last executing test programs: 12.102253624s ago: executing program 1 (id=1295): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000007a00)={0x44, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x32, 0xa9, 0x0, 0x1, [@generic="57d753865bc026738a23", @nested={0x21, 0xeb, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @fd=r0}, @generic="2db88f6f88ebb2fd1bd786312d0c165c579777e85d"]}]}]}, 0x44}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket(0x22, 0x2, 0x3) sendto$packet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4a}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000180)={0x18, 0x0, {0x2, @broadcast, 'geneve0\x00'}}, 0x1e) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000800) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x88, 0x1403, 0x1, 0xfffffffe, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) io_setup(0x66, &(0x7f0000000400)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x0, 0xa0002f5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r9, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r10, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) 11.701449337s ago: executing program 2 (id=1297): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="b60d3dbda73db82956ef37e1716f96fd49715da95ce9bff49580c8c8a52dd1194395b2398aa3d32f670306a303ca4194497f60bffa046571add2d67dde4a6b7238da85b4899cba1f867fde88dad2074f0cf266b39132bf86efc5a6f0d4", 0x5d}], 0x1) 11.236257599s ago: executing program 2 (id=1300): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a00"/12, @ANYBLOB="fa"], 0x20) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x2c}, 0x94) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x80, 0x29, 0x913ce02fc63371a3, @remote, @mcast2, 0x7800, 0x8, 0x8, 0x401}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000}, 0x8}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0xc974, 0x82000) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f00000003c0)=""/211) (async) r5 = syz_open_pts(0xffffffffffffffff, 0x8000) (async) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001940), 0x20000, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x44021804}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x40, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x336e, &(0x7f00000000c0)={0x0, 0xffffffff, 0x3010, 0x3}, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffff"], 0x0, 0x97, 0x0, 0x1, 0x3}, 0x28) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00001d7000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0}, 0x68) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001e000100000000000000000002000000010000000000000008"], 0x24}}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000001900)={&(0x7f00000016c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001880)=[{&(0x7f0000001700)="2071b8c3543c0122f3e9925596598450b1abdbdaa094f4e6ef121baf815cb4cd69f6a7b8e0a237638fe11383367affc7124e4d0d57c487a29c788a36e1a0d12ca06e19c577cbc1ed0700382292d500a7d807fc800039a7371cda5fd3776ddf37720d5f454b6a542c6ca7922a4d44", 0x6e}, {&(0x7f0000001780)="ba7bef911fe77a9c4e3f63114691c2813f4addfc02daf0134449bbfd2b889f44a10e58b95c7eb637d90fe0780fbad7d18aed63853d7ed6c88a32347c0ce3280dc279bffe703285f4c7804b339192518b750900c711ac79ec6801d6460c3f595be9a990c7d3d33a8611ac52aa553d9804a61d31d9c59acd40cdb40740e91536bbccc1e4f602a65eeb2f80f95a40d575c485c170e9542fbaf5716d793748723a69a1e7c270ef3addb602db76fef206307e12ab0be590cc42c2b67c16079a42569afde79ad9d148415fe8629651", 0xcc}], 0x2, &(0x7f00000018c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7e65}}], 0x30}, 0x4880) (async) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001680)=0x5d) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 10.260192964s ago: executing program 1 (id=1303): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5030000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016800200"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) 10.117377017s ago: executing program 1 (id=1304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x1fd, @empty, 0x7}, 0x24) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000040)={0x40, 0x21, 0x2b, {0x2b, 0x21, "d5b84d45fa047d02d51d570c3ab31b334f71288181ab1c117f81b4d0a1ad3c360beed0d6e294615168"}}, &(0x7f0000000080)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "702f03a3c92d73fbcdf1fad6313818f58da6e8a886262c50b25ee79bc2a6ec6593bb78380cfbe1728a49f872aebc3a25e8ef0f0868759b15eb18b1935d7c23b1f7ee36966dde8d38c0f5d69520b11c717e641f52fb584201d92915b17db82ade90f816b7d28293b19f2dafe14390f6dac82cea419903f38cb13b6cc55fda2a2019666862d8e18467d2b08ac6089522805606cccf181236a5473355a75ce6cfd55dfc1f3ef15633ae1c776d47946be26699d774c2058aa9e95cb04a9683f1b655a4b29103420d0c313cd2714934c72b667067e6df2c"}}, &(0x7f0000000180)={0x0, 0x22, 0x2, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x0, 0x2, 0x8}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff9, 0xdb, 0x1, {0x22, 0x4ea}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0x62, "0dcccae90d6622961edf585cb84a8914059ad575696cd8b6f4c5111e7e4ed33dd5491e09c48ed6ef5b77b02a0513e5aaccd222a61ca56e9f675ac831b044c33e61b94553e4302903c03c189b7a39f19d1d300648931bef39cb01a3a8b6e6eea14e28"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x57}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x83, "b76d2f85f39cbaa85341495c1be20722291a6427718959fdbc940ce67efacf04dec8980be0cdc4d467cf6310657c842b0d5f966eda148070f5d13e40d3975270181c292ce7978d3fc0c96ab3a385a2cb16761c481db600e7fdc56d44d7eab7a0b36fee0043e57bcfb1281b44fc559a6fafe6853d3823a6cb2b70b6c7c9c20ef9cde51f"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x1}}) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) clock_adjtime(0x0, &(0x7f00000000c0)={0x1643, 0x6, 0xfffffffffffffff8, 0x8, 0x5c2c, 0x5, 0x9, 0x80010000000000, 0x1000000000000000, 0x9, 0xffffffffffffffff, 0x4b08, 0x0, 0x3, 0x87d, 0x8, 0x0, 0x7ff, 0x7, 0xf72, 0x5, 0x6, 0x40, 0xfff, 0x8, 0xfffffffffffffffa}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) shutdown(r0, 0x1) 10.101120372s ago: executing program 4 (id=1305): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) (async) io_uring_enter(r1, 0xe7f, 0xe876, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000b, 0x10, r0, 0xb0549000) (async) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000004580)=""/4081, 0xff1}, {&(0x7f0000001b80)=""/4134, 0x1026}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000500)=""/169, 0xa9}], 0x7}, 0x10160) 9.996114509s ago: executing program 2 (id=1306): socket$inet6(0xa, 0x800000000000002, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_usb_disconnect(r4) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) unshare(0x24000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 9.781474274s ago: executing program 4 (id=1308): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000017c0)={0xb89430a242b1aa30, 0x960, 0x320, 0x600, 0x2, 0x5, 0x1, 0x0, {0x1, 0xe}, {0x4f0, 0x100, 0x1}, {0x5, 0x8}, {0x6, 0x6}, 0x3, 0x0, 0xbc0, 0x5, 0x0, 0x6, 0x9, 0x7, 0x267, 0x0, 0x0, 0x81, 0x24, 0x0, 0x2, 0xa}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x20, 0x40, 0x1000, 0x4, 0x2, 0x0, {0x4, 0x9413, 0x1}, {0x350, 0xfffffffd, 0x4000}, {0xf4f0}, {0x9938, 0x0, 0xffe}, 0x1, 0x140, 0x3, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x6, 0x836, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x1488}, 0x24000000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x600000, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000001780)={0x5, 0x9, 0xfffb}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x2) preadv(r6, &(0x7f00000000c0)=[{&(0x7f00000031c0)=""/166, 0xa6}], 0x1, 0x43a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9.60793509s ago: executing program 0 (id=1309): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)='C', 0x1}], 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x2c020400) r4 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r4, 0x4}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000009, 0xffffffff) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket(0x1e, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001d00)={0x2020}, 0x2020) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.040159979s ago: executing program 0 (id=1310): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES8=r1, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016800200"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) 8.909153768s ago: executing program 0 (id=1311): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f962347813", 0xd8}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x45}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562", 0x30}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x5, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.8498343s ago: executing program 4 (id=1312): syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf00d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xc0, 0x81, "", [{{0x9, 0x4, 0x0, 0xdb, 0x1, 0x3, 0x1, 0x1, 0xf, {0x9, 0x21, 0x401, 0x1, 0x1, {0x22, 0xbcb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x7, 0x81}}}}}]}}]}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1) 8.191590582s ago: executing