last executing test programs: 8.593895128s ago: executing program 3 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f787900000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mq_open(&(0x7f0000000640)='nl8\xf2\x18\xdb\xd5.\x8c\xf0\x02\x8c\xe3\xd1\xfdf\xd6\xe8\xd3*\x8f\x16Zb}\x01TY\xa3]\x8e$B\xb5f\xa4IY\x01\xa7n\v.\xfc\x8e\xf8_\xf2\xd9\xf7\xa34\x9cj=\xc23\x97\xb7\xd3%\xd8\xe3\xe0[My\x8e\nE\xb3\x92\xcf\xde\xc9\xcb\xde=\xd0\xaeY\xd6]\xb2\xe0G\xd3\xc6e\vF\xd5\xcb\x87\xbb\x9d\xf3=\xb3\xec\xcf\x8d!\x1d?\x15\xc3\x97\xe2\xae\xbe\x97\xf0\x9a\xa5i\xba\xa4`\x12IG\xfe\xbc4sB\x9c\xe3\xcc@n\xd1t\x18\x86\xf2>\xa9\xf7\xea~h\xe93\xbd\xa2\x1a+\xfc\x14\x19\xec\xb9\v\xab\xed)\x1f\x88\x84\xbc\xed\x05\xa84\xd2K\x04~\x1b\x86]\x90\xd5A5\xbb>\xf6\x02\x9d\xd1w\xb19\x113\x8f\xbf\x1b\xfdK\b\xf2\xde\xdcb\x99\xf0\xc0\x0f\xd3\xbc$\xb9\xd0\xa28T\x0f\x95\xf3#\xc2x\x1b4\x1b\xe7\x83\xd8\x93\n\xc9%{\xdee\xae\x0f\x13\xc5\xce\a\xac\xd3\x87=\\\xe1{V\xfb;\x95\x10I\x9d=\xca\xf8N|\xcb\x8d\xdcp\xa2\xec\x00', 0x80, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd1, 0x32442) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x4, 0x3c, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x1, 0x75}}}}}]}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0}) 6.630847613s ago: executing program 3 (id=101): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0x3, 0x20, 0xc, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "d678e817"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7dc, 0x101, 0x33}, [@mdlm={0x15, 0x24, 0x12, 0x800}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0x16, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x6, 0x7, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x1, 0xbe}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0xe, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0x8, 0x1}}}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x10, 0x0, 0x0, 0x9, 0x20, 0x3}, 0x33, &(0x7f0000000bc0)={0x5, 0xf, 0x33, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5e, 0x40, 0x2b, 0x4, 0xb6}, @generic={0x15, 0x10, 0x4, "c073ed7de19de8502a4a7d5991b5452a2c83"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0xf, 0xc}]}, 0x8, [{0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x63}}, {0x89, &(0x7f0000000c80)=@string={0x89, 0x3, "8fa958f1c33930cb83ff2ab7299b5ccc9b6ac6b34e4dc8c79138a0587a813fd70e14e3e846fad8714b4f3e53f7b2c1ac2d6a7d36725fbf299785f59b7c4412d89f39a6924231567766e9819336399f8f7098427265ebc0f5677193f9f04517ba19a571dc5b1466b0d992ec7212aed7f143c8f18f82e832edc13184e879f7fe0c2d10448175436c"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x444}}, {0xef, &(0x7f0000000d80)=@string={0xef, 0x3, "cef736fe81163fc3d5e1f33a41335b70f546cb1db553111f42651313226854920576fdeda74b2ce0d7bfd8778b3acc244cb0a2a648fb11b32e4b8499cbf3f507333826fd05458f9d3007242a3032108561a32ff78ec4505124b1fb967309a9b43c20076617169d83504c538ccfff61760083eebfdc8c599ecd6de9f4ccdccf54929b6e07cd1fa1fce84173a2a75fec20e14bb5aa86a07464072dd80ec8a038138423f3f8f7611ff6dc8700e7ffef6c1307bb63486352d57e73f0c7a069bfe0361e52f1610fa37d6f4eaa8986988135b3c151ce6153466ce9198ec91b5f44b95c424c23d55eb65f10cdb1dd87c7"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x100c}}, {0x33, &(0x7f0000000ec0)=@string={0x33, 0x3, "c0e0dd55c215b9771fc4e3a4e5fe3bdb7aba3608ce810f6d2b23df56985694c85865fefde64c297b5a991bd1138b74bee6"}}, {0x15, &(0x7f0000000f00)=@string={0x15, 0x3, "68b0202ff2dffd42d544da04e148f5af495787"}}]}) (async) syz_usb_connect$uac3(0x1, 0x124, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x112, 0x3, 0x1, 0x0, 0x10, 0x8f, {0x8, 0xb, 0x1, 0x0, 0x1, 0x26, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x57, 0x1}, [@processing_unit={0x11, 0x24, 0x9, 0x5, 0x3, [0x1, 0x2, 0x1]}, @multiply_unit={0xb, 0x24, 0xd, 0x0, 0xfd, 0x0, 0x2}, @input_terminal={0x14, 0x24, 0x2, 0x4, 0x101, 0x3, 0x2, 0x6, 0x9, 0xd, 0x8, 0x3}, @selector_unit={0x5}, @multiply_unit={0xb, 0x24, 0xd, 0x81, 0x5, 0x200, 0xed51}, @extension_unit={0xd, 0x24, 0xa, 0x5, 0x2, [0x1, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x3a, 0xa, {0xa, 0x25, 0x25, 0x0, 0x6, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x40, 0x8, 0x4, 0x4, 0x9, 0x1, 0x94}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x5, 0x80}, @as_header={0x17, 0x24, 0x1, 0x2, 0x9d2, 0x80, 0x5, 0x2, 0x6, 0x9, 0x4}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x64, "b9"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0x2, "d31b94"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x6, 0x5, "", "7ae9c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0xfe, 0xd, {0xa, 0x25, 0x25, 0x200, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x1d, 0x2, 0x3a, 0x20}, 0x4e, &(0x7f0000000280)={0x5, 0xf, 0x4e, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "c4814d2cc8f56e287a28a4b23b3f0ed1"}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x14, 0xf00f, 0x8000, [0xfff0, 0xff00f0, 0xffc0, 0x17, 0xc0, 0xc030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0xb2, 0x7f, 0x6, 0x7}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x240a}}, {0x3e, &(0x7f0000000380)=@string={0x3e, 0x3, "88f877d8fa7dbcddfcd17f3776d7e7fe0b7448bae71a3829e063ace38dda6a21407c3721557d45f57c41f2e96f5e414fd1e679ba27effac815da73fd"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x814}}, {0xbf, &(0x7f0000000440)=@string={0xbf, 0x3, "306b43971bdabbc079586769b8329b3cc61b07f12b95706e57058921c6a011dc8fb595d1a4c004f027418cc83df2af0ea77f9ddc4ad3fb506df8888ef489f89ed2e8e9ad1166882df5636962fd9bf7b0abf2955bb3f40200a9019fe7415b29367fa61d7e9dfe19915dbf47bcfeb6fc8cf72686873a6558043fa159244cdeb0987ea4f305e8c35a9adfd6fff9128444a1e62e0e3fc537ddf570b883b5142cc9f50f32f3c7171cba0c4c3feacc875b4dc378a396a706fa5fa32fb39ae6b9"}}]}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040), 0x4) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = syz_usb_connect$sierra_net(0x1, 0x3f, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x40, 0x8, 0x9b, 0x9}, {0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x6, 0xfc}, {0x9, 0x5, 0x5, 0x3, 0x40, 0x9, 0x4, 0x10}}}}}}]}}, 0x0) syz_usb_disconnect(r3) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000580)={0x20, 0x5, 0xfd, {0xfd, 0xa, "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"}}, &(0x7f00000006c0)={0x0, 0x3, 0xca, @string={0xca, 0x3, "8ec1b3977b914da2d2e13e95d6541e9358392519740e52d138303c75d4a446433b14a710b2568f829d922bea877013a7e3393cf4f57f331011c058fc65613bdd4d215654b39a9ff0417305c5896b9cb48c77b1d6265d5793311f3205e26fd41f31ccf37ebe692c8e3814ac931c9df1ef36d046069435f41f566afc505add8cd1aba5b124aec473667c3c88206f243e6ccb29b329d6d2866fabf4e7e4a6a81f90f801ff8f1cbcec56371579ed154b21c44223e3b93cede91cfcd322f94833b1f448c358e82a10e974"}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000800)={0x20, 0x0, 0x56, "15715bb5fab06d9a7bbc727091aae3bccac54caaf740e827f132f4bdb60bb196fbd07ec9dc9cafec35f613d49d1aa01301ae25922a090ddab41149763b07fe7a364c90be1798e214315ced70d89fa4790fe5fc69a095"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000900)={0x20, 0x81, 0x1, '^'}, &(0x7f0000000940)=ANY=[@ANYBLOB="0a820200000068a7"], &(0x7f0000000980)={0x20, 0x83, 0x2, "26dd"}, &(0x7f00000009c0)={0x20, 0x84, 0x3, "e8fcb2"}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "eadcf8"}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 5.824401572s ago: executing program 0 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @broadcast}) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) recvmsg$unix(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000003500000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x14) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042f921e"], 0x4) r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x20, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x200, 0x5, 0x1, {0x22, 0x794}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x61, 0x40, 0x6}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x0, 0x4, 0xee, 0xeb, 0x40}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x97, &(0x7f0000000180)=@string={0x97, 0x3, "ba1c3e3b266fa0abb954ec3c516fb08edc2936986e86051b7796e52630ae89511f605c1d089e7045437ee596daced99b2c57cb833bd5443becc80a772b044c52dfc39e4d442273b805ed56eed4afc7ed3a6266432e7931c26f1aa94737245f2ea6963e04c601c11b3e68bcb728b1557534aa52548b58049ed87178dba0ee004f751bc1c0cb93307183dd6a7bb741b410345c58400d"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x40, 0xf, 0xe4, {0xe4, 0x5, "aec8b97f7f21ef289a7285e54f2a0026e73a8139ae6c335c4c2ac2ee31b4c8d95843b5e8d2b5bbf161cc1ec4df9fabd29f8b8b8fce51d2a1feed7356b56451760557a8d6c5c2c54e8f41df4eefe7f623050f3dd7669596eede19b527a3170dc72a53367c8eb1b1f739b374d7ef044f0bf1cb61108c13d808262d4d07fc5fbb10e2b079b83dc509f80085b37169250be3f3ad01f8d747d701064bc72d84c55d049b8011ff385bb7e254e61107330d6ddbed0a0c61876cb81f9321c1de1191dc5f33b9651fff505a024b68bfd9f5c4ac084f811bc00ed466d9dd6415f8a32f257e682a"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f0000000400)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x8, "67e17e73"}, @main=@item_4={0x3, 0x0, 0x8, "9106292b"}, @local=@item_4={0x3, 0x2, 0xa, "edd445b1"}, @global=@item_4={0x3, 0x1, 0x1, "6597209f"}, @global=@item_4={0x3, 0x1, 0x3, "a50f1883"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd4, 0x8, 0x1, {0x22, 0xf9e}}}}, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x20, 0x16, 0xc8, "3f4106bccdd4aaeb528b6b1dd482883d4c46414b6bf522697b44dfacccd05e57b74c1cda68ca45e2e43c898a9e4fb0903ca8728e02ce853f54a7e2fde7d723e5812744014625b3ace823892394bfac705c5819f5791ad4987bada0e8031575cd026375a5ee9b7c19d7a263799d71244d2da3ae189441f749b2f71c46fbbc57594c9897f7d7c99e8c4faed9ac21acc4dce19434f14ccd66b29bddad0106353099337974616b30345523dbe7df0c77be26fb464253fee7bb0b3b914560086def77f2058d1ffeabb071"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000680)={0x20, 0x1, 0x5a, "edf749ee178216bfbdb92379a48b9916abdb90b347171a2bd94401e0e7c301a06bb56e3d86cf32df99b403781b81bbeb3e92067b93d87142ff189dcbf4b48587532a0d41b3058f5a67d7684d6c2985ec2ed0d6afa02bd68ebe90"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x2}}) 4.18839475s ago: executing program 3 (id=111): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000000c0)=""/48, 0x0, 0x80a0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, 0x0, 0x40000}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000003a40)={{r0, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x400000, &(0x7f0000000140)={@_ha_fsid={[0x6, 0x10]}, {0x6, 0xe, 0x3, 0x8000}}, 0x4, &(0x7f0000000180), &(0x7f0000000200)=0x2}, 0x8, &(0x7f0000003940)=[{0x2, 0x6, &(0x7f0000000240)='/dev/vhost-vsock\x00', &(0x7f0000000280)="b3958434fdbb192fa4aa6ccfc594be7aede5dab222a3c5e4a5e80bcb074696cea456e39f7119bf21d322fe27979e0061eb0a4f4a2356638620f51dc6eb2b3773cf337b", 0x43, 0x2}, {0x1, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000001600)="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", 0x1000, 0x28}, {0x1, 0x5, &(0x7f0000002600)='\'!)\x00', &(0x7f0000002640)="99e365ec17cdd5fbcc29e30c3b50251cd78ede6132d698e284659106a4218ffa61a449", 0x23, 0xa}, {0x1, 0x9, &(0x7f0000002680)='.)@,\x00', &(0x7f00000026c0)="99d35350cfa4dead0600ece7f83da3e76bc93370d971d55470ebd041549746d3947c4e5560f1573a39db1f7c53abd3677e1b36bb5aa2", 0x36, 0x10}, {0x3, 0x7fffffff, &(0x7f0000002700)='^\x00', &(0x7f0000002740)="653944c8d98f07bd56278b5272c4", 0xe, 0x1a}, {0x3, 0x6, &(0x7f0000002780)='/dev/vhost-vsock\x00', &(0x7f00000027c0)="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", 0x1000, 0x2a}, {0x3, 0x9, &(0x7f00000037c0)='!