last executing test programs: 1m55.57535971s ago: executing program 2 (id=2682): openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/failslab/space\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00') syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ptrace(0x10, r0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) r2 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008505090581fcffffff00000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000240)={0x4, &(0x7f0000000340)=[{0x18, '\x00', @st={0x4, [{0x1, @svalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x94}, {0x2, @svalue=0x7}]}, 0x2}, {0x19, '\x00', @st={0x4, [{0x2, @uvalue=0x2000000}, {0x2, @uvalue=0xffff}, {0x3, @svalue=0x3}, {0x2, @svalue=0x7ff}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x32, '\x00', @st={0x4, [{0x3, @uvalue=0x10000000000000c2}, {0x3, @uvalue=0x57}, {0x0, @uvalue=0xfffffffffffff800}, {0x2, @svalue=0x7fffffffffffffff}]}, 0x10000}, {0x43, '\x00', @st={0x4, [{0x3, @svalue=0x8}, {0x1, @uvalue=0x65}, {0x3, @uvalue=0x73eb}, {0x3, @svalue=0xa}]}, 0x223}, {0x2b, '\x00', @st={0x4, [{0x0, @svalue=0xa0}, {0x1}, {0x0, @svalue=0x100000001}, {0x3, @svalue=0x50c}]}, 0x1ff}, {0x36, '\x00', @buffer={"73311652243653b15a852d2acad41aecf04187e4e00d3317fd6a4cabb9120d28", 0x20}, 0x8}]}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket(0x18, 0x0, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x264, 0x23b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000429bd70000000", @ANYBLOB="d4f8bc7eb5655521d87f0d73b5fe04e76b0d39a4037be470d4a413997967d9b69d94812030db1f15dd15a8364a210200"], 0x1c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r7, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 1m51.439151394s ago: executing program 2 (id=2710): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000010) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000097ff82089cc705109bc10000000109021200010000000009048f0000bf575a00"], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) syz_usb_disconnect(0xffffffffffffffff) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x400000000000404, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@userptr={0xfffffff7, 0x2, 0x4, 0x100000, 0xffff, {}, {0x4, 0xc, 0x88, 0x20, 0xc, 0x6, "2097d12c"}, 0xffff8001, 0x2, {0x0}, 0x5692}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000006c0)={0x2, 0x0, [{0x1, 0x4, 0x1, 0x0, @msi={0x102, 0xa, 0xb6, 0x3}}, {0x776, 0x2, 0x0, 0x0, @adapter={0x100, 0x10, 0x5, 0x800}}]}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) r7 = dup(r3) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a8553c7f", @ANYRES16=0x0, @ANYBLOB="eda82abd7000fcdbdf25030000002000018014000400fe880000000000000000000000000101060001000a000000"], 0x34}, 0x1, 0x0, 0x0, 0x881d}, 0x4000800) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x8c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000740)={[0x70, 0x0, 0xc5, 0x6, 0x3ff, 0xffffffffffffffff, 0x1, 0xc, 0x2, 0x1f0, 0x5, 0x1, 0xf444, 0xfffffffffffffffe, 0x7ff, 0x10001], 0xe000, 0xc080}) process_mrelease(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff02000000000000000000000000000104"], 0xfdef) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x1f, 0x2}], 0x10) close(r1) 1m49.371294726s ago: executing program 2 (id=2726): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x13, r5, 0x9000) write$binfmt_aout(r5, 0x0, 0xffffffdb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x82) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000092}]}) r9 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc040ff0b, &(0x7f0000000180)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) 1m49.139467698s ago: executing program 2 (id=2727): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd2, 0xc0103) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0xc, 0x9, 0x2011, 0x7, 0x3, 0x1, 0x0, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xd, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "000000fffffffffffff29bed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"}]}}]}, 0x170}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x110004, &(0x7f0000000440)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB="e772394d049a53b5202c677208a10e1a944efcac46000000", @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x270) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}}, 0x24008040) 1m48.145333268s ago: executing program 2 (id=2734): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r1 = getegid() getgroups(0x3, &(0x7f0000000080)=[r0, 0xee00, r1]) socket$igmp(0x2, 0x3, 0x2) (async) getgroups(0x3, &(0x7f00000000c0)=[r0, r4, r1]) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r6, &(0x7f0000002180)={0x18, 0x0, r7, {0x5}}, 0x18) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000002280)='./file0\x00', 0x1000, 0x400, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f00000023c0)=[r5, r5, r2, r3, r0, r8, r9, r0]) (async) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f0000002400)) lstat(&(0x7f0000002480)='./file0\x00', &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002540), 0x101001, 0x0) pipe(&(0x7f0000002580)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_DESTROY(r13, &(0x7f00000025c0), 0x4) (async) fstat(r6, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000002680)=[r11, r14, r8]) lsetxattr$security_capability(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700), &(0x7f0000002740)=@v2={0x2000000, [{0x7, 0x5}, {0x6, 0x8}]}, 0x14, 0x1) (async) ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, &(0x7f0000002780)={0x80, 0x8, 0x4, 0x80000001, 0x7ff}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r13, 0x4010ae67, &(0x7f00000027c0)={0x1, 0x10000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r13, 0xc018937a, &(0x7f0000002800)={{0x1, 0x1, 0x18, r10, {0xeb25}}, './file0\x00'}) sendmsg$NFT_BATCH(r15, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008812}, 0xc004) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000002940)={@desc={0x1, 0x0, @desc1}}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r16 = openat(r15, &(0x7f00000029c0)='./file0\x00', 0x4000, 0x22) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r16, 0x84, 0x75, &(0x7f0000002a00)={0x0, 0x5}, &(0x7f0000002a40)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r16, 0x84, 0x1b, &(0x7f0000002a80)={r17, 0xd, "8c3cd12710871a8a48411eee62"}, &(0x7f0000002ac0)=0x15) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r13, 0x6, 0x23, &(0x7f0000002c00)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000002b00)=""/129, 0x81, 0x1, &(0x7f0000002bc0)=""/55, 0x37}, &(0x7f0000002c40)=0x40) 1m47.931669733s ago: executing program 2 (id=2735): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x1ee, 0x50002, 0x12345, {0x0, r6}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x2f, 0x0, 0x0) r7 = fsmount(r1, 0x0, 0x0) fchdir(r7) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x75, 0x3, [{0x5, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a01040000e5c6"}, {0x6, 0x8, "000000000080"}, {0x7, 0x11, "730a23460000010000000000000015"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x38415261, 0xb}}) 1m47.461911424s ago: executing program 32 (id=2735): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r1 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x1ee, 0x50002, 0x12345, {0x0, r6}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x2f, 0x0, 0x0) r7 = fsmount(r1, 0x0, 0x0) fchdir(r7) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x75, 0x3, [{0x5, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a01040000e5c6"}, {0x6, 0x8, "000000000080"}, {0x7, 0x11, "730a23460000010000000000000015"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) lseek(0xffffffffffffffff, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x38415261, 0xb}}) 1m9.421271772s ago: executing program 3 (id=2911): syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac6e1e0101ac1414aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000490780000fe06e2d4c3d9fe06e2d4c3d9"], 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000007c0)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000640)={0x81, 0x0, 0x5}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000001540)=0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) syz_usb_connect$uac3(0x0, 0xb1, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000080c200b1040000102030109029f0003010d5000080b0102012130010904000000010130000a24010f3b00080000000d240706050a40000007000000132403020504020604810000007f008000ff0711240a05"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r4, &(0x7f0000004f00)={0x2020}, 0x2020) pread64(r4, &(0x7f000001a240)=""/102385, 0x18ff1, 0x2a) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000280)={0x0, 0xb, 0x1, "ae8815b85b08b9e1093366dc41e523de997347ff2468e2d38dce9f848654c1c8", 0x31303553}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)={0x44, r7, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x361fe9cc8f9563bd) recvfrom(r4, &(0x7f0000000000)=""/128, 0x80, 0x1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r8, 0x8140aecc, &(0x7f0000000680)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1m6.212454928s ago: executing program 3 (id=2923): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x100, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000c091}, 0x0) 1m5.650046367s ago: executing program 5 (id=2932): r0 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4a22, 0x6, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f00000016c0)={0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0xff97}}], 0x2, 0x1c000) 1m5.559053448s ago: executing program 5 (id=2933): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x30, r1, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0x3, 0xca11, @l2={'ib', 0x3a, 'gre0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x400000000000000, 0x4040000}, 0x2084004) 1m5.557681866s ago: executing program 3 (id=2934): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x0) inotify_init() r6 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0xae2f, 0x40000, 0x4, 0x6002c3, 0x0, r5}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r10, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r15, r16, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r17, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000011, 0x2010, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket$nl_route(0x10, 0x3, 0x0) 1m5.547183552s ago: executing program 5 (id=2935): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x1, 0x3, 0x5, 0xac, 0xd, 0x87, 0x4, 0x5d, 0x28, 0x8, 0x6, 0xff, 0x8, 0x1c, 0x4, 0x4}}) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0xfec00000, 0x3000, 0x6000, 0xeeee8000], 0x8, 0x10, 0x1}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x268080, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0x4, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x1, 0x1, 0x8, r3, 0xb}) mmap$dsp(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x2, 0x10, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$KVM_IRQFD(r5, 0x4020ae76, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000107d1eed2c000000000001090224"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) 1m4.986895165s ago: executing program 3 (id=2941): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x8, {"a2e3ad214fc752f91b5d36f70b06d038e7ff7fc6e5539b385d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b609a240c872adb988f7e0319520100ffe8d178708c523c921b1b5b31310d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a72eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa452370000000010403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b93903000000000000001c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae0000000000000007eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d6039947329710309d83fdd9d8b4ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d6245939241a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78cd7d79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77900b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000eeffffffffffffff00000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001040)={0x75f, 0x3, 0x3, 0xc5aa, 0x6, 0x6, 0x81, 0x6, 0x0}, &(0x7f0000001080)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000010c0)={r4, 0x1}, &(0x7f0000001100)=0x8) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) 1m4.24095547s ago: executing program 0 (id=2948): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000410000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 1m4.180033939s ago: executing program 0 (id=2949): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x5}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x9c) r4 = getpgid(0x0) fcntl$lock(r3, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x8, 0xfffffffffffffffd, r4}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) 1m4.081841626s ago: executing program 0 (id=2950): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @random="0242ac110002"}]}, 0x2c}, 0x1, 0x0, 0xc3}, 0x0) 1m4.024490171s ago: executing program 0 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500001200", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0xc00c012) 1m3.948675945s ago: executing program 4 (id=2952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1a0, 0x0, 0x8}]}) syz_usb_connect(0x3, 0xb0, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x53, 0xdf, 0x47, 0x10, 0xbfd, 0x22, 0x4906, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x1, 0xf4, 0xc, 0x10, 0x6, "", [{{0x9, 0x4, 0x8c, 0x5, 0x1, 0x7b, 0xb4, 0xe1, 0x2, [], [{{0x9, 0x5, 0x1, 0x3, 0x40, 0x2, 0x6, 0xbb, [@generic={0x83, 0x7, "24f0bc826d5c6fb98917b20bfd257c4b77cc11cd5d417bb9ba199c8a3bf714d4c17691fc7633871a88782d247774dc30c63e3de14b5eb12cd56018691c72ab1b3a81b585f101542355086a0c154acc57b3cc0b6178a1ea5fb042210a86e941d5e120e5b1cdfee1d5a0f27e0e3b8e2c8ac53f3aadf2e6078d8d68a2c5515b23e01d"}]}}]}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.876847224s ago: executing program 0 (id=2953): pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x67, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x6, 0xfffffffffffffffd}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000400000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) 1m3.131597487s ago: executing program 1 (id=2957): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0xfffc, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x80257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0x2, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81d17, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x7000000, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff968}, 0x94) 1m3.001983567s ago: executing program 0 (id=2958): fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_usb_connect_ath9k(0x3, 0x97, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x16b2f3ab525d7a8, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x15) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1m2.923791442s ago: executing program 1 (id=2959): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000004000000029000000040000008402480400300000050200030401"], 0x30}, 0x800) 1m2.819351426s ago: executing program 1 (id=2960): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00001000000000000000034000000000432e00000000000000000000000000080018"], 0xa8}}, 0x40080) 1m2.814223906s ago: executing program 1 (id=2961): mlock(&(0x7f0000090000/0x3000)=nil, 0x3000) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0xfc19}, {0x0}], 0x10000000000000e1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) write$sysctl(r1, &(0x7f0000000040)='4\x00', 0x2) 1m2.633258197s ago: executing program 4 (id=2962): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @local, 0x2}, 0x1c) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x12) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001200010127bd7000fadb0800000000000800000006eabc000820e880040042"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x804) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x20, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) 1m2.495108868s ago: executing program 4 (id=2963): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0xfffffffffffff000, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc00) 1m2.468307381s ago: executing program 4 (id=2964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000460", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) 1m2.420159697s ago: executing program 5 (id=2965): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xb9, @local, 0x9, 0x2}, 0xfffffffffffffd4a) getsockname$l2tp6(r1, 0x0, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x4, 0x4, 0x1, 0x0, 0x2}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0}], 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r3}}, 0x18) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000240)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x0, 0x2002) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c3920310046d38da1b008900000008000300", @ANYRES32=0x0, @ANYBLOB="0c001d800400008004000080"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(0xffffffffffffffff, &(0x7f0000005900)=[{{&(0x7f0000000380)=@isdn={0x22, 0x2, 0x9, 0xc, 0x9}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="7fe571bd9a832b1d65450b22f6dbff6a40d6868dbfd9b84a6d679d58dc180f36955f10bee5dab20f71845c26e2f95fd652dffbae00f7e96d23850456c9d99101e9889691b92408e32c10921abe419fd785783993469a1da5c190c9f219791b293acde56ed27662b000fafda692a78df29b342795", 0x74}], 0x1, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x13a8}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="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", 0x199}, {&(0x7f0000001a40)="7675a5d84aa8f72502eb288f9bfbded7759a4cd4807a753d216f77867a14091bd99ee6614bd9b55a9cdbe850b537160640f881ce44d78eefd35ad89cb21e86b215e973ced05ed64bdd78c2c7782e7382ffd67f3c904b7d8e10aac28d228cb2ff67f483932f36f56e1c7bd8bdd8f4e1a5b6c049474a7f5bdab0cd3d9a9d9f9db3f1f868d9e68d82d10e2b19146c73876209fe82ebc8e65920317948fde5f56b7b", 0xa0}, {&(0x7f0000001b00)="fba87f611a4c51159f20596ea5c518e6b182c4b293bb0a8df72fa7d83b70623faf37b746016c9a6d097c08b20937ce2b1db695167d165e4d8c611fb8f887cd872561a4d01cfec17ed80c03", 0x4b}, {&(0x7f0000001b80)="030e0c38608393180424bfa8e3ec6faf077fe51b8decc33a52d5767b73f351bbf68ce2b411bea03c6977b28f7313295b629cf39ae8c327459f3031969a554f3cbd92956aef8d0c7f08d0ccb3add15c1fbef96e34c18b46007a776401ee7869f67bb0e363b4a214437f7b31a72a876c2981ad17ca139dffdf0056554002323256826997e95b7040052b95cbdd4591fab6c10956b5801f183b807b617bce6528ec9b", 0xa1}, {&(0x7f0000001c40)="d11097594b124e13f55f6524c2df0a5877f9deb6fc2c91600b1f84118f0c20ca2caff508af6341524d6585690a7b7de441574b262fb03f3a3f7d6928097f565bc94081e3e81d73ed82fa969e547c3be17bcefbdbf15b3434eacd44a4b8e82106e34dde5beb3c6e31c9265604372cb7cd6ab157abc9f852a661c4cdda64aeb0ce09b48048edb4c1138ce74bd43de21761dc9c", 0x92}, {&(0x7f0000001d00)="534b322992bb8f952609465ba0b3bdeb2cb6e1485c252854c0ac2452fd43fecae2069727cb9e2892836660da265c89061e52cc8a8eeede9c54fa8c5adaa5ff6c0e162c8602fc0775562e914051bf6e5686d06a4a1e0bd13de3b4719fb60d1bee", 0x60}, {&(0x7f0000000180)="f34bd2", 0x3}, {&(0x7f0000001dc0)="4d2d436ff273141c2e8001817a12606932b0681ded0f1c138a7c87775e3ba4ff6f55d5060a89788a4e1e130b877894233c56c09bcb70e16c3b3534f31c45b252c6fc3f1b071963c94edfd7f36f6291e266e3de9b4facfdfc89e774e50395214044223a9bff7423ef40299f658b56f0b390a068fe9a2f718b5dc89f6eeb6eebe8ae7c7ffd6c6139c128f97e9d342f1914", 0x90}, {&(0x7f0000001e80)="0a211ab6f731c9c6951e19ff5b98ad785ab2e783", 0x14}, {&(0x7f0000001ec0)="eb221a8916bb87ae16779e743bc338ba62b9fe293661f80ca7e5154723898bea84967ba6a7789ff34d9e60ae5f7c9ac5c0dc49e56b7e080b4bfb160e761e9d8a3faf5e5fa369f0165467965e9f881c6bbf9a5bc964d24ea3ffac3615ecbb2ff7d4506b90eca6c50fb98a", 0x6a}], 0xa, &(0x7f0000002000)=[{0x68, 0x114, 0xc7, "7d606d8a4dbab504f4a0e0e9bbc983f3d5e50ae0cdca5150456109e12c0d98c700a1f705ad4981c72fa9dd4f0807461b58578895c4451d4400df0ac4e37537f375f49abf4c0f7f46d909c6742c98bc1b1951"}, {0x78, 0x0, 0x9, "107ebd505d074992b2deab2e25d8f6ea68ccefd4cb239c1278fc6877e8c53eaf6f70afa996ee093729e4b4c35c3473963b3c137b7335a442b8209f372fc7d27138c16bfbf5d28ab1a9f401e0b8be3555ee2e63beff91df407530ecaf5170df545846a8"}, {0x98, 0x88, 0xff, "c783e0e5a8d4317761c250c71cfb3ff485adaf4bb60724818a566964c8e5c2b08910f7a1a142aa00f8f35357c37378fd135206a0351514768b3d45a9aae7491449bdd027c1f77dcd7ba17940b800fb1636184c09d4b3433c90b037156f5c179fed969dac4ed51c8f744fb13dcd9922e16e9d364bb60ecb6ba5c344469ebe134074f794"}, {0xd8, 0x104, 0x9, "e4826ec225a2ca86efd36257d19c0b3e9f673f581bcde9b6cee8129e4a6b8a48b1650c0bdbe587656057d45be64b562115524e4af843ec06c1115999c7f256b3db5d76af7be8589383e2c005c386b78502d82969962544150f719470cc27a91e046bae602a60caa1686faf89e4818af43bc15bb2c9e79d4694ea56bdcc25b0e26030583f5abbb463172c3be9378555af0d5bc6c3557c6045c310cb1dc60ef911811d9e86b68ace8a83ded7ed3e192076b246543e96c373f326030686f4ccb59352c91b22d8"}, {0x38, 0x110, 0x3d, "2ea0716b11e2c4ad1cf6afca257b713c3a9d5884ea094aa447858e38290f8733acefd6257bb6e4"}, {0x70, 0x6, 0xffff, "b54e0f5d6800cd8b9785ff698f677543a82f8297514123a8b9da7e374c372e3ff913d396004faf414728ba9350f7806462647a4cab7d9bd53bf10f3a964d46c33f93023816405733a38e66824b9779900177890de3cf2ce47cdee9"}, {0xc8, 0x0, 0x9, "f6f3ba9fb949c31112ebf33f7984c673429dd1e6974f2231fa64eb6af2a1d31fc72a48aeb3f13fbceb1f73accc74fffd6d84b6646bb009f68d717857bb96df2e093ac5f184dcfb64e840e5db9e1796ca43ba708d295e1d6e79bd5bee2126e42694834db011367b9338743771f0534f68b63ce048b42f0ae64c2f73e5a896ed9c382d11e4dc717bae8b69dddbe00385e3fd9dfb0af907363d628ed3e205eb9c07f42a6d8a24fb2cfd935468a0ded982c9b1d7a9b8ce87adbc"}], 