program 4 (id=1313): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x4000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x22003, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x3210001, &(0x7f0000000200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000200)={{r4, &(0x7f0000000000)='#+#\x00', 0x1c5000, &(0x7f0000000040)={@align=0x6, {0x1000, 0x100, 0x8, 0x4}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x400}, {[0x7, 0x10000, 0x9, 0x7]}, 0xb, 0x8f, &(0x7f0000000140)=""/143}) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 8.060116533s ago: executing program 4 (id=1314): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xe000200c}) r3 = syz_open_dev$media(&(0x7f0000000780), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000f40)) signalfd4(r2, &(0x7f00000002c0)={[0x6]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x4, r6, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x23, &(0x7f0000000340)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0xaa, 0x59d81d89cb2273ec, 'c', "bcfb58", 0x17, "8a025d763dd642b124"}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close(r8) socket$kcm(0x29, 0x5, 0x0) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) 7.902010059s ago: executing program 0 (id=1315): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f00db519448fb81bc5b679ee056627a2db04ff8cbb222978edd412f1f50417f6f06deda57e25215b8663a5d6be143c7ad027d0754dcf6ad7b19a8cef08a790e334df598c27eafdb109cdf7f4dc51eaf7e28ead362f4"], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0x40806685, &(0x7f0000000240)={0x4, 0xffffffffffffffff, 'id1\x00'}) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.826938225s ago: executing program 0 (id=1316): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x2, 0x200, &(0x7f0000000880)="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"}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r10, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r11, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x16, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180018500000070000000000000000000000181200"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000054298400100000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0xbe, &(0x7f00000001c0)=""/190, 0xc2d00, 0x41, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000d40)=[0xffffffffffffffff, r4, 0x1, r5, r8, r9, r10, r11], &(0x7f0000000d80)=[{0x0, 0x4, 0x6, 0x6}], 0x10, 0x3}, 0x94) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010010bd7000fcdbdf25110000004c0009"], 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0xc8d0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000440)={0x20, 0x38d06c00aa96fada, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) 6.712288353s ago: executing program 3 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 6.698687531s ago: executing program 1 (id=1318): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{0x0, 0x1c}], 0x1}, 0x4080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x8, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x8, 0x144, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x1, 0xb4, 0xa, 0xb2bd, 0x6, 0x8, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x1000, 0x3, 0x0, 0xd, 0x4, 0x12a0, 0x8000, 0x1, 0x7, 0x8, 0x7, 0x81, 0xb66, 0x79, 0x2, 0x10001, 0x5, 0x91, 0x4, 0x4, 0x16, 0x0, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xffffff81, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x4, 0x7, 0xbe, 0x4007f, 0xffffffff, 0x9212], [0x9, 0x16e, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0xfffffff7, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffd, 0x80a, 0x4, 0x5, 0x1000, 0x0, 0x200b395, 0x400004, 0x80000000, 0x4, 0x19, 0x7, 0x1, 0x3, 0x3, 0x8, 0x9, 0x400, 0x6, 0x4c2336d3, 0x96, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x1, 0x0, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1ca, 0x4, 0x80000004, 0x80000001, 0x6, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x1ff, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x200006, 0x8, 0x400, 0xfffffffe, 0x400, 0x41, 0x6, 0xee4b, 0x6, 0x8000, 0x8000003, 0x5, 0x89, 0x3, 0x3, 0x9, 0x0, 0xc7, 0x4, 0x10000a, 0x8000, 0x401, 0x3e59, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0x245, 0x60a0, 0x80, 0x9d26, 0x10000, 0x1, 0x2, 0x42, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0x203, 0x5, 0x1], [0xa772, 0x3, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x8000007, 0x1e, 0x7f, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0xfa, 0x5396, 0x936, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8d, 0x7fffffff, 0x9, 0xc, 0x329, 0x0, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x0, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x1, 0xfffffff9, 0xd, 0xc, 0x463f, 0x7fefffff, 0x7fffffff, 0x8006, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x2, 0x1}, 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000640)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000080, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001140)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r6, 0xc0106440, &(0x7f00000001c0)={0x0, 0x80, &(0x7f0000000100)}) newfstatat(0xffffffffffffff9c, &(0x7f00000032c0)='./file0\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) write$FUSE_CREATE_OPEN(r6, &(0x7f0000003380)={0xa0, 0x0, r7, {{0x4, 0x0, 0x100000001, 0x68, 0x2, 0x3ff, {0x3, 0x4, 0x2badae60, 0x4, 0xffffffffffffff4b, 0x453, 0x8, 0xffb8, 0x4, 0x1000, 0xfffffff7, r8, r9, 0x1, 0x7}}, {0x0, 0x19}}}, 0xa0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 6.24212628s ago: executing program 3 (id=1319): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x106}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0}, &(0x7f0000000380)=0x40) 6.05933165s ago: executing program 3 (id=1320): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)='C', 0x1}], 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x2c020400) r4 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r4, 0x4}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x10000009, 0xffffffff) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) socket(0x1e, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001d00)={0x2020}, 0x2020) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x263f, 0x0, '\x00', 0x20000000}, 0x0, [0x0, 0x0, 0x0, 0xfffdffffffffbffd, 0x0, 0x0, 0x0, 0x3, 0x71, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x9, 0x100000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd451, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.91110136s ago: executing program 2 (id=1321): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800004e0251ff6aeb0000008500009fdab5a1e290830007001000852800001102000081a20f60"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x800, 0x0, 0x165, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) write$vga_arbiter(r6, 0x0, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x84) sendfile(r5, r5, 0x0, 0x8000002) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000140)={&(0x7f0000001000), 0x0, 0x1}, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x401, 0x12) 2.874719934s ago: executing program 3 (id=1322): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfffb, 0x81, 0x8, 0x9, 0xb, "6c06002004dc17a8"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x22) 2.019852879s ago: executing program 0 (id=1323): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x13}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200002, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r2, 0x0, 0xffffffffffffffa4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000100)=0x2c0000) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fsetxattr$security_evm(r5, 0x0, 0x0, 0x9, 0x2) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f00000002c0)={0x2, 0x1, [0x8, 0x2, 0x1, 0x3, 0xfffffff7, 0x5, 0x8, 0x38d]}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x430600) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r7 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) 1.976559656s ago: executing program 3 (id=1324): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x106}, 0x1c) 1.957197587s ago: executing program 2 (id=1325): r0 = socket(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000e00)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000840)=[{0x1, 0x0, [0x9, 0x101, 0x7, 0x3, 0x7bffffff, 0x0, 0x1, 0x6, 0x8, 0x3, 0x7, 0x2, 0x3, 0x7, 0x69, 0xfffff801]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000e00)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000840)=[{0x1, 0x0, [0x9, 0x101, 0x7, 0x3, 0x7bffffff, 0x0, 0x1, 0x6, 0x8, 0x3, 0x7, 0x2, 0x3, 0x7, 0x69, 0xfffff801]}], 0xffffffffffffffff, 0x1, 0x1, 0x48}}, 0x20) r2 = inotify_init() socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="440100001000130726bd70000000000064010101000000000000000000000000ac1414b3c5130000000000000000000000004e2200004e230003020000c03a000000d9b2d46d2843968ca859995964acc2d6f624403b29dddc90a4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@remote, @empty, r4}, 0xc) r6 = fanotify_init(0x1c20e49379eccf54, 0x40000) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, r4}, 