\x00', &(0x7f0000003800)="03db36a1d4b99ffbad54d8b52a42b8edd3b38df9f21515dd25727795c52b700460c800dd35756404df9607a47024697203019d7aca13d757434e6ba26e6e3a7a66b860e9fbea364c27ea1dc9cd6e1c480a72a6e860cc192823ba85d375637f962453834b8c540bd6f6abbf89ac4a547459fae672fc6032d53b01aa9e0b93f8af0526464895d2ad48b340b6333ba7b6af247504c8e108cfd6e47223dbbb156d1515604d5eb5c7424e3f", 0xa9, 0x8}, {0x3, 0x1, &(0x7f00000038c0)='/dev/vhost-vsock\x00', &(0x7f0000003900)="2e6fffdf283690ba1112265bd216826c9eb2f76143d65064a91e6142b3c76e48bbd831", 0x23, 0xa}]}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000003ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.46029035s ago: executing program 3 (id=112): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0xffffff30) socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3.421152468s ago: executing program 3 (id=113): listns(&(0x7f0000000080)={0x20, 0x0, 0x7fffffff, 0x8000000, 0x0, 0x3}, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xffff0001, 0x14436c48, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) landlock_create_ruleset(&(0x7f00000002c0)={0x1000, 0x0, 0x3, 0x1000, 0x8, 0x1}, 0x30, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x26, 0x7, 0x0, 0x0, "39af01a8c3d63b71e1d9aa1b49a2eb9016e15d09990b63557c460f222c185f67445dadfa612a83f2abcde07e4a9dc0280762cf19fdd939fc0a18d721014f54e6"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x60) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f0000000240)={0x18, 0x0, 0xc5ad, 0x5}) 3.109943039s ago: executing program 3 (id=114): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000002c0)={0x0, 0x8c1, 0x83, 0x20203843, 0x2, [], [0x810003, 0x40, 0xfffffffe, 0xffffbffc], [0x1, 0x0, 0xfffffffc, 0x3], [0x2, 0x0, 0x0, 0xfffffffffffffffe]}) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0xe, 0x72, {0x72, 0x23, "f244f4a74e818e32b3e20c1c706d733b42d5ea55087c1ebb05fc1d183bad1d348c8f343b67f57e7e7618b236067a67059d420ce1e52770a01e70cf489f7f195c10842b9d5e8da2ababc92d268a6456a96cb782a8301807db9010f72c84d63f2d90c556fbbaa0ba994211605cfbd1eb70"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x15, 0x4c, "45ca35b2d5ec368504b566dae899ff6e3450dbf809bda9da3495eb01cb53c4b6ec459d0f70980ee8996ac77d336bdf9c84f44b6701909aaed03ce9a5bd266de64c6a6d9a9c2aef0417634f38"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x74}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000280)={0x20, 0x81, 0x3, "7199ed"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "1025"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "fe"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "908c"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "e3bef5"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000480)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000005c0)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x7, 0x0, 0xbbbbbbbb}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x600, 0x2, &(0x7f0000000300)=[r7, r7], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r8, r9, r9], &(0x7f0000000340), 0x0, 0xfffffff7ffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000840)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000980)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000b80)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[{}, {}, {}], &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x3, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[{}, {}, {}], &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0], 0x3, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000ec0)={0x0, 0x2, &(0x7f00000004c0)=[0x0, r2], &(0x7f0000000500)=[0x9, 0x7, 0x9], &(0x7f0000000e40)=[r3, r4, r9, r10, r11, r12, r13, 0x0], &(0x7f0000000e80)=[0x0, 0x2, 0x5, 0x9e41, 0x8, 0x200, 0x7, 0x8], 0x0, 0x8}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0xd, 0xd, "8f32c5afbff2bd3a1d8f31678e"}, 0x0, 0x0}) 3.07484118s ago: executing program 2 (id=115): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_ublk_setup_io_uring(0x1873, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2, 0x1db, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000029c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000080)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x2000000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x4a4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4c}}}, 0x0) close(0x4) 2.790161678s ago: executing program 2 (id=117): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee01}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1}, {0x0, 0x200000, 0x7, 0xffffffffffffffff}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd27, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000200000025000000080026006c0900000800a0006c090000080027"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 2.752186818s ago: executing program 1 (id=118): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002580)=ANY=[@ANYBLOB="40000000090601020000000000000000000000010900020073797a3100000000100008800c000780080009400000a0cd08000940000000060700010007"], 0x40}}, 0x4400d040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x2, 0x3, 0x2, 0x6, 0x3, 0x8000004, {0x0, 0x3ff, 0xff, 0x14e000000000, 0x100, 0x4, 0x9, 0xd, 0x9, 0x2000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000002c0)) sendfile(r3, r2, &(0x7f0000000080)=0x3, 0x7f03) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000400000000000, 0x4, 0x16, 0x2, 0x24, 0x6, 0x5, 0x0, 0x100fff}) write$midi(r1, &(0x7f0000000100)="87f54b1fa0919a76385c908780401de061c74eee996a328cfbb2bdb45851b1d3349ca0e1f5ceb74ac189cd0d72a4a4edef3396f9d7114524616e480b28462342c82fbf76239f2e1ab3a06e9a05595473ddfb6447d01577b7c1d2b678605ad461b8687f68a37c7feaa62e04cc1ba73eb7", 0x70) 2.440073815s ago: executing program 0 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='./mnt\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050002000000a762f72457650f8908000300", @ANYRES32=r5], 0x30}}, 0x0) 2.411154129s ago: executing program 2 (id=120): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000002c0)=@ccm_128={{0x303}, "ecac31f4a929026f", "41b3fe07407464023ed9e4b677ee8b44", "f9290436", "24225b6015eb5baf"}, 0x28) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x2a4, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x11c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_MASTER={0xd0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000005}, 0x20048000) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x4, 0x2000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)}, 0x4044004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000706010300040000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 2.169389003s ago: executing program 1 (id=121): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000600)={0x0, 0x0, @pic={0x2, 0x4, 0x3, 0x80, 0xa, 0x0, 0x6, 0x0, 0x24, 0xdb, 0x9, 0x3c, 0x7, 0x7, 0x8, 0x4}}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r0, 0x0) syz_clone(0x8000, &(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x0, 0x0) ftruncate(r0, 0xcd8) r4 = dup2(r3, r0) readv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000300)=0xe8) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa0, &(0x7f0000000340)={[{@huge_never}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x6d, 0x2d, 0x34, 0x25, 0x31, 0x2d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x32, 0x65]}}, {@uid={'uid', 0x3d, r5}}, {@grpquota}, {@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x38, 0x23, 0x2d, 0x39, 0x31, 0x32, 0x33, 0x2d]}}}}, {@huge_within_size}, {@noswap}, {@usrquota}], [{@hash}]}) 2.015925555s ago: executing program 0 (id=122): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x1400, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 2.01536285s ago: executing program 2 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000900020073797a30000000000500050000000000000005000000000005000400000000000c00078005001500050000000d000300686173683a6d616300000000"], 0x54}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008080)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000680)=""/202, 0xca}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/45, 0x2d}], 0x9, &(0x7f0000001f80)=""/4096, 0x1000}, 0x5e54}, {{&(0x7f0000002f80)=@ieee802154, 0x80, &(0x7f0000005500)=[{&(0x7f0000003000)=""/131, 0x83}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/128, 0x80}, {&(0x7f0000004500)=""/4096, 0x1000}], 0x4, &(0x7f0000005540)=""/77, 0x4d}, 0x5}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f00000055c0)=""/146, 0x92}, {&(0x7f0000005680)}, {&(0x7f00000056c0)=""/55, 0x37}, {&(0x7f0000005700)=""/113, 0x71}, {&(0x7f0000005780)=""/58, 0x3a}, {&(0x7f00000057c0)=""/15, 0xf}, {&(0x7f0000005800)=""/240, 0xf0}], 0x7}, 0x2}, {{&(0x7f0000005980)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005a00)=""/253, 0xfd}, {&(0x7f0000005b00)=""/181, 0xb5}, {&(0x7f0000005bc0)=""/244, 0xf4}, {&(0x7f0000005cc0)=""/10, 0xa}, {&(0x7f0000005d00)}], 0x5, &(0x7f0000005dc0)=""/232, 0xe8}, 0x7ff}, {{&(0x7f0000005ec0)=@xdp, 0x80, &(0x7f00000073c0)=[{&(0x7f0000005f40)=""/43, 0x2b}, {&(0x7f0000005f80)=""/248, 0xf8}, {&(0x7f0000006080)=""/152, 0x98}, {&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000007140)=""/146, 0x92}, {&(0x7f0000007200)=""/109, 0x6d}, {&(0x7f0000007280)=""/35, 0x23}, {&(0x7f00000072c0)=""/170, 0xaa}, {&(0x7f0000007380)=""/55, 0x37}], 0x9, &(0x7f0000007480)=""/239, 0xef}}, {{0x0, 0x0, &(0x7f00000077c0)=[{&(0x7f0000007580)=""/84, 0x54}, {&(0x7f0000007600)=""/99, 0x63}, {&(0x7f0000007680)=""/146, 0x92}, {&(0x7f0000007740)=""/121, 0x79}], 0x4, &(0x7f0000007800)=""/128, 0x80}, 0x7}, {{&(0x7f0000007880)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007900)=""/50, 0x32}, {&(0x7f0000007940)=""/162, 0xa2}, {&(0x7f0000007a00)=""/151, 0x97}, {&(0x7f0000007ac0)=""/73, 0x49}, {&(0x7f0000007b40)=""/232, 0xe8}, {&(0x7f0000007c40)=""/85, 0x55}, {&(0x7f0000007cc0)=""/175, 0xaf}, {&(0x7f0000007d80)=""/184, 0xb8}, {&(0x7f0000007e40)=""/247, 0xf7}, {&(0x7f0000007f40)=""/77, 0x4d}], 0xa}, 0x2}], 0x7, 0x40000000, &(0x7f0000008240)={0x0, 0x3938700}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001ac1414aa00000000000000810000000000000000000000000a00080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000000003c00000002"], 0xfc}}, 0x0) 1.812232509s ago: executing program 2 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1411, 0x1, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008010) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f787900000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mq_open(&(0x7f0000000640)='nl8\xf2\x18\xdb\xd5.\x8c\xf0\x02\x8c\xe3\xd1\xfdf\xd6\xe8\xd3*\x8f\x16Zb}\x01TY\xa3]\x8e$B\xb5f\xa4IY\x01\xa7n\v.\xfc\x8e\xf8_\xf2\xd9\xf7\xa34\x9cj=\xc23\x97\xb7\xd3%\xd8\xe3\xe0[My\x8e\nE\xb3\x92\xcf\xde\xc9\xcb\xde=\xd0\xaeY\xd6]\xb2\xe0G\xd3\xc6e\vF\xd5\xcb\x87\xbb\x9d\xf3=\xb3\xec\xcf\x8d!\x1d?