last executing test programs: 1m17.592426043s ago: executing program 3 (id=56): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:7', @ANYRESDEC=0x0]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) ioctl$KDDISABIO(r1, 0x4b37) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000e3ff0b00000018000580080001"], 0x2c}}, 0x0) 1m17.460312303s ago: executing program 3 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x12}) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000028c0)='/proc/asound/card2/oss_mixer\x00', 0x20002, 0x0) write$proc_mixer(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@updpolicy={0xec, 0x19, 0x100, 0x70bd2c, 0x25dfdbfe, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x4, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x2c, 0x0, r3}, {0x209b, 0x0, 0xb3, 0x1, 0x9, 0xa, 0x6}, {0x271111b1, 0x8, 0x2, 0x1ff}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in=@multicast1, 0x0, 0xa}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40041}, 0x20040000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/85, 0x55) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@newae={0x78, 0x1e, 0x2, 0x70bd2d, 0x25dfdbff, {{@in=@local, 0x4d4, 0x2, 0x32}, @in6=@remote, 0x3, 0x3501}, [@address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@loopback, 0x2, 0xad, 0x32}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @proto={0x5, 0x19, 0x32}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0xc090) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090501"], 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x2101224) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="00214717a7070075007c5fe03af5b2a1b7cee7a4ebf4", 0x16}], 0x1, 0x73a, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000003200e7ef007b00000000000000a1", 0x12, 0x20080000, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x7f, 0x200240) 1m16.011684075s ago: executing program 3 (id=65): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80146, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x0, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x4000081, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000", @ANYBLOB="00442dbd7000fddbdf25254de9"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200040c0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000801000010000000000000000000000000a58000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000380c000b400000000000000002140000001000010000000000000000000084000a"], 0x80}}, 0x40004) 1m15.488095761s ago: executing program 3 (id=70): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000001600)=""/166, 0xa6}, {&(0x7f0000004b00)=""/191, 0xbf}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000bfb8281300002482243a8f5a03b101754bee109d3af8c6ac440fb26ac20252d9a788172b4098f7add1efdb28331abb29f9b7c4fee39ed66bd995114af3fc981590bed4aec2257b79c18cb465e74ee3857fc2a17d60ec6c4e5888b95449ad0b7f017a230f4133ea2eeaea513680b7e98fb8aea61eed3915576dd00000000000", @ANYRES32=r1]) 1m13.690135447s ago: executing program 3 (id=78): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000240)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r3, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0xf}) close_range(r3, r0, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000700)={r4, 0x0, 0x4, 0x8, 0xfa}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, r6, 0x401, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "1d62812055fd4f3ad78e15310bc349cfb5"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x184, r9, 0x103, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x9}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x80}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0xfeff, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x5}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x35}, 0x4000800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r10, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2babc7ca, 0x48}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_io_uring_setup(0x7393, &(0x7f0000000180)={0x0, 0x1add, 0x1003, 0x2, 0x87, 0x0, r8}, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000740)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000600)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={r11, r12, r13}, 0xc) ptrace$getregset(0x4205, r11, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r14, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1m13.497327714s ago: executing program 3 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="27d3bac9d157349ef9cb01"], 0x14}, 0x1, 0x40030000000000}, 0x0) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) syz_usb_disconnect(r2) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) write$uinput_user_dev(r6, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x26, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x9, 0xc, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f84, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x9, 0xd2, 0x8001, 0x5, 0x53, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0xffffffff, 0x405, 0x2, 0x9, 0x5, 0x5, 0xd, 0xa, 0x8001, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x9, 0x10001, 0x1, 0x865f, 0x8ec5, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xa, 0x3, 0x7, 0x401, 0x5, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f83, 0x9, 0x1, 0x2, 0xd, 0x7, 0x402, 0x9, 0xffff, 0x400, 0x80000000, 0x0, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x6, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffffa, 0x8, 0xffff7bfb, 0xffffffff, 0x401, 0x100, 0x2, 0x0, 0xb, 0x8, 0x3, 0x5, 0xfffffc00, 0x91, 0x9, 0x4, 0x80000000, 0x2, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0x5, 0x9a2, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffb, 0x2000}], 0x1, &(0x7f0000000100)) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000007196de1dcdbf7564ff660bd0146fa49f6f2a2a3685626e759874f8ee5982024390a1a6407569530db7a4f1efcf1780878d59fcedda6ee2a580844bb0174ca5d2bfaa7bf76d6d221ce2625055af78579d4beee6a82bd852fe7452851ed74065c571ad5d1f549e271fced084ebc9d9b54f55cb4e5274502d95", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250100000006000600214e000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x40}}, 0x800) (rerun: 32) 1m0.192696084s ago: executing program 0 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r1, &(0x7f00000002c0)="790233339b61a500a7a7d61d44aac3abcfe2c046133229ad61343357572457a9d36174049e4d24acfff7693c768af16320444cfbf214ca9202527c7a726d333015409c00000000", 0xfffffffffffffc90, 0x0, 0x0, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, 0x0, 0x18, 0x81}, 0x4c800) (async) socketpair(0x1d, 0x80000, 0x7, &(0x7f0000000000)={0x0, 0x0}) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) (async) recvfrom$inet(r1, &(0x7f0000000040)=""/18, 0x12, 0xc9100120, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) (async) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a", @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x5f48a36f4eaa2069) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 1m0.158883765s ago: executing program 0 (id=132): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) uname(&(0x7f0000000640)=""/161) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) r6 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x2, 0x0, r6, 0xa}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 58.036119363s ago: executing program 32 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00'}) r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="27d3bac9d157349ef9cb01"], 0x14}, 0x1, 0x40030000000000}, 0x0) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) syz_usb_disconnect(r2) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) write$uinput_user_dev(r6, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x26, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x9, 0xc, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f84, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x9, 0xd2, 0x8001, 0x5, 0x53, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0xffffffff, 0x405, 0x2, 0x9, 0x5, 0x5, 0xd, 0xa, 0x8001, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x9, 0x10001, 0x1, 0x865f, 0x8ec5, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xa, 0x3, 0x7, 0x401, 0x5, 0x5, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f83, 0x9, 0x1, 0x2, 0xd, 0x7, 0x402, 0x9, 0xffff, 0x400, 0x80000000, 0x0, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x6, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffffa, 0x8, 0xffff7bfb, 0xffffffff, 0x401, 0x100, 0x2, 0x0, 0xb, 0x8, 0x3, 0x5, 0xfffffc00, 0x91, 0x9, 0x4, 0x80000000, 0x2, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0x5, 0x9a2, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffb, 0x2000}], 0x1, &(0x7f0000000100)) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000007196de1dcdbf7564ff660bd0146fa49f6f2a2a3685626e759874f8ee5982024390a1a6407569530db7a4f1efcf1780878d59fcedda6ee2a580844bb0174ca5d2bfaa7bf76d6d221ce2625055af78579d4beee6a82bd852fe7452851ed74065c571ad5d1f549e271fced084ebc9d9b54f55cb4e5274502d95", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250100000006000600214e000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843"], 0x40}}, 0x800) (rerun: 32) 56.748621451s ago: executing program 0 (id=141): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2}}) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000005600), 0x6, 0x10000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000005640)=0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r7, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005780)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x11e8, 0x3b, 0x2, 0x70bd25, 0x25dfdbfe, "", [@nested={0x8, 0x37, 0x0, 0x1, [@nested={0x4, 0x10c}]}, @nested={0x10d3, 0x120, 0x0, 0x1, [@generic="d365864c86e691e53cb156a886d9928df63d1580f3a52d5a1f5d986ef441d0b84024ac7644e200f4b269ebb23ce1697e5d78fd111bba7573736b0639854697c66474fbe65e5f42dd937bb05ccae04a007cbdf6013cbec77cf1e98c6e6f947fe60a35a56122ca905ecd5a7b452788187b069a6a74716f453742f054871773961182c998af04b19d93bafe0ce3c0c7ffc675afcf21e1e720c60b2095542144466a2d5765e0f091e53a1ac03d7dd96f1744b8561d8185e90e", @nested={0x4, 0x68}, @typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@remote}, @generic="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"]}, @generic="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"]}, 0x11e8}], 0x1, &(0x7f0000005680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xd8, 0x8040}, 0x4000000) (async) listen(r2, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x2) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r15, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) write(r0, &(0x7f0000000000)="1400000052004f7fb3e4bff6a51704c76f575c00", 0x14) 56.703254057s ago: executing program 0 (id=142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f007068793120000000050020"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40882) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\', 0x3a, 'resv_level', 0x3a, './file0'}, 0x32) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00-', @ANYRES16=r2, @ANYBLOB="00012dbd7000fedbdf25210000000c0005000202aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x800) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) 56.594210182s ago: executing program 0 (id=143): r0 = socket(0x11, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r1, &(0x7f0000000280)=""/4096, 0x1000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 56.436057742s ago: executing program 0 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x3, 0x5000000, {0x80, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xe9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000808000b400000000070000480340001800b000100657874686472000024000280080001400000000c08000340f600000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000020900010073797a30"], 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000808000b400000000070000480340001800b000100657874686472000024000280080001400000000c08000340f600000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000020900010073797a30"], 0x10c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x22020600) syz_clone(0x2c9a4080, 0x0, 0x5f5, 0x0, 0x0, 0xfffffffffffffffc) (async) syz_clone(0x2c9a4080, 0x0, 0x5f5, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x805, 0x0) (async) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) ioctl$TCFLSH(r7, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, 0x2, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x8008041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x64}}, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 41.03167956s ago: executing program 33 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x3, 0x5000000, {0x80, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf4\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x06\x00\x00\x00@\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12[\x93\xa5\xd4\xdb\x9a\xb2\xe0\x16He\x81\xea[\x9c\xf9\xc4\xa2\x86F\xbct@\x97\x11Y\xa7\x1b\xc0v\xb0lJ\xc4\x9e\xc7m^\x86\xea'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xe9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000808000b400000000070000480340001800b000100657874686472000024000280080001400000000c08000340f600000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000020900010073797a30"], 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000808000b400000000070000480340001800b000100657874686472000024000280080001400000000c08000340f600000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000640000000020900010073797a30"], 0x10c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x22020600) syz_clone(0x2c9a4080, 0x0, 0x5f5, 0x0, 0x0, 0xfffffffffffffffc) (async) syz_clone(0x2c9a4080, 0x0, 0x5f5, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6(0xa, 0x805, 0x0) (async) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) (async) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100}}}}}}}}}, 0x4a) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000000) ioctl$TCFLSH(r7, 0x400455c8, 0x400000009) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x44, 0x2, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x8008041) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x64}}, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) 29.48439291s ago: executing program 1 (id=243): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x18, 0x0, 0xffffffffffffffff, 0x2a) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) 29.47330264s ago: executing program 1 (id=244): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) accept$ax25(r2, &(0x7f00000001c0)={{}, [@default, @null, @remote, @default, @default, @default]}, &(0x7f0000000100)=0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$isdn(0x22, 0x3, 0x11) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x40, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_a, @device_a, @from_mac=@broadcast, {0x7, 0x7}}, 0x3308, 0x3e, @default, @val, @val={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x626381b2, 0xc, 0x0, 0x57, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x12, 0x7}}}}]}, 0x70}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205b5b50000007bd1f7"], 0x0}, 0x0) 29.114974176s ago: executing program 1 (id=247): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x100000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x1000, 0x0, 0x300d, 0x4, 0x100, {0x5, 0x9}}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000120081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040800001b0000000002000000400004803c0001800900010068617368000000002c000280080003400000000008000240000000000800014000000000080004400000000008000640000100010900010073797a30000000000900020073797a32"], 0x94}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r4, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff00b1]}, 0x0, 0x0, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x14, 0x0, &(0x7f0000000040)) read$FUSE(r5, &(0x7f0000003440)={0x2020}, 0x2020) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 28.989240226s ago: executing program 1 (id=249): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x30000, 0x0) getdents(r2, &(0x7f0000000200)=""/76, 0x4c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x800) sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=[@iv={0x10}, @op={0x10}], 0x20, 0x40000}, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r5) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) write$cgroup_int(r5, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000021002b000201feffff00000000000000fe880000000000000000000000000001fc010000000000000000000000000000040004"], 0xc0}}, 0x0) sendto$rose(r7, 0x0, 0x0, 0x4000000, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4044}, 0x4884) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) 28.644003316s ago: executing program 1 (id=251): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x4, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000001480)=""/4096) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (async) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000120) (async) shutdown(r3, 0x1) (async) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000b00)) (async) futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x1, 0x11f, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x1, 0x7, 0xff, 0x6}, 0x77, &(0x7f0000000240)={0x5, 0xf, 0x77, 0x6, [@generic={0x3c, 0x10, 0xa, "4db3d67fb12220c3ca2e6f24dd629244ebabd18d6c946cbe2a88ecadb235b2cc5a7de86d77186102014632a4c481fa4ec1554f5c3fa0d89c93"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x48, 0x81}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x2, 0x3, 0x8, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x4, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xb4, "93d7107efc003a9ef2ee767f99b0c07c"}]}, 0x2, [{0xcf, &(0x7f00000002c0)=@string={0xcf, 0x3, "69d89b8a6d4bd1e3da2c4ea34a5ac62a0f240d66f08a20893a205e49fad5d734676de2cfbdbcc17c393ea9cca2eb1e715f176fe5525b110ba37ea9929d21c8ae57c33fdff6c6579b47b99a26c7d735edf99fe44b551433eb2c9ae258c1f5fd06b822f23e1c345e11bd82c3737d6b6ade75d80144f993eea5474c3af64115d8a97182d7d7bb188b1a79845b95f216b167cafff6e620fc898c5fa242f790375aa971b2d52fe35fc3b61798eece5eff61fd220e4b3070cc8e0ff920b08398e73b08a2053da324b6c5ec8bd7d648fe"}}, {0x4a, &(0x7f00000003c0)=@string={0x4a, 0x3, "379e5b29b2f6af1772f18c76fb5cf27e914aa4df3cbdee2974e20fcb4db8154b995dfec45ec1a62eb7920956554095703267b91d9572836b9da992f4c9082d0dd4d7cb9ab7b27f21"}}]}) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x40, 0x3, 0x10, {0x10, 0x22, "5d26007e3531b1b45276af9773f4"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f00000004c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0x1f, 0x6, "36dec4d7", "c58fd445"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x8, 0x4, 0x5, 0xe1, 0x246}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x0, 0x13, 0x62, "d1dc85c188966f422f825c160426b78faa66b70ccc9275a05e5283a018aaddda792f8dcd918ecd75b95d794144abec0b008155b32003073fe9575a896e8525979d4d03c14864d3323e2a56b62b8986949c9c47298b7b6f04fd7533f6ad9b1f54f52f"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xf5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xc0, 0x40, [0xf]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xf6c}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0xb, 0x2, "e3b6"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000900)={0x40, 0x19, 0x2, '\a\x00'}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) 28.463780427s ago: executing program 1 (id=253): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2d41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2d41, 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) dup(r1) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) (async) 12.573813224s ago: executing program 34 (id=253): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2d41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2d41, 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) dup(r1) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}], [], 0x6b}}) (async) 7.909865039s ago: executing program 2 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x80000000, 0x9, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x65, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@generic={0x94, 0x7, "66e07bfef1"}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x2, [{@empty, 0x5}]}, @noop]}}}}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@mcast2, @private1, @loopback, 0x1, 0x2, 0xc, 0xd00, 0xe, 0xc80032, r8}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'veth0_virt_wifi\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000880)={@initdev, @empty, 0x0}, &(0x7f00000008c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0x8001, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast1, 0xf826, 0x80, 0x833, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f00000009c0)={'tunl0\x00', 