0xc) (async) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, r4}, 0xc) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x318, 0x0, 0x85e}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000000100000080", @ANYRESHEX=r3, @ANYRES64=r6], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000003c0)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="000000000000000000009500"/25, @ANYRES16=r8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x0, 0x16, 0x0, &(0x7f0000000580)="40f0538ef047b21fb6006857ec32d0ea398575305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000}, 0x50) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r4}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local, r4}, 0xc) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r11, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x4e23, 0x2, 0x2, 0x20, 0x40}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffff9, 0xfffffffe}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x4e23, 0x2, 0x2, 0x20, 0x40}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffff9, 0xfffffffe}}, 0xe8) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x1c) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0xa, 0x801, 0x0) getsockopt(r13, 0x29, 0x43, 0x0, &(0x7f0000001ffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x13200, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x13200, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.89197489s ago: executing program 1 (id=1326): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000400000000020000000000001202000000020000000000000e030000000000000000005f00db519448fb81bc5b679ee056627a2db04ff8cbb222978edd412f1f50417f6f06deda57e25215b8663a5d6be143c7ad027d0754dcf6ad7b19a8cef08a790e334df598c27eafdb109cdf7f4dc51eaf7e28ead362f4"], 0x0, 0x54}, 0x28) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0x40806685, &(0x7f0000000240)={0x4, 0xffffffffffffffff, 'id1\x00'}) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.885540049s ago: executing program 4 (id=1327): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250c0000002000018008000300030000001400020076657468305f766c616e00000000000014000380"], 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2) r4 = syz_clone(0x3000000, &(0x7f00000002c0)="9be735bf6e06cdf214c6f4617b4bfe12346ebfb5a3d5867c780a5275bf37a4b4e761630b98dc7fce1774a7cdfb860e4996c1111d5a3c12b8df0dab70c4db1012b6104553e76b50c58b2bba9123284d4251c98b66bf9f", 0x56, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)="de1f665790eab1888b4df0454a7374c179953c27fcd9d56af0ef51b676f52ce19ddb2f346c09e3a64ab1352faade343d612885f4650fdb35c43a836590fa507fdf2433892f32f8e0d34fa6f070b3ca86a4d3346a8c00b231a8bd59d8fe7d486fa3976cab490e5f99958bb256d8a036cf333714b4f4420a8b549502d2f1f0e72a22c9fa88389c50d5b001dd356148d3949e3ef96f3a7dc4f914abad41d9d4efd37a5fdaa6247f64f0067cedd487815f9dc4a2d6f53e8fc5e0a18a8d4cb18cfbc1c5ac4ab8903c04d0e38ec088be100075bbb59c85d2afcde77e0deabc78b93565cb8758d502902b5297f7fb9211531b97f282b4") write$cgroup_pid(r3, &(0x7f0000000540)=r4, 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001a008c0200007000fedbdf2500000000"], 0x14}}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0x0, 0x34524742, 0x500, 0x5c, 0x3, @stepwise={{0x7, 0x5}, {0x4, 0x2}, {0xffff, 0x2}}}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="0000003282031328ebc38f000000", 0x0, 0xfffffff9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 815.335022ms ago: executing program 1 (id=1328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x20044884) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000023ffe88e00000008000300", @ANYRES32=r3], 0x28}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x1, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x7a76, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x8001, 0x4, 0x6, 0xfffffff7}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(r1, &(0x7f0000000200)=0x7fffffff, r5, &(0x7f0000000280)=0x89, 0x8000000000000001, 0x1a) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r8, 0x20, &(0x7f00000004c0)={&(0x7f0000000140)=""/98, 0x62, 0x0, &(0x7f00000003c0)=""/194, 0xc2}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_MARK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004804}, 0x40c0) 712.026836ms ago: executing program 3 (id=1329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 0s ago: executing program 2 (id=1330): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3800128014000180090001006c6173740000000004000280200001800a00010071756f7461000000100002800c0001400000c000000000000800034000000110140000001000010000000000000000000a84000a"], 0xc4}}, 0x20050800) mkdir(&(0x7f0000000200)='./file1\x00', 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@lsrr={0x83, 0xb, 0x75, [@remote, @multicast2]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000280)=0x2, 0x1) r4 = semget(0x0, 0x4, 0x39c) semop(r4, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000240)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000005c0)={{r1, &(0x7f0000000240)='$^-\x1a.\'#\x00', 0x400, &(0x7f00000002c0)={@align=0x4, {0x7fff, 0xfffc, 0x2, 0x8}}, 0x1, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x7}, {[0x9, 0x6, 0x1ff, 0xdb6c]}, 0x0, 0xc5, &(0x7f00000004c0)=""/197}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000640)={0x3, 0x8}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae03, 0x25) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x2, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @dev}}}, &(0x7f0000000380)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) name_to_handle_at(r7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0xa, 0x8, 0x71, 0x2, 0x8, 0x2}}, &(0x7f0000000140), 0x0) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r7, &(0x7f0000000180)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): [ T9007] netlink: 48 bytes leftover after parsing attributes in process `syz.2.960'. [ 383.013626][ T9024] kernel profiling enabled (shift: 62) [ 383.013644][ T9024] profiling shift: 62 too large [ 383.125741][ T9028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.968'. [ 383.371358][ T5875] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 383.551807][ T5875] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 383.551833][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.551850][ T5875] usb 3-1: config 0 has no interface number 0 [ 383.551888][ T5875] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 383.551919][ T5875] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.551941][ T5875] usb 3-1: config 0 interface 52 has no altsetting 0 [ 383.555651][ T5875] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 383.555667][ T5875] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 383.555677][ T5875] usb 3-1: Manufacturer: syz [ 383.561092][ T5875] usb 3-1: config 0 descriptor?? [ 383.652210][ T5875] hub 3-1:0.52: bad descriptor, ignoring hub [ 383.652245][ T5875] hub 3-1:0.52: probe with driver hub failed with error -5 [ 383.803953][ T9036] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.803977][ T9036] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 383.804205][ T9036] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 383.804223][ T9036] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 383.817994][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.818261][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.863446][ T5875] usb 3-1: Can not set alternate setting to 1, error: -71 [ 383.863482][ T5875] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 383.912215][ T5875] usb 3-1: USB disconnect, device number 14 [ 387.364014][ T9051] FAULT_INJECTION: forcing a failure. [ 387.364014][ T9051] name failslab, interval 1, probability 0, space 0, times 0 [ 387.364050][ T9051] CPU: 0 UID: 0 PID: 9051 Comm: syz.2.973 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.364077][ T9051] Tainted: [L]=SOFTLOCKUP [ 387.364083][ T9051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.364096][ T9051] Call Trace: [ 387.364103][ T9051] [ 387.364112][ T9051] dump_stack_lvl+0xe8/0x150 [ 387.364146][ T9051] should_fail_ex+0x46b/0x600 [ 387.364178][ T9051] should_failslab+0xa8/0x100 [ 387.364200][ T9051] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 387.364230][ T9051] ? __d_alloc+0x37/0x6f0 [ 387.364262][ T9051] __d_alloc+0x37/0x6f0 [ 387.364288][ T9051] ? __lock_acquire+0x6b5/0x2cf0 [ 387.364310][ T9051] d_alloc_parallel+0xe6/0x1610 [ 387.364337][ T9051] ? __d_lookup+0x66/0x780 [ 387.364371][ T9051] ? __d_lookup+0x66/0x780 [ 387.364403][ T9051] ? __d_lookup+0x66/0x780 [ 387.364433][ T9051] ? __pfx_d_alloc_parallel+0x10/0x10 [ 387.364461][ T9051] ? d_lookup+0x1f/0xc0 [ 387.364491][ T9051] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 387.364524][ T9051] path_openat+0xcc3/0x38a0 [ 387.364586][ T9051] ? __pfx_path_openat+0x10/0x10 [ 387.364630][ T9051] ? do_raw_spin_lock+0x12b/0x2f0 [ 387.364666][ T9051] do_file_open+0x23e/0x4a0 [ 387.364700][ T9051] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 387.364726][ T9051] ? __pfx_do_file_open+0x10/0x10 [ 387.364753][ T9051] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 387.364790][ T9051] ? __pfx_kfree_link+0x10/0x10 [ 387.364825][ T9051] ? alloc_fd+0x64e/0x6c0 [ 387.364859][ T9051] do_sys_openat2+0x113/0x200 [ 387.364887][ T9051] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.364912][ T9051] ? ksys_write+0x248/0x270 [ 387.364943][ T9051] ? __pfx_ksys_write+0x10/0x10 [ 387.364975][ T9051] __x64_sys_openat+0x138/0x170 [ 387.365005][ T9051] do_syscall_64+0x14d/0xf80 [ 387.365025][ T9051] ? trace_irq_disable+0x3b/0x150 [ 387.365047][ T9051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.365066][ T9051] ? clear_bhb_loop+0x40/0x90 [ 387.365089][ T9051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.365107][ T9051] RIP: 0033:0x7f9196a5d04e [ 387.365124][ T9051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 387.365141][ T9051] RSP: 002b:00007f9194cf5f28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.365160][ T9051] RAX: ffffffffffffffda RBX: 00007f9194cf66c0 RCX: 00007f9196a5d04e [ 387.365174][ T9051] RDX: 0000000000000000 RSI: 00007f9196b32328 RDI: ffffffffffffff9c [ 387.365187][ T9051] RBP: 00007f9194cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 387.365198][ T9051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.365209][ T9051] R13: 00007f9196d16038 R14: 00007f9196d15fa0 R15: 00007ffed8592f58 [ 387.365240][ T9051] [ 387.796745][ T9058] netlink: 196 bytes leftover after parsing attributes in process `syz.3.977'. [ 387.796778][ T9058] netlink: 48 bytes leftover after parsing attributes in process `syz.3.977'. [ 387.799956][ T9058] netlink: 33 bytes leftover after parsing attributes in process `syz.3.977'. [ 387.799974][ T9058] netlink: 116 bytes leftover after parsing attributes in process `syz.3.977'. [ 387.973033][ T9073] FAULT_INJECTION: forcing a failure. [ 387.973033][ T9073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 387.973068][ T9073] CPU: 0 UID: 0 PID: 9073 Comm: syz.4.981 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.973094][ T9073] Tainted: [L]=SOFTLOCKUP [ 387.973100][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.973112][ T9073] Call Trace: [ 387.973119][ T9073] [ 387.973127][ T9073] dump_stack_lvl+0xe8/0x150 [ 387.973161][ T9073] should_fail_ex+0x46b/0x600 [ 387.973192][ T9073] prepare_alloc_pages+0x22a/0x6b0 [ 387.973222][ T9073] __alloc_frozen_pages_noprof+0x12f/0x380 [ 387.973247][ T9073] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 387.973272][ T9073] ? __pfx_policy_nodemask+0x10/0x10 [ 387.973295][ T9073] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 387.973330][ T9073] alloc_pages_mpol+0xd1/0x380 [ 387.973353][ T9073] ___kmalloc_large_node+0x4e/0x150 [ 387.973386][ T9073] __kmalloc_large_node_noprof+0x18/0x90 [ 387.973407][ T9073] __kmalloc_noprof+0x4a3/0x7b0 [ 387.973424][ T9073] ? vhost_dev_set_owner+0x2a3/0xaf0 [ 387.973458][ T9073] vhost_dev_set_owner+0x2a3/0xaf0 [ 387.973501][ T9073] vhost_net_ioctl+0x8f9/0x17d0 [ 387.973531][ T9073] ? __asan_memset+0x22/0x50 [ 387.973556][ T9073] ? smack_file_ioctl+0x263/0x360 [ 387.973587][ T9073] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 387.973626][ T9073] ? __fget_files+0x2a/0x420 [ 387.973649][ T9073] ? __fget_files+0x3a6/0x420 [ 387.973672][ T9073] ? __fget_files+0x2a/0x420 [ 387.973699][ T9073] ? bpf_lsm_file_ioctl+0x9/0x20 [ 387.973719][ T9073] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 387.973748][ T9073] __se_sys_ioctl+0xff/0x170 [ 387.973769][ T9073] do_syscall_64+0x14d/0xf80 [ 387.973790][ T9073] ? trace_irq_disable+0x3b/0x150 [ 387.973812][ T9073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.973831][ T9073] ? clear_bhb_loop+0x40/0x90 [ 387.973854][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.973872][ T9073] RIP: 0033:0x7f9b71d9c819 [ 387.973890][ T9073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.973907][ T9073] RSP: 002b:00007f9b6ffee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.973926][ T9073] RAX: ffffffffffffffda RBX: 00007f9b72015fa0 RCX: 00007f9b71d9c819 [ 387.973940][ T9073] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000003 [ 387.973951][ T9073] RBP: 00007f9b6ffee090 R08: 0000000000000000 R09: 0000000000000000 [ 387.973962][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.973974][ T9073] R13: 00007f9b72016038 R14: 00007f9b72015fa0 R15: 00007ffee64de308 [ 387.974004][ T9073] [ 395.631122][ T9109] 8021q: VLANs not supported on caif0 [ 396.201418][ T809] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 396.351891][ T809] usb 1-1: too many configurations: 193, using maximum allowed: 8 [ 396.358445][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.358475][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.362745][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.362798][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.416188][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.418252][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.419316][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.419364][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.420354][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.420412][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.431702][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.431750][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.432745][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.432789][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.435618][ T809] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 396.435664][ T809] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.445007][ T809] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 396.445032][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.445050][ T809] usb 1-1: Product: syz [ 396.445062][ T809] usb 1-1: Manufacturer: syz [ 396.445074][ T809] usb 1-1: SerialNumber: syz [ 396.473740][ T809] rtl8150 1-1:1.0: couldn't find required endpoints [ 396.473980][ T809] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 396.801331][ T5875] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 398.199043][ T9124] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 398.199065][ T9124] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 398.199188][ T9124] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 398.199205][ T9124] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 398.203375][ T5875] usb 5-1: too many configurations: 193, using maximum allowed: 8 [ 398.205154][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.205201][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.206444][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.206490][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.207686][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.207739][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.210179][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.210224][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.212928][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.212972][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.228903][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.228950][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.237876][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.237942][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.245456][ T5875] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 398.245505][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.285543][ T5875] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 398.285569][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.285587][ T5875] usb 5-1: Product: syz [ 398.285613][ T5875] usb 5-1: Manufacturer: syz [ 398.285625][ T5875] usb 5-1: SerialNumber: syz [ 398.311448][ T5875] rtl8150 5-1:1.0: couldn't find required endpoints [ 398.311602][ T5875] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 399.723995][ T5875] usb 1-1: USB disconnect, device number 32 [ 401.044139][ T5875] usb 5-1: USB disconnect, device number 42 [ 403.339388][ T9140] 8021q: VLANs not supported on caif0 [ 405.514720][ T9162] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 405.514745][ T9162] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 405.762819][ T9162] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 405.765742][ T9162] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 407.051405][ T809] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 407.081371][ T5875] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 407.105482][ T9190] 8021q: VLANs not supported on caif0 [ 407.384335][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 407.524356][ T5875] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 407.524440][ T5875] usb 4-1: config 0 has no interface number 0 [ 407.525191][ T809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.525212][ T809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.528356][ T809] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 407.528381][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 407.528447][ T809] usb 3-1: SerialNumber: syz [ 407.593193][ T5875] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 407.593221][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.593245][ T5875] usb 4-1: Product: syz [ 407.593258][ T5875] usb 4-1: Manufacturer: syz [ 