\x15\xc3\x97\xe2\xae\xbe\x97\xf0\x9a\xa5i\xba\xa4`\x12IG\xfe\xbc4sB\x9c\xe3\xcc@n\xd1t\x18\x86\xf2>\xa9\xf7\xea~h\xe93\xbd\xa2\x1a+\xfc\x14\x19\xec\xb9\v\xab\xed)\x1f\x88\x84\xbc\xed\x05\xa84\xd2K\x04~\x1b\x86]\x90\xd5A5\xbb>\xf6\x02\x9d\xd1w\xb19\x113\x8f\xbf\x1b\xfdK\b\xf2\xde\xdcb\x99\xf0\xc0\x0f\xd3\xbc$\xb9\xd0\xa28T\x0f\x95\xf3#\xc2x\x1b4\x1b\xe7\x83\xd8\x93\n\xc9%{\xdee\xae\x0f\x13\xc5\xce\a\xac\xd3\x87=\\\xe1{V\xfb;\x95\x10I\x9d=\xca\xf8N|\xcb\x8d\xdcp\xa2\xec\x00', 0x80, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd1, 0x32442) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x4, 0x3c, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x1, 0x75}}}}}]}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0}) 1.807231517s ago: executing program 0 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004801}, 0x4) 1.547883354s ago: executing program 1 (id=126): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x20000840) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) close(0x3) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, 0x0, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x5c, 0xa00) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000600)={'dt2815\x00', [0x78, 0x2f, 0x0, 0xc, 0x8, 0x6, 0x100001, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x0, 0x101, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0x0, 0xffffffff, 0xb, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001500)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001500)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x3, 0x1, 0x2}}) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.301685299s ago: executing program 1 (id=127): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) fcntl$dupfd(r0, 0x406, r0) 1.247765752s ago: executing program 0 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) userfaultfd(0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000006c0)={0x4, &(0x7f0000000100)=[{0x25, 0x0, 0x2, 0xfffffffe}, {0x6}, {}, {0x6}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000040)='\x13\x00', 0x200, &(0x7f0000000140)={@_ha_fsid={[0x6]}, {0x82, 0x1171, 0x6, 0x101}}, 0x8, &(0x7f0000000200)={@_ha_fsid}, &(0x7f00000002c0)=0x8}) fstat(r1, &(0x7f0000000240)) 1.027965796s ago: executing program 1 (id=129): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002580)=ANY=[@ANYBLOB="40000000090601020000000000000000000000010900020073797a3100000000100008800c000780080009400000a0cd08000940000000060700010007"], 0x40}}, 0x4400d040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x2, 0x3, 0x2, 0x6, 0x3, 0x8000004, {0x0, 0x3ff, 0xff, 0x14e000000000, 0x100, 0x4, 0x9, 0xd, 0x9, 0x2000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f00000002c0)) sendfile(r3, r2, &(0x7f0000000080)=0x3, 0x7f03) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000400000000000, 0x4, 0x16, 0x2, 0x24, 0x6, 0x5, 0x0, 0x100fff}) write$midi(r1, &(0x7f0000000100)="87f54b1fa0919a76385c908780401de061c74eee996a328cfbb2bdb45851b1d3349ca0e1f5ceb74ac189cd0d72a4a4edef3396f9d7114524616e480b28462342c82fbf76239f2e1ab3a06e9a05595473ddfb6447d01577b7c1d2b678605ad461b8687f68a37c7feaa62e04cc1ba73eb7", 0x70) 774.307131ms ago: executing program 1 (id=130): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 216.759251ms ago: executing program 0 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mq_open(&(0x7f0000000640)='nl8\xf2\x18\xdb\xd5.\x8c\xf0\x02\x8c\xe3\xd1\xfdf\xd6\xe8\xd3*\x8f\x16Zb}\x01TY\xa3]\x8e$B\xb5f\xa4IY\x01\xa7n\v.\xfc\x8e\xf8_\xf2\xd9\xf7\xa34\x9cj=\xc23\x97\xb7\xd3%\xd8\xe3\xe0[My\x8e\nE\xb3\x92\xcf\xde\xc9\xcb\xde=\xd0\xaeY\xd6]\xb2\xe0G\xd3\xc6e\vF\xd5\xcb\x87\xbb\x9d\xf3=\xb3\xec\xcf\x8d!\x1d?\x15\xc3\x97\xe2\xae\xbe\x97\xf0\x9a\xa5i\xba\xa4`\x12IG\xfe\xbc4sB\x9c\xe3\xcc@n\xd1t\x18\x86\xf2>\xa9\xf7\xea~h\xe93\xbd\xa2\x1a+\xfc\x14\x19\xec\xb9\v\xab\xed)\x1f\x88\x84\xbc\xed\x05\xa84\xd2K\x04~\x1b\x86]\x90\xd5A5\xbb>\xf6\x02\x9d\xd1w\xb19\x113\x8f\xbf\x1b\xfdK\b\xf2\xde\xdcb\x99\xf0\xc0\x0f\xd3\xbc$\xb9\xd0\xa28T\x0f\x95\xf3#\xc2x\x1b4\x1b\xe7\x83\xd8\x93\n\xc9%{\xdee\xae\x0f\x13\xc5\xce\a\xac\xd3\x87=\\\xe1{V\xfb;\x95\x10I\x9d=\xca\xf8N|\xcb\x8d\xdcp\xa2\xec\x00', 0x80, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd1, 0x32442) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x3, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x4, 0x3c, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x1, 0x75}}}}}]}}]}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0}) 0s ago: executing program 2 (id=132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000002b00)="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", 0x123}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebd09003f3f46ef4511cef1ead6c37079e9a3e26d7b48241847bf9e343e", 0xcc}, {&(0x7f00000004c0)="fb6b858f877f07c0e2936bae6c6bddcddb", 0x11}], 0x4}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) (fail_nth: 1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 340.743932][ T5636] cgroup: Unknown subsys name 'net' [ 340.984880][ T5636] cgroup: Unknown subsys name 'cpuset' [ 341.038421][ T5636] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 343.353032][ T5636] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 347.823347][ T5655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.872949][ T5655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.934534][ T5655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.936400][ T5656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.964069][ T5656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.968613][ T5656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.971916][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.982825][ T5655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.983605][ T5656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.984621][ T5656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.993119][ T5656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.994531][ T5656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.997755][ T5656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.998680][ T5656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.003974][ T5655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.027566][ T5656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.039527][ T5664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.039841][ T5655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.081282][ T5664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.112619][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.149518][ T5664] Bluetooth: hci3: command tx timeout [ 350.229152][ T5664] Bluetooth: hci1: command tx timeout [ 350.308121][ T5664] Bluetooth: hci2: command tx timeout [ 350.308334][ T60] Bluetooth: hci0: command tx timeout [ 350.587069][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.590433][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.596001][ T5649] bridge_slave_0: entered allmulticast mode [ 350.610468][ T5649] bridge_slave_0: entered promiscuous mode [ 350.681974][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.682309][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.682938][ T5649] bridge_slave_1: entered allmulticast mode [ 350.685692][ T5649] bridge_slave_1: entered promiscuous mode [ 350.728482][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.728810][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.729107][ T5651] bridge_slave_0: entered allmulticast mode [ 350.731631][ T5651] bridge_slave_0: entered promiscuous mode [ 350.734984][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.735398][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.741926][ T5652] bridge_slave_0: entered allmulticast mode [ 350.750855][ T5652] bridge_slave_0: entered promiscuous mode [ 350.811938][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.812179][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.812386][ T5650] bridge_slave_0: entered allmulticast mode [ 350.814824][ T5650] bridge_slave_0: entered promiscuous mode [ 350.822156][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.823026][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.823866][ T5651] bridge_slave_1: entered allmulticast mode [ 350.836594][ T5651] bridge_slave_1: entered promiscuous mode [ 350.861203][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.862872][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.863679][ T5652] bridge_slave_1: entered allmulticast mode [ 350.880290][ T5652] bridge_slave_1: entered promiscuous mode [ 350.915994][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.916334][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.916611][ T5650] bridge_slave_1: entered allmulticast mode [ 350.924826][ T5650] bridge_slave_1: entered promiscuous mode [ 350.985847][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.052760][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.091085][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.096639][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.136347][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.150489][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.154773][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.198787][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.248552][ T5649] team0: Port device team_slave_0 added [ 351.312363][ T5649] team0: Port device team_slave_1 added [ 351.340896][ T5651] team0: Port device team_slave_0 added [ 351.344491][ T5652] team0: Port device team_slave_0 added [ 351.387125][ T5650] team0: Port device team_slave_0 added [ 351.395856][ T5651] team0: Port device team_slave_1 added [ 351.403889][ T5652] team0: Port device team_slave_1 added [ 351.429728][ T5650] team0: Port device team_slave_1 added [ 351.472770][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.472784][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.472804][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.563884][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.563898][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.563916][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.619963][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.619976][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.619995][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.622360][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.622370][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.622388][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.725527][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.725541][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.725559][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.730788][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.730821][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.730888][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.750434][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.750490][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.750570][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.792215][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.792273][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.792423][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.014393][ T5649] hsr_slave_0: entered promiscuous mode [ 352.016693][ T5649] hsr_slave_1: entered promiscuous mode [ 352.228146][ T60] Bluetooth: hci3: command tx timeout [ 352.308340][ T60] Bluetooth: hci1: command tx timeout [ 352.388354][ T60] Bluetooth: hci0: command tx timeout [ 352.388365][ T5664] Bluetooth: hci2: command tx timeout [ 352.461953][ T5651] hsr_slave_0: entered promiscuous mode [ 352.463622][ T5651] hsr_slave_1: entered promiscuous mode [ 352.465158][ T5651] debugfs: 'hsr0' already exists in 'hsr' [ 352.465290][ T5651] Cannot create hsr debugfs directory [ 352.492000][ T5652] hsr_slave_0: entered promiscuous mode [ 352.493688][ T5652] hsr_slave_1: entered promiscuous mode [ 352.495104][ T5652] debugfs: 'hsr0' already exists in 'hsr' [ 352.495136][ T5652] Cannot create hsr debugfs directory [ 352.524032][ T5650] hsr_slave_0: entered promiscuous mode [ 352.525656][ T5650] hsr_slave_1: entered promiscuous mode [ 352.526998][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 352.527026][ T5650] Cannot create hsr debugfs directory [ 