0x3c0}}, {{&(0x7f00000023c0)=@l2={0x1f, 0x1e, @any, 0x8000, 0x1}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000002440)="3e1c4864289657ca9cad8f2fce093d91f11c5ae87b6507ce75a2274850404d02ad37fc4951534a04ba5a9e33cbfd78e04626fd80871d882e431944545a9686df0558e925d40bc277f7ff1a5e0b2cd49a712ccde3a643474cb23663358dd9e0d884e175a547f39748952328b4cd93814f45bb27f1678ff9669ae1ede1daf53d7bcf36bdab851a6853ee4506ffe23833b369fa71abe911aa3a190db709c32abb7fda0b7c37e65ef369cc77cbab08b37fe277ca7f3985baf3a8f5363b25f6326049f92faaea6b8c30a90763916ad10f67db75e9481327acf0a8e21278c85f8f2df730f37ff0b1bf505c708a79e5cd6ee3dd8f99ce2e272de346560aa83a69a96d50c6157ba53bca044e73510aee65d42c6acdcc547274b0ca04b973d30ae6b2cd1dcea3340ebeffa5e6b5d1577558ada94dcf39cf8248bae3b27afd03ceb6634eb904eee0d7ffbf69c05d83135828f196d58f479f12df675cbaf85b617fd957d752364768bef3e1da94927675f638c6ef2130b785030cca3f2fc12624a03ddb76507c293706db2f93b98f2152cd99d1e8f71a897f81bd98055c9268cacd7224d50499014a94dce37695a50baf8b298b55032d8dfdbcf3d27d671699eccba975383547e37b8930132b6bffb1cc1b53006c253a7e0ba64f53cd1584a67b283515c9d7689e486681a16a4b9603385deff4137ba7422afa84ea3488cd60dec94d83aac32544c9d914735c562cffa195d7a2d77f34a287f653c733e12953558fd262722874c7d38aafd63e9de6bf5e6f11dadd3aa8f29f600c52540d8794aada3f098453059dc17d3e60707ceea384e88fe932b56a84ae389f1395624660df9ce14b39d5f2d7acc8a83731f868878b2f8817e8c96e902fe423faaf4f36babec53785c89c592d00d65756cef9896059f09eb6bbbc7779aabf23635ed7d3d476ad641fb0ee5004ae538c800ffd5badc7d6fa46be473167e4f1d8233028cb08403c640a64dae5a33345af8a1a138a3f4eb95e2ac57df16ed5e3182979c54ded92a710907b3c5bf82991c1b7a7bb5b8ba55d6069c933d2da4a31782bdb83594e0dfc87aa73ed8624791159775401ff990ce67ccd66228ea57d4e93081c528d672497c737ebd1afdf8df38384703b45bbbe279e393de812bddafb37a07e20b05f87befe3ed10d2e27e350205daec5980079784822e614edd4cce8aa21a6c78796ddee92fc39f9cae629e902a36209b3504f45710db607a2464a2078733ceb6c3c9171e25534b76da29feee3c9e065208e2f1773e0d397d629b049913b0948f78c2f0f53ed70c0ab5751aa7f8d23bb5ae62d9f9ffbf53f36ef168ebbe93a0759bd2ca02ed198f58e9a25d8d2b2b8c39e40fe7903532b94916aa73f0feeb9dc39afdf8b95d57b42a72974b012ace309e7a0bb2c78f98896c5db79e729c714392325581882366e62341d6e2614eec1808f08d93688ddaea07b84e16de3d7df6a9aeb65b55cb503ad05092ead61be741c035a837798345c254fbb86dc465099f5e1c0e4f43d6811a6875a245c9ca2eb1524e9bc77b211ba79505922673a54e57c2676c9c7fcf2e60c59b6ade15c0778d2c6282cb490697c6e9b52dd7db136858c5d09e021a7e4362bce76d1faf6b71123aacaaca34bbf90dda90d03ab4038d768f9cb686f20f834d93597a6eea901b7f8eb7c74bef986a2db445a90f1be14ef6a1c39830eead8d0e717e2b8bfc5ece2a38fe4ecb5b8179b0785be7e49d28202ee7d5d0636fecbf085c29240fe96dee7433d939f7d425192f2bb52e898147183b6de5e4e1f4c28e7d89a732e066739c470e7ebfb525e417e9fca190e464a44178c89d0453e40ecb79344aec990f7feea6aaae8a5c3e02233f41cdbec46d7db84c109960193081370b81d794d4794ed0cf580871e445d069be380d18c9c877825456431e6442125ff419dc96a7bdf8e55e416325d4694621474b1d60441e97859063aeac0f3ec7b3a2b4d284561012171ca481b307f5ae5cc49e8a971099a75d7c1823289aae21dcdbf048d5d2308effe6f687343b191070c21ad017f51104fc83f8fc96a06bb337f6dc16d449395201ea3ba6c7ef41ca1e0722e6102313302d74ee02056cf0bedce09aa24ac6212b3e7237dad747916d263c7ae72dbd1399f26dfd06da3f36bb3113d4a0cfc6825382cdd9d0bfded1a41681ec8b101e9efa2411d2d148c2a24f7360c3aeff1e1f90307b5cd884948926c8149feebeed87fb1db24198a743a985b64da1d918cfef2bbe46c62c5c2798c91a935939760760ea827301ad99fa07acb69d000eff8a08b48f9b54d3e686e21cfc67ac57e364d52bef9efd07be8bafc98101a7ddf8466005d955d60bd62582848a18ae6d4058cb19b17538b2c106de76b8b53a30d050eab868bfbab3ea93bbc9c961e1826f49877ed6b24e6323b3fa3771365d75be2dc5889228f68bb7efb7037a11bbf9febf5c91aad7bac9a8d26d852ccaee8005cf9e8442582198cc4a28f9bca7816add0ec9be91be1eee51c95714bab985e556185d3f197125b442c9c790d8e5598dbfeba7d14a249172019e8c5eb2980008171c7d6d146d0021ac94441c0ffbbcbb838c463fbf18413d3be481482f243dc3eea84b767f518b8b908b78b2a4e202d0629a1707572c3cab0e40fa2746a44a9c29dc7b0d3180f1b162bfde2f86b33ea0f3542e5a2d58285937ca85ad9630a298e0f2e4c3d28a4d8753fc8dc2f8c2df56a265c41851f9ff361516b6c9801bf03331c997abe9097daa9706d73834f0c2430a98c86d1cbef2d9182cb61bcdd34e782a1d427cdd282574479d0a2b8ecc53cdc9ccc54b18f5d7a28ae6a77ab63ef440400ec163be4f596dd1ae80ba49bb5575a09f66ec006a7b4a237a6bf5d5bce0573d1d8db995984543296ad9c7e6c589adea671d59c3026dbc64be7cff97a50c3dc6e93db9bb85db596153689a65d58e203b2a4c9ae2026f158e9d4310fc9a9e0771a4b784b1f6f31874dd51a7749a1b6b8102424dd46c5865bac736a9d68992d296e4ed99c530fcec79dff500b9333f6aaac8c6af1f14624a74050f51805a523dcf02f46ed57a20bcedc0e15db2361f617678ee02762422e4db0d724410aaabe8268191726f18164b6dbddfd15ce955663aa2b42a2eeab70794aeb39dd544ffb1cd034d57f86192e95ffa49b2736a3b31ed0f49221bda3fd40fe7668b3d269a5c1429d2ae90fef1bdc81d6b3183549c34991b2882d8f6f21a64b015497f83fc25d68b47cf9bcb1e55edef343557b74f4fa0c49c647be40b78f723a25b0e443b47cbafffaf72b99e15ac1bc1f70143aefaed138ad881664f843bcee89565546583efc9be9ef3039b2b5fa7870fb87df57b063b535932c0e544e1cbf20c510a8f6173de416bcf0a10ab2f72680f9f301742be3ec637ce66a30e8b063ea7a8b93b46872825eb0c1f460edec8110f4d4d05e5ca0532b38726a76ca17f091071fffa0e19c1ef6d5401afb36043c02726137b1e723d88f89e9bc3149c57d52675a7757f32b5bfe5bb109c29c772ce4a4103f5f315fb6d6ab020cacaa3e5a7efe326032c24d1c32bbc595193c09dba5f5e0c8d3cb1d8322498802506c48ee6fb4d8397ddfe30b7018c569199214bf85a4a41c6f6ce9ef8647e9e94268293faf208a62f796ce331699c91584316014f21175212051490fb18a55a6c290c438678260583ff09be873927dad42122cc893250bada061346b5bef97e5dbe95bbad5ccc98c5328893f4f8f188140ebfbb93e8c1eaa869d89128047e2cc67569ac71ffb49b6dde2bebf871bd99c00451f390948d26d96670d3c307ed6b34d4ac21d91d99eb44878a7189f4aa7a4f2c39f3168dba8d5b8b105c1fc3c9bc675a8a96fd96b0c8e602036fd75e298b883ce481688e59a51220380954cf0a1d5b102ec6c45ea4a331b4f60a5a32e4d0ddb89b95435a16029779a512d4494fdf4e3c9142d1cb09f9f4b3ce534aa13cbedb92b4a45033e492e9d280a25ad5ec436e3637d4d9cdaf49f3940a1bf6e0d61177f410cc567e6c43d81c78a6155d33cc75683a7c8c8c57b1ae262ee73f8c0797083436777519dcc23a1d0a2231602029f548d14815f8b64ce0a0916b16418a07c43b9dd9e105140be875f714f860dcfd011b326206923d0d327419c840aace0c4262912b93833353965af1a6c479d80d1e0bd33a8905e8e2aab9302f62b61b8896847c2331818b9f565ab2edcaccb58fbf20f83c0f778839fedf5951b7decdea5796dcf2a68cc6c80ba440c99795c4dc9a13432329114794fb99586df450ee402c39d84fd6119baa88fbba38bdd1599c3d7f27a4b5c55a1000a14b9470384aff92ae70517a07ee751866e1574bd93cffc367fa99cad5eb6a122c88309815f6886d35a9062f2ac1953d199f7776a71190dc2bd9c8bc39946f600cee4bd1c1b6955045f5e4dbda98e4ee6ffe610bd81c3cadccb31d72c29d6490385db123cdc6c1c31684c992504a8d43bf4f89df94e01e3e56df98dbf9ab43754559388e85023540171c71931df44f02470504e0e5f52a255ea627a3c988c742901988efec54ac2e40c85c6cd9b0b2f8ce0fe5ee6c2469472c40298ffe2a50c1deeeb7e6cc54c99e7edc9c14d16220a3c7708166260b846fc1335ee25b2834a63780393b453f84e0ec06e3b7b638110b6c6d1b75e1cc1314c86bb15d7ffce022137d442d684b98c877723e226042b59b20fd6b5849f4a25a1d456de82ac0d4871bc6b8b57564c53cb7e96328248afd9a5a35ed0f922341988bfc7d54c3de034a2313e9aa6b87ff4977c12d22c23c3be9051fc2851190f4c1e188c7bfd5d48d98bcb349024886e7df626113515765873710eaa897000124f7fafb6e87319a3e115dcb367aa5a668125f232607383d835ffdfb6e95b241879d8a8398fdeacfa275312e4490e87cfd6e6bc62b31808bc2d44cc25ae9101649e4ff88de551326a1538a2916376863f8a4e4f6212e93fa02c6c8f3d728b3b955d4c0d0e33e51ee9494cd9fb12c34224df700fcd6d225bece9f97ee44b313425d80b4168fe99098e2da3b8bdfd1816a52a790fb9d42e90f434ae5014810d2f80ab9b0b381b5baaa4194f482b53a26345c49270ffbfabef2dc78d7e56e4e7a51fed87fdb12746fc97686e2b82a4dede25f8b70dbd28ee07e56ff045bc1cb0407c57e611c76e27ce24cdd3499900ac00123a34242f2dfae5aecf47a140f223f484a4fc9fc3bf94cb177a3cf5172ce8d886e5aa0f11a9948c6c747a0c541ed8c368283fc17df6faba7ad804e39cd304c57a1cd837f6f7386cfbe0273923a1cbd252aca118938fddef51c0b320de618afd1d95079b92b3e9f906a509303f8bb1776925f847dc22ad9d77f582001726c2af9096ce14263f12290f0dba9c27097116e579c9d2890906afcf15ea910ce3107bf609e591073599a5381a0da216a3c05faa17ee7ba7b9b6d49d112299ce80475ac8689964cd85317db5e090575f8eb35baa41d7c85f24712e39904091120a37e0f32eaef6382c8bc80c4e2f40e2e0c0a00f717e72239427bd0a06a6c48792a169cc04ce0af4ee735227d7dda9ff1e9ff725b40f8b03b2d9082e208cb32d97497047502393d1460743a5bc1d9ac5114f1df20fa571e55ee675c10fa6b9a7fad757b8ffa55193aa1abd780a29010ceeec1412983465b3f354814587ab5bc9472a394f48d2b34ea9053563c3ce5ea94e629d4c9d45be8305cc8ddb1c81bd97eae517f98e172aa750a685d376d439ea734bdb29683f08a405ec0c5162", 0x1000}, {&(0x7f0000003440)="369141eccb362c85a111c3dd14e210409de5741a46017376596704ba70bd9f058d2900eaf967518e91f857000aa1600c59bcdcb81576a798b2a41bc701ba8b6922d1d83a1a50a536827f5e17330e25dc433f5cb8ff6f17f4d23519f5b006ec3efbf766cb8980374651251cf1b956bb4695c12215670f07264f99176b771f09fda182e4bbb8250e4aaea207d0bb9fe297153c695ecf4dd4ba18429fac13e8a03ea4ef7415a91d6299d366cbe4b15463d6573a54ae9f116dbfba783f8b4c54c301b9efff4e46bd6492add803508d29ec4ded3bafde4be89572e2751daf9fb8e68a9227e983f7ad", 0xe6}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)="9e4d190090315df9e8e6bb93f96b489ed5165ee89aab043e9d73e7045a1e70bac7fe431cc68402bd1fda0aecdcd5422977ab146584f3a18e519ad9bd520f5410fdad5a30638c716b0364ad73b9ed7846969c46d67f247edba579dd935f7cf334216a37d22a17fc1eeeeef6219c3d6d689eabe003fae76d0198088d2c76d75c7d14f034c9d80026f7b41da4b6754dcf50360ec9f09d709b88fe533c313813af5863898c7816773d02d99872836992c6b3b62233e7b6e627fb9dcba63fe36e7ec1e8cba83535afba2ebf895c1d91c4a95ea3fd8a2f7a07b0e09759e14decbd298943fb58d2e71e828ea0317820eb6519952fda27531215aa6e001d97899ab55e9b104a8465973141cd8179de444c0bbdd67b8dc9b9840218800cdd85e6561085a75c68f2aec568eb265a8ff1022862d11413b831da34906a405e9918f3e91c2d702b6c709f0fd936ab11cd6713eab27e54333d3a74dfc6644b8779d7ae60ea41dce882d412a1c03881becf93f80e9dc21c570265a2571b1ed7baface47792eb013bbcec9d034540bd38ab2095f8800edb571620d48584bece066872ca2860cdff8c399f0c5b14413293f40978f140468090ab48b4101b0fd6fe22e9fa9e555462bc4dd48e5f35de3392276b1832b77d502bc93c450e1ad5ecc2acdb6be1968cec3087a21db12a8347cca1e219c5fd808960213cc2bb0dc2730a89d3227a4947b24fcec1d6ed41f4cff14f4f12e0eb1ef8dbc7e42de3ede012c0c502bad58356342d169dcc4ce2519a122fa0489ce86341590c0b9b95e12a933a83d9c6138f3d1eb85faddf32a84915285f75d94ffe069fd8ee03526fa8353b9d2d3be11c65fc01da14d3dcba63cc04c32420dd01aa88816f2476a6fbda5ffd6f5a5d4ed177e57891a9b1f2b2659d83db1c4e6ab1cbb5727bed0334ec3d5e35d6e64705b6edc10eb63cc9370d5cab6f04413fae58fff5276950a706fe92f20b8a31dd4f70b083889744186b558fdceec5dd84f3ce653bee5d6a4e042cd615f7b42b0a2275a87f5eaf2f05d9c5108a412eacf842c0be8b904d2d16abf4bae3032cf07505aaf0e306b1f8f8ce2a2eedf01c91a219bba6a47324630d4d354fb1aeacbbb34d59d8d73d85865b4788ef80dc1b6686ebc720294063f5c9856cc7f05b0fb0347f146f80f7711e992a1d8e0a14a65215d87c6528901c6ad4df008d4f292701c80f84a5e7c79471245cc583b50d533b0180b1c83363caa6a06c2cebebdcc2ab82964e1a04fe47fe5f530d7a8cc5a66e6a8fc50e8926b424c7554bc909a37d7cab7cfc7492b83942e704227f981f52ad6785a0ded3044289d40723639163e6a1cc25acfd0db3af8691c113022b1de883616e294ce25908cdae3ddd076d488e62c1fc96a97667ab3a0751497d934e92e4b0f2b28483c674dff39b6e83ee80a9a16710b38eae17c9dc2961c045fd870726796655e17183a1faad08d93a05dc12f68c407f101950c0f8e16c83137353d617c3e5f4d738f2f6c1db59625ecc5378f6d26872541c59c816137abff00fbd0cf1d9fa7c94e8e128bdd14437e00114ae79749011c427685eee31b220f55d40787614b8faa3aeb39f88af184ab59675d255e5e70417fc507a5862fd5e8e760dfc62f41f8ea15b6e0a4399f534380db74970348e0ef22d418651f3fa0d84ee31f2e355fb7b03046ba63c9556ac67bb353c9e8e83ebace0bd1916669e6aef786498177eddc0358e7ce8163d9d9b730f9a6835c242d61ec583f2bab050937a8b4864dccd73b84c1bf244ae6ee38ea7a36a34e9ea67e0738349f33e0700f819f2e2d1d94fc010a8a6077870e32804b24177b8e465ea26d97a08d7ca65f288a628dbb9a7fa5ab5aafe66cb0efd0e32990b377ed03a499e6425d8220c9b9069fcaffaf0614993270df45986eec20835a3032cbd820774fb6fabaaea117bfb7315d01db640833036c6474bdb6c2b7701d2a409fc2bb36e81c1d12449eac03807db81b1ec6931bd173d58605633eddfb54ee985be30e2087f0fa8cc7c937da7734e5ca4096f58b0f3378239ac5b30f4875cbe1533baf2da9152daa8ecca996ada51750e704e1f405c1f00ab53c972937a56bc3b001aadcce7c533c67b37793b082848a5f8d2b587416f4579a8ca0ffc29ad1df8c51059c9f85b0455453ba2915316c6f607ac6f9b46b387d5c3d7352a74898dd984adfefcbd2e5c559e1a42062a2fd039fb2a429f37092272d6760842f9f5feb74e8b9480f43c029990d250468bc5d7ae1c2fd2ecde123a9ab825a80a14488d499c6781fd11c525be35a040824e232a0a5336f85d666cf35da5872a453578f1f3143290f25040270844bcd8ae8a85267a11c011b845bac4c7f615443296c43efab8bed1b4112397107669aeaddfc4fbf687983b5ead67f0c17a4dd7b5877462fb2d8dff7a751aafe127de1d51f9d49d368b4863fd8e30067a219be2e41070d7476456352358487f7af3c6b6d111f054b89df43a3c6e33233e1a152cad7315df92163d60c4896ea0cbdbacc40d8117df00ec1b1bc4dd0cc6ba81ea825f090e5bf38496204b382760a0ec3a65a019ecee15e1037bcf223bab347bcba7dd8929ca487fcd6d28adfc8d253d96d6abbd854e53841c0f5cdd102e47480fb5eefe2f201c87f687b360515c2dd8cf269014073b5f22ec27a2a5c7dc9e3f18d845449faae2feb9111f26e075cb280b89b2fb5e54bb9b0e8d46ad4ea6e21731cb0b4785bca55a5c19a02c6b92e6c481a5ae2f36cf2f6bf241f8b2057d1dff3861e440d2e1b9788f0d26ce5902dae2f6494acb6782194bb0be3630cc667b5d53552f349dde89624eb6f5bf5f644054f1c3eabf9222b3a096134c50a0b8d5bee1a66c1ffb8612e9800ca94c070fafc197bc9febcfb9d8f16eee540c1ba85d270ca15b5a3f2d12bbeef5bd17b7a5a3852b455ca07e1ccc4193d67c6a48c2c46a6eddd006d617fe309ec063946602267be506aff5c1dfc32b3554be97e37625ff3d92f058db8e0373dde5f7a7d1657372faa11905b51537b8e781de66e83720051df99b1991e0b00d11d8d4d1022d7aa8711ef27514c9a60d3148582859634c41204e73a8ea0593373f8f8172afe847b4778846d12f33c8c52d48e7c257064b0c6c9bc9f6ac706b96fdff63cde7c3b2ce4fcab0076aed34e070dc7383b1a6b8620d3b7ec3bd6a964bdcb31e8667c4bb2825f1dfa46b17f0597406fca074175a6599345abeee9cdb62725a246fe7c13f3f6d8f76211bf20dab14eeaa113cd879fda94d44144ebae766f0e9637eabfcc03b346e9b2ff775b85b2fdc73fd2e21d73f680f65cd77c5712276b72ec4e9c3c69b113fefd05b8eb5f26acb3ea6b7a42c3b989279b5d553e5f08bf9de1d48bf41d2b34b140827dc6a1e8fa2b3047e8bf75e0549aa2751a8a9cdd932c9f5d799136a6abe037807b7c1c388e10b107c46a936405e982c3f5d39636a69f654a57e90e317cc0bf8e74d99af469c6c91a0f720477a567676013bbbcf5cd0a9492e84df0a330cafd1220b9347bea0953b9a75f2cb96950f4fb24ddbfe01900353f98cdeb3ebb036cd286905a4d913505d2d59ebfcf33149655100624c63242368336aebec0b4753817e1e08ddb47b0c29ecf5c077a141c05912c56a9cb83bacf32417cb7036f408ab9668069815371a2fe5175a13805393390e80d7f712159bc3517e86d90342bf07f02b661735b307cf7dbf72a8418d4feb567e7835ff140745a66765b3e8387e397fbe5554dedff5e9c595d65e740ea553354a9859144cca7aba220112a361ea18441dea3d9455ad02b8abf382384ab4e99005f86093ec757122a2b28e3cf0545a0bf2786eb818f1e9cadb7dde760814d786fab167854e343e07146a2ae8935c2b8b38e4a3412b4791705e99fcf3de2641b1e208b52093719769052e73ea990a2419585b0d4659b85cb745cdff026f6910d2bba035345a85f045651e53754a1268a929c58f855ae68a6e8e775877d54e0001d9a506cd1838f3ed9fc4003251593b3657a5eb793bbf6ea9dc89c8abb5c7c6163ca3d34b33bd81e4904f701560080e40feda5c0e0ec61feabbd4100d5df1ada4db9de8615a12ff80bcfed027c7be6bdd64298d249935441e20551ef13c4cccf45715464e325e91e695c11acd0f3e9cc8ed95c8358839e8ac81517912192f61ddb54050f4b31a96c68f3714b2281b107855f8632bc2833d154ede4b10a6a629bdf1e3046896363a991cbe31199a104cb3e109411a4842b2c9fe627f6482babdd424f6cde61b111f2a83b8f4ab07563df983b591962bb3fdee024b7ec272c5398142bbb5773cae6ddb5838d5cb1e68506e6c5af6c190fc36e775bc88b9ebb0139454e912602e94151f4d88aa5527a6600ba51153a76253d379e06b6a9531a10b891255a77b8c9fb8eb78906588e282e03f1be18ce69b90eadbc08d32a15ec5690eb34b4d702176f97ac697ef6760ef7fbbada942637d840ff541249021f810d12147f0e1b8c19c596bd9909c0309e7e334faff3a8d686243a930a9417e60484d2da0e4a7ddd14b8b67236a64cbd1112f9d43dc76140c729856492778a20203619ee09bf777330839948af2c6739ee025d80346c1e46e700bc07f7b224fcefd45875c4a1d8dd4b2fcd4db0115d15eaafedbce629b13932dd9bb1e05f14f6fe0e633f1e4497e1bacd6909090886f16dcc13c09b173de692679495926beedeff5ef4b2fd3e03505def34b5190951c06174b5c89083a3da7c00463a94a8c788b695852146a41f72909bce8985445f39f65ba53d42f9bf133e9570ea977a2c4f203559bef5115e77c9bd64fea24028cb3c76e82c432c09856bbe587f22f1fb4a560e14960a4666a9c61619fb95156f17b335738c7237a2d78204625e5a24c41dadffe2fd8ce3a6e3aea46d3f8b0ceb1766e894bf7fce2b6a3e136474b4377b2cd7eb5fb2b3c3dd036fc034545295f30506de0d5c86db080ac871659e999f3f2c06be47ced59950433006691918a38317e6bc6332d148fa5b7bd6f8e3654232f00c088b41c2f574e3e29f458f232c8295a80593c3c55100c0148b2156eeba13f15309ab32f0e2a0a1493bf95f78a30490e3cb9d05470ee2887b8a8f1bdc10527d6b3fb604356fe555ec6ea982cadf583deb962dc07a6007dab16e7cf240716c8c8d8e70d1f9996d8afa1b4af378f32b13d4261c1f6d622b6d3a3834c0c62ddfe3cd75bc37be692ff2c7bcb33109c84476b157c966ab45bd8be6fdb41fb13e6989286cc698e6eaef6bd211bbec64b3b2ed4bb0f0a0165b4d5ff15b617612b622d76df6d3c87456d142d9d6c0cdf2aaad8a23d3a63947d9fbb5436f15479e54b5751318f38c6ba26822d05f2ffea75acfddaa390ef6c17d6fd6676b9974ae2f8a879cb896717d4f250f1432492e89b100440205ddc80824363c0d6803d707ad4ca3ccc2f49c823cc53143add3d18356f401f3b18ae09f0e2888a20642f0129ca0f4653c4062a71feb2eb749d8402c3a253c2d58fc9d2de6a81732881f8ae1ded5574b4fd54c051241c1a71b7785fac763da58a14e0be9377ffff18eb1dc5e67d22b71c8d8195d71b3885d6eed4ec918ee4157823d4dbb6244abf30df747d9d150fa0c36790f0acab74d27b5873a64117860e4cea90892a6fe2d0143fc53669102d222a56ee6b274d2161c565904b73a825e4e562317f57ddc3c003255e2bfeef504983869b080ad83c2cc5d6aaa5d0e6c68aa86a566c40d79eb2633bd8a226c777cdd8c379bda67611d7bd5aa258199", 0x1000}, {&(0x7f0000005540)="3078153fa9b9632278a6fd6505ddd73062b8918ce627a6fc41bd556dfab35381d91e7a788b478da3a94b6d71c282fbc03b7f6079ef52588e0b205b9495b486b0c86e12aaa17b6704af2c3d825f2a3145b99abf93a2ca8bb6781743b663747e5ddf129a9d05d3554cc97266400db8b6e4", 0x70}], 0x5, &(0x7f0000005640)=[{0x78, 0x10a, 0x4, "f7b5f60fce1f2840f92f13ec8aca5e1b9659800e8773bca0b730199c8fc126320e3c913af7f36f12a469bba3a7c8abd19d06ee54a0a3a2ff31f8494b36744692a5d6f83fc4dc48dde20d4e51162031961e4fd40b8de1812570a3f9b4635fab0364a65b"}], 0x78}}, {{&(0x7f00000056c0)=@xdp={0x2c, 0x0, r5, 0x2f}, 0x80, &(0x7f0000005740), 0x0, &(0x7f0000005780)}}], 0x4, 0xfff0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x23c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r11 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x21f}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r11, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367", 0x44}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) 1m2.271153202s ago: executing program 4 (id=2966): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c8013"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m2.174903868s ago: executing program 4 (id=2967): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x1, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40000000001e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10000, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x800001c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000600)=[{0x40, 0x4, 0x1, 0x5c3}, {0x2de, 0x2, 0xdb, 0xd673}, {0x6, 0x80, 0x4, 0x3c6}, {0x7, 0xb7, 0x9, 0x6}, {0x6, 0x3, 0x4, 0x10}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000005c0), &(0x7f0000000080)}, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) 1m2.050685772s ago: executing program 5 (id=2968): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c8013"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (fail_nth: 1) 1m1.779071229s ago: executing program 5 (id=2969): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000050020c8013"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1m1.692146377s ago: executing program 3 (id=2970): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) unshare(0x22020600) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r1}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$setlease(r1, 0x400, 0x2) 1m1.399140567s ago: executing program 3 (id=2971): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x11, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}, {0x11}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280), &(0x7f0000000340)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0xfffd}, {0xffff, 0xffff}, {0x7, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = syz_usb_connect$uac1(0x7, 0xd2, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0xba, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x200, 0x3d}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x201, 0x2, 0x5, 0x6, 0x6, 0x1}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0xfff0, 0x42}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x1, 0x3}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0xf3, "de58612a9b"}, @feature_unit={0x9, 0x24, 0x6, 0xd, 0x6, 0x1, [0x6], 0x3}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0xff, "88"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x80, 0x2, 0x1001}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfffa, 0x101, 0x5, '{H}%'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x3, 0xf8, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0x9, 0x1, {0x7, 0x25, 0x1, 0x4, 0x6, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x7, 0x6, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x1b7, 0x6, 0x77, 0xb, {0x7, 0x25, 0x1, 0xc, 0xff, 0x199d}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x23, 0xca, 0xfc, 0xff, 0x5}, 0x8, &(0x7f00000002c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0xcb, &(0x7f0000000380)=@string={0xcb, 0x3, "dd81b1a48e8fbc786bcd26d0a32b855cf094888bd3aeffdc01b0baed0a52e70db3a5fa01d80d48d3a191fdb0bffc931f9f39406d4c9b1657827933232af7d094e4fa7f7cf44c65c2bb7206d2998897b56d3cbc23f4a9f6c911d04532b8f64f9bcd7fbcadb145f5e92626ba11f15f9fd1e0e95f7bf4115fa2c92ce900507d25f7e9b7c7dc3b4875cd59f695244fcbc0e51c099076154f56d98b590c06484face90fff40030d187da752971d15883e926f4e647197dd47a484cf4053a9925c244061a19ffb627d304bcb"}}, {0x4d, &(0x7f0000000480)=@string={0x4d, 0x3, "714ab53bc27e60760e758cf016fd091e8048752f3e920fed0f946891d96bbddbfc2c67d7ff70d837a494edfd2f963aaeb0acb6b140db289c3604feb74e430b91045932a8ac3dbf054b4ec1"}}, {0x54, &(0x7f0000000500)=@string={0x54, 