last executing test programs: 8m15.718143871s ago: executing program 2 (id=61): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 8m13.04700137s ago: executing program 2 (id=73): syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d00c80001"], 0x10) 8m12.998967688s ago: executing program 2 (id=74): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x20008000) 8m10.741900808s ago: executing program 2 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 8m10.559510185s ago: executing program 2 (id=84): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) write(0xffffffffffffffff, &(0x7f0000000000)="303132333a616263643a63ed7b188db386", 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd0d, &(0x7f0000000000)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02"]) 8m10.350067567s ago: executing program 2 (id=87): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) syz_fuse_handle_req(r0, &(0x7f000000cb00)="09b4a4781b8221b0ecbd58b47d940d3949fffeb7f94cd42a73362139fae1849d56da33c9d00d63a305263b66a57fddd7c53ff64edadff9260481c36ee576ea040ac14d4dfb779685fb513a05dd6c49a59257a0db4141565182c9d221bbfb384021affa51d9b529c8c58642c84e847c50b3f4b3b5ad4bda4a44bc5992d64ef2cc15b6b8a1ed8fffbca19b42bc9a0a1c160a4118b4607f30346ca82d6f6afc019420f3cb1e45d1ff7fdec51bf1c8ed7c2f710567a97a1b12c9dabbf0e62308c4537228ba7011abe0d35d45ecb0ebf4a5bb6e448b44a7f37945fa52f410f8dfa0c20b9f5f7d90f12b20fceef1589fabc6445ec9e32f60d7391d87d89dfc706405896bb204a7e2c6b3bb1a114f23538b85060e9eb26b1861c581a1c855283d3af8f91023f0f52caf9005844d1079bf6700a6e2eff6c5939850e53c79208aaf130a1abcd05ae7e944f13b5cfbc55812d4d3aa242659000274b315b303dec37b765f12a2284ad12f0d8f09b70712b519c5a9dc0e80c69bf7c69f05b225cb05f061197070f8928989b6489b76e3d294a7bc621a863d5e702d1f50e537cb87c19c154aafae9a52a14cb349490d75f7b1c995784845bcb615be3e1416e204665e667ecdf5df6ffe34f8a04e29869190c9a07c29c70ed55779138800bc42940958216b7deb7e95af1c41f135faa0d00048759c000795f736afd2ac29d631437fe2f3288e9b928235deecf93aaa530d5d8b5f85edffa8a9d6bf5dbbba84fb38a8ee9b196b7114e9e6b71de9bd3c80616eb6fe521b0dedb73e2b50ed083636221c6f38a2efe0dc1119b12e44b270a3ade865948f04c0c0586e2857ad86988c7f9fd78746b0dd5ec99e74822424a0d30bb75c5889b0a912a1df441e03370240d8410d979d63ffb7424996a95b6aa52ced8b7184cd38deb067476d6883dd4c1d3a51b70b91c16cdbd38a5ae8c4a44c3771d0642ee5bbdc064e7694e2a304cc13df96b2ac01d69af83f0d90cbe706da9c24ccb4e3e3cf80e99224ab80d2ea93e5df24661793483f7dc67645091245a1588451a4633e81882c9749109b7126a2a2cd406a44773021fa60157b81d22b089b4c3548cf7057ffa0f92cb0f9ffc2156644f4809424d95f28631ae86a3e8f17cae7e894e341d5dab59f2d8daa962fb78f757266969e1427ac4c35ce1c7c0e0524287abb1bffe64ea9c041798967613a4840aa59c999196f72c5ff50ef0b68a1a9dba3f3630d4cbe7b1134b6d647a6c5682934f5965082c0cc03960cf4af09bc5050510174974445efad07dd2ffa40a71e4d783b848fe8f5af0a4e31b159be3948e292648cde3ce69234d38dce9cd9584f16344cdb8ef85d045120a5a272adbbd32695b07856dee41abedb05566aecb800682abd15fc5440797c1bae62c86e6077b874cb237aadce7cdc37a46459f87c6cdf46edb9adee2f227f3896c3e5ba3317997f0a00bdbf75ddb176d4ba95e80e0c01ab9cc69c66376f9e2d2450482848a7f60d94fcbeece7347fdd2e706afad1acd3400aff602c536f64bc6f7edf91cf878fbde80296a6a91ee3fc087b46523f48a40a6ee4aa9a79d1df9e2e72c412b548a5cb0adfb699c21949845d0ca98f64d952ca3f0cce7e61a861c851a093842627d7e03247b25d70780b2ee6fafce540de6cc08aa363772157085f3521e26ae35407b20dcb894fa84d1e33a6de38f14bb9e7ba1aab3dbb9baf31a955b1f33cad6407728cd58b370bfee4963fa9d975ed9315332c4edb55952664558461c11018a68bdaae8b4edb04a7c1e984323f158b9ac96f7f5de5e688a206371f6809a630ed3d4475d2748af57d98141a39c7b1ce12ae4c2c0bd658b8b5eb4141bbc0708533d9b58e7f961d4fc9934aaef73bdc0d28cb5d252745fd69adabc5e640b50c5355fd77a34880e859ebb97457e0a581349dc8fa025f33b7a009345f7ddaa74eed8b7eecdadf3ca93b72fd8f982d34d978f93c25602eb815c1253331ef9b9bc15a4cc2e6ad81e1a93400d6ee72e8cf4a139c993d76d15bd90abcadda4b6308010a685928dc8a8ab221e29882e99d821cb224fe607ba7e4f8c26d4c6f22b146da9b265dda1e27f7fb36ace4e77f9d57b9a5d698fc09dd574c040e95f18aeeb295c53ee516a7c4922045432d41857ea1682e651fc75f3e73438b0ff6f29bdef1795d6e2d2efc5e9acb79bd759406bc4261f546228a2003cad28f479e3eb68de78285f4a85ec482eabb737791f198aca77970ee5d96ca8bd4d696cbe542ad76659b53c59d96819fd5147946e54f2a40393279339cea315137af0bd8234f383d9bd899ce1cd2fbc01fa995527f081913c2b55bef361ab377457318daa022dfe0557d816f07d1221e1a9f4a410261a259966c6e2d8ccde50dad351898bc456d517a9ed1a359823f0d7705f8edb9b65592b5474aae73c80d862503830081c7f4adb0376457ef093f3240a6120bf2aa7bcc41aab4eef19de7eda558a49774358812217ee07cb6cb44bb3ac8c40f3d7ceb87d3f37432ff70ba0b3cb4784da3636267e985bd35182c92e88d1c90aa439cd1d4cf3c33452847d93919357aaa66cb45f9f8efc5fcb8ae5fab3bd5d173dddde78f02d5169a27d4ac9fd77fe1d7cc165259bcc020fcc90c221967d87e57b56a74ec8cf0361d351cf466865db6807d04b833e6691fb67711bda5db2c2da4ec3e89ffee6aea481a48ded218d75e8193c1c3d98348e834a4c59a4a94953dac244e191abc63a54ccd2df9671b844df507e9a25766e9c26ca5301665f50721d20d142612d3ae3b9a9e5be172c5180f2c4c3690fce1a3d3c89a4ea74a306076819019f429872831a17d4f37f84802cc453ce145168e9bf677d49e1ec996d9597a86e71e575c351a7aba2c9ca095458472e989dff489de5ccd5bdbfa44bd5d9611d08c01e5839ba9bc9694d377e1508add19654e18af6b639020466ed13550e25e92e5699db29ec65ef9c28cb7f840e4666568cb9a25c713fcb0cf993fc01cc30f195295f4c2eb263fc3284a965cf3e8744a51486566e95e634b327a8e31001a2c1483c0fb95dcaf4240971588786a73cbe2a2cb7082735e93a6dfcac88d8b4ff0722b6e6b53f43646cb6f506e212b6023eed2c57fb6102942e34eccce7b95cb3345312adb8adf1c5e57d7814d1501df45214551c2ea6c7c586c9a1b001c5b6a8f35664953b13c9209e34dc5ecbd493b17a370fa4aa6089839729f6e52989244cea7de3bdc83fdc98344baacccffaf7216c0f33898f62ed974fcf93a14a58e333d283f1b953bd38ccf9568622047415e17d8c43ab11de7f399c5d6c6141df35b7c8794328fc36459542d08341429d9e757941af88a1c931b7c293d7dc77fbd4f22e251ef9f8d99fa136c6adbd5f4396a66727cb97e797f213e6b5511d8b2ed9d2b111b2618a2992f87aa246c94c3acaa81f8597db9eb5bd868f0a043505d49de50a9c932ce46980e8668537fa2486e631c06c5852a2c73f0ff52ed89b8469f82168d63bf5170ed2d5f5fd7b4532c32154838fe641144aa969470147d5d7942a5cb83ab45402cd5b497a04a6c34d87bdcfe50f83fcd9b9a7037ce7d975a82fbf55f65bd8ab7ad4c5565666c0789d7e6874bb84936a1c546696fb45a20a2d32081802ae6050c4731c878cfde6cff2cb4ba8074b93bfd380e9c271d3db29280bdc2ee31cdeec2da4e8970e9fdce0e17e939985ecdabc12bbadb2ef34cd1caee82536d3eb37255c0370dd5a9c5dd130c043039acc245787de96755ee67af98338a4a3af373613c19233bb8d33fccf3283dcab6915f33d583052a4fce19f5a1e4a60b3d6761f72f58b1b9d12a7d583c9142af44b8756457965994bf5601933fbe0b7d7c6e9bb9471652b2b4289c84e5ab2e13cd67d5c9253bcf507991da65e653475f29ccf8f9faedf4ecd72c859cf5c7ed0e876e4f1cc7b48b685b766a12f9bf276b4e2abe6493c2d1e03ba71febb885e21ee4322b3d41c7d68f39b4323a831fa219cd7ce325c181e2a5c04635a835a3b265a3c67ca9f079c4893512ebdf885a9743f0e6be0ced39cb187f75e32a70dbbbd4655e2b1795ca7287fb10575066a05bb8e07799a92ebef43d20e99f19d17961981461774b688499ab0acfe3da82a140425979c757814c0ab9fdbe5087f6da92a222ff2d257e240cbc008e9953eae683ba524ac3eff739dc5a5857022d1f7accfd9f585feb13c2742ee30fa844d8fae0649295a814f2f1906d012931d787782972f0f8271933c737911e09397437d3485a24e88ded6bbf6a57fb9efd6f2992fec8578249b2e555c65cdd776fd6fa3ea63db751a11e625fc211d0aff50c5a6723437113afe99006b2d1322930d7325808f8ab48f17dad2ef535ee10688667b534eb51cbe1f4696b177615d5c3932278487ee94f0cbdd5c62d5b2a7f7e20b703379593e9268ba787a902e7fd0d3dac6bd11b3a22e9e2c5e120d8ed6717e1274c28a77129ae3b6f752863f17b0942ecf2fbe2c3fa6784939a4d117be93ce307365cc0b712b4c48f90e931d73a71e308b49c81d3efedefffccad7da5fd5da86ad41f1c1820f6851ab1150b4da529cd1ba2ce3a3c52cab5ac4bd049d7a9ecbb50dc2a1a1054db2092db58e65b68d9ca0a11c36365645964335602ef645dd62c9c749effeb841c627071eab92614949f53d09d3c30b87a780b970f98865ad0ac673deeeaf62cb5f8b4bcf48267d24235cb66e59fb10ccdf7ffe3b966f9cfad1683616bd560811117b87d7f6fc7c9764fd9ae145db74ac5dbe25e57eea39b72b85b0f86cfed396bd371602e89d2959177dfdf6f85bf524db94d7968e5aa06e8c6c38f8ab64d665f2baa9b70598c20a29a00ca66f623544e6fbc511ae9a927233fe59f589fa840a358fd5724822367c8c53e9e7a4ca6751ea2fe5ba968a7bb64e1bec38902dffe0783ba7254a98dfd4ec349c68d0093b2ca25440eef35f4edbefa477d3be29cb49e333945f6db19bb836e5d901f8393d8ab5d6c9d9555a4acf0d0a49db4e5639389d8894013037efeb1c013202ff049af73149c4dcb42112842b31a20ce3d948fa48e3b7fc5f2a72e9ea8a648a281809e41a7e94529f6ac99a9caaef5d8d698d92500bf3774d8703343e4e9ccbb90beed6e7dd623d47b0dc438a0e2d8776be001fcab31a8ba346613726cf7014d3e218e57ce333471ff39c7a2ecdf0323e0996f3cdec0004a9a0fdade1a1ecb8735fe3fe30d5a9fd15f6af5a7095034b5b7c10549b8dad3c82fbe6cbb45b72e1e41eeb4fd791e2ab24e01a2877fc975340e35cd00c62aa75e9066b4f8114d90dfc425c9e1cc64db4a4210a4de7510726dfe2941ee399a6c72e0b0fd2faaec425fffdd033831cd865771c4559e8aa5ba51d696489d3bee56cf6c8f158ff884401e87d5518289a537bdb901dba61b95333c48113f348dc5b15818e73af65e56e85b0a905f4550d90cc99c9b93eaef85d063b3d55bbfd483412b855f8563b4dc71583d3af23d5957c226d9354760e05987cba615db50dfeec0dcfa90a1638c718014a7245a7a08424141418f36bfdaa9e5ec436bd7870b8b28b6d9d17cfd6d52c4a2d5ec66663bc17a67446abcf0627b8aa0e7b610569c8ad90e9928e14480b864926d0187e02c1732c26bcb312516543efe0b7b5a886fd94cb485e4931a675f38fbf36083874e3f928d08974e7abba0d7462d2a85f48b68d535d763b33fdf407668915378b1aa8bb4561b08d43d154a45e2083f815b3589f1087bd88c1add291f06f84bb5ea9c9697bf7627f4f74ebc0e43fd85dcd43dfbf9e04ab74f9fefe22233d0fadb64789cb4e64d06a5343ddb92cbf7bf2e937e96cfe7e2581f024880a454f68b81b92c711897cf324f5507519057bcd1c4cac7996ac5a4d7e60873008877155588efec2dba03ee23d2557eac3fbda837c8e8b5870734e8702ddf65234b666ce2ad7e7050b41e62727a46ac622b9b3aae126726723552d877ada1d92e361b5fd5258e2dbf5f541c5d6082265830d0726efe3212d4d267287e3d9d1c18a27d1f9ad228bba44b4ced4c8680f96a821894629c61484e8a2d9ce276699987280d456d0e924e2b3934a0cc0abd8f14f52e2a969d318b7e54e41588c319f5436887d0bc3cfa79603c400a1d5f0ce3525d2d3cc54c7b1444f428252a200544de9cd368c766a83919463cf1ef96c5b06150215d11e815ffe50e95974a365021803a91a9fbf7606005ed41ac38f6a9a802d17beb3e29bda782408527e4c148da486f172c0d544d6ffe5624c7807d029da73dd089548916b49e86d2ea281931ac67084a4d087c18c2c251a4cf7c5b1c643686fe3cc8a18102b27c3a7de7d62e221dbb69d52cec6bbee8990e881fd88efb60fadd303a26057cee9c5ae5bec1ecf3a76dd8f4cde80675531613f65f3e18470104e5e9f621deb4e45a251d694af4d3be0c5705fac9d822c2b6ce9759d3d9e423280fc356c3ab1d283ad25c81108b75f4a6632fb177c948be40c0b046add96e344174022b45acd4c615c1249d37c66b1b4d508ebf4c9abba7d1fdbf73a5dca61b25c9feedbcf1100e4e1d9fa42f750527cae175d5c393a1b43c2a9d6b884b9a666242d02b572de9520e681a3853d4d3c708c9c6a029c5543f41b7ad1bdb1004e88b6d9d08e2914869dea1db171f6de5c0da0dcb64b902b26884d3d9905c560c3e32ff097c9bfbae91a934fcef7ea39c098b7c8abe81cef31b494b6ccd3dde7fb374783a99f7b30429ae3ee66e274c8f83d80f32b929123237f18a7db7133f993364150fbdb69e8e7c88fe84243ea43b936871c89675912f6802bd9897b0f656fe5947051761ef4b58158e4645fbac071b3e87e5e9e4f16a7d7d5630bd0437e4a6c419d22ee48a9e1a25693feee3c9f210b1600ed45301502012020eaa1d3130ed34e2b32b2194e945d46edf36dc3e64ce286a360c800a1d4a42eee9a961be89fb55f47813074f12f69851b261857d8e02ed32ff0d25d08d269318867945362630f5458f131b3e09496766e1ce2120eea1bbf43403b01baa8fa5d09171dccfcf35e1371fb47ab9e8c1fe1c1e0fe07ed647cfdcfb01ddfc009cd3566cf39826a56e8476bbb47b295033a171302e161727efcaa0858ee766b15b4d75bf6471c5f3cc546164bccfdeb1b809dcb296e8c0a7a17db21e8cd67860df21577adf40a2dac192a5396a177744aba380a56ec6d31412672f74f28320d8e5679dae1ed3f60d01f96fc10bef61df07d76214f2a9f8df517eb9e6bb3459deb42e1cc87d062bcbf6f69a572fb308e5aa45306c589ef0ef3d4539dc7d034357a0136cc8b20fc1618cdeecc0fab79d33571d9f70fa35d7b3305f85a6f0dc4f0d52b64897603bf4b1d077ef5d45b9fa97a3e7b8b6be40b05274818405dbadd6e5db4627d987abc73b136ab9e1f0f5c029f8ac4575c0e7e2f69917570de2481b6d24eb9c87a65a7be4398aa007522fc74e0e05ed8fbfc76beeae374b16e57ad06891eb4f8d0c3e1bffb35c67a9672030d090fc298dded15685ceda20c61dbf8246368ce36c0fedf5fed9a0872fb988850a0a141e47f983ddac663e1d64bb380a938ef7104ee24c4686888aa2c96ba6884986244d0bd66a627ae5102b28ea1e2198d091541a2832422b44668e769c5ac3d666b3b340062141bf3467be31ccc1e270e868ddc81c4ff5ef49854b513e6d4f9c6c2e59b1c45f17dda013c3d6a5eb221ab0ad4d5c7432197d774931b38a7a7b6a33bcf5377b2a2d04623185c4b146091aaaa5f562d4ef719e865635af2670971bba4a255db6c50f95647ea1c661fb120b6ce795efd77f70de4c8d8f6a14315a1206769dfd0d23e97ed26b8aad2d22bdede2278b67d4f6ee9ce4f3c65e32238419cff7cd1dae2c2dbcbba7916b5983cabf76618d9b69aea08b6606f9d441d7a8434552aaf24d8dc43dceb69b880db58821dd608111e020284b30dcfad1e0e5883e34ff273e64f9733551291030b0d257e497fce3b17d9b5d2fcf4774e8f8c8cfdaa2ad44eb03e9d9e3a8f7841b4c15baa3f7be2d9281a9fc0351daa1294844068e14690d4c8eef63085778f93dd45e45340309dd7785ba6c19d60fd5cfc506ca29f213c240056c116afc312fece8e45830984f84733da6f524fbfd88b578b92cb45fda124e01c5dfafe3c033b2b36ac8372f2612d86d78279b73513f9c7eff2f6a280b579024ae32a13dd1338046643fadc84f0dfe3801d4b9f5c2c9cf6727ba60d49ade4aa88549631d69f8a20c0909605ff7d154c976684127758882611aacc36bbbd64e824ca539a3bd13dc1c5d44cc2fe1da504dc872fdc76ebdeeb7d4049726cbef41d94c0fd6837cf3e04cb04d1a2a838c347d7ff92691b9d27850e0a3e8e0c189c182d3202c09ef0e92a77a0f0567851a54d9f9e7b3842f263ea3d11fc5b7160527155e5562426e3e5d6153d7948524b8f099d476ec93f94264e35da8cc585015b3e1e835522a0237bfede79e9bbb462deb73489755d18aa8cc46abbabee34b8f8b947f652a8bba2e55775b2a141d3da22e9df7b529342e1172200206346688d8d6388555c8af3727e488a11ae0187668cbc23d2caaea6e85befac2ce7269be868828660637eb7a877b1670416405cafdb23a1924d0ba52181f13a425c3aa8455881ad80ccdc0c93cea7e742519ab01abadcdf22af1c73328280d776f4a42cddee77336464469521bea1174c2e6bfb232c438c8e8f3c949db2503d0c91d12f7a13b61ab3bb5ce22242cfb1ba019496e5cf36f235f873203c44f6a4fbe5557117867e19d36b56920b834f32bf3fd253827e5473eaa863f3d401f43ea920c94ad621de90d09c716a429f2373b413fc83b02924e3f17059a9fea2f88bdc14149003230d44c2c404c55a5f5e2014fb27c11de10359183b7052de3779a7de93f7e2b89301e01000ca22d6ce6d06636093e43005e91a59e2cd78406ecea53cb0cf3dab66e38d4a728db1a5b6da253f267c1ee31c32f1e8a01347330ff354225a13e1818fe781ac80890ed05cb89dbdc54eabc5dc2004174801eff65bbe9adde4e240292cf5cff9367c2fbb36e8d4d24379950cb17e847f03c0733218212cbd597809dfdda49812c055cc2ece82f0c312815e34b6ab2c9ec632a56a48647a8df0cd51fbcde3f145d024546dfe1acae1ced363161c530549bfe23270e7009f8c31ac8157a013156142e02321d8ccf9104bc9021e1e09ce3339b80e81d7ad3da24220051fc84666e6b21f4a83292aa98c229c663540b29bc00b06f739448c702c706c88238f46f8af3c525448b45cb71126f63361b230594ed9305e4924f4379328e5a54f6e246c7f7c82e0f44f4d389ee865220c629b6cf2978b383e6a2195d12d5b3517ac643954916bc63c9a75b605642dfe047b6f62d43fd36a16025ce901042ddc3939547560a24b846e3ed5c038df6c48dce540d88a97ed648baae315bbf8df61fd9f37eee7fdbb78eaf37f3542fda617d5037f36d51e65875e1ff8c54d0dbad6a6c6643be97ad2c674023fa6dc18a0e80cd8ad16a0625366d6eed581bf85fba1519d5fc779905503f121fe5cbde83ccfad9b2ca194ade78de58205d99ae16b3315c428bd89802bea415199674f46d915d446ca8c6f69e24b9f79ce168ee1a3a3ecb36a960726ad128a88874baffec3ff06780321a1132026563ce2f5d7ea61cc65305300e5c04382fd6ca8b85b9fbca5ce645225ecc9167183fcdb195ca388685519a76e20f76ce5978c9a368108fe79261af57c64c4e449fda6325459fd56d691165b7f639e52aa387308c04994f86dd21243ae682e1a8be32ce40270f80d17afb0629b4b1849831b55c0123c3807c27e3081108f0b34fe78ee47919f56ef37a7cc951bc75e2d45d416bdb68a8ba980b2d6da8b83fb6ac91222ad0d8bbe68da050298964d1c920e9dcfb3a7d5392b0852d021decb4a03871c224ebba635f20cad52333f61fa6a064c6872d8ec2c4faff9c0e0c783cc358632a5cc17580c98d4d3b848105c93be4039aa44afe56244c9c04fc8a455e9691df98b18038d4c802b9f298d6474814641ff2335f331a0ec7fea6f0e864aadcec55a9aaa4afa7ba4cc7e14db38d7fc03a9aaaea6674be919bda907b5676937fea63a13fcb6b6ed9112086d13a4a8c7292d0e5a5d537b4030b898c16faa58a3fcabdf3cba9be93f4a37dc067eb32aeb0f1edb306572fae62a197a4b2d5522d65087fd3ceba13f976d1f6ee269e5a1eac16188ee945d05bd44f3a3172f695baac8334830ffbecab867d2ba175c3b2dcf7fc8f7f7e2d5ecf7f735bf55db232e3a711da970d57f90a49b28979abf09cc86b2fe7a9b5791b95c4dc7101c99085dc771c826452dbfd6a702e6665e0cda325682a998625c983008e4a5ad80cee872bffa853f1f3c0435e103965710074244aaed5a4ff7e7c5ebba1c3db6bbcb22125c0f2bd404fcd0e49ce3f244132c981666881026e401e991c391791348913aa2ca37932368c53548ef9d066103adbc8e064a792eb16faca57aeca78a0b9eb4b7d8fd8f69e140353ded1c95f8ebc2556a9c26ea0877e5063b95d508ac2e2c5b8c416c931ba649c226734e7f3311a94e5c9fcbe81487736cba2e10833a545edeba9634cf17bb42ee5a5c93d61a0e969307be4500b650f13953b31649e50dc5b459485b62f5ec0a63ddfa0f96f611e1263b77bd9c63799311a7a877195928bb3e1501752becc23ce6e89883f593a53860667b1d55dee40bb84b8027b5cd30d980c59d1fa4cc356fd84698d2e9b846171c0514be8854e2b7013d60e9666678eec28c4832097c8ea38dfbddc6b98ff9fb3d1c8c625b8446dde8fd343cedc334daa0544bfcbab5f2fb69f62aa875215b58fdce510a714d6808ba979da95d4629b7f395e724440436b4ecf925a68bc117700345fe2afca29fe471d61a6cf704f7720d0329617184b2c2df81d062431d776704578ffb1741b21d95bb3030f786e88902864b35f60c013e2a5a4b3018e04e0907a5e3b33329650ebe3e8b152ca789a8ff46f45a243d60fcea789deaf24063c0e0af685726935b5f0549f81379d21377040c8c0fbac95f2ac2a904c7d5fbc30e6d28e6730e1a712f32a43d9c271cb30e840b3ebe5596cea2c670a352e1dd196c07503566179cbf1b5cc03dde823f83694546762268092a6257b5d88981012582ab593f46bc94d4205cda49a4d6d618f248f49e4488a0b206b48ff02aa33bc00f1d06d6e5851d128b3b62dad055f5e043dbadc8e63980797c4e9bab24006d4d6bfcae7341643bec0ca0a705636d379c39825f4529fef1af60d91eba1ca10a219f88738b49986586ac54a31349858bbeb209ce8f231e7006e756754836920b34951718c0c464a76bbde3a546f2ca148f02c0d093631d2469aa4c9b4b110e1869ef139b6dde629c126728804d9687106ccf4d321c0b62dced2d85888877469b8b51c3a3d86414424ccbd4f0c998023a4aa1c8f36db58ac95d6f799f4813a635a3561632503f64b68807f67996ed47ff92ddc54fbba85bf3a712e946dfd4c4a410b994cd041285e19c3c0a002cf1e2a9bc53a7acde5b237ec1b", 0x2000, &(0x7f000000f740)={&(0x7f000000eb00)={0x50, 0x0, 0xce, {0x7, 0x2d, 0x0, 0x8000002, 0x9, 0x7, 0x6a, 0x1, 0x0, 0x0, 0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m10.098607066s ago: executing program 32 (id=87): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) syz_fuse_handle_req(r0, &(0x7f000000cb00)="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", 0x2000, &(0x7f000000f740)={&(0x7f000000eb00)={0x50, 0x0, 0xce, {0x7, 0x2d, 0x0, 0x8000002, 0x9, 0x7, 0x6a, 0x1, 0x0, 0x0, 0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m37.035592362s ago: executing program 1 (id=258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 7m35.985937649s ago: executing program 1 (id=263): timer_create(0xb, &(0x7f00000028c0)={0x0, 0xf, 0x1}, &(0x7f0000002900)=0x0) timer_settime(r0, 0x0, &(0x7f0000002940)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x0, 0x1, 0x5}}, 0x14) r2 = socket$kcm(0x2, 0xa, 0x2) timer_create(0x2, &(0x7f0000000080)={0x0, 0x3, 0x1}, &(0x7f00000000c0)=0x0) timer_gettime(r3, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) 7m35.594230995s ago: executing program 1 (id=266): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 7m32.099833628s ago: executing program 1 (id=279): landlock_restrict_self(0xffffffffffffffff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x5) 7m31.076907518s ago: executing program 1 (id=286): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x20000000000005, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, 0x0, 0x734, 0x20}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r2, 0x80000001, 0x4) 7m30.779618561s ago: executing program 1 (id=288): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) memfd_create(0x0, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x1) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 7m15.701448666s ago: executing program 33 (id=288): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) memfd_create(0x0, 0x0) connect$pppl2tp(r4, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x1) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 6m20.749685387s ago: executing program 0 (id=736): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000b06010200000000e0ffff"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m20.570644552s ago: executing program 0 (id=737): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000d00)={@hyper}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000ac0)={0x1, 0x4, 0x7, 0xb, 0x31}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0xffffffffffffff35, &(0x7f0000000480)={0x60, 0xe, 0x0, "cde48995a1e90746d59042acc8307b32c41a28e17deaf5ba911d5fd1df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090248000101006015090400001a02020000052406"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {0x0, 0x200, 0x4}, 0x2000, 0x6e6bb5, 0x2, 0x0, 0x1}}, 0xb8}}, 0x24000080) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) process_vm_writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/182, 0xb6}, {&(0x7f0000000580)=""/239, 0xef}], 0x2, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/93, 0x5d}, {&(0x7f0000000740)=""/159, 0x9f}, {&(0x7f0000000800)=""/146, 0x92}, {&(0x7f00000008c0)=""/191, 0xbf}, {&(0x7f0000000a40)=""/87, 0x57}, {&(0x7f0000000b00)=""/2, 0x2}], 0x6, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, 0xee01, 0x0) 6m19.939596554s ago: executing program 0 (id=740): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcffff00000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m19.861381734s ago: executing program 0 (id=741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x7, 0x20000) ioctl$RTC_PIE_OFF(r1, 0x7006) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000180)=0x1) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x4e22, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000006000013"], 0x4a) 6m19.635686411s ago: executing program 0 (id=743): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1f9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/kernel\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/security\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys/kernel/security\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/kernel/security/apparmor/.replace\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)="04080076657273696f6e00020500000004080070726f66696c650007", 0x1c) r2 = syz_clone(0x5002000, &(0x7f0000000140)="ff7f06da24e7aaf44432e591cde397b7e4facceaa0c00d20f5f8aaf179e8f2565add05ea12afa7c27bf49ae236bfd015168047ac2c3d6d0d4a463cbd3bf24adc52ea77da6ff3033c2ce8753bf92513741119b9c3d8b169836174de58f240fcc3fd037ac891e53abe53cc665621c7714fccb98275c4e2c40cf6ce294a", 