353.455262][ T5649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.534721][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.554183][ T5649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.583387][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.588658][ T5649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.622263][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.658400][ T5649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.684596][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.835180][ T5652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.874167][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.888045][ T5652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.922375][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.940713][ T5652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.964652][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.010249][ T5652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.055599][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.229860][ T5650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.268455][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.277301][ T5650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.308046][ T60] Bluetooth: hci3: command tx timeout [ 354.312861][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.333052][ T5650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.363625][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.388473][ T60] Bluetooth: hci1: command tx timeout [ 354.398118][ T5650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.446688][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.468113][ T60] Bluetooth: hci0: command tx timeout [ 354.468144][ T60] Bluetooth: hci2: command tx timeout [ 354.679690][ T5651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.724874][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.737233][ T5651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.764793][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 354.776794][ T5651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.813795][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 354.835070][ T5651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.873603][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 354.995230][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.136664][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.163449][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.234422][ T3368] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.234643][ T3368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.302889][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.303124][ T5670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.394350][ T5652] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.470331][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.470598][ T5670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.510301][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.536034][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.536434][ T5670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.682769][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.695480][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.746102][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.746279][ T5670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.851877][ T3368] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.852054][ T3368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.959899][ T5651] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.072681][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.080385][ T5670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.152345][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.152563][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.402613][ T60] Bluetooth: hci3: command tx timeout [ 356.468130][ T60] Bluetooth: hci1: command tx timeout [ 356.550287][ T60] Bluetooth: hci2: command tx timeout [ 356.558113][ T60] Bluetooth: hci0: command tx timeout [ 357.034895][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.455091][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.599717][ T5649] veth0_vlan: entered promiscuous mode [ 357.634246][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.751466][ T5649] veth1_vlan: entered promiscuous mode [ 357.927159][ T5652] veth0_vlan: entered promiscuous mode [ 357.962054][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.017038][ T5652] veth1_vlan: entered promiscuous mode [ 358.037038][ T5649] veth0_macvtap: entered promiscuous mode [ 358.058480][ T5650] veth0_vlan: entered promiscuous mode [ 358.087765][ T5649] veth1_macvtap: entered promiscuous mode [ 358.147518][ T5650] veth1_vlan: entered promiscuous mode [ 358.193344][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.241159][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.277470][ T5652] veth0_macvtap: entered promiscuous mode [ 358.309818][ T5651] veth0_vlan: entered promiscuous mode [ 358.319010][ T5675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.339010][ T5675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.347214][ T5652] veth1_macvtap: entered promiscuous mode [ 358.377071][ T5675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.403288][ T5675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.474340][ T5651] veth1_vlan: entered promiscuous mode [ 358.527671][ T5650] veth0_macvtap: entered promiscuous mode [ 358.672402][ T5650] veth1_macvtap: entered promiscuous mode [ 358.774631][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.855860][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.984853][ T3368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.024170][ T3368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.040931][ T3368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.044266][ T3368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.068643][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.149204][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.186135][ T5651] veth0_macvtap: entered promiscuous mode [ 359.233200][ T5768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.233222][ T5768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.378641][ T5651] veth1_macvtap: entered promiscuous mode [ 359.415542][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.437616][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.503150][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.585690][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.687007][ T5768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.687027][ T5768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.899465][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.903566][ T5768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.903587][ T5768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.177310][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.615697][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.630608][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.651123][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.695194][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.695214][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.696450][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.904899][ T5804] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 360.905201][ T5804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.972395][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.972416][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.604155][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.604173][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.099713][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.099735][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.494386][ T5818] ======================================================= [ 362.494386][ T5818] WARNING: The mand mount option has been deprecated and [ 362.494386][ T5818] and is ignored by this kernel. Remove the mand [ 362.494386][ T5818] option from the mount to silence this warning. [ 362.494386][ T5818] ======================================================= [ 362.627316][ T5781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.627338][ T5781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.033669][ T5831] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 363.272761][ T5823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 363.486789][ T60] Bluetooth: hci1: Dropping invalid advertising data [ 363.486903][ T60] Bluetooth: hci1: Malformed LE Event: 0x02 [ 364.793132][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 364.821144][ T5749] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 364.890610][ T37] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 365.067508][ T38] audit: type=1326 audit(1782563626.515:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5852 comm="syz.2.15" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd51052ce59 code=0x0 [ 365.165744][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 768, setting to 64 [ 365.165779][ T37] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 365.165820][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 365.165842][ T37] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 365.171015][ T5749] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 365.171093][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.246163][ T37] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 365.246194][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.246240][ T37] usb 1-1: Product: syz [ 365.246253][ T37] usb 1-1: Manufacturer: syz [ 365.246266][ T37] usb 1-1: SerialNumber: syz [ 365.344760][ T37] usb 1-1: config 0 descriptor?? [ 365.459024][ T37] usb 1-1: ucan: probing device on interface #0 [ 365.459054][ T37] usb 1-1: ucan: invalid endpoint configuration [ 365.459078][ T37] usb 1-1: ucan: probe failed; try to update the device firmware [ 365.571494][ T5749] usb 2-1: config 0 descriptor?? [ 365.832724][ T5845] block nbd0: NBD_DISCONNECT [ 365.960023][ T38] audit: type=1326 audit(1782563627.