0x3, "b10a0382fa9aa329fe9bf34976d7991a9e5d8aaf902e1365df306e726f1e1d4d3172b0a3e71cfa2b6e160d84e747ac20f981f3a13a0e84b233051095a5cc0b5e56d9724f4df2b12d85758d8883c158928563"}}]}) syz_usb_control_io$uac1(r4, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x0, 0x3, 0xae, {0xae, 0x21, "c20422bb33f6026b477a3ccd60cb362c100d7d68f778b7d8594620be6d510f4dfbe82333b626ca9e56b1439aca3e0eb232f58a2dcf50953560dde5b6e613aa00319dc99e5c9ecf4855eb5d25f2170bbe1bba16a8acf1637855dc73f2da6fd173c70438ffab76d9247c1ecd3be27d5d7622582cbb39d5383d21495c4363f610b9c7e87133ed793d8db94ddea71680ec7bc2db3d99d8cc0091ea2b4357dbf8685a79dd3720b35a47bbfe5093c9"}}, &(0x7f0000000680)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e60f1da37de23311cac8997319d621f6b3d1671e61a47387275118"}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x0, 0x15, 0x76, "dfd766039f23d123ecb21242f07e7b62cb9cae89db3562e3d67e85db85528e393eae62e56d7167edfb638570dbfebe904bd27c6412b061c103726f56494d84e47a9d66c4305f1b268f8a71b55d3a734a5f19b94604077c8ab70c17ddadf0dc6e9ce3fc911adadb32efa23c73c53abb5c1aefd61685e4"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "f476e3"}, &(0x7f0000000840)={0x20, 0x82, 0x3, "bfbd6e"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "9b55"}, &(0x7f0000000900)={0x20, 0x84, 0x3, "4d4e01"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "25158a"}}) 1m1.262943833s ago: executing program 1 (id=2972): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="020000000000000000000000000000000000000008000000ffffffffffffffff00000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000000000000000000084000500ac141418000000000000000000000000000004d42b0000000a000000fe80000000000000000000000000001e00000000050103000000000002000002000000400000000000000000000004d42b0000000a000000ac1414aa0000000000000000000000000000000000000300f9ffffffff"], 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000740), &(0x7f0000000780)=0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000002c0), &(0x7f0000000540)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$XFS_IOC_FSGEOMETRY_V4(r2, 0x8070587c, &(0x7f00000006c0)) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x20, r5, 0x303, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xff0, 0x4e}}}}}, 0x20}}, 0x14014) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r5, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x42}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4080) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r5, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xc, 0x34, @random="5fb36d7a9a2248a7"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "f40b29c9ee11d8394c361d2c414745dd"}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x20000080) 1m1.233823932s ago: executing program 1 (id=2973): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000f2c0000000b0a05010000000000000000070000000900020073797a3200000000090001"], 0xc0}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10) timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x13, 0x2, @thr={&(0x7f0000001240)="927b5f11872bc701bf24a41554e363fee76c195f3a62d6e4dd7d1c15370a0ba51fa9a9dfe8339334975a24af0672b8e932ba33a60d35f194b71a4d3244e172b1a9c186e93c54bb483f61ec86930383f8ac6fc4348fe857c79dd77fc79606ace568b07d467f505e0c05f931e6a515508fd440f525420a7b3d32236ffedca454cc43681b6d1960ab03e68f45f64dbd87aaaf6adccd7f1357bdb1cd033bde845c91e12f74dab9ff2821b42eb1ba2b590c41629db504e118d31574515eb70bef7979fdb01dc6cc6032c4949bcbaecdb2f98d3fe85910c5a27a1fcfdb21843fecc9d9cb371b16c79ee24c8a0205b55f120a4ebce075f4143800543d4e6e048191dd0a5194ebcb6424d59bea2a77043fe99a1e8a9b4dad6bc962dea815d14024770440c025a62909b5920d2a42afe5131880a6c43a44b32c8bd04271d24cd8c8b310ad245205e72e3af544f49b52a85b1b81eae602286cbdae83c28fe25dfb98b2c76835d8724e4c7cce20d5643f6a9218f2a205cf779a3f1dfb1e058f2bc3461cd04a88ffacbdd2aff326bd76c1a6f1dba505ea49749f67aab9ad356f48b828e092c73b1b4ddf52bfeead9dc1c6a49bb8c86470c4a10a6b60212d0c4a18d9628f7e12b95208714b6c39c2b8b36f0331b107fc46eb8d10eff07dd2abf6237ff693acd56ba2e026d9decbf19681cfea6a2883557fa2f526cfdd1b9c8aadeb03d1218cf1bae71948b13d2ada83811891bf56cda403fc2b0f347cd3f3664b6e5e9ba5139b83e331a60b66447bc1edd6e1937df2ba6ec7a598af5c6b472e83d1508acbbaf2b31ec46880a9b848cedcfa39518adb4dcb604d971e64c58d278e87f466a17613654613b09885b042e634f7b1defbb1aed54f38acb12361ac9ef27976749dbe114cafaf60cdd35293792a3f3135ff060205bca6baf2c444aa410ba90688648d4ec77032b1f422f2f90e21f5dcbbacd93e37004fdcc7aa868c841d885cab479e3115ee0a205bc96d26263e30bdeeb21f5352af774a7cc7a96be527b24ca7857d4b656258a6719bf36462f1ec713c7d3e5b40486f5f39319c7dbf9abcad6fc6ba6484f47daf25f7ffcfca3b67165cde62ee8f70ebfa6185529e2ce239238038cfca5420c2f7706741688e32f93c1195325284dcf4f64885861457e27115ce5d56bef28ade6c3692a8f64934393163951a77d32813d8a180fdf5963ce07cca2e942ce2b62bb2bbf4ffafb89e92c7de00c000afb3f37f79fb635958b7751c28e23c71d47c79416143308bef4ed78c8ff543834b9062dbeb9e16c365c50208e545ad2a540aa3d4f4e708394694b30422094e7351efdcf06078e482db6b1d8d8f83140f17a94e9c5996ca5cf0c3871b759deaa3008d884a3e57e872b6520177dabefda852ff6c4afa6fee67e2a7cea3274d8b6894da01bf502a4929d3aba91551cf4579768d27c21e28de393e853f5766372a2a2925fee81047250b19e314c9a6dbf01b4197e137679a480b529be56ad5873516b6e131b2e8ed3aec5fb1b1efd0be6a9ef46403ced414771c9526cddb3e51b2d660e7b0ad4a522e33a335380b52ef86d45eec71c516cb5a8177afce9fd397d298290dc6602e8fe766fb27fd2e6cf19c43e4e15affe5be7625462e9908991a9caa397914289ecd8a5f0fc19e625749e8f7a110f9e284a3e6e4a060fe5492c193788aa1a1c138ba7530c8ce8819a6981db4b9659f757510bbcab7d31dfb894031ea5e4f5600bfba42694f6a3afcb934ae3652afed561e90ea619df5843677e0c00264f8b95e0e3f1a2f728cae5708b49c52d8c78cf5e14323574bc88765c12b0e7d79c669ef6ca5b56357c7e2ea9f04683f18344559b27d6d4c494aa1037cc52e43cab9e25dfe11062d3304e78df053d39a780e87a24edb529cdd4b23ed6d0e1aaae664c33dff719137b651d43ca1f8b636cadd97d6a54922f96e0b4c95e9b4de15454ae7d24a69698663b0d24ed8a36227b8ec0436c770f87698f5630fc39f442020d9d7a2846bd3cd08b7436766f0d98e3417e64bba47c4d49348f202f872c0bc20b4e99b6382997d2180ddc98227ee752fb5535db6376a2dce5b95661a6699cc68ade51970d96a13822cef45dec5b10566d791b843ef4632b727f6caf2fcb7fac7b58bd9f535545027a0fd697c240a140d07ccae46177860c32690d0615627ed42b5b7ec6ec6c5ffc3685616e8d63a2527c863c3853701a627dee2578889a868cda17f84b09af0239e4ac27bc1796d81423603ddcdec78e9d502a80fda7cbb67747aced8cc97052547876074bdb28891370e27e165deabcfbcf5a93a74cc22df5bc9c6a71dca553bdc83d5f270dad01fad26824e6d9274bc22491ba8d60db91808e99fec24015c572749e433cd2e3d398423a7acb6fc8868f4d59382b818c73976e5c4309de97a6809cc5344f17e471fa89179ff66bd03112cef20b06155bf1782f51582ed9d9e6554cc890158b7aa7daec2accad8e6feb0411c3589607b70ea7f7b003085ce4f55f3568a4e14daf4580ac1980f7ddc19f4b026f48f2b0f9d95b6afc90569bb47412e4c4036687e0be153e12a2dfd29917cd2e063e0571ac098757dc9237ec8a1511061db9b8b37bffb18baf79e149bfc8d192281395c827cd17afc95121de71ceb758359b0c377cf932e0070b01bf0ef50eecfec229fcb300258a1fd94871b4102979ee0483fdc0c3b14a12378248b169f867d8652b79f1d9ad89084805f74c0a8c00ad60cfba9a83227908beec8769e3aa24a375242e8d8249e4761a61e48333fbac812357a6e4e91170dbb6a7abfe3e87355613df9d0948c6a8f63c468d04467c2ff3df954c47c7804872bddf3e513365ab8dc4da09cd7ca5685653136abb4066885839b793a0aa40265c6bb774aa2e39ee55882c0d596140df35cfb9216593b758eef77b71984cc4a0a0d7f3dd3e9169cc4b25b9d014b738f38fb9b06673c13a9c12642a50820267007350c13c5fa5878062ccd98423187b0a393ecd369eb232d168cfd5e67978ad947abdc299548df110653ba06eb641149e6edde76e1f0b3b844e6d4f8daf157cbbb6582cc88c169e17af669d2e745d9dc9325d41315afb5ea48f948cc252060d1dc6e516dd85d95aa6819b188b6111dadf5685885cd9be5c103bff405ca791033c629c785c917ef35630386019d4eaa5bdeb5d934d0fbc06c4947d117caef42b2ecded057dd8c66b0dea714070edd8561a37350df4f3c3b803fecaa7bded55ceefd321c2dbf13a8dcfb073cb341738089c79664a5f1b2abaff22a4a0107f43fa687f3c3b99528852b963f51cc763007c1608dfa1ddb393ee225c50a12477ff9363b02d38205187d30df4b87bd16f39fa27137bbda621bedaf025540a88d9b3b4848b310c8ed5d9c4921a6b70cfbfc4d39a34c149771d7772c513dbc3912cdb7f37413eb07075ec2941c253deeb87266d494dfe34b6ddad2cbbc1681a091e25e94d3313a6f0fa2c8d86b8156ca48f69a5c67ee8b3889c3d3190418dd2857493f1e1da58449751d89b5ad265fbf35ccd1b2305ab0e2c7cbaf8e16ac42630ed8624c7f56da644b6f823ef29bff713464c8d2366d3e4518854d7187eaa2bdaf400416ed913cc67d89df86b7922e92530374a44fa4506460fece71ef3081ab02d38b8e4531102488da2500102f241a95935fcf094c5b93fdfdea85698f931549ee358eed3d80df311294f6be7266a7ea12d57f9b6c397f360c8003b47ac5c1c7baf505692cae057c45b9d3078415153ea1a92fa44445272128d32a39985dd191c74758472289e88187733bdfacdabd84865cefee0f1952441b0784ba5ecb460edfe36d09a1f2a845c652d9f78aaec4d119930127c005a35b33d0de6469e0bd61d3d0e1074318218069d4da6cbe1fc88d6993260bfc1c653929d6ce9b821e39b08c978d17b32739a430ac29847f7e2aa8e7b5f6715369ef130059ca373a6724919536a44187da16a2ad2fb58a397358cecdeefa7f46170962634be346ac97f80b64363ace16291a7c5033327575321ff9ad2e69441e65e02049466f48e147ee09d7464caddaa3382064aec82c7d96a1f2cf50d8023d1dd01c6d92d4e268ed457d4700d3b1b79af893dfe97c0af02e06354844bc9bcdd29fb728f4acfd51851d0a7e48312267fedb4fa75369698a65d4029889a7e541406521bf6a9801e9bf223c7dbc97f2c2911f6bc14be7cf421be139ae8155a5c47b55c33275552e37323b600d61dcb53888f201f77df1841c76dbbaaf0d732e1cdb8af8f795261828f73195455c0739f60423c4fcbdf2f4d871d7ac17612c6dfbfe951377fb693f061f100c067c8827acc37992dbd8c54c8e05b01b2cf19d92ccc064da76c733ce6761cba20eeb0ba003908d27ec18f809a66cccc5dd1666957ef8f0e52bdf49dfb7d840f85cf9adc01e82b150a287390a47537c53d1aa7cb9eb1fbcbe6dd536b3cf3a46e2f7e53e6a3e049a59fbf34a6610fb4148f1eb4f77021cfbf76151d8ac8c9c31d9c1d689eeabf25a7add2904dc226c1bb16a4d527d7efbfbd83a2cbcf9fda0afc3372776e565217177b6b6290b6791a93412fc58042c41c82becc400629403e39b2fb3ea8153caf89a7d057dda444d71dd093d0620fb60aa1ad422b68ae2ee07a201075496b7045c116b3274d3f2e67cb8f1354b165349483fcc807851bf1e80b690856bcd5fa4435b6650f2f3eecbf1299f08a3492c4f1eac62ba3d2e2c4b6683ec0ef9e0abed40cdaf5133f2ed30ef343634f708bc69c9b6fdbbb37b27df1d595d6b2e1abcb89d21925564c95de28128ad526b01290d96b1aa6dbf74726ce4118a75eb049402c269ed22606f27280913d0f26485814867fda5de3af7fd0907a67e2bb966a11c984c2b94c64edeab96de082a1ba8538c12a3c14c71e6231075f3f7b6fb2c21b71c608703593a909e937e130f29b402353dde0a8a9892f9ad0ef035e5ae109e25d4a81568cff1909a392be0ec4eb854f381208f2a03cf606257ef253b606e1ed6af526e3e8c41efb6f0a02ba8ec95d61d261c7c04345e921523f97589280da872b50a8bb350ba6ca0582e38e52a3049b56876d1bc7f2a252a2bfe8b7cbddcd11f511629533f59a4080615905f3c16bc35e53862d5695cea1fc534913d6eee0ce02dc573f0af8cecff8c34bb89d8291852cc141cfb946ae86eee87a4367a17c4a39f71896fb94d79228811032708b8c5f8dc393121f0c8d1f2cb18ffdc9268150e6f54159ee8e063cacee4bce5c1385f9202c32b75737e271fa4f2d8b5eb392a04ddb42bfa57b9399f64479e7470e74cdd758936bdb62875d7818a64527967b99c8f39d255f0a98d3bf500dc845db12c9a1d36f9ed145c8dc274fa026adafaaaae6e5f499306253b7b13c13d77b8de6a1aafea7f2b3889e19f7927c7a28e51b74894dcd2a60f9cef3b4a35f6cd8d544f709ea1cf8b15e4be4f3c87e223677efa414fe67c4e96c4779608353c919cb93c7c392639e0de2147acaa071de5f6f41b1847516bd7a85c4366d7b769dc54c1385420f946ec416eaa6db51dba265638cd5cae33650fef8336d9988e8f487fa767e34f022bc69ee699e0a67420fc08b4a505c58c8a6513def8c027014cf6e44ed1dfc56d10c9190fc080242c50eaff7ef1fcb395188f3ed060a847514544b71547c0b68721ea6ec9261eb0eebd897904e90f4762ac972cdd517eea517cc8d7fbb0219a34180c4cedb394e1742c96ebffcec5e648cac03bf30823a17c251d122e87bd522fabbb7a2936b16e0a7838", &(0x7f0000002240)="867b36edd865c928751d8d37f1569187f5279f666b380949fe2c7f1ba5de2c7a2419b3099e7ca57ff77b1c7431dcbb727c62de107f1df626cf862d709c00bb8feccea765c521ced8384dd6b0097acd114134c4559f353a71665f4c4091eafc33ed5eabac96a6ae0e039cee02e556a0ed35d37fefe43914ad61d8230a4d2451c6b8fa79556a2043ee9ff537d45c13c4e98b3e2861f4c1"}}, &(0x7f0000001100)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0xe}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008084}, 0x40c0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000002340)={0x14, &(0x7f0000001140)={0x0, 0x22, 0xb8, {0xb8, 0x9, "7c7a5bd457af641905961b7c8c9abed288bf3c03652ddc60da2dc99f5195994bdbe3f931eca53e3aeb703955f4b79e9a53ea15be8cdf4a40ed0cb45dc3ac75041b7a854d1c73d58141041ea68c0fda12dc904ee71b77d00c509b9d762c9b09a945ad3153d9699b29ebeca4723da15770b1192e6f08991b80f527e2a107d9c8a8eb9bd29ee835fa56f8137de463de83a2974ce021279871e7e409c417940856c67a0ae114443c332c67f77e8cc1df40c7e65f5b2a28a7"}}, &(0x7f0000002900)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}}, &(0x7f00000028c0)={0x1c, &(0x7f0000002380)=ANY=[@ANYBLOB="001184000000909bf6189435aadccaba376ac4f6e77517b37d2c12d5152b54738434a2d981ce82e54e13a5bbe13af28e501d1323acd12357db839cba28641520fb33f9d765bb1576e5bce69d49ee6fb77e64803d0fe3001ca06b5b0dadcec590e7e966a7f9b95b78ce4970a79edd5aeddff688ef55d9c97996813fd846c8e04e6986fc"], &(0x7f0000002440)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000002880)}) preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, 0x0) timer_delete(r2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) shutdown(r0, 0x1) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r8 = dup(r7) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r8, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 33 (id=2958): fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_usb_connect_ath9k(0x3, 0x97, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x16b2f3ab525d7a8, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x15) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) kernel console output (not intermixed with test programs): UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.044620][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.104352][T13660] xt_hashlimit: size too large, truncated to 1048576 [ 526.166128][T13667] xt_hashlimit: size too large, truncated to 1048576 [ 526.613717][ T5712] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 526.807548][ T5712] usb 5-1: not running at top speed; connect to a high speed hub [ 526.819041][ T5712] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 526.838630][ T5712] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 526.838733][ T5712] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.838826][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.922464][ T5712] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 527.324830][ T5712] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 527.337246][ T5712] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 527.349020][ T5712] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 527.380138][ T5712] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -5 [ 527.989931][T13700] tipc: Enabling of bearer rejected, already enabled [ 528.053413][ T5749] usb 5-1: USB disconnect, device number 59 [ 528.997419][T13723] loop0: detected capacity change from 0 to 3904 [ 529.138838][T13730] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2479'. [ 529.208028][T13728] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 529.208078][T13728] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 529.208149][T13728] loop0: [ 529.425840][ T4985] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 529.425882][ T4985] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 529.425952][ T4985] loop0: [ 529.645143][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 529.981916][T13751] tipc: Enabled bearer , priority 0 [ 529.983674][T13751] syzkaller0: entered promiscuous mode [ 529.983712][T13751] syzkaller0: entered allmulticast mode [ 530.059163][T13751] tipc: Resetting bearer [ 530.106142][T13750] tipc: Resetting bearer [ 530.188080][T13750] tipc: Disabling bearer [ 530.580591][T13762] FAULT_INJECTION: forcing a failure. [ 530.580591][T13762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 530.580676][T13762] CPU: 1 UID: 0 PID: 13762 Comm: syz.2.2490 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.580704][T13762] Tainted: [L]=SOFTLOCKUP [ 530.580712][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.580724][T13762] Call Trace: [ 530.580732][T13762] [ 530.580741][T13762] dump_stack_lvl+0xe8/0x150 [ 530.580774][T13762] should_fail_ex+0x410/0x560 [ 530.580811][T13762] prepare_alloc_pages+0x223/0x600 [ 530.580839][T13762] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 530.580865][T13762] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 530.580892][T13762] ? __pfx_policy_nodemask+0x10/0x10 [ 530.580916][T13762] ? lockdep_hardirqs_on+0x7b/0x110 [ 530.580936][T13762] ? irqentry_exit+0x218/0x910 [ 530.580960][T13762] alloc_pages_mpol+0x21e/0x390 [ 530.580991][T13762] folio_alloc_mpol_noprof+0x39/0x160 [ 530.581017][T13762] shmem_alloc_and_add_folio+0x43e/0xf60 [ 530.581044][T13762] ? filemap_get_entry+0xcd/0x3f0 [ 530.581074][T13762] ? irqentry_exit+0x218/0x910 [ 530.581092][T13762] ? __pfx_filemap_get_entry+0x10/0x10 [ 530.581116][T13762] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 530.581145][T13762] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 530.581177][T13762] shmem_get_folio_gfp+0x5da/0x16d0 [ 530.581218][T13762] shmem_fallocate+0x996/0xf10 [ 530.581271][T13762] ? __pfx_shmem_fallocate+0x10/0x10 [ 530.581300][T13762] ? lock_acquire+0x115/0x350 [ 530.581341][T13762] vfs_fallocate+0x65a/0x7e0 [ 530.581366][T13762] ? __pfx_vfs_fallocate+0x10/0x10 [ 530.581397][T13762] file_ioctl+0x564/0x7d0 [ 530.581421][T13762] ? __pfx_file_ioctl+0x10/0x10 [ 530.581456][T13762] ? kasan_quarantine_put+0xbb/0x1f0 [ 530.581486][T13762] ? tomoyo_path_number_perm+0x219/0x5f0 [ 530.581517][T13762] ? tomoyo_path_number_perm+0x219/0x5f0 [ 530.581548][T13762] do_vfs_ioctl+0xc27/0x1530 [ 530.581572][T13762] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 530.581606][T13762] ? hook_file_ioctl+0x1f2/0x600 [ 530.581646][T13762] ? __fget_files+0x2a/0x420 [ 530.581676][T13762] ? __fget_files+0x2a/0x420 [ 530.581701][T13762] ? __fget_files+0x3a2/0x420 [ 530.581726][T13762] ? __fget_files+0x2a/0x420 [ 530.581755][T13762] ? bpf_lsm_file_ioctl+0x9/0x20 [ 530.581786][T13762] __se_sys_ioctl+0x82/0x170 [ 530.581809][T13762] do_syscall_64+0x166/0x520 [ 530.581828][T13762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.581849][T13762] ? clear_bhb_loop+0x70/0xc0 [ 530.581874][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.581893][T13762] RIP: 0033:0x7ffbec59e159 [ 530.581912][T13762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.581929][T13762] RSP: 002b:00007ffbed4d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.581951][T13762] RAX: ffffffffffffffda RBX: 00007ffbec825fa0 RCX: 00007ffbec59e159 [ 530.581966][T13762] RDX: 0000200000000080 RSI: 0000000040305828 RDI: 0000000000000007 [ 530.581979][T13762] RBP: 00007ffbed4d8090 R08: 0000000000000000 R09: 0000000000000000 [ 530.581992][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 530.582004][T13762] R13: 00007ffbec826038 R14: 00007ffbec825fa0 R15: 00007ffbec94fa48 [ 530.582037][T13762] [ 530.639568][ T5749] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 530.793573][ T5749] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 530.796496][ T5749] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 530.796520][ T5749] usb 5-1: config 1 has no interface number 0 [ 530.796556][ T5749] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 530.796587][ T5749] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 530.796623][ T5749] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 530.798623][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.798646][ T5749] usb 5-1: Product: syz [ 530.798660][ T5749] usb 5-1: Manufacturer: syz [ 530.798675][ T5749] usb 5-1: SerialNumber: syz [ 530.957126][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 531.116486][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.116940][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.489666][T13010] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 531.560506][ T5749] usb 5-1: USB disconnect, device number 60 [ 531.643362][T13010] usb 2-1: not running at top speed; connect to a high speed hub [ 531.643415][T13010] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a0, bcdDevice=79.2c [ 531.662065][T13010] usb 2-1: config 1 has an invalid interface number: 98 but max is 1 [ 531.662105][T13010] usb 2-1: config 1 has an invalid interface number: 76 but max is 1 [ 531.662150][T13010] usb 2-1: config 1 has no interface number 0 [ 531.662170][T13010] usb 2-1: config 1 has no interface number 1 [ 531.662223][T13010] usb 2-1: config 1 interface 98 altsetting 125 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 531.662254][T13010] usb 2-1: config 1 interface 98 altsetting 125 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 531.662283][T13010] usb 2-1: config 1 interface 98 altsetting 125 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 531.662321][T13010] usb 2-1: config 1 interface 76 altsetting 253 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 531.662350][T13010] usb 2-1: config 1 interface 76 altsetting 253 endpoint 0x85 has invalid maxpacket 18774, setting to 64 [ 531.662378][T13010] usb 2-1: config 1 interface 76 altsetting 253 has a duplicate endpoint with address 0x7, skipping [ 531.662404][T13010] usb 2-1: config 1 interface 76 altsetting 253 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 531.662431][T13010] usb 2-1: config 1 interface 76 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 531.662457][T13010] usb 2-1: config 1 interface 76 altsetting 253 endpoint 0x2 has invalid maxpacket 47097, setting to 64 [ 531.662488][T13010] usb 2-1: config 1 interface 76 altsetting 253 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 531.662516][T13010] usb 2-1: config 1 interface 76 altsetting 253 has a duplicate endpoint with address 0xE, skipping [ 531.662543][T13010] usb 2-1: config 1 interface 76 altsetting 253 endpoint 0x1 has invalid maxpacket 80, setting to 64 [ 531.662573][T13010] usb 2-1: config 1 interface 76 altsetting 253 