407.593271][ T5875] usb 4-1: SerialNumber: syz [ 407.632936][ T5875] usb 4-1: config 0 descriptor?? [ 407.751621][ T9198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1022'. [ 407.751650][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 407.907968][ T809] usb 3-1: 0:2 : does not exist [ 407.923738][ T809] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 408.047773][ T9203] FAULT_INJECTION: forcing a failure. [ 408.047773][ T9203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.047808][ T9203] CPU: 1 UID: 0 PID: 9203 Comm: syz.4.1025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.047834][ T9203] Tainted: [L]=SOFTLOCKUP [ 408.047844][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 408.047855][ T9203] Call Trace: [ 408.047863][ T9203] [ 408.047871][ T9203] dump_stack_lvl+0xe8/0x150 [ 408.047905][ T9203] should_fail_ex+0x46b/0x600 [ 408.047936][ T9203] _copy_from_user+0x2d/0xb0 [ 408.047956][ T9203] input_event_from_user+0xb1/0x290 [ 408.047976][ T9203] ? __pfx_input_event_from_user+0x10/0x10 [ 408.048008][ T9203] ? rt_spin_unlock+0x160/0x200 [ 408.048038][ T9203] evdev_write+0x2ca/0x4c0 [ 408.048062][ T9203] ? __pfx_evdev_write+0x10/0x10 [ 408.048085][ T9203] ? rw_verify_area+0x25b/0x4e0 [ 408.048113][ T9203] ? __pfx_evdev_write+0x10/0x10 [ 408.048133][ T9203] vfs_write+0x2a3/0xba0 [ 408.048169][ T9203] ? __pfx_vfs_write+0x10/0x10 [ 408.048198][ T9203] ? __fget_files+0x2a/0x420 [ 408.048224][ T9203] ? __fget_files+0x2a/0x420 [ 408.048247][ T9203] ? __fget_files+0x3a6/0x420 [ 408.048269][ T9203] ? __fget_files+0x2a/0x420 [ 408.048301][ T9203] ksys_write+0x156/0x270 [ 408.048332][ T9203] ? __pfx_ksys_write+0x10/0x10 [ 408.048370][ T9203] do_syscall_64+0x14d/0xf80 [ 408.048389][ T9203] ? trace_irq_disable+0x3b/0x150 [ 408.048412][ T9203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.048431][ T9203] ? clear_bhb_loop+0x40/0x90 [ 408.048454][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.048471][ T9203] RIP: 0033:0x7f9b71d9c819 [ 408.048489][ T9203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.048504][ T9203] RSP: 002b:00007f9b6ffee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.048524][ T9203] RAX: ffffffffffffffda RBX: 00007f9b72015fa0 RCX: 00007f9b71d9c819 [ 408.048537][ T9203] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 408.048549][ T9203] RBP: 00007f9b6ffee090 R08: 0000000000000000 R09: 0000000000000000 [ 408.048561][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.048571][ T9203] R13: 00007f9b72016038 R14: 00007f9b72015fa0 R15: 00007ffee64de308 [ 408.048601][ T9203] [ 408.310372][ T809] usb 3-1: USB disconnect, device number 15 [ 409.546932][ T5875] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 409.546960][ T5875] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 409.568578][ T5875] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 409.569461][ T5875] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 409.727455][ T9207] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.727509][ T9207] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 409.728074][ T9207] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.728126][ T9207] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 409.819928][ T5875] usb 4-1: USB disconnect, device number 32 [ 410.291868][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.691650][ T5875] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 411.851422][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 411.868739][ T5875] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 411.868780][ T5875] usb 3-1: config 0 has no interface number 0 [ 411.868902][ T5875] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 411.868952][ T5875] usb 3-1: config 0 interface 89 has no altsetting 0 [ 412.061577][ T5875] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 412.061606][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.061624][ T5875] usb 3-1: Product: syz [ 412.061637][ T5875] usb 3-1: Manufacturer: syz [ 412.061651][ T5875] usb 3-1: SerialNumber: syz [ 412.106894][ T5875] usb 3-1: config 0 descriptor?? [ 412.125589][ T5875] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 412.125609][ T5875] em28xx 3-1:0.89: Video interface 89 found: [ 412.522334][ T9227] kvm: apic: phys broadcast and lowest prio [ 412.600166][ T9229] 8021q: VLANs not supported on caif0 [ 413.381758][ T5875] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 413.684749][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 413.776109][ T9255] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 413.776133][ T9255] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 413.776256][ T9255] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 413.776273][ T9255] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 413.835010][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 413.835041][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 413.835112][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 413.840766][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 413.840794][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.840861][ T10] usb 4-1: Product: syz [ 413.840874][ T10] usb 4-1: Manufacturer: syz [ 413.840886][ T10] usb 4-1: SerialNumber: syz [ 413.886874][ T10] usb 4-1: config 0 descriptor?? [ 413.911802][ T9247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 413.912278][ T9247] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 413.917727][ T10] usb 4-1: ucan: probing device on interface #0 [ 413.939606][ T9259] FAULT_INJECTION: forcing a failure. [ 413.939606][ T9259] name fail_futex, interval 1, probability 0, space 0, times 1 [ 413.939632][ T9259] CPU: 0 UID: 0 PID: 9259 Comm: syz.0.1041 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 413.939647][ T9259] Tainted: [L]=SOFTLOCKUP [ 413.939650][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 413.939656][ T9259] Call Trace: [ 413.939660][ T9259] [ 413.939665][ T9259] dump_stack_lvl+0xe8/0x150 [ 413.939683][ T9259] should_fail_ex+0x46b/0x600 [ 413.939701][ T9259] get_futex_key+0x1ac/0x1690 [ 413.939722][ T9259] ? __pfx_get_futex_key+0x10/0x10 [ 413.939736][ T9259] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 413.939748][ T9259] ? __asan_memset+0x22/0x50 [ 413.939763][ T9259] futex_requeue+0x23d/0x1bb0 [ 413.939774][ T9259] ? kstrtoull+0x12f/0x1d0 [ 413.939788][ T9259] ? kstrtouint+0x6e/0xe0 [ 413.939802][ T9259] ? get_pid_task+0x20/0x1f0 [ 413.939831][ T9259] ? __pfx_futex_requeue+0x10/0x10 [ 413.939843][ T9259] ? __lock_acquire+0x6b5/0x2cf0 [ 413.939862][ T9259] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.939879][ T9259] do_futex+0x362/0x420 [ 413.939889][ T9259] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 413.939903][ T9259] ? __pfx_do_futex+0x10/0x10 [ 413.939911][ T9259] ? rt_mutex_slowunlock+0x1cb/0x300 [ 413.939925][ T9259] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 413.939941][ T9259] __se_sys_futex+0x3a8/0x450 [ 413.939953][ T9259] ? ksys_write+0x248/0x270 [ 413.939968][ T9259] ? __pfx___se_sys_futex+0x10/0x10 [ 413.939977][ T9259] ? __pfx_ksys_write+0x10/0x10 [ 413.939997][ T9259] ? __x64_sys_futex+0x21/0xf0 [ 413.940007][ T9259] do_syscall_64+0x14d/0xf80 [ 413.940018][ T9259] ? trace_irq_disable+0x3b/0x150 [ 413.940030][ T9259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.940040][ T9259] ? clear_bhb_loop+0x40/0x90 [ 413.940052][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.940061][ T9259] RIP: 0033:0x7fe61f6fc819 [ 413.940093][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.940101][ T9259] RSP: 002b:00007fe61d92d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 413.940113][ T9259] RAX: ffffffffffffffda RBX: 00007fe61f976090 RCX: 00007fe61f6fc819 [ 413.940120][ T9259] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 413.940126][ T9259] RBP: 00007fe61d92d090 R08: 0000200000048000 R09: 0000000000000000 [ 413.940132][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.940138][ T9259] R13: 00007fe61f976128 R14: 00007fe61f976090 R15: 00007ffe8017ab78 [ 413.940152][ T9259] [ 414.133131][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.138359][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.150889][ T10] usb 4-1: ucan: could not read protocol version, ret=0 [ 414.150913][ T10] usb 4-1: ucan: probe failed; try to update the device firmware [ 416.278733][ T9271] 8021q: VLANs not supported on caif0 [ 417.333646][ T10] usb 4-1: USB disconnect, device number 33 [ 417.465257][ T5875] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 417.465287][ T5875] em28xx 3-1:0.89: board has no eeprom [ 417.537773][ T5875] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 417.537995][ T5875] em28xx 3-1:0.89: analog set to bulk mode. [ 417.538222][ T809] em28xx 3-1:0.89: Registering V4L2 extension [ 417.632641][ T5875] usb 3-1: USB disconnect, device number 16 [ 417.648317][ T9288] FAULT_INJECTION: forcing a failure. [ 417.648317][ T9288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.648349][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.0.1051 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 417.648374][ T9288] Tainted: [L]=SOFTLOCKUP [ 