0x7c, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="39142ba97183d1ece12a2d444dd79593726ee508dd3361f53abbf490ad88a5caffe63d81abfbf99874d237eaff9d4a1a1bb3febf29b635c2a063eecb2680de32f707d9fbaea5520dc9af1021a4fcfd0022a0bbaf7dfe1abe4ef32ab143de") r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = accept4$llc(r1, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x0) kcmp(r0, r2, 0x3, r3, r4) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) connect$rxrpc(r6, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) sendmsg(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000010010000010014000200000080000000"], 0x18}, 0x0) recvmsg(r6, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 6m19.491634142s ago: executing program 0 (id=745): r0 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x3, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="302d434f4e46493bfb44697361626c65640a", 0x12) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) clock_gettime(0x0, &(0x7f0000000180)) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r5, 0x5, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x138, r5, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x1b, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x1b, 0xfd}}, @mesh_chsw={0x76, 0x6, {0x1, 0x5f, 0x1a, 0x2c58}}, @erp={0x2a, 0x1, {0x1}}, @dsss={0x3, 0x1}, @supported_rates={0x1, 0x2, [{0x36}, {0xb, 0x1}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xac, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa7, 0x3, "30c31cfd3efe8c0022aaaafa64dedadcac76ca9d162a297fbc3f2f79e3334c7e304657510d774c5dbba29fb6ec9066f8b8bcf9858947c876d322a342fedd5326dcc7393970251bdebaaa30310e98dd60d4f8aa47d7498c70dd3efed7ae0741524fee7ea1558b877d82076196acb1657a850d07a1480af083eb6d6591c6cbea19569faf953d4d9d0f7a17a81f771bdf497cebacf2a5563195bd10f8800a01b216fd5b88"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x711}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x138}, 0x1, 0x0, 0x0, 0x40800}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 6m4.242945322s ago: executing program 34 (id=745): r0 = socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x3, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="302d434f4e46493bfb44697361626c65640a", 0x12) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) clock_gettime(0x0, &(0x7f0000000180)) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x20, r5, 0x5, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x138, r5, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x1b, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x1b, 0xfd}}, @mesh_chsw={0x76, 0x6, {0x1, 0x5f, 0x1a, 0x2c58}}, @erp={0x2a, 0x1, {0x1}}, @dsss={0x3, 0x1}, @supported_rates={0x1, 0x2, [{0x36}, {0xb, 0x1}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xac, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xa7, 0x3, "30c31cfd3efe8c0022aaaafa64dedadcac76ca9d162a297fbc3f2f79e3334c7e304657510d774c5dbba29fb6ec9066f8b8bcf9858947c876d322a342fedd5326dcc7393970251bdebaaa30310e98dd60d4f8aa47d7498c70dd3efed7ae0741524fee7ea1558b877d82076196acb1657a850d07a1480af083eb6d6591c6cbea19569faf953d4d9d0f7a17a81f771bdf497cebacf2a5563195bd10f8800a01b216fd5b88"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x711}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x138}, 0x1, 0x0, 0x0, 0x40800}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 3m3.30044857s ago: executing program 3 (id=1890): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000001940)={'syz', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d01, &(0x7f0000000040)="00000fffff000000000001") r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="e48ad808b3c4086023064eb83b06644b8d7b25381c2bdd5e96a96fd460e000986fc81c48a8ccd531b0eceb831f070830c0a9bb9aec4df757645b76418c4ecef7d759e05df1611c9b210214f9499c7e256cd6e22e23934d778fd29d5a82d8dcbddeefbb41d51b614c5ba7fd908f8e18611e8b2e3ee4444a25b33d0452cddfd47a4d582f942d15b7d5f660e33e34a090734250833e3464e1b4437fbdd690913b8227c85659e2865c55d18480d312793efa97cda957692238e60e6f86", 0xbb, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r4, 0x4068aea3, &(0x7f0000000340)={0x80, 0x0, 0xe}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010b051aa4554c886f20000000000000a48000000060a0b160000000000000000020000081c00048018000180080001006c6f67000c000280080005400000000d0900010073797a300000000009e7c9636f797a3200000000140000001100010000000000000000000000000a"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) keyctl$invalidate(0x15, r2) 3m3.080598949s ago: executing program 3 (id=1891): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m2.811036348s ago: executing program 3 (id=1894): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000640)={0x38, &(0x7f0000000400)=[{0x22, '\x00', @data=0x2, 0x3}]}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, &(0x7f0000000100)=0x2, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000000000251e00000010002f800c000200000000000000006d73b095a2caf19bce4d443f48"], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/220, 0xdc}, {&(0x7f0000003540)=""/37, 0x25}, {&(0x7f0000003580)=""/59, 0x3b}], 0x5, &(0x7f0000003640)=""/27, 0x1b}, 0x4}, {{&(0x7f0000003680)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000005100)=[{&(0x7f0000003700)=""/63, 0x3f}, {&(0x7f0000003740)=""/55, 0x37}, {&(0x7f0000003780)=""/123, 0x7b}, {&(0x7f0000003800)=""/21, 0x15}, {&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/149, 0x95}, {&(0x7f0000004f80)=""/18, 0x12}, {&(0x7f0000004fc0)=""/44, 0x2c}, {&(0x7f0000005000)=""/117, 0x75}, {&(0x7f0000005080)=""/92, 0x5c}], 0xa, &(0x7f0000000140)=""/45, 0x2d}}, {{&(0x7f0000005200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005280)=""/248, 0xf8}], 0x1, &(0x7f00000053c0)=""/193, 0xc1}, 0x30df}, {{&(0x7f00000054c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005540)=""/83, 0x53}, {&(0x7f00000055c0)=""/131, 0x83}, {&(0x7f0000005680)=""/156, 0x9c}, {&(0x7f0000005740)=""/73, 0x49}], 0x4, &(0x7f0000005800)=""/4, 0x4}, 0x9}, {{&(0x7f0000005840)=@sco={0x1f, @none}, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000058c0)=""/37, 0x25}, {&(0x7f0000005900)=""/6, 0x6}, {&(0x7f0000005940)=""/149, 0x95}, {&(0x7f0000005a00)=""/157, 0x9d}], 0x4, &(0x7f0000005b00)=""/172, 0xac}, 0x200}, {{&(0x7f0000005bc0)=@alg, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005c40)=""/81, 0x51}, {&(0x7f0000005cc0)=""/68, 0x44}], 0x2, &(0x7f0000005d80)=""/162, 0xa2}, 0x1}], 0x6, 0x40000020, &(0x7f0000005fc0)) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x144, 0x3, 0x4, 0xa040, 0x0, 0x1}, 0x30, 0x3) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) r10 = fcntl$getown(r3, 0x9) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x1d44, 0x100, 0x3, 0x203}, &(0x7f0000000980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd5, 0x0, 0x3, 0x5e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbee9, 0x20000, 0x0, 0x33f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x847c, 0x4000, 0x2, 0x306, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704e, 0x40, 0x3, 0x2da}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000001c00)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x2, 0xff1, 0x0, &(0x7f0000000c00)=@buf_1k="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"}}, &(0x7f0000001c80)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, r11, &(0x7f0000000280)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, r12, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x35d, 0x0, 0x0, 0x1000, 0xffffffff, r10}}}, &(0x7f0000000480)=0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup(r14) syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, 0x0, 0x0) syz_ublk_process_io(0x0, 0x0, 0x9, 0x0, 0x0) landlock_restrict_self(r7, 0x8) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003e80)=ANY=[@ANYBLOB="c4110000110001000400000000000000b4110000b0119a8008007800", @ANYRES32=0x0, @ANYBLOB="a4112e"], 0x11c4}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xfffffffffffffff9, 0x2, 0x9}) 3m1.193658861s ago: executing program 3 (id=1909): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x25d800, 0xc, 0x6, 0x4, 0xa, 0x3, 0xa, 0x0, 0x1, 0x3, 0x3}, {0xa000, 0x1000, 0xe, 0x17, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0xb, 0xf1, 0x5, 0xff, 0xc3, 0x6, 0x3, 0x6, 0x4c, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x8, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xcabd8245) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40040c0) keyctl$set_reqkey_keyring(0xe, 0x7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r5) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x2, 0x0, 0x7, 0x120000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, 0x0, 0x0, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002ac0)={{{@in=@private}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000002bc0)=0xe8) 2m58.333310768s ago: executing program 3 (id=1919): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x3, 0x9, {0x7, 0x25, 0x1, 0x0, 0xe3, 0xab3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x6, {0x7, 0x25, 0x1, 0x0, 0x1, 0x40}}}}}}}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000000800)=@string={0x2}}, {0x63, &(0x7f00000015c0)=ANY=[@ANYBLOB="6303b5598d92f67053ddbbdeca2d159fab2152e8f83950db8c75d81f9905c92cae595c11dd06ece7be619220"]}, {0x0, 0x0}]}) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_usb_connect$uac2(0x6, 0xf7, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe5, 0x3, 0x1, 0x7, 0x50, 0x8e, {0x8, 0xb, 0x1, 0x2, 0x1, 0xc, 0x20, 0x10}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x27, 0x6, 0x3a, 0x7}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x4, [0x2, 0x6, 0x0, 0x5, 0xc]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x1, [0xa]}, @processing_unit={0xb, 0x24, 0x8, 0x4, 0x4, [0x3, 0x1, 0x1]}, @multiply_unit={0x7, 0x24, 0xc, 0x8, 0x4, 0x6, 0x8}, @extension_unit={0x9, 0x24, 0x9, 0x6, 0x8001, 0x1, 'ZV'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x44a, 0x6, 0x66, 0x9}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x60b2, 0x61, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x10, 0x6, 0x6, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3e, 0x30, 0x8a, {0x8, 0x25, 0x1, 0x3, 0x28, 0x6, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x35, 0xf4, "c772628d"}, @as_header={0x10, 0x24, 0x1, 0x5, 0x39, 0x1, 0x1, 0x32, 0xfa, 0xfb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x89d, 0x7, 0x1, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x3, 0x7, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3e, 0x8, 0x21, {0x8, 0x25, 0x1, 0x3, 0xf, 0xad, 0xff58}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9c, 0x4f, 0x40, 0x0, 0x9}, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1900020a1003000000082401000a100302050006030600"], 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x422}}, {0xb5, &(0x7f00000001c0)=@string={0xb5, 0x3, "2ec1055199fe05b97ca506cc40a76e264696cea7844851f2e488a71f8506af76d54e163d14fca97a50aa739b3e09f7f136aee7630ec7c71253683efb1e39148b0d83e28b98558e18b653a68c7453bb440f85ab16cb397035a78185f8f5e4335c819536659d78229a71fa0a4d9ce9222bd3f4394c7938b506c62adde3ba677052982b8177346d5f833ab181049ae700c99e59dd0bf3689c5101fbd352036b9f9774a3dd8c164b1abb5636a6954a922aeccd33e5"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc01}}, {0xe6, &(0x7f00000002c0)=@string={0xe6, 0x3, "130b461dc89de46aa660daa6c79ab8fc1a7e654ed4f21fb5863c947772938524178bfc5efc652ad4a604e749ce615caebfdaa52543704e342f9795e02ffa27aae42600cbc907b77f311b9044f74ddfb3d8dcc250e34ab3feefad9a586880eb32b686673cbfef9436dcb2139ed2d23b68db36fd32cd6772b468f7953eee27cb4e2e1db10e45b90fecc8d03303c4a451988e3c58765e4d902cf55c111c87321b646d324597bf645092abd3c3f0ed571d54582af85ea31eb8b7e5f8e1a777197a657bcbaab4dc1810dbe4c6407a3c2fb4fa0423243d3238ba203d5207736676c22674e8e0b3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x82c}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000d00)='n', 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_int(r3, 0x0, 0x2, &(0x7f00000004c0), &(0x7f0000000580)=0x4) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000480)=0x1, 0x4) 2m56.90960038s ago: executing program 3 (id=1923): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m41.789867076s ago: executing program 35 (id=1923): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m37.810489503s ago: executing program 5 (id=2341): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(0x0, 0x7) 1m37.687327577s ago: executing program 5 (id=2342): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f86dd", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x801) (async) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015002000000006307122040000102030109026e000301094004080b0101010030c50904000000010130000a2401030a00c1000000090401000001023000090401010101023000090501090004030a080a25257f0000000402000904020000010230000904020101010230000905820908008108010a252509000000cd0600"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 32) mincore(&(0x7f0000400000/0xc00000)=nil, 0xc00000, &(0x7f0000000300)=""/117) (rerun: 32) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 1m37.604572242s ago: executing program 5 (id=2343): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000140)={0xff, &(0x7f0000000040)=""/255}) timer_create(0x0, 0x0, &(0x7f0000000b80)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) 1m37.426039651s ago: executing program 5 (id=2344): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0x4, "6c57ef8b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x20, 0x8, 0x4, "494e6ad8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x20, 0x14, 0x4, "79ee2ecd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000000c0)={0x0, 0x18, 0x4, "b7524aeb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m34.247209814s ago: executing program 5 (id=2373): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) 1m31.047746398s ago: executing program 5 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002100010000000000008000000a00000000000001016200000d000d00"], 0x2c}], 0x1}, 0x80) r1 = syz_io_uring_complete(0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0xc) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0x0, 0x102, 0x4, {0xb, 0x4, 0x4, 0x80c5}}) r5 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x9, &(0x7f00000011c0)={@flat=@binder={0x73622a85, 0x101}, @flat=@weak_binder={0x77622a85, 0x1100, 0x100000000000003}, @ptr={0x70742a85, 0x0, &(0x7f0000001180)=""/18, 0x0, 0x0, 0x13}}, &(0x7f00000010c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0xfffffffff0000000, 0x100000000}) 1m16.045184434s ago: executing program 36 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002100010000000000008000000a00000000000001016200000d000d00"], 0x2c}], 0x1}, 0x80) r1 = syz_io_uring_complete(0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000380)=0xc) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0x0, 0x102, 0x4, {0xb, 0x4, 0x4, 0x80c5}}) r5 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x9, &(0x7f00000011c0)={@flat=@binder={0x73622a85, 0x101}, @flat=@weak_binder={0x77622a85, 0x1100, 0x100000000000003}, @ptr={0x70742a85, 0x0, &(0x7f0000001180)=""/18, 0x0, 0x0, 0x13}}, &(0x7f00000010c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0xfffffffff0000000, 0x100000000}) 32.901488019s ago: executing program 4 (id=2685): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280)={[], 0xfff6}, &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 32.854256291s ago: executing program 4 (id=2686): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x100c2) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x3, 0xf6e, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x10d}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 32.38368899s ago: executing program 4 (id=2687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000001080)={0x13, 0x10, 0x7, {0x0, r7, 0x1}}, 0x18) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448e"], 0x310) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24040014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb98}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x90) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, r1, 0x121, 0x70bd28, 0x0, {{}, {@void, @val={0xc, 0x99, {0x80003, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2200f044}, 0x8800) 32.374911014s ago: executing program 4 (id=2688): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) prctl$PR_GET_SECCOMP(0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e26, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 31.872483541s ago: executing program 4 (id=2689): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) syz_clone3(&(0x7f0000000480)={0x40b80480, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x2801, 0x0) write(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000000)=0x0) setuid(r3) fchown(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) 30.39123593s ago: executing program 4 (id=2699): mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x208011, 0x0) 15.359548811s ago: executing program 37 (id=2699): mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x208011, 0x0) 8.255449236s ago: executing program 6 (id=2784): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc, 0xfec0ffff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7.990752679s ago: executing program 6 (id=2785): prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x1, 'syz_tun\x00', {}, 0x7fff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xaf, 0xb, "f3fffffeffffff38"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xa) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000000a80)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/78, 0x4e}, {&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000240)=""/6, 0x6}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000000000)={0x77359400}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r6 = msgget(0x0, 0x200) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0x4bf, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}}}, &(0x7f0000000740)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000880)={0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000900)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r7, 0xc0207511, &(0x7f0000000a00)={r8, 0xffff, 0x0, 0x0, r9}) msgrcv(r6, 0x0, 0x0, 0x3, 0x1800) r10 = syz_open_dev$video4linux(&(0x7f0000001140), 0xfffff7ff, 0x100) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, 0x0, &(0x7f00000002c0)) ioctl$sock_inet_SIOCSIFPFLAGS(r11, 0x8934, &(0x7f00000001c0)={'team_slave_1\x00', 0xa}) ioctl$VIDIOC_QUERYSTD(r10, 0x8008563f, 0x0) ioctl(r0, 0x2, &(0x7f0000000200)="c89e580a26fdb579f6d73bc414fd90128c06eef149b7f39badd023e2d93b64b491") 7.503982915s ago: executing program 6 (id=2788): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001010130040904000000010130000a24010e0a0081000000090401"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000001c0)=0x40, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'veth1_to_bond\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, &(0x7f0000000040)) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0xfffffffffffffff8, 0x22980) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000000200)=""/172, 0xac}, {&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f00000004c0)=""/150, 0x96}], 0x4, 0x40, 0x7ff) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r6 = syz_open_pts(r3, 0x200) r7 = dup3(r6, r3, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x12) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x0, 0x52424752, 0x140, 0xb4, 0x0, @stepwise={{0x1ff, 0xfffffff7}, {0x100, 0x5}, {0x465a, 0xffffffff}}}) 6.303433194s ago: executing program 7 (id=2791): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0xc2101, 0x142) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB=' %U\x00'/18, @ANYRES32=0x0, @ANYBLOB="0c00990000000080270000000800a000030000000800a100020000000800a1000900000008009f00030000000500180139000000050018011c0000000800a00009000000"], 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x0) socket$kcm(0x10, 0x2, 0x4) write(r1, &(0x7f00000000c0)='0000:00:06.0', 0x42) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 4.680901943s ago: executing program 8 (id=2796): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7"], 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r1, 0x851, 0x2) landlock_create_ruleset(&(0x7f0000000000)={0x7f6e, 0x0, 0x0, 0x0, 0x30e0eb84d0a45fa6, 0x3}, 0x85, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) mount(0x0, 0x0, &(0x7f0000000240)='selinuxfs\x00', 0x81000, &(0x7f0000000280)='/dev/usbmon#\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000ac0)=""/227, 0xe3}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/189, 0xbd}], 0x4}, 0x400000}], 0x2, 0x20000, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r5], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000280)='fd/3\x00') 4.407672091s ago: executing program 6 (id=2797): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) mmap(&(0x7f00007f7000/0x4000)=nil, 0x4000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 4.191525816s ago: executing program 6 (id=2798): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYRESOCT]) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.038485652s ago: executing program 7 (id=2799): mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x208011, 0x0) (fail_nth: 5) 3.923381549s ago: executing program 7 (id=2800): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_usb_connect$uac3(0x0, 0xd4, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0xa, 0x80, 0x9, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x15, 0x5}, [@multiply_unit={0xb, 0x24, 0xd, 0x10, 0xff, 0x5, 0x100}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0x83, "c817122c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x0, 0x7, {0xa, 0x25, 0x25, 0x0, 