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 531.662601][T13010] usb 2-1: config 1 interface 98 has no altsetting 0 [ 531.662622][T13010] usb 2-1: config 1 interface 76 has no altsetting 0 [ 531.906671][T13010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.906723][T13010] usb 2-1: Product: syz [ 531.906756][T13010] usb 2-1: Manufacturer: syz [ 531.906777][T13010] usb 2-1: SerialNumber: syz [ 531.921948][T13012] udevd[13012]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.170971][T13792] IPVS: length: 24 != 380532003576 [ 532.337467][T13010] option 2-1:1.98: GSM modem (1-port) converter detected [ 532.389055][T13792] bridge6: entered promiscuous mode [ 532.399508][T13792] bridge6: entered allmulticast mode [ 532.440657][T13010] usb 2-1: USB disconnect, device number 59 [ 532.473186][T13010] option 2-1:1.98: device disconnected [ 533.346624][T13833] tipc: Enabled bearer , priority 0 [ 533.347914][T13838] nvme_fabrics: unknown parameter or missing value '#! »›�¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 533.366069][T13837] syzkaller0: entered promiscuous mode [ 533.366090][T13837] syzkaller0: entered allmulticast mode [ 533.690964][T13830] tipc: Resetting bearer [ 533.795339][T13826] tipc: Resetting bearer [ 533.888843][T13826] tipc: Disabling bearer [ 534.754157][T13838] nvme nvme0: failed to connect socket: -512 [ 535.033665][T13864] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2510'. [ 535.249618][ T5712] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 535.419527][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 535.431737][ T5712] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 535.443314][ T5712] usb 3-1: config 1 has an invalid interface number: 33 but max is 2 [ 535.443380][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.443416][ T5712] usb 3-1: config 1 has no interface number 2 [ 535.443511][ T5712] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 535.443537][ T5712] usb 3-1: config 1 interface 1 has no altsetting 0 [ 535.492370][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.492443][ T5712] usb 3-1: Product: syz [ 535.492530][ T5712] usb 3-1: Manufacturer: syz [ 535.492565][ T5712] usb 3-1: SerialNumber: syz [ 535.753114][T13861] lo: entered allmulticast mode [ 535.869136][ T5712] usb 3-1: interface 2 not found [ 535.897856][ T5712] usb 3-1: selecting invalid altsetting 0 [ 535.936418][ T5712] usb 3-1: selecting invalid altsetting 0 [ 535.936496][ T5712] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 535.958477][ T5712] usb 3-1: selecting invalid altsetting 0 [ 535.983423][ T5712] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 535.983742][ T5712] usb 3-1: selecting invalid altsetting 0 [ 535.983771][ T5712] snd-ua101 3-1:1.1: probe with driver snd-ua101 failed with error -22 [ 536.003114][ T5712] usb 3-1: USB disconnect, device number 95 [ 536.620280][ T5712] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 536.773684][T13903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 536.773712][T13903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.793602][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.793733][ T5712] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 536.815412][T13903] vhci_hcd vhci_hcd.0: Device attached [ 536.868673][ T5712] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.868715][ T5712] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 536.868774][ T5712] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 536.868813][ T5712] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 536.868862][ T5712] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 536.868892][ T5712] usb 5-1: config 1 interface 1 has no altsetting 0 [ 536.887104][T13901] tipc: Enabled bearer , priority 0 [ 536.895310][T13901] syzkaller0: entered promiscuous mode [ 536.895328][T13901] syzkaller0: entered allmulticast mode [ 536.964972][ T5712] usb 5-1: string descriptor 0 read error: -22 [ 536.965250][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.995699][T13910] tipc: Resetting bearer [ 537.002399][T13900] tipc: Resetting bearer [ 537.040062][T13900] tipc: Disabling bearer [ 537.099729][ T25] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 537.108900][ T5608] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 537.210507][T13918] tipc: Resetting bearer [ 537.227788][ T5712] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 537.240042][ T5608] usb 3-1: device descriptor read/64, error -71 [ 537.309838][ T8037] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.311811][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.311872][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.311907][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.479688][ T5608] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 537.619573][ T5608] usb 3-1: device descriptor read/64, error -71 [ 537.745363][ T5608] usb usb3-port1: attempt power cycle [ 538.037482][ T5712] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 538.049668][ T5712] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 538.049755][ T5712] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 538.103145][ T5608] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 538.123655][ T5608] usb 3-1: device descriptor read/8, error -71 [ 538.201816][ T5712] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 538.380466][ T5608] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 538.424018][ T5608] usb 3-1: device descriptor read/8, error -71 [ 538.532549][ T5608] usb usb3-port1: unable to enumerate USB device [ 539.869584][T13904] vhci_hcd: connection reset by peer [ 539.875832][ T8037] vhci_hcd vhci_hcd.2: stop threads [ 539.875867][ T8037] vhci_hcd vhci_hcd.2: release socket [ 539.875919][ T8037] vhci_hcd vhci_hcd.2: disconnect device [ 539.998150][T13947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2531'. [ 540.147284][T13950] syzkaller0: entered promiscuous mode [ 540.153596][T13950] syzkaller0: entered allmulticast mode [ 540.172500][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 540.204316][T13950] syzkaller0: mtu less than device minimum [ 540.388720][T13955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.439711][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 540.477459][ T31] audit: type=1326 audit(1788891649.815:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13953 comm="syz.2.2530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbec59e159 code=0x0 [ 540.534303][ T5712] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 540.648932][ T5712] usb 5-1: USB disconnect, device number 61 [ 540.729676][ T5608] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 540.869664][ T5608] usb 4-1: device descriptor read/64, error -71 [ 540.978528][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'. [ 541.138771][ T5608] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 541.300649][ T5608] usb 4-1: device descriptor read/64, error -71 [ 541.370209][T13971] ip_tables: iptables: counters copy to user failed while replacing table [ 541.413603][ T5608] usb usb4-port1: attempt power cycle [ 541.509655][ T6633] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 541.659716][ T6633] usb 3-1: Using ep0 maxpacket: 16 [ 541.665649][ T6633] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 541.685610][ T6633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.693844][ T6633] usb 3-1: Product: syz [ 541.693862][ T6633] usb 3-1: Manufacturer: syz [ 541.693879][ T6633] usb 3-1: SerialNumber: syz [ 541.781401][ T5608] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 541.810951][ T5608] usb 4-1: device descriptor read/8, error -71 [ 541.910110][ T5712] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 541.934104][T13969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.944851][T13969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.962318][T13984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.974955][T13984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.985226][T13983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.985985][T13983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.099625][ T5608] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 542.099920][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 542.126135][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.126293][ T5712] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 542.130752][ T5712] usb 5-1: config index 0 descriptor too short (expected 23958, got 18) [ 542.130808][ T5712] usb 5-1: config 189 has too many interfaces: 131, using maximum allowed: 32 [ 542.130853][ T5712] usb 5-1: config 189 has an invalid descriptor of length 255, skipping remainder of the config [ 542.130904][ T5712] usb 5-1: config 189 has 0 interfaces, different from the descriptor's value: 131 [ 542.133564][ T5608] usb 4-1: device descriptor read/8, error -71 [ 542.141900][ T5712] usb 5-1: string descriptor 0 read error: -22 [ 542.142152][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.212911][ T25] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 542.247730][ T5608] usb usb4-port1: unable to enumerate USB device [ 542.655718][T13989] bridge4: entered promiscuous mode [ 542.655818][T13989] bridge4: entered allmulticast mode [ 542.738015][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2541'. [ 542.752466][T13977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.030774][T13010] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 543.119260][T13993] tipc: Enabled bearer , priority 0 [ 543.126832][T13993] syzkaller0: entered promiscuous mode [ 543.126901][T13993] syzkaller0: entered allmulticast mode [ 543.155318][T13993] tipc: Resetting bearer [ 543.161312][T13992] tipc: Resetting bearer [ 543.169712][T13010] usb 2-1: device descriptor read/64, error -71 [ 543.188528][T13992] tipc: Disabling bearer [ 543.410329][T13010] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 543.421502][T13969] xt_hashlimit: size too large, truncated to 1048576 [ 543.488295][T13995] xt_hashlimit: size too large, truncated to 1048576 [ 543.495591][ T6633] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.495716][ T6633] usb 3-1: MIDIStreaming interface descriptor not found [ 543.543253][T13010] usb 2-1: device descriptor read/64, error -71 [ 543.650286][T13010] usb usb2-port1: attempt power cycle [ 543.816651][ T6633] usb 3-1: USB disconnect, device number 100 [ 543.989524][T13010] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 544.010910][T13010] usb 2-1: device descriptor read/8, error -71 [ 544.167598][T14011] sg_write: data in/out 16348/120 bytes for SCSI command 0x0-- guessing data in; [ 544.167598][T14011] program syz.0.2553 not setting count and/or reply_len properly [ 544.249942][T13010] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 544.251381][T14016] tipc: Enabled bearer , priority 10 [ 544.270439][T13010] usb 2-1: device descriptor read/8, error -71 [ 544.382087][T13010] usb usb2-port1: unable to enumerate USB device [ 544.516568][T13010] usb 5-1: USB disconnect, device number 62 [ 544.633092][T14026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2556'. [ 544.969820][T14010] tipc: Resetting bearer [ 545.084886][T14010] tipc: Disabling bearer [ 545.419560][ T8037] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.419627][ T8037] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.419668][ T8037] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.419698][ T8037] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.026753][T14073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.125246][ T31] audit: type=1326 audit(1788891655.465:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14072 comm="syz.1.2568" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d19e159 code=0x0 [ 546.951089][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'. [ 547.065494][T14089] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2573'. [ 547.446155][T14101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.543362][ T31] audit: type=1326 audit(1788891656.885:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14099 comm="syz.1.2576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d19e159 code=0x0 [ 548.079505][ T6633] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 548.231959][ T6633] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 548.243850][ T6633] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 548.254151][ T6633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.275393][ T6633] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 548.451753][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 548.610624][T14137] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2586'. [ 549.322675][ T6633] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 549.322718][ T6633] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 549.323927][ T6633] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 549.323953][ T6633] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 549.342072][ T6633] usb 3-1: USB disconnect, device number 101 [ 549.728339][T14172] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2598'. [ 550.402752][ T5608] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 550.524268][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2604'. [ 550.608090][ T5608] usb 5-1: unable to get BOS descriptor or descriptor too short [ 550.608223][ T5608] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 550.686116][ T5608] usb 5-1: config index 0 descriptor too short (expected 2182, got 134) [ 550.686207][ T5608] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 550.686300][ T5608] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.686339][ T5608] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 550.789857][ T5608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.799128][ T5608] usb 5-1: Product: syz [ 550.809223][ T5608] usb 5-1: Manufacturer: syz [ 550.809975][ T5608] usb 5-1: SerialNumber: syz [ 550.829894][ T5608] usb 5-1: config 0 descriptor?? [ 551.033945][T14203] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2610'. [ 551.064573][ T5608] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 551.064685][ T5608] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 551.153015][ T5608] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 551.254792][T13797] udevd[13797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.474925][T14221] usb usb7: usbfs: process 14221 (syz.1.2614) did not claim interface 0 before use [ 552.052476][T14235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2618'. [ 552.170644][T13010] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 552.299659][T13010] usb 3-1: device descriptor read/64, error -71 [ 552.540849][T13010] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 552.671412][T13010] usb 3-1: device descriptor read/64, error -71 [ 552.779754][T13010] usb usb3-port1: attempt power cycle [ 552.845906][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 552.869381][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 552.879146][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 552.888115][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 552.899698][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 552.931882][T14250] FAULT_INJECTION: forcing a failure. [ 552.931882][T14250] name failslab, interval 1, probability 0, space 0, times 0 [ 552.931940][T14250] CPU: 0 UID: 0 PID: 14250 Comm: syz.3.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.931968][T14250] Tainted: [L]=SOFTLOCKUP [ 552.931974][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 552.931985][T14250] Call Trace: [ 552.931993][T14250] [ 552.932001][T14250] dump_stack_lvl+0xe8/0x150 [ 552.932034][T14250] should_fail_ex+0x410/0x560 [ 552.932070][T14250] should_failslab+0xa8/0x100 [ 552.932096][T14250] __kmalloc_cache_noprof+0xa3/0x600 [ 552.932116][T14250] ? __kmalloc_cache_noprof+0x14d/0x600 [ 552.932134][T14250] ? sctp_add_bind_addr+0x8c/0x370 [ 552.932158][T14250] ? sctp_add_bind_addr+0x8c/0x370 [ 552.932189][T14250] sctp_add_bind_addr+0x8c/0x370 [ 552.932217][T14250] sctp_copy_local_addr_list+0x31a/0x4e0 [ 552.932245][T14250] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 552.932271][T14250] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 552.932301][T14250] ? sctp_v4_is_any+0x35/0x60 [ 552.932326][T14250] ? sctp_copy_one_addr+0x93/0x360 [ 552.932354][T14250] sctp_bind_addr_copy+0xb3/0x3c0 [ 552.932380][T14250] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 552.932406][T14250] sctp_connect_new_asoc+0x2ff/0x6b0 [ 552.932427][T14250] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 552.932448][T14250] ? __local_bh_enable_ip+0xd6/0x140 [ 552.932471][T14250] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 552.932497][T14250] ? security_sctp_bind_connect+0x7e/0x2c0 [ 552.932529][T14250] sctp_sendmsg+0x159b/0x2d00 [ 552.932571][T14250] ? __pfx_sctp_sendmsg+0x10/0x10 [ 552.932605][T14250] ? __lock_acquire+0x747/0x2de0 [ 552.932638][T14250] ? aa_sock_msg_perm+0xfc/0x210 [ 552.932658][T14250] ? sock_rps_record_flow+0x19/0x350 [ 552.932687][T14250] ? inet_sendmsg+0x298/0x320 [ 552.932715][T14250] ? __pfx_inet_sendmsg+0x10/0x10 [ 552.932740][T14250] sock_sendmsg_nosec+0x10e/0x180 [ 552.932770][T14250] ____sys_sendmsg+0x54e/0x850 [ 552.932797][T14250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.932829][T14250] ? import_iovec+0x73/0xa0 [ 552.932853][T14250] ___sys_sendmsg+0x2a5/0x360 [ 552.932875][T14250] ? __lock_acquire+0x747/0x2de0 [ 552.932898][T14250] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.932932][T14250] ? kstrtouint+0x6e/0xe0 [ 552.932983][T14250] ? __fget_files+0x2a/0x420 [ 552.933007][T14250] ? __fget_files+0x3a2/0x420 [ 552.933043][T14250] __sys_sendmmsg+0x273/0x4d0 [ 552.933070][T14250] ? __pfx___sys_sendmmsg+0x10/0x10 [ 552.933102][T14250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.933137][T14250] ? ksys_write+0x242/0x270 [ 552.933167][T14250] ? __pfx_ksys_write+0x10/0x10 [ 552.933201][T14250] __x64_sys_sendmmsg+0xa0/0xc0 [ 552.933226][T14250] do_syscall_64+0x166/0x520 [ 552.933245][T14250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.933264][T14250] ? clear_bhb_loop+0x70/0xc0 [ 552.933288][T14250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.933307][T14250] RIP: 0033:0x7f3dafd9e159 [ 552.933325][T14250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.933342][T14250] RSP: 002b:00007f3db0c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 552.933362][T14250] RAX: ffffffffffffffda RBX: 00007f3db0025fa0 RCX: 00007f3dafd9e159 [ 552.933377][T14250] RDX: 0000000000000002 RSI: 0000200000002000 RDI: 0000000000000003 [ 552.933390][T14250] RBP: 00007f3db0c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 552.933402][T14250] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 552.933414][T14250] R13: 00007f3db0026038 R14: 00007f3db0025fa0 R15: 00007f3db014fa48 [ 552.933444][T14250] [ 552.984579][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 553.009559][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 553.011518][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 553.012489][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 553.013081][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 553.119486][T13010] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 553.141451][T13010] usb 3-1: device descriptor read/8, error -71 [ 553.290786][ T5749] usb 5-1: USB disconnect, device number 63 [ 553.392911][T13010] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 553.410746][T13010] usb 3-1: device descriptor read/8, error -71 [ 553.519898][T13010] usb usb3-port1: unable to enumerate USB device [ 554.830734][ T8037] vlan2 (unregistering): left allmulticast mode [ 554.834453][ T8037] vlan2 (unregistering): left promiscuous mode [ 554.834503][ T8037] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 554.838958][ T8037] bridge0: port 3(vlan2) entered disabled state [ 555.082205][ T5627] Bluetooth: hci5: command tx timeout [ 555.232545][T14297] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2635'. [ 555.315754][T14251] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.317915][T14251] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.318056][T14251] bridge_slave_0: entered allmulticast mode [ 555.330673][T14251] bridge_slave_0: entered promiscuous mode [ 555.345553][T14251] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.345649][T14251] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.345779][T14251] bridge_slave_1: entered allmulticast mode [ 555.358050][T14251] bridge_slave_1: entered promiscuous mode [ 555.369470][T13010] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 555.502498][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'. [ 555.506923][T14251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.522713][T14251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.529155][T13010] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.529200][T13010] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 555.532770][T13010] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.532793][T13010] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 555.532837][T13010] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 555.532873][T13010] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 555.532912][T13010] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 555.532938][T13010] usb 5-1: config 1 interface 1 has no altsetting 0 [ 555.548831][T13010] usb 5-1: string descriptor 0 read error: -22 [ 555.548963][T13010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.904308][T14251] team0: Port device team_slave_0 added [ 555.916887][T14251] team0: Port device team_slave_1 added [ 555.986062][T13010] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 555.986122][T13010] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 555.986157][T13010] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 556.111742][T14251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.111795][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.111839][T14251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.181961][T14251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.182001][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.182044][T14251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.273101][ T8037] bridge_slave_1: left allmulticast mode [ 556.276464][ T8037] bridge_slave_1: left promiscuous mode [ 556.279394][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.313786][ T31] audit: type=1326 audit(1788891665.655:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14311 comm="syz.1.2642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2d19e159 code=0x0 [ 556.322170][ T8037] bridge_slave_0: left allmulticast mode [ 556.322191][ T8037] bridge_slave_0: left promiscuous mode [ 556.322401][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.394759][ T8037] pimreg: left allmulticast mode [ 556.401008][T14321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2644'. [ 556.584417][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.592706][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.968314][ T8037] bond0 (unregistering): (slave gretap2): Releasing active interface [ 557.159600][ T5627] Bluetooth: hci5: command tx timeout [ 557.373995][ T8037] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.395496][ T8037] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.408903][ T8037] .