0xfffffd35, 0x0, &(0x7f0000002280)={0x2, 0x0, @remote}, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01072bbd70000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r9, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r12) setitimer(0x2, &(0x7f0000000080)={{r10, r11/1000+10000}}, &(0x7f0000000140)) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) 2m49.206861732s ago: executing program 39 (id=4600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(0x3) 2m48.166920383s ago: executing program 40 (id=4605): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x1, 0x0, 0x78}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x28, r5, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44000) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) r8 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r9 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r10, 0x1, 0xfffffffd, 0x0, {}, [{@nsim={{0xe}, {0xfffffffffffffcea, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x2}}]}, 0x4c}}, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) 2m48.041448728s ago: executing program 41 (id=4607): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001002235a8261f1252176cda00000000000000000100000a40000000030a010200000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000140000000030800024054dd5e541400000011000100000000000000de38177bc5d8be6bb912d54e633ac84785838a12"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x37, 0x0, &(0x7f0000000000)=0x36) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000775e85b34d2288"], 0x14}, 0x1, 0x0, 0x0, 0x40015}, 0x20000040) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x18, 0x15, 0x301, 0x70bd29, 0x0, {0xc}, [@typed={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xf}], 0x1c) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000600030001a12c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) 2m41.997081669s ago: executing program 42 (id=4617): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x5, 0x3ff, {{0x2a, 0x4, 0x3, 0x6, 0xa8, 0x68, 0x0, 0xf7, 0x4, 0x0, @loopback, @local, {[@rr={0x7, 0x1b, 0xad, [@local, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @timestamp={0x44, 0x24, 0x99, 0x0, 0x2, [0xfffffff8, 0x5, 0x80000000, 0x5, 0x1, 0x2, 0x4, 0x3e255bc4]}, @timestamp_prespec={0x44, 0xc, 0x90, 0x3, 0xd, [{@rand_addr=0x64010100, 0x1}]}, @generic={0x83, 0xc, "e23e9b90792f97a71b1b"}, @end, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x1e, 0x3, 0x9, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x10000}, {@private=0xa010101, 0xfb9}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x91, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="000001000401"], 0x20) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioprio_get$pid(0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0xa, {0x76, 0x8001, 0x5, 0x8}, {0x4, 0x4ad, 0xe5a, 0x8001}, {0x2e340000, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="747a653d3078303007303030303030d97e2d8b6e2f19408b1a3d30303030303030302c1e0000"]) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060300000000000000000000000000050005000a0000000500010007520000050004000000000009000200686173683a6e65742c706f72742c6e6574000000"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendto$inet(r4, &(0x7f0000002300)="2a9f", 0xfffffd35, 0x0, &(0x7f0000002280)={0x2, 0x0, @remote}, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01072bbd70000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r9, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r12) setitimer(0x2, &(0x7f0000000080)={{r10, r11/1000+10000}}, &(0x7f0000000140)) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) 6.428395624s ago: executing program 3 (id=4960): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r0, 0x0) syz_usb_connect(0x0, 0x606, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x91, 0x41, 0xf9, 0x10, 0x19d2, 0x1003, 0x5ef8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f4, 0x3, 0x9, 0x92, 0xc0, 0x6, "", [{{0x9, 0x4, 0x41, 0xb, 0xc, 0x2, 0x6, 0x0, 0x2, [], [{{0x9, 0x5, 0x2, 0x2, 0x8, 0x2, 0x2, 0xf, [@generic={0x1b, 0x11, "1f8a26839d312b1b8837347db4c60c864399cb1d35013df484"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x8, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xf801}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6, 0xae, 0x9, [@generic={0xec, 0x5, "a98c5d69ae7c51d73ddb09f1516afb61992ce7fef0d62d0bec4a73b4467c85023209d8f0f4ee66a61227c99b7b18860f00d60804de16d987eb51da1dc7ce8e5d9d81d68d393fec9f17ca92cf18a1ed2a01a32617f4d3ba5b9e6ac26d575ce3901806810322b1370b383a752038f3b5391f2e08d69634eceb09db15cdd668f1eef3cc7d23b68a279aabd1b04e1000c7ebed13ba55767d00ec8a1a86b9002567d4f57f1f9059f389542e488fbe2c413f518bd0521626d56d33fdcc51518a086b6889e9397856747c3f893f7dabcb0ac60017fc500c6df5abf880bb53770b862418235ad3c156b451233a55"}, @generic={0xf3, 0x23, "aeb3995351ec6555c10b594de3c35171262c0fa7c4530c356f5d8b84fdd85bcf461da5b09f8edd994453b86f77976d81e05a3f1eaf2bb6d108f92d022b5debc9460ae290f1c6e4b2bfe462083ca2d8b8e4f3c3bf52687a27b9644ee6389d49acf29a5acb6da6090763eaf0099bca0eded4e22d874c4d60baa8717067f3dd5af1d578dfca2734c1514ca0cd09b9eeb6a501852d941dca048cdc2102f47400eb2753c96234bccb8b690fffacdb99ea23dd257b3dd829a4dbee9ff6cbfbfdaccfa61f8ed4aed5033b1d597c4579376cfd05611a2578bdb7f2a8b8d2edae68528b964a087ac30b2a6e30ee3c0bd771aa343c96"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0x57, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x40}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0xff, 0xd, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x80ef}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x54, 0x0, 0x1, [@generic={0x7f, 0x1, "a2aa8113f8b455ec6a34f7f6dcc4b85b933897d46eeeedf56a26e633e2ca664671395c8aecc7b85419bac4bea9e09b061c081bdea9a3ef90511282c1b58d084fd3d3961e3828a09a059b8d49f41a4ef733c80e9e5cf752af8c15b251a941400cba0d3eb03e9170fab2579b06dbf74e1263c69208758f3adf9d5b1f09ba"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x7}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x7, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xb1b4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x0, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc2, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x4, 0x1, 0xa5, [@generic={0xfb, 0x4, "501ce26886490aa0ce9cf0195355ef2d3dc45a580c55ec1b6e4fcff4f6f272a8b26d9fed6f962fd443f889272e9bbf745c105875f6dddbf90829313b64147a622b21a19a459482b610cc5e468ce70787c9890b67407b5e8a500c9b29e868fc9d8b088c6bdc68536e2a7883afdf888272d21c364f6de9200b1e2bd9d6bde63ce46acfe5706400b310dcf6209616d7a561f9b47d24871a7ea7f64b81dfd03308e8be9cdac61f19651c6923f9221bee014ff7d4afb7ab909b8606f21ced17f237273bf5fb90f03dc4f7177e828749071267a4ff25dad3ee1175333692ff3677fcbe57c1e6e34f86ac716768d0a082dcfb3f0596400bbb1cbb62cf"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x5, 0xf, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3ff}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x8, 0x0, 0x2a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x496}]}}, {{0x9, 0x5, 0x89, 0x10, 0x3ff, 0xff, 0x6, 0x2}}]}}, {{0x9, 0x4, 0xd7, 0x4, 0x6, 0x24, 0x99, 0xc4, 0x1, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8000, 0x6, 0x1d}, [@acm={0x4, 0x24, 0x2, 0x4}, @obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0xa, 0x10, 0x40, 0xc8, 0x4, 0x4, [@generic={0x4a, 0xf, "552bb117617654e6a3a74ce6eb23f9ac77cc274e7f76a03100d73b4f138656432195739a023c45ffe34f564a9905d7ed2f3b205a598463b65f3e4c5ad9b1d56dea2155b3ba928bbb"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x4, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x3}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x8, 0x7, 0x0, [@generic={0x5b, 0xd, "108264fa2af4ebad5a529f530cadbb2aaedc66743294b251f2d7aea001b3904f1cc9d5902f9c330ac5ec6d778aa6e0204b542f53e11f01adcad787dae4f88eb3cd465f1882c589ba4c9819f31a200971ffe43c46fe612bec6b"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x5f, 0x1, 0x6}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0xb7, 0xa8, 0xde, [@generic={0x7a, 0x7, "c70eedddb6ac15738162606fd74eee8b58b0ff5588a5c49abb3489f884ffebfc20dc968f939021ff28717cf8354f7e4b0200ff6dde87a59efcc7693bdc27f646664db92af7ff19812afe30b7dc4bb661a42ce34b8fb357ea19065370dbd8d3ac6f98016a86fe42d43fcfd427e916accfad9f2fe1a5af9ca3"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0xf, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x88, 0x5}]}}]}}, {{0x9, 0x4, 0x23, 0xb7, 0x2, 0xd7, 0x3e, 0x9b, 0x41, [], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0xfe, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x1, 0x4, 0xff}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x0, 0x1, 0x2, 0x8, 0x7}, 0x1d, &(0x7f0000000b00)={0x5, 0xf, 0x1d, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x1, 0x4, 0xfffc, 0xf}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xa}, @ptm_cap={0x3}]}, 0x1, [{0x6b, &(0x7f0000000b40)=@string={0x6b, 0x3, "c3238232cb329deda5027a558e4f78d3cda7947596190f8205f6a779fce6116a4c863633757a4f0c57596cdfe7b86df6dfa2bc7ea5197d523e446aa0da1e073fd855d8cf25e2fbdcf45e48e0941a9436ab7ee96cc435e39fae2783e1641e6f72c048de69108e0bbd6e"}}]}) 4.810636571s ago: executing program 2 (id=4964): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)="479dfd") process_vm_readv(r1, &(0x7f0000000e80)=[{&(0x7f0000000bc0)=""/138, 0x8a}], 0x1, &(0x7f0000000f40)=[{&(0x7f0000000ec0)=""/121, 0x79}], 0x1, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7}, {0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x2}, r4, 0x1ff}}, 0x48) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, 0x0, 0x25) r5 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x4, 0x2001) pselect6(0x40, &(0x7f0000000140)={0x3, 0x15c000000000, 0x9, 0x4, 0x3dc4, 0x7, 0x183, 0xc}, &(0x7f00000001c0)={0x4, 0x0, 0xf, 0x4, 0x4, 0x8, 0x3, 0x8}, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='\xa1\xf56\xbf\xbd\r\x88^H\xf7P{o\xd3\xa1\xd4\x16\x88\xf6\xdf\xe3\xc5\xb2\xa7\x99@u\xf3\xb9\xd8\x9c\x8d\xed\x00\xb2\xb9r\x1e\x87\xc7l\x80R\xaf[p\xdd\xb15690\xf3\x1c\xe2\xdb,\x7f]\xfe\x1b\x97\xc9\xa1=\xe5G\xfc\xe2\xe40x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(r5, &(0x7f0000000f80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) shmctl$IPC_SET(r7, 0x1, &(0x7f0000002fc0)={{0x0, r12, r13, 0xee01, r14, 0x128, 0x5}, 0x9, 0x7fffffff, 0xaac, 0x6a3, r1, r1, 0x7fff}) 4.770672116s ago: executing program 3 (id=4965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x2000000, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}]}, 0x28}}, 0x0) 4.653820216s ago: executing program 3 (id=4966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001a00)={0x2, &(0x7f0000001980)=[{0x7f, 0x0, 0x0, 0x1}, {0x0, 0x7a6, &(0x7f0000000840)="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", 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.418721239s ago: executing program 2 (id=4967): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x8098f909, 0x0, "6005588a3f9f90ac060100050000009a9f7e1db9c90600008040f722e62200", 0x1, 0xfff}) 4.325138888s ago: executing program 3 (id=4969): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f00000002c0)=[@nested_load_code={0x12e, 0x8a, {0x3, "450fc737c74424005c812ce8c74424028c000000c7442406000000000f011c240f8a0030000066660fc777b73e0f06c7442400b3880000c7442402f8ffffffc7442406000000000f011c240ff85500f2420f0d00c7442400ce000000c7442402f2c00000c7442406000000000f011c24e0f1"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xb8, {0x2, 0x1, [@nested_amd_invlpga={0x17d, 0x20, {0x41000, 0xc84}}, @nested_amd_vmload={0x182, 0x18, 0x4}, @out_dx={0x6a, 0x28, {0x365d, 0x1, 0x9}}, @rdmsr={0x66, 0x18, {0xb34}}, @wr_drn={0x68, 0x20, {0x5, 0xf1}}]}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x49f80000, 0x7}}, @nested_load_syzos={0x136, 0xa8, {0x2, 0xc08, [@out_dx={0x6a, 0x28, {0x8a96, 0x4, 0xfffe}}, @nested_amd_vmload={0x182, 0x18}, @rdmsr={0x66, 0x18, {0xb39}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x7}}, @nested_amd_clgi={0x17f, 0x10}]}}, @nested_load_code={0x12e, 0x6f, {0x1, "669c48b8eb000000000000000f23c80f21f8350c0070000f23f866baf80cb80808f78fef66bafc0cb8c5000000ef65670f01c80f20e035800000000f22e00f79f036640fc71a410f01f8266a0566470f38823d04000000"}}, @wr_crn={0x67, 0x20, {0xc, 0x8}}, @nested_amd_vmload={0x182, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @control_nat=0x6004, 0x1000, 0x76, 0xdaa}}], 0x339}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000640)="66ba2100b800800000ef460fc7ae10fcdd2f420f070f21c966b815000f00d8b9950300000f3244ffcbb93b060000b808000000ba000000000f30c7442400fd000000c7442402df6ae739ff1c24b805000000b9009089170f01d9", 0x5a}], 0x1, 0x2d, &(0x7f0000000700)=[@efer={0x2, 0x1000}, @dstype3={0x7, 0xa}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000500)={&(0x7f0000000440)="d18b95ba4309c77e21acd701057042c74d4b5b69b97ee6c41208ac4373e8674af50816e48f16f5595477fd84e7b7cbe420e6105db08ba876d41c9a95a7991ac00ac0864ab1959ec49dad2ffbd32312", 0x4f, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000580)={&(0x7f0000000540)=[r3], 0x1, 0x800, 0x0, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) getsockname(r4, &(0x7f0000000b40)=@ieee802154={0x24, @short}, &(0x7f0000000180)=0x80) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000001c0)=0x2}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.19820071s ago: executing program 2 (id=4970): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000180)={0x0}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.691832016s ago: executing program 5 (id=4975): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff04, 0x2105, 0x100, 0x3}}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x5, 0x10000, 0x1, 0x4}, 0x1c) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@empty, @remote}, 0xc) 3.493634574s ago: executing program 5 (id=4976): r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) pwritev2(r0, &(0x7f00000028c0)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="95600a7439ddd6f4753418d7383e5df7a61561b588f625f496d0a217cd318e19d073e76f6f60e315b48434012f2e60dd6d9459ef32ee8d8c7d2b91756d2d242c7cd755061d91617dc58c598bd0da8aea19115551fbedbd4daa7c33743ad6d17ce85724c13fd38359b5bd8dd2f84ff9b0f476ae55bbe647b5b31d61f2aeaff7a6cd17784c4dda35e715acde97f2dfcc075c7cf46568e5f91cea588c5924626c96eee8f1b3246cfb9e1af85dae8465de9843fe0944041af6e2114d2a3abb025bc4189eee603c13beb237628c58851f6915076aac48", 0xd4}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="4d88155b56604c5d1d77dbd630038ce0a2a5f15445eebc414c4ed01d27cdcf8ada1edc50acaed5d89fa54b035d26321bce87f0ce381acb968e46", 0x3a}, {&(0x7f0000002500)="6117bbe06a4d5240c6f254c58b92afaa307e016187e1d60797f9dd927ec6e8bf1e20d39818af1c0e0eb24a59dfaa0c67f8b9d486eb32425b62253a82c1a9b82c32a858132590dd86c22e96b707fc83b73a0745c607c34b962236dabf5c0206d7fcb92d6c1bf184676ddcb76f25abac57d1bc3bccc66c6155663d90d9e7fbc178e504c38d38819901e505bcc3be2f11278482f6439533f20a2c946c17e9e5402b872e9219d0d6835fa93ee0470554a274f6e20faa047bc3344015b5fcc5ed4a9e2d", 0xc1}, {&(0x7f0000002600)="67c158b45f9f87c2455f20cd83083af8d713a2393d34bf6efa0fc96ce966fc8ee9037232884b5ebcbbc044b53fc0b5242783a0e7e042246be4e393bbba23d99515cc89a63e25e01a1651480e80929312fc603f0cdf925cf55bacf687c5cc57576445e697b6514ec2104814dec2c7b32a332e4b6eb7e9753b4be146679c9b22caac80f9f3cf496f75c9a0667ea70c9ca391dca3c29e", 0x95}, {&(0x7f00000026c0)="9ea5c57b4577400624bbf8781e409fe8dafeb240493b57614767ff0e1bf23192d1b34dd048fb51bc0d7c1a9b6e63f980156fcf6623941cfda433c03ce235c8310b94b2122bd8f9a7b93fc7b504b200cb8cd434962dbeca538656a2db9e2c43864f43987c2a36f24fb86a984aedceaec709a66f26a8b254ac7d6978dc5bccda65e4bfd2c0f024a328547d45a2db", 0x8d}, {&(0x7f0000002780)="37b4dd968498ad518e9ca50b7e727f098236b652f47142d3313eb20a4f164cded3e8c14ffa0e9f26fd70c0942758b79f583cb0d4d131ddfa12a66efd49b98bd453f89d9d922d70e2ad4da2d20783dafa4490881b864e3f6d99b869aabb7ab913bf66d8b68ee862c89662ed06f1e400"/122, 0x7a}, {&(0x7f0000002800)="f2b5fe1f4e50f5fa46d8c7e7fbc38f72fbd21dafc3bed0611cd46f1163760ec1664b103cdd1a46891c823def50d87cc1a8e5ba2acd9b020f7ba8418e82ba836b78ecd02d8e4bec19709e006b04d6eaecdf725dce93ab314f5b2ae6450abe0fb7569c6932fc9a69396603b9bc19bfff887da895c2ca1f552b6c408d2d166b5ee1178f9995f5e75742e767395b47887137480e4d5f78df65c417b27e2811fc4e4a5fb9845d24aaac34031c464ef572f31f051312cb", 0xb4}], 0x9, 0xba3c, 0x3, 0x4) 3.461497406s ago: executing program 5 (id=4977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001a00)={0x2, &(0x7f0000001980)=[{0x7f, 0x0, 0x0, 0x1}, {0x0, 0x7ae, &(0x7f0000000840)="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", 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.308973159s ago: executing program 2 (id=4978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000002c0)="b88a000000f00000000000df8100", 0xe}, {&(0x7f0000003580)="30ae3aa68453307bef9373a09decf8e7e751727b83354ca7f9d57a64bf1564873e12ab89ea358463bd717829a5e84d73f74b07d1f88aaf8f9b4f63f15ca77dfe98faeced25be5a5ceac15d1f8dae2566f1acd5d63c7ad891f508855dc2e3c392eebac7026e4ca74c2a527db8ab6614c1a99a395e5a24968de5d76930f13e9e9d87eb475b885df604b3dd644538e4379364378ab8157766954ee4e50110a0b1a00c8f87e9dfae30aa3dd2590a0b63e1a4215d76d44e8125a7a43fc6853305a685fb2d0d7e88c202463c97731915b3d6bb67604cc582a4edcb4c4f86bd0d4e9038b1660357c62f1f9368924a6b4a08dc4c6e2cac5ebf61a194e23043bdb19e54741a369fde88c8159d66ce66757ae70c53eae39346d1bffea50ff10691230fede6ae8b724aa0f8c9509d1cc48f461fb2bac75e187ee3441d3fc32d7f5dbb4891d549180b3e3be529907b06f82fc3429202c3d4abfcd9098d3ac8a33aa4961fa7b0f7457ff580f1884ba8ecb1787d2db67db04462bbb1bd6a763da2792e751a7d8f060eb068768112acdf52672785fbccaaf9f2aeb02ea664d7d5621eeda37c0d113f857a26a0a689339622330fae852beeb7299461ef101735d2a864425e9173c52804e243b20fd52fdcf09dbc49461006e1320246ba0137f97d3f97ffd9dfb0959d9ef63cdc9c88685bbf124a824469165586551f58fc83049d262eecfda81ffa3982e88327fee39b171475532875b95e83fa3a7b9ee2f229317b2a8335e8a86392e18e3b4b43bf2166006f56212d6c8df6d07d00dee4ebba19313a3f0ef7c38877bb84e74af5833e9e96b97d090183205aceaf48a4ab6fb0fdb0af5027a555c3b1fd7a30500a847dcd3c43d7908f078e0269c1032bcd9882202250718de2b5f5905bcd4df1362027e8b5cc1e17c28d75da0ddfa8f32511aefb4243c3ce02fa65a5e6dfd46f88024e983282ac9cc9e3ffbe155bb7a079377f3c1b80f5f2711819a97f2b02ae975c4287506010a973521d5f61623d68499dbb0746208ffae8e398f1298d8ba3b106ebd7e284cfe4107315cd27560bb44232d64c41c022eb34e575a5dd6f34cd89a6c1d7f7303a4fdf4d4158b05737054da688dbde99a959cefbb48b9078c23ea0282fc0a59540370ca30fc4dfa610e0380e0c70edbd7ca4b2651ef3f9284330fe77544d639c8448ea4431b523194448eb8a656fe1546b1c5e759e56faad3811b949d57f6326293734f940a644444cef4eb0946fd4ce66e77e75b51a75b362fcf41d369ee4b29790409c7c54a8dab0910e75e45468138767a898d78de64c1b8e1db58db5f47107056105bd3a51e3b9ddfcc3cbf1d2d718cc447ada443e0adca828c5e06bed93fd23a8efc95d0c3addbf180d99e4017ed62a2602582b0fcad9bf7bf57c0d6e6da68ac792dc8ba0dabb310788dc4df5d0284bf222b39a474ef7b23d76c8f980506ea816239c9f393e5f45e5bf79693b398fcbc3a476463af40947da7c8379799ae3ef6ad5dde78ed733c3769aa66e58a56e20e7a241aebb1b83ad69a06acb83373fc10ec9bba448198140b402157a7c4f9a2d67e57eb49da641432b87a179e4357ce1d5bcf99891764b1a03e37b50aae75b11df988b21347f8f8faf701694de2aef94540b6c8697759247e8af3667d824c08e53c91338d89024a6144d147a0de51d89eac8f3a63c2ff0c6fdceb33d644599ac5b24b6bbb58133c4617a910735aa68a7d3d27c44064135a941abe502bc5e21e0d99e7f242b592c13e03ff54fb1209699b89bdd660bb8beffd029f1be51323ca8842d38c26a7449443456200fd0a26df22ff1e0c8f6ffee70eabdb3e4797643e0c12fcc1bcb3cecf6a12746c9ca4ce2021de003d7a9775c53e49583c9990995ccd302c60675197be4c9617188f328897f93fd6f6904c7cfc6df40edac8ba52274a6846f98147de70be775da0caab69f797ba93d2e0bd5ac8ee9b46380138e8e4bdc8a48891054b4ec4332a420e6ea1e67b5ef5c6bc84560c89ebbe004525bcfa2f972fe66afdba690be3cfc9a045d6cabd2857e37511cd8103079bdf5ce78027bfe881fee537440aa10d34e16638d7ccda59bcafbff01718274f6e965d59c91e61d89edf2f7683e2ac67749cab453ee627d56f228ffdbeb3b89c4945e6338873f318f29c4b22646dbb55edee63058379dae426789a524524608ff48f3e6e86eb16c09351ed3d2a71736ca28a1787799eccf8a8dd956a8fc05033b0c4748a0770905760c13a28237d84861a3f23740935c5eb08d67e1314a836da6ae67591b747ba14698b6b7fb790d3ca8396dfdfa4e39974224a8d773c2ccca61de16453a82631ef1ef7723151d