0xe, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0xd7, 0x4, "caca"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0xff, "4299917f47802437"}, @as_header={0x17, 0x24, 0x1, 0x4, 0x0, 0x964, 0x4, 0x0, 0xdf, 0x100, 0x9}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0xdf, 0x7, '!', "76daf0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6b, 0xd, 0x2, {0xa, 0x25, 0x25, 0x9367, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x1, 0x7f, 0xd, 0x0, 0x5}, 0x19, &(0x7f0000000440)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "221983a40e57775452d1d89117f5280a"}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1409}}, {0xd8, &(0x7f00000004c0)=@string={0xd8, 0x3, "e177f7da1221d80000e4325dc8200cfe4cba9c2c7efe8c915a21222d6cc7fd66d256505ee2d79a46a0216dbb8d1600311a560cf1358f48cac50f3ba463e2d3e762eaf0e6f307b32205484cdedc4812fb06e7879c748f175a46f5c154bef3223444bd099fc88b392b54c5adc5b6c1d4156fa60108841e3592b0cf22c1c485fd583e6413e5b4ea6b673706df1aa834e1709ba4bb6d5800d3962f4f476edd75f960ccfdcae4abddc3186c2b9bf8fac1c639a4dd8d2d06ac0aa37d1f7c9982ece3882cc26a9af6103ecea85108a556524ac1f5c566797f20"}}, {0xec, &(0x7f0000000600)=@string={0xec, 0x3, "81a759c005a4e93c9dcc18de053442d2e9b0e2977543d99fc631dcbd90ec9122d13df55f3fe10fe0ce929ed8dd44eb561a4d3d5238cc47dd2dd25159263b7fbbfcb35a5802180935669f2c159b1ade6b51472dcca573fd0081f5d2b4928f0c87c78ba172de174347599b73f361da3028fde8c7d2c7c701d3ef3212544150f6748e241eae975bcc5edadabcc911c9a892a0bf12e88f5566eab76cc5b9b946a49a6472e0e31a8777b3aab2d24f7f8653b5a0e9aa0aa6ae7d1ef28025312231d3cbe3225b892553b235353ab5d9240b543e35342b95c00914719d7d3ae879bef1c99a88a0105291315a6a61"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x4ff}}]}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x4010) r2 = socket$kcm(0x2, 0x2, 0x73) sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="fdc9d14fe1b6c414b1b7715bda1dd9b3c72398a3229b1534e00d95c6330ff28f2ec4746da81d532d881e3c730f7ea8c9f76eb4fe86a03cae4f96b8a4d9e5e5170133505dbe604f40fef1e9015733634c0134acd7a1f29a0f49f8b8021956a1d351c95aa16e049ed0cb22d14fd3d04e66291665ad0ff55fc6fd62154d8ead30ffd99b7ba9a761c19f0e798987f3961a"], 0x208}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000008060000", @ANYRES64=r3], 0xfdef) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x141000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40084149, &(0x7f0000000040)) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) syz_usb_ep_read(r1, 0x2, 0xcf, &(0x7f0000000800)=""/207) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f00000005c0)={[{}]}) 3.830260444s ago: executing program 9 (id=2801): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x28) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$inet(0x2, 0x3, 0x7f) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) 3.273566524s ago: executing program 8 (id=2802): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) prctl$PR_GET_SECCOMP(0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e26, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 2.79514322s ago: executing program 9 (id=2803): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) prctl$PR_GET_SECCOMP(0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e26, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 2.4027351s ago: executing program 8 (id=2804): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x21, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.124074617s ago: executing program 9 (id=2805): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x38011, r2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) write$char_usb(r2, &(0x7f0000000040)='N', 0x1) 1.827821105s ago: executing program 8 (id=2806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) readv(r1, &(0x7f0000002440)=[{&(0x7f0000002380)=""/92, 0x5c}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140240000001c000580090001006d657461000000000c000280080002400023001b0900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 1.756705656s ago: executing program 8 (id=2807): r0 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="000302b891000203"]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') preadv(r1, &(0x7f0000002b40)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1, 0x5, 0xfffffff4) read$hidraw(r1, &(0x7f0000000000)=""/43, 0x2b) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2b98, &(0x7f0000000280)={0x0, 0xbe9, 0x8000, 0x0, 0x39a, 0x0, r1}, &(0x7f00000003c0), &(0x7f0000000980), &(0x7f00000009c0)=0x0) syz_ublk_add_dev(r1, 0x0, 0x0, r3, &(0x7f0000000d00)={0x2e, 0x34, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xfd4, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x80}}}, &(0x7f00000004c0)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0x1e, 0xfffa, 0x7, 0x4fea}, 0x10, [0xfe, 0x9, 0x7fff, 0x3, 0x6, 0x5, 0x3, 0x6, 0x5, 0x84, 0x2, 0x2, 0x0, 0x9, 0x8135, 0xd97, 0x0, 0x60000, 0x4, 0x1, 0x4, 0xfffffff7, 0x6, 0x40, 0x13a, 0x4c7d, 0xffffecdc, 0x152f81f4, 0x3, 0x5, 0x9aa, 0x6, 0x2, 0x4, 0x76e0, 0xfffffffd, 0x3, 0xe1, 0x6, 0x0, 0x9, 0x4, 0x3, 0x29a, 0x80000001, 0x4, 0x400, 0x3, 0xfffffff8, 0xc52b, 0x1, 0x4, 0x4, 0x7e, 0x8, 0x5, 0x1, 0xc66, 0x1, 0x100, 0x10, 0x6, 0x7d6f, 0x2], [0xf, 0x80000001, 0x5, 0x7, 0x9, 0x5, 0x9, 0xb, 0xd7, 0x9, 0xfaa0, 0x0, 0x0, 0x1, 0x400005, 0x1, 0x0, 0xfffffffd, 0x2, 0x8, 0x1, 0x7, 0x1, 0x3, 0x7, 0x6ac, 0x0, 0x3, 0xe, 0x2, 0x3, 0xf6, 0x1488, 0x15d80, 0x0, 0x9, 0x9, 0x7, 0x3ff, 0x5846, 0x8001, 0xa1, 0x5, 0x3, 0x6, 0x100, 0x0, 0x6, 0x8, 0x7fffffff, 0x6, 0x80, 0x7, 0x5, 0x7, 0x7, 0x0, 0x5, 0xd, 0xf13, 0x5, 0x1ff, 0xff, 0x5], [0x6, 0x9d35, 0x3, 0x954, 0x3, 0x8, 0x7, 0x5, 0x10000, 0xfffffff7, 0x80000000, 0x7, 0x200, 0x8, 0xffff, 0x1000, 0x6, 0x7, 0x1, 0x6, 0x2, 0x7, 0x6, 0x2, 0x2, 0x9, 0xffff, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x7, 0x7, 0x32, 0x10, 0xffffffc0, 0x2a6, 0x5, 0x7, 0x2b, 0x2, 0x8, 0xa12, 0x8, 0x0, 0x3, 0x8, 0x4, 0x7, 0x4c, 0xc, 0xffffffff, 0x6, 0xd54e, 0x80000001, 0xdba6, 0x0, 0x7, 0x3, 0x8c43, 0x90000000, 0x0, 0x4], [0x5c, 0xd85, 0xd69, 0x9, 0x6, 0xa, 0x9, 0x9, 0x9, 0x3, 0x1, 0x13cc, 0x4, 0x9, 0x5, 0x200, 0x6, 0x5de, 0x6, 0x5, 0xfffffffb, 0x3, 0x6, 0x65, 0x3, 0x400, 0x8, 0x3, 0x0, 0x1d, 0x1b3, 0x8, 0x4, 0x8, 0x8, 0xc, 0x6eb4, 0xb, 0xffff, 0x8, 0x30, 0x5, 0x0, 0xfd, 0xa3a, 0x800, 0x7ff, 0x7, 0x0, 0x8, 0x2, 0x2, 0x2, 0x2, 0x81, 0x85, 0x14c2, 0x9, 0x3, 0xd963, 0x0, 0x7, 0x4, 0x7]}, 0x45c) syz_ublk_setup_queues(r6, r4, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) syz_ublk_setup_queues(r6, r9, &(0x7f0000000140)={0x0, 0xbd, 0x8, 0x1, 0x195}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80, 0x1000002, 0x800091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2, 0x4003bfff, 0x1c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.491821794s ago: executing program 6 (id=2808): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0xc2101, 0x142) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0xfffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB=' %U\x00'/18, @ANYRES32=0x0, @ANYBLOB="0c00990000000080270000000800a000030000000800a100020000000800a1000900000008009f00030000000500180139000000050018011c0000000800a00009000000"], 0x60}, 0x1, 0x0, 0x0, 0x4011}, 0x0) socket$kcm(0x10, 0x2, 0x4) write(r1, &(0x7f00000000c0)='0000:00:06.0', 0x42) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 739.782256ms ago: executing program 7 (id=2809): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 715.062154ms ago: executing program 7 (id=2810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xe00) 567.673743ms ago: executing program 9 (id=2811): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 191.542816ms ago: executing program 7 (id=2812): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000050000000000000000000000000000000000000000000000000000000000000004000000"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000b06010200000000e0ffff"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 182.636454ms ago: executing program 9 (id=2813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0800a0002609000008009f000a000000080026006c09"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req={0xeb49, 0x2, 0x5, 0x7fffffff}, 0x10) shutdown(r0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x88300, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './security\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) 102.469834ms ago: executing program 8 (id=2814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000180)=[@wr_crn={0x67, 0x20, {0x0, 0x6}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest16=0x80a, 0x7, 0x3, 0x90}}, @in_dx={0x69, 0x20, {0x9b03}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4802, 0x3, 0x7fffffffffffffff, 0xfffffffffffffff8}}, @nested_amd_vmload={0x182, 0x18, 0x2}], 0xc8}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffc}) 0s ago: executing program 9 (id=2815): r0 = syz_usbip_server_init(0x3) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x2, 0x800, 0x800}) (async) r2 = syz_open_dev$admmidi(&(0x7f0000000040), 0x8e3e, 0x40001) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) (async) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000002100)={0x8, 0x7, 0x2, 0x5, 0x10, "129e8a1b5d73e918b120aab1426b6b45cc0dc6"}) r4 = syz_open_dev$evdev(&(0x7f0000002140), 0x1, 0x880402) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002180)=""/155) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002240), 0x80200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r5, 0xc01864c1, &(0x7f0000002280)={0x0, 0x1, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000002480)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000002440)={&(0x7f0000002300)={0x134, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xfc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f00000024c0)={0x7fa, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000002500)={0x0, 0x5, 0xdddd0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil, 0x100, r8}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000025c0)={0x6040, r7}, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000002600)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f0000002640)={0x0, 0x1, r6}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000002680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r5, 0xc01864cb, &(0x7f0000002740)={&(0x7f00000026c0)=[r9, r10, r11], &(0x7f0000002700)=[0x9, 0xb, 0x100, 0x4], 0x3, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f00000047c0)={0x18, 0x0, r12, {0x7}}, 0x18) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004800)={0xffffffffffffffff}) recvfrom$l2tp6(r13, &(0x7f0000004840)=""/232, 0xe8, 0x10000, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r5, 0xc00864c0, &(0x7f0000004940)={r10}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000049c0)={&(0x7f0000004980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000004a00)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000004b00)={r14, r15, 0x0, 0x1, 0x98, 0x81, 0x1, 0x7fff, 0x814, 0xd5bff9a7, 0x3, 0x9}) kernel console output (not intermixed with test programs): r 72 using dummy_hcd [ 500.163632][ T5688] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 500.234066][ T2243] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 500.244573][ T2243] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 500.244617][ T2243] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.244637][ T2243] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 500.244717][ T2243] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 500.289770][ T2243] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 500.289807][ T2243] usb 5-1: Product: syz [ 500.289837][ T2243] usb 5-1: Manufacturer: syz [ 500.293626][ T5688] usb 7-1: device descriptor read/64, error -71 [ 500.306777][ T2243] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 500.536742][ T5688] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 500.615657][T14628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.619946][ T2243] usb 5-1: USB disconnect, device number 72 [ 500.663839][ T5688] usb 7-1: device descriptor read/64, error -71 [ 500.774530][ T5688] usb usb7-port1: attempt power cycle [ 501.113595][ T5688] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 501.136090][ T5688] usb 7-1: device descriptor read/8, error -71 [ 501.327196][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.327269][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.380941][ T5688] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 501.395694][ T5688] usb 7-1: device descriptor read/8, error -71 [ 501.444530][T14649] syz.7.2463 (14649): /proc/14648/oom_adj is deprecated, please use /proc/14648/oom_score_adj instead. [ 501.479241][T14652] overlay: Unknown parameter 'default_permissions:/' [ 501.490873][T14652] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 501.503818][ T5688] usb usb7-port1: unable to enumerate USB device [ 501.813511][ T990] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 501.867772][T12785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.891160][T12785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.901782][T12785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.910508][T12785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.919851][T12785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.974602][ T990] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 501.985813][ T990] usb 8-1: config 0 has an invalid interface number: 127 but max is 1 [ 501.985854][ T990] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 501.985890][ T990] usb 8-1: config 0 has no interface number 1 [ 501.985941][ T990] usb 8-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 501.985985][ T990] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 502.042938][ T990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.042982][ T990] usb 8-1: Product: syz [ 502.043014][ T990] usb 8-1: Manufacturer: syz [ 502.043033][ T990] usb 8-1: SerialNumber: syz [ 502.067423][ T990] usb 8-1: config 0 descriptor?? [ 502.075526][ T990] usb-storage 8-1:0.127: USB Mass Storage device detected [ 502.092160][ T990] usb-storage 8-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 502.153809][ T990] usb-storage 8-1:0.0: USB Mass Storage device detected [ 502.197785][ T990] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 502.340959][ T990] usb 8-1: USB disconnect, device number 29 [ 502.551405][T14657] virt_wifi0 speed is unknown, defaulting to 1000 [ 502.735709][ T9934] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.888853][ T9934] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.200517][ T9934] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.392665][T14657] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.392801][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.393318][T14657] bridge_slave_0: entered allmulticast mode [ 503.399124][T14657] bridge_slave_0: entered promiscuous mode [ 503.402348][T14657] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.402522][T14657] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.402670][T14657] bridge_slave_1: entered allmulticast mode [ 503.406513][T14657] bridge_slave_1: entered promiscuous mode [ 503.423803][ T5715] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 503.491498][ T9934] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.575805][ T5715] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 503.577449][ T5715] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 503.577497][ T5715] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.577516][ T5715] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 503.577557][ T5715] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.579412][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 503.579456][ T5715] usb 7-1: Product: syz [ 503.579470][ T5715] usb 7-1: Manufacturer: syz [ 503.622052][ T5715] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 503.682192][T14657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.710500][T14657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.916256][T14657] team0: Port device team_slave_0 added [ 503.930855][T14657] team0: Port device team_slave_1 added [ 503.941732][T14685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.961919][ T5348] usb 7-1: USB disconnect, device number 67 [ 503.964147][ T52] Bluetooth: hci2: command tx timeout [ 504.117473][T14657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.117512][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.117558][T14657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.132674][T14657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.134007][T14657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.134037][T14657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.335940][T14657] hsr_slave_0: entered promiscuous mode [ 504.337075][T14657] hsr_slave_1: entered promiscuous mode [ 504.337892][T14657] debugfs: 'hsr0' already exists in 'hsr' [ 504.337910][T14657] Cannot create hsr debugfs directory [ 504.478190][ T9934] bridge_slave_1: left allmulticast mode [ 504.478238][ T9934] bridge_slave_1: left promiscuous mode [ 504.478464][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.494662][ T9934] bridge_slave_0: left allmulticast mode [ 504.494687][ T9934] bridge_slave_0: left promiscuous mode [ 504.494909][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.303577][ T990] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 505.313643][ T5348] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 505.482271][ T5348] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 505.482496][ T990] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 505.502775][ T990] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 505.502804][ T990] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 505.502866][ T990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.524538][ T5348] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 505.524566][ T5348] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 505.524587][ T5348] usb 5-1: config 0 has no interface number 1 [ 505.524634][ T5348] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 505.524670][ T5348] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 505.590469][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.590497][ T5348] usb 5-1: Product: syz [ 505.590512][ T5348] usb 5-1: Manufacturer: syz [ 505.590527][ T5348] usb 5-1: SerialNumber: syz [ 505.614857][ T5348] usb 5-1: config 0 descriptor?? [ 505.618996][T14657] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 505.632037][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.641231][ T5348] usb-storage 5-1:0.127: USB Mass Storage device detected [ 505.651658][T14657] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 505.676918][ T5348] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 505.700788][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.705615][T14657] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 505.742047][ T5348] usb-storage 5-1:0.0: USB Mass Storage device detected [ 505.756483][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.768567][T14657] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 505.784251][ T5348] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 505.806555][T14657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 505.855876][ T9934] hsr_slave_0: left promiscuous mode [ 505.862242][ T9934] hsr_slave_1: left promiscuous mode [ 505.863377][ T9934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.863396][ T9934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.878599][ T9934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.878620][ T9934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.943718][ T9934] veth1_macvtap: left promiscuous mode [ 505.945927][ T9934] veth1_vlan: left promiscuous mode [ 505.946000][ T9934] veth0_vlan: left promiscuous mode [ 506.008263][ T5715] usb 5-1: USB disconnect, device number 73 [ 506.034728][ T990] gud 8-1:1.0: probe with driver gud failed with error -71 [ 506.043549][ T52] Bluetooth: hci2: command tx timeout [ 506.236945][ T990] usb 8-1: USB disconnect, device number 30 [ 506.377558][ T9934] team0 (unregistering): Port device team_slave_1 removed [ 506.388780][ T9934] team0 (unregistering): Port device team_slave_0 removed [ 506.433558][ T5792] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 506.511381][ T5277] 8021q: adding VLAN 0 to HW filter on device eth17 [ 506.613877][ T5792] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 506.644366][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.644411][ T5792] usb 7-1: Product: syz [ 506.644443][ T5792] usb 7-1: Manufacturer: syz [ 506.644462][ T5792] usb 7-1: SerialNumber: syz [ 506.672470][ T5792] usb 7-1: config 0 descriptor?? [ 506.685596][ T5792] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 506.717707][T14657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.827143][T14657] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.874393][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.875409][ T9937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.892670][ T9943] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.892799][ T9943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.061824][ T9934] IPVS: stop unused estimator thread 0... [ 507.800390][ T5277] 8021q: adding VLAN 0 to HW filter on device eth18 [ 508.123595][ T52] Bluetooth: hci2: command tx timeout [ 508.279752][T14657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.598191][T14760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.611133][T14760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.918722][ T5277] 8021q: adding VLAN 0 to HW filter on device eth19 [ 509.037775][T14657] veth0_vlan: entered promiscuous mode [ 509.051573][T14657] veth1_vlan: entered promiscuous mode [ 509.101103][T14657] veth0_macvtap: entered promiscuous mode [ 509.114273][T14657] veth1_macvtap: entered promiscuous mode [ 509.142321][T14657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.178505][T14657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.223635][ T9934] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.233617][ T9934] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.263701][ T9947] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.273671][ T9947] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.379786][T14842] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2489'. [ 509.448943][ T5792] gspca_stk1135: reg_w 0x350 err -71 [ 509.449997][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462057][ T5792] gspca_stk1135: Sensor write failed [ 509.462108][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462123][ T5792] gspca_stk1135: Sensor write failed [ 509.462150][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462163][ T5792] gspca_stk1135: Sensor read failed [ 509.462192][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462205][ T5792] gspca_stk1135: Sensor read failed [ 509.462215][ T5792] gspca_stk1135: Detected sensor type unknown (0x0) [ 509.462246][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462257][ T5792] gspca_stk1135: Sensor read failed [ 509.462284][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462295][ T5792] gspca_stk1135: Sensor read failed [ 509.462323][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462334][ T5792] gspca_stk1135: Sensor write failed [ 509.462362][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 509.462374][ T5792] gspca_stk1135: Sensor write failed [ 509.480616][ T5792] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 509.577605][ T5792] usb 7-1: USB disconnect, device number 68 [ 509.626599][ T9935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.626667][ T9935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.802725][ T9935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.802773][ T9935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.203850][ T52] Bluetooth: hci2: command tx timeout [ 510.241555][ T5277] 8021q: adding VLAN 0 to HW filter on device eth20 [ 510.780366][T14887] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 510.814567][T14883] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 510.814605][T14883] overlayfs: failed to set xattr on upper [ 510.814618][T14883] overlayfs: ...falling back to redirect_dir=nofollow. [ 510.814630][T14883] overlayfs: ...falling back to index=off. [ 510.814642][T14883] overlayfs: ...falling back to uuid=null. [ 510.814721][T14883] overlayfs: failed to clone lowerpath [ 511.284277][ T5792] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 511.307146][T14904] overlayfs: failed to resolve 'work': -2 [ 511.321556][T14904] openvswitch: netlink: Flow actions attr not present in new flow. [ 511.327820][T14904] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 511.446777][ T5792] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 511.451469][T14904] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2502'. [ 511.465443][ T5792] usb 7-1: config 0 has no interfaces? [ 511.465476][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.481795][ T5792] usb 7-1: config 0 descriptor?? [ 511.726164][ T191] usb 7-1: USB disconnect, device number 69 [ 512.030878][T14902] virt_wifi0 speed is unknown, defaulting to 1000 [ 512.185516][ T191] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 512.333507][ T191] usb 7-1: Using ep0 maxpacket: 8 [ 512.334231][ T191] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 0.40 [ 512.337837][ T191] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.337861][ T191] usb 7-1: Product: syz [ 512.337876][ T191] usb 7-1: Manufacturer: syz [ 512.337913][ T191] usb 7-1: SerialNumber: syz [ 512.579757][ T191] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.580399][ T191] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 512.590769][ T191] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.597226][ T191] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 512.622110][ T191] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 512.707424][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2509'. [ 512.764052][ T5770] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 512.779244][ T191] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 512.835830][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 512.933569][ T5770] usb 8-1: Using ep0 maxpacket: 16 [ 512.940542][ T5770] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 512.954342][ T5770] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.954381][ T5770] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.977152][ T5770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.977189][ T5770] usb 8-1: SerialNumber: syz [ 513.009304][ T5770] usb 8-1: 0:2 : does not exist [ 513.509885][T14952] Scaler: ================= START STATUS ================= [ 513.511788][T14952] Scaler: ================== END STATUS ================== [ 513.693494][ T5792] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 513.803734][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 513.828744][ T5770] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 513.840971][ T5770] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5) [ 513.865220][ T5770] usb 8-1: USB disconnect, device number 31 [ 513.875456][ T5792] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 513.878612][ T5792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.878634][ T5792] usb 9-1: Product: syz [ 513.878649][ T5792] usb 9-1: Manufacturer: syz [ 513.878664][ T5792] usb 9-1: SerialNumber: syz [ 513.915468][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 513.917404][ T5792] usb 9-1: config 0 descriptor?? [ 513.927575][ T5792] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 513.964374][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 513.970814][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 513.982110][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 513.982146][ T10] usb 5-1: config 0 has no interface number 0 [ 513.998288][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.006886][ T10] usb 5-1: Product: syz [ 514.011113][ T10] usb 5-1: Manufacturer: syz [ 514.015819][ T10] usb 5-1: SerialNumber: syz [ 514.022897][ T10] usb 5-1: config 0 descriptor?? [ 514.072814][ T2243] usb 7-1: USB disconnect, device number 70 [ 514.450321][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 514.450370][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 514.662671][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 514.662985][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 514.803012][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2518'. [ 516.496802][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2528'. [ 516.703284][ T5770] usb 5-1: USB disconnect, device number 74 [ 516.783041][ T5792] gspca_stk1135: reg_w 0x351 err -71 [ 516.784096][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784117][ T5792] gspca_stk1135: Sensor write failed [ 516.784148][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784162][ T5792] gspca_stk1135: Sensor write failed [ 516.784193][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784206][ T5792] gspca_stk1135: Sensor read failed [ 516.784236][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784251][ T5792] gspca_stk1135: Sensor read failed [ 516.784262][ T5792] gspca_stk1135: Detected sensor type unknown (0x0) [ 516.784297][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784311][ T5792] gspca_stk1135: Sensor read failed [ 516.784342][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784355][ T5792] gspca_stk1135: Sensor read failed [ 516.784383][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784396][ T5792] gspca_stk1135: Sensor write failed [ 516.784426][ T5792] gspca_stk1135: serial bus timeout: status=0x00 [ 516.784439][ T5792] gspca_stk1135: Sensor write failed [ 516.784516][ T5792] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 516.909162][ T5792] usb 9-1: USB disconnect, device number 2 [ 516.952079][T15010] binder_alloc: 15009: pid 15009 spamming oneway? 1 buffers allocated for a total size of 4096 [ 516.964587][T15010] binder_alloc: 15009: pid 15009 spamming oneway? 2 buffers allocated for a total size of 5120 [ 517.222451][T15016] kernel profiling enabled (shift: 16) [ 517.658570][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2538'. [ 517.693490][ T5770] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 517.703612][ T5792] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 517.823761][ T5770] usb 8-1: device descriptor read/64, error -71 [ 517.863766][ T5792] usb 9-1: Using ep0 maxpacket: 32 [ 517.871982][ T5792] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 517.882785][ T5792] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 517.890994][ T5792] usb 9-1: config 0 has no interface number 0 [ 517.900451][ T5792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.908575][ T5792] usb 9-1: Product: syz [ 517.908596][ T5792] usb 9-1: Manufacturer: syz [ 517.908612][ T5792] usb 9-1: SerialNumber: syz [ 517.924781][ T5792] usb 9-1: config 0 descriptor?? [ 518.064555][ T5770] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 518.203569][ T5770] usb 8-1: device descriptor read/64, error -71 [ 518.314901][ T5770] usb usb8-port1: attempt power cycle [ 518.333665][ T30] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 518.341521][ T5792] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 518.352525][ T5792] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 518.408198][T15047] fuse: Unknown parameter '00000000000000000000' [ 518.526998][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 518.537407][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 518.537448][ T30] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.537512][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.537554][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.553312][ T30] usbtmc 7-1:16.0: bulk endpoints not found [ 518.574366][ T5792] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 518.574648][ T5792] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32 [ 518.653557][ T5770] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 518.673990][ T5770] usb 8-1: device descriptor read/8, error -71 [ 518.913492][ T5770] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 518.934227][ T5770] usb 8-1: device descriptor read/8, error -71 [ 519.044630][ T5770] usb usb8-port1: unable to enumerate USB device [ 519.263545][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 519.413498][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 519.414728][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 519.414787][ T10] usb 5-1: too many configurations: 180, using maximum allowed: 8 [ 519.415382][ T10] usb 5-1: config 0 has no interfaces? [ 519.415861][ T10] usb 5-1: config 0 has no interfaces? [ 519.416520][ T10] usb 5-1: config 0 has no interfaces? [ 519.417166][ T10] usb 5-1: config 0 has no interfaces? [ 519.417805][ T10] usb 5-1: config 0 has no interfaces? [ 519.418444][ T10] usb 5-1: config 0 has no interfaces? [ 519.419093][ T10] usb 5-1: config 0 has no interfaces? [ 519.419572][ T10] usb 5-1: config 0 has no interfaces? [ 519.421353][ T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 519.421378][ T10] usb 5-1: Product: syz [ 519.421397][ T10] usb 5-1: Manufacturer: syz [ 519.430721][ T10] usb 5-1: config 0 descriptor?? [ 519.655272][T15052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 519.707995][ T2243] usb 5-1: USB disconnect, device number 75 [ 520.540176][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2547'. [ 520.566665][ T10] usb 9-1: USB disconnect, device number 3 [ 521.203791][ T5792] usb 7-1: USB disconnect, device number 71 [ 521.654085][ T5792] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 521.804712][ T5792] usb 7-1: Using ep0 maxpacket: 32 [ 521.807033][ T5792] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 521.810316][ T5792] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 521.810346][ T5792] usb 7-1: config 0 has no interface number 0 [ 521.817433][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.817458][ T5792] usb 7-1: Product: syz [ 521.817473][ T5792] usb 7-1: Manufacturer: syz [ 521.817487][ T5792] usb 7-1: SerialNumber: syz [ 521.828608][ T5792] usb 7-1: config 0 descriptor?? [ 522.269315][ T5792] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 522.269367][ T5792] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 522.471734][ T5792] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 522.472009][ T5792] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 522.733627][ T5792] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 522.886170][ T5792] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 522.888080][ T5792] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 522.888107][ T5792] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 522.888128][ T5792] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.888168][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.904726][ T5792] usbtmc 5-1:16.0: bulk endpoints not found [ 523.521895][T15181] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2568'. [ 524.377082][ T5715] usb 7-1: USB disconnect, device number 72 [ 524.692538][T15221] vcan0: tx address claim with broadcast sa [ 525.199249][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2579'. [ 525.491998][ T5715] usb 5-1: USB disconnect, device number 76 [ 525.563765][ T5348] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 525.623728][ T30] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 525.733570][ T5348] usb 7-1: Using ep0 maxpacket: 32 [ 525.739750][ T5348] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 525.753666][ T5348] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 525.753704][ T5348] usb 7-1: config 0 has no interface number 0 [ 525.773969][ T5348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.782447][ T5348] usb 7-1: Product: syz [ 525.782489][ T5348] usb 7-1: Manufacturer: syz [ 525.782682][ T5348] usb 7-1: SerialNumber: syz [ 525.798989][ T30] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 525.814818][ T5348] usb 7-1: config 0 descriptor?? [ 525.820053][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.820091][ T30] usb 8-1: Product: syz [ 525.820126][ T30] usb 8-1: Manufacturer: syz [ 525.820144][ T30] usb 8-1: SerialNumber: syz [ 525.851809][ T30] usb 8-1: config 0 descriptor?? [ 525.865754][ T30] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 526.052664][T15256] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 526.052664][T15256] The task syz.4.2585 (15256) triggered the difference, watch for misbehavior. [ 526.282110][ T5348] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 526.282171][ T5348] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 526.304608][ T5715] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 526.323540][ T5770] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 526.433540][ T5715] usb 5-1: device descriptor read/64, error -71 [ 526.474319][ T5770] usb 9-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 526.475568][ T5770] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 526.475597][ T5770] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.475646][ T5770] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 526.475683][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.479793][T15259] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 526.487579][ T5348] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 526.487861][ T5348] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 526.683237][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.684127][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.685148][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.685637][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.686655][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.687139][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.688044][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.690433][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.691799][T15259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.692965][T15259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.703303][T12785] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 526.703524][T12785] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 526.770262][ T5715] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 526.933617][ T5715] usb 5-1: device descriptor read/64, error -71 [ 527.030366][ T5770] usb 9-1: USB disconnect, device number 4 [ 527.041333][ T52] Bluetooth: hci4: Reading Intel version command failed (-71) [ 527.049328][ T5715] usb usb5-port1: attempt power cycle [ 527.207168][ T30] gspca_stk1135: reg_w 0xd err -71 [ 527.208224][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208237][ T30] gspca_stk1135: Sensor write failed [ 527.208264][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208274][ T30] gspca_stk1135: Sensor write failed [ 527.208301][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208312][ T30] gspca_stk1135: Sensor read failed [ 527.208339][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208349][ T30] gspca_stk1135: Sensor read failed [ 527.208356][ T30] gspca_stk1135: Detected sensor type unknown (0x0) [ 527.208399][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208409][ T30] gspca_stk1135: Sensor read failed [ 527.208437][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208446][ T30] gspca_stk1135: Sensor read failed [ 527.208470][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208479][ T30] gspca_stk1135: Sensor write failed [ 527.208506][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 527.208515][ T30] gspca_stk1135: Sensor write failed [ 527.208585][ T30] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 527.220637][ T30] usb 8-1: USB disconnect, device number 36 [ 527.403588][ T5715] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 527.424771][ T5715] usb 5-1: device descriptor read/8, error -71 [ 527.663906][ T5715] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 527.683913][ T5715] usb 5-1: device descriptor read/8, error -71 [ 527.795506][ T5715] usb usb5-port1: unable to enumerate USB device [ 528.356785][ T30] usb 7-1: USB disconnect, device number 73 [ 528.395409][ T5770] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 528.564056][ T5770] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.574310][ T5770] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.584189][ T5770] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 528.584221][ T5770] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.584265][ T5770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.597111][ T5770] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 528.943514][ T5770] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 529.085840][ T5770] usb 7-1: device descriptor read/64, error -71 [ 529.190800][T15313] netlink: 'syz.4.2599': attribute type 4 has an invalid length. [ 529.364008][ T5770] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 529.493999][ T5770] usb 7-1: device descriptor read/64, error -71 [ 529.603951][ T5770] usb usb7-port1: attempt power cycle [ 529.628671][T15326] FAULT_INJECTION: forcing a failure. [ 529.628671][T15326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.642110][T15326] CPU: 0 UID: 0 PID: 15326 Comm: syz.4.2603 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.642142][T15326] Tainted: [L]=SOFTLOCKUP [ 529.642153][T15326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.642166][T15326] Call Trace: [ 529.642175][T15326] [ 529.642184][T15326] dump_stack_lvl+0xe8/0x150 [ 529.642217][T15326] should_fail_ex+0x410/0x560 [ 529.642249][T15326] _copy_from_iter+0x1d3/0x1660 [ 529.642346][T15326] ? __alloc_skb+0x27a/0x7a0 [ 529.642413][T15326] ? __alloc_skb+0x27a/0x7a0 [ 529.642436][T15326] ? __alloc_skb+0x27a/0x7a0 [ 529.642465][T15326] ? __pfx__copy_from_iter+0x10/0x10 [ 529.642492][T15326] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 529.642516][T15326] ? __alloc_skb+0x27a/0x7a0 [ 529.642535][T15326] ? __alloc_skb+0x27a/0x7a0 [ 529.642562][T15326] ? netlink_sendmsg+0x650/0xb40 [ 529.642659][T15326] ? skb_put+0x112/0x210 [ 529.642710][T15326] netlink_sendmsg+0x6c0/0xb40 [ 529.642744][T15326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.642777][T15326] ? apparmor_socket_sendmsg+0x98/0x360 [ 529.642837][T15326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.642863][T15326] sock_sendmsg_nosec+0x13a/0x180 [ 529.642901][T15326] ____sys_sendmsg+0x54e/0x850 [ 529.642931][T15326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.642963][T15326] ? import_iovec+0x73/0xa0 [ 529.642985][T15326] ___sys_sendmsg+0x2a5/0x360 [ 529.643008][T15326] ? __lock_acquire+0x6df/0x2e50 [ 529.643040][T15326] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.643093][T15326] ? __fget_files+0x2a/0x420 [ 529.643115][T15326] ? __fget_files+0x3a2/0x420 [ 529.643145][T15326] __x64_sys_sendmsg+0x1b1/0x290 [ 529.643171][T15326] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.643216][T15326] do_syscall_64+0x166/0x520 [ 529.643235][T15326] ? trace_irq_disable+0x3b/0x140 [ 529.643262][T15326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.643283][T15326] ? clear_bhb_loop+0x70/0xc0 [ 529.643307][T15326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.643327][T15326] RIP: 0033:0x7fb91a79e0d9 [ 529.643346][T15326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.643363][T15326] RSP: 002b:00007fb91b72d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.643385][T15326] RAX: ffffffffffffffda RBX: 00007fb91aa25fa0 RCX: 00007fb91a79e0d9 [ 529.643399][T15326] RDX: 0000000000008800 RSI: 0000200000000300 RDI: 0000000000000003 [ 529.643412][T15326] RBP: 