417.648380][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.648391][ T9288] Call Trace: [ 417.648398][ T9288] [ 417.648405][ T9288] dump_stack_lvl+0xe8/0x150 [ 417.648437][ T9288] should_fail_ex+0x46b/0x600 [ 417.648467][ T9288] _copy_to_user+0x31/0xb0 [ 417.648488][ T9288] simple_read_from_buffer+0xe1/0x170 [ 417.648516][ T9288] proc_fail_nth_read+0x1be/0x230 [ 417.648542][ T9288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.648567][ T9288] ? rw_verify_area+0x2ac/0x4e0 [ 417.648594][ T9288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 417.648617][ T9288] vfs_read+0x212/0xa80 [ 417.648650][ T9288] ? __pfx_vfs_read+0x10/0x10 [ 417.648679][ T9288] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 417.648700][ T9288] ? lockdep_hardirqs_on+0x7a/0x110 [ 417.648720][ T9288] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 417.648740][ T9288] ? mutex_lock_nested+0x152/0x1d0 [ 417.648764][ T9288] ? fdget_pos+0x252/0x320 [ 417.648795][ T9288] ksys_read+0x156/0x270 [ 417.648824][ T9288] ? __pfx_ksys_read+0x10/0x10 [ 417.648861][ T9288] do_syscall_64+0x14d/0xf80 [ 417.648880][ T9288] ? trace_irq_disable+0x3b/0x150 [ 417.648901][ T9288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.648920][ T9288] ? clear_bhb_loop+0x40/0x90 [ 417.648942][ T9288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.648959][ T9288] RIP: 0033:0x7fe61f6bd04e [ 417.648976][ T9288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.648991][ T9288] RSP: 002b:00007fe61d94dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.649010][ T9288] RAX: ffffffffffffffda RBX: 00007fe61d94e6c0 RCX: 00007fe61f6bd04e [ 417.649023][ T9288] RDX: 000000000000000f RSI: 00007fe61d94e0a0 RDI: 0000000000000005 [ 417.649035][ T9288] RBP: 00007fe61d94e090 R08: 0000000000000000 R09: 0000000000000000 [ 417.649046][ T9288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.649057][ T9288] R13: 00007fe61f976038 R14: 00007fe61f975fa0 R15: 00007ffe8017ab78 [ 417.649085][ T9288] [ 417.664286][ T5875] em28xx 3-1:0.89: Disconnecting em28xx [ 417.668818][ T809] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 417.668889][ T809] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 417.668905][ T809] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 417.668917][ T809] em28xx 3-1:0.89: No AC97 audio processor [ 417.937223][ T9293] netlink: 'syz.2.1048': attribute type 4 has an invalid length. [ 418.588084][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 418.769846][ T809] usb 3-1: Decoder not found [ 418.769865][ T809] em28xx 3-1:0.89: failed to create media graph [ 418.769923][ T809] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 418.785073][ T809] em28xx 3-1:0.89: Registering snapshot button... [ 418.842985][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.844851][ T10] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 418.844867][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.844876][ T10] usb 4-1: Product: syz [ 418.844883][ T10] usb 4-1: Manufacturer: syz [ 418.844891][ T10] usb 4-1: SerialNumber: syz [ 418.898047][ T9299] mmap: syz.0.1054 (9299) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 418.954324][ T9290] 9p: Bad value for 'wfdno' [ 419.061852][ T10] usb 4-1: config 0 descriptor?? [ 419.091144][ T809] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input25 [ 419.128278][ T809] em28xx 3-1:0.89: Remote control support is not available for this card. [ 419.142380][ T5875] em28xx 3-1:0.89: Closing input extension [ 419.147544][ T5875] em28xx 3-1:0.89: Deregistering snapshot button [ 419.173022][ T10] mvusb_mdio 4-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 419.308783][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.309120][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.312443][ T809] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 419.348228][ T5890] usb 4-1: USB disconnect, device number 34 [ 419.462465][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 419.464308][ T809] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 419.464331][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.464349][ T809] usb 5-1: config 0 has no interface number 0 [ 419.472466][ T809] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 419.472482][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.472491][ T809] usb 5-1: Product: syz [ 419.472498][ T809] usb 5-1: Manufacturer: syz [ 419.472505][ T809] usb 5-1: SerialNumber: syz [ 419.495094][ T809] usb 5-1: config 0 descriptor?? [ 419.515000][ T809] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 419.515032][ T809] uvcvideo 5-1:0.105: No valid video chain found. [ 419.648729][ T5875] em28xx 3-1:0.89: Freeing device [ 419.864040][ T5890] usb 5-1: USB disconnect, device number 43 [ 419.950206][ T9303] tipc: Can't bind to reserved service type 1 [ 420.261317][ T809] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 420.424045][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.424108][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.424128][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 420.424152][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 420.427596][ T809] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 420.427622][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.427639][ T809] usb 1-1: Product: syz [ 420.427652][ T809] usb 1-1: Manufacturer: syz [ 420.427666][ T809] usb 1-1: SerialNumber: syz [ 420.456523][ T809] usb 1-1: config 0 descriptor?? [ 420.473198][ T809] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 420.495845][ T809] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 420.520855][ T809] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 420.602290][ T9315] 8021q: VLANs not supported on caif0 [ 420.880590][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 420.897480][ T9328] bond0: entered promiscuous mode [ 420.897502][ T9328] bond_slave_0: entered promiscuous mode [ 420.897723][ T9328] bond_slave_1: entered promiscuous mode [ 420.897908][ T9328] batadv0: entered promiscuous mode [ 421.062323][ T9328] bond0: left promiscuous mode [ 421.062345][ T9328] bond_slave_0: left promiscuous mode [ 421.062818][ T9328] bond_slave_1: left promiscuous mode [ 421.063006][ T9328] batadv0: left promiscuous mode [ 421.231375][ T809] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 421.361352][ T5901] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 421.371742][ T809] usb 4-1: device descriptor read/64, error -71 [ 421.491475][ T5901] usb 5-1: device descriptor read/64, error -71 [ 421.701316][ T809] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 421.893216][ T9333] FAULT_INJECTION: forcing a failure. [ 421.893216][ T9333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.893237][ T9333] CPU: 1 UID: 0 PID: 9333 Comm: syz.1.1063 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 421.893257][ T9333] Tainted: [L]=SOFTLOCKUP [ 421.893263][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 421.893274][ T9333] Call Trace: [ 421.893281][ T9333] [ 421.893289][ T9333] dump_stack_lvl+0xe8/0x150 [ 421.893317][ T9333] should_fail_ex+0x46b/0x600 [ 421.893348][ T9333] _copy_to_user+0x31/0xb0 [ 421.893368][ T9333] simple_read_from_buffer+0xe1/0x170 [ 421.893383][ T9333] proc_fail_nth_read+0x1be/0x230 [ 421.893398][ T9333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.893412][ T9333] ? rw_verify_area+0x2ac/0x4e0 [ 421.893425][ T9333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.893438][ T9333] vfs_read+0x212/0xa80 [ 421.893456][ T9333] ? __pfx_vfs_read+0x10/0x10 [ 421.893471][ T9333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 421.893482][ T9333] ? lockdep_hardirqs_on+0x7a/0x110 [ 421.893494][ T9333] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 421.893504][ T9333] ? mutex_lock_nested+0x152/0x1d0 [ 421.893517][ T9333] ? fdget_pos+0x252/0x320 [ 421.893533][ T9333] ksys_read+0x156/0x270 [ 421.893549][ T9333] ? __pfx_ksys_read+0x10/0x10 [ 421.893568][ T9333] do_syscall_64+0x14d/0xf80 [ 421.893580][ T9333] ? trace_irq_disable+0x3b/0x150 [ 421.893602][ T9333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.893619][ T9333] ? clear_bhb_loop+0x40/0x90 [ 421.893641][ T9333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.893658][ T9333] RIP: 0033:0x7f88c931d04e [ 421.893674][ T9333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 421.893688][ T9333] RSP: 002b:00007f88c75b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.893707][ T9333] RAX: ffffffffffffffda RBX: 00007f88c75b66c0 RCX: 00007f88c931d04e [ 421.893720][ T9333] RDX: 000000000000000f RSI: 00007f88c75b60a0 RDI: 0000000000000004 [ 421.893730][ T9333] RBP: 00007f88c75b6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.893742][ T9333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.893753][ T9333] R13: 00007f88c95d6038 R14: 00007f88c95d5fa0 R15: 00007ffe00ffc4b8 [ 421.893781][ T9333] [ 421.893946][ T5901] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 421.931389][ T809] usb 4-1: device descriptor read/64, error -71 [ 422.021373][ T5901] usb 5-1: device descriptor read/64, error -71 [ 422.060062][ T809] usb usb4-port1: attempt power cycle [ 422.088805][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 