860b6c2ddd1af67ef820b971d66144172a87eaa0fcc6540b0609f69d17864bf2c9680887643b921cdd6cb516477f301c5a93d4b678ea9f8bd390513a1cde925f0498d2f2a22b4a59d738f821b1649f8f448d8b24f8febf9f5c6631bdff7b8f9121f28b8ac890c530e5f1891085678aaf26d9fddf22ee75e1422c918ecbb82382ff899d3ea24480c27108253565f3a2ed44aa689b432bca0593c264fd1c0ad9e8b4c199077e9e4e904284e94d3c60097ce9c21bcce4ff9a57738a4faeb83283bcdc45f98bbd67df392fa5e2dd17cb60810801391ff42474e8188a9773f8dc2b757ed98eb57f0ac60ea36c820f8eb6a56c63caf08db2e340da0f69635eefe5c46964f3102aa862283ca04321c998ef8068011c8e35c7e6afc251fbe7c0e6efdc28e18bf87393244fd49e047860a2de5511d20956b5130a5e06c362db4e2ac5673b03cf6de0612f8919067cce7f45f28a2049b8fc520530ba96366180813205188cd37631ac0ae31d26544cc29c8545db572fdcd38fdc245f682a57f0efbf610e1b6e62d697e4805a20b4c8abc8dfe79034b37946930c1b46fbc1fa281388da344cfd17f87fffd0a798ab2e8d60fd1e7c5b5caaaaffdd1a2f34aecc71db45a59e3343610ce68137eefcd4c97d77ae941ebe45a0d957eef6ee1e6bbecea68f3d123c3666e01f504d5c12965bf120191c2e717d7e22819b6778777aaca2a1e3615dbca22ef39105297d2daa99f63cb598e1c96da000587348d93241164f346b1a2758b163c0806d07790c2102894fa1173a5f95873a60ccaf99cb75e59c2f179d58624e7b42c3b20d58989d068684259e87330564ad83269bb1ec37f86c46a35b0f112bb5e6d96dfcaeb2b6efd357e2761d4313bd162e725eef24304beada23d138a5c0386437cb6e413dd4df6e386fef7d68af42184f81840b2eb10502c7a6724795cc866ce8be57751d33b91cd978286a78da893bf17dbe6f04feddec8cdb8caf9d4de834738fa34a152638dcf643d055c40d40412ed4f619312866574830d2171e48e2de7b9b6eb8602790f4349a322b56e69f02234b1a52efd4fb590e2af205e3331785a020eaf8bbfb63fadf01ecdd477fbefbd7919f81f0b8f948af6f3854be0e672bbdc0538208d724f36600cc9c2f5aeb82b4a5e1f09296b875812bcc8db839243db96a92bd3c38f8f52be5bd09bc2d3e08f5a7f3e8670100647669e907ec27168f56e64ed7513059c1043623c4112ebaebaebf1cbf00ae9dafb947bf9fffcf0c31aa53c2328e28a9ab8cb979e20aae16ed77412a74049faf2d99fdd62b80371c23797e0b9e11ab7f8548ba3092904ec9d8721978edab7eb43b4ede90b43eef0c3545d59ae5c451c17a72d1b6e3de7920771197ee0b756d17279c5751ebc426e3d826ae2f17cef9d32e3730c106ca978e75eb97e269795b4fa47d0fcf7f286ddf1e01f4f2b2fe1e615b562ca64d618ddd1663ba501fa7876c3f40849f1f20a88ba47c0f7f9c56b93570f6448df7995ee7bf19b3ae71edc7a6cb83a41209d3953b0bd30101f387ed88d88e9e5a3e0b365ba5d821e30a37e8db99d88c4379acea20d00d1f24209201f83d1a0e4bb2758c276e03eab98019687f8e2d1f5d7b7574ee3b58b63928e10337ec50d1821e35860a6cfd59ec8ea873c4d8c22a11dc3186f1d9a08499c2110a26335337840a31e5e5a0491430f8d50a17c528a3ca42be4634a2466fc82ba39a520c1ec4fbd3c7fc063aa8a4c4bf150f3c9b9e43095ba317dd584280d92be054db4f978bd5b99a073f3359aaba5ec8d4fb9bd5a97756d350047734420cff9d3277281ca57a485ab2a9d09bc064f7b0dc0aee37e3db439b4ac251a506056545df64638210da642d61eab9797329b0c5bc117da1c95bac3f7b3d635b886b0f987ebbda66b6d069f072975e56ed54f0c78346960381a33d7122bcfbc6c21a9e059be3ba9bc4698bf96ae5f861ada115d88b4aa7ad536209c1ddb7e42f5621c9583d5ce68efabb8cd660f7a2e039a7ccbf9a78b9181d5f3a5859c4c3d6901728c6a169f0be7f33ce09708ee781936c01c3126f9d9d3d3f713247743c8697ec81282ecb1cfb4c67db707931e362622ec8d9414a0b54dd64faa3d42db08d6ad652e7bebac8551726140aba0555996df5ddcb9082754c6db755f1b72ab8b16448cc09485a4356063c08a49c297690ac30b77e526ec507ad5ab83766e8eea536a6284971577cbfedc7babdbcc1d4e994127ad35d0600bbd4fc9e8a10391068a98af8a999eb49ad62cf2644cef128fa3df1e56ae82238e93535f9d6cf90995349a0530f29df9dc3aacf05cb4f381fb616e2c12672db233f3be48934840e6208e04af7cf0dfc41ec3b4bfc67a89cd198dec80e90fe08df8ba1038f22116bcba4e22d2eba47720757735c6a71b3ff9ce5b99a4e11a23b417c02f9e0b829409c06a5b4ff03bb508aabe8f0b4fd59b677db471806eaa8bdf93b59c7dd505eb5899a9c8b0fcb112e9bddd6fc9981ad402b097af97fc6ac977df366f3579bfc94a5d9332f07e7f2c4d6acd178e83ad75873cde25d1ed6210d83e72048fb4ed93e6fe658d8d352d05e8c8a038121b43da0909269f5bb38850df5bfc9496ad29b140454c2c0f2cfafac9e8c908e96a5ca4492bb230753cda535c0f225b8a3764845256b063c8f18e1103fde647e8fab7f9f2c5ab740502f191716809eee6a4f8da0de26bb7b27a08bd65e34199f11ea1e3e88d531910fb4e08b9d0a47e78a77a50cf75904ed618d4cd86e955b0af302b970c1b8f9d3f4b200dd7688fab0cd8c2eaec55f0058a0eaf55cd606e58df34a9d22a14aa7bb8d8a4d63fddd0ef2b192b43ee5cefc107043468f4cf3f7e59d3d480096c341684aa944ca47b83c1054f2457117bb20a2bf202f9c56fd2635fcc72ae315394635f219578f6113ec42aa2faf13df0bba63854da23d09cf4ffcb8757fbca1d21421b2159cdcb269eefe24f5e2ed2efb69bcdd7af24d620ce6de5424d7f0ad714a9f8c835224f80b43e6804ecf83f6f704ef119b27e98bc62f2d5c3fa0bfd6d29bbebbe186a718ec381cb5f5936e456300e089c28696d6034759ac261062897238364f84a78b913230b82a22242ea7315f2a3ba89f2a39ffda6e2b5969cd07354be95749af85c2a4cb55e1c29253c30b584ce21e919ea02157ff7c1dc54e65db41c27f12c6189c11ea6fc17758ff2a82949f8a9a868f4f39280a5a5a2e86d7c3960ba06e4c251bedf68607afa913a578f07022921c4b21ba14a68207f1e257d0566fb4615c711858f707ed2608c7eabbee4538ae6ae13b4a04a14004e627ef2623c04e2e0a9b7862972c4c162a09573d5d24edc34437b988658780d1360df7a8f4e9828a117040c9ff3d", 0xfe2}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in=@remote, 0x0, 0xfff9, 0x2000, 0x1, 0x0, 0x0, 0x20, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2d, 0x70bd2a, 0x70bd2c, 0x8}}]}, 0x154}, 0x1, 0x0, 0x0, 0x44}, 0x4810) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x0, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf25060117800c00030008ac0f000000000014000100"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.089444878s ago: executing program 2 (id=4979): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @private0}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYRES64=r4, @ANYRES16=r4, @ANYRESOCT=r4, @ANYRESHEX=r3, @ANYRES32=r4, @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x20044840}, 0x0) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000000)=0x20) ioctl$sock_SIOCOUTQNSD(r12, 0x894b, &(0x7f00000002c0)) syz_ublk_setup_queues(r12, r11, &(0x7f0000000340)={0x0, 0x9aed, 0x10000, 0x8000001, 0x1c6, 0x0, r6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x796a, 0x1000, 0x0, 0x1ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d79, 0x40, 0xfffffffe, 0x265}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x243e, 0x40, 0x2, 0x208, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20002908, 0x2000, 0x3, 0x178}}], 0x4, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r12, 0x117, 0x5, 0x0, 0x3) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20", @ANYRES8=r1, @ANYRES8=r1], 0xfdef) mount$overlay(0x0, &(0x7f00000003c0)='./file1/file0\x00', &(0x7f0000000400), 0x100000, &(0x7f0000000480)={[{@index_off}], [{@obj_role}, {@fsmagic={'fsmagic', 0x3d, 0x6b}}, {@appraise_type}, {@dont_hash}]}) r13 = socket$kcm(0x10, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=@canfd={{0x2}, 0xc, 0x1, 0x0, 0x0, "6c4272a9e074edbff768cccb10b6f0c7095ee0065d3d65606c77c501c11e83827e8b3e690e52d921789e8cadb0027aa1e55f8035897584a7852a12bd4abbb50d"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8e645ddd247f1ae1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x8, 0x5, {{0x10, 0x4, 0x2, 0x3, 0x40, 0x68, 0x0, 0xe, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@ra={0x94, 0x4}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x7, 0x6, "fbaa26b9"}]}, @rr={0x7, 0x1b, 0xc, [@multicast2, @multicast1, @loopback, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xa400, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r14, 0x40384708, &(0x7f0000000080)={0x9, 0x80000000, 0x80, 0x3f, 0x3, '>*\x00'}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0xfffffffffffffd91, &(0x7f0000000000)=[{&(0x7f0000000740)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.048789792s ago: executing program 3 (id=4980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015084580001fb40079684417a42888e8065475c4b01cbdd489561e8ce488c3eeb08245e2b1519dc576274faf74f57436f0000000000000000"], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x252) fcntl$setlease(r3, 0x400, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x400c010, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050004000000050053000100"], 0x2c}}, 0xc0c4) 2.974331565s ago: executing program 5 (id=4981): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r4, 0x2, 0x0, 0x8, 0x1, {0xac78, 0xfffe, 0x7, 0x69, 0x0, 0x0, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0xb, 0x1b2bb, 0x3, "fe1d00003413000000000000000caa000500090000000000000004b427180010"}}) 2.797753613s ago: executing program 5 (id=4982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04002a000a00060008021100000100000800cb00070000000f002a0076060708350007002a0105000500880009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.728918097s ago: executing program 5 (id=4984): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000160033"], 0xfc}}, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x800) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, 0x0, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xf8, &(0x7f0000000380)={[{0xd3, 0x4e00, "89f3df37da7763048878289fb0d925e76941b2a4c7e06da3a1ea3239eb81b189eb020f994dca7f229d0de6865fd242a92e238ed7edf9b4bebab8059131568bf5bc682b9f34628f726bb4fb9fb8a643286eb707a898e02d30bc43a2ba70f5d55d570c84d825c47757545814acc91e4bd198fe1eb0e5f56a40bc84cb40442f1937671e38957125e3885fe654fb058f112dd99dbdfbe28132ead13ad3eb4add1fbfffcd7735b5d058bf077bbe0b4ec66ac3c25529732105dfc1a122fac54c597d9b4c4578cb38233a0ad6d6017c46120a2166b9c8"}, {0x1c, 0x4e00, "45dfa8bca4d67d600bfe8cbd606df3ba63a984ddbc488ec1eacfebc4"}]}) 2.337831408s ago: executing program 2 (id=4985): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904", @ANYRES64=r0], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x4, 0x4f, {0x4f, 0x6, "891b259652d1187448158189b537f41a11800810cccc5f73cad7632ebe4c9803f54cacba396695c102297274c135f954736351f199f24933ece723d89dc4f6f7227778d29c6950b7ae9e501953"}}, &(0x7f0000000140)={0x0, 0x3, 0x52, @string={0x52, 0x3, "82107bf4eaeedff742b1ec9dbd11ad1494a5726b36db7513ad6b0fb5ecd61b49be9d59095dc646c7d23edf7b19d33b07aca05d9c63b02c4887c7d09143472f6b5db61159e939567bb804944ff6820ede"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000280)={0x20, 0x16}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x31}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x81, 0x1, "d7"}, &(0x7f0000000500)={0x20, 0x82, 0x1, "82"}, &(0x7f0000000540)={0x20, 0x83, 0x1, ')'}, &(0x7f0000000580)={0x20, 0x84, 0x1, "81"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "cdc0c2"}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac", 0x2d}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000010b0016"], 0x78}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000000601000000030005000000000002004e21ac1e01010000000000000021020013"], 0x78}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002cc0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000a2c000/0x3000)=nil, 0x3000, 0x2, 0x12, r4, 0x25c7f000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="18000000140001002dbd7000fcdbdf2508"], 0x18}], 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb010203010902340001fb0000000904ca010338e88006090501021000060206090500000002f803070905061000041c0d090705c1"], 0x0) 826.828001ms ago: executing program 4 (id=4987): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8010, 0xffffffffffffffff, 0xc707f000) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 641.838558ms ago: executing program 4 (id=4988): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}], 0x18}, 0x84) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), 0x4) 533.063067ms ago: executing program 4 (id=4989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001a00)={0x2, &(0x7f0000001980)=[{0x7f, 0x0, 0x0, 0x1}, {0x0, 0x7ae, &(0x7f0000000840)="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", 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 156.799355ms ago: executing program 4 (id=4990): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0xce20, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000180)="cfed93018a75", 0x6}], 0x1}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) 26.122813ms ago: executing program 4 (id=4991): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000004c00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004bc0)={&(0x7f0000000980)=@newchain={0xb90, 0x64, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x6, 0xc}, {0x7, 0xffe0}}, [@f_rsvp6={{0xa}, {0xb60, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0xffe0}}, @TCA_RSVP_ACT={0xb54, 0x6, [@m_vlan={0x130, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x4d3}]}, {0xe9, 0x6, "c09187eea6b0d005a886cce17473e875e0859dfd11810ec3170526863e315e9d9131f3c3632066137ec12fbbdfd54d7bcf720b1476c8f776b12e278f158622b12435837ab0178684049a826f24b4b6db3fa3c1f8b38deb7485709e2f25d1db9821f8981eb1e8f776867def88a9092fedcfc080f6ec43295d5be720bf0546dcf175ee2a27ee890d1a204b8a65891aa132ace0fd376138448d3a209bf7fb3277aefce14bc7f591d83ba624089120575b49668eeb31ed80a2c438c5587cfa95242825743c7c17555a339837557e0a7680d41b1af42918bdf90e09c9488f5c67f5496db20acae5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0xa20, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x9f1, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0xb90}, 0x1, 0x0, 0x0, 0xc044}, 0x8041) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2, 0x0, 0x0, 0x1f00}, 0x10150) 6.612788ms ago: executing program 4 (id=4992): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0xf, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x15}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac3(0x2, 0x11d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x25c6, 0x9002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x0, 0x10, 0x6, {0x8, 0xb, 0x1, 0x1, 0x1, 0x26, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4f, 0x504}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x401, 0x1, 0x1, 0x4, 0x1, 0x1, 0x3, 0xa}, @cluster_info_segment={0x6, 0x20, 0x6, 0xa5, 0x2}, @processing_unit={0x19, 0x24, 0x9, 0x1, 0x5, [0x3, 0x0, 0x3, 0x3, 0x2]}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x3, 0x2, 0x1, 0x40, 0x6, 0x7, 0x800}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x1, "f1"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1, "0586", "b2e9"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x9, 0x6, {0xa, 0x25, 0x25, 0x0, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x9b, 0x3, "24bfe87cad56"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x8, 0xaf, 0x3, "4482ba"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x7, 0x9, 0x10}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xba}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x3, 0x2, "902a62e972"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0xd5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x9, 0x4, {0xa, 0x25, 0x25, 0x3, 0x80, 0xb8}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x2, 0xb, 0x3, 0xff, 0x5}, 0x50, &(0x7f0000000340)={0x5, 0xf, 0x50, 0x2, [@generic={0x37, 0x10, 0x4, "14df172845faaa5d7394ee28210ecfd3ee291c74de91282b9b5bd54ee4545cfa1e77c14491bbcfc35b8b7a943ed550f5abb762b4"}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "f583e4c79355b49f685db9c7337aa3fc"}]}, 0x2, [{0x101, &(0x7f00000003c0)=@string={0x101, 0x3, "2f70c093031abe25b30eff7448a23cda88d484d09b71365bd35e04d7b8fccc86c37ae8fdc53eee1c9da86c7fee0d6592b16e2344cef17391129230615ffaee329cf27b39d77fd2345473bc143758e0f2b9b2d8c55cc94bd0e3f2e0888e66801809f88ea59d6d04aa52d9a25b24428ebb911cebd9e0c556cb497b6cc6ebe43f134a4ef84fcdef7f6fccd73f0a71f75f1248a2c97f6849b48a73c1f356e895a53f660779ad69749a60b7342fed0d0971a0fa3bb54e0a9c613c74914a4c70a9479976aecdf9138bbb762e75fd871d8a3c08984bd651acb9d868bfcf70336e9e98fb9ee2e3fa68c1f7859319807e3656e173676eef7fe7044d588724ada9d4aacd"}}, {0xb6, &(0x7f0000000580)=@string={0xb6, 0x3, "4622583ac4b5c80d6d99077f80d9365f32ac62288f35c4493cddee300e4dcee8b9e405b4f55c8c1d1d7790b536b0f3f49fd719220b6902a8f4d7b4aa76e2b56f5769996bd4cd93dfb787c55d6bc8fb418784a4911dd0211314f490bb6d5e9afb28444496d8ddc5a09830ed5ff3e220f15de245492c0dc060af88fe432f764d122a2a524620cb94171171833c733034001df0267196b6b0af018162504ce926312f7653ba92f1021f13613a3569c9f1ebc41e74b3"}}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="402126000000268ec50060f5483e0806088c84b6a02714d98b079ed50de2fca855fbde"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=4993): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800", @ANYBLOB="9cc54109"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x1, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) kernel console output (not intermixed with test programs): 0: renamed from eth0 [ 1007.322371][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.328985][T19396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1007.401515][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.625975][T17418] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.671354][T19396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1007.716135][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.981104][T19396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1008.046000][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1008.335367][T17418] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.884074][T19396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.055719][T19396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.185734][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.191615][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.217610][T14202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.217856][T14202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.647778][T19396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.223747][T17418] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.956902][T17418] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.631533][T17418] bond0: (slave netdevsim1): Releasing backup interface [ 1011.707781][T17418] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.761574][T19396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.275456][T17418] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.758512][T19396] veth0_vlan: entered promiscuous mode [ 1012.776267][T19396] veth1_vlan: entered promiscuous mode [ 1012.868102][T19396] veth0_macvtap: entered promiscuous mode [ 1012.899421][T19396] veth1_macvtap: entered promiscuous mode [ 1012.987963][T19396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.191374][T19396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.510208][T16486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.517715][T16486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.518487][T16486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.519180][T16486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.297174][T17418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.391765][T16500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.391786][T16500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.689649][T16505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.689668][T16505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.942980][T17418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.524715][ T5709] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1016.528046][T17418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.670627][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 1016.676876][ T5709] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1016.707847][ T5709] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.721509][ T5709] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1016.721527][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.721538][ T5709] usb 6-1: Product: syz [ 1016.721547][ T5709] usb 6-1: Manufacturer: syz [ 1016.721554][ T5709] usb 6-1: SerialNumber: syz [ 1016.934473][ T5709] usb 6-1: Cannot retrieve CPort count: -71 [ 1016.934520][ T5709] usb 6-1: Cannot retrieve CPort count: -71 [ 1016.934553][ T5709] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 1016.937215][ T5709] usb 6-1: USB disconnect, device number 10 [ 