00007fb91b72d090 R08: 0000000000000000 R09: 0000000000000000 [ 529.643425][T15326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.643437][T15326] R13: 00007fb91aa26038 R14: 00007fb91aa25fa0 R15: 00007ffd1ce8eef8 [ 529.643476][T15326] [ 529.964106][ T5770] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 529.997674][ T5770] usb 7-1: device descriptor read/8, error -71 [ 530.267655][ T5770] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 530.305422][ T5770] usb 7-1: device descriptor read/8, error -71 [ 530.413997][ T5770] usb usb7-port1: unable to enumerate USB device [ 531.043484][ T5770] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 531.164232][ T30] usb 8-1: USB disconnect, device number 37 [ 531.194162][ T5770] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 531.197022][ T5770] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 531.197047][ T5770] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 531.197066][ T5770] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.197107][ T5770] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 531.198546][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 531.198569][ T5770] usb 5-1: Product: syz [ 531.198584][ T5770] usb 5-1: Manufacturer: syz [ 531.213844][ T5770] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 531.294863][T15345] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 531.475150][T15338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.483248][ T30] usb 5-1: USB disconnect, device number 81 [ 531.541827][T15353] program syz.7.2612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.756800][ T5348] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 531.883530][ T5348] usb 8-1: device descriptor read/64, error -71 [ 532.123798][ T5348] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 532.254022][ T5348] usb 8-1: device descriptor read/64, error -71 [ 532.324202][ T5770] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 532.365378][ T5348] usb usb8-port1: attempt power cycle [ 532.474717][ T5770] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.475837][ T5770] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.475863][ T5770] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 532.475885][ T5770] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.475923][ T5770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.489616][ T5770] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 532.703518][ T5348] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 532.724987][ T5348] usb 8-1: device descriptor read/8, error -71 [ 532.964198][ T5348] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 532.986280][ T5348] usb 8-1: device descriptor read/8, error -71 [ 533.095679][ T5348] usb usb8-port1: unable to enumerate USB device [ 533.823580][ T5348] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 533.973995][ T5348] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 533.974914][ T5348] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 533.974938][ T5348] usb 7-1: config 1 has no interface number 0 [ 533.974974][ T5348] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 533.974998][ T5348] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 533.975022][ T5348] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 533.976899][ T5348] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.976921][ T5348] usb 7-1: Product: syz [ 533.976936][ T5348] usb 7-1: Manufacturer: syz [ 533.976951][ T5348] usb 7-1: SerialNumber: syz [ 533.980352][T15396] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 534.190794][ T5348] usb 7-1: Error in usbnet_get_endpoints (-71) [ 534.197147][ T5688] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 534.209317][ T5348] usb 7-1: USB disconnect, device number 78 [ 534.356075][ T5688] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 534.367965][ T5688] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 534.368014][ T5688] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 534.368084][ T5688] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 534.368148][ T5688] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.370407][ T5688] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.370431][ T5688] usb 9-1: Product: syz [ 534.370446][ T5688] usb 9-1: Manufacturer: syz [ 534.382127][ T5688] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 534.590299][T15407] ieee802154 phy0 wpan0: encryption failed: -22 [ 534.677150][T15404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.680101][ T5688] usb 9-1: USB disconnect, device number 5 [ 535.111503][ T5770] usb 5-1: USB disconnect, device number 82 [ 535.153633][ T5348] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 535.162224][T15416] syzkaller1: entered promiscuous mode [ 535.162265][T15416] syzkaller1: entered allmulticast mode [ 535.171823][T15416] tipc: Started in network mode [ 535.171864][T15416] tipc: Node identity , cluster identity 4711 [ 535.171878][T15416] tipc: Failed to obtain node identity [ 535.171911][T15416] tipc: Enabling of bearer rejected, failed to enable media [ 535.172518][T15417] tipc: Started in network mode [ 535.172530][T15417] tipc: Node identity , cluster identity 4711 [ 535.172564][T15417] tipc: Failed to obtain node identity [ 535.172588][T15417] tipc: Enabling of bearer rejected, failed to enable media [ 535.222367][T15419] FAULT_INJECTION: forcing a failure. [ 535.222367][T15419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.222402][T15419] CPU: 0 UID: 0 PID: 15419 Comm: syz.4.2633 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.222429][T15419] Tainted: [L]=SOFTLOCKUP [ 535.222439][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.222452][T15419] Call Trace: [ 535.222460][T15419] [ 535.222469][T15419] dump_stack_lvl+0xe8/0x150 [ 535.222500][T15419] should_fail_ex+0x410/0x560 [ 535.222531][T15419] _copy_from_user+0x2d/0xb0 [ 535.222552][T15419] memdup_user+0x5e/0xd0 [ 535.222581][T15419] strndup_user+0x68/0xd0 [ 535.222609][T15419] __se_sys_mount+0x9d/0x420 [ 535.222631][T15419] ? ksys_write+0x242/0x270 [ 535.222658][T15419] ? __pfx___se_sys_mount+0x10/0x10 [ 535.222690][T15419] ? __x64_sys_mount+0x20/0xc0 [ 535.222715][T15419] do_syscall_64+0x166/0x520 [ 535.222733][T15419] ? trace_irq_disable+0x3b/0x140 [ 535.222760][T15419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.222779][T15419] ? clear_bhb_loop+0x70/0xc0 [ 535.222803][T15419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.222823][T15419] RIP: 0033:0x7fb91a79e0d9 [ 535.222840][T15419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.222858][T15419] RSP: 002b:00007fb91b72d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.222880][T15419] RAX: ffffffffffffffda RBX: 00007fb91aa25fa0 RCX: 00007fb91a79e0d9 [ 535.222906][T15419] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000040 [ 535.222920][T15419] RBP: 00007fb91b72d090 R08: 0000000000000000 R09: 0000000000000000 [ 535.222932][T15419] R10: 0000000000208011 R11: 0000000000000246 R12: 0000000000000001 [ 535.222945][T15419] R13: 00007fb91aa26038 R14: 00007fb91aa25fa0 R15: 00007ffd1ce8eef8 [ 535.222975][T15419] [ 535.378646][ T5348] usb 7-1: device descriptor read/64, error -71 [ 535.618023][ T5348] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 535.773868][ T5348] usb 7-1: device descriptor read/64, error -71 [ 535.866898][ T191] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 535.894046][ T5348] usb usb7-port1: attempt power cycle [ 535.994399][ T191] usb 9-1: device descriptor read/64, error -71 [ 536.245233][ T5348] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 536.279023][ T5348] usb 7-1: device descriptor read/8, error -71 [ 536.316059][ T191] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 536.453547][ T191] usb 9-1: device descriptor read/64, error -71 [ 536.513482][ T5348] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 536.533692][ T5770] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 536.534573][ T5348] usb 7-1: device descriptor read/8, error -71 [ 536.563773][ T191] usb usb9-port1: attempt power cycle [ 536.643964][ T5348] usb usb7-port1: unable to enumerate USB device [ 536.685958][ T5770] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.687167][ T5770] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.687194][ T5770] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 536.687216][ T5770] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.687256][ T5770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.696686][ T5770] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 536.705320][ T5688] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 536.905391][ T191] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 536.906514][ T5688] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 536.907673][ T5688] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 536.907697][ T5688] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 536.907721][ T5688] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 536.907793][ T5688] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 536.909513][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 536.909536][ T5688] usb 5-1: Product: syz [ 536.909550][ T5688] usb 5-1: Manufacturer: syz [ 536.921117][ T5688] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 536.924780][ T191] usb 9-1: device descriptor read/8, error -71 [ 537.173620][ T191] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 537.186220][T15450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.188776][ T5770] usb 5-1: USB disconnect, device number 83 [ 537.203221][ T191] usb 9-1: device descriptor read/8, error -71 [ 537.303845][ T191] usb usb9-port1: unable to enumerate USB device [ 538.559847][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2649'. [ 538.654375][ T5792] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 538.818170][ T5792] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 538.820129][ T5792] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 538.820180][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.821260][ T5792] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 538.821283][ T5792] usb 5-1: Manufacturer: syz [ 538.827180][ T5792] usb 5-1: config 0 descriptor?? [ 538.986548][T15481] virt_wifi0 speed is unknown, defaulting to 1000 [ 539.005990][ T5792] rc_core: IR keymap rc-hauppauge not found [ 539.006019][ T5792] Registered IR keymap rc-empty [ 539.043258][ T5792] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 539.052794][T15467] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2647'. [ 539.061662][ T5792] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 539.135342][T15467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.147475][T15467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.215446][ T5770] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 539.243605][T12785] Bluetooth: hci1: command 0x0406 tx timeout [ 539.345078][ T5348] usb 5-1: USB disconnect, device number 84 [ 539.367607][ T5792] usb 8-1: USB disconnect, device number 42 [ 539.384909][ T5770] usb 7-1: Using ep0 maxpacket: 16 [ 539.391187][ T5770] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 539.401379][ T5770] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.415398][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.415443][ T5770] usb 7-1: Product: syz [ 539.415473][ T5770] usb 7-1: Manufacturer: syz [ 539.415497][ T5770] usb 7-1: SerialNumber: syz [ 539.427543][ T5770] usb 7-1: config 0 descriptor?? [ 539.512339][T15481] virt_wifi0 speed is unknown, defaulting to 1000 [ 539.637273][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.645884][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.646904][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.650810][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.651699][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.652081][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.658744][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.659135][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.663144][T15482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.666618][T15482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.829781][T15481] virt_wifi0 speed is unknown, defaulting to 1000 [ 540.403527][ T191] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 540.455998][T15510] syzkaller1: entered promiscuous mode [ 540.456047][T15510] syzkaller1: entered allmulticast mode [ 540.531745][T15513] syzkaller1: left promiscuous mode [ 540.531792][T15513] syzkaller1: left allmulticast mode [ 540.559326][ T191] usb 5-1: unable to get BOS descriptor or descriptor too short [ 540.559422][ T191] usb 5-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 540.577110][ T191] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 540.577149][ T191] usb 5-1: config 1 has an invalid interface association descriptor of length 3, skipping [ 540.577211][ T191] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.577234][ T191] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 540.577255][ T191] usb 5-1: config 1 has no interface number 1 [ 540.577302][ T191] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.637247][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.637288][ T191] usb 5-1: Product: syz [ 540.637342][ T191] usb 5-1: Manufacturer: syz [ 540.637361][ T191] usb 5-1: SerialNumber: syz [ 540.803976][ T5348] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 540.880534][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.881038][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2663'. [ 540.881060][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2663'. [ 540.888038][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.966705][ T5348] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 8.00 [ 540.970177][ T5348] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.970207][ T5348] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 540.970243][ T5348] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.999034][ T5348] pl2303 9-1:1.0: pl2303 converter detected [ 540.999326][ T5348] pl2303 9-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 541.146718][ T191] usb 5-1: USB disconnect, device number 85 [ 541.265067][ T7341] udevd[7341]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 541.590183][T15528] FAULT_INJECTION: forcing a failure. [ 541.590183][T15528] name failslab, interval 1, probability 0, space 0, times 0 [ 541.590240][T15528] CPU: 1 UID: 0 PID: 15528 Comm: syz.6.2667 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.590276][T15528] Tainted: [L]=SOFTLOCKUP [ 541.590282][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.590292][T15528] Call Trace: [ 541.590299][T15528] [ 541.590307][T15528] dump_stack_lvl+0xe8/0x150 [ 541.590337][T15528] should_fail_ex+0x410/0x560 [ 541.590370][T15528] should_failslab+0xa8/0x100 [ 541.590390][T15528] ? skb_clone+0x212/0x3a0 [ 541.590415][T15528] kmem_cache_alloc_noprof+0xa1/0x600 [ 541.590443][T15528] ? skb_clone+0x212/0x3a0 [ 541.590475][T15528] skb_clone+0x212/0x3a0 [ 541.590503][T15528] __netlink_deliver_tap+0x413/0x860 [ 541.590541][T15528] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.590569][T15528] netlink_deliver_tap+0x19c/0x1b0 [ 541.590595][T15528] netlink_unicast+0x781/0x940 [ 541.590629][T15528] netlink_sendmsg+0x813/0xb40 [ 541.590664][T15528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.590697][T15528] ? apparmor_socket_sendmsg+0x98/0x360 [ 541.590726][T15528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.590751][T15528] sock_sendmsg_nosec+0x13a/0x180 [ 541.590782][T15528] ____sys_sendmsg+0x54e/0x850 [ 541.590812][T15528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.590845][T15528] ? import_iovec+0x73/0xa0 [ 541.590868][T15528] ___sys_sendmsg+0x2a5/0x360 [ 541.590890][T15528] ? __lock_acquire+0x6df/0x2e50 [ 541.590922][T15528] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.590979][T15528] ? __fget_files+0x2a/0x420 [ 541.591000][T15528] ? __fget_files+0x3a2/0x420 [ 541.591032][T15528] __x64_sys_sendmsg+0x1b1/0x290 [ 541.591059][T15528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.591102][T15528] do_syscall_64+0x166/0x520 [ 541.591121][T15528] ? trace_irq_disable+0x3b/0x140 [ 541.591148][T15528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.591168][T15528] ? clear_bhb_loop+0x70/0xc0 [ 541.591191][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.591211][T15528] RIP: 0033:0x7f093699e0d9 [ 541.591229][T15528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.591246][T15528] RSP: 002b:00007f093777f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.591273][T15528] RAX: ffffffffffffffda RBX: 00007f0936c25fa0 RCX: 00007f093699e0d9 [ 541.591288][T15528] RDX: 0000000000008800 RSI: 0000200000000300 RDI: 0000000000000003 [ 541.591301][T15528] RBP: 00007f093777f090 R08: 0000000000000000 R09: 0000000000000000 [ 541.591313][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.591326][T15528] R13: 00007f0936c26038 R14: 00007f0936c25fa0 R15: 00007ffc45e7c5f8 [ 541.591356][T15528] [ 541.913542][ T5688] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 542.043535][ T5688] usb 5-1: device descriptor read/64, error -71 [ 542.283837][ T5688] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 542.433499][ T5688] usb 5-1: device descriptor read/64, error -71 [ 542.544055][ T5688] usb usb5-port1: attempt power cycle [ 542.913869][ T5688] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 542.952926][ T5688] usb 5-1: device descriptor read/8, error -71 [ 542.982078][ T5715] usb 7-1: USB disconnect, device number 83 [ 543.185080][ T5688] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 543.215579][ T5688] usb 5-1: device descriptor read/8, error -71 [ 543.324649][ T5688] usb usb5-port1: unable to enumerate USB device [ 543.359037][ T5348] usb 9-1: USB disconnect, device number 10 [ 543.793679][T15548] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 543.803680][T15548] overlayfs: overlapping lowerdir path [ 543.814626][ T5715] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 543.953808][ T5715] usb 7-1: device descriptor read/64, error -71 [ 544.093688][ T5688] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 544.193533][ T5715] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 544.224207][ T5688] usb 8-1: device descriptor read/64, error -71 [ 544.335884][ T5715] usb 7-1: device descriptor read/64, error -71 [ 544.443741][ T5715] usb usb7-port1: attempt power cycle [ 544.464197][ T5688] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 544.597561][ T5688] usb 8-1: device descriptor read/64, error -71 [ 544.703748][ T5688] usb usb8-port1: attempt power cycle [ 544.786162][ T5715] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 544.806654][ T5715] usb 7-1: device descriptor read/8, error -71 [ 544.933493][ T191] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 545.043501][ T5715] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 545.043697][ T5688] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 545.066381][ T5688] usb 8-1: device descriptor read/8, error -71 [ 545.066612][ T5715] usb 7-1: device descriptor read/8, error -71 [ 545.083482][ T191] usb 9-1: Using ep0 maxpacket: 32 [ 545.086183][ T191] usb 9-1: unable to get BOS descriptor or descriptor too short [ 545.086228][ T191] usb 9-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=6f.78 [ 545.087838][ T191] usb 9-1: config 64 has an invalid interface number: 74 but max is 0 [ 545.087884][ T191] usb 9-1: config 64 has no interface number 0 [ 545.087917][ T191] usb 9-1: config 64 interface 74 has no altsetting 0 [ 545.090712][ T191] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.090735][ T191] usb 9-1: Product: syz [ 545.090749][ T191] usb 9-1: Manufacturer: syz [ 545.090763][ T191] usb 9-1: SerialNumber: syz [ 545.176312][ T5715] usb usb7-port1: unable to enumerate USB device [ 545.303544][ T5688] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 545.325799][ T5688] usb 8-1: device descriptor read/8, error -71 [ 545.348244][ T191] usb 9-1: USB disconnect, device number 11 [ 545.434868][ T5688] usb usb8-port1: unable to enumerate USB device [ 545.951122][T15583] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.206620][ T5770] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 546.363467][ T5770] usb 5-1: Using ep0 maxpacket: 32 [ 546.369729][ T5770] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 546.381192][ T5770] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 546.381239][ T5770] usb 5-1: config 0 has no interface number 0 [ 546.381283][ T5770] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 546.381313][ T5770] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.381338][ T5770] usb 5-1: config 0 interface 85 has no altsetting 0 [ 546.426912][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.434984][ T5770] usb 5-1: Product: syz [ 546.439214][ T5770] usb 5-1: Manufacturer: syz [ 546.439233][ T5770] usb 5-1: SerialNumber: syz [ 546.451806][ T5770] usb 5-1: config 0 descriptor?? [ 546.928756][T15604] netlink: 'syz.8.2696': attribute type 10 has an invalid length. [ 546.928802][T15604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.928843][T15604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.945887][T15604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.945906][T15604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.075551][T15611] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2696'. [ 547.082447][T15611] syzkaller1: entered promiscuous mode [ 547.082491][T15611] syzkaller1: entered allmulticast mode [ 547.344708][ T5715] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 547.499591][ T5715] usb 9-1: unable to get BOS descriptor or descriptor too short [ 547.500571][ T5715] usb 9-1: not running at top speed; connect to a high speed hub [ 547.500602][ T5715] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 547.507895][ T5715] usb 9-1: language id specifier not provided by device, defaulting to English [ 547.518676][ T5715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.518700][ T5715] usb 9-1: Product: 銴꽦Z뱇 [ 547.518716][ T5715] usb 9-1: SerialNumber: syz [ 548.121989][ T5715] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.122148][ T5715] usb 9-1: MIDIStreaming interface descriptor not found [ 548.257419][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2701'. [ 548.365306][ T5715] usb 9-1: USB disconnect, device number 12 [ 548.433533][ T5770] appletouch 5-1:0.85: Failed to read mode from device. [ 548.433837][ T5770] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 548.488757][ T5770] usb 5-1: USB disconnect, device number 90 [ 548.601552][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 549.054743][T15638] netlink: 'syz.6.2704': attribute type 10 has an invalid length. [ 549.117907][T15638] team0 (unregistering): Port device team_slave_0 removed [ 549.151649][T15638] team0 (unregistering): Port device team_slave_1 removed [ 549.363884][ T191] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 549.515058][ T191] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 549.518314][ T191] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.518338][ T191] usb 8-1: Product: syz [ 549.518353][ T191] usb 8-1: Manufacturer: syz [ 549.518368][ T191] usb 8-1: SerialNumber: syz [ 549.685537][ T5770] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 549.742734][ T191] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 549.843454][ T5770] usb 7-1: Using ep0 maxpacket: 32 [ 549.849298][ T5770] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 549.860338][ T5770] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 549.869252][ T5770] usb 7-1: config 0 has no interface number 0 [ 549.880789][ T5770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.880827][ T5770] usb 7-1: Product: syz [ 549.880858][ T5770] usb 7-1: Manufacturer: syz [ 549.880876][ T5770] usb 7-1: SerialNumber: syz [ 549.907831][ T5770] usb 7-1: config 0 descriptor?? [ 550.163767][T15654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.173300][T15654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.339527][ T5770] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 550.339575][ T5770] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 550.383192][ T5348] usb 8-1: USB disconnect, device number 47 [ 550.766556][ T191] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 550.766832][ T191] ath9k_htc: Failed to initialize the device [ 550.779980][ T5348] usb 8-1: ath9k_htc: USB layer deinitialized [ 551.191833][ T5770] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 551.203578][ T5770] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 551.356441][T15670] libceph: secret too big 289 [ 552.095516][ T191] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 552.248820][ T191] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.256962][ T191] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 552.257012][ T191] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.257052][ T191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.504100][ T191] usb 9-1: usb_control_msg returned -32 [ 552.504164][ T191] usbtmc 9-1:16.0: can't read capabilities [ 552.523348][ T5770] usb 7-1: USB disconnect, device number 88 [ 552.563293][ T191] usb 9-1: USB disconnect, device number 13 [ 553.500758][T15706] FAULT_INJECTION: forcing a failure. [ 553.500758][T15706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.521404][T15706] CPU: 1 UID: 0 PID: 15706 Comm: syz.6.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.521438][T15706] Tainted: [L]=SOFTLOCKUP [ 553.521447][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.521460][T15706] Call Trace: [ 553.521469][T15706] [ 553.521478][T15706] dump_stack_lvl+0xe8/0x150 [ 553.521511][T15706] should_fail_ex+0x410/0x560 [ 553.521546][T15706] _copy_from_user+0x2d/0xb0 [ 553.521569][T15706] msr_io+0xab/0x8b0 [ 553.521629][T15706] ? lock_acquire+0x115/0x350 [ 553.521655][T15706] ? __pfx_do_get_msr+0x10/0x10 [ 553.521678][T15706] ? __pfx_msr_io+0x10/0x10 [ 553.521702][T15706] ? __srcu_check_read_flavor+0x117/0x260 [ 553.521734][T15706] ? kvm_get_msrs+0x68/0x100 [ 553.521751][T15706] kvm_get_msrs+0x9f/0x100 [ 553.521778][T15706] kvm_arch_vcpu_ioctl+0x11b6/0x23a0 [ 553.521810][T15706] ? lock_acquire+0x115/0x350 [ 553.521838][T15706] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 553.521864][T15706] ? lock_acquire+0x115/0x350 [ 553.521901][T15706] ? is_bpf_text_address+0x26/0x2b0 [ 553.521933][T15706] ? is_bpf_text_address+0x292/0x2b0 [ 553.521954][T15706] ? is_bpf_text_address+0x26/0x2b0 [ 553.521977][T15706] ? kernel_text_address+0xa5/0xe0 [ 553.522022][T15706] ? __kernel_text_address+0xd/0x30 [ 553.522051][T15706] ? unwind_get_return_address+0x4d/0x90 [ 553.522077][T15706] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 553.522104][T15706] ? arch_stack_walk+0xfb/0x150 [ 553.522150][T15706] ? stack_trace_save+0xa9/0x100 [ 553.522175][T15706] ? __pfx_stack_trace_save+0x10/0x10 [ 553.522198][T15706] ? kasan_save_track+0x4f/0x80 [ 553.522237][T15706] ? stack_depot_save_flags+0x33/0x7f0 [ 553.522322][T15706] ? __lock_acquire+0x6df/0x2e50 [ 553.522351][T15706] ? kasan_save_free_info+0x40/0x50 [ 553.522379][T15706] ? kfree+0x1c5/0x650 [ 553.522400][T15706] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 553.522425][T15706] ? security_file_ioctl+0xc3/0x2a0 [ 553.522449][T15706] ? __se_sys_ioctl+0x47/0x170 [ 553.522475][T15706] ? do_syscall_64+0x166/0x520 [ 553.522495][T15706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.522533][T15706] ? __mutex_trylock_common+0x15f/0x270 [ 553.522558][T15706] ? __pfx___mutex_trylock_common+0x10/0x10 [ 553.522583][T15706] ? rcu_is_watching+0x16/0xb0 [ 553.522605][T15706] ? trace_contention_end+0x3d/0x140 [ 553.522627][T15706] ? __mutex_lock+0x30b/0x1550 [ 553.522651][T15706] ? kasan_quarantine_put+0xbb/0x1f0 [ 553.522683][T15706] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 553.522714][T15706] ? __pfx___mutex_lock+0x10/0x10 [ 553.522735][T15706] ? tomoyo_path_number_perm+0x219/0x5f0 [ 553.522764][T15706] ? do_vfs_ioctl+0x116f/0x1530 [ 553.522794][T15706] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 553.522826][T15706] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 553.522862][T15706] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 553.522889][T15706] ? hook_file_ioctl+0x1f2/0x600 [ 553.522935][T15706] ? __fget_files+0x2a/0x420 [ 553.522961][T15706] ? __fget_files+0x2a/0x420 [ 553.522982][T15706] ? __fget_files+0x3a2/0x420 [ 553.523004][T15706] ? __fget_files+0x2a/0x420 [ 553.523030][T15706] ? bpf_lsm_file_ioctl+0x9/0x20 [ 553.523066][T15706] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 553.523095][T15706] __se_sys_ioctl+0xfc/0x170 [ 553.523132][T15706] do_syscall_64+0x166/0x520 [ 553.523150][T15706] ? trace_irq_disable+0x3b/0x140 [ 553.523177][T15706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.523198][T15706] ? clear_bhb_loop+0x70/0xc0 [ 553.523222][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.523242][T15706] RIP: 0033:0x7f093699e0d9 [ 553.523263][T15706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.523280][T15706] RSP: 002b:00007f093777f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.523302][T15706] RAX: ffffffffffffffda RBX: 00007f0936c25fa0 RCX: 00007f093699e0d9 [ 553.523318][T15706] RDX: 0000200000000000 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 553.523332][T15706] RBP: 00007f093777f090 R08: 0000000000000000 R09: 0000000000000000 [ 553.523345][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.523359][T15706] R13: 00007f0936c26038 R14: 00007f0936c25fa0 R15: 00007ffc45e7c5f8 [ 553.523390][T15706] [ 553.643530][ T5792] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 553.815006][ T5792] usb 8-1: device descriptor read/64, error -71 [ 554.084051][ T5792] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 554.214213][ T5792] usb 8-1: device descriptor read/64, error -71 [ 554.326004][ T5792] usb usb8-port1: attempt power cycle [ 554.373509][ T990] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 554.534564][ T990] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.546126][ T990] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 554.546169][ T990] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.546225][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.673505][ T5792] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 554.697385][ T5792] usb 8-1: device descriptor read/8, error -71 [ 554.789179][ T990] usb 7-1: usb_control_msg returned -32 [ 554.795848][ T990] usbtmc 7-1:16.0: can't read capabilities [ 554.822076][ T990] usb 7-1: USB disconnect, device number 89 [ 554.933760][ T5792] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 554.954655][ T5792] usb 8-1: device descriptor read/8, error -71 [ 555.064936][ T5792] usb usb8-port1: unable to enumerate USB device [ 555.296041][ T31] audit: type=1326 audit(1787246383.140:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f4699e0d9 code=0x7ffc0000 [ 555.296555][ T31] audit: type=1326 audit(1787246383.140:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f4695e90e code=0x7ffc0000 [ 555.297117][ T31] audit: type=1326 audit(1787246383.140:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.297441][ T31] audit: type=1326 audit(1787246383.140:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.305295][ T31] audit: type=1326 audit(1787246383.150:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.310484][ T31] audit: type=1326 audit(1787246383.150:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.406620][ T31] audit: type=1326 audit(1787246383.250:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.478202][ T31] audit: type=1326 audit(1787246383.320:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.535368][ T5715] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 555.535952][ T31] audit: type=1326 audit(1787246383.380:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.536853][ T31] audit: type=1326 audit(1787246383.380:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15725 comm="syz.8.2733" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f4699dd6b code=0x7ffc0000 [ 555.623178][T15731] Scaler: ================= START STATUS ================= [ 555.631589][T15731] Scaler: ================== END STATUS ================== [ 555.683571][ T5715] usb 9-1: Using ep0 maxpacket: 8 [ 555.701880][ T5715] usb 9-1: unable to get BOS descriptor or descriptor too short [ 555.701951][ T5715] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07 [ 555.708247][ T5715] usb 9-1: config 1 has an invalid interface number: 8 but max is 0 [ 555.708271][ T5715] usb 9-1: config 1 has no interface number 0 [ 555.708306][ T5715] usb 9-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 555.708350][ T5715] usb 9-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1 [ 555.708375][ T5715] usb 9-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 555.708399][ T5715] usb 9-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 555.708431][ T5715] usb 9-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 555.708457][ T5715] usb 9-1: config 1 interface 8 has no altsetting 0 [ 555.742963][ T5715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.743012][ T5715] usb 9-1: Product: syz [ 555.743027][ T5715] usb 9-1: Manufacturer: syz [ 555.743041][ T5715] usb 9-1: SerialNumber: syz [ 556.233011][ T5715] cxacru 9-1:1.8: usbatm_usb_probe: invalid endpoint 02! [ 556.241897][ T5715] cxacru 9-1:1.8: probe with driver cxacru failed with error -22 [ 556.258018][ T5715] usb 9-1: USB disconnect, device number 14 [ 556.814568][T15746] netlink: 'syz.7.2738': attribute type 1 has an invalid length. [ 557.706413][ T5792] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 557.865076][ T5792] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.875376][ T5792] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 557.875422][ T5792] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.875483][ T5792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.128307][ T5792] usb 8-1: usb_control_msg returned -32 [ 558.128375][ T5792] usbtmc 8-1:16.0: can't read capabilities [ 558.171349][ T5792] usb 8-1: USB disconnect, device number 52 [ 558.883634][ T191] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 559.000496][T15779] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2749'. [ 559.039076][ T191] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.043322][ T191] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.043348][ T191] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 559.043367][ T191] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.043498][ T191] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.049165][ T191] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.049190][ T191] usb 9-1: Product: syz [ 559.049206][ T191] usb 9-1: Manufacturer: syz [ 559.069226][ T191] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 559.436894][T15774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.456421][ T5792] usb 9-1: USB disconnect, device number 15 [ 561.053489][ T5792] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 561.215460][ T990] usb 7-1: new full-speed USB device number 90 using dummy_hcd [ 561.216207][ T5792] usb 9-1: Using ep0 maxpacket: 32 [ 561.223647][ T5792] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 561.242732][ T5792] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 561.242772][ T5792] usb 9-1: config 0 has no interface number 0 [ 561.260408][ T5792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.260436][ T5792] usb 9-1: Product: syz [ 561.260472][ T5792] usb 9-1: Manufacturer: syz [ 561.260491][ T5792] usb 9-1: SerialNumber: syz [ 561.265646][ T5792] usb 9-1: config 0 descriptor?? [ 561.414206][ T990] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 561.426160][ T990] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 561.426231][ T990] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.426270][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.666111][ T990] usb 7-1: usb_control_msg returned -32 [ 561.666176][ T990] usbtmc 7-1:16.0: can't read capabilities [ 561.681904][ T191] usb 7-1: USB disconnect, device number 90 [ 561.707973][ T5792] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 561.708021][ T5792] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 561.972364][T15805] FAULT_INJECTION: forcing a failure. [ 561.972364][T15805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.985817][T15805] CPU: 0 UID: 0 PID: 15805 Comm: syz.7.2759 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.985848][T15805] Tainted: [L]=SOFTLOCKUP [ 561.985856][T15805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 561.985867][T15805] Call Trace: [ 561.985876][T15805] [ 561.985885][T15805] dump_stack_lvl+0xe8/0x150 [ 561.985918][T15805] should_fail_ex+0x410/0x560 [ 561.985956][T15805] _copy_from_user+0x2d/0xb0 [ 561.985978][T15805] memdup_user+0x5e/0xd0 [ 561.986008][T15805] strndup_user+0x68/0xd0 [ 561.986036][T15805] __se_sys_mount+0xdf/0x420 [ 561.986061][T15805] ? ksys_write+0x242/0x270 [ 561.986090][T15805] ? __pfx___se_sys_mount+0x10/0x10 [ 561.986118][T15805] ? __x64_sys_mount+0x20/0xc0 [ 561.986142][T15805] do_syscall_64+0x166/0x520 [ 561.986161][T15805] ? trace_irq_disable+0x3b/0x140 [ 561.986188][T15805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.986209][T15805] ? clear_bhb_loop+0x70/0xc0 [ 561.986233][T15805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.986252][T15805] RIP: 0033:0x7f64c219e0d9 [ 561.986271][T15805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.986288][T15805] RSP: 002b:00007f64c2fc3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 561.986309][T15805] RAX: ffffffffffffffda RBX: 00007f64c2425fa0 RCX: 00007f64c219e0d9 [ 561.986325][T15805] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000040 [ 561.986339][T15805] RBP: 00007f64c2fc3090 R08: 0000000000000000 R09: 0000000000000000 [ 561.986352][T15805] R10: 0000000000208011 R11: 0000000000000246 R12: 0000000000000001 [ 561.986365][T15805] R13: 00007f64c2426038 R14: 00007f64c2425fa0 R15: 00007ffe6503d778 [ 561.986396][T15805] [ 562.552827][ T5792] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 562.553100][ T5792] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 562.575167][ T990] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 562.607230][T15488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 562.624114][T15488] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 562.632371][T15488] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 562.634233][T15488] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 562.634916][T15488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 562.738084][ T990] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 562.752997][ T990] usb 8-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 562.753045][ T990] usb 8-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 11274, setting to 64 [ 562.766538][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.766590][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.801250][ T990] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 562.801311][ T990] usb 8-1: Manufacturer: syz [ 562.801341][ T990] usb 8-1: SerialNumber: syz [ 562.828870][T15809] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 563.046543][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.058309][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.085850][ T990] yealink 8-1:36.0: invalid payload size 64, expected 16 [ 563.101185][ T990] input: Yealink usb-p1k as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:36.0/input/input41 [ 563.137529][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.138352][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.145349][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.146060][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.146346][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.146865][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.147136][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.147414][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.147718][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.147740][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.148014][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.148290][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.148310][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.148585][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.155573][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.155598][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.162495][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.169503][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.169529][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.176471][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.183478][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.183502][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.190432][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.197386][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.197412][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.204374][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.210270][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.210299][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.217320][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.224277][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.224304][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.230198][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.237301][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.237327][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.237528][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.244533][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.244561][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.251197][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.251463][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.251484][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.258434][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.258807][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.258830][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.265783][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.268507][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.268536][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.274506][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.281432][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.281459][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.288358][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.294201][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.294227][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.301134][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.308119][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.308140][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.314030][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.320963][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.320990][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.328217][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.334092][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.334117][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.341033][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.348060][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.348084][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.353970][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.360