0x0, 0x7, 0x10, 0x100, 0x8, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x66, 0x0, 0x0, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x37}, {[@rr={0x7, 0x13, 0xdd, [@rand_addr=0x64010100, @multicast2, @multicast2, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x2c, 0x7f, 0x1, 0x8, [{@loopback, 0x6}, {@local, 0x8000}, {@loopback, 0x4}, {@loopback, 0x6}, {@broadcast, 0xfa}]}, @timestamp_prespec={0x44, 0x54, 0x6c, 0x3, 0x8, [{@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0x57f0}, {@private=0xa010101, 0xffff}, {@rand_addr=0x64010102, 0xa48d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0xa}, {@private=0xa010101, 0x5}, {@remote, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x40, 0x1, 0x3, [{@private=0xa010101, 0xfffffffd}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000b40)={@loopback, @multicast1, 0x0}, &(0x7f0000000b80)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000000bc0)={0x4e4, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x108, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd2}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xce3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r14}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x4e4}}, 0x4044085) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x760c, 0x9, 0x1ff, 0x8000, 0x3, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x40}}, 0x0) r19 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r20 = socket$inet6_sctp(0xa, 0x5, 0x84) r21 = socket$inet6_sctp(0xa, 0x5, 0x84) r22 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r22, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r21, 0x84, 0x19, &(0x7f0000000000)={r23, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r20, 0x84, 0x11, &(0x7f0000000180)={r23, 0x3}, &(0x7f00000001c0)=0x8) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x274, r19, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfd}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc22}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x15}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x421b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x479a}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2d9d8e9b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f5e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x4000}, 0x895) 7.817156399s ago: executing program 2 (id=342): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x800000) r1 = socket$l2tp(0x2, 0x2, 0x73) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x7, &(0x7f0000000040)={0x1c, "a1ec102c5d6f98dd19b35ed0297c75afec5fecdeda1ccbaab9ca7d6ff1c2c32dba"}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004"], 0x64}}, 0x10000) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) recvfrom$l2tp(r1, 0x0, 0x0, 0x40000001, 0x0, 0x0) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) close_range(r2, r1, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b0000000000000400010040"]) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x4) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000000480)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000000c14020025bd7000fcdbdf2508003d0005000000080001000100000008b00300040000000800030001000000"], 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) 5.384167674s ago: executing program 4 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x3f3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2040, 0x1, 0x2}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) renameat2(r3, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7\x00', 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5392400905080aff03f70709090587024000020500"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x4], 0x2000, 0x80cd4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x1000}) clock_gettime(0x0, &(0x7f0000000200)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000380)=@mmap={0x800, 0x2, 0x4, 0x100, 0xffff8001, {0x0, 0xea60}, {0x3, 0x0, 0x1b, 0xa, 0xff, 0x54, "aee85bd4"}, 0x8, 0x1, {}, 0xffff78a7}) close_range(r5, 0xffffffffffffffff, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x60, {0xd34b, 0x114}, 0x10, 0x4}) 4.719352694s ago: executing program 2 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/56, 0x38}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth1_to_bridge\x00', @local}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4.352077179s ago: executing program 4 (id=360): timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f0000000140)={{0x77359400}}, 0x0) (async) rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200)) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000000) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c0c4}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x20000) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20004000) (async, rerun: 32) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000ac0)=""/138, 0x8a}], 0x2}, 0x0) (rerun: 32) r7 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x6, 0x6, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x8000, 0x5, 0x8}}) recvfrom$packet(r6, &(0x7f0000000100)=""/141, 0x8d, 0x10000, &(0x7f0000000340)={0x11, 0xf8, r8, 0x1, 0x9, 0x6, @remote}, 0x14) (async, rerun: 64) ioctl$VIDIOC_S_HW_FREQ_SEEK(r7, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x6ae0}) (async, rerun: 64) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000400)=""/231, 0xe7}], 0x3}, 0x10101) (async) syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x67, 0x97, 0x90, 0x40, 0x421, 0x335, 0x65bf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x1, 0x2, 0x2, 0xff, 0x0, [], [{{0x9, 0x5, 0xf, 0x8, 0x5c7, 0x40, 0x8, 0x7, [@generic={0x2, 0x10}]}}]}}]}}]}}, 0x0) 4.223379688s ago: executing program 4 (id=362): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="3f6b6fe78df985d373b8f7a342083de3", 0x10) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x401}, @timestamp, @timestamp, @timestamp, @sack_perm, @timestamp, @sack_perm], 0x7) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x101000) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000100)={0x2f, 0xe}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)) ioctl$TIOCSIG(r2, 0x40045436, 0x1a) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000240)={r5, 0x1, 0x3, 0x3, &(0x7f0000000200)=[{0xaf57, 0x7, 0x9, 0x223}, {0x5, 0x3, 0xff, 0x800}, {0x6, 0x100, 0x0, 0x6529}]}) r6 = syz_io_uring_setup(0x7621, &(0x7f0000000280)={0x0, 0xc494, 0x0, 0x2, 0x306}, &(0x7f0000000300), &(0x7f0000000340)) r7 = syz_io_uring_setup(0x33a6, &(0x7f0000000380)={0x0, 0xbe4e, 0x200, 0x3, 0x1c8, 0x0, r6}, &(0x7f0000000400), &(0x7f0000000440)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000480)) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f00000004c0)) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x8, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}], &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000b00)={&(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[{}, {}], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000ec0)={&(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000fc0)={0x400, 0x2, &(0x7f0000000680)=[r4, r8], &(0x7f00000006c0)=[0x3, 0x1, 0x0, 0x429, 0x73b, 0x7, 0x1000, 0x0, 0x2, 0x0], &(0x7f0000000f40)=[r9, r10, r11], &(0x7f0000000f80)=[0x7, 0x206, 0x7f], 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) close(r7) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000001000)) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000010c0)={'veth0_virt_wifi\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001140)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001180)=0x0, &(0x7f00000011c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001280)={'syztnl1\x00', &(0x7f0000001200)={'ip6tnl0\x00', 0x0, 0x4, 0x44, 0xf, 0xea8, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x0, 0x8, 0x9, 0x9}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000016c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001380)={0x2c4, r12, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xda6}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xec}, @ETHTOOL_A_LINKMODES_OURS={0x1bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x76, 0x5, "ac77405476620ac42953dd71db8cba2ea2e6add41ec29c0636e795610ae2ad2b10ac35f24e3f1ad3f4e636ba8a0f8bac319a3ec3575f612f72ac1be11035a5d033281308cd3b88e72ceea40cecbd1699b65bf6f0cfa196a318eb30368693d8e2f9f0be73be4dc5b91b7aa08b23c80c611909"}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "1fe9f1d5cfaf0319cacc3c57ff257ef2b72da0d70fb91ad21ca53285af8fc3ff4976806f9e77ee8690c24c57ce7fc3329c0d3f9f753a79877b2555d19d893415e93dd1abd1115b7603691e31d0b6dfa3b95aa656ef42989229dc660795dc89205d89c178b9c20db15b1db675b021a0f55236c48e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "9cd589568711ee69425309e376394a8d1983bdb17767d7d90e4ada27c8aa11755cc350a3ff1eb61f52cd28353e1088aca4b936632b72cb95a64d1691232d413d5121a6b2925798141a36774a1158b7730bd1b0fbc96b955b10e4abfa6ab15154daa7db90ee6c1dbf13b4517b6b389d4d8b786bbc62bc5a6c06ae0ad4b0954a6907f3d22226f4124d7551cc93746992acd29e314d44d6f349c3f673"}, @ETHTOOL_A_BITSET_MASK={0x20, 0x5, "ace9776f995db6bdd5851164359cfc29ce09f70e24db5431b2fa36b8"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @ETHTOOL_A_LINKMODES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x41001}, 0x400c040) 4.140333095s ago: executing program 2 (id=363): mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0xb73, 0xd, 0x5, "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"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f00000001090212"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003a6a2e10800b600000000140b030109021200010903100709046209000347fd6d8f538786c8ecb9c4a75e9984e33f1716dc6653ddb631d2fc5742f5fca9aaddd0e6b1f7ddd96a097a446fd8ac509ffa5412bca342d0639bb7b12b4ea9274db30a03c76a9f522437cf9ca4b99027f3ce15db014edd7c7dbc4bcfa77629b0f0215c612be8ddb6f23b473feccf39a5a992887f4321bfa13500d23ad8d7d3b3dc1b4201bb7f24bc38a92be598e05f89796a5580863ddabebe8709c007"], &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) 4.071107402s ago: executing program 4 (id=364): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x800) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x7ffffffe, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) 3.693677797s ago: executing program 6 (id=368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x31ba16e0}, 0x4) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x8001}) 3.496414005s ago: executing program 6 (id=369): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRES8=r1, @ANYRES64=r1, @ANYRES16=r0, @ANYRESOCT, @ANYRES16=r0, @ANYRESDEC=r1], 0x32600) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x306) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x24110, r1, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000740)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x795}], 0x1c) (async) r5 = getpgid(0x0) syz_open_procfs(r5, &(0x7f0000000100)='children\x00') 3.478540586s ago: executing program 6 (id=370): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_control_io(r0, &(0x7f0000000c00)={0x2c, &(0x7f0000000940)={0x20, 0x3, 0xfd, {0xfd, 0x24, "2d782cd188b0ec28245bbd2b5acef200a7f9aad3f5733faad083a4e5a6dd7cf231d1bd913c0ab563e38df4c122e6d8b1e20f525c2397b198ca0213b77da3cbbdeacd9b8194582454a6e119deae6f2747a0de754e7cddd26aabe936ecad1bb9d86ed08bf30206e04e5f975eb023766b49651025d7c21c16c26fe6d8cdcc13f040804fb4ed0829fd358c60f499ac1a1f86e16ce925b5e999ad135d6743a2dd7b8b57ecb457b21b163f02a3bd8df3d9219088526fc02a50cc5d1be2408bcf0cf8b1f99f381fb169c112667a270a74574f508eed720a0662e1c4a847e58b98d2ebe6e79af66ff1d3b0e448cb266a66127e3db3fe69f5f72b2a44af9821"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c01}}, &(0x7f0000000a80)={0x0, 0xf, 0xc7, {0x5, 0xf, 0xc7, 0x6, [@generic={0x6, 0x10, 0x4, "7cc00b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x1, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x9, 0x3}, @generic={0x9a, 0x10, 0x9, "ab6243fc6f00dac0251cc6ae6ea5908ee701957109e487512571b86b71e34d33e698fa17515b3c3b9b44e551d04db473892377ac4e919a4dfbf886d68f5ed1fc2698706ce90a309ad545eb503759eaff9ae834c9b4146e485b9b651debac199eb18893e2ce44921d2716bdd2b5b647b6d796d430064a54a4954aed462891ac6df61899a15009430493c3b7a2c72da95f340f8d175dc526"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0xb, 0x9ad}]}}, &(0x7f0000000b80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0xb, 0x6, "fea9d89c", "200657e4"}}, &(0x7f0000000bc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfe, 0x8, 0x9, 0xbb, 0x0, 0x1, 0x10}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c40)={0x20, 0x5, 0xac, "738a28307d2c12714e79b49c17066109dbf7068a971ae10b95d3c50e48942f2da7e6847bd1ffec078ce15aae6aaf5472e8ad935636f905c91a6137be482f0620f309bc1db81c4a492a80ea9c22d2de12a3d5bc8ffec906cb9f7f1d71b997b7de3f31857d00749332d30dc34b2ce3226193a638077a3901b23df649885acca1d6a12076034272d4265a58d447adc8c68738651c7c014856a04890147692676b239747f39c3cc9629665e8d45b"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x8c4, 0x1, [0xfff]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0xf2}, &(0x7f0000000e80)={0x40, 0xb, 0x2, 'cC'}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @local}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "3184"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0x3}}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004804}, 0x800) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000040)={0x14, &(0x7f0000000380)={0x0, 0xc, 0x86, {0x86, 0x21, "ecd64bf4e8979c7a123dec4f884e0c611cdcb9dc159e4e10ced017ab92fc414d1576c0c55b4d2aa0890c2b22e9ff0b2b1ecaa66849fe366a6609126792c10b84cad3e2e04fae190084ce1d7c38bbc6d739eac54f2d7b46464dd770a029e57a9b43dc33d147ff5358d815c8a632e67ef284d3eeb8e52783589f80fc3813cda9c3d6f73f04"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000440)={0x40, 0x9, 0x95, "7885f55534c6add1432e6c5aab71ba08c23e16cafa04d331e287a5628704f79eb92cb8776258916cc21a31d1d1291b47a76c76aa51e05675278be35322501126b01d31cb68179210003ee5fe2bea35039819345edf2e0fc5cd33b631bf861c954728a1da5fd2cb5004382581d6d79a0808c8d87a2ab004f7fe60346abf5d3f478d197169e4d5d00030205cbdc6a91e3bee9db89870"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "92b24118c0d706c2928b50264b67248814ba2a336d2e8fbe1a6c910073c7ce68997a9547b45c79b74afccd3e70fc39452b8144d289bb14a0cd25e8cea3d05807b4d9ee042ae219b9bbe38b4e6cc49026316565a3c8d315dcc41fef9c6777951e3f24651ba87502290a37a4f0fc93dc33d5ead38c4aca5e6a3c371e5af4967d7731f6a358b7d56a997e5fc9c60014227b9c656feb330ee15364655422e9c11439b4fa320aabaaaf2026f790ef52b09ba3edfae7c896793dda06defb83272102fa2b1586fd0cb5d54b6b7b9dc4419cbd53bdc48270dd9649e9a36e045489af6e43d4225c83179f908e62f8e635e4a6ae9be22b386f00429c2feaa5db665fd69b8773d743a07b20c37e4412af97c249307ea0b616c7c4a17678dd52dcfa88bdbbadbf95cfcb25a9dc52757ae8664b0bbdbb3ee46e7edf50d68cf4364b558d7d5d5521e55e5971d7cce270e5d17acbe51e6d7e749e49525483a3c6e705744e78f0aff1d7ceaea2fe3d7be6d686825e72fb60f12204b5c9c17686f828b3ddacc36b151d9a3901079111ab41acd8483f6f32c15464c8eb580a2e42af4605fbac7e07a74e8a1e5413b76680d3609d67f09385eb31f4ff937ee773ea5676d6a296fd8bda80b56c6d2f9df1c3d05b12c230f864316786c1f8b8147713623676a198737f45f8204b87687c4f76a21ad05de6f5728975a5f3859e5f47fd040d49c68b59ce397e364e898026f3ba61b50df2f870d6da6d72032ed57eb9ddb3a3f2dda687176335d1769ce359e89e1ab8b2afc5d8c2f3d3416ca7662eb2a42bf0a4996a420a1defa8a3ccbd26ddf0fd5e1b21258dae7db2deac0878adc66a9a09567de19a0ab11fc08d5f215816152e170d50dc7300046a1c0b3bdc31bd57e878d7fa4a2cda94da8769b8114379c082c56624d9e5089697626dc2bc1c31ded02a7b7c199877e69b4268f2ce71c4e9263a9572bf3da5380db32ee62829942aa0c3fd05df85b1c40f970fa70881117d21fa67d236723060c55442b7378e082efaeeb60759ae6f95270bdf78ce22aef6732bfc76b6baef1bab670b7f9549cfb4dbf63db91ffa2e2783a8b09f304d7f6ef595fd9b7627fdbc3466ffe402be01f9985c393513fb6a01eff3700fe3aac924585068337a64dbd428b74254332d438c0d1f0c3b5e341c96162fc58446f6bc159d1125884019deec492817a30f5956c795d8c47af7c0142254f67e27283c2b0a7d49a118c71118ab673687510197d1f4680a12950e9720c09939e731e5b98433d1d1de220507e8197949054909e7cf6df7ce1af3a1363b2a7cf5bcdf9a89fea2c4a2a446613705f55b3a8bba4651148ad02bafe3ebafed9610db62d0e565a47a0126465b77dae5a3e7144cd8697f080aa6d4d81396a1874efbfe554a48483949dbd337f6768b6fc3faeff63783fc655d3d7927a9f5bd623d"}, &(0x7f0000000100)}) (async, rerun: 32) syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 32) 3.137166104s ago: executing program 4 (id=373): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) close_range(r0, r0, 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x2, r1, 0x30, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r4 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r5 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x78, 0x0, &(0x7f0000000300)=[@clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r4}, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @acquire_done, @free_buffer={0x40086303, r5}, @enter_looper, @exit_looper], 0x3, 0x0, &(0x7f0000000380)="77dcc3"}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000400)={0x1, 0x0, [{0x9, 0x1, 0x100, [0x6, 0xb28, 0x8, 0x4, 0x8, 0x2, 0xb3, 0xffff8001]}]}) pwrite64(r0, &(0x7f0000000440)="7c721e67db733defc0e0c34393b5d0998cf616df275325df80f2694dbcc13b5b92fc6856abf340cf3d8a41895e3ae4489bdf0c98c47e182ea6e7fe23f49f67e3048c0129d8fa60ac20530c90d77e0bf366f3be1f183136745df19e80279f65ca370d629404cc5f3c4e9253e90dadc950483c5edd20b387cad61e410298ebae1de65187ff8917c1f896fe88b005476f9053e287de4512c542b34fd9c16162d2e85566d5e98c512581859132d1a88a21f6fbdd4336ea7184eaa5d7cdc2c29353562d68bd2e3c0d6ad8682bc533135a3f9a7580ce3d184ae4625a0004a97cf25a168f1f1c859bcf43e4a0bd536e831871", 0xef, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000600)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000540)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$nbd(r3, &(0x7f0000000640)={0x67446698, 0x0, 0x0, 0x4, 0x3, "41967c8375c23225af879b3baa6af3bf06651f13bef9f3bbbef96ab471028d930cf7686089f88087986813a16b0a01c806fd1ca3461e2a905c5bee3fdf0a349d471fee1158ed6c00095fba3d9e1ed2408e0ad60b9e6d1616ae2be0410cbe7e7a53abb4aa95b70be92709c59b7114167dadcc5bccb229fdd3ee1fbd16def1054e012401aebf88594bac4588e65ba7d8f2bbf32d1ffbcce0c2ae53ae"}, 0xab) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x402000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x12000, &(0x7f00000008c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}], [{@dont_hash}]}}) sendto$ax25(r8, &(0x7f0000000980)="b3a0c9a8b3c88f9280b2d4d9920896e10e8675442522c454128400bfbe95abd93e5247877ade2a67c67069f4b3bef738db854643e3b1c0d1718d0a899238ffcbf2939a9bad89a9607c096d4af8724332db6cf22cdb4afb8243", 0x59, 0x4004, &(0x7f0000000a00)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48) r10 = syz_usb_connect$cdc_ecm(0x5, 0x87, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x7d, 0x0, 0xfb, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x7a, {{0x8, 0x24, 0x6, 0x0, 0x0, "d54e06"}, {0x5, 0x24, 0x0, 0x1777}, {0xd, 0x24, 0xf, 0x1, 0x55b6, 0x2, 0xb6, 0x6}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x3ff, 0x3, 0x7}, @mbim={0xc, 0x24, 0x1b, 0xe16, 0x0, 0x0, 0x8, 0x5, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x7, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0xb8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfe, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x251, 0x1, 0x4, 0xad, 0x10, 0xa0}, 0x53, &(0x7f0000000b80)={0x5, 0xf, 0x53, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0xf2, 0x2, 0x7, 0x8e26, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x2, 0xff0f, 0xa45, [0xfff0, 0x30, 0x3fc0, 0xffffcf, 0xc000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x81, 0xf1, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x3e, "56df5f9b006676e939fd17f450052a52"}]}, 0x4, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x448}}, {0x6d, &(0x7f0000000c40)=@string={0x6d, 0x3, "071b6bc9c0b5ada8eb9eeaa68226ef6b7c4096b24ad420da89493f3e06405876fbb929eaaae3fcc3f0c81574daec01f98a79aa7eea81e4d759b19378c2ff3fcbe813d5a1a608177331172e577c2e9521ef8aad4061b7b142f42adaf19b720ca253a869bd65b0861c47a5e3"}}, {0x90, &(0x7f0000000cc0)=@string={0x90, 0x3, "5f98dfb280b4122a0a1fbab937c386d9e82c81e2f6ad4e9199cd7c71b960dc25025cd6e640f44bf330cedd25b966de8bbecf749d3f97a16f2cbcf75f805ca8c9447a633af33f3d38faa5ee5edbf02094c86ad8033d370a8f0642ec26405be96d09c24b630c3f6fc832133e8224683dea1b9d43aec667dde237194fd970d0c544ec71763893b67eb4c83d7d38843c"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_usb_control_io(r10, &(0x7f0000001040)={0x2c, &(0x7f0000000e40)={0x20, 0x9, 0x3a, {0x3a, 0x23, "f995179f64003fd8d4bf595c42c7aacc9698689a4c8b13f8e4ea27d96f24ff5de7d6a2cd1ba4766f1b5751206ffe9b6679ea5822a92e044a"}}, &(0x7f0000000e80)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "f33fdf7610a16ed55dbb2adf213a6bc4ee168a2860bbb43e507f5a78a1e0bb43ab1a4cee360db3960ef526d651ee95be1e57f032af00ea71bc32bef44c77622003bf1abcbb70a811bc7e23d33bbb63b3bf6d37365ad2dbe425df2b20c894ffe27bdc302745f7cf6cbf6562ae889b72c40799dab28f742545d635dd51ab3a73e5ae8eae662445d6770a6ff716cda1c37dfedf7519e1e85112ee9cf6e747eadd809d05ec9048c48b903960513fe861dc35ce6dd9d4119576db1c8cea05c314854653009c87eaecede0a09729839b3335cbb7f9e2bdd0eb6cc4373a8a949560a4"}}, &(0x7f0000000f80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000fc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0xa33738fd6b027091, 