` (unregistering): Released all slaves [ 557.430398][ T8037] bond0 (unregistering): Released all slaves [ 557.732469][T14251] hsr_slave_0: entered promiscuous mode [ 557.733658][T14251] hsr_slave_1: entered promiscuous mode [ 557.741285][T14251] debugfs: 'hsr0' already exists in 'hsr' [ 557.741310][T14251] Cannot create hsr debugfs directory [ 557.742885][ T8037] tipc: Left network mode [ 557.960508][T14347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2647'. [ 558.182186][T13010] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 558.268147][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 558.279870][ T6633] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 558.361779][T13010] usb 5-1: USB disconnect, device number 64 [ 558.430745][ T6633] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 558.434970][ T6633] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.435002][ T6633] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 558.435039][ T6633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.485280][T14349] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 558.575177][ T6633] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.145231][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2647'. [ 559.228067][ T5608] usb 2-1: USB disconnect, device number 64 [ 559.253270][ T5627] Bluetooth: hci5: command tx timeout [ 559.348548][T14386] tipc: Enabling of bearer rejected, already enabled [ 559.952610][ T5608] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 560.247770][ T5608] usb 3-1: unable to get BOS descriptor or descriptor too short [ 560.247901][ T5608] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 560.277068][ T5608] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.277274][ T5608] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 560.409819][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.409916][ T5608] usb 3-1: Product: syz [ 560.409980][ T5608] usb 3-1: Manufacturer: syz [ 560.410015][ T5608] usb 3-1: SerialNumber: syz [ 560.652699][T14420] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2666'. [ 560.737774][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.738235][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.869435][T13010] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 560.969576][ T5608] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 561.014144][ T5608] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 561.021629][T13010] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 561.028320][T13010] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 561.028343][T13010] usb 2-1: Product: syz [ 561.105689][T13010] usb 2-1: config 0 descriptor?? [ 561.117506][T13010] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 561.125112][T13010] usb 2-1: Detected FT232H [ 561.311315][T13010] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 561.313728][T13010] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32 [ 561.319420][ T5627] Bluetooth: hci5: command tx timeout [ 561.343389][T13010] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 561.373977][T14446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.385226][T14446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.439156][ T5608] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 561.487362][ T5608] usb 3-1: USB disconnect, device number 106 [ 561.619025][T13794] udevd[13794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.762813][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2675'. [ 561.886002][ T8037] hsr_slave_0: left promiscuous mode [ 561.893025][ T8037] hsr_slave_1: left promiscuous mode [ 561.894562][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.896433][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.079504][ T5608] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 562.183910][ T8037] team0 (unregistering): Port device team_slave_1 removed [ 562.200550][ T8037] team0 (unregistering): Port device team_slave_0 removed [ 562.273433][ T5608] usb 3-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40 [ 562.309247][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.311370][ T5608] usb 3-1: Product: syz [ 562.311436][ T5608] usb 3-1: Manufacturer: syz [ 562.311478][ T5608] usb 3-1: SerialNumber: syz [ 562.448987][T14462] tipc: Enabled bearer , priority 0 [ 562.451286][T14463] syzkaller0: entered promiscuous mode [ 562.451305][T14463] syzkaller0: entered allmulticast mode [ 562.454951][T14251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 562.468185][T14251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.480836][T14468] tipc: Resetting bearer [ 562.481063][T14251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 562.500750][T14251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.501956][T14251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.523669][T14251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.524821][T14251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 562.545872][T14251] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.554201][T14452] tipc: Resetting bearer [ 562.622679][T14452] tipc: Disabling bearer [ 562.793564][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2674'. [ 562.843744][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.849520][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.072997][T14251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.159511][T14251] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.185050][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.185173][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.209689][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.209799][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.214979][ T8037] IPVS: stop unused estimator thread 0... [ 563.685732][T14492] tipc: Enabling of bearer rejected, already enabled [ 563.736974][ T6633] usb 2-1: USB disconnect, device number 65 [ 563.765935][ T6633] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 563.766441][ T6633] ftdi_sio 2-1:0.0: device disconnected [ 563.788726][T14251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.240358][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2677'. [ 564.252318][T14251] veth0_vlan: entered promiscuous mode [ 564.307356][T14251] veth1_vlan: entered promiscuous mode [ 564.608659][T14251] veth0_macvtap: entered promiscuous mode [ 564.647745][T14251] veth1_macvtap: entered promiscuous mode [ 564.782123][T14251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.807207][T14251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.889582][ T8037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.889656][ T8037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.889689][ T8037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.889718][ T8037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.025612][T14511] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2679'. [ 565.232573][T14515] FAULT_INJECTION: forcing a failure. [ 565.232573][T14515] name failslab, interval 1, probability 0, space 0, times 0 [ 565.232673][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.3.2680 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.232700][T14515] Tainted: [L]=SOFTLOCKUP [ 565.232706][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.232715][T14515] Call Trace: [ 565.232722][T14515] [ 565.232729][T14515] dump_stack_lvl+0xe8/0x150 [ 565.232755][T14515] should_fail_ex+0x410/0x560 [ 565.232782][T14515] should_failslab+0xa8/0x100 [ 565.232801][T14515] __kmalloc_noprof+0xfe/0x720 [ 565.232817][T14515] ? tomoyo_encode+0x2ad/0x570 [ 565.232833][T14515] ? tomoyo_encode+0x2ad/0x570 [ 565.232855][T14515] tomoyo_encode+0x2ad/0x570 [ 565.232877][T14515] tomoyo_realpath_from_path+0x5fa/0x640 [ 565.232902][T14515] ? tomoyo_path_number_perm+0x219/0x5f0 [ 565.232925][T14515] tomoyo_path_number_perm+0x246/0x5f0 [ 565.232950][T14515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 565.232972][T14515] ? __lock_acquire+0x747/0x2de0 [ 565.232998][T14515] ? hook_file_ioctl+0x1f2/0x600 [ 565.233030][T14515] ? __fget_files+0x2a/0x420 [ 565.233052][T14515] ? __fget_files+0x2a/0x420 [ 565.233072][T14515] ? __fget_files+0x3a2/0x420 [ 565.233091][T14515] ? __fget_files+0x2a/0x420 [ 565.233113][T14515] security_file_ioctl+0xc3/0x2a0 [ 565.233137][T14515] __se_sys_ioctl+0x47/0x170 [ 565.233165][T14515] do_syscall_64+0x166/0x520 [ 565.233182][T14515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.233199][T14515] ? clear_bhb_loop+0x70/0xc0 [ 565.233217][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.233232][T14515] RIP: 0033:0x7f3dafd9e159 [ 565.233250][T14515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.233264][T14515] RSP: 002b:00007f3db0c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.233284][T14515] RAX: ffffffffffffffda RBX: 00007f3db0025fa0 RCX: 00007f3dafd9e159 [ 565.233296][T14515] RDX: 0000200000000080 RSI: 0000000080246f4d RDI: 0000000000000003 [ 565.233306][T14515] RBP: 00007f3db0c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 565.233318][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.233329][T14515] R13: 00007f3db0026038 R14: 00007f3db0025fa0 R15: 00007f3db014fa48 [ 565.233354][T14515] [ 565.347117][T14515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 565.404416][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.404435][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.455948][ T5608] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 565.545971][ T5608] usb 3-1: unit 4 not found! [ 565.708170][ T5608] usb 3-1: USB disconnect, device number 107 [ 565.725882][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.725923][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.850489][T13797] udevd[13797]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.419722][ T5749] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 566.573497][ T5749] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.574522][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 566.574562][ T5749] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 566.574588][ T5749] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 566.582165][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.582190][ T5749] usb 3-1: Product: syz [ 566.582204][ T5749] usb 3-1: Manufacturer: syz [ 566.582218][ T5749] usb 3-1: SerialNumber: syz [ 566.632917][ T5749] cdc_mbim 3-1:1.0: skipping garbage [ 566.830255][T14520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.830420][T14520] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.941726][T14547] tipc: Enabling of bearer rejected, already enabled [ 567.525993][T14563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.536417][T14566] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 567.548005][ T31] audit: type=1326 audit(1788891676.885:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.0.2693" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f720a79e159 code=0x0 [ 567.610967][T14567] xt_TCPMSS: Only works on TCP SYN packets [ 567.621645][T14567] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2694'. [ 567.634698][T14567] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 568.078755][T14575] FAULT_INJECTION: forcing a failure. [ 568.078755][T14575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.078846][T14575] CPU: 1 UID: 0 PID: 14575 Comm: syz.3.2697 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.078872][T14575] Tainted: [L]=SOFTLOCKUP [ 568.078878][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.078889][T14575] Call Trace: [ 568.078897][T14575] [ 568.078906][T14575] dump_stack_lvl+0xe8/0x150 [ 568.078944][T14575] should_fail_ex+0x410/0x560 [ 568.078980][T14575] _copy_from_user+0x2d/0xb0 [ 568.079002][T14575] ___sys_recvmsg+0x173/0x5a0 [ 568.079031][T14575] ? __pfx____sys_recvmsg+0x10/0x10 [ 568.079060][T14575] ? lock_acquire+0x115/0x350 [ 568.079106][T14575] do_recvmmsg+0x31a/0x7f0 [ 568.079137][T14575] ? __pfx_do_recvmmsg+0x10/0x10 [ 568.079158][T14575] ? taprio_dequeue+0x250/0x540 [ 568.079194][T14575] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 568.079219][T14575] ? __pfx_sched_clock_cpu+0x10/0x10 [ 568.079247][T14575] __x64_sys_recvmmsg+0x198/0x250 [ 568.079270][T14575] ? __irq_exit_rcu+0xcb/0x220 [ 568.079296][T14575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 568.079330][T14575] do_syscall_64+0x166/0x520 [ 568.079349][T14575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.079369][T14575] ? clear_bhb_loop+0x70/0xc0 [ 568.079392][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.079411][T14575] RIP: 0033:0x7f3dafd9e159 [ 568.079428][T14575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.079445][T14575] RSP: 002b:00007f3db0c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 568.079466][T14575] RAX: ffffffffffffffda RBX: 00007f3db0025fa0 RCX: 00007f3dafd9e159 [ 568.079481][T14575] RDX: 03fffffffffffe83 RSI: 00002000000018c0 RDI: 0000000000000003 [ 568.079494][T14575] RBP: 00007f3db0c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 568.079507][T14575] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 568.079519][T14575] R13: 00007f3db0026038 R14: 00007f3db0025fa0 R15: 00007f3db014fa48 [ 568.079548][T14575] [ 568.522937][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 568.523130][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2701'. [ 569.093852][T14596] tipc: Enabled bearer , priority 0 [ 569.102852][T14596] syzkaller0: entered promiscuous mode [ 569.110158][T14596] syzkaller0: entered allmulticast mode [ 569.216851][T14595] tipc: Resetting bearer [ 569.263420][T14595] tipc: Disabling bearer [ 569.377190][T14608] syzkaller0: entered promiscuous mode [ 569.377285][T14608] syzkaller0: entered allmulticast mode [ 569.431967][ T5749] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 569.432084][ T5749] cdc_mbim 3-1:1.0: bind() failure [ 569.432695][T14608] tipc: Enabled bearer , priority 0 [ 569.460823][ T5749] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 569.470239][ T5749] cdc_ncm 3-1:1.1: bind() failure [ 569.470362][T14607] tipc: Resetting bearer [ 569.496265][ T5749] usb 3-1: USB disconnect, device number 108 [ 569.582749][T14607] tipc: Disabling bearer [ 569.834440][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888079f9cc00: rx timeout, send abort [ 569.840285][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888079f9cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 569.880050][ T5749] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 570.029848][ T5749] usb 3-1: Using ep0 maxpacket: 8 [ 570.035548][ T5749] usb 3-1: New USB device found, idVendor=c79c, idProduct=1005, bcdDevice=c1.9b [ 570.046589][ T5749] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 570.046628][ T5749] usb 3-1: config 0 has no interface number 0 [ 570.046688][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.074736][ T5749] usb 3-1: config 0 descriptor?? [ 570.955877][ T6630] usb 3-1: USB disconnect, device number 109 [ 571.086714][T14649] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2720'. [ 571.227773][T14654] tipc: Enabling of bearer rejected, already enabled [ 571.981760][T14667] Sensor A: ================= START STATUS ================= [ 571.981933][T14667] Sensor A: Test Pattern: 75% Colorbar [ 571.982022][T14667] Sensor A: Show Information: All [ 571.982057][T14667] Sensor A: Vertical Flip: false [ 571.982093][T14667] Sensor A: Horizontal Flip: false [ 571.982128][T14667] Sensor A: Brightness: 0 [ 571.982163][T14667] Sensor A: Contrast: 128 [ 571.982197][T14667] Sensor A: Hue: 0 [ 571.982230][T14667] Sensor A: Saturation: 128 [ 571.982265][T14667] Sensor A: Pixel Rate: 160000000 [ 571.982315][T14667] Sensor A: Horizontal Blanking: 800 [ 571.982349][T14667] Sensor A: Vertical Blanking: 3223 [ 571.982384][T14667] Sensor A: ================== END STATUS ================== [ 572.287816][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557eb000: rx timeout, send abort [ 572.296499][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880557eb000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 572.389670][ T6630] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 572.551999][ T6630] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 572.564017][ T6630] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 572.575321][ T6630] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.575386][ T6630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.591426][ T6630] hub 4-1:4.0: USB hub found [ 572.806594][ T6630] hub 4-1:4.0: 2 ports detected [ 572.806671][ T6630] usb 4-1: selecting invalid altsetting 1 [ 572.806718][ T6630] hub 4-1:4.0: Using single TT (err -22) [ 573.009647][ T6630] hub 4-1:4.0: config failed, can't get hub status (err -5) [ 573.123077][ T8037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 573.123697][ T8037] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.289460][ T8037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 573.289516][ T8037] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.372329][T13010] usb 4-1: USB disconnect, device number 69 [ 573.555524][ T8037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 573.555581][ T8037] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.611435][T14687] usb usb8: usbfs: process 14687 (syz.1.2738) did not claim interface 0 before use [ 573.626232][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.626645][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.701752][ T8037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 60387 - 0 [ 573.701787][ T8037] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.733574][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 573.743465][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 573.744283][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 573.746636][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 573.749928][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.859811][ T6630] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 574.013943][ T6630] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.014013][ T6630] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 574.015027][ T6630] usb 2-1: config 8 has an invalid interface number: 109 but max is 0 [ 574.015050][ T6630] usb 2-1: config 8 has no interface number 0 [ 574.015088][ T6630] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 574.015114][ T6630] usb 2-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 574.015140][ T6630] usb 2-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 574.018086][ T6630] usb 2-1: string descriptor 0 read error: -22 [ 574.018752][ T6630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.031981][T14687] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 574.048597][ T6630] metro_usb 2-1:8.109: Metrologic USB to Serial converter detected [ 574.061148][ T6630] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 574.241481][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 574.258940][ T8037] bridge_slave_1: left allmulticast mode [ 574.258986][ T8037] bridge_slave_1: left promiscuous mode [ 574.261298][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.261635][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.265255][ T5608] usb 2-1: USB disconnect, device number 66 [ 574.300076][ T8037] bridge_slave_0: left allmulticast mode [ 574.300115][ T8037] bridge_slave_0: left promiscuous mode [ 574.300328][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.368635][ T5608] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 574.380980][ T5608] metro_usb 2-1:8.109: device disconnected [ 574.405919][ T8037] lo: left allmulticast mode [ 574.406047][ T8037] pimreg: left allmulticast mode [ 574.756626][ T8037] tipc: Disabling bearer [ 574.825982][ T8037] bridge0 (unregistering): left allmulticast mode [ 574.975996][ T8037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.993248][ T8037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.022420][ T8037] bond0 (unregistering): (slave bond1): Releasing backup interface [ 575.040117][ T8037] bond0 (unregistering): Released all slaves [ 575.054422][ T8037] bond1 (unregistering): Released all slaves [ 575.070753][ T8037] bond2 (unregistering): Released all slaves [ 575.085497][ T8037] bond3 (unregistering): Released all slaves [ 575.099788][ T8037] bond4 (unregistering): Released all slaves [ 575.442010][ T8037] tipc: Left network mode [ 575.533442][T14717] netlink: 'syz.1.2745': attribute type 2 has an invalid length. [ 575.808565][ T5633] Bluetooth: hci3: command tx timeout [ 575.959569][ T5608] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 576.129472][ T5608] usb 2-1: not running at top speed; connect to a high speed hub [ 576.129607][ T5608] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 576.153521][ T5608] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 576.153612][ T5608] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.153719][ T5608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.226565][ T5608] uvcvideo 2-1:1.0: Found UVC 1.00 device (046d:0825) [ 576.574341][T14690] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.582599][T14690] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.603943][T14690] bridge_slave_0: entered allmulticast mode [ 576.615397][ T5608] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 576.628765][ T5608] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 576.635225][ T5608] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 576.657276][T14690] bridge_slave_0: entered promiscuous mode [ 576.666202][ T5608] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -5 [ 576.668509][T14690] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.668607][T14690] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.668733][T14690] bridge_slave_1: entered allmulticast mode [ 576.670289][T14690] bridge_slave_1: entered promiscuous mode [ 576.850879][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 576.913707][T14690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.054958][T14751] syzkaller0: entered promiscuous mode [ 577.055004][T14751] syzkaller0: entered allmulticast mode [ 577.090123][T14690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.157185][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.157251][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.184930][ T8037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.193806][ T8037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.221280][T14750] netlink: Conntrack attr has 8 unknown bytes [ 577.221329][T14750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.246946][ T8037] veth1_macvtap: left promiscuous mode [ 577.252542][ T8037] veth0_macvtap: left promiscuous mode [ 577.260704][ T8037] veth1_vlan: left promiscuous mode [ 577.266133][ T8037] veth0_vlan: left promiscuous mode [ 577.879765][ T5633] Bluetooth: hci3: command tx timeout [ 577.911678][ T8037] team0 (unregistering): Port device team_slave_1 removed [ 577.932776][ T8037] team0 (unregistering): Port device team_slave_0 removed [ 578.901925][T14761] netlink: 'syz.0.2757': attribute type 10 has an invalid length. [ 578.954360][T14762] netlink: 'syz.0.2757': attribute type 10 has an invalid length. [ 579.669497][ T25] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 579.839492][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 579.845508][ T25] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 579.858534][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.866874][ T25] usb 4-1: Product: syz [ 579.875116][ T25] usb 4-1: Manufacturer: syz [ 579.880033][ T25] usb 4-1: SerialNumber: syz [ 579.895135][ T25] usb 4-1: config 0 descriptor?? [ 579.963349][ T5633] Bluetooth: hci3: command tx timeout [ 580.932518][T14690] team0: Port device team_slave_0 added [ 580.962812][ T6630] usb 2-1: USB disconnect, device number 67 [ 581.011084][T14761] team0: Port device dummy0 added [ 581.018698][T14762] team0: Port device dummy0 removed [ 581.055385][T14690] team0: Port device team_slave_1 added [ 581.063306][ T25] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 581.073788][ T25] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 581.080943][ T25] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 581.096286][T14690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.096323][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.096349][T14690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.098103][T14690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.098117][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.098143][T14690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.310837][ T25] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 581.338603][T14690] hsr_slave_0: entered promiscuous mode [ 581.346238][T14690] hsr_slave_1: entered promiscuous mode [ 581.355885][T14690] debugfs: 'hsr0' already exists in 'hsr' [ 581.361823][T14690] Cannot create hsr debugfs directory [ 581.388794][ T8037] IPVS: stop unused estimator thread 0... [ 581.843956][ T5749] usb 4-1: USB disconnect, device number 70 [ 581.939921][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2766'. [ 582.040478][ T5633] Bluetooth: hci3: command tx timeout [ 582.081692][T14805] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2767'. [ 582.385489][T14690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 582.402806][T14690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 582.406160][T14690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 582.431392][T14690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 582.435624][T14690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 582.457165][T14690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 582.461600][T14690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 582.480270][ T6630] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 582.488422][T14690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 582.569218][ T31] audit: type=1326 audit(1788891691.905:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.594718][ T31] audit: type=1326 audit(1788891691.905:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605015][ T31] audit: type=1326 audit(1788891691.925:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605059][ T31] audit: type=1326 audit(1788891691.925:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605097][ T31] audit: type=1326 audit(1788891691.925:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605134][ T31] audit: type=1326 audit(1788891691.935:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605185][ T31] audit: type=1326 audit(1788891691.935:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605224][ T31] audit: type=1326 audit(1788891691.935:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605263][ T31] audit: type=1326 audit(1788891691.935:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.605303][ T31] audit: type=1326 audit(1788891691.935:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14826 comm="syz.4.2771" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd179e159 code=0x7ffc0000 [ 582.631154][ T6630] usb 4-1: not running at top speed; connect to a high speed hub [ 582.631186][ T6630] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 582.632232][ T6630] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 582.632261][ T6630] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.632297][ T6630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.681578][ T6630] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 582.944479][T14690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.047396][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 583.091698][ T6630] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 583.108393][ T6630] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 583.108478][ T6630] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 583.109065][ T6630] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 583.157757][T14690] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.183545][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.183665][ T8034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.228680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.228814][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.326011][ T25] usb 4-1: USB disconnect, device number 71 [ 583.477068][T14690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.618288][T14690] veth0_vlan: entered promiscuous mode [ 583.646758][T14690] veth1_vlan: entered promiscuous mode [ 583.741642][T14690] veth0_macvtap: entered promiscuous mode [ 583.768106][T14690] veth1_macvtap: entered promiscuous mode [ 583.798294][T14690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.827763][T14690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.882000][ T8034] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.927455][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.989819][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.017268][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.017306][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.023687][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.078483][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.078524][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.374924][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.375367][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.498331][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 584.551825][T14892] loop0: detected capacity change from 0 to 3904 [ 584.604897][T14892] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 584.604949][T14892] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 584.605018][T14892] loop0: [ 584.614643][ T5712] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 584.759564][ T5712] usb 6-1: device descriptor read/64, error -71 [ 584.980337][ T25] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 585.000586][ T5712] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 585.141773][ T5712] usb 6-1: device descriptor read/64, error -71 [ 585.151052][ T25] usb 4-1: not running at top speed; connect to a high speed hub [ 585.151098][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 585.169274][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 585.180760][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.180807][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.213902][ T25] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 585.249697][ T5712] usb usb6-port1: attempt power cycle [ 585.361178][T14926] fuse: Bad value for 'fd' [ 585.569825][ T6633] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 585.582560][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 585.599514][ T5712] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 585.615477][ T25] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 585.626543][ T25] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 585.635870][ T25] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 585.648586][ T5712] usb 6-1: device descriptor read/8, error -71 [ 585.660223][ T25] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 585.720602][ T6633] usb 2-1: Using ep0 maxpacket: 8 [ 585.721459][ T6633] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 585.722438][ T6633] usb 2-1: config 0 interface 0 has no altsetting 0 [ 585.722473][ T6633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.726473][ T6633] usb 2-1: config 0 descriptor?? [ 585.854535][ T5749] usb 4-1: USB disconnect, device number 72 [ 585.889530][ T5712] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 585.912443][ T5712] usb 6-1: device descriptor read/8, error -71 [ 586.019716][ T5712] usb usb6-port1: unable to enumerate USB device [ 586.363667][ T6633] usbhid 2-1:0.0: can't add hid device: -71 [ 586.363786][ T6633] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 586.380691][ T6633] usb 2-1: USB disconnect, device number 68 [ 586.709426][ T5712] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 586.870061][ T5712] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 586.883114][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.883158][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.912858][ T5712] usb 4-1: config 0 descriptor?? [ 587.069188][T14945] FAULT_INJECTION: forcing a failure. [ 587.069188][T14945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 587.079364][T14945] CPU: 1 UID: 0 PID: 14945 Comm: syz.1.2800 Tainted: G L syzkaller #0 PREEMPT(full) [ 587.079395][T14945] Tainted: [L]=SOFTLOCKUP [ 587.079402][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.079414][T14945] Call Trace: [ 587.079423][T14945] [ 587.079431][T14945] dump_stack_lvl+0xe8/0x150 [ 587.079472][T14945] should_fail_ex+0x410/0x560 [ 587.079507][T14945] prepare_alloc_pages+0x223/0x600 [ 587.079535][T14945] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 587.079559][T14945] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 587.079585][T14945] ? __pfx_policy_nodemask+0x10/0x10 [ 587.079617][T14945] alloc_pages_mpol+0x21e/0x390 [ 587.079647][T14945] folio_alloc_mpol_noprof+0x39/0x160 [ 587.079673][T14945] shmem_alloc_and_add_folio+0x43e/0xf60 [ 587.079699][T14945] ? filemap_get_entry+0xcd/0x3f0 [ 587.079733][T14945] ? __pfx_filemap_get_entry+0x10/0x10 [ 587.079757][T14945] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 587.079784][T14945] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 587.079814][T14945] shmem_get_folio_gfp+0x5da/0x16d0 [ 587.079855][T14945] shmem_fallocate+0x996/0xf10 [ 587.079899][T14945] ? __pfx_shmem_fallocate+0x10/0x10 [ 587.079926][T14945] ? lock_acquire+0x115/0x350 [ 587.079965][T14945] vfs_fallocate+0x65a/0x7e0 [ 587.079989][T14945] ? __pfx_vfs_fallocate+0x10/0x10 [ 587.080017][T14945] file_ioctl+0x564/0x7d0 [ 587.080040][T14945] ? __pfx_file_ioctl+0x10/0x10 [ 587.080073][T14945] ? kasan_quarantine_put+0xbb/0x1f0 [ 587.080101][T14945] ? tomoyo_path_number_perm+0x219/0x5f0 [ 587.080132][T14945] ? tomoyo_path_number_perm+0x219/0x5f0 [ 587.080164][T14945] do_vfs_ioctl+0xc27/0x1530 [ 587.080186][T14945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 587.080219][T14945] ? hook_file_ioctl+0x1f2/0x600 [ 587.080258][T14945] ? __fget_files+0x2a/0x420 [ 587.080286][T14945] ? __fget_files+0x2a/0x420 [ 587.080310][T14945] ? __fget_files+0x3a2/0x420 [ 587.080334][T14945] ? __fget_files+0x2a/0x420 [ 587.080362][T14945] ? bpf_lsm_file_ioctl+0x9/0x20 [ 587.080391][T14945] __se_sys_ioctl+0x82/0x170 [ 587.080414][T14945] do_syscall_64+0x166/0x520 [ 587.080433][T14945] ? trace_irq_disable+0x3b/0x140 [ 587.080456][T14945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.080476][T14945] ? clear_bhb_loop+0x70/0xc0 [ 587.080501][T14945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.080521][T14945] RIP: 0033:0x7f1c2d19e159 [ 587.080539][T14945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.080556][T14945] RSP: 002b:00007f1c2dffe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.080576][T14945] RAX: ffffffffffffffda RBX: 00007f1c2d425fa0 RCX: 00007f1c2d19e159 [ 587.080591][T14945] RDX: 0000200000000080 RSI: 0000000040305828 RDI: 0000000000000007 [ 587.080604][T14945] RBP: 00007f1c2dffe090 R08: 0000000000000000 R09: 0000000000000000 [ 587.080617][T14945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.080629][T14945] R13: 00007f1c2d426038 R14: 00007f1c2d425fa0 R15: 00007f1c2d54fa48 [ 587.080660][T14945] [ 587.161969][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.170002][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.175605][ T5712] ath6kl: Failed to submit usb control message: -71 [ 587.175649][ T5712] ath6kl: unable to send the bmi data to the device: -71 [ 587.175664][ T5712] ath6kl: Unable to send get target info: -71 [ 587.179888][ T5712] ath6kl: Failed to init ath6kl core: -71 [ 587.180444][ T5712] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 587.203722][ T5712] usb 4-1: USB disconnect, device number 73 [ 587.766981][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2804'. [ 588.024540][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2806'. [ 588.379832][ T5749] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 588.397505][ T5633] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 588.443535][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.460916][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.469451][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.477947][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.496578][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.551134][ T5749] usb 4-1: not running at top speed; connect to a high speed hub [ 588.551187][ T5749] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 588.569446][ T5749] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 588.569491][ T5749] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.569533][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.614414][ T5749] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 589.019780][ T5749] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 589.030853][ T5749] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 589.030933][ T5749] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 589.031514][ T5749] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -5 [ 589.449881][T14978] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.450231][ T5749] usb 4-1: USB disconnect, device number 74 [ 589.450619][T14978] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.450763][T14978] bridge_slave_0: entered allmulticast mode [ 589.523970][T14978] bridge_slave_0: entered promiscuous mode [ 589.595739][T14978] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.595861][T14978] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.596010][T14978] bridge_slave_1: entered allmulticast mode [ 589.604464][T14978] bridge_slave_1: entered promiscuous mode [ 589.729645][T14978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.734469][T14978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.849124][T14978] team0: Port device team_slave_0 added [ 589.849439][ T5608] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 589.869154][T14978] team0: Port device team_slave_1 added [ 589.949820][T14978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.956930][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.983510][T14978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.991876][ T5608] usb 6-1: device descriptor read/64, error -71 [ 590.051474][T14978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.051657][T14978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.051686][T14978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.245181][ T5608] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 590.369422][ T5608] usb 6-1: device descriptor read/64, error -71 [ 590.386648][T14978] hsr_slave_0: entered promiscuous mode [ 590.387687][T14978] hsr_slave_1: entered promiscuous mode [ 590.388887][T14978] debugfs: 'hsr0' already exists in 'hsr' [ 590.388905][T14978] Cannot create hsr debugfs directory [ 590.421223][T15014] tipc: Enabling of bearer rejected, already enabled [ 590.437468][T15014] netlink: 'syz.3.2815': attribute type 11 has an invalid length. [ 590.479703][ T5608] usb usb6-port1: attempt power cycle [ 590.519611][ T5633] Bluetooth: hci4: command tx timeout [ 590.532973][T15015] gretap0: left promiscuous mode [ 590.612761][T15015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.616125][T15015] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.636624][T15015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.655320][T15015] wireguard: wg1: Could not create IPv4 socket [ 590.655363][T15015] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 590.787951][ T38] bridge_slave_1: left allmulticast mode [ 590.787982][ T38] bridge_slave_1: left promiscuous mode [ 590.788245][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.814354][ T38] bridge_slave_0: left allmulticast mode [ 590.814381][ T38] bridge_slave_0: left promiscuous mode [ 590.814607][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.826319][ T5608] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 590.861726][ T5608] usb 6-1: device descriptor read/8, error -71 [ 590.862080][ T6633] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 591.020070][ T6633] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 591.021186][ T6633] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.021225][ T6633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.119523][ T5608] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 591.140066][ T5608] usb 6-1: device descriptor read/8, error -71 [ 591.196938][ T38] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 591.217724][ T38] tipc: Disabling bearer [ 591.249713][ T5608] usb usb6-port1: unable to enumerate USB device [ 591.258329][ T6633] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 591.258564][ T6633] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 591.414308][ T38] bond1 (unregistering): Released all slaves [ 591.442961][ T38] bond0 (unregistering): Released all slaves [ 591.493700][ T6633] usb 4-1: USB disconnect, device number 75 [ 591.515357][ T38] bond2 (unregistering): (slave bond3): Releasing backup interface [ 591.525745][ T38] bond2 (unregistering): Released all slaves [ 591.562077][ T38] bond3 (unregistering): Released all slaves [ 591.582257][ T38] bond5 (unregistering): Released all slaves [ 591.743493][ T6634] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 591.778408][ T38] tipc: Left