1017.415047][T17418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.793143][T19394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1017.825865][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1017.827276][T19394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1017.879740][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1017.957728][T19394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1018.105542][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.117605][T19394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1018.170304][T19394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.620567][ T37] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1018.853192][ T37] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1018.853224][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.891630][ T37] usb 6-1: config 0 descriptor?? [ 1018.909900][ T37] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1019.588829][T19499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.589397][T19499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.595809][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4626'. [ 1019.636108][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.800121][ T37] gspca_sunplus: reg_w_riv err -71 [ 1019.800289][ T37] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1019.822577][ T37] usb 6-1: USB disconnect, device number 11 [ 1019.968574][T17418] bridge_slave_1: left allmulticast mode [ 1019.968609][T17418] bridge_slave_1: left promiscuous mode [ 1019.968843][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.172161][T17418] bridge_slave_0: left allmulticast mode [ 1020.172197][T17418] bridge_slave_0: left promiscuous mode [ 1020.172467][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.461117][T17418] bridge_slave_1: left allmulticast mode [ 1020.461153][T17418] bridge_slave_1: left promiscuous mode [ 1020.461440][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.622248][T17418] bridge_slave_0: left allmulticast mode [ 1020.622286][T17418] bridge_slave_0: left promiscuous mode [ 1020.622565][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.921394][T17418] bridge_slave_1: left allmulticast mode [ 1020.921431][T17418] bridge_slave_1: left promiscuous mode [ 1020.921713][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.062272][T17418] bridge_slave_0: left allmulticast mode [ 1021.062307][T17418] bridge_slave_0: left promiscuous mode [ 1021.062666][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.901705][T17418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.982585][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.024185][T17418] bond0 (unregistering): Released all slaves [ 1023.951392][T17418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.031414][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1024.072621][T17418] bond0 (unregistering): Released all slaves [ 1024.901243][T17418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.982782][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.025352][T17418] bond0 (unregistering): Released all slaves [ 1025.096578][T19405] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1025.126042][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.199768][T19405] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1025.314909][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.443502][T19405] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1025.551918][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.720670][ T32] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1025.929961][T19405] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1025.932959][ T32] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1025.932986][ T32] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1025.935460][ T32] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1025.935486][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.935506][ T32] usb 6-1: Product: syz [ 1025.935520][ T32] usb 6-1: Manufacturer: syz [ 1025.935534][ T32] usb 6-1: SerialNumber: syz [ 1025.940714][ T32] usb 6-1: config 0 descriptor?? [ 1025.947060][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1026.272057][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1026.302683][T19394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.654109][ T5619] usb 6-1: USB disconnect, device number 12 [ 1026.746675][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.746835][T16500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.060117][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.060281][T16500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.229972][T19387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1027.268330][T19387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.463551][T19387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1027.486535][T19387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.557286][T19387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1027.647106][T19387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.766299][T19387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1027.860217][T19387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.080649][ T822] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1028.270565][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 1028.331148][ T822] usb 6-1: config 0 has no interfaces? [ 1028.334649][ T822] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1028.334678][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.334699][ T822] usb 6-1: Product: syz [ 1028.334713][ T822] usb 6-1: Manufacturer: syz [ 1028.334729][ T822] usb 6-1: SerialNumber: syz [ 1028.338073][ T822] usb 6-1: config 0 descriptor?? [ 1028.714981][ T5788] usb 6-1: USB disconnect, device number 13 [ 1029.600609][ T5780] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1029.755607][ T5780] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1029.755633][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.755644][ T5780] usb 6-1: Product: syz [ 1029.755652][ T5780] usb 6-1: Manufacturer: syz [ 1029.755660][ T5780] usb 6-1: SerialNumber: syz [ 1029.866232][T19405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.185048][T19405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.235665][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.235832][T14212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.589615][ T5780] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1030.675827][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.675955][T14014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.744423][T19387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.776665][T19394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.036656][ T5780] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1031.218375][ T5780] usb 6-1: USB disconnect, device number 14 [ 1031.310342][T19387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.333203][ T5780] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1031.439537][T16486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.439709][T16486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.646197][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.646431][T14212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.942486][T19551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.120803][T17418] hsr_slave_0: left promiscuous mode [ 1032.160604][T17418] hsr_slave_1: left promiscuous mode [ 1032.161736][T17418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.161762][T17418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.202878][T17418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.202898][T17418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.400587][T17418] hsr_slave_0: left promiscuous mode [ 1032.442262][T17418] hsr_slave_1: left promiscuous mode [ 1032.443389][T17418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.443413][T17418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.482221][T17418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.482249][T17418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.682723][T17418] hsr_slave_0: left promiscuous mode [ 1032.720574][T17418] hsr_slave_1: left promiscuous mode [ 1032.721653][T17418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.721679][T17418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.762768][T17418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.762793][T17418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.202492][T17418] veth1_macvtap: left promiscuous mode [ 1033.202598][T17418] veth0_macvtap: left promiscuous mode [ 1033.202785][T17418] veth1_vlan: left promiscuous mode [ 1033.202896][T17418] veth0_vlan: left promiscuous mode [ 1033.340927][T17418] veth1_macvtap: left promiscuous mode [ 1033.341032][T17418] veth0_macvtap: left promiscuous mode [ 1033.341327][T17418] veth1_vlan: left promiscuous mode [ 1033.501640][T17418] veth1_macvtap: left promiscuous mode [ 1033.501705][T17418] veth0_macvtap: left promiscuous mode [ 1033.501923][T17418] veth1_vlan: left promiscuous mode [ 1033.502042][T17418] veth0_vlan: left promiscuous mode [ 1035.051420][T17418] team0 (unregistering): Port device team_slave_1 removed [ 1035.112491][T17418] team0 (unregistering): Port device team_slave_0 removed [ 1035.788345][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1035.866566][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1035.889672][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1035.927587][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1035.928408][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1036.162027][T17418] team0 (unregistering): Port device macvlan1 removed [ 1036.441141][T17418] team0 (unregistering): Port device team_slave_1 removed [ 1036.522811][T17418] team0 (unregistering): Port device team_slave_0 removed [ 1036.793903][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.898013][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1036.935309][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1036.937867][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1036.938674][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1037.931349][T17418] team0 (unregistering): Port device team_slave_1 removed [ 1037.964474][ T60] Bluetooth: hci0: command tx timeout [ 1037.992471][T17418] team0 (unregistering): Port device team_slave_0 removed [ 1038.902540][ T5724] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1039.000726][ T60] Bluetooth: hci1: command tx timeout [ 1039.093590][ T5724] usb 6-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config [ 1039.093619][ T5724] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1039.167873][ T5724] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1039.167906][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.167933][ T5724] usb 6-1: Product: syz [ 1039.167947][ T5724] usb 6-1: Manufacturer: syz [ 1039.167962][ T5724] usb 6-1: SerialNumber: syz [ 1040.082103][ T60] Bluetooth: hci0: command tx timeout [ 1040.671595][ T5724] usb 6-1: USB disconnect, device number 15 [ 1041.080983][ T60] Bluetooth: hci1: command tx timeout [ 1041.178754][T19405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.982982][T19598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4638'. [ 1042.121541][ T60] Bluetooth: hci0: command tx timeout [ 1042.375936][T19405] veth0_vlan: entered promiscuous mode [ 1042.527288][T19405] veth1_vlan: entered promiscuous mode [ 1043.161494][ T60] Bluetooth: hci1: command tx timeout [ 1043.300957][T19558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.301223][T19558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.301557][T19558] bridge_slave_0: entered allmulticast mode [ 1043.304979][T19558] bridge_slave_0: entered promiscuous mode [ 1043.371783][T19558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.372079][T19558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.372416][T19558] bridge_slave_1: entered allmulticast mode [ 1043.400865][ T5601] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1043.435125][T19558] bridge_slave_1: entered promiscuous mode [ 1043.667565][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1043.718764][ T5601] usb 6-1: config 0 has no interfaces? [ 1043.718799][ T5601] usb 6-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1043.718822][ T5601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.756200][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1043.768726][ T5601] usb 6-1: config 0 descriptor?? [ 1043.850630][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1043.888597][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1043.890187][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1044.123303][T19558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.176387][T19558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.180223][T19563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.185957][T19563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.186271][T19563] bridge_slave_0: entered allmulticast mode [ 1044.189375][T19563] bridge_slave_0: entered promiscuous mode [ 1044.205664][ T5617] Bluetooth: hci0: command tx timeout [ 1044.317715][T19563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.318011][T19563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.318362][T19563] bridge_slave_1: entered allmulticast mode [ 1044.323256][T19563] bridge_slave_1: entered promiscuous mode [ 1044.349494][T19624] FAULT_INJECTION: forcing a failure. [ 1044.349494][T19624] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.349530][T19624] CPU: 1 UID: 0 PID: 19624 Comm: syz.5.4642 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1044.349557][T19624] Tainted: [L]=SOFTLOCKUP [ 1044.349565][T19624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1044.349577][T19624] Call Trace: [ 1044.349585][T19624] [ 1044.349593][T19624] dump_stack_lvl+0xe8/0x150 [ 1044.349621][T19624] should_fail_ex+0x46b/0x600 [ 1044.349654][T19624] should_failslab+0xa8/0x100 [ 1044.349679][T19624] __kvmalloc_node_noprof+0x181/0x910 [ 1044.349700][T19624] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1044.349727][T19624] ? seq_read_iter+0x203/0xe20 [ 1044.349752][T19624] ? seq_read_iter+0x203/0xe20 [ 1044.349778][T19624] ? seq_read_iter+0xb8/0xe20 [ 1044.349805][T19624] seq_read_iter+0x203/0xe20 [ 1044.349830][T19624] ? kstrtoull+0x12f/0x1d0 [ 1044.349858][T19624] ? __asan_memset+0x22/0x50 [ 1044.349889][T19624] seq_read+0x36a/0x490 [ 1044.349921][T19624] ? __pfx_seq_read+0x10/0x10 [ 1044.349957][T19624] ? rw_verify_area+0x2ac/0x4e0 [ 1044.349986][T19624] ? __pfx_seq_read+0x10/0x10 [ 1044.350013][T19624] vfs_read+0x212/0xa80 [ 1044.350043][T19624] ? __pfx_vfs_read+0x10/0x10 [ 1044.350067][T19624] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1044.350091][T19624] ? lockdep_hardirqs_on+0x7a/0x110 [ 1044.350115][T19624] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1044.350138][T19624] ? mutex_lock_nested+0x152/0x1d0 [ 1044.350165][T19624] ? fdget_pos+0x252/0x320 [ 1044.350192][T19624] ksys_read+0x156/0x270 [ 1044.350221][T19624] ? __pfx_ksys_read+0x10/0x10 [ 1044.350251][T19624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.350272][T19624] do_syscall_64+0x174/0x580 [ 1044.350294][T19624] ? trace_irq_disable+0x3b/0x140 [ 1044.350319][T19624] ? clear_bhb_loop+0x40/0x90 [ 1044.350342][T19624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.350362][T19624] RIP: 0033:0x7f5f4c45ce59 [ 1044.350380][T19624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.350396][T19624] RSP: 002b:00007f5f4a695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1044.350428][T19624] RAX: ffffffffffffffda RBX: 00007f5f4c6d6090 RCX: 00007f5f4c45ce59 [ 1044.350441][T19624] RDX: 0000000000001f8c RSI: 0000200000000400 RDI: 0000000000000004 [ 1044.350453][T19624] RBP: 00007f5f4a695090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.350466][T19624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.350477][T19624] R13: 00007f5f4c6d6128 R14: 00007f5f4c6d6090 R15: 00007ffc9c037dc8 [ 1044.350506][T19624] [ 1044.518952][T19558] team0: Port device team_slave_0 added [ 1045.157327][T19558] team0: Port device team_slave_1 added [ 1045.208682][T17418] IPVS: stop unused estimator thread 0... [ 1045.209571][T17418] IPVS: stop unused estimator thread 0... [ 1045.240583][ T5617] Bluetooth: hci1: command tx timeout [ 1045.268891][T19563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.352515][T19563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.357687][T19558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.357703][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.357729][T19558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.441552][T19558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.441564][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.441581][T19558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.624330][T19563] team0: Port device team_slave_0 added [ 1045.649464][T19563] team0: Port device team_slave_1 added [ 1045.764065][T19563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.764083][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.764110][T19563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.844021][T19558] hsr_slave_0: entered promiscuous mode [ 1045.845303][T19558] hsr_slave_1: entered promiscuous mode [ 1045.866454][T19563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.866471][T19563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.866497][T19563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.122235][ T5617] Bluetooth: hci2: command tx timeout [ 1046.145912][ T37] usb 6-1: USB disconnect, device number 16 [ 1046.212286][T19632] 9p: Bad value for 'wfdno' [ 1046.453071][T19634] netlink: 22 bytes leftover after parsing attributes in process `syz.5.4644'. [ 1047.003603][T19563] hsr_slave_0: entered promiscuous mode [ 1047.005757][T19563] hsr_slave_1: entered promiscuous mode [ 1047.007497][T19563] debugfs: 'hsr0' already exists in 'hsr' [ 1047.007522][T19563] Cannot create hsr debugfs directory [ 1048.208944][ T5617] Bluetooth: hci2: command tx timeout [ 1050.055612][T19617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.055856][T19617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.056098][T19617] bridge_slave_0: entered allmulticast mode [ 1050.059514][T19617] bridge_slave_0: entered promiscuous mode [ 1050.086873][T19617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.087158][T19617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.087504][T19617] bridge_slave_1: entered allmulticast mode [ 1050.092120][T19617] bridge_slave_1: entered promiscuous mode [ 1050.331192][ T5617] Bluetooth: hci2: command tx timeout [ 1050.547825][T19617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.621561][T19617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.023831][T19617] team0: Port device team_slave_0 added [ 1051.030144][T19617] team0: Port device team_slave_1 added [ 1051.081427][T19617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.081441][T19617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.081462][T19617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.085418][T19617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.085434][T19617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.085461][T19617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.175734][T19617] hsr_slave_0: entered promiscuous mode [ 1051.177743][T19617] hsr_slave_1: entered promiscuous mode [ 1051.179330][T19617] debugfs: 'hsr0' already exists in 'hsr' [ 1051.179354][T19617] Cannot create hsr debugfs directory [ 1052.360942][ T5617] Bluetooth: hci2: command tx timeout [ 1054.060974][T17418] bridge_slave_1: left allmulticast mode [ 1054.061011][T17418] bridge_slave_1: left promiscuous mode [ 1054.061291][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.222198][T17418] bridge_slave_0: left allmulticast mode [ 1054.222234][T17418] bridge_slave_0: left promiscuous mode [ 1054.222530][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.462067][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.462173][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.481743][T17418] bridge_slave_1: left allmulticast mode [ 1054.481775][T17418] bridge_slave_1: left promiscuous mode [ 1054.482033][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.642121][T17418] bridge_slave_0: left allmulticast mode [ 1054.642156][T17418] bridge_slave_0: left promiscuous mode [ 1054.642434][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.920872][T17418] bridge_slave_1: left allmulticast mode [ 1054.920909][T17418] bridge_slave_1: left promiscuous mode [ 1054.921173][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.083939][T17418] bridge_slave_0: left allmulticast mode [ 1055.083976][T17418] bridge_slave_0: left promiscuous mode [ 1055.084249][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.451590][T17418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.531473][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.573999][T17418] bond0 (unregistering): Released all slaves [ 1057.371519][T17418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.451571][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.494506][T17418] bond0 (unregistering): Released all slaves [ 1058.381446][T17418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.461439][T17418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.506080][T17418] bond0 (unregistering): Released all slaves [ 1060.150767][T17418] hsr_slave_0: left promiscuous mode [ 1060.170675][T17418] hsr_slave_1: left promiscuous mode [ 1060.171416][T17418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.211244][T17418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.410579][T17418] hsr_slave_0: left promiscuous mode [ 1060.451025][T17418] hsr_slave_1: left promiscuous mode [ 1060.452197][T17418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.491671][T17418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.670610][T17418] hsr_slave_0: left promiscuous mode [ 1060.710665][T17418] hsr_slave_1: left promiscuous mode [ 1060.711793][T17418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.751659][T17418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1060.852331][T17418] veth1_vlan: left promiscuous mode [ 1060.852616][T17418] veth0_vlan: left promiscuous mode [ 1061.811115][T17418] team0 (unregistering): Port device team_slave_1 removed [ 1061.871341][T17418] team0 (unregistering): Port device team_slave_0 removed [ 1062.531468][T17418] team0 (unregistering): Port device team_slave_1 removed [ 1062.591568][T17418] team0 (unregistering): Port device team_slave_0 removed [ 1063.322532][T17418] team0 (unregistering): Port device team_slave_1 removed [ 1063.391333][T17418] team0 (unregistering): Port device team_slave_0 removed [ 1065.097065][T19558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1065.138986][T19558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1065.170866][T19558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1065.263897][T19558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1065.318348][T19558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1065.371799][T19558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1065.373378][T19558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1065.409952][T19558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1066.396115][T19558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.429724][T19558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.453393][T16488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.453631][T16488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.477337][T16488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.477521][T16488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.607035][T19558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.608998][T19563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1068.648108][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1068.696769][T19563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1068.799176][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1068.825725][T19563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1068.892432][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1068.989386][T19563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1069.018238][T19563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.351726][T19617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1069.383945][T19617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1069.388367][T19617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1069.466505][T19617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1069.499968][T19617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1069.535292][T19617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1069.539242][T19617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1069.586973][T19617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1069.661984][T19558] veth0_vlan: entered promiscuous mode [ 1069.755817][T19558] veth1_vlan: entered promiscuous mode [ 1069.968206][T19563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.995154][T19558] veth0_macvtap: entered promiscuous mode [ 1070.023163][T19558] veth1_macvtap: entered promiscuous mode [ 1070.113937][T19563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.159020][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.159272][T17418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.166715][T19558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.189660][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.189917][T17418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.232045][T19617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.243929][T19558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.323628][T14014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.329021][T14014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.334316][T14014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.336751][T14014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.342261][T19617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.628662][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.628838][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.860879][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.861041][T14008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.507920][T14014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.507940][T14014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.046008][T14202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.046028][T14202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.593620][T19693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4618'. [ 1072.812686][T19693] nvme_fabrics: missing parameter 'transport=%s' [ 1072.812704][T19693] nvme_fabrics: missing parameter 'nqn=%s' [ 1073.137694][T19617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.196756][T19563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.366153][ T822] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1073.486074][T19617] veth0_vlan: entered promiscuous mode [ 1073.532959][T19617] veth1_vlan: entered promiscuous mode [ 1073.597819][ T822] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1073.597849][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.614587][ T822] usb 3-1: config 0 descriptor?? [ 1073.639174][ T822] cp210x 3-1:0.0: cp210x converter detected [ 1074.083219][ T822] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1074.115918][ T822] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 1074.115966][ T822] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 1074.194361][ T822] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1074.199431][T19617] veth0_macvtap: entered promiscuous mode [ 1074.273348][T19617] veth1_macvtap: entered promiscuous mode [ 1074.327186][ T32] usb 3-1: USB disconnect, device number 19 [ 1074.344915][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1074.384769][ T32] cp210x 3-1:0.0: device disconnected [ 1074.418931][T19617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.456890][T19617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.488761][T14211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.501853][T14211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.569439][T14211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.592454][T14211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.793056][T19563] veth0_vlan: entered promiscuous mode [ 1075.321515][T19563] veth1_vlan: entered promiscuous mode [ 1075.455945][T19728] IPVS: set_ctl: invalid protocol: 41 172.20.20.45:20000 [ 1075.966549][T19563] veth0_macvtap: entered promiscuous mode [ 1076.027369][T19563] veth1_macvtap: entered promiscuous mode [ 1076.323286][T16500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.323409][T16500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.490009][T19563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.519723][T19563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.671136][T16494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.673189][T16494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.673298][T16500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.673314][T16500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.734474][T16494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.741064][T16494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.953328][T16503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.953348][T16503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.235372][T14200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1079.235392][T14200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.991416][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1080.081808][T18502] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1080.110620][T19730] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1080.144111][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1080.144143][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.149139][ T9] usb 5-1: config 0 descriptor?? [ 1080.162994][ T9] cp210x 5-1:0.0: cp210x converter detected [ 1080.247257][T18502] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1080.248894][T18502] usb 6-1: not running at top speed; connect to a high speed hub [ 1080.264953][T19730] usb 3-1: Using ep0 maxpacket: 16 [ 1080.265703][T18502] usb 6-1: config 128 has an invalid interface number: 120 but max is 1 [ 1080.265726][T18502] usb 6-1: config 128 has an invalid interface number: 87 but max is 1 [ 1080.265746][T18502] usb 6-1: config 128 has no interface number 0 [ 1080.265819][T18502] usb 6-1: config 128 has no interface number 1 [ 1080.265894][T18502] usb 6-1: config 128 interface 120 has no altsetting 0 [ 1080.265912][T18502] usb 6-1: config 128 interface 87 has no altsetting 0 [ 1080.276919][T18502] usb 6-1: New USB device found, idVendor=041e, idProduct=4029, bcdDevice=1b.38 [ 1080.276949][T18502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.276969][T18502] usb 6-1: Product: syz [ 1080.277047][T18502] usb 6-1: Manufacturer: syz [ 1080.277062][T18502] usb 6-1: SerialNumber: syz [ 1080.308138][T19730] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1080.308169][T19730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.308249][T19730] usb 3-1: Product: syz [ 1080.308264][T19730] usb 3-1: Manufacturer: syz [ 1080.308279][T19730] usb 3-1: SerialNumber: syz [ 1080.417803][T19730] usb 3-1: config 0 descriptor?? [ 1080.589034][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1080.618000][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 1080.618118][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 1080.734174][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1080.817217][T19775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.828966][T19775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.841908][ T9] usb 5-1: USB disconnect, device number 16 [ 1080.893409][T18502] cdc_mbim 6-1:128.87: CDC Union missing and no IAD found [ 1080.893440][T18502] cdc_mbim 6-1:128.87: bind() failure [ 1081.003071][T19730] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1081.072390][T18502] usb 6-1: USB disconnect, device number 17 [ 1081.079613][ T38] audit: type=1804 audit(5344017513.913:52): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4667" name="/newroot/9/cgroup.controllers" dev="tmpfs" ino=64 res=1 errno=0 [ 1081.079667][ T38] audit: type=1800 audit(5344017513.913:53): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4667" name="cgroup.controllers" dev="tmpfs" ino=64 res=0 errno=0 [ 1081.120279][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1081.131381][ T9] cp210x 5-1:0.0: device disconnected [ 1081.243630][ T38] audit: type=1804 audit(5344017514.083:54): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4667" name="/newroot/9/cgroup.controllers" dev="tmpfs" ino=64 res=1 errno=0 [ 1082.423597][T19800] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4675'. [ 1082.984277][ T32] usb 3-1: USB disconnect, device number 20 [ 1083.883760][T19790] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1083.890288][ T5617] Bluetooth: hci6: command 0x0c1a tx timeout [ 1083.960609][T19790] Bluetooth: hci6: Opcode 0x0406 failed: -110 [ 1084.558983][T19790] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1084.677001][T19790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1084.677086][T19790] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1084.772560][T19790] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1084.865956][T19790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1084.866078][T19790] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1084.940869][T19790] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1085.016389][T19790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1085.016520][T19790] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1085.096467][T19790] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1085.440572][T18502] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1085.441161][T19730] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1085.591712][T18502] usb 6-1: Using ep0 maxpacket: 32 [ 1085.596367][T19730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.596632][T19730] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1085.596659][T19730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.618994][T19730] usb 3-1: config 0 descriptor?? [ 1085.641900][ T9] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1085.679974][T18502] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1085.680015][T18502] usb 6-1: can't read configurations, error -71 [ 1085.720902][ T5601] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1085.792845][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1085.793458][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1085.794597][ T9] usb 4-1: config 128 has an invalid interface number: 120 but max is 1 [ 1085.794621][ T9] usb 4-1: config 128 has an invalid interface number: 87 but max is 1 [ 1085.794642][ T9] usb 4-1: config 128 has no interface number 0 [ 1085.794657][ T9] usb 4-1: config 128 has no interface number 1 [ 1085.794736][ T9] usb 4-1: config 128 interface 120 has no altsetting 0 [ 1085.794747][ T9] usb 4-1: config 128 interface 87 has no altsetting 0 [ 1085.797462][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=4029, bcdDevice=1b.38 [ 1085.797478][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.797489][ T9] usb 4-1: Product: syz [ 1085.797496][ T9] usb 4-1: Manufacturer: syz [ 1085.797504][ T9] usb 4-1: SerialNumber: syz [ 1085.882263][ T5601] usb 5-1: Using ep0 maxpacket: 16 [ 1085.907493][ T5601] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1085.907512][ T5601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.907522][ T5601] usb 5-1: Product: syz [ 1085.907530][ T5601] usb 5-1: Manufacturer: syz [ 1085.907538][ T5601] usb 5-1: SerialNumber: syz [ 1085.950114][T19730] usbhid 3-1:0.0: can't add hid device: -71 [ 1085.950239][T19730] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1085.973503][T19730] usb 3-1: USB disconnect, device number 21 [ 1086.012033][ T5601] usb 5-1: config 0 descriptor?? [ 1086.035546][ T5601] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1086.043688][ T5617] Bluetooth: hci6: command 0x0c1a tx timeout [ 1086.110608][T18502] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1086.203352][ T9] cdc_mbim 4-1:128.87: CDC Union missing and no IAD found [ 1086.203463][ T9] cdc_mbim 4-1:128.87: bind() failure [ 1086.261832][ T9] usb 4-1: USB disconnect, device number 90 [ 1086.273925][T18502] usb 6-1: Using ep0 maxpacket: 8 [ 1086.293655][T18502] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1086.298703][T18502] usb 6-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 1086.298721][T18502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.298731][T18502] usb 6-1: Product: syz [ 1086.298739][T18502] usb 6-1: Manufacturer: syz [ 1086.298747][T18502] usb 6-1: SerialNumber: syz [ 1086.547551][ T5601] usb 5-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1086.641225][T19730] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1086.680963][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 1086.759815][T18502] usb 6-1: MBOX3: Invalid descriptor size=105. [ 1086.773339][T18502] usb 6-1: MBOX3: Invalid descriptor size=105. [ 1086.790828][T19730] usb 3-1: Using ep0 maxpacket: 16 [ 1086.797758][T19730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.797807][T19730] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 1086.797840][T19730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.803390][T18502] usb 6-1: MBOX3: Invalid descriptor size=105. [ 1086.835027][T19730] usb 3-1: config 0 descriptor?? [ 1086.922920][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 1086.923111][T18502] usb 6-1: USB disconnect, device number 19 [ 1087.041522][T19730] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 1087.083806][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 1087.107039][T19730] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input60 [ 1087.237471][ C0] powermate: config urb returned -71 [ 1087.241288][ C0] powermate: config urb returned -71 [ 1087.241506][ C0] powermate: config urb returned -71 [ 1087.241705][ C0] powermate: config urb returned -71 [ 1087.255782][T19730] usb 3-1: USB disconnect, device number 22 [ 1087.255888][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1087.816119][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4689'. [ 1088.122920][ T5617] Bluetooth: hci6: command 0x0c1a tx timeout [ 1088.310604][ T37] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1088.460623][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 1088.463805][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1088.472862][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1088.472893][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.472915][ T37] usb 3-1: Product: syz [ 1088.472930][ T37] usb 3-1: Manufacturer: syz [ 1088.472946][ T37] usb 3-1: SerialNumber: syz [ 1088.547752][ T37] usb 3-1: config 0 descriptor?? [ 1088.570848][ T37] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1088.570888][ T37] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1088.625202][T19730] usb 5-1: USB disconnect, device number 17 [ 1088.673345][T19730] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1088.676722][T19730] visor 5-1:0.0: device disconnected [ 1088.705274][T19849] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4696'. [ 1088.763988][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 1088.942536][T13849] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1089.006107][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 1089.033330][T19850] binder: 19848:19850 ioctl 1276 3800 returned -22 [ 1089.113552][T13849] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1089.113588][T13849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.140067][T13849] usb 6-1: config 0 descriptor?? [ 