0x3, 0x7, "01681b0b", "546915c0"}}, &(0x7f0000001000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x80, 0x4, 0x1, 0x9, 0x40, 0x9}}}, &(0x7f0000001480)={0x84, &(0x7f0000001080)={0x40, 0xa, 0x28, "c52febf9fd7cab83cf12d84a790e689c427216875a9b0534f5bd33175f76f6a56622d42fa2bf3f14"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001140)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001180)={0x20, 0x0, 0x8, {0xd60, 0x8, [0x1e0f0]}}, &(0x7f00000011c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000001200)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000001240)={0x40, 0xb, 0x2, "bcf9"}, &(0x7f0000001280)={0x40, 0xf, 0x2, 0x7}, &(0x7f00000012c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001300)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, &(0x7f0000001340)={0x40, 0x19, 0x2, "37a6"}, &(0x7f0000001380)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000013c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001400)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001440)={0x40, 0x21, 0x1, 0x2}}) write$P9_RREADLINK(r3, &(0x7f0000001540)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001580), 0x101002, 0x0) ioctl$SNDCTL_TMR_START(r11, 0x5402) ioctl$KVM_RESET_DIRTY_RINGS(r8, 0xaec7) ioctl$SNDCTL_SEQ_CTRLRATE(r8, 0xc0045103, &(0x7f00000015c0)=0xa) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000001800)={0x13, 0x10, 0xfa00, {&(0x7f0000001600), r6}}, 0x18) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001840)=0x5) 2.592116637s ago: executing program 6 (id=375): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r0, 0x1, 0x70bd2c, 0x0, {}, [{@nsim={{0xe}, {0x11, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x96}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r2}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000078d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x0, 0x10, 0xa5, 0x5c}) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r6, 0x40104593, &(0x7f0000000140)={0x0, 0x28, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642dfa32d5aa12d16735480878d2f5ecf26117b5d835"}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a010102000000000000000a0101000000000000000000000000000a000609000000001f"], 0x38}}, 0x20040810) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000120011"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000c0a01030000000000000000010000050900010073797acdd764feb453c527001100010000000000000000000000000a7114ca6b0b62fb8140cf09ecb94b3a40ee54dca1b5ad63532cb63f4fd95f5a21e472630a8f39dad05f9a2d28b8048824e9a97f303d28eba5"], 0x48}}, 0x4) 1.736108583s ago: executing program 6 (id=377): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180fffffdef0000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.583883953s ago: executing program 6 (id=379): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000040)=""/59, 0x3b) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x1409, 0x262543c4cee33fe7, 0x70bd2b, 0x1000}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r1 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f00000008c0)='-0', 0x2) syz_usb_disconnect(r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r3, &(0x7f0000033240)=""/102385, 0x18ff1, 0x41e) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x2, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x4, 0x7}}}}}]}}]}}, 0x0) 1.340251352s ago: executing program 5 (id=382): madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x104, "06000000020020000acd00003fffffff00000041000000e34e3304000800", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000280)={"e50d1af80100007ea25e0100ff00f6907ff16b7e00", r0}) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x4, 0x7, 0x8, 0x1}, 0x32, [0x3, 0x40, 0xa4da, 0x41da, 0x3, 0x0, 0xfea8, 0x6, 0x3, 0xb36b, 0x44, 0xc, 0xfffffffd, 0x8, 0x5, 0xe, 0x0, 0x3, 0xfffffffc, 0x80, 0x38, 0x2, 0x80000000, 0x0, 0x8000, 0x0, 0x8, 0x0, 0x1ff, 0x5, 0x3bc, 0x2800000, 0x2, 0x8, 0x6, 0x3, 0x97, 0x1, 0xe56d4d2, 0x4, 0x1, 0x40, 0xa60, 0xfffffffc, 0xa66a, 0x30000000, 0x401, 0x5, 0x2, 0x10, 0xa0cf, 0x4, 0x4, 0x4749, 0x0, 0xdd8, 0x7, 0x3, 0x6a07, 0x9, 0x3, 0x1000, 0x8, 0x1], [0x4, 0x7, 0xd6d, 0x8, 0xf, 0x2, 0x84000000, 0x3, 0x10000000, 0x5c, 0x0, 0xaf7b, 0xffff, 0xbbd, 0xfffffff7, 0x7, 0x1000001, 0x63, 0x6, 0x914, 0x4000dbc1, 0x0, 0x9, 0x4, 0x3ff, 0x9, 0xfffffff9, 0x3, 0x6, 0x8, 0xe75, 0x0, 0x5fa, 0x5, 0x8, 0x7fffffff, 0x1, 0x1, 0xca3, 0x9, 0x9d0a, 0x9, 0x797, 0x4, 0x3099, 0x10, 0x1, 0x3, 0x9, 0x9, 0x100804, 0x2, 0x1e827a13, 0xfffff800, 0x2, 0x4, 0x6dc9, 0x81, 0x0, 0x6, 0x0, 0x8, 0x78c, 0x7], [0x80000000, 0x8001, 0x7fffffff, 0x8001, 0xc753, 0x8, 0x6, 0x7fffffff, 0x3, 0x996a, 0x80000000, 0xe4, 0x8065a, 0x1, 0x4, 0x1000, 0x39, 0x107, 0x2, 0x3, 0x0, 0x6, 0x7f, 0x5, 0x9, 0x6, 0x1ff, 0x10000, 0x400, 0x1ff, 0xfffffffb, 0x3, 0x7, 0x5, 0x349e, 0x3, 0x3, 0xb43, 0x48a, 0x3, 0x8, 0xd502, 0x1, 0x2, 0x2fe07, 0x5, 0x4, 0xfffffffe, 0x8, 0x2, 0x4, 0x13, 0x1, 0x293, 0x5, 0x70, 0x5, 0x8001, 0x80, 0x40, 0x4, 0xb0, 0x405], [0x700, 0x34, 0x7, 0x5, 0x9, 0x6, 0xffff, 0x0, 0x7, 0x9, 0x9, 0x8e, 0x8, 0x7, 0xdd, 0x1, 0xe, 0x7, 0x6, 0x1, 0x80, 0x7, 0x2, 0x4ce, 0xffff281a, 0x0, 0x7fff, 0xd0, 0x7fffffff, 0xfffffff9, 0x8, 0x246, 0x3, 0x2, 0xe, 0x8, 0x8100, 0x0, 0x9, 0x8, 0x7, 0x7, 0x1, 0x3ffc000, 0x8c38, 0x1, 0x7, 0x100, 0x4, 0xa0, 0x1, 0xfffffffa, 0x2, 0x4, 0xb, 0xfffffff9, 0x4, 0x1, 0x86b, 0x3, 0x39dbacb3, 0x400, 0x9, 0x7]}, 0x45c) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040d9e655a000fffffffb0109022400010000100009040400c40300020009210010000d004077d36bee7c905af4b0073d71baa0cee6c17d035a2d6b5d20b119e534cd8df983fc5bd1f324c47b655f69dff8641adf5a85178b17eb9ef330a07ed6e1b52af1bae0af13fc6e148ae3e889ead5ecf8760ae5373cec054656a3df717ae69a6191bfc8790a735d84e76612e0"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00880c0000000ea3000000000000"], 0x0}, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="090101024288a308bf95d3970a9a3033d465dc8ef328703304200102030109cc"], &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') close(0x4) r5 = socket$inet6(0xa, 0x3, 0x37) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x633a, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x215, 0x4) recvfrom$inet6(r5, 0x0, 0x0, 0x40000020, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0xfffffffffffffee7) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="df2d56bb276100889ed2fb04b4d2352d3b5a490327fbe2ab9f574fbb36f155f3960b6000d88897a1a560e423e2f2beced8a5412d0c28688e2fc7ddf8710ee9291e206c92c1a1e63befd4ed8fc934ee1a0442d56fc0c5a2778a0efadf11cceffc5bf90490e712ad55ce2666ff8881311a6752d5e838fe72eaea0186ddda02ff835247678b312ae25e3a76942ae4e2eeb0c72bbe18eac14f1f2e0df9ce6285a411748774a26ad187a4a8e14d80a371ef595163df11e417afd4c7fb6de02543", 0xbe}, {&(0x7f0000000440)="89ab1c04bfc00e515f30dc522ca0dc0200ffd6a6343c47b05f73a625cba7ef17375ca26c0082cbaf857cf0feb9ef5d22ac224a3076fae84b2a5f3aaf72c6c458c81f2908f7dc70deba0c562cef8e58b643483616ac788ca08a71ef3455510b0ef1853bbee8abf6a80e6bd99f1f7b40c88303d60abec0d38eaba7", 0x7a}, {&(0x7f0000000c80)="6338b47206d2ecd5a172018d4bc45f83ef3092c29dee4108e28514a56e199043b12b778008304ad9db3be607ce059a953dba46ec97c3423052278971355f68569ad4ee5dc00d9095c8b67f1df6741d8f1cb17289322511d5dd5780e74991e2b8f2f492489acb37ed33e937a876fd4dbe4533fa3a4967883332534806b73ddf8a8a4566a07cd75ad841056e372c4ee10e75b6eb775e83b1d5ebeeb92287305942d3c0b40c31f1338b49b9d2e7b9e18dda133698063ccaec8b293520d081d47c8288e167", 0xc3}, {&(0x7f0000000640)="bd8eaf8146fabfcc1f18fad88d2c61e54d23d2622435ae40bcf3cafc04af40208c297a78310e2d62f1054aef2e23adfe0dea1ea9b3e23f1874c2bfd06dc244ccb854f0b0bcc76b3b68e8a5e75ecae3f701538bc038bbdc54dbe9d741ce5ee97ec44f4290805810a922ebc570ed867a4e01d61d92a72554560d4dbe5115012a9a9ca75292a4967f3dbcd71e7f718226e3ac4ddda1a6adf98caf3384f72cd01123", 0xa0}], 0x4, 0x0, 0xfff8, 0x2c}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 1.059812178s ago: executing program 2 (id=383): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="000000000d800000", 0x8) ioctl$HIDIOCGRDESC(r0, 0x40305829, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) 996.008201ms ago: executing program 2 (id=384): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)="2bc7b1468e1baf87a36cc418a626739202e894245854a3d7ca502541a1c9d75f1da01f96eb42c637b52c41188586d6494a223ceec4c05bee2bc7f9d31f568f1cd40f7726523728f58f2dc2a157bca5312e2812b61eee2a8c29e612e87671", 0x5e}], 0x1}, 0x24004014) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000005440)=ANY=[@ANYBLOB="12010102cffc8612c95f63712a0000964ea3a51e9a9095822cdd2d0102cfba9854120001"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, [{0xed, &(0x7f0000000240)=@string={0xed, 0x3, "13de249771ddb9d53f1978595ffed9a2ff016cbb07c89e98bcaa1a66c799ab4c5ca0e2586f7cb4897d55288290ee4606ca76469ea83d90c5518fcab79027e1870ac6446796a1e85150799ed45efe26685afb625cfbdf57d6f546258006b107276942966a6d57cb524b486630a0edc91e15d664fa1c8b817edd15bbffe20523d87000fb94d2bdb9eede6d03bf981d5d0d3f524ada53d5ff8fae8acbe3eee868fb411dd58f79cb1d9a07cb8f0e6f0b96a1ab9565c321de6c67dcef87f7e50ebceb6ac250610b995fd3fc4ffd1644ab696fc03a9e7f95a641d15ea436071b94d9ef10fc8dbb6ab385a552dd3b"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40e}}, {0xf7, &(0x7f0000000380)=@string={0xf7, 0x3, "20d3bbff119687c204617bdd396076688c88c2c19669ef9241a18a72688331e9a8030ae18f5eb7a845a2f11f40e544e2dcdf933fcd74cd990990673922f5fd78283a9fb08c2df209eeb5f84210e0b3ad39cc40a5ae7d89042dca13e3d45ced7f9aca32c08a31a9e0ff6734a269be09d368098e445d3bc1c7afa46fafc7f2d4c18a62ea8b5642ecdbdafaddcc23262ac051cfa1f4fbb08919b3192f36f5796d62448c7c87c13da21738f916a1ced2ac0c537754a578324bac0bddbb9b7849652a2873b5da7d61fba70ebe1dd79af93a0857ae6b29ffefa61c72c6fc1e68b817356cdb571fccf48b5030926d8e8c688080ffe103e74d"}}]}) syz_usb_connect$cdc_ecm(0x4, 0x58, &(0x7f0000000880)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x2, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0x10, 0x3, 0x2, 0x6, 0x0, 0xc0, {{0x7, 0x24, 0x6, 0x0, 0x0, "5718"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x978, 0x6, 0x5b}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x9, 0x9, 0xb9}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x4d, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x72, 0x1}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x6, 0x6, 0x1, 0x20, 0x80}, 0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f2c0d20100a002500000400000000000000003000ff00c0ffff0030c00000c000"/44], 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0c}}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x4, 0x100) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/284, 0x11c}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000fc0)=""/4084, 0xff4}, {&(0x7f0000000680)=""/193, 0xc1}, {&(0x7f0000000f00)=""/159, 0x9f}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000002fc0)=""/4087, 0xff7}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000500)=""/219, 0xdb}], 0xa}, 0x40002102) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000200)=0x6, 0x8f) 784.42833ms ago: executing program 5 (id=385): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x701, 0xfc, 0xec, 0xb8, 0x8, 0x8086, 0x630, 0x22f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x20, 0xb, [{{0x9, 0x4, 0x61, 0xa9, 0x0, 0xdd, 0x9f, 0x93, 0x36}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x415}}]}) 290.148334ms ago: executing program 5 (id=386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44880}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000000000000000000080005000600000024001780040007"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 231.900997ms ago: executing program 5 (id=387): creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x4000000000000000) 24.390796ms ago: executing program 4 (id=388): setuid(0xee00) r0 = socket$unix(0x1, 0x1, 0x0) (async) io_setup(0x7, &(0x7f0000000100)=0x0) (async) r2 = eventfd(0x5a21) (async) r3 = epoll_create1(0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) (async) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, r0, 0x0, 0x0, 0x4, 0x0, 0x3, r2}]) 24.10603ms ago: executing program 5 (id=389): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208402, 0x0) 0s ago: executing program 5 (id=390): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0xfd, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r3, &(0x7f00000001c0)={0x9, 0x9, "53363bff163d2d1669f813b6807a02d9e95135e7e84d8a1508717f7bf90c2b772b1bebc85739a6a6efc95c6aa85d1264a06f483d364ebcf81f6e3389269516401e82611f719cc50d7fdc96bd9e1b6dcfdc0c3aff2adfbdc7216aa51366f0a65feb1266d19eb67cee22dcdf"}, 0x73, 0x80, &(0x7f0000000380)={0x22, 0x0, 0x81, 0x9, 0x5}, 0x6) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x16) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1fbdc3910eedc9de3c0000001c00000428bd7000fcdbdf251c22918014007b000000000000000000000000000000000004001580100066800400328008008f0064010102a8311d82f890eee483c08c31f38c45cae62c8b8f411f12278fb4083cc2bdbf00c24f3b651d1a68a12b5d2a7c0a7ad7e4442b20319a7bc892048bc0a30245dbbcb2edec4b3433983a94e0c9d77b97917b7cde74"], 0x3c}], 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) kernel console output (not intermixed with test programs): eba9 [ 94.110665][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.110679][ T6127] RSP: 002b:00007ff2d04fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.110697][ T6127] RAX: ffffffffffffffda RBX: 00007ff2cf7d5fa0 RCX: 00007ff2cf58eba9 [ 94.110710][ T6127] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 94.110720][ T6127] RBP: 00007ff2d04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 94.110731][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.110741][ T6127] R13: 00007ff2cf7d6038 R14: 00007ff2cf7d5fa0 R15: 00007fff73763f18 [ 94.110772][ T6127] [ 94.110780][ T6127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.513729][ T6134] can: request_module (can-proto-0) failed. [ 94.535929][ T6133] can: request_module (can-proto-0) failed. [ 94.565373][ T6139] tmpfs: Bad value for 'mpol' [ 94.575015][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 94.758898][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.911884][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.922577][ T846] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 94.930193][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.942686][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.951920][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 94.960165][ T9] usb 2-1: SerialNumber: syz [ 95.088750][ T846] usb 4-1: Using ep0 maxpacket: 8 [ 95.095614][ T846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.105933][ T846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.117608][ T846] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 95.128081][ T846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.138441][ T846] usb 4-1: Product: syz [ 95.142769][ T846] usb 4-1: Manufacturer: syz [ 95.147550][ T846] usb 4-1: SerialNumber: syz [ 95.155336][ T846] usb 4-1: config 0 descriptor?? [ 95.173730][ T9] usb 2-1: 0:2 : does not exist [ 95.203327][ T9] usb 2-1: USB disconnect, device number 4 [ 95.231192][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.418779][ T9] usb 4-1: USB disconnect, device number 6 [ 95.598845][ T5871] Bluetooth: hci4: command 0x1003 tx timeout [ 95.598859][ T5865] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.791090][ T6148] sp0: Synchronizing with TNC [ 95.882502][ T6155] FAULT_INJECTION: forcing a failure. [ 95.882502][ T6155] name failslab, interval 1, probability 0, space 0, times 0 [ 95.895445][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.1.63 Not tainted syzkaller #0 PREEMPT(full) [ 95.895468][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.895478][ T6155] Call Trace: [ 95.895485][ T6155] [ 95.895492][ T6155] dump_stack_lvl+0x189/0x250 [ 95.895513][ T6155] ? __pfx____ratelimit+0x10/0x10 [ 95.895532][ T6155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.895548][ T6155] ? __pfx__printk+0x10/0x10 [ 95.895578][ T6155] ? __pfx___might_resched+0x10/0x10 [ 95.895596][ T6155] ? fs_reclaim_acquire+0x7d/0x100 [ 95.895622][ T6155] should_fail_ex+0x414/0x560 [ 95.895650][ T6155] should_failslab+0xa8/0x100 [ 95.895672][ T6155] __kmalloc_noprof+0xcb/0x7f0 [ 95.895687][ T6155] ? tomoyo_encode+0x28b/0x550 [ 95.895707][ T6155] tomoyo_encode+0x28b/0x550 [ 95.895725][ T6155] tomoyo_realpath_from_path+0x58d/0x5d0 [ 95.895745][ T6155] ? tomoyo_domain+0xd9/0x130 [ 95.895767][ T6155] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 95.895790][ T6155] tomoyo_path_number_perm+0x1e8/0x5a0 [ 95.895814][ T6155] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.895869][ T6155] ? __fget_files+0x2a/0x420 [ 95.895900][ T6155] ? __fget_files+0x3a0/0x420 [ 95.896015][ T6155] ? __fget_files+0x2a/0x420 [ 95.896041][ T6155] security_file_ioctl+0xcb/0x2d0 [ 95.896064][ T6155] __se_sys_ioctl+0x47/0x170 [ 95.896086][ T6155] do_syscall_64+0xfa/0xfa0 [ 95.896106][ T6155] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.896125][ T6155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.896226][ T6155] ? clear_bhb_loop+0x60/0xb0 [ 95.896316][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.896331][ T6155] RIP: 0033:0x7ff2cf58eba9 [ 95.896346][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.896360][ T6155] RSP: 002b:00007ff2d04fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.896377][ T6155] RAX: ffffffffffffffda RBX: 00007ff2cf7d5fa0 RCX: 00007ff2cf58eba9 [ 95.896387][ T6155] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 95.896397][ T6155] RBP: 00007ff2d04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 95.896408][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.896416][ T6155] R13: 00007ff2cf7d6038 R14: 00007ff2cf7d5fa0 R15: 00007fff73763f18 [ 95.896444][ T6155] [ 95.896464][ T6155] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.918280][ T6156] sp0: Synchronizing with TNC [ 96.163000][ T6159] binder_alloc: binder_alloc_mmap_handler: 6158 200000735000-200000736000 already mapped failed -16 [ 96.540439][ T6172] capability: warning: `syz.2.67' uses 32-bit capabilities (legacy support in use) [ 96.675645][ T30] audit: type=1326 audit(1757718960.632:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.680046][ T846] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.701096][ T30] audit: type=1326 audit(1757718960.632:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.728589][ T30] audit: type=1326 audit(1757718960.632:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.752201][ T30] audit: type=1326 audit(1757718960.632:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.775918][ T30] audit: type=1326 audit(1757718960.632:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.798330][ T30] audit: type=1326 audit(1757718960.632:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.798374][ T30] audit: type=1326 audit(1757718960.632:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.798427][ T30] audit: type=1326 audit(1757718960.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.798465][ T30] audit: type=1326 audit(1757718960.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.798503][ T30] audit: type=1326 audit(1757718960.