network mode [ 591.871928][ T6634] usb 2-1: device descriptor read/64, error -71 [ 592.121150][ T6634] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 592.269781][ T6634] usb 2-1: device descriptor read/64, error -71 [ 592.297339][T15040] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 592.297362][T15040] PKCS7: Only support pkcs7_signedData type [ 592.379674][ T6634] usb usb2-port1: attempt power cycle [ 592.600715][ T5633] Bluetooth: hci4: command tx timeout [ 592.724187][ T6634] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 592.740276][ T6634] usb 2-1: device descriptor read/8, error -71 [ 592.930741][T14512] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 592.980751][ T6634] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 593.002498][ T6634] usb 2-1: device descriptor read/8, error -71 [ 593.082211][T14978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 593.099909][T14512] usb 6-1: not running at top speed; connect to a high speed hub [ 593.107733][T14512] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 593.115544][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.117427][T14978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 593.120737][ T6634] usb usb2-port1: unable to enumerate USB device [ 593.151212][T14512] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 593.151263][T14512] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.151330][T14512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.272997][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.275896][T14978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 593.295893][T14512] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 593.300389][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.346577][T14978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 593.377520][T14978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.475364][ T38] hsr_slave_0: left promiscuous mode [ 593.484585][ T38] hsr_slave_1: left promiscuous mode [ 593.492863][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.664657][ T38] team0 (unregistering): Port device team_slave_1 removed [ 593.684282][T14512] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 593.695366][T14512] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 593.704485][T14512] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 593.715280][T14512] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -5 [ 593.748883][ T38] team0 (unregistering): Port device team_slave_0 removed [ 593.811557][T15075] nvme_fabrics: unknown parameter or missing value '#! »›�¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 593.924116][T15075] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2825'. [ 594.132194][T15052] syzkaller0: entered promiscuous mode [ 594.132237][T15052] syzkaller0: entered allmulticast mode [ 594.680237][ T5633] Bluetooth: hci4: command tx timeout [ 594.803627][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'. [ 595.581992][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 595.759409][ T6633] psmouse serio3: Failed to reset mouse on : -5 [ 596.765150][ T5633] Bluetooth: hci4: command tx timeout [ 597.418488][ T5749] usb 6-1: USB disconnect, device number 10 [ 597.626219][T14978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.668716][T14978] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.671902][T15131] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2832'. [ 597.705734][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.707562][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.711880][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.711976][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.729264][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2833'. [ 597.794780][ T38] IPVS: stop unused estimator thread 0... [ 597.878989][T14978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.023911][T14978] veth0_vlan: entered promiscuous mode [ 598.066261][T14978] veth1_vlan: entered promiscuous mode [ 598.084597][T15145] ip_tables: iptables: counters copy to user failed while replacing table [ 598.180931][T14978] veth0_macvtap: entered promiscuous mode [ 598.207651][T14978] veth1_macvtap: entered promiscuous mode [ 598.247998][T14978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.275454][T14978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.329660][ T4174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.330593][ T4174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.330630][ T4174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.330661][ T4174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.496326][ T8034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.496368][ T8034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.550875][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.550920][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.050053][ T5749] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 599.091217][ T6630] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 599.209508][ T5749] usb 4-1: Invalid ep0 maxpacket: 64 [ 599.251173][ T6630] usb 6-1: not running at top speed; connect to a high speed hub [ 599.251224][ T6630] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 599.273582][ T6630] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 599.273631][ T6630] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.273699][ T6630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.331129][ T6630] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 599.359593][ T5749] usb 4-1: new low-speed USB device number 77 using dummy_hcd [ 599.399416][ T6633] misc userio: Buffer overflowed, userio client isn't keeping up [ 599.512292][ T5749] usb 4-1: Invalid ep0 maxpacket: 64 [ 599.518088][ T5749] usb usb4-port1: attempt power cycle [ 599.755425][ T6630] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 599.766379][ T6630] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 599.766435][ T6630] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 599.767057][ T6630] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -5 [ 599.872508][ T5749] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 599.903577][ T5749] usb 4-1: Invalid ep0 maxpacket: 64 [ 599.974342][T15215] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 3 out of range (1000000..45000000) [ 600.039550][ T5749] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 600.060032][ T5749] usb 4-1: Invalid ep0 maxpacket: 64 [ 600.065702][ T5749] usb usb4-port1: unable to enumerate USB device [ 600.124427][T15173] syzkaller0: entered promiscuous mode [ 600.124464][T15173] syzkaller0: entered allmulticast mode [ 600.706498][ T6633] input: PS/2 Generic Mouse as /devices/serio3/input/input38 [ 600.969376][ T6633] psmouse serio3: Failed to enable mouse on [ 601.864287][T15246] ip_tables: iptables: counters copy to user failed while replacing table [ 601.932072][T15248] PKCS7: Unknown OID: [4] 0.0 [ 601.932095][T15248] PKCS7: Only support pkcs7_signedData type [ 601.992956][T15249] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2857'. [ 602.299441][ T25] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 602.462350][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 602.463369][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.463747][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.477883][ T25] usb 4-1: config 0 descriptor?? [ 602.683691][T15249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.684197][T15249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.686646][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 602.686741][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 602.702167][ T25] usb 4-1: USB disconnect, device number 80 [ 603.015774][ T25] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 603.167824][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 603.168916][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 603.169008][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.172781][ T25] usb 4-1: config 0 descriptor?? [ 603.740282][T15249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.749065][T15249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.815071][ T6633] usb 6-1: USB disconnect, device number 11 [ 604.110188][T15262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2861'. [ 604.579412][ T6633] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 604.740462][ T6633] usb 6-1: Using ep0 maxpacket: 8 [ 604.746337][ T6633] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 604.757898][ T6633] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.768956][ T6633] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.794625][ T6633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.803190][ T6633] usb 6-1: Product: syz [ 604.803253][ T6633] usb 6-1: Manufacturer: syz [ 604.803269][ T6633] usb 6-1: SerialNumber: syz [ 604.819648][T13010] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 604.970222][T13010] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 604.971554][T13010] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 604.971578][T13010] usb 5-1: config 0 has no interface number 0 [ 604.971616][T13010] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 604.971673][T13010] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 604.971712][T13010] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.982351][T13010] usb 5-1: config 0 descriptor?? [ 604.983146][T15260] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 604.988748][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 605.028940][T13010] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 605.065589][ T25] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 605.081870][ T25] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 605.137145][ T25] usb 4-1: USB disconnect, device number 81 [ 605.143230][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 605.155442][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 605.219582][ T5608] usb 5-1: USB disconnect, device number 65 [ 605.219665][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 605.346536][ T6633] usb 6-1: 6:0: cannot get min/max values for control 8 (id 6) [ 605.353583][ T6633] usb 6-1: unit 4 not found! [ 605.479044][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 605.623979][ T6633] usb 6-1: USB disconnect, device number 12 [ 605.739756][T15296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2866'. [ 605.750676][T13797] udevd[13797]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.859420][ T25] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 605.892933][T15323] tipc: New replicast peer: 255.255.255.255 [ 605.893897][T15323] tipc: Enabled bearer , priority 10 [ 605.896956][T15323] netlink: 'syz.1.2869': attribute type 11 has an invalid length. [ 605.920481][T15323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.936101][T15323] A link change request failed with some changes committed already. Interface s may have been left with an inconsistent configuration, please check. [ 605.972826][ T8034] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 605.973006][ T8034] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 605.973060][ T8034] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 605.973096][ T8034] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 606.012707][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 606.013682][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 606.018442][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.018467][ T25] usb 4-1: Product: syz [ 606.018482][ T25] usb 4-1: Manufacturer: syz [ 606.018507][ T25] usb 4-1: SerialNumber: syz [ 606.024724][ T25] usb 4-1: config 0 descriptor?? [ 606.321563][ T5712] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 606.348095][T15333] FAULT_INJECTION: forcing a failure. [ 606.348095][T15333] name failslab, interval 1, probability 0, space 0, times 0 [ 606.348144][T15333] CPU: 0 UID: 0 PID: 15333 Comm: syz.4.2873 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.348170][T15333] Tainted: [L]=SOFTLOCKUP [ 606.348177][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.348186][T15333] Call Trace: [ 606.348193][T15333] [ 606.348200][T15333] dump_stack_lvl+0xe8/0x150 [ 606.348232][T15333] should_fail_ex+0x410/0x560 [ 606.348270][T15333] should_failslab+0xa8/0x100 [ 606.348297][T15333] __kmalloc_cache_noprof+0xa3/0x600 [ 606.348317][T15333] ? __kmalloc_cache_noprof+0x14d/0x600 [ 606.348336][T15333] ? sctp_add_bind_addr+0x8c/0x370 [ 606.348361][T15333] ? sctp_add_bind_addr+0x8c/0x370 [ 606.348393][T15333] sctp_add_bind_addr+0x8c/0x370 [ 606.348422][T15333] sctp_copy_local_addr_list+0x31a/0x4e0 [ 606.348452][T15333] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 606.348479][T15333] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 606.348510][T15333] ? sctp_v4_is_any+0x35/0x60 [ 606.348535][T15333] ? sctp_copy_one_addr+0x93/0x360 [ 606.348565][T15333] sctp_bind_addr_copy+0xb3/0x3c0 [ 606.348592][T15333] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 606.348618][T15333] sctp_connect_new_asoc+0x2ff/0x6b0 [ 606.348642][T15333] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 606.348668][T15333] ? __local_bh_enable_ip+0xd6/0x140 [ 606.348693][T15333] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 606.348718][T15333] ? security_sctp_bind_connect+0x7e/0x2c0 [ 606.348751][T15333] sctp_sendmsg+0x159b/0x2d00 [ 606.348795][T15333] ? __pfx_sctp_sendmsg+0x10/0x10 [ 606.348829][T15333] ? __lock_acquire+0x747/0x2de0 [ 606.348863][T15333] ? aa_sock_msg_perm+0xfc/0x210 [ 606.348884][T15333] ? sock_rps_record_flow+0x19/0x350 [ 606.348914][T15333] ? inet_sendmsg+0x298/0x320 [ 606.348943][T15333] ? __pfx_inet_sendmsg+0x10/0x10 [ 606.348976][T15333] sock_sendmsg_nosec+0x10e/0x180 [ 606.349007][T15333] ____sys_sendmsg+0x54e/0x850 [ 606.349036][T15333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.349069][T15333] ? import_iovec+0x73/0xa0 [ 606.349096][T15333] ___sys_sendmsg+0x2a5/0x360 [ 606.349118][T15333] ? __lock_acquire+0x747/0x2de0 [ 606.349143][T15333] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.349172][T15333] ? kstrtouint+0x6e/0xe0 [ 606.349224][T15333] ? __fget_files+0x2a/0x420 [ 606.349250][T15333] ? __fget_files+0x3a2/0x420 [ 606.349290][T15333] __sys_sendmmsg+0x273/0x4d0 [ 606.349319][T15333] ? __pfx___sys_sendmmsg+0x10/0x10 [ 606.349352][T15333] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 606.349387][T15333] ? ksys_write+0x242/0x270 [ 606.349418][T15333] ? __pfx_ksys_write+0x10/0x10 [ 606.349453][T15333] __x64_sys_sendmmsg+0xa0/0xc0 [ 606.349479][T15333] do_syscall_64+0x166/0x520 [ 606.349498][T15333] ? trace_irq_disable+0x3b/0x140 [ 606.349517][T15333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.349537][T15333] ? clear_bhb_loop+0x70/0xc0 [ 606.349562][T15333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.349582][T15333] RIP: 0033:0x7fbe2bb9e159 [ 606.349601][T15333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.349618][T15333] RSP: 002b:00007fbe2cada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 606.349640][T15333] RAX: ffffffffffffffda RBX: 00007fbe2be25fa0 RCX: 00007fbe2bb9e159 [ 606.349656][T15333] RDX: 0000000000000002 RSI: 0000200000002000 RDI: 0000000000000003 [ 606.349670][T15333] RBP: 00007fbe2cada090 R08: 0000000000000000 R09: 0000000000000000 [ 606.349684][T15333] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 606.349697][T15333] R13: 00007fbe2be26038 R14: 00007fbe2be25fa0 R15: 00007fbe2bf4fa48 [ 606.349730][T15333] [ 606.392490][ T5608] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 606.545602][ T5712] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 606.582008][ T5712] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 606.582035][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.685586][ T5608] usb 6-1: Using ep0 maxpacket: 8 [ 606.729496][ T5608] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 606.773948][ T5608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.773976][ T5608] usb 6-1: Product: syz [ 606.773990][ T5608] usb 6-1: Manufacturer: syz [ 606.774004][ T5608] usb 6-1: SerialNumber: syz [ 606.782806][ T5608] usb 6-1: config 0 descriptor?? [ 606.790086][ T5608] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 606.850417][T15340] syzkaller0: entered promiscuous mode [ 606.850444][T15340] syzkaller0: entered allmulticast mode [ 606.854792][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2876'. [ 606.854816][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2876'. [ 606.863679][ T25] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 606.867228][ T25] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 606.867261][ T25] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 606.927227][ T5712] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 606.927486][ T5712] cxacru 2-1:1.0: probe with driver cxacru failed with error -22 [ 607.009634][ T5720] tipc: Node number set to 3548072148 [ 607.137452][ T5712] usb 2-1: USB disconnect, device number 73 [ 607.232009][T15346] nvme_fabrics: unknown parameter or missing value '#! »›�¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 607.257141][T15346] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2878'. [ 607.691984][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2879'. [ 608.014296][T15360] kvm: pic: single mode not supported [ 608.015780][T15360] kvm: pic: level sensitive irq not supported [ 608.181411][ T5608] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 608.332543][ T5608] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 608.335105][ T5608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.335153][ T5608] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 608.335193][ T5608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.423145][T15372] netlink: 'syz.4.2885': attribute type 1 has an invalid length. [ 608.431196][T15372] lo: entered promiscuous mode [ 608.435577][T15372] tunl0: entered promiscuous mode [ 608.438470][T15372] gre0: entered promiscuous mode [ 608.450790][T15372] gretap0: entered promiscuous mode [ 608.457532][T15372] erspan0: entered promiscuous mode [ 608.463295][T15372] ip_vti0: entered promiscuous mode [ 608.465836][T15372] ip6_vti0: entered promiscuous mode [ 608.470569][T15372] sit0: entered promiscuous mode [ 608.475591][T15372] ip6tnl0: entered promiscuous mode [ 608.479241][T15372] ip6gre0: entered promiscuous mode [ 608.492524][T15372] syz_tun: entered promiscuous mode [ 608.506482][T15372] ip6gretap0: entered promiscuous mode [ 608.512323][T15372] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.512952][T15372] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.514066][T15372] bridge0: entered promiscuous mode [ 608.553315][ T5608] dvbdev: DVB: registering new adapter (DEC2000-t) [ 608.567670][ T5608] usb 2-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 608.780909][ T5608] ttusb_dec_send_command: command bulk message failed: error -71 [ 608.787632][ T5608] usb 2-1: USB disconnect, device number 74 [ 608.960148][T15384] FAULT_INJECTION: forcing a failure. [ 608.960148][T15384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.960183][T15384] CPU: 1 UID: 0 PID: 15384 Comm: syz.0.2889 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.960209][T15384] Tainted: [L]=SOFTLOCKUP [ 608.960216][T15384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.960227][T15384] Call Trace: [ 608.960235][T15384] [ 608.960242][T15384] dump_stack_lvl+0xe8/0x150 [ 608.960269][T15384] should_fail_ex+0x410/0x560 [ 608.960304][T15384] _copy_to_user+0x31/0xb0 [ 608.960329][T15384] simple_read_from_buffer+0xe1/0x170 [ 608.960361][T15384] proc_fail_nth_read+0x1bb/0x230 [ 608.960388][T15384] ? common_file_perm+0x20e/0x2b0 [ 608.960412][T15384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.960444][T15384] ? rw_verify_area+0x24a/0x4c0 [ 608.960473][T15384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 608.960501][T15384] vfs_read+0x213/0xa80 [ 608.960533][T15384] ? __pfx___mutex_lock+0x10/0x10 [ 608.960553][T15384] ? __pfx_vfs_read+0x10/0x10 [ 608.960581][T15384] ? __fget_files+0x2a/0x420 [ 608.960611][T15384] ? __fget_files+0x3a2/0x420 [ 608.960636][T15384] ? __fget_files+0x2a/0x420 [ 608.960671][T15384] ksys_read+0x150/0x270 [ 608.960700][T15384] ? __pfx_ksys_read+0x10/0x10 [ 608.960815][T15384] ? __pfx_v4l2_ioctl+0x10/0x10 [ 608.960857][T15384] do_syscall_64+0x166/0x520 [ 608.960878][T15384] ? trace_irq_disable+0x3b/0x140 [ 608.960897][T15384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.960918][T15384] ? clear_bhb_loop+0x70/0xc0 [ 608.960941][T15384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.960961][T15384] RIP: 0033:0x7f720a75e98e [ 608.960980][T15384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 608.960997][T15384] RSP: 002b:00007f72089f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 608.961019][T15384] RAX: ffffffffffffffda RBX: 00007f72089f66c0 RCX: 00007f720a75e98e [ 608.961034][T15384] RDX: 000000000000000f RSI: 00007f72089f60a0 RDI: 0000000000000004 [ 608.961046][T15384] RBP: 00007f72089f6090 R08: 0000000000000000 R09: 0000000000000000 [ 608.961059][T15384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.961071][T15384] R13: 00007f720aa26038 R14: 00007f720aa25fa0 R15: 00007f720ab4fa48 [ 608.961101][T15384] [ 609.325295][ T5608] usb 6-1: USB disconnect, device number 13 [ 609.650814][T15402] netlink: 'syz.5.2897': attribute type 1 has an invalid length. [ 609.664013][T15402] lo: entered promiscuous mode [ 609.667813][T15402] tunl0: entered promiscuous mode [ 609.670338][T15402] gre0: entered promiscuous mode [ 609.681554][T15402] gretap0: entered