1089.153543][T19849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.160240][T19842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.160965][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 1089.163416][T19842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.169185][T19730] IPVS: starting estimator thread 0... [ 1089.245952][T19849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.252083][T19853] IPVS: using max 12 ests per chain, 28800 per kthread [ 1089.298955][T19849] bond0 (unregistering): Released all slaves [ 1089.560372][T19847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.574871][T19847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.638027][T13849] usb 6-1: Cannot read MAC address [ 1089.638411][T13849] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1089.652297][ T37] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1089.663471][T13849] usb 6-1: USB disconnect, device number 20 [ 1089.804705][ T37] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1089.804737][ T37] em28xx 3-1:0.0: board has no eeprom [ 1089.892651][ T37] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1089.892680][ T37] em28xx 3-1:0.0: dvb set to bulk mode. [ 1089.892984][T13849] em28xx 3-1:0.0: Binding DVB extension [ 1089.944927][ T37] usb 3-1: USB disconnect, device number 23 [ 1089.956792][ T37] em28xx 3-1:0.0: Disconnecting em28xx [ 1090.195402][T19862] team0: No ports can be present during mode change [ 1090.366905][T13849] em28xx 3-1:0.0: Registering input extension [ 1090.367117][ T37] em28xx 3-1:0.0: Closing input extension [ 1090.841327][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 1090.954949][ T37] em28xx 3-1:0.0: Freeing device [ 1091.080583][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 1091.241002][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 1091.402506][ T37] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1091.578815][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 1091.584639][ T37] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1091.584668][ T37] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1091.584688][ T37] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1091.584709][ T37] usb 3-1: config 250 has no interface number 0 [ 1091.584756][ T37] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1091.584784][ T37] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1091.584809][ T37] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1091.584831][ T37] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1091.584858][ T37] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1091.589718][ T37] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1091.589747][ T37] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1091.589768][ T37] usb 3-1: Product: syz [ 1091.589783][ T37] usb 3-1: SerialNumber: syz [ 1091.630191][ T37] hub 3-1:250.228: bad descriptor, ignoring hub [ 1091.630229][ T37] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1092.001951][T18502] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1092.007600][ T37] usb 3-1: USB disconnect, device number 24 [ 1092.130774][T18502] usb 5-1: device descriptor read/64, error -71 [ 1092.370548][T18502] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1092.531058][T18502] usb 5-1: device descriptor read/64, error -71 [ 1092.645152][T18502] usb usb5-port1: attempt power cycle [ 1093.000872][T18502] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1093.021621][T18502] usb 5-1: device descriptor read/8, error -71 [ 1093.264511][T18502] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1093.281392][T18502] usb 5-1: device descriptor read/8, error -71 [ 1093.392758][T18502] usb usb5-port1: unable to enumerate USB device [ 1093.440604][ T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1093.663013][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1093.663565][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1093.665160][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1093.665195][ T9] usb 6-1: can't read configurations, error -61 [ 1093.790592][ T9] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1093.944203][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1093.945255][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1093.948355][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1093.948392][ T9] usb 6-1: can't read configurations, error -61 [ 1093.950248][ T9] usb usb6-port1: attempt power cycle [ 1094.320842][ T9] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1094.346399][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1094.347529][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1094.383357][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1094.383394][ T9] usb 6-1: can't read configurations, error -61 [ 1094.510594][ T9] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1094.537315][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1094.537928][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 1094.539716][ T9] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1094.539750][ T9] usb 6-1: can't read configurations, error -61 [ 1094.557764][ T9] usb usb6-port1: unable to enumerate USB device [ 1094.702469][T13849] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1094.838523][T19935] dlm: no local IP address has been set [ 1094.838539][T19935] dlm: cannot start dlm midcomms -107 [ 1094.870593][T13849] usb 3-1: Using ep0 maxpacket: 32 [ 1094.876800][T13849] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1094.876828][T13849] usb 3-1: config 0 has no interface number 0 [ 1094.876866][T13849] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 5701, setting to 1024 [ 1094.876881][T13849] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1094.890576][T13849] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1094.890607][T13849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.890627][T13849] usb 3-1: Product: syz [ 1094.890641][T13849] usb 3-1: Manufacturer: syz [ 1094.890656][T13849] usb 3-1: SerialNumber: syz [ 1094.912632][T13849] usb 3-1: config 0 descriptor?? [ 1094.979133][T19933] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1094.994359][T13849] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1094.994383][T13849] em28xx 3-1:0.132: Video interface 132 found: bulk [ 1095.188653][T19933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.214117][T19933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.264440][T19933] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1095.488269][T13849] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1095.700701][T13849] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1095.700734][T13849] em28xx 3-1:0.132: board has no eeprom [ 1095.766399][T13849] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1095.766431][T13849] em28xx 3-1:0.132: analog set to bulk mode. [ 1095.768605][ T37] em28xx 3-1:0.132: Registering V4L2 extension [ 1095.785755][T13849] usb 3-1: USB disconnect, device number 25 [ 1095.795664][T13849] em28xx 3-1:0.132: Disconnecting em28xx [ 1096.025018][T19947] comedi comedi3: comedi_config --init_data is deprecated [ 1096.542312][ T37] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1096.542337][ T37] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1096.542351][ T37] em28xx 3-1:0.132: No AC97 audio processor [ 1096.848413][ T37] usb 3-1: Decoder not found [ 1096.848435][ T37] em28xx 3-1:0.132: failed to create media graph [ 1096.848478][ T37] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1097.105152][ T37] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1097.105225][T13849] em28xx 3-1:0.132: Closing input extension [ 1097.228074][T13849] em28xx 3-1:0.132: Freeing device [ 1097.531009][T19730] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1097.540243][T19972] syz.2.4741 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1097.683062][T19730] usb 5-1: Using ep0 maxpacket: 32 [ 1097.688474][T19730] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1097.688506][T19730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.726465][T19730] usb 5-1: config 0 descriptor?? [ 1097.742101][T19730] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1098.768296][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.768848][T20000] FAULT_INJECTION: forcing a failure. [ 1098.768848][T20000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1098.768864][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.768885][T20000] CPU: 0 UID: 0 PID: 20000 Comm: syz.2.4752 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1098.768911][T20000] Tainted: [L]=SOFTLOCKUP [ 1098.768918][T20000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1098.768930][T20000] Call Trace: [ 1098.768938][T20000] [ 1098.768947][T20000] dump_stack_lvl+0xe8/0x150 [ 1098.768975][T20000] should_fail_ex+0x46b/0x600 [ 1098.769006][T20000] _copy_from_user+0x2d/0xb0 [ 1098.769029][T20000] kstrtouint_from_user+0xd6/0x180 [ 1098.769059][T20000] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1098.769102][T20000] proc_fail_nth_write+0x8e/0x210 [ 1098.769125][T20000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1098.769151][T20000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1098.769173][T20000] vfs_write+0x2a3/0xba0 [ 1098.769205][T20000] ? __pfx_vfs_write+0x10/0x10 [ 1098.769231][T20000] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1098.769256][T20000] ? lockdep_hardirqs_on+0x7a/0x110 [ 1098.769281][T20000] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1098.769304][T20000] ? mutex_lock_nested+0x152/0x1d0 [ 1098.769333][T20000] ? fdget_pos+0x252/0x320 [ 1098.769361][T20000] ksys_write+0x156/0x270 [ 1098.769387][T20000] ? __pfx_ksys_write+0x10/0x10 [ 1098.769419][T20000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.769441][T20000] do_syscall_64+0x174/0x580 [ 1098.769464][T20000] ? trace_irq_disable+0x3b/0x140 [ 1098.769489][T20000] ? clear_bhb_loop+0x40/0x90 [ 1098.769521][T20000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.769540][T20000] RIP: 0033:0x7f13e7a5d68e [ 1098.769559][T20000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1098.769576][T20000] RSP: 002b:00007f13e5cf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1098.769597][T20000] RAX: ffffffffffffffda RBX: 00007f13e5cf66c0 RCX: 00007f13e7a5d68e [ 1098.769612][T20000] RDX: 0000000000000001 RSI: 00007f13e5cf60a0 RDI: 0000000000000006 [ 1098.769624][T20000] RBP: 00007f13e5cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.769636][T20000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.769648][T20000] R13: 00007f13e7d16038 R14: 00007f13e7d15fa0 R15: 00007ffecb1a0938 [ 1098.769677][T20000] [ 1098.925134][T19730] gspca_vc032x: reg_w err -71 [ 1098.925153][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925163][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925172][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925182][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925191][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925200][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925210][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925219][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925228][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925237][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925246][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925255][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925263][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925272][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925281][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925289][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925298][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925308][T19730] gspca_vc032x: I2c Bus Busy Wait 00 [ 1098.925317][T19730] gspca_vc032x: Unknown sensor... [ 1098.925392][T19730] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 1099.042217][T20002] FAULT_INJECTION: forcing a failure. [ 1099.042217][T20002] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.042252][T20002] CPU: 1 UID: 0 PID: 20002 Comm: syz.5.4753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1099.042279][T20002] Tainted: [L]=SOFTLOCKUP [ 1099.042287][T20002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1099.042298][T20002] Call Trace: [ 1099.042307][T20002] [ 1099.042316][T20002] dump_stack_lvl+0xe8/0x150 [ 1099.042345][T20002] should_fail_ex+0x46b/0x600 [ 1099.042377][T20002] should_failslab+0xa8/0x100 [ 1099.042401][T20002] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 1099.042431][T20002] ? dst_alloc+0x105/0x170 [ 1099.042456][T20002] ? dst_alloc+0x105/0x170 [ 1099.042484][T20002] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1099.042514][T20002] dst_alloc+0x105/0x170 [ 1099.042547][T20002] ip6_rt_cache_alloc+0x3c3/0xa50 [ 1099.042577][T20002] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 1099.042607][T20002] ip6_pol_route+0x118a/0x13e0 [ 1099.042625][T20002] ? ip6_pol_route+0x160/0x13e0 [ 1099.042648][T20002] ? __pfx_ip6_pol_route+0x10/0x10 [ 1099.042667][T20002] ? __lock_acquire+0x6b5/0x2d10 [ 1099.042696][T20002] ? ip6_addr_string+0x259/0x300 [ 1099.042726][T20002] fib6_rule_lookup+0x222/0x740 [ 1099.042756][T20002] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1099.042776][T20002] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1099.042806][T20002] ? ip6_route_output_flags+0x2e/0x5e0 [ 1099.042827][T20002] ? ip6_route_output_flags+0x2e/0x5e0 [ 1099.042860][T20002] ip6_route_output_flags+0x364/0x5e0 [ 1099.042879][T20002] ? ip6_route_output_flags+0x2e/0x5e0 [ 1099.042902][T20002] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 1099.042935][T20002] ? txopt_get+0x79/0x3f0 [ 1099.042966][T20002] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1099.042989][T20002] ? txopt_get+0x79/0x3f0 [ 1099.043012][T20002] ? txopt_get+0x79/0x3f0 [ 1099.043033][T20002] ? txopt_get+0x79/0x3f0 [ 1099.043056][T20002] ? txopt_get+0x343/0x3f0 [ 1099.043080][T20002] ? aa_label_sk_perm+0x532/0x6e0 [ 1099.043112][T20002] ? __pfx_txopt_get+0x10/0x10 [ 1099.043140][T20002] ip6_dst_lookup_flow+0x89/0x150 [ 1099.043165][T20002] rawv6_sendmsg+0xe1d/0x18e0 [ 1099.043201][T20002] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1099.043253][T20002] ? __pfx_aa_sk_perm+0x10/0x10 [ 1099.043278][T20002] ? sock_rps_record_flow+0x19/0x350 [ 1099.043301][T20002] ? inet_sendmsg+0x2f4/0x370 [ 1099.043318][T20002] ? aa_sock_msg_perm+0x122/0x200 [ 1099.043338][T20002] ? __pfx_inet_sendmsg+0x10/0x10 [ 1099.043356][T20002] sock_sendmsg_nosec+0x10e/0x180 [ 1099.043386][T20002] ____sys_sendmsg+0x55c/0x870 [ 1099.043422][T20002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.043454][T20002] ? import_iovec+0x73/0xa0 [ 1099.043477][T20002] ___sys_sendmsg+0x2a5/0x360 [ 1099.043499][T20002] ? __lock_acquire+0x6b5/0x2d10 [ 1099.043526][T20002] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.043582][T20002] ? __fget_files+0x2a/0x420 [ 1099.043600][T20002] ? __fget_files+0x3a6/0x420 [ 1099.043626][T20002] __x64_sys_sendmsg+0x1b7/0x290 [ 1099.043651][T20002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.043691][T20002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.043712][T20002] do_syscall_64+0x174/0x580 [ 1099.043735][T20002] ? trace_irq_disable+0x3b/0x140 [ 1099.043759][T20002] ? clear_bhb_loop+0x40/0x90 [ 1099.043781][T20002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.043801][T20002] RIP: 0033:0x7f5f4c45ce59 [ 1099.043818][T20002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.043834][T20002] RSP: 002b:00007f5f4a6b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.043855][T20002] RAX: ffffffffffffffda RBX: 00007f5f4c6d5fa0 RCX: 00007f5f4c45ce59 [ 1099.043869][T20002] RDX: 0000000020008b88 RSI: 0000200000001c00 RDI: 0000000000000004 [ 1099.043881][T20002] RBP: 00007f5f4a6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.043894][T20002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.043905][T20002] R13: 00007f5f4c6d6038 R14: 00007f5f4c6d5fa0 R15: 00007ffc9c037dc8 [ 1099.043940][T20002] [ 1099.316984][T19730] usb 5-1: USB disconnect, device number 22 [ 1099.816590][T20017] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4760'. [ 1099.860553][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1099.891726][T20026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4762'. [ 1100.015714][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1100.018130][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1100.018165][ T9] usb 4-1: can't read configurations, error -61 [ 1100.176435][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1100.335905][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1100.338761][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1100.338797][ T9] usb 4-1: can't read configurations, error -61 [ 1100.339436][ T9] usb usb4-port1: attempt power cycle [ 1100.718100][ T9] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1100.750373][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1100.756703][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1100.756741][ T9] usb 4-1: can't read configurations, error -61 [ 1100.866721][T20049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1100.950706][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1100.974246][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1100.976843][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1100.976879][ T9] usb 4-1: can't read configurations, error -61 [ 1100.977465][ T9] usb usb4-port1: unable to enumerate USB device [ 1101.571668][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1101.723165][ T9] usb 6-1: config 0 has no interfaces? [ 1101.723201][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1101.723225][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.734695][ T9] usb 6-1: config 0 descriptor?? [ 1101.943777][T20057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.944377][T20057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.980854][ T5788] usb 6-1: USB disconnect, device number 25 [ 1102.486894][T20075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1102.661108][T20080] comedi comedi0: Minor 3 could not be opened [ 1103.744996][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4788'. [ 1104.115906][T20118] netlink: 996 bytes leftover after parsing attributes in process `syz.5.4795'. [ 1104.323426][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4798'. [ 1104.518993][T20133] fuse: blksize only supported for fuseblk [ 1105.269455][T20142] syzkaller1: entered promiscuous mode [ 1105.269485][T20142] syzkaller1: entered allmulticast mode [ 1105.292069][T20142] FAULT_INJECTION: forcing a failure. [ 1105.292069][T20142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1105.292105][T20142] CPU: 0 UID: 0 PID: 20142 Comm: syz.2.4802 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1105.292132][T20142] Tainted: [L]=SOFTLOCKUP [ 1105.292140][T20142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1105.292159][T20142] Call Trace: [ 1105.292167][T20142] [ 1105.292176][T20142] dump_stack_lvl+0xe8/0x150 [ 1105.292204][T20142] should_fail_ex+0x46b/0x600 [ 1105.292238][T20142] _copy_from_iter+0x1d3/0x1670 [ 1105.292280][T20142] ? __pfx__copy_from_iter+0x10/0x10 [ 1105.292307][T20142] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 1105.292340][T20142] ? __pfx__copy_from_iter+0x10/0x10 [ 1105.292377][T20142] copy_page_from_iter+0x220/0x2d0 [ 1105.292413][T20142] skb_copy_datagram_from_iter+0x306/0x710 [ 1105.292451][T20142] tun_get_user+0x158a/0x4450 [ 1105.292483][T20142] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1105.292502][T20142] ? reacquire_held_locks+0xe0/0x190 [ 1105.292531][T20142] ? rt_spin_lock+0x1e0/0x400 [ 1105.292553][T20142] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1105.292574][T20142] ? __pfx_tun_get_user+0x10/0x10 [ 1105.292592][T20142] ? rt_spin_unlock+0x14f/0x200 [ 1105.292615][T20142] ? rt_spin_unlock+0x160/0x200 [ 1105.292637][T20142] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 