842][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.360864][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.367798][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.373651][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.373675][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.380571][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.387493][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.387518][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.393394][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.400308][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.400332][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.407351][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.413254][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.413281][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.420258][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.427163][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.427187][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.433061][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.439961][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.439987][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.440209][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.447185][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.447212][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.453123][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.460096][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.460126][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.467026][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.472906][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.472936][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.479850][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.486911][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.486937][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.492799][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.493015][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.493033][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.493255][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.494813][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.494834][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.495076][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.495306][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.495324][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.495547][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.495772][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.495790][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.496015][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.496247][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.496266][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.496488][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.496700][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.496719][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.496912][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.497111][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.497129][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.497327][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.497522][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.497541][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.497731][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.497938][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.497957][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.498198][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.498423][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.498442][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.498659][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.499183][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.499205][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.499432][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.499653][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.499672][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.499888][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.500106][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.500323][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.500540][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.500756][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.500775][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.500988][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.501200][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.501225][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.501433][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.501648][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.501667][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.501875][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.502084][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.502104][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.502313][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.502526][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.502547][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.502741][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.502954][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.502974][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.503171][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.503374][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.503392][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.503591][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.503794][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.503813][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.504016][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.504227][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.504245][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.504444][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.504682][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.504703][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.504956][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.505153][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.505172][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.505373][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.505576][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.505594][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.505791][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.505994][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.506013][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.506210][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.506410][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.506429][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.506622][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.506820][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.506839][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.507032][ C1] yealink 8-1:36.0: urb_ctl_callback - urb status -71 [ 563.507192][ T990] usb 8-1: USB disconnect, device number 53 [ 563.507244][ C1] yealink 8-1:36.0: urb_irq_callback - urb status -71 [ 563.507262][ C1] yealink 8-1:36.0: unexpected response 0 [ 563.507280][ C1] yealink 8-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 563.600268][T13060] usb 7-1: new full-speed USB device number 91 using dummy_hcd [ 563.730853][T15813] virt_wifi0 speed is unknown, defaulting to 1000 [ 563.763116][T13060] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 563.831840][T13060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.831888][T13060] usb 7-1: Product: syz [ 563.831903][T13060] usb 7-1: Manufacturer: syz [ 563.831918][T13060] usb 7-1: SerialNumber: syz [ 563.960652][ T990] usb 9-1: USB disconnect, device number 16 [ 564.035572][T13060] usb 7-1: config 0 descriptor?? [ 564.206823][T15836] ceph: No mds server is up or the cluster is laggy [ 564.211566][ T5792] libceph: connect (1)[c::]:6789 error -99 [ 564.211800][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 564.276296][ T5792] libceph: connect (1)[c::]:6789 error -99 [ 564.276464][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 564.282327][T15839] ceph: No mds server is up or the cluster is laggy [ 564.361868][T13060] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 564.462334][ T9934] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.684160][ T52] Bluetooth: hci4: command tx timeout [ 564.867870][ T9934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.010683][ T9934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.094446][ T191] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 565.264819][ T9934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.276208][ T191] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.288887][ T191] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.300073][ T191] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.313567][ T191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.533810][T13060] gspca_stk1135: reg_w 0xd err -71 [ 565.534895][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.534927][T13060] gspca_stk1135: Sensor write failed [ 565.534958][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.534972][T13060] gspca_stk1135: Sensor write failed [ 565.535032][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.535046][T13060] gspca_stk1135: Sensor read failed [ 565.535077][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.535091][T13060] gspca_stk1135: Sensor read failed [ 565.535102][T13060] gspca_stk1135: Detected sensor type unknown (0x0) [ 565.535164][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.535179][T13060] gspca_stk1135: Sensor read failed [ 565.535207][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.535220][T13060] gspca_stk1135: Sensor read failed [ 565.535248][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.535261][T13060] gspca_stk1135: Sensor write failed [ 565.552288][T13060] gspca_stk1135: serial bus timeout: status=0x00 [ 565.552302][T13060] gspca_stk1135: Sensor write failed [ 565.552404][T13060] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 565.587967][ T191] usb 9-1: GET_CAPABILITIES returned 0 [ 565.588039][ T191] usbtmc 9-1:16.0: can't read capabilities [ 565.667268][T13060] usb 7-1: USB disconnect, device number 91 [ 565.783188][ T5770] usb 9-1: USB disconnect, device number 17 [ 566.090634][ T9934] bridge_slave_1: left allmulticast mode [ 566.096776][ T9934] bridge_slave_1: left promiscuous mode [ 566.103766][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.115641][ T9934] bridge_slave_0: left allmulticast mode [ 566.115680][ T9934] bridge_slave_0: left promiscuous mode [ 566.115885][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.322520][ T9934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.337265][ T9934] bond0 (unregistering): Released all slaves [ 566.367126][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.367768][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.367934][T15813] bridge_slave_0: entered allmulticast mode [ 566.368420][T13060] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 566.417859][T15813] bridge_slave_0: entered promiscuous mode [ 566.466783][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.466896][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.467030][T15813] bridge_slave_1: entered allmulticast mode [ 566.489371][T15813] bridge_slave_1: entered promiscuous mode [ 566.549407][T13060] usb 7-1: Using ep0 maxpacket: 16 [ 566.550159][T13060] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=4c.11 [ 566.551623][T13060] usb 7-1: config 15 has an invalid interface number: 112 but max is 0 [ 566.551654][T13060] usb 7-1: config 15 has no interface number 0 [ 566.551740][T13060] usb 7-1: config 15 interface 112 altsetting 5 bulk endpoint 0xA has invalid maxpacket 64 [ 566.551771][T13060] usb 7-1: config 15 interface 112 has no altsetting 0 [ 566.557921][T13060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.557945][T13060] usb 7-1: Product: syz [ 566.557960][T13060] usb 7-1: Manufacturer: syz [ 566.557997][T13060] usb 7-1: SerialNumber: syz [ 566.577495][T15884] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 566.663724][ T5715] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 566.732951][T15813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.763563][ T52] Bluetooth: hci4: command tx timeout [ 566.797109][T15813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.801226][T15884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.801701][T15884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.812422][T15884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.813004][T15884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.815576][ T5715] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 566.817213][ T5715] usb 9-1: config 0 has an invalid interface number: 175 but max is 0 [ 566.817265][ T5715] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.817284][ T5715] usb 9-1: config 0 has no interface number 0 [ 566.817324][ T5715] usb 9-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 566.817348][ T5715] usb 9-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 566.818942][ T5715] usb 9-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 566.818968][ T5715] usb 9-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 566.822269][ T5715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.822292][ T5715] usb 9-1: Product: syz [ 566.822307][ T5715] usb 9-1: Manufacturer: syz [ 566.822349][ T5715] usb 9-1: SerialNumber: syz [ 566.828947][T15891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.829463][T15891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.834672][ T5715] usb 9-1: config 0 descriptor?? [ 566.848418][T13060] iguanair 7-1:15.112: probe with driver iguanair failed with error -12 [ 566.850612][ T5715] symbolserial 9-1:0.175: symbol converter detected [ 566.865647][ T5715] usb 9-1: symbol converter now attached to ttyUSB0 [ 566.887228][T13060] usb 7-1: USB disconnect, device number 92 [ 567.142930][ T5715] usb 9-1: USB disconnect, device number 18 [ 567.162514][T15813] team0: Port device team_slave_0 added [ 567.185186][T15813] team0: Port device team_slave_1 added [ 567.201618][ T5715] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 567.202367][ T5715] symbolserial 9-1:0.175: device disconnected [ 567.279195][ T9934] hsr_slave_0: left promiscuous mode [ 567.287143][ T9934] hsr_slave_1: left promiscuous mode [ 567.297256][ T9934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.299158][ T9934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.313019][ T9934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.313055][ T9934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.345822][ T9934] veth1_macvtap: left promiscuous mode [ 567.345874][ T9934] veth0_macvtap: left promiscuous mode [ 567.345994][ T9934] veth1_vlan: left promiscuous mode [ 567.346075][ T9934] veth0_vlan: left promiscuous mode [ 568.331576][ T9941] smbdirect: ib_dev[syz2] removed [ 568.352659][ T9934] team0 (unregistering): Port device team_slave_1 removed [ 568.399221][ T9934] team0 (unregistering): Port device team_slave_0 removed [ 568.463792][ T990] usb 8-1: new full-speed USB device number 54 using dummy_hcd [ 568.614137][ T990] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.624704][ T990] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.637029][ T990] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.650216][ T990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.713352][ T5277] 8021q: adding VLAN 0 to HW filter on device eth21 [ 568.733999][T15813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.734060][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.734086][T15813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.739750][T15813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.739765][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.739834][T15813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.845786][ T52] Bluetooth: hci4: command tx timeout [ 568.882299][ T990] usb 8-1: GET_CAPABILITIES returned 0 [ 568.888485][ T990] usbtmc 8-1:16.0: can't read capabilities [ 568.932552][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 568.932663][ T31] audit: type=1800 audit(1787246652.773:73): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2783" name="ipv4_address" dev="configfs" ino=94283 res=0 errno=0 [ 568.937923][ T31] audit: type=1800 audit(1787246652.783:74): pid=15926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2783" name="ipv4_port" dev="configfs" ino=94284 res=0 errno=0 [ 569.002761][T15813] hsr_slave_0: entered promiscuous mode [ 569.007651][T15813] hsr_slave_1: entered promiscuous mode [ 569.013137][T15813] debugfs: 'hsr0' already exists in 'hsr' [ 569.013168][T15813] Cannot create hsr debugfs directory [ 569.107878][ T5715] usb 8-1: USB disconnect, device number 54 [ 569.484365][ T9934] IPVS: stop unused estimator thread 0... [ 570.040636][T15952] netlink: 'syz.8.2787': attribute type 2 has an invalid length. [ 570.040679][T15952] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2787'. [ 570.060435][ T990] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 570.175889][T15952] : entered promiscuous mode [ 570.196330][T15954] syzkaller1: entered promiscuous mode [ 570.196364][T15954] syzkaller1: entered allmulticast mode [ 570.199207][ T5277] 8021q: adding VLAN 0 to HW filter on device eth22 [ 570.216068][ T990] usb 8-1: Using ep0 maxpacket: 8 [ 570.224187][ T990] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.234987][ T990] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 570.235031][ T990] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 570.235068][ T990] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.235097][ T990] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.235141][ T990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.383237][T15813] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 570.413840][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.414799][T15813] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 570.466037][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.467819][T15813] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 570.493876][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.496445][T15813] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 570.515932][ T990] usb 8-1: GET_CAPABILITIES returned 0 [ 570.515988][ T990] usbtmc 8-1:16.0: can't read capabilities [ 570.518174][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 570.538114][T13060] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 570.690576][T15961] MTRR 1 not used [ 570.699502][T13060] usb 7-1: unable to get BOS descriptor or descriptor too short [ 570.699564][T13060] usb 7-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 570.722403][T13060] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.734235][T13060] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 570.748393][T13060] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.756543][T13060] usb 7-1: Product: syz [ 570.761031][T13060] usb 7-1: Manufacturer: syz [ 570.767902][T13060] usb 7-1: SerialNumber: syz [ 570.799146][ T5770] usb 8-1: USB disconnect, device number 55 [ 570.870186][T15813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.896915][T15813] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.915555][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.915669][ T9934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.928294][ T9947] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.928398][ T9947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.930311][ T52] Bluetooth: hci4: command tx timeout [ 571.112001][T15986] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2790'. [ 571.318213][ T5277] 8021q: adding VLAN 0 to HW filter on device eth23 [ 571.671536][T15813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.675003][ T30] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 571.816199][ T30] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 571.822249][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.822273][ T30] usb 8-1: Product: syz [ 571.822287][ T30] usb 8-1: Manufacturer: syz [ 571.822301][ T30] usb 8-1: SerialNumber: syz [ 571.837572][ T30] usb 8-1: config 0 descriptor?? [ 571.848805][ T30] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 572.191519][ T5277] 8021q: adding VLAN 0 to HW filter on device eth24 [ 572.235622][T15813] veth0_vlan: entered promiscuous mode [ 572.262487][T15813] veth1_vlan: entered promiscuous mode [ 572.320718][T15813] veth0_macvtap: entered promiscuous mode [ 572.358554][T15813] veth1_macvtap: entered promiscuous mode [ 572.415516][T15813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.463265][T15813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.545853][ T9941] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.546316][ T9941] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.546353][ T9941] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.546386][ T9941] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.733357][ T9941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.737409][ T9941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.801360][ T9935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.801432][ T9935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.934758][ T30] gspca_stk1135: reg_w 0x7 err -71 [ 572.935892][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.935906][ T30] gspca_stk1135: Sensor write failed [ 572.935934][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.935944][ T30] gspca_stk1135: Sensor write failed [ 572.935971][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.935980][ T30] gspca_stk1135: Sensor read failed [ 572.936008][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.936017][ T30] gspca_stk1135: Sensor read failed [ 572.936024][ T30] gspca_stk1135: Detected sensor type unknown (0x0) [ 572.936056][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.936066][ T30] gspca_stk1135: Sensor read failed [ 572.936092][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.936101][ T30] gspca_stk1135: Sensor read failed [ 572.936126][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.936135][ T30] gspca_stk1135: Sensor write failed [ 572.936169][ T30] gspca_stk1135: serial bus timeout: status=0x00 [ 572.936179][ T30] gspca_stk1135: Sensor write failed [ 572.936252][ T30] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 573.057572][ T30] usb 8-1: USB disconnect, device number 56 [ 573.298537][T13060] usb 7-1: selecting invalid altsetting 1 [ 573.306108][T13060] snd-usb-us122l 7-1:1.1: usb_set_interface error [ 573.306606][T13060] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 573.328235][T13060] usb 7-1: USB disconnect, device number 93 [ 573.365619][ T990] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 573.391979][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 573.397720][T16044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.526054][ T990] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 573.528150][ T990] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 573.528176][ T990] usb 9-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 573.528196][ T990] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 573.528237][ T990] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 573.532408][ T990] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 573.532446][ T990] usb 9-1: Product: syz [ 573.532460][ T990] usb 9-1: Manufacturer: syz [ 573.575699][ T990] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 573.685852][T16049] FAULT_INJECTION: forcing a failure. [ 573.685852][T16049] name failslab, interval 1, probability 0, space 0, times 0 [ 573.685893][T16049] CPU: 0 UID: 0 PID: 16049 Comm: syz.7.2799 Tainted: G L syzkaller #0 PREEMPT(full) [ 573.685917][T16049] Tainted: [L]=SOFTLOCKUP [ 573.685925][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.685936][T16049] Call Trace: [ 573.685946][T16049] [ 573.685955][T16049] dump_stack_lvl+0xe8/0x150 [ 573.685980][T16049] should_fail_ex+0x410/0x560 [ 573.686012][T16049] should_failslab+0xa8/0x100 [ 573.686033][T16049] ? do_getname+0x2e/0x250 [ 573.686052][T16049] kmem_cache_alloc_noprof+0xa1/0x600 [ 573.686080][T16049] ? do_getname+0x2e/0x250 [ 573.686103][T16049] do_getname+0x2e/0x250 [ 573.686120][T16049] ? user_path_at+0x1e/0x160 [ 573.686146][T16049] user_path_at+0x2a/0x160 [ 573.686171][T16049] __se_sys_mount+0x2dc/0x420 [ 573.686198][T16049] ? __pfx___se_sys_mount+0x10/0x10 [ 573.686226][T16049] ? __x64_sys_mount+0x20/0xc0 [ 573.686249][T16049] do_syscall_64+0x166/0x520 [ 573.686268][T16049] ? trace_irq_disable+0x3b/0x140 [ 573.686294][T16049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.686314][T16049] ? clear_bhb_loop+0x70/0xc0 [ 573.686338][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.686357][T16049] RIP: 0033:0x7f64c219e0d9 [ 573.686375][T16049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.686392][T16049] RSP: 002b:00007f64c2fc3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 573.686413][T16049] RAX: ffffffffffffffda RBX: 00007f64c2425fa0 RCX: 00007f64c219e0d9 [ 573.686429][T16049] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000200000000040 [ 573.686443][T16049] RBP: 00007f64c2fc3090 R08: 0000000000000000 R09: 0000000000000000 [ 573.686456][T16049] R10: 0000000000208011 R11: 0000000000000246 R12: 0000000000000001 [ 573.686469][T16049] R13: 00007f64c2426038 R14: 00007f64c2425fa0 R15: 00007ffe6503d778 [ 573.686498][T16049] [ 573.863163][T16041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.866472][ T5688] usb 9-1: USB disconnect, device number 19 [ 573.973704][ T990] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 574.123946][ T990] usb 7-1: Using ep0 maxpacket: 8 [ 574.133028][ T990] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 574.143725][ T990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.143788][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.168529][ T990] usb 7-1: config 0 descriptor?? [ 574.182108][ T990] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 574.303473][ T5688] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 574.456113][ T5688] usb 8-1: Using ep0 maxpacket: 32 [ 574.458244][ T5688] usb 8-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice= 0.40 [ 574.459491][ T5688] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 107, changing to 7 [ 574.462933][ T5688] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.462957][ T5688] usb 8-1: Product: ꞁ쁙ꐅ㳩첝㐅퉂냩韢䍵鿙㇆뷜⊑㷑念鋎䓝囫䴚刽참툭契㬦뭿돼塚᠂㔉齦ᔬ᪛毞䝑찭玥ý듒辒蜌诇犡៞䝃魙⠰틇쟇팁㋯吒偁瓶⒎긞宗廌즼중銨뾠喏沷맅䚹骤牤蜚덷늪俒虿땓પ꺦ṽ胲ㄥㄢ쯓⋣襛匥㖲㨵ତ㹔㐵锫ী焔綝빹짱袚Ⴀ酒娱慪 [ 574.463057][ T5688] usb 8-1: Manufacturer: 矡ℒØ崲⃈︌멌Ⲝﹾ醌⅚ⴢ읬曽囒幐ퟢ䚚↠뭭ᚍ㄀嘚輵쩈࿅ꐻ߳⊳䠅䣜﬒鲇轴娗品㐢뵄鼉诈⬹암얭솶ᗔ꙯ࠁẄ鈵쾰섢藄壽搾杫ط᫟㒨烡꒛涻X雓伯湇痝惹﷌ᣃ⭬쇺㧆ⶍ갆ꌊώ饼裣숬驪ჶ츾冨ꔈ剖셊엵祦ⁿ [ 574.463086][ T5688] usb 8-1: SerialNumber: Ж [ 575.630252][ T990] gspca_vc032x: reg_w err -71 [ 575.630423][ T990] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 575.654749][ T990] usb 7-1: USB disconnect, device number 94 [ 575.974920][T16061] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 576.133485][T16061] usb 10-1: Using ep0 maxpacket: 8 [ 576.134541][T16061] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 576.136503][T16061] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 576.136527][T16061] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.136570][T16061] usb 10-1: config 0 has no interface number 0 [ 576.138785][T16061] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.138809][T16061] usb 10-1: Product: syz [ 576.138822][T16061] usb 10-1: Manufacturer: syz [ 576.138836][T16061] usb 10-1: SerialNumber: syz [ 576.151077][T16061] usb 10-1: config 0 descriptor?? [ 576.243825][ T191] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 576.357051][T16061] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 576.357098][T16061] uvcvideo 10-1:0.31: No valid video chain found. [ 576.393481][ T191] usb 9-1: Using ep0 maxpacket: 32 [ 576.400631][ T191] usb 9-1: unable to get BOS descriptor or descriptor too short [ 576.400690][ T191] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 576.401890][ T191] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 576.401912][ T191] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 576.411070][ T191] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.411096][ T191] usb 9-1: Product: syz [ 576.411111][ T191] usb 9-1: Manufacturer: syz [ 576.411127][ T191] usb 9-1: SerialNumber: syz [ 576.513461][ T990] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 576.569982][T16061] usb 10-1: USB disconnect, device number 2 [ 576.629377][ T191] usb 9-1: unit 4 not found! [ 576.629405][ T191] usb 9-1: unit 0 not found! [ 576.664025][ T990] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 576.676041][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.676071][ T990] usb 7-1: Product: syz [ 576.676276][ T990] usb 7-1: Manufacturer: syz [ 576.676292][ T990] usb 7-1: SerialNumber: syz [ 576.685716][ T990] usb 7-1: config 0 descriptor?? [ 576.689695][ T990] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 577.097928][ T5688] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.107646][ T5688] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 577.118882][ T191] usb 9-1: USB disconnect, device number 20 [ 577.155468][ T5688] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.164408][ T5688] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 577.195434][ T5688] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 577.202665][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 577.300265][ T5688] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 577.316833][ T5688] usb 8-1: USB disconnect, device number 57 [ 577.358717][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 577.729538][T16113] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 577.729565][T16113] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 577.733292][T16113] vhci_hcd vhci_hcd.0: Device attached [ 577.749882][ T990] gspca_stk1135: reg_w 0x7 err -71 [ 577.750918][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.750930][ T990] gspca_stk1135: Sensor write failed [ 577.750958][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.750969][ T990] gspca_stk1135: Sensor write failed [ 577.750996][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.751006][ T990] gspca_stk1135: Sensor read failed [ 577.751038][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.751048][ T990] gspca_stk1135: Sensor read failed [ 577.751056][ ** replaying previous printk message ** [ 577.751056][ T990] gspca_stk1135: Detected sensor type unknown (0x0) [ 577.751088][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.751097][ T990] gspca_stk1135: Sensor read failed [ 577.751124][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.751132][ T990] gspca_stk1135: Sensor read failed [ 577.751158][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.751168][ T990] gspca_stk1135: Sensor write failed [ 577.751195][ T990] gspca_stk1135: serial bus timeout: status=0x00 [ 577.751204][ T990] gspca_stk1135: Sensor write failed [ 577.751271][ T990] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 577.768981][ T990] usb 7-1: USB disconnect, device number 95 [ 577.813001][T16116] [ 577.886084][T16116] ============================================ [ 577.892295][T16116] WARNING: possible recursive locking detected [ 577.898503][T16116] syzkaller #0 Tainted: G L [ 577.904466][T16116] -------------------------------------------- [ 577.910620][T16116] syz.9.2815/16116 is trying to acquire lock: [ 577.916691][T16116] ffff888025f9e160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x48/0x170 [ 577.926669][T16116] [ 577.926669][T16116] but task is already holding lock: [ 577.934021][T16116] ffff8880324aa160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x48/0x170 [ 577.943846][T16116] [ 577.943846][T16116] other info that might help us debug this: [ 577.951892][T16116] Possible unsafe locking scenario: [ 577.951892][T16116] [ 577.959347][T16116] CPU0 [ 577.962659][T16116] ---- [ 577.965958][T16116] lock(&rmidi->open_mutex); [ 577.970661][T16116] lock(&rmidi->open_mutex); [ 577.975322][T16116] [ 577.975322][T16116] *** DEADLOCK *** [ 577.975322][T16116] [ 577.983456][T16116] May be due to missing lock nesting notation [ 577.983456][T16116] [ 577.991805][T16116] locks held by syz.9.2815/16116: 2, last CPU#1: [ 577.998190][T16116] #0: ffff8880324aa160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x48/0x170 [ 578.008465][T16116] #1: ffff888025f9e460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_close+0xe5/0x320 [ 578.018620][T16116] [ 578.018620][T16116] stack backtrace: [ 578.024511][T16116] CPU: 1 UID: 0 PID: 16116 Comm: syz.9.2815 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.035441][T16116] Tainted: [L]=SOFTLOCKUP [ 578.039754][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.049801][T16116] Call Trace: [ 578.053073][T16116] [ 578.056002][T16116] dump_stack_lvl+0xe8/0x150 [ 578.060601][T16116] print_deadlock_bug+0x27a/0x290 [ 578.065623][T16116] __lock_acquire+0x261c/0x2e50 [ 578.070481][T16116] ? __lock_acquire+0x6df/0x2e50 [ 578.075422][T16116] ? __lock_acquire+0x6df/0x2e50 [ 578.080357][T16116] lock_acquire+0x115/0x350 [ 578.084859][T16116] ? rawmidi_release_priv+0x48/0x170 [ 578.090156][T16116] __mutex_lock+0x19d/0x1550 [ 578.094738][T16116] ? rawmidi_release_priv+0x48/0x170 [ 578.100024][T16116] ? __mutex_lock+0x30b/0x1550 [ 578.104774][T16116] ? rawmidi_release_priv+0x48/0x170 [ 578.110059][T16116] ? __pfx___mutex_lock+0x10/0x10 [ 578.115075][T16116] ? snd_rawmidi_drain_output+0x6fc/0x8d0 [ 578.120806][T16116] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.125830][T16116] rawmidi_release_priv+0x48/0x170 [ 578.130941][T16116] snd_rawmidi_kernel_release+0x46/0xa0 [ 578.136481][T16116] snd_ump_legacy_close+0x1f7/0x320 [ 578.141675][T16116] close_substream+0x453/0x790 [ 578.146424][T16116] ? __pfx_close_substream+0x10/0x10 [ 578.151709][T16116] ? __pfx___fsnotify_parent+0x10/0x10 [ 578.157163][T16116] rawmidi_release_priv+0xeb/0x170 [ 578.162266][T16116] snd_rawmidi_release+0x5b/0xc0 [ 578.167197][T16116] ? __pfx_snd_rawmidi_release+0x10/0x10 [ 578.172817][T16116] __fput+0x418/0xa50 [ 578.176788][T16116] task_work_run+0x1d9/0x270 [ 578.181381][T16116] ? __pfx_task_work_run+0x10/0x10 [ 578.186488][T16116] ? do_raw_spin_unlock+0xf5/0x200 [ 578.191597][T16116] do_exit+0x73a/0x2360 [ 578.195783][T16116] ? __pfx_do_exit+0x10/0x10 [ 578.200371][T16116] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.205390][T16116] do_group_exit+0x22d/0x2f0 [ 578.209979][T16116] ? _raw_spin_unlock_irq+0x23/0x50 [ 578.215174][T16116] get_signal+0x121b/0x12c0 [ 578.219680][T16116] ? __asan_memcpy+0x40/0x70 [ 578.224265][T16116] arch_do_signal_or_restart+0xbb/0x860 [ 578.229808][T16116] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 578.235960][T16116] exit_to_user_mode_loop+0x10e/0x770 [ 578.241332][T16116] ? rcu_is_watching+0x16/0xb0 [ 578.246085][T16116] do_syscall_64+0x328/0x520 [ 578.250665][T16116] ? trace_irq_disable+0x3b/0x140 [ 578.255683][T16116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.261741][T16116] ? clear_bhb_loop+0x70/0xc0 [ 578.266406][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.272293][T16116] RIP: 0033:0x7ff7ff59e0d9 [ 578.276698][T16116] Code: Unable to access opcode bytes at 0x7ff7ff59e0af. [ 578.283773][T16116] RSP: 002b:00007ff8003a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 578.292178][T16116] RAX: 0000000000000001 RBX: 00007ff7ff826098 RCX: 00007ff7ff59e0d9 [ 578.300143][T16116] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff7ff82609c [ 578.308105][T16116] RBP: 00007ff7ff826090 R08: 3fffffffffffffff R09: 0000000000000000 [ 578.316064][T16116] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 578.324021][T16116] R13: 00007ff7ff826128 R14: 00007ffd8c507bf0 R15: 00007ffd8c507cd8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 578.331987][T16116] [ 578.369873][T16114] vhci_hcd: connection closed [ 578.379080][ T9941] vhci_hcd vhci_hcd.9: stop threads [ 578.379109][ T9941] vhci_hcd vhci_hcd.9: release socket [ 578.379167][ T9941] vhci_hcd vhci_hcd.9: disconnect device [ 578.413455][T16061] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 579.176118][ T9937] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.260317][ T9937] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.296674][ T9937] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.388557][ T9937] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.459841][ T9937] bridge_slave_1: left allmulticast mode [ 579.459878][ T9937] bridge_slave_1: left promiscuous mode [ 579.460002][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.481526][ T9937] bridge_slave_0: left allmulticast mode [ 579.481563][ T9937] bridge_slave_0: left promiscuous mode [ 579.481695][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.553576][ T9937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.565264][ T9937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.575386][ T9937] bond0 (unregistering): Released all slaves [ 579.625442][ T9937] : left promiscuous mode [ 579.808909][ T9937] hsr_slave_0: left promiscuous mode [ 579.815231][ T9937] hsr_slave_1: left promiscuous mode [ 579.825084][ T9937] veth1_macvtap: left promiscuous mode [ 579.830649][ T9937] veth0_macvtap: left promiscuous mode [ 579.839031][ T9937] veth1_vlan: left promiscuous mode [ 579.839109][ T9937] veth0_vlan: left promiscuous mode [ 579.951809][ T9937] team0 (unregistering): Port device team_slave_1 removed [ 579.974289][ T9937] team0 (unregistering): Port device team_slave_0 removed [ 580.011318][ T5277] 8021q: adding VLAN 0 to HW filter on device eth25 [ 580.257746][ T9937] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.312548][ T9937] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.350172][ T9937] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.382743][ T5277] 8021q: adding VLAN 0 to HW filter on device eth26 [ 580.412556][ T9937] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.515445][ T9937] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.579933][ T9937] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.629284][ T9937] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.658143][ T9937] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.688884][ T5277] 8021q: adding VLAN 0 to HW filter on device eth27 [ 580.749736][ T9937] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.789818][ T9937] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.858221][ T9937] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.920031][ T9937] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.021435][ T5277] 8021q: adding VLAN 0 to HW filter on device eth28 [ 581.030842][ T9937] bridge_slave_1: left allmulticast mode [ 581.030878][ T9937] bridge_slave_1: left promiscuous mode [ 581.031197][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.043201][ T9937] bridge_slave_0: left allmulticast mode [ 581.043221][ T9937] bridge_slave_0: left promiscuous mode [ 581.043347][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.073312][ T9937] bridge_slave_1: left allmulticast mode [ 581.073351][ T9937] bridge_slave_1: left promiscuous mode [ 581.076435][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.090655][ T9937] bridge_slave_0: left allmulticast mode [ 581.091375][ T9937] bridge_slave_0: left promiscuous mode [ 581.091506][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.111193][ T9937] bridge_slave_1: left allmulticast mode [ 581.111219][ T9937] bridge_slave_1: left promiscuous mode [ 581.111959][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.130485][ T9937] bridge_slave_0: left allmulticast mode [ 581.130511][ T9937] bridge_slave_0: left promiscuous mode [ 581.130655][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.220976][ T9937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.232638][ T9937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.242052][ T9937] bond0 (unregistering): Released all slaves [ 581.277319][ T9937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.288959][ T9937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.298526][ T9937] bond0 (unregistering): Released all slaves [ 581.331196][ T9937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.341169][ T9937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.350522][ T9937] bond0 (unregistering): Released all slaves [ 581.699522][ T5277] 8021q: adding VLAN 0 to HW filter on device eth29 [ 581.711018][ T9937] hsr_slave_0: left promiscuous mode [ 581.716662][ T9937] hsr_slave_1: left promiscuous mode [ 581.718836][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.718855][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.722703][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.722719][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.753023][ T9937] hsr_slave_0: left promiscuous mode [ 581.758648][ T9937] hsr_slave_1: left promiscuous mode [ 581.759176][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.759192][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.764566][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.764582][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.793531][ T9937] hsr_slave_0: left promiscuous mode [ 581.798941][ T9937] hsr_slave_1: left promiscuous mode [ 581.799472][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.799489][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.805018][ T9937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.805036][ T9937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.827364][ T9937] veth1_macvtap: left promiscuous mode [ 581.827394][ T9937] veth0_macvtap: left promiscuous mode [ 581.827455][ T9937] veth1_vlan: left promiscuous mode [ 581.827496][ T9937] veth0_vlan: left promiscuous mode [ 581.850486][ T9937] veth1_macvtap: left promiscuous mode [ 581.850511][ T9937] veth0_macvtap: left promiscuous mode [ 581.850566][ T9937] veth1_vlan: left promiscuous mode [ 581.850604][ T9937] veth0_vlan: left promiscuous mode [ 581.856229][ T9937] veth1_macvtap: left promiscuous mode [ 581.856264][ T9937] veth0_macvtap: left promiscuous mode [ 581.856322][ T9937] veth1_vlan: left promiscuous mode [ 581.856363][ T9937] veth0_vlan: left promiscuous mode [ 582.139936][ T9937] team0 (unregistering): Port device team_slave_1 removed [ 582.147463][ T9937] team0 (unregistering): Port device team_slave_0 removed [ 582.264918][ T9937] team0 (unregistering): Port device team_slave_1 removed [ 582.272403][ T9937] team0 (unregistering): Port device team_slave_0 removed [ 582.722003][ T5277] 8021q: adding VLAN 0 to HW filter on device eth30 [ 583.298663][ T5277] 8021q: adding VLAN 0 to HW filter on device eth31 [ 583.538527][ T5277] 8021q: adding VLAN 0 to HW filter on device eth32 [ 583.784812][ T5277] 8021q: adding VLAN 0 to HW filter on device eth33 [ 584.222390][ T5277] 8021q: adding VLAN 0 to HW filter on device eth34 [ 584.468271][ T5277] 8021q: adding VLAN 0 to HW filter on device eth35 [ 584.719298][ T5277] 8021q: adding VLAN 0 to HW filter on device eth36 [ 584.990392][ T5277] 8021q: adding VLAN 0 to HW filter on device eth37 [ 585.665605][ T5277] 8021q: adding VLAN 0 to HW filter on device eth38 [ 585.907316][ T5277] 8021q: adding VLAN 0 to HW filter on device eth39 [ 586.208138][ T5277] 8021q: adding VLAN 0 to HW filter on device eth40