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7578eba9 code=0x7ff00000 [ 96.878847][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 96.978709][ T846] usb 2-1: Using ep0 maxpacket: 32 [ 96.986486][ T846] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 96.994900][ T846] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 97.005295][ T846] usb 2-1: config 0 has no interface number 0 [ 97.011527][ T846] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 97.021748][ T846] usb 2-1: config 0 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.032668][ T846] usb 2-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.060367][ T846] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 97.069669][ T846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.078559][ T846] usb 2-1: Product: syz [ 97.084990][ T846] usb 2-1: Manufacturer: syz [ 97.090595][ T846] usb 2-1: SerialNumber: syz [ 97.100362][ T846] usb 2-1: config 0 descriptor?? [ 97.110415][ T6171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.129077][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 97.136284][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 97.146238][ T9] usb 4-1: config 0 has no interface number 0 [ 97.157543][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 97.168237][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.178074][ T9] usb 4-1: Product: syz [ 97.182646][ T9] usb 4-1: Manufacturer: syz [ 97.189151][ T9] usb 4-1: SerialNumber: syz [ 97.200291][ T9] usb 4-1: config 0 descriptor?? [ 97.215139][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 97.348115][ T846] usb 2-1: probing VID:PID(0424:012C) [ 97.373579][ T846] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B [ 97.384491][ T846] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 97.399424][ T846] vub300 2-1:0.133: probe with driver vub300 failed with error -22 [ 97.426855][ T846] usb 2-1: USB disconnect, device number 5 [ 97.436789][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 97.497682][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 97.836217][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 97.836711][ T869] usb 4-1: USB disconnect, device number 7 [ 97.880001][ T869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 97.921165][ T869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 97.940906][ T869] quatech2 4-1:0.51: device disconnected [ 97.982752][ T6192] FAULT_INJECTION: forcing a failure. [ 97.982752][ T6192] name failslab, interval 1, probability 0, space 0, times 0 [ 98.008757][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.2.75 Not tainted syzkaller #0 PREEMPT(full) [ 98.008779][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.008788][ T6192] Call Trace: [ 98.008794][ T6192] [ 98.008800][ T6192] dump_stack_lvl+0x189/0x250 [ 98.008819][ T6192] ? __pfx____ratelimit+0x10/0x10 [ 98.008837][ T6192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.008850][ T6192] ? __pfx__printk+0x10/0x10 [ 98.008872][ T6192] ? __pfx___might_resched+0x10/0x10 [ 98.008888][ T6192] ? fs_reclaim_acquire+0x7d/0x100 [ 98.008911][ T6192] should_fail_ex+0x414/0x560 [ 98.008936][ T6192] should_failslab+0xa8/0x100 [ 98.008960][ T6192] __kmalloc_cache_noprof+0x6f/0x6f0 [ 98.008976][ T6192] ? trace_contention_end+0x39/0x120 [ 98.008992][ T6192] ? vhost_task_create+0xf6/0x290 [ 98.009023][ T6192] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 98.009043][ T6192] vhost_task_create+0xf6/0x290 [ 98.009061][ T6192] ? arch_stack_walk+0xfc/0x150 [ 98.009078][ T6192] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 98.009099][ T6192] ? __pfx_vhost_task_create+0x10/0x10 [ 98.009125][ T6192] ? __pfx_vhost_task_fn+0x10/0x10 [ 98.009161][ T6192] kvm_mmu_post_init_vm+0x14c/0x300 [ 98.009178][ T6192] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 98.009198][ T6192] ? __mutex_trylock_common+0x153/0x260 [ 98.009218][ T6192] ? __pfx___mutex_trylock_common+0x10/0x10 [ 98.009237][ T6192] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 98.009255][ T6192] ? rcu_is_watching+0x15/0xb0 [ 98.009272][ T6192] ? trace_contention_end+0x39/0x120 [ 98.009290][ T6192] ? look_up_lock_class+0x74/0x170 [ 98.009308][ T6192] ? register_lock_class+0x51/0x320 [ 98.009328][ T6192] ? __lock_acquire+0xab9/0xd20 [ 98.009368][ T6192] kvm_vcpu_ioctl+0x95c/0xe90 [ 98.009389][ T6192] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.009422][ T6192] ? __fget_files+0x2a/0x420 [ 98.009446][ T6192] ? __fget_files+0x3a0/0x420 [ 98.009464][ T6192] ? __fget_files+0x2a/0x420 [ 98.009487][ T6192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 98.009500][ T6192] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.009514][ T6192] __se_sys_ioctl+0xfc/0x170 [ 98.009533][ T6192] do_syscall_64+0xfa/0xfa0 [ 98.009549][ T6192] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.009565][ T6192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.009578][ T6192] ? clear_bhb_loop+0x60/0xb0 [ 98.009595][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.009608][ T6192] RIP: 0033:0x7f6756f8eba9 [ 98.009622][ T6192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.009633][ T6192] RSP: 002b:00007f6757d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.009649][ T6192] RAX: ffffffffffffffda RBX: 00007f67571d5fa0 RCX: 00007f6756f8eba9 [ 98.009659][ T6192] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 98.009667][ T6192] RBP: 00007f6757d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 98.009679][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.009687][ T6192] R13: 00007f67571d6038 R14: 00007f67571d5fa0 R15: 00007ffe4c59a1a8 [ 98.009713][ T6192] [ 98.326419][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.689463][ T6210] nbd0: detected capacity change from 0 to 63 [ 98.700755][ T6214] block nbd0: NBD_DISCONNECT [ 98.706282][ T6214] block nbd0: Disconnected due to user request. [ 98.715572][ T6214] block nbd0: shutting down sockets [ 98.719174][ T5874] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.748918][ T5874] Buffer I/O error on dev nbd0, logical block 0, async page read [ 98.759072][ T6065] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 98.769651][ T56] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 98.779671][ T56] Buffer I/O error on dev nbd0, logical block 1, async page read [ 98.787750][ T56] Buffer I/O error on dev nbd0, logical block 2, async page read [ 98.795858][ T56] Buffer I/O error on dev nbd0, logical block 3, async page read [ 98.804677][ T5874] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.814513][ T5874] Buffer I/O error on dev nbd0, logical block 0, async page read [ 98.823898][ T5874] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.847468][ T5874] Buffer I/O error on dev nbd0, logical block 1, async page read [ 98.862297][ T5874] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.871857][ T5874] Buffer I/O error on dev nbd0, logical block 2, async page read [ 98.879879][ T5874] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.890154][ T5874] Buffer I/O error on dev nbd0, logical block 3, async page read [ 98.898407][ T5874] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.898952][ T5957] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.908079][ T5874] Buffer I/O error on dev nbd0, logical block 0, async page read [ 98.923190][ T5874] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.933786][ T5874] Buffer I/O error on dev nbd0, logical block 1, async page read [ 98.936879][ T6065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.968145][ T5874] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.982909][ T6065] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.992790][ T5874] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 98.996480][ T6065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.004801][ T5874] ldm_validate_partition_table(): Disk read failed. [ 99.019952][ T5874] Dev nbd0: unable to read RDB block 0 [ 99.033984][ T5874] nbd0: unable to read partition table [ 99.040490][ T6065] usb 3-1: config 0 descriptor?? [ 99.053153][ T6065] pwc: Askey VC010 type 2 USB webcam detected. [ 99.064926][ T5874] ldm_validate_partition_table(): Disk read failed. [ 99.074975][ T5874] Dev nbd0: unable to read RDB block 0 [ 99.085034][ T5874] nbd0: unable to read partition table [ 99.105177][ T5957] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.126079][ T5957] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.157652][ T5957] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.205644][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.242341][ T6213] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 99.262856][ T5957] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.461986][ T6065] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.469661][ T1225] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 99.477541][ T6065] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.489444][ T6229] FAULT_INJECTION: forcing a failure. [ 99.489444][ T6229] name failslab, interval 1, probability 0, space 0, times 0 [ 99.502278][ T6065] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.507319][ T6229] CPU: 0 UID: 0 PID: 6229 Comm: syz.1.87 Not tainted syzkaller #0 PREEMPT(full) [ 99.507341][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.507352][ T6229] Call Trace: [ 99.507359][ T6229] [ 99.507366][ T6229] dump_stack_lvl+0x189/0x250 [ 99.507387][ T6229] ? __pfx____ratelimit+0x10/0x10 [ 99.507409][ T6229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.507425][ T6229] ? __pfx__printk+0x10/0x10 [ 99.507457][ T6229] ? __pfx___might_resched+0x10/0x10 [ 99.507475][ T6229] ? fs_reclaim_acquire+0x7d/0x100 [ 99.507501][ T6229] should_fail_ex+0x414/0x560 [ 99.507531][ T6229] should_failslab+0xa8/0x100 [ 99.507555][ T6229] kmem_cache_alloc_node_noprof+0x77/0x710 [ 99.507574][ T6229] ? dup_task_struct+0x52/0x830 [ 99.507601][ T6229] dup_task_struct+0x52/0x830 [ 99.507622][ T6229] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.507645][ T6229] copy_process+0x54b/0x3c00 [ 99.507695][ T6229] ? __pfx_copy_process+0x10/0x10 [ 99.507727][ T6229] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 99.507751][ T6229] vhost_task_create+0x1c4/0x290 [ 99.507773][ T6229] ? arch_stack_walk+0xfc/0x150 [ 99.507794][ T6229] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 99.507819][ T6229] ? __pfx_vhost_task_create+0x10/0x10 [ 99.507850][ T6229] ? __pfx_vhost_task_fn+0x10/0x10 [ 99.507892][ T6229] kvm_mmu_post_init_vm+0x14c/0x300 [ 99.507913][ T6229] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 99.507943][ T6229] ? __mutex_trylock_common+0x153/0x260 [ 99.507969][ T6229] ? __pfx___mutex_trylock_common+0x10/0x10 [ 99.507991][ T6229] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 99.508011][ T6229] ? rcu_is_watching+0x15/0xb0 [ 99.508033][ T6229] ? trace_contention_end+0x39/0x120 [ 99.508053][ T6229] ? look_up_lock_class+0x74/0x170 [ 99.508075][ T6229] ? register_lock_class+0x51/0x320 [ 99.508099][ T6229] ? __lock_acquire+0xab9/0xd20 [ 99.508145][ T6229] kvm_vcpu_ioctl+0x95c/0xe90 [ 99.508169][ T6229] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.508209][ T6229] ? __fget_files+0x2a/0x420 [ 99.508237][ T6229] ? __fget_files+0x3a0/0x420 [ 99.508258][ T6229] ? __fget_files+0x2a/0x420 [ 99.508285][ T6229] ? bpf_lsm_file_ioctl+0x9/0x20 [ 99.508301][ T6229] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 99.508318][ T6229] __se_sys_ioctl+0xfc/0x170 [ 99.508341][ T6229] do_syscall_64+0xfa/0xfa0 [ 99.508361][ T6229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.508378][ T6229] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.508394][ T6229] ? clear_bhb_loop+0x60/0xb0 [ 99.508415][ T6229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.508431][ T6229] RIP: 0033:0x7ff2cf58eba9 [ 99.508447][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.508461][ T6229] RSP: 002b:00007ff2d04fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.508479][ T6229] RAX: ffffffffffffffda RBX: 00007ff2cf7d5fa0 RCX: 00007ff2cf58eba9 [ 99.508491][ T6229] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 99.508501][ T6229] RBP: 00007ff2d04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 99.508512][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.508521][ T6229] R13: 00007ff2cf7d6038 R14: 00007ff2cf7d5fa0 R15: 00007fff73763f18 [ 99.508552][ T6229] [ 99.565271][ T846] usb 4-1: USB disconnect, device number 8 [ 99.623133][ T6065] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.680452][ T1225] usb 1-1: device descriptor read/64, error -71 [ 99.712384][ T6065] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.874942][ T6065] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.888785][ T6065] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.895892][ T6065] pwc: recv_control_msg error -32 req 02 val 2100 [ 99.989240][ T1225] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 100.016772][ T6240] overlayfs: missing 'workdir' [ 100.128830][ T1225] usb 1-1: device descriptor read/64, error -71 [ 100.240226][ T1225] usb usb1-port1: attempt power cycle [ 100.507346][ T6065] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.514313][ T6065] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.521559][ T6065] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.528523][ T6065] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.535815][ T6065] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.544684][ T6065] pwc: Registered as video103. [ 100.557636][ T6065] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 100.588865][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.591343][ T6065] usb 3-1: USB disconnect, device number 8 [ 100.609172][ T1225] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 100.640226][ T1225] usb 1-1: device descriptor read/8, error -71 [ 100.771968][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.783183][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.793031][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.810506][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 100.819782][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.830263][ T5914] usb 2-1: config 0 descriptor?? [ 100.908808][ T1225] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 100.940225][ T1225] usb 1-1: device descriptor read/8, error -71 [ 101.055970][ T1225] usb usb1-port1: unable to enumerate USB device [ 101.266385][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.275288][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.343167][ T5914] usbhid 2-1:0.0: can't add hid device: -71 [ 101.350176][ T5914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 101.360598][ T5914] usb 2-1: USB disconnect, device number 6 [ 101.419849][ T6065] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 101.578873][ T6065] usb 3-1: Using ep0 maxpacket: 32 [ 101.585397][ T6065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 101.596099][ T6065] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.608268][ T6065] usb 3-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 101.617378][ T6065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.625500][ T6065] usb 3-1: Product: syz [ 101.629745][ T6065] usb 3-1: Manufacturer: syz [ 101.634352][ T6065] usb 3-1: SerialNumber: syz [ 101.641627][ T6065] usb 3-1: config 0 descriptor?? [ 101.865860][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.876365][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.924647][ T6256] FAULT_INJECTION: forcing a failure. [ 101.924647][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 101.937775][ T6256] CPU: 1 UID: 0 PID: 6256 Comm: syz.1.96 Not tainted syzkaller #0 PREEMPT(full) [ 101.937800][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.937809][ T6256] Call Trace: [ 101.937816][ T6256] [ 101.937824][ T6256] dump_stack_lvl+0x189/0x250 [ 101.937846][ T6256] ? __pfx____ratelimit+0x10/0x10 [ 101.937866][ T6256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.937883][ T6256] ? __pfx__printk+0x10/0x10 [ 101.937911][ T6256] ? __pfx___might_resched+0x10/0x10 [ 101.937929][ T6256] ? fs_reclaim_acquire+0x7d/0x100 [ 101.937955][ T6256] should_fail_ex+0x414/0x560 [ 101.937984][ T6256] should_failslab+0xa8/0x100 [ 101.938008][ T6256] __kmalloc_noprof+0xcb/0x7f0 [ 101.938027][ T6256] ? security_task_alloc+0x4d/0x360 [ 101.938049][ T6256] ? perf_event_init_task+0x12d/0x4b0 [ 101.938078][ T6256] security_task_alloc+0x4d/0x360 [ 101.938109][ T6256] copy_process+0x1530/0x3c00 [ 101.938149][ T6256] ? copy_process+0x97f/0x3c00 [ 101.938179][ T6256] ? __pfx_copy_process+0x10/0x10 [ 101.938213][ T6256] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 101.938238][ T6256] vhost_task_create+0x1c4/0x290 [ 101.938259][ T6256] ? arch_stack_walk+0xfc/0x150 [ 101.938280][ T6256] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 101.938305][ T6256] ? __pfx_vhost_task_create+0x10/0x10 [ 101.938336][ T6256] ? __pfx_vhost_task_fn+0x10/0x10 [ 101.938380][ T6256] kvm_mmu_post_init_vm+0x14c/0x300 [ 101.938401][ T6256] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 101.938426][ T6256] ? __mutex_trylock_common+0x153/0x260 [ 101.938452][ T6256] ? __pfx___mutex_trylock_common+0x10/0x10 [ 101.938475][ T6256] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 101.938495][ T6256] ? rcu_is_watching+0x15/0xb0 [ 101.938517][ T6256] ? trace_contention_end+0x39/0x120 [ 101.938538][ T6256] ? look_up_lock_class+0x74/0x170 [ 101.938561][ T6256] ? register_lock_class+0x51/0x320 [ 101.938586][ T6256] ? __lock_acquire+0xab9/0xd20 [ 101.938637][ T6256] kvm_vcpu_ioctl+0x95c/0xe90 [ 101.938660][ T6256] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.938703][ T6256] ? __fget_files+0x2a/0x420 [ 101.938731][ T6256] ? __fget_files+0x3a0/0x420 [ 101.938753][ T6256] ? __fget_files+0x2a/0x420 [ 101.938780][ T6256] ? bpf_lsm_file_ioctl+0x9/0x20 [ 101.938796][ T6256] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.938814][ T6256] __se_sys_ioctl+0xfc/0x170 [ 101.938838][ T6256] do_syscall_64+0xfa/0xfa0 [ 101.938857][ T6256] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.938876][ T6256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.938893][ T6256] ? clear_bhb_loop+0x60/0xb0 [ 101.938914][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.938931][ T6256] RIP: 0033:0x7ff2cf58eba9 [ 101.938947][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.938960][ T6256] RSP: 002b:00007ff2d04fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.938979][ T6256] RAX: ffffffffffffffda RBX: 00007ff2cf7d5fa0 RCX: 00007ff2cf58eba9 [ 101.938992][ T6256] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 101.939002][ T6256] RBP: 00007ff2d04fe090 R08: 0000000000000000 R09: 0000000000000000 [ 101.939012][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.939022][ T6256] R13: 00007ff2cf7d6038 R14: 00007ff2cf7d5fa0 R15: 00007fff73763f18 [ 101.939054][ T6256] [ 101.941483][ T1225] usb 3-1: USB disconnect, device number 9 [ 102.458405][ T6267] warning: `syz.1.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.618749][ T5952] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 102.651167][ T6275] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 102.721859][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 102.784864][ T5952] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 102.797736][ T5952] usb 1-1: config 8 has no interface number 0 [ 102.806305][ T5952] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 102.821879][ T5952] usb 1-1: config 8 interface 177 has no altsetting 0 [ 102.830166][ T5952] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 102.848825][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.882672][ T6265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.966409][ T6290] FAULT_INJECTION: forcing a failure. [ 102.966409][ T6290] name failslab, interval 1, probability 0, space 0, times 0 [ 102.979544][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(full) [ 102.979564][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 102.979573][ T6290] Call Trace: [ 102.979599][ T6290] [ 102.979605][ T6290] dump_stack_lvl+0x189/0x250 [ 102.979625][ T6290] ? __pfx____ratelimit+0x10/0x10 [ 102.979669][ T6290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.979683][ T6290] ? __pfx__printk+0x10/0x10 [ 102.979705][ T6290] ? __pfx___might_resched+0x10/0x10 [ 102.979722][ T6290] ? fs_reclaim_acquire+0x7d/0x100 [ 102.979743][ T6290] should_fail_ex+0x414/0x560 [ 102.979768][ T6290] should_failslab+0xa8/0x100 [ 102.979788][ T6290] kmem_cache_alloc_node_noprof+0x77/0x710 [ 102.979803][ T6290] ? alloc_vmap_area+0x271/0x14a0 [ 102.979824][ T6290] alloc_vmap_area+0x271/0x14a0 [ 102.979851][ T6290] ? __pfx_alloc_vmap_area+0x10/0x10 [ 102.979864][ T6290] ? __kasan_kmalloc+0x93/0xb0 [ 102.979884][ T6290] ? __get_vm_area_node+0x13f/0x300 [ 102.979902][ T6290] ? copy_process+0x54b/0x3c00 [ 102.979921][ T6290] __get_vm_area_node+0x1f8/0x300 [ 102.979946][ T6290] __vmalloc_node_range_noprof+0x301/0x12f0 [ 102.979964][ T6290] ? copy_process+0x54b/0x3c00 [ 102.979983][ T6290] ? percpu_ref_get_many+0x19/0x140 [ 102.980013][ T6290] ? percpu_ref_get_many+0x19/0x140 [ 102.980044][ T6290] ? __memcg_slab_post_alloc_hook+0x518/0x7d0 [ 102.980070][ T6290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 102.980094][ T6290] ? memcpy_and_pad+0x48/0x80 [ 102.980123][ T6290] __vmalloc_node_noprof+0xc2/0x110 [ 102.980143][ T6290] ? copy_process+0x54b/0x3c00 [ 102.980161][ T6290] ? copy_process+0x54b/0x3c00 [ 102.980184][ T6290] dup_task_struct+0x3d5/0x830 [ 102.980205][ T6290] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.980229][ T6290] copy_process+0x54b/0x3c00 [ 102.980281][ T6290] ? __pfx_copy_process+0x10/0x10 [ 102.980315][ T6290] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 102.980340][ T6290] vhost_task_create+0x1c4/0x290 [ 102.980363][ T6290] ? arch_stack_walk+0xfc/0x150 [ 102.980385][ T6290] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 102.980410][ T6290] ? __pfx_vhost_task_create+0x10/0x10 [ 102.980442][ T6290] ? __pfx_vhost_task_fn+0x10/0x10 [ 102.980484][ T6290] kvm_mmu_post_init_vm+0x14c/0x300 [ 102.980506][ T6290] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 102.980531][ T6290] ? __mutex_trylock_common+0x153/0x260 [ 102.980557][ T6290] ? __pfx___mutex_trylock_common+0x10/0x10 [ 102.980580][ T6290] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 102.980601][ T6290] ? rcu_is_watching+0x15/0xb0 [ 102.980622][ T6290] ? trace_contention_end+0x39/0x120 [ 102.980652][ T6290] ? look_up_lock_class+0x74/0x170 [ 102.980674][ T6290] ? register_lock_class+0x51/0x320 [ 102.980699][ T6290] ? __lock_acquire+0xab9/0xd20 [ 102.980749][ T6290] kvm_vcpu_ioctl+0x95c/0xe90 [ 102.980774][ T6290] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.980814][ T6290] ? __fget_files+0x2a/0x420 [ 102.980843][ T6290] ? __fget_files+0x3a0/0x420 [ 102.980866][ T6290] ? __fget_files+0x2a/0x420 [ 102.980892][ T6290] ? bpf_lsm_file_ioctl+0x9/0x20 [ 102.980909][ T6290] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.980926][ T6290] __se_sys_ioctl+0xfc/0x170 [ 102.980950][ T6290] do_syscall_64+0xfa/0xfa0 [ 102.980969][ T6290] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.980988][ T6290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.981006][ T6290] ? clear_bhb_loop+0x60/0xb0 [ 102.981027][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.981044][ T6290] RIP: 0033:0x7f6756f8eba9 [ 102.981061][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.981074][ T6290] RSP: 002b:00007f6757d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.981093][ T6290] RAX: ffffffffffffffda RBX: 00007f67571d5fa0 RCX: 00007f6756f8eba9 [ 102.981106][ T6290] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 102.981116][ T6290] RBP: 00007f6757d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 102.981127][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.981137][ T6290] R13: 00007f67571d6038 R14: 00007f67571d5fa0 R15: 00007ffe4c59a1a8 [ 102.981169][ T6290] [ 102.981202][ T6290] syz.2.106: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 103.187944][ T5952] usb 1-1: string descriptor 0 read error: -71 [ 103.243625][ T6290] ,cpuset= [ 103.301472][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 103.324343][ T6290] /,mems_allowed=0-1 [ 103.443203][ T6290] CPU: 1 UID: 0 PID: 6290 Comm: syz.2.106 Not tainted syzkaller #0 PREEMPT(full) [ 103.443228][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.443239][ T6290] Call Trace: [ 103.443246][ T6290] [ 103.443254][ T6290] dump_stack_lvl+0x189/0x250 [ 103.443277][ T6290] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 103.443298][ T6290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.443315][ T6290] ? __pfx__printk+0x10/0x10 [ 103.443340][ T6290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.443365][ T6290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 103.443396][ T6290] warn_alloc+0x214/0x310 [ 103.443419][ T6290] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.443443][ T6290] ? __pfx_warn_alloc+0x10/0x10 [ 103.443471][ T6290] ? copy_process+0x54b/0x3c00 [ 103.443494][ T6290] ? __get_vm_area_node+0x211/0x300 [ 103.443522][ T6290] __vmalloc_node_range_noprof+0x326/0x12f0 [ 103.443543][ T6290] ? percpu_ref_get_many+0x19/0x140 [ 103.443574][ T6290] ? percpu_ref_get_many+0x19/0x140 [ 103.443605][ T6290] ? __memcg_slab_post_alloc_hook+0x518/0x7d0 [ 103.443631][ T6290] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 103.443655][ T6290] ? memcpy_and_pad+0x48/0x80 [ 103.443685][ T6290] __vmalloc_node_noprof+0xc2/0x110 [ 103.443706][ T6290] ? copy_process+0x54b/0x3c00 [ 103.443724][ T6290] ? copy_process+0x54b/0x3c00 [ 103.443749][ T6290] dup_task_struct+0x3d5/0x830 [ 103.443770][ T6290] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.443793][ T6290] copy_process+0x54b/0x3c00 [ 103.443845][ T6290] ? __pfx_copy_process+0x10/0x10 [ 103.443890][ T6290] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 103.443917][ T6290] vhost_task_create+0x1c4/0x290 [ 103.443940][ T6290] ? arch_stack_walk+0xfc/0x150 [ 103.443962][ T6290] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 103.443988][ T6290] ? __pfx_vhost_task_create+0x10/0x10 [ 103.444020][ T6290] ? __pfx_vhost_task_fn+0x10/0x10 [ 103.444064][ T6290] kvm_mmu_post_init_vm+0x14c/0x300 [ 103.444086][ T6290] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 103.444111][ T6290] ? __mutex_trylock_common+0x153/0x260 [ 103.444138][ T6290] ? __pfx___mutex_trylock_common+0x10/0x10 [ 103.444161][ T6290] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 103.444182][ T6290] ? rcu_is_watching+0x15/0xb0 [ 103.444208][ T6290] ? trace_contention_end+0x39/0x120 [ 103.444229][ T6290] ? look_up_lock_class+0x74/0x170 [ 103.444252][ T6290] ? register_lock_class+0x51/0x320 [ 103.444277][ T6290] ? __lock_acquire+0xab9/0xd20 [ 103.444327][ T6290] kvm_vcpu_ioctl+0x95c/0xe90 [ 103.444352][ T6290] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 103.444394][ T6290] ? __fget_files+0x2a/0x420 [ 103.444424][ T6290] ? __fget_files+0x3a0/0x420 [ 103.444447][ T6290] ? __fget_files+0x2a/0x420 [ 103.444474][ T6290] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.444491][ T6290] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 103.444509][ T6290] __se_sys_ioctl+0xfc/0x170 [ 103.444533][ T6290] do_syscall_64+0xfa/0xfa0 [ 103.444552][ T6290] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.444571][ T6290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.444588][ T6290] ? clear_bhb_loop+0x60/0xb0 [ 103.444610][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.444627][ T6290] RIP: 0033:0x7f6756f8eba9 [ 103.444643][ T6290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.444657][ T6290] RSP: 002b:00007f6757d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.444676][ T6290] RAX: ffffffffffffffda RBX: 00007f67571d5fa0 RCX: 00007f6756f8eba9 [ 103.444688][ T6290] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 103.444699][ T6290] RBP: 00007f6757d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.444710][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.444720][ T6290] R13: 00007f67571d6038 R14: 00007f67571d5fa0 R15: 00007ffe4c59a1a8 [ 103.444752][ T6290] [ 103.444886][ T6290] Mem-Info: [ 103.830869][ T5952] ir_toy 1-1:8.177: could not write reset command: -110 [ 103.849371][ T6290] active_anon:5419 inactive_anon:0 isolated_anon:0 [ 103.849371][ T6290] active_file:12103 inactive_file:39889 isolated_file:0 [ 103.849371][ T6290] unevictable:768 dirty:732 writeback:0 [ 103.849371][ T6290] slab_reclaimable:10622 slab_unreclaimable:91205 [ 103.849371][ T6290] mapped:27192 shmem:1359 pagetables:1030 [ 103.849371][ T6290] sec_pagetables:0 bounce:0 [ 103.849371][ T6290] kernel_misc_reclaimable:0 [ 103.849371][ T6290] free:1331083 free_pcp:17624 free_cma:0 [ 103.910500][ T5952] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 103.955504][ T5952] usb 1-1: USB disconnect, device number 10 [ 103.984422][ T6290] Node 0 active_anon:21652kB inactive_anon:0kB active_file:48412kB inactive_file:159356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108784kB dirty:2928kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11504kB pagetables:3916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.024448][ T6290] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.063521][ T6290] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 104.110326][ T6290] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 104.116794][ T6290] Node 0 DMA32 free:1425268kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21608kB inactive_anon:0kB active_file:48412kB inactive_file:158280kB unevictable:1536kB writepending:2928kB zspages:0kB present:3129332kB managed:2555276kB mlocked:0kB bounce:0kB free_pcp:46256kB local_pcp:25076kB free_cma:0kB [ 104.155588][ T6290] lowmem_reserve[]: 0 0 1 1 1 [ 104.165539][ T6290] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 104.198106][ T6290] lowmem_reserve[]: 0 0 0 0 0 [ 104.204492][ T6290] Node 1 Normal free:3889528kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19592kB local_pcp:7336kB free_cma:0kB [ 104.242601][ T6290] lowmem_reserve[]: 0 0 0 0 0 [ 104.247454][ T6290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 104.265893][ T6290] Node 0 DMA32: 1524*4kB (UM) 514*8kB (UME) 187*16kB (UME) 177*32kB (UME) 112*64kB (UME) 78*128kB (UME) 61*256kB (UME) 17*512kB (ME) 9*1024kB (ME) 6*2048kB (ME) 328*4096kB (UM) = 1425328kB [ 104.287191][ T6290] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 104.299500][ T6290] Node 1 Normal: 192*4kB (U) 35*8kB (UME) 36*16kB (UME) 63*32kB (UME) 21*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3889528kB [ 104.318349][ T6290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.338982][ T6290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.365820][ T6290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.390762][ T6290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.434288][ T6290] 53349 total pagecache pages [ 104.447479][ T6290] 0 pages in swap cache [ 104.456145][ T6290] Free swap = 124996kB [ 104.464159][ T6290] Total swap = 124996kB [ 104.471708][ T6290] 2097051 pages RAM [ 104.477305][ T6290] 0 pages HighMem/MovableOnly [ 104.484549][ T6290] 426334 pages reserved [ 104.512355][ T6290] 0 pages cma reserved [ 106.878878][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.879882][ T6311] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 107.783606][ T6311] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.795128][ T6311] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.804071][ T6311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.810277][ T6311] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.818020][ T6311] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.826468][ T6311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.834945][ T6311] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.842841][ T6311] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.852591][ T6311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.858581][ T6311] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.865538][ T6311] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.442459][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.117'. [ 108.678763][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 108.828744][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 108.835417][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 108.844731][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.858782][ T9] usb 1-1: config 0 descriptor?? [ 108.877666][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 108.933401][ T6353] syzkaller1: entered promiscuous mode [ 108.939912][ T6353] syzkaller1: entered allmulticast mode [ 108.961747][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.978823][ T1225] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 109.132507][ T1225] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.141000][ T1225] usb 2-1: not running at top speed; connect to a high speed hub [ 109.150648][ T1225] usb 2-1: config 11 has an invalid interface number: 229 but max is 0 [ 109.159227][ T1225] usb 2-1: config 11 has no interface number 0 [ 109.166706][ T1225] usb 2-1: config 11 interface 229 has no altsetting 0 [ 109.176045][ T1225] usb 2-1: New USB device found, idVendor=0582, idProduct=be1e, bcdDevice=cf.ce [ 109.185206][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.193331][ T1225] usb 2-1: Product: syz [ 109.197510][ T1225] usb 2-1: Manufacturer: syz [ 109.202798][ T1225] usb 2-1: SerialNumber: syz [ 109.419317][ T6351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.428034][ T6351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.839733][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.841587][ T6212] sound midiC3D0: rawmidi drain error (avail = 4077, buffer_size = 4096) [ 109.846280][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.919517][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.953541][ T30] kauditd_printk_skb: 1521 callbacks suppressed [ 109.953558][ T30] audit: type=1326 audit(1757718973.912:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.2.127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6756f8eba9 code=0x0 [ 110.079580][ T9] gspca_sunplus: reg_w_riv err -71 [ 110.084834][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 110.096317][ T9] usb 1-1: USB disconnect, device number 11 [ 110.268766][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 110.418779][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 110.427614][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 110.437906][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.447409][ T24] usb 3-1: Product: syz [ 110.451642][ T24] usb 3-1: Manufacturer: syz [ 110.456240][ T24] usb 3-1: SerialNumber: syz [ 110.462973][ T24] usb 3-1: config 0 descriptor?? [ 110.623760][ T6367] binder: 6366:6367 ioctl c0306201 200000000080 returned -14 [ 110.668326][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 110.928878][ T6065] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 111.039328][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.091025][ T6065] usb 1-1: unable to get BOS descriptor or descriptor too short [ 111.099486][ T6065] usb 1-1: not running at top speed; connect to a high speed hub [ 111.108266][ T6065] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 111.122334][ T6065] usb 1-1: config 1 has no interface number 0 [ 111.128558][ T6065] usb 1-1: config 1 interface 121 has no altsetting 0 [ 111.138460][ T6065] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=5a.51 [ 111.147648][ T6065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.156287][ T6065] usb 1-1: Product: syz [ 111.160518][ T6065] usb 1-1: Manufacturer: ,ꏊ婧엽䮑흠鳴숩ꔲ킄ᢩ辬졘ꚯ뫭㌏駔질⛸䫕ྃﱵ薶琇Ꮔ胬㍛᎝禂⮘紒栢퀁䩰ﱻ䮥飲ী쾘聨학즏᜹嬥㪑ഇ。耉棏 [ 111.178375][ T6065] usb 1-1: SerialNumber: syz [ 111.397807][ T6065] usb_ehset_test 1-1:1.121: probe with driver usb_ehset_test failed with error -32 [ 111.414511][ T6065] usb 1-1: USB disconnect, device number 12 [ 111.919334][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.925495][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.009215][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.966784][ T9] usb 3-1: USB disconnect, device number 10 [ 113.069618][ T6385] netlink: 'syz.2.134': attribute type 12 has an invalid length. [ 113.077390][ T6385] netlink: 120 bytes leftover after parsing attributes in process `syz.2.134'. [ 113.087790][ T6386] netlink: 'syz.2.134': attribute type 12 has an invalid length. [ 113.101757][ T6386] netlink: 120 bytes leftover after parsing attributes in process `syz.2.134'. [ 113.197349][ T6391] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 113.204189][ T6391] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.215628][ T6391] vhci_hcd vhci_hcd.0: Device attached [ 113.388998][ T5952] vhci_hcd: vhci_device speed not set [ 113.448921][ T5952] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 113.998924][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.998981][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.081490][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.472809][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.486466][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.496874][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.505556][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.513885][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.686629][ T6403] chnl_net:caif_netlink_parms(): no params data found [ 114.758563][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.766104][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.773654][ T6403] bridge_slave_0: entered allmulticast mode [ 114.780811][ T6403] bridge_slave_0: entered promiscuous mode [ 114.788370][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.796227][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.805008][ T6403] bridge_slave_1: entered allmulticast mode [ 114.812703][ T6403] bridge_slave_1: entered promiscuous mode [ 114.846416][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.857996][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.892046][ T6403] team0: Port device team_slave_0 added [ 114.901970][ T6403] team0: Port device team_slave_1 added [ 114.932573][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.939933][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.965982][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.974374][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.988310][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.995453][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.023053][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.068503][ T6403] hsr_slave_0: entered promiscuous mode [ 115.075020][ T6403] hsr_slave_1: entered promiscuous mode [ 115.081576][ T6403] debugfs: 'hsr0' already exists in 'hsr' [ 115.087324][ T6403] Cannot create hsr debugfs directory [ 115.247769][ T6403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.260768][ T6403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.273510][ T6403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.284346][ T6403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.326331][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.333783][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.342066][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.349275][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.441447][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.464501][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.475805][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.500502][ T6403] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.525283][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.532526][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.551345][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.558575][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.783085][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.977869][ T6403] veth0_vlan: entered promiscuous mode [ 115.992995][ T6403] veth1_vlan: entered promiscuous mode [ 116.021704][ T6403] veth0_macvtap: entered promiscuous mode [ 116.032672][ T6403] veth1_macvtap: entered promiscuous mode [ 116.052243][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.068385][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.084942][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.095398][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.104620][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.118324][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.184227][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.203019][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.238094][ T6392] vhci_hcd: connection reset by peer [ 116.246658][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.271044][ T69] vhci_hcd: stop threads [ 116.275962][ T69] vhci_hcd: release socket [ 116.287023][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.304598][ T69] vhci_hcd: disconnect device [ 116.495602][ T6453] block nbd2: Attempted send on invalid socket [ 116.502819][ T6453] blk_print_req_error: 136 callbacks suppressed [ 116.502831][ T6453] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.520742][ T6453] block nbd2: Attempted send on invalid socket [ 116.526920][ T6453] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.537248][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 116.550211][ T6453] block nbd2: Attempted send on invalid socket [ 116.556870][ T6453] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.568577][ T5871] Bluetooth: hci2: command tx timeout [ 116.571635][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 116.587227][ T6453] block nbd2: Send control failed (result -32) [ 116.594582][ T6453] block nbd2: Request send failed, requeueing [ 116.603292][ T125] block nbd2: Dead connection, failed to find a fallback [ 116.611268][ T125] block nbd2: shutting down sockets [ 116.616638][ T125] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.627767][ T6453] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.639050][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.646802][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 116.649664][ T6453] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.666923][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 116.677407][ T6453] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.687386][ T6453] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.697173][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 116.707496][ T6453] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.717131][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 116.729441][ T6453] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.740043][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 116.751527][ T6453] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 116.761596][ T6453] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 116.836691][ T9] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 116.855822][ T9] usb 5-1: config 0 has no interface number 0 [ 116.862716][ T9] usb 5-1: too many endpoints for config 0 interface 117 altsetting 114: 115, using maximum allowed: 30 [ 116.875264][ T9] usb 5-1: config 0 interface 117 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 