1105.292672][T20142] ? ref_tracker_alloc+0x332/0x4a0 [ 1105.292699][T20142] ? tun_get+0x157/0x2f0 [ 1105.292718][T20142] ? vfs_write+0x629/0xba0 [ 1105.292739][T20142] ? ksys_write+0x156/0x270 [ 1105.292762][T20142] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1105.292792][T20142] ? tun_get+0x1c/0x2f0 [ 1105.292814][T20142] ? tun_get+0x1c/0x2f0 [ 1105.292834][T20142] ? tun_get+0x1c/0x2f0 [ 1105.292858][T20142] tun_chr_write_iter+0x119/0x210 [ 1105.292881][T20142] vfs_write+0x629/0xba0 [ 1105.292912][T20142] ? __pfx_vfs_write+0x10/0x10 [ 1105.292945][T20142] ? __fget_files+0x2a/0x420 [ 1105.292974][T20142] ksys_write+0x156/0x270 [ 1105.292999][T20142] ? __pfx_ksys_write+0x10/0x10 [ 1105.293030][T20142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.293051][T20142] do_syscall_64+0x174/0x580 [ 1105.293076][T20142] ? clear_bhb_loop+0x40/0x90 [ 1105.293100][T20142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.293121][T20142] RIP: 0033:0x7f13e7a9ce59 [ 1105.293140][T20142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1105.293163][T20142] RSP: 002b:00007f13e5cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1105.293185][T20142] RAX: ffffffffffffffda RBX: 00007f13e7d15fa0 RCX: 00007f13e7a9ce59 [ 1105.293200][T20142] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 1105.293213][T20142] RBP: 00007f13e5cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.293225][T20142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.293238][T20142] R13: 00007f13e7d16038 R14: 00007f13e7d15fa0 R15: 00007ffecb1a0938 [ 1105.293269][T20142] [ 1105.734072][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4806'. [ 1105.791169][T20154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4805'. [ 1106.050581][T13849] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1106.219370][T13849] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 1106.219403][T13849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 1106.242466][T13849] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1106.242498][T13849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.242518][T13849] usb 6-1: Product: syz [ 1106.242530][T13849] usb 6-1: Manufacturer: syz [ 1106.242544][T13849] usb 6-1: SerialNumber: syz [ 1106.284998][T13849] usb 6-1: config 0 descriptor?? [ 1106.285965][T20151] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1106.487716][T20146] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1106.993421][T20182] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1106.995360][T20182] syz.3.4815: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1106.995676][T20182] CPU: 1 UID: 0 PID: 20182 Comm: syz.3.4815 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1106.995707][T20182] Tainted: [L]=SOFTLOCKUP [ 1106.995715][T20182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1106.995729][T20182] Call Trace: [ 1106.995738][T20182] [ 1106.995748][T20182] dump_stack_lvl+0xe8/0x150 [ 1106.995780][T20182] warn_alloc+0x24c/0x270 [ 1106.995804][T20182] ? __pfx_stack_trace_save+0x10/0x10 [ 1106.995834][T20182] ? __pfx_warn_alloc+0x10/0x10 [ 1106.995861][T20182] ? kasan_save_track+0x4f/0x80 [ 1106.995881][T20182] ? kasan_save_track+0x3e/0x80 [ 1106.995898][T20182] ? __kasan_kmalloc+0x93/0xb0 [ 1106.995917][T20182] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 1106.995939][T20182] ? xskq_create+0x56/0x170 [ 1106.995963][T20182] ? xsk_init_queue+0x8a/0xe0 [ 1106.995982][T20182] ? xsk_setsockopt+0x54c/0x990 [ 1106.996004][T20182] ? __x64_sys_setsockopt+0x143/0x1b0 [ 1106.996028][T20182] ? do_syscall_64+0x174/0x580 [ 1106.996053][T20182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.996080][T20182] __vmalloc_node_range_noprof+0x132/0x1750 [ 1106.996144][T20182] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1106.996187][T20182] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 1106.996213][T20182] vmalloc_user_noprof+0xad/0xe0 [ 1106.996235][T20182] ? xskq_create+0xbf/0x170 [ 1106.996260][T20182] xskq_create+0xbf/0x170 [ 1106.996287][T20182] xsk_init_queue+0x8a/0xe0 [ 1106.996312][T20182] xsk_setsockopt+0x54c/0x990 [ 1106.996337][T20182] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1106.996360][T20182] ? __pfx_aa_sk_perm+0x10/0x10 [ 1106.996404][T20182] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1106.996427][T20182] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1106.996451][T20182] do_sock_setsockopt+0x17c/0x1b0 [ 1106.996490][T20182] __x64_sys_setsockopt+0x143/0x1b0 [ 1106.996518][T20182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.996541][T20182] do_syscall_64+0x174/0x580 [ 1106.996566][T20182] ? trace_irq_disable+0x3b/0x140 [ 1106.996594][T20182] ? clear_bhb_loop+0x40/0x90 [ 1106.996621][T20182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.996643][T20182] RIP: 0033:0x7fbf9667ce59 [ 1106.996664][T20182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.996684][T20182] RSP: 002b:00007fbf948b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1106.996710][T20182] RAX: ffffffffffffffda RBX: 00007fbf968f6090 RCX: 00007fbf9667ce59 [ 1106.996727][T20182] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1106.996742][T20182] RBP: 00007fbf96712d6f R08: 0000000000000004 R09: 0000000000000000 [ 1106.996757][T20182] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.996772][T20182] R13: 00007fbf968f6128 R14: 00007fbf968f6090 R15: 00007fff7ffb2498 [ 1106.996805][T20182] [ 1107.010655][T20182] Mem-Info: [ 1107.010675][T20182] active_anon:6203 inactive_anon:0 isolated_anon:0 [ 1107.010675][T20182] active_file:0 inactive_file:5286 isolated_file:0 [ 1107.010675][T20182] unevictable:768 dirty:87 writeback:0 [ 1107.010675][T20182] slab_reclaimable:19289 slab_unreclaimable:94789 [ 1107.010675][T20182] mapped:25570 shmem:1302 pagetables:1269 [ 1107.010675][T20182] sec_pagetables:0 bounce:0 [ 1107.010675][T20182] kernel_misc_reclaimable:0 [ 1107.010675][T20182] free:1354718 free_pcp:4224 free_cma:0 [ 1107.010736][T20182] Node 0 active_anon:24812kB inactive_anon:0kB active_file:0kB inactive_file:21012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102280kB dirty:348kB writeback:0kB shmem:3672kB kernel_stack:14268kB pagetables:4948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1107.010791][T20182] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1107.010844][T20182] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1107.010921][T20182] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1107.010957][T20182] Node 0 DMA32 free:1469964kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24812kB inactive_anon:0kB active_file:0kB inactive_file:21012kB unevictable:1536kB writepending:348kB zspages:0kB present:3129332kB managed:2551612kB mlocked:0kB bounce:0kB free_pcp:16428kB local_pcp:7440kB free_cma:0kB [ 1107.011045][T20182] lowmem_reserve[]: 0 0 0 0 0 [ 1107.011078][T20182] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:596kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1107.011136][T20182] lowmem_reserve[]: 0 0 0 0 0 [ 1107.011169][T20182] Node 1 Normal free:3933548kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:468kB local_pcp:0kB free_cma:0kB [ 1107.011235][T20182] lowmem_reserve[]: 0 0 0 0 0 [ 1107.011285][T20182] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1107.011430][T20182] Node 0 DMA32: 5122*4kB (UME) 4271*8kB (UME) 1837*16kB (UME) 907*32kB (UME) 525*64kB (UME) 336*128kB (UME) 189*256kB (UME) 70*512kB (UME) 16*1024kB (M) 16*2048kB (UME) 280*4096kB (UM) = 1469936kB [ 1107.011593][T20182] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1107.011692][T20182] Node 1 Normal: 5*4kB (UM) 9*8kB (UM) 11*16kB (UM) 7*32kB (UM) 10*64kB (UM) 6*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3933548kB [ 1107.011846][T20182] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.011864][T20182] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1107.011881][T20182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1107.011898][T20182] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1107.011915][T20182] 6584 total pagecache pages [ 1107.011928][T20182] 0 pages in swap cache [ 1107.011936][T20182] Free swap = 124996kB [ 1107.011944][T20182] Total swap = 124996kB [ 1107.011953][T20182] 2097051 pages RAM [ 1107.011960][T20182] 0 pages HighMem/MovableOnly [ 1107.011968][T20182] 427385 pages reserved [ 1107.011984][T20182] 0 pages cma reserved [ 1107.133137][ T5709] usb 6-1: USB disconnect, device number 26 [ 1107.311851][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1107.463378][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1107.472173][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1107.472200][ T9] usb 5-1: config 0 has no interface number 0 [ 1107.472246][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1107.478511][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1107.478541][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.478562][ T9] usb 5-1: Product: syz [ 1107.478576][ T9] usb 5-1: Manufacturer: syz [ 1107.478590][ T9] usb 5-1: SerialNumber: syz [ 1107.499393][ T9] usb 5-1: config 0 descriptor?? [ 1109.529876][T20221] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4829'. [ 1110.084114][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1110.084169][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1110.084187][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1110.084388][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1110.097154][ T9] usb 5-1: USB disconnect, device number 23 [ 1110.690560][ T5788] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1110.820210][T20242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4836'. [ 1110.851161][ T5788] usb 6-1: Using ep0 maxpacket: 32 [ 1110.853795][ T5788] usb 6-1: config 160 has an invalid interface number: 149 but max is 0 [ 1110.853832][ T5788] usb 6-1: config 160 has no interface number 0 [ 1110.853866][ T5788] usb 6-1: config 160 interface 149 has no altsetting 0 [ 1110.856724][ T5788] usb 6-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=a4.44 [ 1110.856754][ T5788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.856774][ T5788] usb 6-1: Product: syz [ 1110.856788][ T5788] usb 6-1: Manufacturer: syz [ 1110.856801][ T5788] usb 6-1: SerialNumber: syz [ 1111.076566][T20236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.077277][T20236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.126744][ T5788] usb 6-1: USB disconnect, device number 27 [ 1111.300603][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1111.450555][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1111.453103][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1111.453127][ T9] usb 5-1: config 0 has no interface number 0 [ 1111.453169][ T9] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1111.453191][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1111.453212][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1111.455340][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1111.455368][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1111.455386][ T9] usb 5-1: Product: syz [ 1111.455400][ T9] usb 5-1: SerialNumber: syz [ 1111.460282][ T9] usb 5-1: config 0 descriptor?? [ 1111.555671][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1111.558832][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input62 [ 1111.975904][T20258] FAULT_INJECTION: forcing a failure. [ 1111.975904][T20258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.975940][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.2.4843 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1111.975968][T20258] Tainted: [L]=SOFTLOCKUP [ 1111.975978][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1111.975990][T20258] Call Trace: [ 1111.975998][T20258] [ 1111.976007][T20258] dump_stack_lvl+0xe8/0x150 [ 1111.976036][T20258] should_fail_ex+0x46b/0x600 [ 1111.976070][T20258] _copy_to_user+0x31/0xb0 [ 1111.976092][T20258] simple_read_from_buffer+0xe1/0x170 [ 1111.976120][T20258] proc_fail_nth_read+0x1be/0x230 [ 1111.976145][T20258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1111.976168][T20258] ? rw_verify_area+0x2ac/0x4e0 [ 1111.976191][T20258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1111.976213][T20258] vfs_read+0x212/0xa80 [ 1111.976244][T20258] ? __pfx_vfs_read+0x10/0x10 [ 1111.976269][T20258] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1111.976295][T20258] ? lockdep_hardirqs_on+0x7a/0x110 [ 1111.976320][T20258] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1111.976344][T20258] ? mutex_lock_nested+0x152/0x1d0 [ 1111.976371][T20258] ? fdget_pos+0x252/0x320 [ 1111.976398][T20258] ksys_read+0x156/0x270 [ 1111.976422][T20258] ? __pfx_ksys_read+0x10/0x10 [ 1111.976450][T20258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.976470][T20258] do_syscall_64+0x174/0x580 [ 1111.976491][T20258] ? trace_irq_disable+0x3b/0x140 [ 1111.976514][T20258] ? clear_bhb_loop+0x40/0x90 [ 1111.976538][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.976558][T20258] RIP: 0033:0x7f13e7a5d68e [ 1111.976576][T20258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1111.976591][T20258] RSP: 002b:00007f13e5cf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1111.976612][T20258] RAX: ffffffffffffffda RBX: 00007f13e5cf66c0 RCX: 00007f13e7a5d68e [ 1111.976627][T20258] RDX: 000000000000000f RSI: 00007f13e5cf60a0 RDI: 0000000000000004 [ 1111.976640][T20258] RBP: 00007f13e5cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.976652][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.976665][T20258] R13: 00007f13e7d16038 R14: 00007f13e7d15fa0 R15: 00007ffecb1a0938 [ 1111.976703][T20258] [ 1112.259423][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.259675][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.259904][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.260301][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.260550][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.260796][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.261030][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.261262][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.261502][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.261742][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1112.376877][T19730] usb 5-1: USB disconnect, device number 24 [ 1112.376960][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1112.412544][T19730] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1112.650145][T20269] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1112.836316][T20269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.078197][T20269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.124557][T20269] bond0 (unregistering): Released all slaves [ 1113.822116][T20293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4855'. [ 1114.861889][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1114.910541][ T37] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1114.982196][T13849] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1115.020556][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1115.023015][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1115.038124][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1115.038155][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1115.038174][ T9] usb 5-1: Product: syz [ 1115.038188][ T9] usb 5-1: Manufacturer: syz [ 1115.038201][ T9] usb 5-1: SerialNumber: syz [ 1115.074441][ T9] usb 5-1: config 0 descriptor?? [ 1115.075219][T20313] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1115.077473][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 1115.077509][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1115.093037][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 1115.118515][ T37] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1115.118543][ T37] usb 6-1: config 0 has no interface number 0 [ 1115.118588][ T37] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1115.142260][T13849] usb 3-1: Using ep0 maxpacket: 16 [ 1115.145678][ T37] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1115.145707][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.145727][ T37] usb 6-1: Product: syz [ 1115.145742][ T37] usb 6-1: Manufacturer: syz [ 1115.145756][ T37] usb 6-1: SerialNumber: syz [ 1115.160764][T13849] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 1115.160926][T13849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.160948][T13849] usb 3-1: Product: syz [ 1115.160963][T13849] usb 3-1: Manufacturer: syz [ 1115.160977][T13849] usb 3-1: SerialNumber: syz [ 1115.183047][ T37] usb 6-1: config 0 descriptor?? [ 1115.184166][T20315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1115.307730][ T9] usb 5-1: USB disconnect, device number 25 [ 1115.628612][T20315] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1115.742252][ T37] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1115.743046][ T37] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1115.942679][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.942967][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.192717][T20326] FAULT_INJECTION: forcing a failure. [ 1116.192717][T20326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.192801][T20326] CPU: 1 UID: 0 PID: 20326 Comm: syz.4.4865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1116.192822][T20326] Tainted: [L]=SOFTLOCKUP [ 1116.192828][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.192837][T20326] Call Trace: [ 1116.192844][T20326] [ 1116.192851][T20326] dump_stack_lvl+0xe8/0x150 [ 1116.192875][T20326] should_fail_ex+0x46b/0x600 [ 1116.192903][T20326] _copy_to_iter+0x404/0x17d0 [ 1116.192931][T20326] ? rt_spin_unlock+0x160/0x200 [ 1116.192948][T20326] ? netlink_seq_stop+0x18c/0x200 [ 1116.192967][T20326] ? __pfx__copy_to_iter+0x10/0x10 [ 1116.192994][T20326] ? netlink_seq_next+0x1c0/0x1e0 [ 1116.193024][T20326] seq_read_iter+0xbf6/0xe20 [ 1116.193058][T20326] seq_read+0x36a/0x490 [ 1116.193075][T20326] ? kstrtoull+0x12f/0x1d0 [ 1116.193099][T20326] ? __pfx_seq_read+0x10/0x10 [ 1116.193123][T20326] ? apparmor_file_permission+0x1f4/0x300 [ 1116.193149][T20326] ? __pfx_seq_read+0x10/0x10 [ 1116.193165][T20326] proc_reg_read+0x1f6/0x2f0 [ 1116.193185][T20326] vfs_readv+0x597/0x850 [ 1116.193208][T20326] ? __pfx_proc_reg_read+0x10/0x10 [ 1116.193227][T20326] ? __pfx_vfs_readv+0x10/0x10 [ 1116.193257][T20326] ? __fget_files+0x2a/0x420 [ 1116.193275][T20326] ? __fget_files+0x3a6/0x420 [ 1116.193288][T20326] ? __fget_files+0x2a/0x420 [ 1116.193308][T20326] __x64_sys_preadv+0x1a2/0x2b0 [ 1116.193328][T20326] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1116.193353][T20326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.193368][T20326] do_syscall_64+0x174/0x580 [ 1116.193386][T20326] ? trace_irq_disable+0x3b/0x140 [ 1116.193404][T20326] ? clear_bhb_loop+0x40/0x90 [ 1116.193421][T20326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.193436][T20326] RIP: 0033:0x7fb30778ce59 [ 1116.193451][T20326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.193463][T20326] RSP: 002b:00007fb3059de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1116.193479][T20326] RAX: ffffffffffffffda RBX: 00007fb307a05fa0 RCX: 00007fb30778ce59 [ 1116.193490][T20326] RDX: 0000000000000001 RSI: 0000200000000900 RDI: 0000000000000003 [ 1116.193499][T20326] RBP: 00007fb3059de090 R08: 0000000000000001 R09: 0000000000000000 [ 1116.193508][T20326] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000001 [ 1116.193518][T20326] R13: 00007fb307a06038 R14: 00007fb307a05fa0 R15: 00007ffe3f6a8428 [ 1116.193541][T20326] [ 1116.548123][T13849] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1116.556472][T13849] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1116.782042][ T5709] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1116.805384][T13849] usb 3-1: USB disconnect, device number 26 [ 1116.943094][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.943129][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.943167][ T5709] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1116.943191][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.024696][ T5709] usb 5-1: config 0 descriptor?? [ 1117.447435][ T5709] cm6533_jd 0003:0D8C:0022.0033: invalid report_count 1120999171 [ 1117.447463][ T5709] cm6533_jd 0003:0D8C:0022.0033: item 0 4 1 9 parsing failed [ 1117.453605][ T5709] cm6533_jd 0003:0D8C:0022.0033: parse failed [ 1117.454006][ T5709] cm6533_jd 0003:0D8C:0022.0033: probe with driver cm6533_jd failed with error -22 [ 1117.609649][ T37] usb 6-1: USB disconnect, device number 28 [ 1117.711423][T13849] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1117.723573][ T32] usb 5-1: USB disconnect, device number 26 [ 1117.874988][T13849] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1117.875016][T13849] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1117.875037][T13849] usb 3-1: config 0 has no interface number 0 [ 1117.875082][T13849] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1117.875108][T13849] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1117.875136][T13849] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.875164][T13849] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1117.892365][T13849] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1117.892395][T13849] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1117.892415][T13849] usb 3-1: Product: syz [ 1117.892430][T13849] usb 3-1: SerialNumber: syz [ 1117.902371][T13849] usb 3-1: config 0 descriptor?? [ 1118.124425][T13849] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input63 [ 1118.526508][T13849] usb 3-1: USB disconnect, device number 27 [ 1118.731406][ T5709] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1118.861173][ T5709] usb 5-1: device descriptor read/64, error -71 [ 1119.111892][ T5709] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1119.241312][ T5709] usb 5-1: device descriptor read/64, error -71 [ 1119.416699][T20369] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:21 [ 1120.227681][ T5709] usb usb5-port1: attempt power cycle [ 1120.263709][T13849] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1120.355230][T20377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.355571][T20377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.412598][T13849] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1120.412656][T13849] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1120.412681][T13849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1120.415624][T13849] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1120.415653][T13849] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1120.415674][T13849] usb 4-1: Product: syz [ 1120.415689][T13849] usb 4-1: Manufacturer: syz [ 1120.415704][T13849] usb 4-1: SerialNumber: syz [ 1120.479869][T13849] usb 4-1: config 0 descriptor?? [ 1120.489674][T13849] hub 4-1:0.0: bad descriptor, ignoring hub [ 1120.489712][T13849] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1120.507876][T13849] usb 4-1: selecting invalid altsetting 0 [ 1120.591119][ T5709] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1120.600620][ T37] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1120.611413][ T5709] usb 5-1: device descriptor read/8, error -71 [ 1120.772372][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 1120.829292][ T37] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1120.829325][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.829346][ T37] usb 3-1: Product: syz [ 1120.829362][ T37] usb 3-1: Manufacturer: syz [ 1120.829377][ T37] usb 3-1: SerialNumber: syz [ 1120.871150][ T5709] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1120.871743][ T37] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1120.871766][ T37] r8152-cfgselector 3-1: config 0 descriptor?? [ 1120.891393][ T5709] usb 5-1: device descriptor read/8, error -71 [ 1121.011254][ T5709] usb usb5-port1: unable to enumerate USB device [ 1121.085424][ T37] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1121.085825][ T37] r8152-cfgselector 3-1: No union descriptors [ 1121.096561][ T37] r8152-cfgselector 3-1: USB disconnect, device number 28 [ 1121.578781][T20371] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 1121.800200][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4890'. [ 1121.890635][T13849] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1121.892328][T20371] usb 4-1: device descriptor read/64, error -71 [ 1122.057852][T13849] usb 5-1: Using ep0 maxpacket: 16 [ 1122.065421][T13849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.065448][T13849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1122.068072][T13849] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1122.068100][T13849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.068120][T13849] usb 5-1: Product: syz [ 1122.068134][T13849] usb 5-1: Manufacturer: syz [ 1122.068147][T13849] usb 5-1: SerialNumber: syz [ 1122.449447][T13849] usb 5-1: 0:2 : does not exist [ 1122.570654][T20371] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 1122.642665][T20390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.643281][T20390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.678197][T13849] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1122.693001][ T38] audit: type=1326 audit(5344017555.503:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.2.4892" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13e7a9ce59 code=0x0 [ 1122.898268][T13849] usb 5-1: USB disconnect, device number 31 [ 1122.931427][T20371] usb 4-1: device descriptor read/64, error -71 [ 1123.211631][T20371] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 1123.482147][T20410] FAULT_INJECTION: forcing a failure. [ 1123.482147][T20410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.482184][T20410] CPU: 0 UID: 0 PID: 20410 Comm: syz.2.4895 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1123.482211][T20410] Tainted: [L]=SOFTLOCKUP [ 1123.482219][T20410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1123.482230][T20410] Call Trace: [ 1123.482238][T20410] [ 1123.482247][T20410] dump_stack_lvl+0xe8/0x150 [ 1123.482278][T20410] should_fail_ex+0x46b/0x600 [ 1123.482309][T20410] _copy_to_user+0x31/0xb0 [ 1123.482332][T20410] simple_read_from_buffer+0xe1/0x170 [ 1123.482359][T20410] proc_fail_nth_read+0x1be/0x230 [ 1123.482384][T20410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1123.482407][T20410] ? rw_verify_area+0x2ac/0x4e0 [ 1123.482429][T20410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1123.482450][T20410] vfs_read+0x212/0xa80 [ 1123.482481][T20410] ? __pfx_vfs_read+0x10/0x10 [ 1123.482506][T20410] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1123.482531][T20410] ? lockdep_hardirqs_on+0x7a/0x110 [ 1123.482554][T20410] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1123.482577][T20410] ? mutex_lock_nested+0x152/0x1d0 [ 1123.482603][T20410] ? fdget_pos+0x252/0x320 [ 1123.482628][T20410] ksys_read+0x156/0x270 [ 1123.482653][T20410] ? __pfx_ksys_read+0x10/0x10 [ 1123.482683][T20410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.482703][T20410] do_syscall_64+0x174/0x580 [ 1123.482727][T20410] ? trace_irq_disable+0x3b/0x140 [ 1123.482752][T20410] ? clear_bhb_loop+0x40/0x90 [ 1123.482774][T20410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.482793][T20410] RIP: 0033:0x7f13e7a5d68e [ 1123.482811][T20410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1123.482829][T20410] RSP: 002b:00007f13e5cf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1123.482850][T20410] RAX: ffffffffffffffda RBX: 00007f13e5cf66c0 RCX: 00007f13e7a5d68e [ 1123.482864][T20410] RDX: 000000000000000f RSI: 00007f13e5cf60a0 RDI: 0000000000000005 [ 1123.482877][T20410] RBP: 00007f13e5cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.482890][T20410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.482902][T20410] R13: 00007f13e7d16038 R14: 00007f13e7d15fa0 R15: 00007ffecb1a0938 [ 1123.482931][T20410] [ 1124.586187][T20422] netlink: 'syz.5.4899': attribute type 15 has an invalid length. [ 1124.586421][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4899'. [ 1125.142585][ T37] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1125.163059][T20428] veth0_macvtap: left promiscuous mode [ 1125.172783][ T822] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1125.293933][ T37] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1125.293965][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.307798][ T37] usb 5-1: config 0 descriptor?? [ 1125.314207][ T37] cp210x 5-1:0.0: cp210x converter detected [ 1125.365304][ T822] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1125.365338][ T822] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.365362][ T822] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1125.365388][ T822] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1125.365421][ T822] usb 6-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1125.365444][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.430992][ T822] usb 6-1: config 0 descriptor?? [ 1125.527061][ T37] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1125.527147][ T37] cp210x 5-1:0.0: querying part number failed [ 1125.667698][ T37] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1126.198674][ T822] a4tech 0003:09DA:022B.0034: report_id 0 is invalid [ 1126.198707][ T822] a4tech 0003:09DA:022B.0034: item 0 0 1 8 parsing failed [ 1126.199312][ T822] a4tech 0003:09DA:022B.0034: parse failed [ 1126.199411][ T822] a4tech 0003:09DA:022B.0034: probe with driver a4tech failed with error -22 [ 1126.752808][ T37] usb 6-1: USB disconnect, device number 29 [ 1126.791384][T20438] sctp: [Deprecated]: syz.2.4905 (pid 20438) Use of int in max_burst socket option. [ 1126.791384][T20438] Use struct sctp_assoc_value instead [ 1127.190595][T13849] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1127.342833][T13849] usb 3-1: Using ep0 maxpacket: 32 [ 1127.358639][T13849] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1127.358726][T13849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.358748][T13849] usb 3-1: Product: syz [ 1127.358764][T13849] usb 3-1: Manufacturer: syz [ 1127.358779][T13849] usb 3-1: SerialNumber: syz [ 1127.427640][T13849] usb 3-1: config 0 descriptor?? [ 1127.441708][T13849] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1127.449132][T13849] dvb-usb: bulk message failed: -22 (4/0) [ 1127.449200][T13849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1127.449391][T13849] dvb-usb: bulk message failed: -22 (5/0) [ 1127.449458][T13849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1127.572073][T13849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1127.598277][T13849] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1127.598339][T13849] usb 3-1: media controller created [ 1127.687921][T13849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.766810][T13849] usb 3-1: selecting invalid altsetting 3 [ 1127.766887][T13849] ttusb2: set interface to alts=3 failed [ 1127.840737][T13849] DVB: Unable to find symbol tda10086_attach() [ 1127.840754][T13849] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1127.842093][T13849] dvb-usb: bulk message failed: -22 (4/0) [ 1127.842165][T13849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1127.842358][T13849] dvb-usb: bulk message failed: -22 (5/0) [ 1127.842373][T13849] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1127.842492][T13849] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1127.847647][T13849] usb 3-1: USB disconnect, device number 29 [ 1127.978722][ T5709] usb 5-1: USB disconnect, device number 32 [ 1128.042884][ T5709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1128.047852][ T5709] cp210x 5-1:0.0: device disconnected [ 1128.091904][T13849] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1128.356898][T20457] binder: 20456:20457 ioctl c0306201 200000000640 returned -22 [ 1128.397316][T20371] usb 4-1: device descriptor read/8, error -110 [ 1128.550575][T13849] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1128.650591][T20371] usb 4-1: reset high-speed USB device number 95 using dummy_hcd [ 1128.724894][T13849] usb 3-1: device descriptor read/64, error -71 [ 1128.741066][T20371] usb 4-1: device descriptor read/8, error -32 [ 1128.857182][ T9] usb 4-1: USB disconnect, device number 95 [ 1128.970725][T13849] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1129.101520][T13849] usb 3-1: device descriptor read/64, error -71 [ 1129.211091][T13849] usb usb3-port1: attempt power cycle [ 1129.280873][ T5724] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1129.433107][ T5724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.433143][ T5724] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1129.433156][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.437677][ T5724] usb 6-1: config 0 descriptor?? [ 1129.551442][T13849] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1129.574669][T13849] usb 3-1: device descriptor read/8, error -71 [ 1129.665362][ T5724] usbhid 6-1:0.0: can't add hid device: -71 [ 1129.665462][ T5724] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1129.682956][ T5724] usb 6-1: USB disconnect, device number 30 [ 1129.810577][T13849] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1129.832995][T13849] usb 3-1: device descriptor read/8, error -71 [ 1129.942648][T13849] usb usb3-port1: unable to enumerate USB device [ 1130.095987][T20487] program syz.3.4920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1130.096461][T20487] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1130.203539][ T5724] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1130.366969][ T5724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.367022][ T5724] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1130.367046][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.386230][ T5724] usb 6-1: config 0 descriptor?? [ 1130.900623][ T37] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1131.030263][T20465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.034984][T20465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.069262][ T37] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1131.069330][ T37] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1131.069355][ T37] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1131.082051][ T37] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1131.082082][ T37] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1131.082102][ T37] usb 5-1: Product: syz [ 1131.082116][ T37] usb 5-1: Manufacturer: syz [ 1131.082129][ T37] usb 5-1: SerialNumber: syz [ 1131.099057][ T37] usb 5-1: config 0 descriptor?? [ 1131.103015][ T37] hub 5-1:0.0: bad descriptor, ignoring hub [ 1131.103049][ T37] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1131.116665][ T37] usb 5-1: selecting invalid altsetting 0 [ 1131.422122][ T37] usb 5-1: USB disconnect, device number 33 [ 1132.090616][ T5724] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1132.183357][ T5724] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input64 [ 1132.194340][ T37] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1132.242673][ T5724] usb 6-1: USB disconnect, device number 31 [ 1132.242770][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1132.322919][ T37] usb 5-1: device descriptor read/64, error -71 [ 1132.561584][ T37] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1132.621326][ T9] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1132.685361][T20519] ubi: mtd0 is already attached to ubi31 [ 1132.690627][ T37] usb 5-1: device descriptor read/64, error -71 [ 1132.762811][ T9] usb 4-1: device descriptor read/64, error -71 [ 1132.801668][ T37] usb usb5-port1: attempt power cycle [ 1133.012679][ T9] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1133.140808][ T37] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1133.160271][ T9] usb 4-1: device descriptor read/64, error -71 [ 1133.187389][ T37] usb 5-1: device descriptor read/8, error -71 [ 1133.260853][ T9] usb usb4-port1: attempt power cycle [ 1133.422192][ T37] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1133.443938][ T37] usb 5-1: device descriptor read/8, error -71 [ 1133.553281][ T37] usb usb5-port1: unable to enumerate USB device [ 1133.600550][ T9] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 1133.636692][ T9] usb 4-1: device descriptor read/8, error -71 [ 1133.710572][ T822] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1133.860628][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 1133.864636][ T822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1133.868781][ T822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.868874][ T822] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1133.885247][ T822] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1133.885277][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.885298][ T822] usb 6-1: Product: syz [ 1133.885312][ T822] usb 6-1: Manufacturer: syz [ 1133.885335][ T822] usb 6-1: SerialNumber: syz [ 1133.890566][ T9] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 1133.921215][ T9] usb 4-1: device descriptor read/8, error -71 [ 1134.031148][ T9] usb usb4-port1: unable to enumerate USB device [ 1134.177026][ T822] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1134.190736][ T822] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1134.309552][T20545] Bluetooth: MGMT ver 1.23 [ 1134.368396][ T822] usb 6-1: 2:1 : can't get High Capability descriptor [ 1134.377755][T20543] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1134.512097][T20548] netlink: 'syz.2.4939': attribute type 3 has an invalid length. [ 1134.512227][T20548] netlink: 'syz.2.4939': attribute type 3 has an invalid length. [ 1134.575403][ T9] usb 6-1: USB disconnect, device number 32 [ 1134.799987][T20550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4940'. [ 1134.837803][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1134.972023][T20557] netlink: 'syz.4.4942': attribute type 10 has an invalid length. [ 1135.028297][T20559] netlink: 'syz.4.4942': attribute type 10 has an invalid length. [ 1135.669764][T20567] syz.4.4945 (20567) used greatest stack depth: 17448 bytes left [ 1135.700562][ T5709] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1135.850629][ T5709] usb 6-1: Using ep0 maxpacket: 8 [ 1135.855844][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.855878][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.855902][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.855945][ T5709] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1135.855969][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.920111][ T5709] usb 6-1: config 0 descriptor?? [ 1136.128950][T20578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4948'. [ 1136.225037][T20578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4948'. [ 1136.225064][T20578] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4948'. [ 1136.255147][T20582] netlink: 'syz.4.4949': attribute type 3 has an invalid length. [ 1136.255283][T20582] netlink: 'syz.4.4949': attribute type 3 has an invalid length. [ 1136.368084][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 1136.373452][ T5709] lua 0003:1E7D:2C2E.0035: unknown main item tag 0x2 [ 1136.373485][ T5709] lua 0003:1E7D:2C2E.0035: unknown main item tag 0x0 [ 1136.373506][ T5709] lua 0003:1E7D:2C2E.0035: unknown main item tag 0x0 [ 1136.373526][ T5709] lua 0003:1E7D:2C2E.0035: unknown main item tag 0x0 [ 1136.373547][ T5709] lua 0003:1E7D:2C2E.0035: unknown main item tag 0x0 [ 1136.373567][ T5709] lua 0003:1E7D:2C2E.0035: unknown main item tag 0x0 [ 1136.373588][ T5709] lua 0003:1E7D:2C2E.0035: item fetching failed at offset 39/40 [ 1136.374317][ T5709] lua 0003:1E7D:2C2E.0035: parse failed [ 1136.374380][ T5709] lua 0003:1E7D:2C2E.0035: probe with driver lua failed with error -22 [ 1136.614924][ T9] usb 6-1: USB disconnect, device number 33 [ 1136.720841][T20590] netlink: 'syz.4.4952': attribute type 1 has an invalid length. [ 1136.720861][T20590] netlink: 