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5846 comm="syz.1.2" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc5aa7ce59 code=0x0 [ 366.449507][ T5749] usb 2-1: Cannot read MAC address [ 366.456987][ T5749] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 366.742864][ T5749] usb 2-1: USB disconnect, device number 2 [ 366.934581][ T5871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 367.049229][ T5344] usb 1-1: USB disconnect, device number 2 [ 367.054470][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 367.330214][ T5859] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 367.330246][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.801981][ T5859] usb 4-1: config 0 descriptor?? [ 368.268669][ T5749] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 368.452582][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.491351][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.508761][ T5749] usb 2-1: Using ep0 maxpacket: 16 [ 368.633441][ T5749] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 368.633478][ T5749] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.633562][ T5749] usb 2-1: config 0 interface 0 has no altsetting 0 [ 368.633599][ T5749] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 368.633622][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.996722][ T5886] capability: warning: `syz.0.24' uses deprecated v2 capabilities in a way that may be insecure [ 369.026203][ T5749] usb 2-1: config 0 descriptor?? [ 369.539723][ T5749] usbhid 2-1:0.0: can't add hid device: -71 [ 369.540070][ T5749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 369.564970][ T5836] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 369.654363][ T5749] usb 2-1: USB disconnect, device number 3 [ 369.708112][ T5836] usb 1-1: device descriptor read/64, error -71 [ 369.982267][ T5836] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 369.994731][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803b004400: rx timeout, send abort [ 369.997384][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803b004400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 370.058643][ T5866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.059227][ T5866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.108902][ T5836] usb 1-1: device descriptor read/64, error -71 [ 370.138375][ T5859] usb 4-1: Cannot set autoneg [ 370.138583][ T5859] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 370.164614][ T5859] usb 4-1: USB disconnect, device number 2 [ 370.248385][ T5836] usb usb1-port1: attempt power cycle [ 370.403515][ T60] Bluetooth: hci0: Dropping invalid advertising data [ 370.403551][ T60] Bluetooth: hci0: Malformed LE Event: 0x02 [ 370.425485][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 370.514059][ T5898] usb usb8: usbfs: process 5898 (syz.2.29) did not claim interface 0 before use [ 370.671784][ T5836] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 370.691648][ T5836] usb 1-1: device descriptor read/8, error -71 [ 370.792374][ T5904] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 370.792436][ T5904] overlayfs: overlapping lowerdir path [ 370.938223][ T5836] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 370.963162][ T5836] usb 1-1: device descriptor read/8, error -71 [ 371.029988][ T11] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 371.093677][ T5836] usb usb1-port1: unable to enumerate USB device [ 371.207934][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 371.546206][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 371.547259][ T11] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 371.547298][ T11] usb 2-1: can't read configurations, error -71 [ 371.868017][ T198] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 371.918039][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 372.028596][ T198] usb 3-1: Using ep0 maxpacket: 16 [ 372.035466][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.035498][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.035526][ T198] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 372.035557][ T198] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 372.035580][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.082395][ T198] usb 3-1: config 0 descriptor?? [ 372.113232][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.113260][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.145138][ T5836] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 372.145167][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.145186][ T5836] usb 4-1: Product: syz [ 372.145200][ T5836] usb 4-1: Manufacturer: syz [ 372.145215][ T5836] usb 4-1: SerialNumber: syz [ 372.701550][ T5917] Bluetooth: MGMT ver 1.23 [ 372.984678][ T198] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 373.014600][ T198] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 373.014644][ T198] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 373.014670][ T198] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 373.014694][ T198] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 373.014718][ T198] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 373.071857][ T60] Bluetooth: hci3: Dropping invalid advertising data [ 373.071894][ T60] Bluetooth: hci3: Malformed LE Event: 0x02 [ 373.218265][ T5639] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.404098][ T5639] usb 1-1: Using ep0 maxpacket: 16 [ 373.452988][ T5639] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 373.453027][ T5639] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.453055][ T5639] usb 1-1: config 0 interface 0 has no altsetting 0 [ 373.453149][ T5639] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 373.453174][ T5639] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.523150][ T198] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 373.523187][ T198] microsoft 0003:045E:07DA.0001: no inputs found [ 373.523198][ T198] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 373.600672][ T198] usb 3-1: USB disconnect, device number 2 [ 373.861466][ T5639] usb 1-1: config 0 descriptor?? [ 374.211978][ T5930] fido_id[5930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 374.524788][ T5639] usbhid 1-1:0.0: can't add hid device: -71 [ 374.524923][ T5639] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 374.585997][ T5639] usb 1-1: USB disconnect, device number 7 [ 374.666558][ T5836] usb 4-1: 0:1 : does not exist [ 374.666701][ T5836] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 374.760809][ T5943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.752008][ T5938] syz.2.41 (5938) used greatest stack depth: 19624 bytes left [ 375.821600][ T5952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.999843][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 376.006004][ T5947] lo speed is unknown, defaulting to 1000 [ 376.167123][ T5947] lo speed is unknown, defaulting to 1000 [ 376.414624][ T5947] lo speed is unknown, defaulting to 1000 [ 376.514372][ T5836] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 376.550374][ T5836] usb 4-1: USB disconnect, device number 3 [ 376.578060][ T11] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 376.638216][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.729013][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 376.989463][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 377.003551][ T11] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 377.003591][ T11] usb 1-1: can't read configurations, error -71 [ 377.333943][ T5836] lo speed is unknown, defaulting to 1000 [ 377.335585][ T5947] infiniband syz1: set active [ 377.335748][ T5947] infiniband syz1: added lo [ 377.363710][ T5947] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 377.375500][ T5947] infiniband syz1: Couldn't open port 1 [ 377.376049][ T5947] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 377.376081][ T5947] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 377.376118][ T5947] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 377.397995][ T5749] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 377.522827][ T5947] RDS/IB: syz1: added [ 377.524099][ T5947] smc: adding ib device syz1 with port count 1 [ 377.526576][ T5947] smc: ib device syz1 port 1 has no pnetid [ 377.551202][ T5639] lo speed is unknown, defaulting to 1000 [ 377.557085][ T5947] lo speed is unknown, defaulting to 1000 [ 377.577918][ T5749] usb 3-1: Using ep0 maxpacket: 16 [ 377.581285][ T5749] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 377.581320][ T5749] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.581346][ T5749] usb 3-1: config 0 interface 0 has no altsetting 0 [ 377.581380][ T5749] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 377.581405][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.662948][ T5749] usb 3-1: config 0 descriptor?? [ 377.982796][ T5749] usbhid 3-1:0.0: can't add hid device: -71 [ 377.982928][ T5749] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 378.040041][ T5749] usb 3-1: USB disconnect, device number 3 [ 378.077235][ T5984] netlink: 'syz.0.54': attribute type 21 has an invalid length. [ 378.793004][ T6002] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 378.878784][ T5947] lo speed is unknown, defaulting to 1000 [ 379.181907][ T6001] syz.2.58 (6001) used greatest stack depth: 18688 bytes left [ 379.387756][ T5947] lo speed is unknown, defaulting to 1000 [ 379.538032][ T5749] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 379.699368][ T5749] usb 3-1: Using ep0 maxpacket: 16 [ 379.699394][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 379.701831][ T5749] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 379.701856][ T5749] usb 3-1: config 1 has no interface number 0 [ 379.701902][ T5749] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 379.701927][ T5749] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 379.701961][ T5749] usb 3-1: config 1 interface 105 has no altsetting 0 [ 379.709820][ T5749] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 379.709848][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 379.709869][ T5749] usb 3-1: Product: syz [ 379.709883][ T5749] usb 3-1: Manufacturer: syz [ 379.709898][ T5749] usb 3-1: SerialNumber: syz [ 379.839828][ T6007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 379.840045][ T6007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 380.133211][ T5947] lo speed is unknown, defaulting to 1000 [ 380.230587][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 380.262858][ T6007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 380.263063][ T6007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 380.407953][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 380.440923][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.442921][ T11] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 380.443009][ T11] usb 1-1: can't read configurations, error -71 [ 380.557044][ T5749] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 380.576564][ T5749] aqc111 3-1:1.105: probe with driver aqc111 failed with error -32 [ 380.751067][ T6025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.021169][ T6030] EXT4-fs (loop3): unable to read superblock [ 381.139223][ T5749] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 381.277398][ T6034] Zero length message leads to an empty skb [ 381.298029][ T5749] usb 2-1: Using ep0 maxpacket: 16 [ 381.300085][ T5749] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 381.300121][ T5749] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.300140][ T5749] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.300164][ T5749] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 381.300180][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.305141][ T5749] usb 2-1: config 0 descriptor?? [ 381.521791][ T5749] usbhid 2-1:0.0: can't add hid device: -71 [ 381.521916][ T5749] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 381.544586][ T5749] usb 2-1: USB disconnect, device number 6 [ 381.817970][ T11] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 381.978125][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 381.982427][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 381.984946][ T11] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.984975][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.984994][ T11] usb 1-1: Product: syz [ 381.985006][ T11] usb 1-1: Manufacturer: syz [ 381.985019][ T11] usb 1-1: SerialNumber: syz [ 382.052223][ T11] usb 1-1: config 0 descriptor?? [ 382.099657][ T11] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 382.099697][ T11] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 382.370580][ T6041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.371143][ T6041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.385970][ T60] Bluetooth: Unexpected continuation frame (len 16) [ 382.439633][ T6040] netlink: 'syz.1.70': attribute type 39 has an invalid length. [ 382.712246][ T6040] hsr_slave_0: left promiscuous mode [ 382.804709][ T5344] usb 3-1: USB disconnect, device number 4 [ 382.811079][ T6040] hsr_slave_1: left promiscuous mode [ 382.904629][ T11] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 382.950705][ T5859] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 383.202040][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 383.221488][ T5859] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 383.221515][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.221533][ T5859] usb 4-1: config 0 has no interface number 0 [ 383.221586][ T5859] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 383.221611][ T5859] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.221634][ T5859] usb 4-1: config 0 interface 98 has no altsetting 0 [ 383.233116][ T5859] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 383.233201][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.233254][ T5859] usb 4-1: Product: syz [ 383.233297][ T5859] usb 4-1: Manufacturer: syz [ 383.233330][ T5859] usb 4-1: SerialNumber: syz [ 383.325637][ T11] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 383.325672][ T11] em28xx 1-1:0.0: board has no eeprom [ 383.365150][ T5859] usb 4-1: config 0 descriptor?? [ 383.379648][ T6044] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 383.379850][ T6044] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 383.398586][ T5836] IPVS: starting estimator thread 0... [ 383.528125][ T6049] IPVS: using max 11 ests per chain, 26400 per kthread [ 383.607177][ T6044] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 383.607365][ T6044] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 383.813178][ T11] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 383.813233][ T11] em28xx 1-1:0.0: dvb set to bulk mode. [ 383.839957][ T198] em28xx 1-1:0.0: Binding DVB extension [ 383.850181][ T5859] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 383.850473][ T5859] asix 4-1:0.98: probe with driver asix failed with error -71 [ 383.984038][ T5859] usb 4-1: USB disconnect, device number 4 [ 384.098038][ T11] usb 1-1: USB disconnect, device number 12 [ 384.236143][ T11] em28xx 1-1:0.0: Disconnecting em28xx [ 384.517185][ T198] em28xx 1-1:0.0: Registering input extension [ 384.521455][ T11] em28xx 1-1:0.0: Closing input extension [ 384.675495][ T6068] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 384.820869][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 385.007676][ T11] em28xx 1-1:0.0: Freeing device [ 385.348214][ T198] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 385.421279][ T11] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 385.498122][ T198] usb 3-1: Using ep0 maxpacket: 16 [ 385.500280][ T198] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 176, changing to 11 [ 385.500313][ T198] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.500342][ T198] usb 3-1: config 0 interface 0 has no altsetting 0 [ 385.500366][ T198] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 385.500389][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.509029][ T198] usb 3-1: config 0 descriptor?? [ 385.619053][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 385.772091][ T5859] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 385.835741][ T198] usbhid 3-1:0.0: can't add hid device: -71 [ 385.835975][ T198] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 385.875366][ T11] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.877126][ T11] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 385.877163][ T11] usb 1-1: can't read configurations, error -71 [ 385.924685][ T198] usb 3-1: USB disconnect, device number 5 [ 385.952448][ T5859] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.952485][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.952499][ T5859] usb 4-1: Product: syz [ 385.952509][ T5859] usb 4-1: Manufacturer: syz [ 385.952520][ T5859] usb 4-1: SerialNumber: syz [ 386.065738][ T5859] usb 4-1: config 0 descriptor?? [ 386.117672][ T6090] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 386.117689][ T6090] netlink: 756 bytes leftover after parsing attributes in process `syz.1.84'. [ 386.328688][ T5859] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 386.535909][ T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 386.536035][ T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 386.536058][ T60] Tainted: [L]=SOFTLOCKUP [ 386.536063][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.536074][ T60] Workqueue: hci0 hci_rx_work [ 386.536151][ T60] Call Trace: [ 386.536177][ T60] [ 386.536204][ T60] dump_stack_lvl+0xe8/0x150 [ 386.536245][ T60] sysfs_create_dir_ns+0x271/0x2a0 [ 386.536264][ T60] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 386.536287][ T60] ? rt_spin_unlock+0x163/0x200 [ 386.536305][ T60] kobject_add_internal+0x62c/0xce0 [ 386.536337][ T60] kobject_add+0x163/0x240 [ 386.536360][ T60] ? rt_spin_unlock+0x157/0x200 [ 386.536380][ T60] ? __pfx_kobject_add+0x10/0x10 [ 386.536413][ T60] ? get_device_parent+0x370/0x3a0 [ 386.536438][ T60] device_add+0x3fa/0xb80 [ 386.536459][ T60] hci_conn_add_sysfs+0xd5/0x210 [ 386.536482][ T60] le_conn_complete_evt+0xfef/0x1580 [ 386.536518][ T60] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 386.536569][ T60] ? lockdep_hardirqs_on+0x7a/0x110 [ 386.536597][ T60] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 386.536625][ T60] ? rt_mutex_slowunlock+0x219/0x460 [ 386.536648][ T60] ? skb_pull_data+0xf0/0x200 [ 386.536692][ T60] hci_le_conn_complete_evt+0x187/0x470 [ 386.536723][ T60] hci_event_packet+0x67a/0xf10 [ 386.536750][ T60] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 386.536773][ T60] ? __pfx_hci_event_packet+0x10/0x10 [ 386.536793][ T60] ? rt_spin_unlock+0x157/0x200 [ 386.536821][ T60] ? hci_send_to_monitor+0xe2/0x590 [ 386.536844][ T60] hci_rx_work+0x3ee/0x1020 [ 386.536872][ T60] ? process_one_work+0x8cd/0x12b0 [ 386.536896][ T60] process_one_work+0x93a/0x12b0 [ 386.536933][ T60] ? __pfx_process_one_work+0x10/0x10 [ 386.536956][ T60] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.536980][ T60] ? assign_work+0x3cf/0x5d0 [ 386.537014][ T60] worker_thread+0xb05/0x10d0 [ 386.537058][ T60] kthread+0x388/0x470 [ 386.537077][ T60] ? __pfx_worker_thread+0x10/0x10 [ 386.537102][ T60] ? __pfx_kthread+0x10/0x10 [ 386.537122][ T60] ret_from_fork+0x514/0xb70 [ 386.537144][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 386.537164][ T60] ? __switch_to+0xc89/0x1420 [ 386.537182][ T60] ? __pfx_kthread+0x10/0x10 [ 386.537202][ T60] ret_from_fork_asm+0x1a/0x30 [ 386.537234][ T60] [ 386.537266][ T60] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 386.537294][ T60] Bluetooth: hci0: failed to register connection device [ 387.155090][ T6098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 387.631396][ T6103] netlink: 152 bytes leftover after parsing attributes in process `syz.0.87'. [ 387.755427][ T6106] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 387.755449][ T6106] netlink: 756 bytes leftover after parsing attributes in process `syz.0.87'. [ 387.927963][ T37] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 388.075293][ T5859] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 388.078230][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 388.092176][ T5859] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 388.092334][ T5859] usb 4-1: media controller created [ 388.121121][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 388.144545][ T37] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 388.145064][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.145089][ T37] usb 3-1: Product: syz [ 388.145105][ T37] usb 3-1: Manufacturer: syz [ 388.145119][ T37] usb 3-1: SerialNumber: syz [ 388.202422][ T37] usb 3-1: config 0 descriptor?? [ 388.246257][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.502329][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.578242][ T6115] tipc: Started in network mode [ 388.578283][ T6115] tipc: Node identity 22cf583bcddb, cluster identity 4711 [ 388.578909][ T6115] tipc: Enabled bearer , priority 0 [ 388.686699][ T6115] tipc: Disabling bearer [ 388.687622][ T5859] i2c i2c-1: Added multiplexed i2c bus 2 [ 388.687647][ T5859] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 388.709209][ T5859] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 388.721336][ T5859] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 388.792861][ T5859] DVB: Unable to find symbol r820t_attach() [ 389.159458][ T6126] netlink: 220 bytes leftover after parsing attributes in process `syz.0.92'. [ 389.159487][ T6126] netlink: 112 bytes leftover after parsing attributes in process `syz.0.92'. [ 389.294260][ T5859] usb 4-1: USB disconnect, device number 5 [ 389.343055][ T5749] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 389.500041][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.500073][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 389.500100][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 389.500127][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.502548][ T5749] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 389.502577][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.502604][ T5749] usb 2-1: Product: syz [ 389.502618][ T5749] usb 2-1: Manufacturer: syz [ 389.502631][ T5749] usb 2-1: SerialNumber: syz [ 389.538414][ T5749] usb 2-1: config 0 descriptor?? [ 389.739452][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 390.088003][ T5749] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 390.247946][ T5749] usb 4-1: Using ep0 maxpacket: 32 [ 390.352105][ T5749] usb 4-1: unable to get BOS descriptor or descriptor too short [ 390.353181][ T5749] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 390.353218][ T5749] usb 4-1: can't read configurations, error -71 [ 390.635380][ T6142] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.722114][ T5859] usb 3-1: USB disconnect, device number 6 [ 390.967506][ T6150] loop5: detected capacity change from 0 to 14 [ 391.105500][ T6155] sg_write: data in/out 200668/136 bytes for SCSI command 0x0-- guessing data in; [ 391.105500][ T6155] program syz.2.99 not setting count and/or reply_len properly [ 391.141585][ T6155] FAULT_INJECTION: forcing a failure. [ 391.141585][ T6155] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 391.141627][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: syz.2.99 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.141655][ T6155] Tainted: [L]=SOFTLOCKUP [ 391.141662][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.141674][ T6155] Call Trace: [ 391.141683][ T6155] [ 391.141692][ T6155] dump_stack_lvl+0xe8/0x150 [ 391.141725][ T6155] should_fail_ex+0x467/0x600 [ 391.141763][ T6155] _copy_from_iter+0x1d3/0x1660 [ 391.141789][ T6155] ? pfn_valid+0x125/0x4c0 [ 391.141825][ T6155] ? pfn_valid+0x125/0x4c0 [ 391.141854][ T6155] ? pfn_valid+0x440/0x4c0 [ 391.141883][ T6155] ? __pfx__copy_from_iter+0x10/0x10 [ 391.141904][ T6155] ? bvec_try_merge_page+0x186/0x280 [ 391.141943][ T6155] ? bio_add_page+0x42c/0x700 [ 391.141988][ T6155] copy_page_from_iter+0x219/0x2d0 [ 391.142015][ T6155] blk_rq_map_user_iov+0xcb5/0x1840 [ 391.142060][ T6155] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 391.142102][ T6155] ? import_ubuf+0xfb/0x1d0 [ 391.142130][ T6155] blk_rq_map_user_io+0x2ae/0x440 [ 391.142164][ T6155] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 391.142204][ T6155] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 391.142233][ T6155] ? lockdep_hardirqs_on+0x7a/0x110 [ 391.142276][ T6155] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 391.142307][ T6155] ? rt_mutex_slowunlock+0x219/0x460 [ 391.142330][ T6155] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 391.142362][ T6155] sg_common_write+0xc73/0x1310 [ 391.142408][ T6155] ? __pfx_sg_common_write+0x10/0x10 [ 391.142432][ T6155] ? lockdep_hardirqs_on+0x7a/0x110 [ 391.142459][ T6155] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 391.142486][ T6155] ? ___ratelimit+0x584/0x8e0 [ 391.142517][ T6155] sg_write+0xafc/0xf10 [ 391.142545][ T6155] ? __pfx_sg_write+0x10/0x10 [ 391.142568][ T6155] ? __pfx_aa_file_perm+0x10/0x10 [ 391.142630][ T6155] ? bpf_lsm_file_permission+0x9/0x20 [ 391.142654][ T6155] ? security_file_permission+0x75/0x260 [ 391.142682][ T6155] ? rw_verify_area+0x209/0x4d0 [ 391.142711][ T6155] ? __pfx_sg_write+0x10/0x10 [ 391.142732][ T6155] vfs_write+0x29f/0xbb0 [ 391.142768][ T6155] ? __pfx_vfs_write+0x10/0x10 [ 391.142796][ T6155] ? __fget_files+0x2a/0x420 [ 391.142822][ T6155] ? __fget_files+0x2a/0x420 [ 391.142843][ T6155] ? __fget_files+0x3a8/0x420 [ 391.142865][ T6155] ? __fget_files+0x2a/0x420 [ 391.142897][ T6155] ksys_write+0x156/0x270 [ 391.142926][ T6155] ? __pfx_ksys_write+0x10/0x10 [ 391.142970][ T6155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.142995][ T6155] do_syscall_64+0x174/0x580 [ 391.143023][ T6155] ? trace_irq_disable+0x3b/0x140 [ 391.143051][ T6155] ? clear_bhb_loop+0x40/0x90 [ 391.143076][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.143094][ T6155] RIP: 0033:0x7fd51052ce59 [ 391.143181][ T6155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.143204][ T6155] RSP: 002b:00007fd50e786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.143282][ T6155] RAX: ffffffffffffffda RBX: 00007fd5107a5fa0 RCX: 00007fd51052ce59 [ 391.143297][ T6155] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000003 [ 391.143310][ T6155] RBP: 00007fd50e786090 R08: 0000000000000000 R09: 0000000000000000 [ 391.143321][ T6155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.143333][ T6155] R13: 00007fd5107a6038 R14: 00007fd5107a5fa0 R15: 00007ffd0871dc48 [ 391.143358][ T6155] [ 391.427337][ T6150] Dev loop5: unable to read RDB block 8 [ 391.427489][ T6150] loop5: AHDI p1 [ 392.008348][ T5859] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 392.101759][ T6167] FAULT_INJECTION: forcing a failure. [ 392.101759][ T6167] name failslab, interval 1, probability 0, space 0, times 1 [ 392.101800][ T6167] CPU: 1 UID: 0 PID: 6167 Comm: syz.0.104 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.101829][ T6167] Tainted: [L]=SOFTLOCKUP [ 392.101852][ T6167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.101865][ T6167] Call Trace: [ 392.101873][ T6167] [ 392.101888][ T6167] dump_stack_lvl+0xe8/0x150 [ 392.101920][ T6167] should_fail_ex+0x467/0x600 [ 392.101960][ T6167] should_failslab+0xa8/0x100 [ 392.101988][ T6167] __kmalloc_noprof+0xfe/0x780 [ 392.102010][ T6167] ? rcu_is_watching+0x15/0xb0 [ 392.102044][ T6167] ? tomoyo_realpath_from_path+0xef/0x640 [ 392.102078][ T6167] ? tomoyo_realpath_from_path+0xef/0x640 [ 392.102120][ T6167] tomoyo_realpath_from_path+0xef/0x640 [ 392.102169][ T6167] tomoyo_mount_permission+0x3e9/0x9e0 [ 392.102201][ T6167] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 392.102237][ T6167] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 392.102268][ T6167] ? kasan_save_track+0x4f/0x80 [ 392.102345][ T6167] ? kasan_quarantine_put+0xbb/0x1f0 [ 392.102376][ T6167] security_sb_mount+0xe4/0x320 [ 392.102412][ T6167] path_mount+0xbc/0x1040 [ 392.102440][ T6167] ? user_path_at+0xd4/0x160 [ 392.102469][ T6167] __se_sys_mount+0x31d/0x420 [ 392.102499][ T6167] ? __pfx___se_sys_mount+0x10/0x10 [ 392.102535][ T6167] ? __x64_sys_mount+0x20/0xc0 [ 392.102558][ T6167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.102582][ T6167] do_syscall_64+0x174/0x580 [ 392.102611][ T6167] ? trace_irq_disable+0x3b/0x140 [ 392.102640][ T6167] ? clear_bhb_loop+0x40/0x90 [ 392.102667][ T6167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.102690][ T6167] RIP: 0033:0x7f3324b5ce59 [ 392.102710][ T6167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.102729][ T6167] RSP: 002b:00007f3322dae028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.102751][ T6167] RAX: ffffffffffffffda RBX: 00007f3324dd5fa0 RCX: 00007f3324b5ce59 [ 392.102766][ T6167] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 392.102780][ T6167] RBP: 00007f3322dae090 R08: 0000200000000280 R09: 0000000000000000 [ 392.102793][ T6167] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 392.102805][ T6167] R13: 00007f3324dd6038 R14: 00007f3324dd5fa0 R15: 00007ffe251d96b8 [ 392.102838][ T6167] [ 392.102871][ T6167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.392828][ T198] usb 2-1: USB disconnect, device number 7 [ 392.483762][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 392.483800][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.483823][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.483865][ T5859] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 392.483889][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.545405][ T5859] usb 4-1: config 0 descriptor?? [ 392.799125][ T6158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.846212][ T6158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.868159][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.877575][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.965726][ T5664] Bluetooth: hci1: Malformed Event: 0x2f [ 393.062732][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.071144][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.137325][ T6188] netlink: 'syz.1.107': attribute type 1 has an invalid length. [ 393.238000][ T5749] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 393.412521][ T5749] usb 1-1: No LPM exit latency info found, disabling LPM. [ 393.426919][ T5749] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.451975][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 393.594018][ T5664] Bluetooth: hci0: command 0x0406 tx timeout [ 393.918397][ T5836] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 394.036176][ T5859] usbhid 4-1:0.0: can't add hid device: -71 [ 394.036342][ T5859] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 394.058071][ T37] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 394.077928][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 394.149379][ T5836] usb 3-1: unable to get BOS descriptor or descriptor too short [ 394.150511][ T5836] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 394.150544][ T5836] usb 3-1: can't read configurations, error -71 [ 394.191239][ T5859] usb 4-1: USB disconnect, device number 8 [ 394.214953][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 394.217336][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.217368][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 394.217396][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 394.217439][ T37] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 394.217463][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.282455][ T37] usb 2-1: config 0 descriptor?? [ 394.304765][ T6196] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 394.363098][ T37] hub 2-1:0.0: USB hub found [ 394.512229][ T37] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 394.561074][ T37] usbhid 2-1:0.0: can't add hid device: -71 [ 394.561207][ T37] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 394.669957][ T37] usb 2-1: USB disconnect, device number 8 [ 395.623863][ T5749] usb 1-1: New USB device found, idVendor=056a, idProduct=ffff, bcdDevice= 0.40 [ 395.623896][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.661093][ T6218] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 395.662405][ T5749] usb 1-1: can't set config #1, error -71 [ 395.680851][ T5749] usb 1-1: USB disconnect, device number 15 [ 395.719075][ T5859] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 395.895692][ T5859] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 395.895725][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 395.895747][ T5859] usb 4-1: Product: syz [ 395.895762][ T5859] usb 4-1: Manufacturer: syz [ 395.895776][ T5859] usb 4-1: SerialNumber: syz [ 395.957614][ T5859] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 396.063903][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 396.329002][ T6231] netlink: 44 bytes leftover after parsing attributes in process `syz.2.123'. [ 396.370520][ T5859] vp7045: USB control message 'in' went wrong. [ 396.370554][ T5859] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 396.370596][ T5859] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 396.635660][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 396.819915][ T6245] comedi comedi3: dt2815: I/O base address or length out of range [ 397.078929][ T5639] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 397.149292][ T38] audit: type=1326 audit(1782563658.555:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.128" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3324b5ce59 code=0x0 [ 397.233967][ T5639] usb 3-1: Using ep0 maxpacket: 32 [ 397.344463][ T5639] usb 3-1: unable to get BOS descriptor or descriptor too short [ 397.345521][ T5639] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 397.345566][ T5639] usb 3-1: can't read configurations, error -71 [ 397.407646][ T6253] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 397.898012][ T37] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 398.048004][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 398.080009][ T37] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 398.080039][ T37] usb 2-1: config 0 has no interface number 0 [ 398.080084][ T37] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 398.080110][ T37] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 398.118875][ T37] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 398.118962][ T37] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 398.119016][ T37] usb 2-1: Product: syz [ 398.119058][ T37] usb 2-1: SerialNumber: syz [ 398.161225][ T37] usb 2-1: config 0 descriptor?? [ 398.195738][ T37] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 398.341635][ T37] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 398.401361][ T6259] FAULT_INJECTION: forcing a failure. [ 398.401361][ T6259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.401402][ T6259] CPU: 1 UID: 0 PID: 6259 Comm: syz.2.132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.401430][ T6259] Tainted: [L]=SOFTLOCKUP [ 398.401437][ T6259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.401448][ T6259] Call Trace: [ 398.401456][ T6259] [ 398.401465][ T6259] dump_stack_lvl+0xe8/0x150 [ 398.401498][ T6259] should_fail_ex+0x467/0x600 [ 398.401547][ T6259] _copy_from_user+0x2d/0xb0 [ 398.401579][ T6259] ___sys_recvmsg+0x173/0x5a0 [ 398.401618][ T6259] ? __pfx____sys_recvmsg+0x10/0x10 [ 398.401655][ T6259] ? __fget_files+0x2a/0x420 [ 398.401697][ T6259] ? __fget_files+0x3a8/0x420 [ 398.401732][ T6259] __x64_sys_recvmsg+0x1b4/0x290 [ 398.401766][ T6259] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 398.401816][ T6259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.401841][ T6259] do_syscall_64+0x174/0x580 [ 398.401871][ T6259] ? trace_irq_disable+0x3b/0x140 [ 398.401900][ T6259] ? clear_bhb_loop+0x40/0x90 [ 398.401928][ T6259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.401950][ T6259] RIP: 0033:0x7fd51052ce59 [ 398.401970][ T6259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.401988][ T6259] RSP: 002b:00007fd50e786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 398.402011][ T6259] RAX: ffffffffffffffda RBX: 00007fd5107a5fa0 RCX: 00007fd51052ce59 [ 398.402026][ T6259] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 398.402047][ T6259] RBP: 00007fd50e786090 R08: 0000000000000000 R09: 0000000000000000 [ 398.402059][ T6259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.402070][ T6259] R13: 00007fd5107a6038 R14: 00007fd5107a5fa0 R15: 00007ffd0871dc48 [ 398.402099][ T6259] [ 398.433983][ T37] ------------[ cut here ]------------ [ 398.434000][ T37] URB ffff88802a16cd00 submitted while active [ 398.434049][ T37] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: kworker/1:1/37 [ 398.434097][ T37] Modules linked in: [ 398.434121][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.434150][ T37] Tainted: [L]=SOFTLOCKUP [ 398.434157][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.434171][ T37] Workqueue: usb_hub_wq hub_event [ 398.434198][ T37] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 398.434220][ T37] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 0e 60 fb 49 83 3e 00 74 40 e8 4e 3e f4 fa 48 8d 3d d7 af e9 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 33 3e f4 fa eb 05 e8 2c 3e [ 398.434236][ T37] RSP: 0018:ffffc90000ac6c78 EFLAGS: 00010287 [ 398.434255][ T37] RAX: ffffffff86d0fb82 RBX: ffff88802a16cd00 RCX: 0000000000100000 [ 398.434271][ T37] RDX: ffffc90019308000 RSI: ffff88802a16cd00 RDI: ffffffff8fbaab60 [ 398.434287][ T37] RBP: dffffc0000000000 R08: ffffffff8fadd4f7 R09: 1ffffffff1f5ba9e [ 398.434301][ T37] R10: dffffc0000000000 R11: fffffbfff1f5ba9f R12: 1ffff11006ad4d0a [ 398.434317][ T37] R13: ffff8880356a6848 R14: ffff88802a16cd08 R15: 0000000000000cc0 [ 398.434333][ T37] FS: 0000000000000000(0000) GS:ffff888125d83000(0000) knlGS:0000000000000000 [ 398.434350][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.434364][ T37] CR2: 0000200000002b20 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 398.434385][ T37] Call Trace: [ 398.434395][ T37] [ 398.434404][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 398.434436][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 398.434501][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 398.434522][ T37] ? cm109_input_open+0x97/0x460 [ 398.434550][ T37] cm109_input_open+0x1fb/0x460 [ 398.434575][ T37] input_open_device+0x1f9/0x3b0 [ 398.434611][ T37] kbd_connect+0xf6/0x150 [ 398.434641][ T37] input_register_device+0xd08/0x1150 [ 398.434682][ T37] cm109_usb_probe+0x11e4/0x16f0 [ 398.434749][ T37] usb_probe_interface+0x653/0xc60 [ 398.434793][ T37] ? __pfx_usb_probe_interface+0x10/0x10 [ 398.434822][ T37] really_probe+0x254/0xae0 [ 398.434855][ T37] __driver_probe_device+0x1e8/0x360 [ 398.434887][ T37] driver_probe_device+0x4f/0x240 [ 398.434919][ T37] __device_attach_driver+0x270/0x410 [ 398.434968][ T37] bus_for_each_drv+0x25b/0x2f0 [ 398.434992][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 398.435023][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 398.435045][ T37] ? rt_spin_unlock+0x163/0x200 [ 398.435076][ T37] __device_attach+0x2c7/0x450 [ 398.435103][ T37] ? rt_spin_unlock+0x157/0x200 [ 398.435131][ T37] ? __pfx___device_attach+0x10/0x10 [ 398.435166][ T37] device_initial_probe+0xa1/0xd0 [ 398.435574][ T37] bus_probe_device+0x12d/0x220 [ 398.435616][ T37] device_add+0x7d7/0xb80 [ 398.435647][ T37] usb_set_configuration+0x1ad8/0x2180 [ 398.435718][ T37] usb_generic_driver_probe+0x8d/0x150 [ 398.435751][ T37] usb_probe_device+0x1c3/0x3b0 [ 398.435788][ T37] ? __pfx_usb_probe_device+0x10/0x10 [ 398.435822][ T37] really_probe+0x254/0xae0 [ 398.435860][ T37] __driver_probe_device+0x1e8/0x360 [ 398.435894][ T37] driver_probe_device+0x4f/0x240 [ 398.435931][ T37] __device_attach_driver+0x270/0x410 [ 398.435974][ T37] bus_for_each_drv+0x25b/0x2f0 [ 398.435999][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 398.436030][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 398.436053][ T37] ? rt_spin_unlock+0x163/0x200 [ 398.436083][ T37] __device_attach+0x2c7/0x450 [ 398.436112][ T37] ? __pfx___device_attach+0x10/0x10 [ 398.436149][ T37] device_initial_probe+0xa1/0xd0 [ 398.436178][ T37] bus_probe_device+0x12d/0x220 [ 398.436202][ T37] device_add+0x7d7/0xb80 [ 398.436230][ T37] usb_new_device+0x98d/0x1610 [ 398.436250][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 398.436283][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 398.436305][ T37] ? __pfx_usb_new_device+0x10/0x10 [ 398.436338][ T37] hub_event+0x28cf/0x4cf0 [ 398.436425][ T37] ? __pfx_hub_event+0x10/0x10 [ 398.436452][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.436500][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.436529][ T37] ? rcu_is_watching+0x15/0xb0 [ 398.436561][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.436590][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.436619][ T37] process_one_work+0x93a/0x12b0 [ 398.436667][ T37] ? __pfx_process_one_work+0x10/0x10 [ 398.436696][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 398.436729][ T37] ? assign_work+0x3cf/0x5d0 [ 398.436767][ T37] worker_thread+0xb05/0x10d0 [ 398.436807][ T37] ? __kthread_parkme+0x71/0x1f0 [ 398.436838][ T37] kthread+0x388/0x470 [ 398.436863][ T37] ? __pfx_worker_thread+0x10/0x10 [ 398.436892][ T37] ? __pfx_kthread+0x10/0x10 [ 398.436918][ T37] ret_from_fork+0x514/0xb70 [ 398.436948][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 398.436973][ T37] ? __switch_to+0xc89/0x1420 [ 398.437000][ T37] ? __pfx_kthread+0x10/0x10 [ 398.437026][ T37] ret_from_fork_asm+0x1a/0x30 [ 398.437067][ T37] [ 398.437141][ T37] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 398.437162][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.437192][ T37] Tainted: [L]=SOFTLOCKUP [ 398.437199][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.437213][ T37] Workqueue: usb_hub_wq hub_event [ 398.437241][ T37] Call Trace: [ 398.437250][ T37] [ 398.437260][ T37] vpanic+0x56c/0xa60 [ 398.437291][ T37] ? __pfx__printk+0x10/0x10 [ 398.437313][ T37] ? __pfx_vpanic+0x10/0x10 [ 398.437341][ T37] ? is_bpf_text_address+0x292/0x2b0 [ 398.437375][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 398.437414][ T37] panic+0xc5/0xd0 [ 398.437442][ T37] ? __pfx_panic+0x10/0x10 [ 398.437480][ T37] ? ret_from_fork_asm+0x1a/0x30 [ 398.437524][ T37] __warn+0x315/0x4c0 [ 398.437555][ T37] ? usb_submit_urb+0x79/0x18b0 [ 398.437581][ T37] ? usb_submit_urb+0x79/0x18b0 [ 398.437600][ T37] __report_bug+0x331/0x530 [ 398.437633][ T37] ? usb_submit_urb+0x79/0x18b0 [ 398.437655][ T37] ? __pfx___report_bug+0x10/0x10 [ 398.437700][ T37] report_bug_entry+0x19a/0x290 [ 398.437727][ T37] ? usb_submit_urb+0x7c/0x18b0 [ 398.437748][ T37] ? usb_submit_urb+0x81/0x18b0 [ 398.437768][ T37] handle_bug+0xce/0x200 [ 398.437806][ T37] exc_invalid_op+0x1a/0x50 [ 398.437839][ T37] asm_exc_invalid_op+0x1a/0x20 [ 398.437860][ T37] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 398.437879][ T37] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 0e 60 fb 49 83 3e 00 74 40 e8 4e 3e f4 fa 48 8d 3d d7 af e9 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 33 3e f4 fa eb 05 e8 2c 3e [ 398.437896][ T37] RSP: 0018:ffffc90000ac6c78 EFLAGS: 00010287 [ 398.437915][ T37] RAX: ffffffff86d0fb82 RBX: ffff88802a16cd00 RCX: 0000000000100000 [ 398.437931][ T37] RDX: ffffc90019308000 RSI: ffff88802a16cd00 RDI: ffffffff8fbaab60 [ 398.437947][ T37] RBP: dffffc0000000000 R08: ffffffff8fadd4f7 R09: 1ffffffff1f5ba9e [ 398.437972][ T37] R10: dffffc0000000000 R11: fffffbfff1f5ba9f R12: 1ffff11006ad4d0a [ 398.437989][ T37] R13: ffff8880356a6848 R14: ffff88802a16cd08 R15: 0000000000000cc0 [ 398.438013][ T37] ? usb_submit_urb+0x72/0x18b0 [ 398.438041][ T37] ? usb_submit_urb+0x72/0x18b0 [ 398.438060][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 398.438085][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 398.438112][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 398.438131][ T37] ? cm109_input_open+0x97/0x460 [ 398.438156][ T37] cm109_input_open+0x1fb/0x460 [ 398.438183][ T37] input_open_device+0x1f9/0x3b0 [ 398.438217][ T37] kbd_connect+0xf6/0x150 [ 398.438247][ T37] input_register_device+0xd08/0x1150 [ 398.438288][ T37] cm109_usb_probe+0x11e4/0x16f0 [ 398.438335][ T37] usb_probe_interface+0x653/0xc60 [ 398.438389][ T37] ? __pfx_usb_probe_interface+0x10/0x10 [ 398.438419][ T37] really_probe+0x254/0xae0 [ 398.438456][ T37] __driver_probe_device+0x1e8/0x360 [ 398.438501][ T37] driver_probe_device+0x4f/0x240 [ 398.438536][ T37] __device_attach_driver+0x270/0x410 [ 398.438574][ T37] bus_for_each_drv+0x25b/0x2f0 [ 398.438597][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 398.438628][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 398.438654][ T37] ? rt_spin_unlock+0x163/0x200 [ 398.438684][ T37] __device_attach+0x2c7/0x450 [ 398.438711][ T37] ? rt_spin_unlock+0x157/0x200 [ 398.438736][ T37] ? __pfx___device_attach+0x10/0x10 [ 398.438773][ T37] device_initial_probe+0xa1/0xd0 [ 398.438807][ T37] bus_probe_device+0x12d/0x220 [ 398.438844][ T37] device_add+0x7d7/0xb80 [ 398.438874][ T37] usb_set_configuration+0x1ad8/0x2180 [ 398.438933][ T37] usb_generic_driver_probe+0x8d/0x150 [ 398.438968][ T37] usb_probe_device+0x1c3/0x3b0 [ 398.439004][ T37] ? __pfx_usb_probe_device+0x10/0x10 [ 398.439031][ T37] really_probe+0x254/0xae0 [ 398.439068][ T37] __driver_probe_device+0x1e8/0x360 [ 398.439099][ T37] driver_probe_device+0x4f/0x240 [ 398.439136][ T37] __device_attach_driver+0x270/0x410 [ 398.439174][ T37] bus_for_each_drv+0x25b/0x2f0 [ 398.439197][ T37] ? __pfx___device_attach_driver+0x10/0x10 [ 398.439228][ T37] ? __pfx_bus_for_each_drv+0x10/0x10 [ 398.439252][ T37] ? rt_spin_unlock+0x163/0x200 [ 398.439284][ T37] __device_attach+0x2c7/0x450 [ 398.439319][ T37] ? __pfx___device_attach+0x10/0x10 [ 398.439360][ T37] device_initial_probe+0xa1/0xd0 [ 398.439391][ T37] bus_probe_device+0x12d/0x220 [ 398.439418][ T37] device_add+0x7d7/0xb80 [ 398.439451][ T37] usb_new_device+0x98d/0x1610 [ 398.439474][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 398.439518][ T37] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 398.439542][ T37] ? __pfx_usb_new_device+0x10/0x10 [ 398.439576][ T37] hub_event+0x28cf/0x4cf0 [ 398.439663][ T37] ? __pfx_hub_event+0x10/0x10 [ 398.439693][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.439733][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.439765][ T37] ? rcu_is_watching+0x15/0xb0 [ 398.439800][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.439833][ T37] ? process_one_work+0x8cd/0x12b0 [ 398.439865][ T37] process_one_work+0x93a/0x12b0 [ 398.439928][ T37] ? __pfx_process_one_work+0x10/0x10 [ 398.439963][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 398.440006][ T37] ? assign_work+0x3cf/0x5d0 [ 398.440045][ T37] worker_thread+0xb05/0x10d0 [ 398.440093][ T37] ? __kthread_parkme+0x71/0x1f0 [ 398.440128][ T37] kthread+0x388/0x470 [ 398.440156][ T37] ? __pfx_worker_thread+0x10/0x10 [ 398.440189][ T37] ? __pfx_kthread+0x10/0x10 [ 398.440215][ T37] ret_from_fork+0x514/0xb70 [ 398.440248][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 398.440276][ T37] ? __switch_to+0xc89/0x1420 [ 398.440303][ T37] ? __pfx_kthread+0x10/0x10 [ 398.440332][ T37] ret_from_fork_asm+0x1a/0x30 [ 398.440377][ T37] [ 398.440962][ T37] Kernel Offset: disabled