115 [ 116.891612][ T9] usb 5-1: config 0 interface 117 has no altsetting 0 [ 116.898440][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 116.907568][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.928599][ T9] usb 5-1: config 0 descriptor?? [ 116.952412][ T9] cp210x 5-1:0.117: cp210x converter detected [ 117.497565][ T6447] binder: 6446:6447 ioctl c0184800 200000002c80 returned -22 [ 117.525598][ T9] cp210x 5-1:0.117: failed to get vendor val 0x000e size 3: -71 [ 117.545336][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 117.564086][ T9] usb 5-1: USB disconnect, device number 2 [ 117.589831][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 117.610556][ T9] cp210x 5-1:0.117: device disconnected [ 118.115118][ T6476] Bluetooth: MGMT ver 1.23 [ 118.302894][ T6485] netlink: 'syz.4.156': attribute type 3 has an invalid length. [ 118.310800][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.156'. [ 118.548768][ T5952] vhci_hcd: vhci_device speed not set [ 118.641792][ T5871] Bluetooth: hci2: command tx timeout [ 118.888777][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.039004][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 119.045883][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.056928][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.066705][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 119.077709][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.087469][ T5933] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 119.096704][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.107693][ T5933] usb 5-1: config 0 descriptor?? [ 119.720694][ T5933] usbhid 5-1:0.0: can't add hid device: -71 [ 119.726730][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.738792][ T5933] usb 5-1: USB disconnect, device number 3 [ 120.016425][ T5952] IPVS: starting estimator thread 0... [ 120.078904][ T6212] sound midiC3D0: rawmidi drain error (avail = 3997, buffer_size = 4096) [ 120.118847][ T6503] IPVS: using max 50 ests per chain, 120000 per kthread [ 120.719032][ T5871] Bluetooth: hci2: command tx timeout [ 121.040546][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.202621][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 121.209800][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.220910][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.230886][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 121.240005][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.253572][ T24] usb 5-1: config 0 descriptor?? [ 121.467434][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 121.477817][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.486945][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.701015][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 121.718773][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 121.739774][ T24] usb 5-1: USB disconnect, device number 4 [ 122.017998][ T6528] tipc: Started in network mode [ 122.023281][ T6528] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 122.037416][ T6528] tipc: Enabled bearer , priority 10 [ 122.348785][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.508735][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 122.515843][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.526149][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 122.537761][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 122.549068][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 122.562033][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.577313][ T5914] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 122.587971][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 122.596307][ T5914] usb 5-1: Product: syz [ 122.600899][ T5914] usb 5-1: Manufacturer: syz [ 122.605514][ T5914] usb 5-1: SerialNumber: syz [ 122.619267][ T5914] usb 5-1: config 0 descriptor?? [ 122.798782][ T5871] Bluetooth: hci2: command tx timeout [ 122.825809][ T5914] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 122.832759][ T5914] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 123.037866][ T5914] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 123.052707][ T5914] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 123.067728][ T5914] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 123.103848][ T6532] netlink: 360 bytes leftover after parsing attributes in process `syz.2.174'. [ 123.160280][ T5952] tipc: Node number set to 4269801494 [ 123.239161][ T5914] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 123.239956][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.257374][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.345631][ T6540] netlink: 'syz.2.176': attribute type 16 has an invalid length. [ 123.356995][ T5914] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 123.357249][ T6540] netlink: 'syz.2.176': attribute type 3 has an invalid length. [ 123.378430][ T5914] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 123.401245][ T6540] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.176'. [ 123.432852][ T5914] usb 5-1: USB disconnect, device number 5 [ 123.482418][ T6542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.617275][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 123.979992][ T5933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.148796][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 124.157397][ T5933] usb 5-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 124.166806][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.174979][ T5933] usb 5-1: Product: syz [ 124.180937][ T5933] usb 5-1: Manufacturer: syz [ 124.185554][ T5933] usb 5-1: SerialNumber: syz [ 124.193044][ T5933] usb 5-1: config 0 descriptor?? [ 124.203848][ T5933] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 124.212493][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 124.225753][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.236423][ T5933] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 124.246472][ T5933] usb 5-1: media controller created [ 124.263742][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.283677][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 124.290457][ T5933] dvb-usb: bulk message failed: -22 (6/0) [ 124.296272][ T5933] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 124.307150][ T5933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 124.326667][ T5933] dvb-usb: schedule remote query interval to 150 msecs. [ 124.333676][ T5933] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 124.464587][ T5933] usb 5-1: USB disconnect, device number 6 [ 124.504082][ T5933] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 125.055989][ T6584] [U]  [ 125.059040][ T6584] [U] K{ [ 125.062070][ T6584] [U] t 1ŠFfˊ`GJgo/mC [ 125.068990][ T6584] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 125.084504][ T6584] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 125.094913][ T6584] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 125.130516][ T6584] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 125.154314][ T6584] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 125.165413][ T6584] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 125.177047][ T6584] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<, priority 10 [ 127.288968][ T5952] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.448803][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 127.455313][ T5952] usb 5-1: config 1 interface 0 altsetting 174 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 127.466766][ T5952] usb 5-1: config 1 interface 0 altsetting 174 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.479801][ T5952] usb 5-1: config 1 interface 0 has no altsetting 0 [ 127.488150][ T5952] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.40 [ 127.498463][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.506627][ T5952] usb 5-1: Product: Њ [ 127.510785][ T5952] usb 5-1: Manufacturer: ࠓ [ 127.515370][ T5952] usb 5-1: SerialNumber: ᖢ죣褋磤漏눧닎䊤Ẻ蓼᪢汁踑껞ॏꉀ畢秠sƥ㮕叝れ๼利▐ [ 127.530452][ T6593] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 127.743406][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.752503][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.774328][ T5952] usbhid 5-1:1.0: can't add hid device: -71 [ 127.780649][ T5952] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 127.793043][ T5952] usb 5-1: USB disconnect, device number 7 [ 128.258760][ T5957] tipc: Node number set to 2886997162 [ 128.495046][ T6615] 9pnet_fd: Insufficient options for proto=fd [ 129.478856][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.628888][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 129.635804][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 129.643509][ T24] usb 5-1: can't read configurations, error -61 [ 129.778897][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.928860][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 129.936302][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 129.943949][ T24] usb 5-1: can't read configurations, error -61 [ 129.950602][ T24] usb usb5-port1: attempt power cycle [ 130.288808][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.309396][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 130.316404][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 130.326297][ T24] usb 5-1: can't read configurations, error -61 [ 130.329202][ T6212] sound midiC3D0: rawmidi drain error (avail = 3997, buffer_size = 4096) [ 130.390981][ T6620] block nbd2: Attempted send on invalid socket [ 130.397339][ T6620] blk_print_req_error: 2 callbacks suppressed [ 130.397350][ T6620] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.415864][ T6620] block nbd2: Attempted send on invalid socket [ 130.423653][ T6620] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.433807][ T6620] Mount JFS Failure: -5 [ 130.460765][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 130.489837][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 130.497122][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 130.505710][ T24] usb 5-1: can't read configurations, error -61 [ 130.512570][ T24] usb usb5-port1: unable to enumerate USB device [ 131.177568][ T6625] netlink: 'syz.1.201': attribute type 1 has an invalid length. [ 131.186862][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 131.292180][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.300836][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.308613][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.318539][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.327513][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.499229][ T6626] chnl_net:caif_netlink_parms(): no params data found [ 131.577909][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.585103][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.594064][ T6626] bridge_slave_0: entered allmulticast mode [ 131.602485][ T6626] bridge_slave_0: entered promiscuous mode [ 131.610968][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.618100][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.625382][ T6626] bridge_slave_1: entered allmulticast mode [ 131.633596][ T6626] bridge_slave_1: entered promiscuous mode [ 131.665179][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.676726][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.715578][ T6626] team0: Port device team_slave_0 added [ 131.723219][ T6626] team0: Port device team_slave_1 added [ 131.753570][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.760945][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.788975][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.802985][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.810016][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.836128][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.884206][ T6626] hsr_slave_0: entered promiscuous mode [ 131.890734][ T6626] hsr_slave_1: entered promiscuous mode [ 131.896841][ T6626] debugfs: 'hsr0' already exists in 'hsr' [ 131.905360][ T6626] Cannot create hsr debugfs directory [ 132.134193][ T6626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 132.147009][ T6626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 132.159857][ T6626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 132.178162][ T6626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 132.250944][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.258136][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.265687][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.272877][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.418468][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.437505][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.446960][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.475811][ T6626] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.489506][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.496743][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.515011][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.522168][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.706040][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.885100][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894228][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930750][ T6626] veth0_vlan: entered promiscuous mode [ 132.942847][ T6626] veth1_vlan: entered promiscuous mode [ 132.974562][ T6626] veth0_macvtap: entered promiscuous mode [ 132.983798][ T6626] veth1_macvtap: entered promiscuous mode [ 133.005954][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.022208][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.037440][ T69] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.047045][ T69] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.062059][ T69] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.071071][ T69] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.143707][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.156093][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.211731][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.221856][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.342883][ T6671] netlink: 80 bytes leftover after parsing attributes in process `syz.5.200'. [ 133.359404][ T5871] Bluetooth: hci4: command tx timeout [ 133.554447][ T6676] smc: net device bond0 applied user defined pnetid SYZ2 [ 133.565186][ T6676] netlink: 14 bytes leftover after parsing attributes in process `syz.5.209'. [ 133.628969][ T5914] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 133.653172][ T6676] smc: removing net device bond0 with user defined pnetid SYZ2 [ 133.662272][ T6676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.674818][ T6676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.685822][ T6676] bond0 (unregistering): Released all slaves [ 133.778778][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 133.785597][ T5914] usb 5-1: config 249 has an invalid interface number: 212 but max is 0 [ 133.794532][ T5914] usb 5-1: config 249 contains an unexpected descriptor of type 0x2, skipping [ 133.803544][ T5914] usb 5-1: config 249 contains an unexpected descriptor of type 0x1, skipping [ 133.812624][ T5914] usb 5-1: config 249 has no interface number 0 [ 133.818968][ T5914] usb 5-1: config 249 interface 212 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 133.832266][ T5914] usb 5-1: config 249 interface 212 has no altsetting 0 [ 133.846292][ T5914] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f [ 133.855683][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.863779][ T5914] usb 5-1: Product: syz [ 133.867948][ T5914] usb 5-1: Manufacturer: syz [ 133.872785][ T5914] usb 5-1: SerialNumber: syz [ 134.958879][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 135.108852][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 135.119378][ T24] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 135.127416][ T24] usb 6-1: config 0 has no interface number 0 [ 135.136045][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x1 has an invalid bInterval 172, changing to 11 [ 135.147238][ T24] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid maxpacket 50254, setting to 1024 [ 135.163645][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 135.173075][ T24] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 135.183113][ T24] usb 6-1: Product: syz [ 135.187308][ T24] usb 6-1: SerialNumber: syz [ 135.194486][ T24] usb 6-1: config 0 descriptor?? [ 135.203169][ T6680] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 135.217274][ T24] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 135.439560][ T5871] Bluetooth: hci4: command tx timeout [ 135.551225][ T9] usb 6-1: USB disconnect, device number 2 [ 136.165208][ T6692] netlink: 240 bytes leftover after parsing attributes in process `syz.5.214'. [ 136.379405][ T5914] peak_usb 5-1:249.212 can0: unable to request usb[type=0 value=1] err=-71 [ 136.388061][ T5914] peak_usb 5-1:249.212: unable to read PCAN-USB Pro firmware info (err -71) [ 136.463355][ T6704] netlink: 32 bytes leftover after parsing attributes in process `syz.5.218'. [ 136.474299][ T5914] peak_usb 5-1:249.212: probe with driver peak_usb failed with error -71 [ 136.510307][ T5914] usb 5-1: USB disconnect, device number 12 [ 136.703568][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 136.758599][ T6717] netlink: 40 bytes leftover after parsing attributes in process `syz.5.222'. [ 136.767823][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.222'. [ 136.790190][ T6717] block nbd5: Unsupported socket: should be TCP or UNIX. [ 136.968860][ T5868] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.138870][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 137.163524][ T5868] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 137.172641][ T5868] usb 5-1: config 0 has no interface number 0 [ 137.180816][ T5868] usb 5-1: config 0 interface 180 has no altsetting 0 [ 137.191468][ T5868] usb 5-1: New USB device found, idVendor=050d, idProduct=1202, bcdDevice=47.d7 [ 137.207430][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.215836][ T5868] usb 5-1: Product: syz [ 137.220315][ T5868] usb 5-1: Manufacturer: syz [ 137.227356][ T5868] usb 5-1: SerialNumber: syz [ 137.239613][ T5868] usb 5-1: config 0 descriptor?? [ 137.452368][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.461531][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.471478][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.480198][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.492092][ T5914] usb 5-1: USB disconnect, device number 13 [ 137.519409][ T5871] Bluetooth: hci4: command tx timeout [ 139.598916][ T5871] Bluetooth: hci4: command tx timeout [ 140.567056][ T6212] sound midiC3D0: rawmidi drain error (avail = 3997, buffer_size = 4096) [ 140.808985][ T1225] usb 2-1: USB disconnect, device number 7 [ 140.837323][ T2913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.839748][ T6743] netlink: 'syz.4.231': attribute type 21 has an invalid length. [ 140.921458][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:11.229/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.960950][ T6743] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 141.152000][ T2913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.179117][ T1225] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.179478][ T6748] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20000 [ 141.207631][ T30] audit: type=1400 audit(1757719005.162:1534): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6DAB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36FD3578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F0413216 [ 141.335015][ T2913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.458017][ T1225] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 141.466770][ T1225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.479076][ T1225] usb 2-1: config 0 has no interface number 0 [ 141.487873][ T1225] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 141.512605][ T1225] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.562045][ T1225] usb 2-1: string descriptor 0 read error: -71 [ 141.568368][ T1225] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 141.587847][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.598244][ T2913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.611646][ T1225] usb 2-1: config 0 descriptor?? [ 141.639080][ T1225] usb 2-1: can't set config #0, error -71 [ 141.646569][ T1225] usb 2-1: USB disconnect, device number 8 [ 141.688854][ T5914] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 141.760338][ T6764] netlink: 112 bytes leftover after parsing attributes in process `syz.1.238'. [ 141.844290][ T5914] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.857770][ T5914] usb 5-1: config 1 interface 0 has no altsetting 0 [ 141.877423][ T5914] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.892027][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 141.926731][ T2913] bridge_slave_1: left allmulticast mode [ 141.935794][ T5914] usb 5-1: SerialNumber: syz [ 141.949993][ T2913] bridge_slave_1: left promiscuous mode [ 141.970936][ T6754] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 141.981208][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.033081][ T2913] bridge_slave_0: left allmulticast mode [ 142.051373][ T2913] bridge_slave_0: left promiscuous mode [ 142.059085][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.160759][ T6775] netlink: 'syz.5.241': attribute type 10 has an invalid length. [ 142.188258][ T6775] netlink: 152 bytes leftover after parsing attributes in process `syz.5.241'. [ 142.215139][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.235108][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.279753][ T5914] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 142.309885][ T5914] usb 5-1: USB disconnect, device number 14 [ 142.513398][ T6764] syz.1.238 (6764) used greatest stack depth: 15096 bytes left [ 142.792131][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.817333][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.832149][ T2913] bond0 (unregistering): Released all slaves [ 142.863174][ T6775] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 142.883266][ T6796] netlink: 132 bytes leftover after parsing attributes in process `syz.4.245'. [ 143.454174][ T869] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.675543][ T869] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 143.701778][ T869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 143.721411][ T869] usb 5-1: SerialNumber: syz [ 143.749436][ T869] usb 5-1: config 0 descriptor?? [ 143.853740][ T2913] hsr_slave_0: left promiscuous mode [ 143.869156][ T2913] hsr_slave_1: left promiscuous mode [ 143.900238][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.914564][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.946800][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.989477][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.049620][ T2913] veth1_macvtap: left promiscuous mode [ 144.055753][ T2913] veth0_macvtap: left promiscuous mode [ 144.065476][ T2913] veth1_vlan: left promiscuous mode [ 144.072120][ T2913] veth0_vlan: left promiscuous mode [ 144.179765][ T6805] 9pnet_fd: Insufficient options for proto=fd [ 144.198324][ T869] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 144.222166][ T869] hackrf 5-1:0.0: Could not detect board [ 144.238133][ T869] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 144.257933][ T869] usb 5-1: USB disconnect, device number 15 [ 144.572085][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 144.608008][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 144.915440][ T6844] Invalid source name [ 144.923230][ T6844] UBIFS error (pid: 6844): cannot open "./file0", error -22 [ 145.018012][ T6837] netlink: 60 bytes leftover after parsing attributes in process `syz.5.254'. [ 145.186365][ T6850] block nbd5: Attempted send on invalid socket [ 145.207176][ T6850] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 145.249245][ T869] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 145.410383][ T869] usb 5-1: device descriptor read/64, error -71 [ 145.469894][ T6864] overlayfs: failed to resolve './file1': -2 [ 145.655800][ T6874] netlink: 'syz.5.261': attribute type 6 has an invalid length. [ 145.683339][ T869] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 145.714598][ T2913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.812588][ T2913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.836973][ T869] usb 5-1: device descriptor read/64, error -71 [ 145.959023][ T869] usb usb5-port1: attempt power cycle [ 145.967305][ T2913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.003443][ T6880] sp0: Synchronizing with TNC [ 146.049958][ T2913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.299859][ T2913] bridge_slave_1: left allmulticast mode [ 146.305570][ T2913] bridge_slave_1: left promiscuous mode [ 146.317516][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.318319][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'. [ 146.342803][ T869] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 146.362376][ T2913] bridge_slave_0: left allmulticast mode [ 146.368494][ T2913] bridge_slave_0: left promiscuous mode [ 146.381754][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.384600][ T869] usb 5-1: device descriptor read/8, error -71 [ 146.630934][ T2913] dvmrp1 (unregistering): left allmulticast mode [ 146.662878][ T869] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 146.689556][ T869] usb 5-1: device descriptor read/8, error -71 [ 146.799453][ T869] usb usb5-port1: unable to enumerate USB device [ 146.822557][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.833966][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.844338][ T2913] bond0 (unregistering): Released all slaves [ 147.220749][ T869] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 147.234266][ T2913] hsr_slave_0: left promiscuous mode [ 147.242480][ T2913] hsr_slave_1: left promiscuous mode [ 147.249841][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.257241][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.278100][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.287520][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.317247][ T2913] veth1_macvtap: left promiscuous mode [ 147.323621][ T2913] veth0_macvtap: left promiscuous mode [ 147.329611][ T2913] veth1_vlan: left promiscuous mode [ 147.334964][ T2913] veth0_vlan: left promiscuous mode [ 147.402128][ T869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.422327][ T869] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 147.449690][ T869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.472339][ T869] usb 6-1: config 0 descriptor?? [ 147.501728][ T869] pwc: Askey VC010 type 2 USB webcam detected. [ 147.890713][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 147.926885][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 148.092831][ T6901] tipc: Can't bind to reserved service type 0 [ 148.122710][ T869] pwc: recv_control_msg error -71 req 02 val 2700 [ 148.141520][ T869] pwc: recv_control_msg error -71 req 02 val 2c00 [ 148.160209][ T869] pwc: recv_control_msg error -71 req 04 val 1000 [ 148.170503][ T869] pwc: recv_control_msg error -71 req 04 val 1300 [ 148.185831][ T869] pwc: recv_control_msg error -71 req 04 val 1400 [ 148.203291][ T869] pwc: recv_control_msg error -71 req 02 val 2000 [ 148.216091][ T869] pwc: recv_control_msg error -71 req 02 val 2100 [ 148.230983][ T869] pwc: recv_control_msg error -71 req 04 val 1500 [ 148.237875][ T869] pwc: recv_control_msg error -71 req 02 val 2500 [ 148.259154][ T869] pwc: recv_control_msg error -71 req 02 val 2400 [ 148.271518][ T869] pwc: recv_control_msg error -71 req 02 val 2600 [ 148.279013][ T869] pwc: recv_control_msg error -71 req 02 val 2900 [ 148.293545][ T869] pwc: recv_control_msg error -71 req 02 val 2800 [ 148.315736][ T869] pwc: recv_control_msg error -71 req 04 val 1100 [ 148.340643][ T869] pwc: recv_control_msg error -71 req 04 val 1200 [ 148.388064][ T869] pwc: Registered as video103. [ 148.411719][ T869] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 148.462506][ T869] usb 6-1: USB disconnect, device number 3 [ 148.834442][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.270'. [ 149.186717][ T6958] netlink: 'syz.4.274': attribute type 3 has an invalid length. [ 149.904865][ T6988] syzkaller1: entered promiscuous mode [ 149.909732][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 149.930012][ T6988] syzkaller1: entered allmulticast mode [ 150.097694][ T5914] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 150.110661][ T6995] netlink: 'syz.2.283': attribute type 2 has an invalid length. [ 150.128768][ T6995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.283'. [ 150.137115][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.163446][ T5914] usb 5-1: config 0 descriptor?? [ 150.182449][ T5914] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 150.591059][ T5914] gspca_sunplus: reg_w_riv err -71 [ 150.598818][ T5914] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 150.643588][ T5914] usb 5-1: USB disconnect, device number 20 [ 151.129342][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 151.288712][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 151.324962][ T5914] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 151.349666][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.364454][ T5914] usb 5-1: config 0 descriptor?? [ 151.399584][ T5914] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 151.421160][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.288'. [ 151.432027][ T7039] netlink: 44 bytes leftover after parsing attributes in process `syz.5.288'. [ 151.434111][ T7040] netlink: 44 bytes leftover after parsing attributes in process `syz.5.288'. [ 152.212798][ T5914] gspca_vc032x: reg_w err -71 [ 152.217551][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.223187][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.228482][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.235246][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.241029][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.246330][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.251781][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.257068][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.262504][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.267790][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.273147][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.279634][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.284944][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.290299][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.295596][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.301078][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.306367][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.311685][ T5914] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.316971][ T5914] gspca_vc032x: Unknown sensor... [ 152.322405][ T5914] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 152.332720][ T5914] usb 5-1: USB disconnect, device number 21 [ 153.003296][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.295'. [ 153.105260][ T7076] netlink: 6508 bytes leftover after parsing attributes in process `syz.5.296'. [ 153.330014][ T7087] hfs: unable to load iocharset "io#harset" [ 153.763669][ T5933] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.901509][ T69] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 153.926923][ T7112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.948863][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 153.958216][ T5933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.973355][ T7124] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.981455][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.007456][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 154.025851][ T5933] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 154.036854][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.052483][ T5933] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 154.062489][ T5933] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 154.070571][ T5933] usb 6-1: Manufacturer: syz [ 154.078084][ T5933] usb 6-1: config 0 descriptor?? [ 154.398814][ T5933] rc_core: IR keymap rc-hauppauge not found [ 154.404761][ T5933] Registered IR keymap rc-empty [ 154.413201][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.438807][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.464372][ T5933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 154.481607][ T5933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 154.497083][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.518858][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.538848][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.561949][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.588803][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.609020][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.628799][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.648820][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.668890][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.688789][ T5933] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 154.710107][ T1225] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 154.711437][ T5933] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 154.725923][ T5933] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 154.813302][ T5933] usb 6-1: USB disconnect, device number 4 [ 154.860944][ T1225] usb 5-1: config 4 has no interfaces? [ 154.882338][ T1225] usb 5-1: New USB device found, idVendor=0403, idProduct=d070, bcdDevice=ee.a3 [ 154.904534][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.913449][ T1225] usb 5-1: Product: syz [ 154.913468][ T1225] usb 5-1: Manufacturer: syz [ 154.913481][ T1225] usb 5-1: SerialNumber: syz [ 155.137511][ T5933] usb 5-1: USB disconnect, device number 22 [ 156.140751][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 156.301709][ T24] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 156.310117][ T24] usb 6-1: config 0 has no interface number 0 [ 156.316321][ T24] usb 6-1: config 0 interface 160 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.332762][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 156.342117][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.350612][ T24] usb 6-1: Product: syz [ 156.354788][ T24] usb 6-1: Manufacturer: syz [ 156.359429][ T24] usb 6-1: SerialNumber: syz [ 156.366832][ T24] usb 6-1: config 0 descriptor?? [ 156.377889][ T24] usb 6-1: Found UVC 0.00 device syz (05ac:8501) [ 156.384285][ T24] usb 6-1: No valid video chain found. [ 156.583961][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.592964][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.604364][ T24] usb 6-1: USB disconnect, device number 5 [ 156.908735][ T5933] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 157.068796][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 157.075745][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.085637][ T5933] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 157.095847][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.105936][ T5933] usb 5-1: config 0 descriptor?? [ 157.286909][ T7174] netlink: 148 bytes leftover after parsing attributes in process `syz.2.320'. [ 157.471118][ T7182] sg_write: data in/out 768/301 bytes for SCSI command 0x0-- guessing data in; [ 157.471118][ T7182] program syz.2.323 not setting count and/or reply_len properly [ 157.541477][ T5933] pantherlord 0003:0E8F:0003.0005: item fetching failed at offset 2/5 [ 157.551095][ T5933] pantherlord 0003:0E8F:0003.0005: parse failed [ 157.557617][ T5933] pantherlord 0003:0E8F:0003.0005: probe with driver pantherlord failed with error -22 [ 157.735737][ T5933] usb 5-1: USB disconnect, device number 23 [ 157.814494][ T5952] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 157.860318][ T7194] [U]  [ 157.863131][ T7194] [U] K{ [ 157.866248][ T7194] [U] t 1ŠFfˊ`GJgo/mC [ 157.873196][ T7194] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 157.888842][ T7194] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 157.899311][ T7194] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 157.934951][ T7194] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 157.958493][ T7194] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 157.969609][ T7194] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 157.981161][ T7194] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 158.094257][ T7194] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 158.102773][ T7194] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 158.116342][ T7194] [U] 22Ʃx?0;3u [ 158.120504][ T7194] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 158.145418][ T7194] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 158.154692][ T7194] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 158.163265][ T7194] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 158.169407][ T7194] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 158.181726][ T7194] [U] ec [ 158.184839][ T7194] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 158.338854][ T5952] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 158.471352][ T5952] usb 6-1: device descriptor read/64, error -71 [ 158.591468][ T5952] usb usb6-port1: attempt power cycle [ 158.798733][ T1225] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 158.938751][ T5952] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 158.953015][ T1225] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 158.963063][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.972912][ T5952] usb 6-1: device descriptor read/8, error -71 [ 158.979711][ T1225] usb 5-1: Product: syz [ 158.983975][ T1225] usb 5-1: Manufacturer: syz [ 158.988578][ T1225] usb 5-1: SerialNumber: syz [ 158.997581][ T1225] usb 5-1: config 0 descriptor?? [ 159.012237][ T1225] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 159.220527][ T5952] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 159.244792][ T5952] usb 6-1: device descriptor read/8, error -71 [ 159.360915][ T5952] usb usb6-port1: unable to enumerate USB device [ 159.424621][ T1225] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 159.631138][ T1225] usb 5-1: USB disconnect, device number 24 [ 159.961064][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.973900][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.982236][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.997422][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.005979][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.247019][ T1225] IPVS: starting estimator thread 0... [ 160.361599][ T7234] IPVS: using max 27 ests per chain, 64800 per kthread [ 160.385935][ T7238] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 160.476643][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 160.590009][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.609790][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.617159][ T7222] bridge_slave_0: entered allmulticast mode [ 160.637814][ T7222] bridge_slave_0: entered promiscuous mode [ 160.647582][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.655156][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.662557][ T7222] bridge_slave_1: entered allmulticast mode [ 160.675480][ T7222] bridge_slave_1: entered promiscuous mode [ 160.705786][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.711569][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.5.333'. [ 160.719040][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.776509][ T7222] team0: Port device team_slave_0 added [ 160.789341][ T7222] team0: Port device team_slave_1 added [ 160.820727][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.827700][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.854481][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.872522][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.880815][ T7194] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 160.892742][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.922543][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.027514][ T7222] hsr_slave_0: entered promiscuous mode [ 161.034322][ T7256] afs: Unknown parameter 'dynfl+”{PKQ' [ 161.042893][ T7222] hsr_slave_1: entered promiscuous mode [ 161.050350][ T7222] debugfs: 'hsr0' already exists in 'hsr' [ 161.056157][ T7222] Cannot create hsr debugfs directory [ 161.488909][ T7222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.523969][ T7222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.558545][ T7222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.594719][ T7222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.739415][ T1225] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 161.806519][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.840655][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.863352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.870552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.892907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.900174][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.902503][ T1225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.922384][ T1225] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 161.942488][ T1225] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 161.953079][ T1225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.964290][ T1225] usb 5-1: Product: syz [ 161.968476][ T1225] usb 5-1: Manufacturer: syz [ 161.973798][ T1225] usb 5-1: SerialNumber: syz [ 