'syz.4.4952': attribute type 2 has an invalid length. [ 1136.918760][T20596] netlink: 'syz.4.4954': attribute type 1 has an invalid length. [ 1136.918781][T20596] netlink: 'syz.4.4954': attribute type 4 has an invalid length. [ 1136.918796][T20596] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1136.919570][T20596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1137.270633][ T5724] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1137.283152][ T5709] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1137.433187][ T5724] usb 4-1: Using ep0 maxpacket: 8 [ 1137.447519][ T5724] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1137.447552][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.447582][ T5724] usb 4-1: Product: syz [ 1137.447597][ T5724] usb 4-1: Manufacturer: syz [ 1137.447612][ T5724] usb 4-1: SerialNumber: syz [ 1137.453823][ T5724] usb 4-1: config 0 descriptor?? [ 1137.477384][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 1137.496520][ T5709] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 1137.496546][ T5709] usb 5-1: config 0 has no interface number 0 [ 1137.499931][ T5709] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1137.499962][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.499981][ T5709] usb 5-1: Product: syz [ 1137.499995][ T5709] usb 5-1: Manufacturer: syz [ 1137.500010][ T5709] usb 5-1: SerialNumber: syz [ 1137.553952][ T5709] usb 5-1: config 0 descriptor?? [ 1137.558438][ T5709] ssu100 5-1:0.4: Quatech SSU-100 USB to Serial Driver converter detected [ 1137.702542][ T5724] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1137.817837][ T5724] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1137.828598][ T5724] usb 4-1: USB disconnect, device number 101 [ 1138.035766][ T37] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1138.213416][ T37] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.235883][ T37] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1138.235914][ T37] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.235934][ T37] usb 6-1: Product: syz [ 1138.235947][ T37] usb 6-1: Manufacturer: syz [ 1138.235961][ T37] usb 6-1: SerialNumber: syz [ 1138.273830][ T37] usb 6-1: config 0 descriptor?? [ 1138.310677][ T5724] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1138.475072][ T5724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.475099][ T5724] usb 4-1: config 0 has no interfaces? [ 1138.477611][ T5724] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1138.477640][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1138.477661][ T5724] usb 4-1: Product: syz [ 1138.477676][ T5724] usb 4-1: Manufacturer: syz [ 1138.511024][ T37] usb 6-1: USB disconnect, device number 34 [ 1138.516979][ T5724] usb 4-1: config 0 descriptor?? [ 1138.566192][T20601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4956'. [ 1138.670997][ T5709] ssu100 5-1:0.4: probe with driver ssu100 failed with error -110 [ 1138.969097][T20621] binder: binder_mmap: 20600 200000a2c000-200000a2f000 bad vm_flags failed -1 [ 1138.976350][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4956'. [ 1138.994391][T20621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.995059][T20621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.122383][ T5601] usb 4-1: USB disconnect, device number 102 [ 1139.442526][T19730] usb 5-1: USB disconnect, device number 38 [ 1139.714973][T20630] tipc: Started in network mode [ 1139.715004][T20630] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1139.715198][T20630] tipc: Enabled bearer , priority 10 [ 1140.570561][T19730] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1140.750254][T19730] usb 5-1: config 0 has no interfaces? [ 1140.750291][T19730] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1140.750314][T19730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.793380][T19730] usb 5-1: config 0 descriptor?? [ 1140.830785][ T37] tipc: Node number set to 10136234 [ 1141.003317][T20647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.003942][T20647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.080165][ T37] usb 5-1: USB disconnect, device number 39 [ 1141.265200][T20667] netlink: 'syz.2.4978': attribute type 1 has an invalid length. [ 1141.265222][T20667] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4978'. [ 1141.568507][T20669] netlink: 'syz.2.4979': attribute type 2 has an invalid length. [ 1141.568528][T20669] netlink: 'syz.2.4979': attribute type 8 has an invalid length. [ 1141.568541][T20669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4979'. [ 1141.766410][ T5709] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1141.770033][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4984'. [ 1141.941789][T19730] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1141.955909][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 1141.969052][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1141.980876][ T5709] usb 4-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.980904][ T5709] usb 4-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 1141.983851][ T5709] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1141.983880][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.983901][ T5709] usb 4-1: Product: syz [ 1141.983917][ T5709] usb 4-1: Manufacturer: syz [ 1141.983932][ T5709] usb 4-1: SerialNumber: syz [ 1142.012352][ T5724] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 1142.140560][ T5724] usb 6-1: device descriptor read/64, error -71 [ 1142.140965][T19730] usb 5-1: Using ep0 maxpacket: 8 [ 1142.144170][T19730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1142.144205][T19730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1142.144449][T19730] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1142.144476][T19730] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 1142.144515][T19730] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1142.144538][T19730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.223859][T19730] usb 5-1: config 0 descriptor?? [ 1142.226764][T20678] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1142.402667][ T5724] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1142.421652][ T5601] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1142.530596][ T5724] usb 6-1: device descriptor read/64, error -71 [ 1142.641083][ T5724] usb usb6-port1: attempt power cycle [ 1142.650541][ T5601] usb 3-1: Using ep0 maxpacket: 16 [ 1142.652958][ T5601] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 1142.652983][ T5601] usb 3-1: config 0 has no interface number 0 [ 1142.655685][ T5601] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1142.655713][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.655788][ T5601] usb 3-1: Product: syz [ 1142.655803][ T5601] usb 3-1: Manufacturer: syz [ 1142.655818][ T5601] usb 3-1: SerialNumber: syz [ 1142.716090][ T5601] usb 3-1: config 0 descriptor?? [ 1142.717192][T20678] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1142.742274][ T5601] ssu100 3-1:0.4: Quatech SSU-100 USB to Serial Driver converter detected [ 1142.841247][ T822] usb 5-1: USB disconnect, device number 40 [ 1142.924801][ T60] Bluetooth: hci3: Opcode 0x0c03 failed: -19 [ 1142.987698][ T5709] usb 4-1: reset high-speed USB device number 103 using dummy_hcd [ 1142.990681][ T5724] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1143.015129][ T5724] usb 6-1: device descriptor read/8, error -71 [ 1143.271387][ T5724] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 1143.291642][ T5724] usb 6-1: device descriptor read/8, error -71 [ 1143.402471][ T5724] usb usb6-port1: unable to enumerate USB device [ 1143.832436][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4985'. [ 1143.846248][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1143.950852][ T5601] ssu100 3-1:0.4: probe with driver ssu100 failed with error -110 [ 1144.075831][ T5709] usb 4-1: device firmware changed [ 1144.231885][ T5709] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1144.254948][ T5709] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1144.274128][ T5709] usb 4-1: USB disconnect, device number 103 [ 1144.292247][ T5601] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1144.292273][ T5601] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1144.450446][ T5601] =========================[ 1144.450446][ T5601] ================================================================== [ 1144.450462][ T5601] BUG: KASAN: slab-use-after-free in kernfs_root+0xda/0x230 [ 1144.450564][ T5601] Read of size 8 at addr ffff888029b027b0 by task kworker/0:3/5601 [ 1144.450581][ T5601] [ 1144.450629][ T5601] CPU: 0 UID: 0 PID: 5601 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1144.450657][ T5601] Tainted: [L]=SOFTLOCKUP [ 1144.450665][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1144.450678][ T5601] Workqueue: events request_firmware_work_func [ 1144.450739][ T5601] Call Trace: [ 1144.450748][ T5601] [ 1144.450756][ T5601] dump_stack_lvl+0xe8/0x150 [ 1144.450780][ T5601] print_address_description+0x55/0x1e0 [ 1144.450866][ T5601] ? kernfs_root+0xda/0x230 [ 1144.450883][ T5601] print_report+0x58/0x70 [ 1144.450906][ T5601] kasan_report+0x117/0x150 [ 1144.450928][ T5601] ? kernfs_root+0xda/0x230 [ 1144.450948][ T5601] ? kernfs_root+0x1c/0x230 [ 1144.450966][ T5601] kernfs_root+0xda/0x230 [ 1144.450985][ T5601] kernfs_add_one+0x265/0x5d0 [ 1144.451007][ T5601] kernfs_create_dir_ns+0x1a1/0x230 [ 1144.451030][ T5601] sysfs_create_dir_ns+0x12f/0x2a0 [ 1144.451096][ T5601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1144.451117][ T5601] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1144.451147][ T5601] ? rt_spin_unlock+0x160/0x200 [ 1144.451165][ T5601] kobject_add_internal+0x631/0xd10 [ 1144.451198][ T5601] kobject_add+0x163/0x240 [ 1144.451223][ T5601] ? rcu_is_watching+0x15/0xb0 [ 1144.451252][ T5601] ? __pfx_kobject_add+0x10/0x10 [ 1144.451279][ T5601] ? kobject_init+0x83/0x1e0 [ 1144.451305][ T5601] get_device_parent+0x31d/0x3a0 [ 1144.451330][ T5601] device_add+0x2e1/0xb90 [ 1144.451352][ T5601] firmware_fallback_sysfs+0x2e4/0xa30 [ 1144.451373][ T5601] ? kfree+0x1c5/0x6c0 [ 1144.451403][ T5601] _request_firmware+0x1052/0x1780 [ 1144.451428][ T5601] ? __pfx__request_firmware+0x10/0x10 [ 1144.451445][ T5601] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1144.451466][ T5601] ? process_one_work+0x8be/0x1630 [ 1144.451526][ T5601] ? process_one_work+0x8be/0x1630 [ 1144.451553][ T5601] request_firmware_work_func+0xba/0x2e0 [ 1144.451576][ T5601] ? process_one_work+0x8be/0x1630 [ 1144.451600][ T5601] process_one_work+0x98b/0x1630 [ 1144.451635][ T5601] ? __pfx_process_one_work+0x10/0x10 [ 1144.451659][ T5601] ? do_raw_spin_lock+0x12b/0x2f0 [ 1144.451685][ T5601] worker_thread+0xb49/0x1140 [ 1144.451723][ T5601] kthread+0x388/0x470 [ 1144.451743][ T5601] ? __pfx_worker_thread+0x10/0x10 [ 1144.451769][ T5601] ? __pfx_kthread+0x10/0x10 [ 1144.451790][ T5601] ret_from_fork+0x514/0xb70 [ 1144.451814][ T5601] ? __pfx_ret_from_fork+0x10/0x10 [ 1144.451835][ T5601] ? __switch_to+0xc79/0x1410 [ 1144.451857][ T5601] ? __pfx_kthread+0x10/0x10 [ 1144.451879][ T5601] ret_from_fork_asm+0x1a/0x30 [ 1144.451907][ T5601] [ 1144.451914][ T5601] [ 1144.451919][ T5601] Allocated by task 5601: [ 1144.451929][ T5601] kasan_save_track+0x3e/0x80 [ 1144.451945][ T5601] __kasan_slab_alloc+0x6c/0x80 [ 1144.451962][ T5601] kmem_cache_alloc_noprof+0x354/0x6c0 [ 1144.451987][ T5601] __kernfs_new_node+0xe7/0xa70 [ 1144.452004][ T5601] kernfs_create_dir_ns+0xfe/0x230 [ 1144.452036][ T5601] sysfs_create_dir_ns+0x12f/0x2a0 [ 1144.452059][ T5601] kobject_add_internal+0x631/0xd10 [ 1144.452081][ T5601] kobject_add+0x163/0x240 [ 1144.452108][ T5601] get_device_parent+0x31d/0x3a0 [ 1144.452125][ T5601] device_add+0x2e1/0xb90 [ 1144.452141][ T5601] firmware_fallback_sysfs+0x2e4/0xa30 [ 1144.452159][ T5601] _request_firmware+0x1052/0x1780 [ 1144.452174][ T5601] request_firmware_work_func+0xba/0x2e0 [ 1144.452189][ T5601] process_one_work+0x98b/0x1630 [ 1144.452208][ T5601] worker_thread+0xb49/0x1140 [ 1144.452229][ T5601] kthread+0x388/0x470 [ 1144.452245][ T5601] ret_from_fork+0x514/0xb70 [ 1144.452263][ T5601] ret_from_fork_asm+0x1a/0x30 [ 1144.452284][ T5601] [ 1144.452289][ T5601] Freed by task 21: [ 1144.452298][ T5601] kasan_save_track+0x3e/0x80 [ 1144.452313][ T5601] kasan_save_free_info+0x46/0x50 [ 1144.452334][ T5601] __kasan_slab_free+0x5c/0x80 [ 1144.452349][ T5601] kmem_cache_free+0x187/0x6c0 [ 1144.452365][ T5601] rcu_cpu_kthread+0x99e/0x1470 [ 1144.452426][ T5601] smpboot_thread_fn+0x541/0xa50 [ 1144.452442][ T5601] kthread+0x388/0x470 [ 1144.452459][ T5601] ret_from_fork+0x514/0xb70 [ 1144.452477][ T5601] ret_from_fork_asm+0x1a/0x30 [ 1144.452498][ T5601] [ 1144.452502][ T5601] Last potentially related work creation: [ 1144.452509][ T5601] kasan_save_stack+0x3e/0x60 [ 1144.452524][ T5601] kasan_record_aux_stack+0xbd/0xd0 [ 1144.452544][ T5601] call_rcu+0xee/0x890 [ 1144.452568][ T5601] kernfs_put+0x5ed/0x7f0 [ 1144.452584][ T5601] __kernfs_remove+0x69a/0x8e0 [ 1144.452602][ T5601] kernfs_remove+0x4c/0x80 [ 1144.452618][ T5601] __kobject_del+0xe1/0x330 [ 1144.452640][ T5601] kobject_del+0x45/0x60 [ 1144.452660][ T5601] device_del+0x779/0x900 [ 1144.452677][ T5601] usb_disconnect+0x5fb/0x970 [ 1144.452727][ T5601] hub_event+0x1cf9/0x4f60 [ 1144.452744][ T5601] process_one_work+0x98b/0x1630 [ 1144.452767][ T5601] worker_thread+0xb8e/0x1140 [ 1144.452790][ T5601] kthread+0x388/0x470 [ 1144.452806][ T5601] ret_from_fork+0x514/0xb70 [ 1144.452824][ T5601] ret_from_fork_asm+0x1a/0x30 [ 1144.452843][ T5601] [ 1144.452848][ T5601] The buggy address belongs to the object at ffff888029b02780 [ 1144.452848][ T5601] which belongs to the cache kernfs_node_cache of size 176 [ 1144.452894][ T5601] The buggy address is located 48 bytes inside of [ 1144.452894][ T5601] freed 176-byte region [ffff888029b02780, ffff888029b02830) [ 1144.452913][ T5601] [ 1144.452918][ T5601] The buggy address belongs to the physical page: [ 1144.452935][ T5601] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29b02 [ 1144.452953][ T5601] flags: 0x80000000000000(node=0|zone=1) [ 1144.452966][ T5601] page_type: f5(slab) [ 1144.452982][ T5601] raw: 0080000000000000 ffff88814040e000 dead000000000100 dead000000000122 [ 1144.452998][ T5601] raw: 0000000000000000 0000000800110011 00000000f5000000 0000000000000000 [ 1144.453007][ T5601] page dumped because: kasan: bad access detected [ 1144.453022][ T5601] page_owner tracks the page as allocated [ 1144.453029][ T5601] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 19387, tgid 19387 (syz-executor), ts 992603207758, free_ts 992469141774 [ 1144.453060][ T5601] post_alloc_hook+0x1f9/0x250 [ 1144.453085][ T5601] get_page_from_freelist+0x265c/0x26e0 [ 1144.453111][ T5601] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1144.453128][ T5601] allocate_slab+0x76/0x5d0 [ 1144.453179][ T5601] refill_objects+0x2d9/0x350 [ 1144.453201][ T5601] __pcs_replace_empty_main+0x331/0x690 [ 1144.453222][ T5601] kmem_cache_alloc_noprof+0x471/0x6c0 [ 1144.453253][ T5601] __kernfs_new_node+0xe7/0xa70 [ 1144.453270][ T5601] kernfs_new_node+0xea/0x140 [ 1144.453286][ T5601] __kernfs_create_file+0x4b/0x2e0 [ 1144.453305][ T5601] sysfs_add_file_mode_ns+0x238/0x300 [ 1144.453327][ T5601] internal_create_group+0x673/0x1190 [ 1144.453344][ T5601] sysfs_create_groups+0x59/0x120 [ 1144.453359][ T5601] ib_setup_port_attrs+0xf9c/0x2370 [ 1144.453378][ T5601] add_one_compat_dev+0x448/0x650 [ 1144.453401][ T5601] rdma_dev_init_net+0x243/0x2f0 [ 1144.453424][ T5601] page last free pid 4980 tgid 4980 stack trace: [ 1144.453435][ T5601] __free_frozen_pages+0x10af/0x1190 [ 1144.453451][ T5601] __slab_free+0x252/0x2a0 [ 1144.453467][ T5601] qlist_free_all+0x99/0x100 [ 1144.453491][ T5601] kasan_quarantine_reduce+0x148/0x160 [ 1144.453515][ T5601] __kasan_slab_alloc+0x22/0x80 [ 1144.453532][ T5601] kmem_cache_alloc_lru_noprof+0x354/0x6b0 [ 1144.453558][ T5601] __d_alloc+0x37/0x6f0 [ 1144.453574][ T5601] d_alloc+0x4b/0x190 [ 1144.453590][ T5601] lookup_one_qstr_excl+0xd8/0x360 [ 1144.453609][ T5601] filename_unlinkat+0x2c0/0x610 [ 1144.453633][ T5601] __se_sys_unlink+0x2e/0x140 [ 1144.453654][ T5601] do_syscall_64+0x174/0x580 [ 1144.453674][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.453692][ T5601] [ 1144.453697][ T5601] Memory state around the buggy address: [ 1144.453707][ T5601] ffff888029b02680: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1144.453720][ T5601] ffff888029b02700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1144.453733][ T5601] >ffff888029b02780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1144.453743][ T5601] ^ [ 1144.453753][ T5601] ffff888029b02800: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 1144.453766][ T5601] ffff888029b02880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1144.453775][ T5601] ================================================================== [ 1144.463066][ T5601] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1144.463097][ T5601] CPU: 0 UID: 0 PID: 5601 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1144.463125][ T5601] Tainted: [L]=SOFTLOCKUP [ 1144.463132][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1144.463145][ T5601] Workqueue: events request_firmware_work_func [ 1144.463174][ T5601] Call Trace: [ 1144.463182][ T5601] [ 1144.463191][ T5601] vpanic+0x56c/0xa60 [ 1144.463219][ T5601] ? __pfx_vpanic+0x10/0x10 [ 1144.463244][ T5601] ? __pfx___schedule+0x10/0x10 [ 1144.463268][ T5601] panic+0xc5/0xd0 [ 1144.463292][ T5601] ? __pfx_panic+0x10/0x10 [ 1144.463317][ T5601] ? preempt_schedule_thunk+0x16/0x40 [ 1144.463348][ T5601] ? kernfs_root+0xda/0x230 [ 1144.463366][ T5601] check_panic_on_warn+0x89/0xb0 [ 1144.463389][ T5601] ? kernfs_root+0xda/0x230 [ 1144.463406][ T5601] end_report+0x73/0x170 [ 1144.463426][ T5601] ? kernfs_root+0xda/0x230 [ 1144.463442][ T5601] kasan_report+0x128/0x150 [ 1144.463463][ T5601] ? kernfs_root+0xda/0x230 [ 1144.463481][ T5601] ? kernfs_root+0x1c/0x230 [ 1144.463500][ T5601] kernfs_root+0xda/0x230 [ 1144.463518][ T5601] kernfs_add_one+0x265/0x5d0 [ 1144.463540][ T5601] kernfs_create_dir_ns+0x1a1/0x230 [ 1144.463562][ T5601] sysfs_create_dir_ns+0x12f/0x2a0 [ 1144.463589][ T5601] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1144.463608][ T5601] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1144.463636][ T5601] ? rt_spin_unlock+0x160/0x200 [ 1144.463654][ T5601] kobject_add_internal+0x631/0xd10 [ 1144.463686][ T5601] kobject_add+0x163/0x240 [ 1144.463710][ T5601] ? rcu_is_watching+0x15/0xb0 [ 1144.463737][ T5601] ? __pfx_kobject_add+0x10/0x10 [ 1144.463765][ T5601] ? kobject_init+0x83/0x1e0 [ 1144.463790][ T5601] get_device_parent+0x31d/0x3a0 [ 1144.463814][ T5601] device_add+0x2e1/0xb90 [ 1144.463836][ T5601] firmware_fallback_sysfs+0x2e4/0xa30 [ 1144.463857][ T5601] ? kfree+0x1c5/0x6c0 [ 1144.463884][ T5601] _request_firmware+0x1052/0x1780 [ 1144.463909][ T5601] ? __pfx__request_firmware+0x10/0x10 [ 1144.463927][ T5601] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1144.463948][ T5601] ? process_one_work+0x8be/0x1630 [ 1144.463974][ T5601] ? process_one_work+0x8be/0x1630 [ 1144.464000][ T5601] request_firmware_work_func+0xba/0x2e0 [ 1144.464022][ T5601] ? process_one_work+0x8be/0x1630 [ 1144.464047][ T5601] process_one_work+0x98b/0x1630 [ 1144.464079][ T5601] ? __pfx_process_one_work+0x10/0x10 [ 1144.464111][ T5601] ? do_raw_spin_lock+0x12b/0x2f0 [ 1144.464136][ T5601] worker_thread+0xb49/0x1140 [ 1144.464172][ T5601] kthread+0x388/0x470 [ 1144.464192][ T5601] ? __pfx_worker_thread+0x10/0x10 [ 1144.464218][ T5601] ? __pfx_kthread+0x10/0x10 [ 1144.464237][ T5601] ret_from_fork+0x514/0xb70 [ 1144.464261][ T5601] ? __pfx_ret_from_fork+0x10/0x10 [ 1144.464281][ T5601] ? __switch_to+0xc79/0x1410 [ 1144.464300][ T5601] ? __pfx_kthread+0x10/0x10 [ 1144.464320][ T5601] ret_from_fork_asm+0x1a/0x30 [ 1144.464350][ T5601] [ 1144.464690][ T5601] Kernel Offset: disabled