promiscuous mode [ 609.687263][T15402] erspan0: entered promiscuous mode [ 609.700853][T15402] ip_vti0: entered promiscuous mode [ 609.708515][T15402] ip6_vti0: entered promiscuous mode [ 609.717239][T15402] sit0: entered promiscuous mode [ 609.732631][T15402] ip6tnl0: entered promiscuous mode [ 609.738319][T15402] ip6gre0: entered promiscuous mode [ 609.752808][T15402] syz_tun: entered promiscuous mode [ 609.772207][T15402] ip6gretap0: entered promiscuous mode [ 609.781469][T15402] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.782052][T15402] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.782962][T15402] bridge0: entered promiscuous mode [ 610.099431][ T5608] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 610.132318][T15414] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2903'. [ 610.262149][ T5608] usb 6-1: not running at top speed; connect to a high speed hub [ 610.270056][ T5608] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 610.282335][ T5608] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 610.293370][ T5608] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.293400][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.326980][ T5608] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 610.729963][ T5608] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 610.730576][ T5608] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : 0 (exp. 26). [ 610.730627][ T5608] uvcvideo 6-1:1.1: Failed to initialize the device (-5). [ 610.746489][ T5608] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -5 [ 610.960191][T15406] syzkaller0: entered promiscuous mode [ 610.960220][T15406] syzkaller0: entered allmulticast mode [ 611.048490][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880552eb800: rx timeout, send abort [ 611.048783][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880552eb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 611.607420][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2912'. [ 613.311514][T15437] xt_nfacct: accounting object `' does not exist [ 613.552519][T15433] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 613.593485][ T5608] usb 6-1: USB disconnect, device number 14 [ 614.812455][T15471] netlink: 'syz.3.2923': attribute type 1 has an invalid length. [ 614.875796][T15477] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2926'. [ 614.937819][T15482] FAULT_INJECTION: forcing a failure. [ 614.937819][T15482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.937869][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.5.2927 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.937896][T15482] Tainted: [L]=SOFTLOCKUP [ 614.937903][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.937913][T15482] Call Trace: [ 614.937920][T15482] [ 614.937929][T15482] dump_stack_lvl+0xe8/0x150 [ 614.937956][T15482] should_fail_ex+0x410/0x560 [ 614.937988][T15482] _copy_from_user+0x2d/0xb0 [ 614.938012][T15482] ___sys_sendmsg+0x1c6/0x360 [ 614.938035][T15482] ? __lock_acquire+0x747/0x2de0 [ 614.938059][T15482] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.938112][T15482] ? __fget_files+0x2a/0x420 [ 614.938147][T15482] ? __fget_files+0x3a2/0x420 [ 614.938180][T15482] __x64_sys_sendmsg+0x1b1/0x290 [ 614.938205][T15482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.938247][T15482] do_syscall_64+0x166/0x520 [ 614.938265][T15482] ? trace_irq_disable+0x3b/0x140 [ 614.938284][T15482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.938304][T15482] ? clear_bhb_loop+0x70/0xc0 [ 614.938328][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.938347][T15482] RIP: 0033:0x7fd21cf9e159 [ 614.938364][T15482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.938381][T15482] RSP: 002b:00007fd21deaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.938403][T15482] RAX: ffffffffffffffda RBX: 00007fd21d225fa0 RCX: 00007fd21cf9e159 [ 614.938417][T15482] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 614.938431][T15482] RBP: 00007fd21deaf090 R08: 0000000000000000 R09: 0000000000000000 [ 614.938444][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.938456][T15482] R13: 00007fd21d226038 R14: 00007fd21d225fa0 R15: 00007fd21d34fa48 [ 614.938485][T15482] [ 615.157671][T15471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.558315][T15504] tipc: Enabled bearer , priority 0 [ 615.567999][T15504] syzkaller0: entered promiscuous mode [ 615.573766][T15504] syzkaller0: entered allmulticast mode [ 615.609987][T15504] tipc: Resetting bearer [ 615.623201][T15503] tipc: Resetting bearer [ 615.657425][T15503] tipc: Disabling bearer [ 615.679446][ T6634] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 615.695085][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2938'. [ 615.701134][T15506] bond1: entered allmulticast mode [ 615.710523][T15515] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20001 [ 615.741998][T15515] netlink: 'syz.0.2939': attribute type 2 has an invalid length. [ 615.809473][ T6634] usb 6-1: device descriptor read/64, error -71 [ 616.051960][ T6634] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 616.179428][ T6634] usb 6-1: device descriptor read/64, error -71 [ 616.289768][ T6634] usb usb6-port1: attempt power cycle [ 616.354644][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 616.354670][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 616.354718][T15538] netlink: 'syz.1.2947': attribute type 11 has an invalid length. [ 616.354909][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 616.354925][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 616.354942][T15538] netlink: 'syz.1.2947': attribute type 11 has an invalid length. [ 616.609465][ T5608] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 616.629402][ T6634] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 616.651424][ T6634] usb 6-1: device descriptor read/8, error -71 [ 616.683187][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2948'. [ 616.769514][ T5608] usb 2-1: Using ep0 maxpacket: 16 [ 616.772193][ T5608] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.774584][ T5608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.774608][ T5608] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.778217][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.778241][ T5608] usb 2-1: Product: syz [ 616.778255][ T5608] usb 2-1: Manufacturer: syz [ 616.778270][ T5608] usb 2-1: SerialNumber: syz [ 616.802966][ T5608] usb 2-1: 0:2 : does not exist [ 616.890635][ T6634] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 616.911711][ T6634] usb 6-1: device descriptor read/8, error -71 [ 616.925387][T15546] vlan2: entered promiscuous mode [ 616.925431][T15546] bond_slave_1: entered promiscuous mode [ 617.002867][T15538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.007567][T15538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.023453][ T6634] usb usb6-port1: unable to enumerate USB device [ 617.040542][ T5608] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 617.083049][ T5608] usb 2-1: USB disconnect, device number 75 [ 617.114108][T13324] udevd[13324]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.299439][T13010] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 617.459426][T13010] usb 5-1: Using ep0 maxpacket: 16 [ 617.460184][T13010] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=49.06 [ 617.461161][T13010] usb 5-1: config 244 has an invalid interface number: 140 but max is 0 [ 617.461185][T13010] usb 5-1: config 244 has no interface number 0 [ 617.461225][T13010] usb 5-1: config 244 interface 140 has no altsetting 0 [ 617.463330][T13010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.463353][T13010] usb 5-1: Product: syz [ 617.463368][T13010] usb 5-1: Manufacturer: syz [ 617.463383][T13010] usb 5-1: SerialNumber: syz [ 617.613035][T15555] vcan0: tx drop: invalid da for name 0x00000000fffffff5 [ 617.699694][T13010] kvaser_usb 5-1:244.140: error -ENODEV: Cannot get usb endpoint(s) [ 617.715931][T13010] usb 5-1: USB disconnect, device number 66 [ 618.449408][ T5608] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 618.537166][T15580] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2964'. [ 618.600167][ T5608] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 618.611435][ T5608] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 618.611477][ T5608] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.611512][ T5608] usb 2-1: config 0 has no interfaces? [ 618.611548][ T5608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.647822][ T5608] usb 2-1: config 0 descriptor?? [ 618.671053][T15586] netlink: 'syz.4.2966': attribute type 2 has an invalid length. [ 618.671080][T15586] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2966'. [ 618.875694][T15592] FAULT_INJECTION: forcing a failure. [ 618.875694][T15592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.896975][T15592] CPU: 1 UID: 0 PID: 15592 Comm: syz.5.2968 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.897006][T15592] Tainted: [L]=SOFTLOCKUP [ 618.897013][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.897024][T15592] Call Trace: [ 618.897033][T15592] [ 618.897042][T15592] dump_stack_lvl+0xe8/0x150 [ 618.897077][T15592] should_fail_ex+0x410/0x560 [ 618.897114][T15592] _copy_from_user+0x2d/0xb0 [ 618.897138][T15592] ___sys_sendmsg+0x1c6/0x360 [ 618.897161][T15592] ? __lock_acquire+0x747/0x2de0 [ 618.897188][T15592] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.897249][T15592] ? __fget_files+0x2a/0x420 [ 618.897276][T15592] ? __fget_files+0x3a2/0x420 [ 618.897312][T15592] __x64_sys_sendmsg+0x1b1/0x290 [ 618.897340][T15592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.897383][T15592] do_syscall_64+0x166/0x520 [ 618.897403][T15592] ? trace_irq_disable+0x3b/0x140 [ 618.897422][T15592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.897443][T15592] ? clear_bhb_loop+0x70/0xc0 [ 618.897468][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.897488][T15592] RIP: 0033:0x7fd21cf9e159 [ 618.897506][T15592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.897524][T15592] RSP: 002b:00007fd21deaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.897546][T15592] RAX: ffffffffffffffda RBX: 00007fd21d225fa0 RCX: 00007fd21cf9e159 [ 618.897561][T15592] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 618.897574][T15592] RBP: 00007fd21deaf090 R08: 0000000000000000 R09: 0000000000000000 [ 618.897587][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.897599][T15592] R13: 00007fd21d226038 R14: 00007fd21d225fa0 R15: 00007fd21d34fa48 [ 618.897631][T15592] [ 618.969867][ T6632] usb 2-1: USB disconnect, device number 76 [ 619.094130][ T31] kauditd_printk_skb: 44 callbacks suppressed [ 619.094176][ T31] audit: type=1326 audit(1788891728.425:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15588 comm="syz.4.2967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe2bb9e159 code=0x0 [ 619.292900][ T31] audit: type=1326 audit(1788891728.635:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.3.2970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dafd9e159 code=0x7ffc0000 [ 619.323672][ T31] audit: type=1326 audit(1788891728.665:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.3.2970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3dafd9e159 code=0x7ffc0000 [ 619.358104][ T31] audit: type=1326 audit(1788891728.695:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.3.2970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dafd9e159 code=0x7ffc0000 [ 619.359142][ T31] audit: type=1326 audit(1788891728.695:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.3.2970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3dafd9e159 code=0x7ffc0000 [ 619.359185][ T31] audit: type=1326 audit(1788891728.695:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.3.2970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3dafd9e159 code=0x7ffc0000 [ 619.391459][ T31] audit: type=1326 audit(1788891728.695:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15598 comm="syz.3.2970" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dafd9e159 code=0x7ffc0000 [ 619.500528][T13010] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 619.671612][T13010] usb 6-1: Using ep0 maxpacket: 32 [ 619.677143][T13010] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 619.690607][T13010] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 619.690658][T13010] usb 6-1: config 0 has no interface number 0 [ 619.690714][T13010] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.690744][T13010] usb 6-1: config 0 interface 85 has no altsetting 0 [ 624.283525][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.283607][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.547067][ C1] sched: DL replenish lagged too much [ 651.122083][T13010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.173542][T13010] usb 6-1: Product: syz [ 651.222040][T13010] usb 6-1: Manufacturer: syz [ 685.228915][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 686.650311][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.669996][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 708.935748][ T25] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 711.936064][ T25] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 747.643130][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.661003][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.449255][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.464472][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 832.682182][T15609] Bluetooth: hci3: command tx timeout [ 835.329314][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 835.335727][T15611] Bluetooth: hci4: command tx timeout [ 835.341647][ C0] rcu: (detected by 0, t=10503 jiffies, g=109681, q=700243 ncpus=2) [ 835.349720][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 2061 (4295020659-4295018598), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 835.363009][ C0] rcu: rcu_preempt kthread starved for 2062 jiffies! g109681 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 835.374032][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 835.384000][ C0] rcu: RCU grace-period kthread stack dump: [ 835.389884][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 835.403390][ C0] Call Trace: [ 835.406680][ C0] [ 835.409615][ C0] __schedule+0x17db/0x58f0 [ 835.414165][ C0] ? __pfx___schedule+0x10/0x10 [ 835.419035][ C0] ? lock_acquire+0x115/0x350 [ 835.423732][ C0] ? schedule+0x90/0x2b0 [ 835.427990][ C0] schedule+0x164/0x2b0 [ 835.432161][ C0] schedule_timeout+0x152/0x2c0 [ 835.437031][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 835.442416][ C0] ? __pfx_process_timeout+0x10/0x10 [ 835.447722][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 835.453543][ C0] ? prepare_to_swait_event+0x322/0x350 [ 835.459106][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 835.463975][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 835.470137][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 835.475428][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 835.480653][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 835.485254][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 835.490463][ C0] ? __kthread_parkme+0x71/0x1f0 [ 835.495417][ C0] ? __kthread_parkme+0x199/0x1f0 [ 835.500462][ C0] kthread+0x38b/0x480 [ 835.504539][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 835.509742][ C0] ? __pfx_kthread+0x10/0x10 [ 835.514339][ C0] ret_from_fork+0x514/0xb70 [ 835.518938][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 835.524061][ C0] ? __switch_to+0xc89/0x1420 [ 835.528752][ C0] ? __pfx_kthread+0x10/0x10 [ 835.533347][ C0] ret_from_fork_asm+0x1a/0x30 [ 835.538139][ C0] [ 835.541161][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 835.547483][ C0] Sending NMI from CPU 0 to CPUs 1: [ 835.552766][ C1] NMI backtrace for cpu 1 [ 835.552786][ C1] CPU: 1 UID: 0 PID: 9558 Comm: ipvs-e:1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.552810][ C1] Tainted: [L]=SOFTLOCKUP [ 835.552817][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 835.552828][ C1] RIP: 0010:lock_release+0x183/0x3c0 [ 835.552851][ C1] Code: 1f 00 ff ff ff ff 48 21 f0 48 09 d0 48 89 45 20 85 c9 0f 85 e6 00 00 00 45 89 af a0 0b 00 00 48 8b 45 00 49 89 87 98 0b 00 00 <41> 39 fd 0f 84 cb 00 00 00 41 ff c5 48 8d 4c 24 24 4c 89 ff 48 8b [ 835.552867][ C1] RSP: 0018:ffffc90000a18838 EFLAGS: 00000046 [ 835.552883][ C1] RAX: 4d21fc19992a4684 RBX: 0000000000000206 RCX: 0000000000000000 [ 835.552896][ C1] RDX: ffffffff9108de01 RSI: ffffffff8ed5c760 RDI: 0000000000000001 [ 835.552908][ C1] RBP: ffff888079982b18 R08: ffffc9000351f738 R09: 0000000000000000 [ 835.552921][ C1] R10: ffffc90000a18998 R11: ffffffff81b28090 R12: 0000000000000001 [ 835.552934][ C1] R13: 0000000000000001 R14: ffffffff8ed5c760 R15: ffff888079981f40 [ 835.552946][ C1] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 835.552961][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.552973][ C1] CR2: 00005555812174e8 CR3: 0000000074a48000 CR4: 00000000003526f0 [ 835.552989][ C1] Call Trace: [ 835.552996][ C1] [ 835.553005][ C1] ? unwind_next_frame+0x8f/0x2550 [ 835.553026][ C1] ? unwind_next_frame+0x8f/0x2550 [ 835.553045][ C1] unwind_next_frame+0x1baa/0x2550 [ 835.553066][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.553085][ C1] ? unwind_next_frame+0x8f/0x2550 [ 835.553105][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 835.553131][ C1] arch_stack_walk+0x11b/0x150 [ 835.553168][ C1] ? finish_task_switch+0x413/0xc60 [ 835.553189][ C1] stack_trace_save+0xa9/0x100 [ 835.553211][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 835.553238][ C1] ? __lock_acquire+0x747/0x2de0 [ 835.553255][ C1] kasan_save_track+0x3e/0x80 [ 835.553273][ C1] ? kasan_save_track+0x3e/0x80 [ 835.553289][ C1] ? kasan_save_free_info+0x40/0x50 [ 835.553311][ C1] ? __kasan_slab_free+0x5c/0x80 [ 835.553328][ C1] ? kmem_cache_free+0x182/0x650 [ 835.553345][ C1] ? dst_destroy+0x22f/0x340 [ 835.553367][ C1] ? rcu_core+0x926/0x1260 [ 835.553384][ C1] ? handle_softirqs+0x226/0x860 [ 835.553405][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 835.553425][ C1] ? irq_exit_rcu+0x9/0x30 [ 835.553444][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 835.553470][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.553504][ C1] ? dst_destroy+0x22f/0x340 [ 835.553526][ C1] kasan_save_free_info+0x40/0x50 [ 835.553548][ C1] __kasan_slab_free+0x5c/0x80 [ 835.553566][ C1] kmem_cache_free+0x182/0x650 [ 835.553583][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 835.553606][ C1] dst_destroy+0x22f/0x340 [ 835.553628][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 835.553650][ C1] ? rcu_core+0x8a8/0x1260 [ 835.553667][ C1] rcu_core+0x926/0x1260 [ 835.553689][ C1] ? timerqueue_linked_add+0x287/0x2e0 [ 835.553715][ C1] ? __pfx_rcu_core+0x10/0x10 [ 835.553736][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 835.553761][ C1] handle_softirqs+0x226/0x860 [ 835.553783][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 835.553806][ C1] __irq_exit_rcu+0xcb/0x220 [ 835.553828][ C1] irq_exit_rcu+0x9/0x30 [ 835.553847][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 835.553872][ C1] [ 835.553878][ C1] [ 835.553885][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.553903][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 835.553947][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 b7 5e 51 0a e8 32 11 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 835.553962][ C1] RSP: 0018:ffffc9000351f7e0 EFLAGS: 00000202 [ 835.553977][ C1] RAX: 000000000005a0f7 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 835.553990][ C1] RDX: 0000000000000000 RSI: ffffffff8e474d50 RDI: ffffffff8c6d9480 [ 835.554002][ C1] RBP: ffffc9000351f830 R08: ffffffff907a1e7f R09: 1ffffffff20f43cf [ 835.554015][ C1] R10: dffffc0000000000 R11: fffffbfff20f43d0 R12: ffff888079981f40 [ 835.554029][ C1] R13: ffff8880b873c8b8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 835.554052][ C1] __schedule+0x17e3/0x58f0 [ 835.554086][ C1] ? __pfx___schedule+0x10/0x10 [ 835.554108][ C1] ? lock_acquire+0x115/0x350 [ 835.554127][ C1] ? schedule+0x90/0x2b0 [ 835.554150][ C1] schedule+0x164/0x2b0 [ 835.554174][ C1] schedule_timeout+0x152/0x2c0 [ 835.554195][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 835.554216][ C1] ? __pfx_process_timeout+0x10/0x10 [ 835.554246][ C1] ip_vs_estimation_kthread+0x29ef/0x3950 [ 835.554268][ C1] ? ip_vs_estimation_kthread+0x283a/0x3950 [ 835.554300][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 835.554326][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 835.554348][ C1] ? __kthread_parkme+0x71/0x1f0 [ 835.554371][ C1] ? __kthread_parkme+0x199/0x1f0 [ 835.554395][ C1] kthread+0x38b/0x480 [ 835.554411][ C1] ? __pfx_ip_vs_estimation_kthread+0x10/0x10 [ 835.554431][ C1] ? __pfx_kthread+0x10/0x10 [ 835.554447][ C1] ret_from_fork+0x514/0xb70 [ 835.554464][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 835.554488][ C1] ? __switch_to+0xc89/0x1420 [ 835.554512][ C1] ? __pfx_kthread+0x10/0x10 [ 835.554527][ C1] ret_from_fork_asm+0x1a/0x30 [ 835.554559][ C1] [ 840.902997][ T25] usb 4-1: USB disconnect, device number 82 [ 842.583109][ T32] INFO: task kworker/1:10:6634 blocked for more than 151 seconds. [ 842.592382][ T32] Tainted: G L syzkaller #0 [ 842.597181][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 842.600209][ T32] task:kworker/1:10 state:D stack:22368 pid:6634 tgid:6634 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 842.621943][ T32] Workqueue: events_power_efficient reg_check_chans_work [ 842.638613][ T32] Call Trace: [ 842.641989][ T32]