162.078900][ T5871] Bluetooth: hci0: command tx timeout [ 162.134064][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.178852][ T5868] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 162.328931][ T5868] usb 6-1: device descriptor read/64, error -71 [ 162.361554][ T7222] veth0_vlan: entered promiscuous mode [ 162.373341][ T7222] veth1_vlan: entered promiscuous mode [ 162.406435][ T7222] veth0_macvtap: entered promiscuous mode [ 162.420682][ T7222] veth1_macvtap: entered promiscuous mode [ 162.440677][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.456954][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.473386][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.483010][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.496195][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.506593][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.568778][ T5868] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 162.605501][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.620872][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.657504][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.667552][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.721729][ T5868] usb 6-1: device descriptor read/64, error -71 [ 162.834257][ T5868] usb usb6-port1: attempt power cycle [ 162.840425][ T1225] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 163.022552][ T7271] bpf: Bad value for 'gid' [ 163.037036][ T1225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 163.062626][ T1225] usb 5-1: device firmware changed [ 163.082484][ T1225] usb 5-1: USB disconnect, device number 25 [ 163.111412][ T5933] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 163.188790][ T5868] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 163.211877][ T5868] usb 6-1: device descriptor read/8, error -71 [ 163.289149][ T5933] usb 7-1: Using ep0 maxpacket: 32 [ 163.306418][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.323120][ T5933] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 163.333931][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.347716][ T5933] usb 7-1: config 0 descriptor?? [ 163.456751][ T5868] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 163.493668][ T5868] usb 6-1: device descriptor read/8, error -71 [ 163.609145][ T5868] usb usb6-port1: unable to enumerate USB device [ 163.773502][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.786022][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.859781][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.868587][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.890531][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 163.965977][ T5933] usbhid 7-1:0.0: can't add hid device: -71 [ 163.973955][ T5933] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 163.996548][ T5933] usb 7-1: USB disconnect, device number 2 [ 164.058848][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 164.066799][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.078351][ T9] usb 5-1: config 6 has an invalid interface number: 123 but max is 0 [ 164.087160][ T9] usb 5-1: config 6 has no interface number 0 [ 164.094356][ T9] usb 5-1: config 6 interface 123 has no altsetting 0 [ 164.103577][ T9] usb 5-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=cb.85 [ 164.113254][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.121456][ T9] usb 5-1: Product: syz [ 164.125812][ T9] usb 5-1: Manufacturer: syz [ 164.130928][ T9] usb 5-1: SerialNumber: syz [ 164.160663][ T5871] Bluetooth: hci0: command 0x041b tx timeout [ 164.362733][ T9] usb 5-1: USB disconnect, device number 26 [ 164.882250][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 165.059278][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 165.066990][ T9] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 165.097771][ T9] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 165.129886][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 165.142448][ T9] usb 7-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 165.154853][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.163942][ T9] usb 7-1: Product: syz [ 165.168215][ T9] usb 7-1: Manufacturer: syz [ 165.173856][ T9] usb 7-1: SerialNumber: syz [ 165.189254][ T7372] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 165.200965][ T7372] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 165.208827][ T5868] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 165.371335][ T5868] usb 5-1: not running at top speed; connect to a high speed hub [ 165.380648][ T5868] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 165.390764][ T5868] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 165.401008][ T5868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.410063][ T5933] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 165.423766][ T5868] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.427663][ T7372] netlink: 'syz.6.344': attribute type 2 has an invalid length. [ 165.435281][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.444919][ T7372] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.344'. [ 165.448927][ T5868] usb 5-1: Product: syz [ 165.461883][ T7372] Bluetooth: MGMT ver 1.23 [ 165.463383][ T5868] usb 5-1: Manufacturer: syz [ 165.471403][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.473247][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.490764][ T5868] usb 5-1: SerialNumber: syz [ 165.578876][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 165.591424][ T5933] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 165.608453][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.618854][ T5933] usb 6-1: Product: syz [ 165.623037][ T5933] usb 6-1: Manufacturer: syz [ 165.627722][ T5933] usb 6-1: SerialNumber: syz [ 165.632418][ T9] usb 7-1: USB disconnect, device number 3 [ 165.654985][ T5933] usb 6-1: config 0 descriptor?? [ 165.672373][ T5933] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 165.722975][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.732395][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.762533][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.771448][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.790765][ T5868] usb 5-1: 0:2 : does not exist [ 165.812984][ T5868] usb 5-1: USB disconnect, device number 27 [ 165.846070][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.875445][ T5933] gspca_vc032x: reg_r err -71 [ 165.881883][ T5933] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 165.900660][ T5933] usb 6-1: USB disconnect, device number 14 [ 166.238887][ T5871] Bluetooth: hci0: command 0x041b tx timeout [ 166.389613][ T5868] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 166.495523][ T7403] netlink: 256 bytes leftover after parsing attributes in process `syz.4.349'. [ 166.527709][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.349'. [ 166.561887][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 166.576027][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.605350][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.620547][ T5868] usb 7-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 166.629741][ T5868] usb 7-1: New USB device strings: Mfr=237, Product=0, SerialNumber=0 [ 166.637962][ T5868] usb 7-1: Manufacturer: syz [ 166.661539][ T5868] usb 7-1: config 0 descriptor?? [ 166.875240][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.885783][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.897200][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.908212][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.922215][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.935416][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.937409][ T7418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.949312][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.961283][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.973816][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.988351][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.008909][ T5868] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 167.014463][ T24] usb 7-1: USB disconnect, device number 4 [ 167.172327][ T5868] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 167.181631][ T5868] usb 5-1: config 8 has no interface number 0 [ 167.187757][ T5868] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 167.202857][ T5868] usb 5-1: config 8 interface 177 has no altsetting 0 [ 167.210138][ T5868] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 167.219276][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.232302][ T7412] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 167.639535][ T5868] usb 5-1: string descriptor 0 read error: -71 [ 167.680841][ C0] ir_toy 5-1:8.177: out urb status: -71 [ 168.005738][ T7448] program syz.2.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.069177][ T7451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.124558][ T7451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.193757][ T5868] ir_toy 5-1:8.177: could not write reset command: -110 [ 168.222776][ T5868] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110 [ 168.269015][ T5868] usb 5-1: USB disconnect, device number 28 [ 168.319774][ T5871] Bluetooth: hci0: command 0x041b tx timeout [ 168.792275][ T5933] IPVS: starting estimator thread 0... [ 168.889003][ T7477] IPVS: using max 27 ests per chain, 64800 per kthread [ 168.998802][ T5952] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 169.148893][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 169.157505][ T5952] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 169.166890][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.176177][ T5952] usb 7-1: Product: syz [ 169.180496][ T5952] usb 7-1: Manufacturer: syz [ 169.185098][ T5952] usb 7-1: SerialNumber: syz [ 169.192678][ T5952] usb 7-1: config 0 descriptor?? [ 169.201923][ T5952] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 169.258833][ T5933] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 169.409804][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 169.422790][ T5933] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1023 [ 169.436080][ T5933] usb 5-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 169.453275][ T5952] gspca_ov534_9: reg_w failed -71 [ 169.453424][ T5933] usb 5-1: config 1 interface 0 has no altsetting 0 [ 169.477207][ T5933] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.497476][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.509182][ T5933] usb 5-1: Product: 顟닟뒀⨒Ἂ릺쌷⳨귶酎춙煼悹◜専츰◝暹诞쾾鵴霿澡밬忷岀즨穄㩣㿳㠽ꗺ廮鐠櫈Ϙ㜽輊䈆⛬孀淩숉捋㼌졯ጲ舾栤鴛깃柆ᤷ큰䓅燬㡶뚓둾㷈㡽㲄 [ 169.524681][ T30] audit: type=1326 audit(1757719033.482:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.6.375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f262978eba9 code=0x0 [ 169.531549][ T5933] usb 5-1: Manufacturer: ᬇ쥫뗀ꢭ黫ꛪ⚂毯䁼늖푊䦉㸿䀆癘맻쏼죰琕更禊纪自ퟤ녙碓ᅡ쬿Ꮸꇕࢦ猗ᜱ圮⹼↕諯䂭띡䊱⫴犛ꈌꡓ뵩끥ᲆꕇ [ 169.575469][ T5933] usb 5-1: SerialNumber: చ [ 169.584391][ T5933] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 169.595185][ T5933] usb 5-1: no configuration chosen from 1 choice [ 169.623852][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.6.375'. [ 169.646168][ T7491] netlink: 116 bytes leftover after parsing attributes in process `syz.6.375'. [ 169.858752][ T5952] gspca_ov534_9: Unknown sensor 0000 [ 169.858841][ T5952] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 169.875485][ T5952] usb 7-1: USB disconnect, device number 5 [ 170.403108][ T5871] Bluetooth: hci0: command 0x041b tx timeout [ 170.828818][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 170.980794][ T24] usb 7-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 170.991343][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 171.006448][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.017135][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.025652][ T24] usb 7-1: Product: syz [ 171.030175][ T24] usb 7-1: Manufacturer: syz [ 171.034788][ T24] usb 7-1: SerialNumber: syz [ 171.254663][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.267015][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.297289][ T24] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 171.311176][ T24] usb 7-1: USB disconnect, device number 6 [ 171.738841][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 171.833258][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.5.386'. [ 171.888843][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 171.899886][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 171.913125][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 171.922626][ T24] usb 7-1: can't read configurations, error -71 [ 172.020556][ T5952] usb 5-1: USB disconnect, device number 29 [ 172.134440][ T7525] ------------[ cut here ]------------ [ 172.140270][ T7525] WARNING: mm/page_alloc.c:5135 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#1: syz.5.390/7525 [ 172.153130][ T7525] Modules linked in: [ 172.158120][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.5.390 Not tainted syzkaller #0 PREEMPT(full) [ 172.167662][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.177816][ T7525] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 172.184579][ T7525] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 a4 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 13 40 b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 172.204360][ T7525] RSP: 0018:ffffc90003aff880 EFLAGS: 00010246 [ 172.210498][ T7525] RAX: ffffc90003aff800 RBX: 0000000000000017 RCX: 0000000000000000 [ 172.218488][ T7525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003aff8e8 [ 172.226631][ T7525] RBP: ffffc90003aff970 R08: ffffc90003aff8e7 R09: 0000000000000000 [ 172.234847][ T7525] R10: ffffc90003aff8c0 R11: fffff5200075ff1d R12: 0000000000000000 [ 172.242922][ T7525] R13: 1ffff9200075ff14 R14: 0000000000040d40 R15: dffffc0000000000 [ 172.251964][ T7525] FS: 00007fd2a15ce6c0(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 172.261879][ T7525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.268490][ T7525] CR2: 0000200000010000 CR3: 000000007c0a2000 CR4: 00000000003526f0 [ 172.276554][ T7525] Call Trace: [ 172.279917][ T7525] [ 172.283055][ T7525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.289497][ T7525] ? p9_client_clunk+0x1b6/0x250 [ 172.294469][ T7525] alloc_pages_mpol+0x232/0x4a0 [ 172.299401][ T7525] ___kmalloc_large_node+0x5f/0x1b0 [ 172.304652][ T7525] __kmalloc_large_node_noprof+0x18/0x90 [ 172.310326][ T7525] __kmalloc_noprof+0x4bd/0x7f0 [ 172.315363][ T7525] ? v9fs_fid_get_acl+0x4f/0x100 [ 172.320521][ T7525] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 172.326879][ T7525] v9fs_fid_get_acl+0x4f/0x100 [ 172.331736][ T7525] v9fs_get_acl+0x9a/0x360 [ 172.336293][ T7525] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 172.341910][ T7525] v9fs_mount+0x6eb/0xa50 [ 172.347311][ T7525] ? __pfx_v9fs_mount+0x10/0x10 [ 172.353152][ T7525] legacy_get_tree+0xfd/0x1a0 [ 172.357892][ T7525] ? __pfx_v9fs_mount+0x10/0x10 [ 172.362860][ T7525] vfs_get_tree+0x92/0x2b0 [ 172.367312][ T7525] do_new_mount+0x302/0xa10 [ 172.371991][ T7525] ? apparmor_capable+0x137/0x1b0 [ 172.377034][ T7525] ? __pfx_do_new_mount+0x10/0x10 [ 172.382140][ T7525] ? ns_capable+0x8a/0xf0 [ 172.386491][ T7525] ? path_mount+0x61c/0xfe0 [ 172.391034][ T7525] ? kmem_cache_free+0x19a/0x690 [ 172.395991][ T7525] __se_sys_mount+0x313/0x410 [ 172.400841][ T7525] ? __pfx___se_sys_mount+0x10/0x10 [ 172.406062][ T7525] ? do_syscall_64+0xbe/0xfa0 [ 172.410812][ T7525] ? __x64_sys_mount+0x20/0xc0 [ 172.415596][ T7525] do_syscall_64+0xfa/0xfa0 [ 172.420185][ T7525] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.425406][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.431560][ T7525] ? clear_bhb_loop+0x60/0xb0 [ 172.436261][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.442243][ T7525] RIP: 0033:0x7fd2a078eba9 [ 172.446672][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.467391][ T7525] RSP: 002b:00007fd2a15ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.476782][ T7525] RAX: ffffffffffffffda RBX: 00007fd2a09d5fa0 RCX: 00007fd2a078eba9 [ 172.484854][ T7525] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 172.493086][ T7525] RBP: 00007fd2a0811e19 R08: 0000200000000580 R09: 0000000000000000 [ 172.501144][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.509183][ T7525] R13: 00007fd2a09d6038 R14: 00007fd2a09d5fa0 R15: 00007ffd6d654398 [ 172.517188][ T7525] [ 172.520286][ T7525] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.527660][ T7525] CPU: 1 UID: 0 PID: 7525 Comm: syz.5.390 Not tainted syzkaller #0 PREEMPT(full) [ 172.536853][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.546904][ T7525] Call Trace: [ 172.550175][ T7525] [ 172.553101][ T7525] dump_stack_lvl+0x99/0x250 [ 172.557686][ T7525] ? __asan_memcpy+0x40/0x70 [ 172.562275][ T7525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.567471][ T7525] ? __pfx__printk+0x10/0x10 [ 172.572155][ T7525] vpanic+0x237/0x6d0 [ 172.576138][ T7525] ? __pfx_vpanic+0x10/0x10 [ 172.580640][ T7525] ? is_bpf_text_address+0x292/0x2b0 [ 172.585959][ T7525] ? is_bpf_text_address+0x26/0x2b0 [ 172.591160][ T7525] panic+0xb9/0xc0 [ 172.594874][ T7525] ? __pfx_panic+0x10/0x10 [ 172.599292][ T7525] __warn+0x334/0x4c0 [ 172.603261][ T7525] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 172.609233][ T7525] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 172.615205][ T7525] report_bug+0x2be/0x4f0 [ 172.619522][ T7525] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 172.625494][ T7525] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 172.631465][ T7525] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 172.637440][ T7525] handle_bug+0x84/0x160 [ 172.641673][ T7525] exc_invalid_op+0x1a/0x50 [ 172.646172][ T7525] asm_exc_invalid_op+0x1a/0x20 [ 172.651013][ T7525] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 172.657594][ T7525] Code: 74 10 4c 89 e7 89 54 24 0c e8 a4 a4 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 13 40 b8 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 172.677251][ T7525] RSP: 0018:ffffc90003aff880 EFLAGS: 00010246 [ 172.683316][ T7525] RAX: ffffc90003aff800 RBX: 0000000000000017 RCX: 0000000000000000 [ 172.691275][ T7525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003aff8e8 [ 172.699252][ T7525] RBP: ffffc90003aff970 R08: ffffc90003aff8e7 R09: 0000000000000000 [ 172.707214][ T7525] R10: ffffc90003aff8c0 R11: fffff5200075ff1d R12: 0000000000000000 [ 172.715170][ T7525] R13: 1ffff9200075ff14 R14: 0000000000040d40 R15: dffffc0000000000 [ 172.723148][ T7525] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 172.729487][ T7525] ? p9_client_clunk+0x1b6/0x250 [ 172.734424][ T7525] alloc_pages_mpol+0x232/0x4a0 [ 172.739271][ T7525] ___kmalloc_large_node+0x5f/0x1b0 [ 172.744462][ T7525] __kmalloc_large_node_noprof+0x18/0x90 [ 172.750084][ T7525] __kmalloc_noprof+0x4bd/0x7f0 [ 172.754927][ T7525] ? v9fs_fid_get_acl+0x4f/0x100 [ 172.759867][ T7525] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 172.766195][ T7525] v9fs_fid_get_acl+0x4f/0x100 [ 172.770953][ T7525] v9fs_get_acl+0x9a/0x360 [ 172.775373][ T7525] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 172.780919][ T7525] v9fs_mount+0x6eb/0xa50 [ 172.785245][ T7525] ? __pfx_v9fs_mount+0x10/0x10 [ 172.790095][ T7525] legacy_get_tree+0xfd/0x1a0 [ 172.794755][ T7525] ? __pfx_v9fs_mount+0x10/0x10 [ 172.799598][ T7525] vfs_get_tree+0x92/0x2b0 [ 172.804009][ T7525] do_new_mount+0x302/0xa10 [ 172.808506][ T7525] ? apparmor_capable+0x137/0x1b0 [ 172.813529][ T7525] ? __pfx_do_new_mount+0x10/0x10 [ 172.818560][ T7525] ? ns_capable+0x8a/0xf0 [ 172.822881][ T7525] ? path_mount+0x61c/0xfe0 [ 172.827379][ T7525] ? kmem_cache_free+0x19a/0x690 [ 172.832318][ T7525] __se_sys_mount+0x313/0x410 [ 172.836994][ T7525] ? __pfx___se_sys_mount+0x10/0x10 [ 172.842187][ T7525] ? do_syscall_64+0xbe/0xfa0 [ 172.846851][ T7525] ? __x64_sys_mount+0x20/0xc0 [ 172.851610][ T7525] do_syscall_64+0xfa/0xfa0 [ 172.856104][ T7525] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.861294][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.867350][ T7525] ? clear_bhb_loop+0x60/0xb0 [ 172.872024][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.877901][ T7525] RIP: 0033:0x7fd2a078eba9 [ 172.882306][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.901901][ T7525] RSP: 002b:00007fd2a15ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.910395][ T7525] RAX: ffffffffffffffda RBX: 00007fd2a09d5fa0 RCX: 00007fd2a078eba9 [ 172.918354][ T7525] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 172.926314][ T7525] RBP: 00007fd2a0811e19 R08: 0000200000000580 R09: 0000000000000000 [ 172.934273][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.942236][ T7525] R13: 00007fd2a09d6038 R14: 00007fd2a09d5fa0 R15: 00007ffd6d654398 [ 172.950209][ T7525] [ 172.953616][ T7525] Kernel Offset: disabled [ 172.957953][ T7525] Rebooting in 86400 seconds..