422.095612][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 422.132088][ T5901] usb usb5-port1: attempt power cycle [ 422.211501][ T1231] usb 1-1: USB disconnect, device number 33 [ 422.274538][ T1231] garmin_gps 1-1:0.0: device disconnected [ 423.863416][ T809] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 423.865701][ T5901] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 423.929239][ T5901] usb 5-1: device descriptor read/8, error -71 [ 424.164035][ T5901] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 424.200615][ T5901] usb 5-1: device descriptor read/8, error -71 [ 424.297761][ T809] usb 4-1: device descriptor read/8, error -71 [ 424.313171][ T5901] usb usb5-port1: unable to enumerate USB device [ 424.516673][ T9354] 8021q: VLANs not supported on caif0 [ 424.571475][ T5875] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 424.601389][ T5901] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 424.722636][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 424.725214][ T5875] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 424.725238][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.725257][ T5875] usb 3-1: config 0 has no interface number 0 [ 424.728518][ T5875] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 424.728544][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.728563][ T5875] usb 3-1: Product: syz [ 424.728577][ T5875] usb 3-1: Manufacturer: syz [ 424.728591][ T5875] usb 3-1: SerialNumber: syz [ 424.806895][ T5875] usb 3-1: config 0 descriptor?? [ 424.835272][ T5875] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 424.835304][ T5875] uvcvideo 3-1:0.105: No valid video chain found. [ 424.861747][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 424.863923][ T5901] usb 5-1: config 0 has no interfaces? [ 424.866396][ T5901] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 424.866421][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.866439][ T5901] usb 5-1: Product: syz [ 424.866452][ T5901] usb 5-1: Manufacturer: syz [ 424.866465][ T5901] usb 5-1: SerialNumber: syz [ 424.873395][ T5901] usb 5-1: config 0 descriptor?? [ 425.248417][ T5890] usb 3-1: USB disconnect, device number 17 [ 425.314179][ T31] usb 5-1: USB disconnect, device number 48 [ 425.396685][ T9368] fuse: Bad value for 'rootmode' [ 425.470240][ T9366] nbd: socks must be embedded in a SOCK_ITEM attr [ 425.641611][ T31] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 425.679818][ T9373] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 425.679833][ T9373] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 425.679904][ T9373] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 425.679913][ T9373] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 425.731382][ T809] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 425.844810][ T9368] fuse: Bad value for 'rootmode' [ 425.891290][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 425.893631][ T809] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 425.893656][ T809] usb 1-1: config 0 has no interface number 0 [ 425.896031][ T809] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 425.896057][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.896074][ T809] usb 1-1: Product: syz [ 425.896087][ T809] usb 1-1: Manufacturer: syz [ 425.896107][ T809] usb 1-1: SerialNumber: syz [ 425.917927][ T809] usb 1-1: config 0 descriptor?? [ 425.951405][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 425.967066][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 425.967101][ T31] usb 2-1: can't read configurations, error -71 [ 425.971171][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1079'. [ 426.360554][ T809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 426.360582][ T809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 426.361051][ T809] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 426.361935][ T809] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 426.372186][ T809] usb 1-1: USB disconnect, device number 34 [ 426.414218][ T5901] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 426.821388][ T5890] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 426.821556][ T5901] usb 5-1: device descriptor read/64, error -71 [ 426.951593][ T5890] usb 3-1: device descriptor read/64, error -71 [ 427.065431][ T5901] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 427.202658][ T5901] usb 5-1: device descriptor read/64, error -71 [ 427.241354][ T5890] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 427.312082][ T5901] usb usb5-port1: attempt power cycle [ 427.371708][ T5890] usb 3-1: device descriptor read/64, error -71 [ 427.487089][ T5890] usb usb3-port1: attempt power cycle [ 427.653621][ T5901] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 427.690253][ T5901] usb 5-1: device descriptor read/8, error -71 [ 427.831572][ T5890] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 428.063237][ T5890] usb 3-1: device descriptor read/8, error -71 [ 428.111746][ T5901] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 428.245624][ T5901] usb 5-1: device descriptor read/8, error -71 [ 428.711966][ T5890] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 429.053926][ T5901] usb usb5-port1: unable to enumerate USB device [ 429.157622][ T5890] usb 3-1: device descriptor read/8, error -71 [ 429.270577][ T5890] usb usb3-port1: unable to enumerate USB device [ 429.572380][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 429.583340][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 429.584610][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 429.585792][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 429.586448][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 429.683948][ T809] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 429.684411][ T5890] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 429.831379][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 429.835801][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 429.836761][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.836787][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.836807][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 429.836858][ T809] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 429.836879][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.838590][ T5890] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 429.841181][ T5890] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 429.845525][ T809] usb 1-1: config 0 descriptor?? [ 429.925611][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.925635][ T5890] usb 2-1: Product: syz [ 429.925648][ T5890] usb 2-1: Manufacturer: syz [ 429.925661][ T5890] usb 2-1: SerialNumber: syz [ 429.969767][ T5890] r8152-cfgselector 2-1: Unknown version 0x0000 [ 429.969792][ T5890] r8152-cfgselector 2-1: config 0 descriptor?? [ 430.313545][ T8527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.339859][ T9421] random: crng reseeded on system resumption [ 430.433389][ T809] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 430.625780][ T809] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 430.626126][ T809] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 430.652750][ T5875] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 430.701706][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 430.707094][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 430.719304][ T809] usb 1-1: USB disconnect, device number 35 [ 430.722174][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 430.722239][ T10] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 430.812727][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 430.814676][ T5875] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 430.814700][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.814717][ T5875] usb 5-1: config 0 has no interface number 0 [ 430.818549][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 430.818574][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.818592][ T5875] usb 5-1: Product: syz [ 430.818606][ T5875] usb 5-1: Manufacturer: syz [ 430.818619][ T5875] usb 5-1: SerialNumber: syz [ 430.825351][ T5875] usb 5-1: config 0 descriptor?? [ 430.830441][ T5875] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 430.830470][ T5875] uvcvideo 5-1:0.105: No valid video chain found. [ 431.044886][ T8527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.097392][ T5875] usb 5-1: USB disconnect, device number 53 [ 431.281601][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 431.347844][ T8527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.441312][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 431.443831][ T5890] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 431.443882][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 431.443907][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 431.443929][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 431.443954][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 431.443975][ T5890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.444013][ T5890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.444034][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.650705][ T5890] usb 3-1: usb_control_msg returned -32 [ 431.650751][ T5890] usbtmc 3-1:16.0: can't read capabilities [ 431.671617][ T5813] Bluetooth: hci3: command tx timeout [ 431.760264][ T8527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.941443][ T809] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 431.950110][ T9425] chnl_net:caif_netlink_parms(): no params data found [ 432.355742][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 432.377739][ T9460] usbtmc 3-1:16.0: Unable to send data, error -71 [ 432.694211][ T5882] r8152-cfgselector 2-1: USB disconnect, device number 47 [ 432.810979][ T809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.811025][ T809] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 432.830756][ T809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.830786][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.830807][ T809] usb 5-1: Product: syz [ 432.830820][ T809] usb 5-1: Manufacturer: syz [ 432.830833][ T809] usb 5-1: SerialNumber: syz [ 432.927360][ T809] cdc_mbim 5-1:1.0: skipping garbage [ 433.001782][ T37] kauditd_printk_skb: 41 callbacks suppressed [ 433.001799][ T37] audit: type=1326 audit(1775410936.349:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.005413][ T37] audit: type=1326 audit(1775410936.359:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.008176][ T37] audit: type=1326 audit(1775410936.359:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.009259][ T37] audit: type=1326 audit(1775410936.359:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.009299][ T37] audit: type=1326 audit(1775410936.359:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.018320][ T37] audit: type=1326 audit(1775410936.369:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.071346][ T37] audit: type=1326 audit(1775410936.419:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.071396][ T37] audit: type=1326 audit(1775410936.419:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.072605][ T37] audit: type=1326 audit(1775410936.379:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c935c819 code=0x7ffc0000 [ 433.072649][ T37] audit: type=1326 audit(1775410936.429:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.1.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88c931d04e code=0x7ffc0000 [ 433.225992][ T9472] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.602447][ T9425] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.602558][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.602755][ T9425] bridge_slave_0: entered allmulticast mode [ 433.616266][ T9425] bridge_slave_0: entered promiscuous mode [ 433.649919][ T9425] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.652114][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.652682][ T9425] bridge_slave_1: entered allmulticast mode [ 433.664062][ T9425] bridge_slave_1: entered promiscuous mode [ 433.741612][ T5813] Bluetooth: hci3: command tx timeout [ 433.842513][ T9472] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.848433][ T809] cdc_mbim 5-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 433.848458][ T809] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 434.022234][ T5890] usb 3-1: USB disconnect, device number 22 [ 434.046690][ T809] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 434.183204][ T809] cdc_mbim 5-1:1.0: cdc-wdm1: USB WDM device [ 434.258189][ T809] wwan wwan0: port wwan0mbim0 attached [ 434.337341][ T809] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 1a:e7:58:67:e0:4c [ 434.349059][ T9425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.394507][ T9425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.475045][ T5901] usb 5-1: USB disconnect, device number 54 [ 434.477053][ T5901] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 434.525408][ T8527] bridge_slave_1: left allmulticast mode [ 434.525587][ T8527] bridge_slave_1: left promiscuous mode [ 434.529292][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.561510][ T5890] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 434.675189][ T8527] bridge_slave_0: left allmulticast mode [ 434.675215][ T8527] bridge_slave_0: left promiscuous mode [ 434.675447][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.698150][ T5890] usb 3-1: device descriptor read/64, error -71 [ 434.931415][ T5890] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 435.011773][ T1231] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 435.071705][ T5890] usb 3-1: device descriptor read/64, error -71 [ 435.171547][ T1231] usb 2-1: Using ep0 maxpacket: 16 [ 435.173146][ T1231] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 435.173169][ T1231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.173186][ T1231] usb 2-1: config 0 has no interface number 0 [ 435.175551][ T1231] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 435.175576][ T1231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.175589][ T1231] usb 2-1: Product: syz [ 435.175596][ T1231] usb 2-1: Manufacturer: syz [ 435.175603][ T1231] usb 2-1: SerialNumber: syz [ 435.178927][ T1231] usb 2-1: config 0 descriptor?? [ 435.184698][ T5890] usb usb3-port1: attempt power cycle [ 435.199185][ T1231] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 435.199214][ T1231] uvcvideo 2-1:0.105: No valid video chain found. [ 435.531432][ T5890] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 435.569256][ T5890] usb 3-1: device descriptor read/8, error -71 [ 435.722106][ T8527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.794334][ T8527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.801808][ T5890] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 435.821508][ T5813] Bluetooth: hci3: command tx timeout [ 435.823574][ T5890] usb 3-1: device descriptor read/8, error -71 [ 435.871826][ T8527] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 435.899696][ T8527] bond0 (unregistering): Released all slaves [ 435.931828][ T5890] usb usb3-port1: unable to enumerate USB device [ 435.993072][ T5890] usb 2-1: USB disconnect, device number 48 [ 436.116412][ T9496] 8021q: VLANs not supported on caif0 [ 436.146035][ T5901] wwan wwan0: port wwan0mbim0 disconnected [ 436.171132][ T9425] team0: Port device team_slave_0 added [ 436.174768][ T8527] tipc: Left network mode [ 436.262852][ T9425] team0: Port device team_slave_1 added [ 436.325344][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.325359][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.325382][ T9425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.380522][ T9425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.380537][ T9425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.380560][ T9425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.554247][ T9425] hsr_slave_0: entered promiscuous mode [ 436.555396][ T9425] hsr_slave_1: entered promiscuous mode [ 436.556861][ T9425] debugfs: 'hsr0' already exists in 'hsr' [ 436.556882][ T9425] Cannot create hsr debugfs directory [ 436.562309][ T5890] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 436.722483][ T5890] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 436.723776][ T5890] usb 1-1: config index 0 descriptor too short (expected 64951, got 72) [ 436.724846][ T5890] usb 1-1: config index 1 descriptor too short (expected 64951, got 72) [ 436.725916][ T5890] usb 1-1: config index 2 descriptor too short (expected 64951, got 72) [ 436.727126][ T5890] usb 1-1: config index 3 descriptor too short (expected 64951, got 72) [ 436.728962][ T5890] usb 1-1: config index 4 descriptor too short (expected 64951, got 72) [ 436.730046][ T5890] usb 1-1: config index 5 descriptor too short (expected 64951, got 72) [ 436.731098][ T5890] usb 1-1: config index 6 descriptor too short (expected 64951, got 72) [ 436.733972][ T5890] usb 1-1: config index 7 descriptor too short (expected 64951, got 72) [ 436.737855][ T5890] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 436.737877][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.737895][ T5890] usb 1-1: Product: syz [ 436.737908][ T5890] usb 1-1: Manufacturer: syz [ 436.737921][ T5890] usb 1-1: SerialNumber: syz [ 436.769925][ T5890] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 436.820703][ T5901] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 437.067952][ C1] usb 1-1: ath9k_htc: invalid pkt_len (ff97) [ 437.546169][ T9540] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 437.546271][ T9540] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 437.546498][ T9540] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 437.546516][ T9540] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 437.901359][ T5813] Bluetooth: hci3: command tx timeout [ 437.901746][ T5901] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 437.902176][ T5901] ath9k_htc: Failed to initialize the device [ 437.969721][ T5901] usb 1-1: ath9k_htc: USB layer deinitialized [ 438.212283][ T10] usb 1-1: USB disconnect, device number 36 [ 438.271348][ T5875] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 438.511395][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 438.515272][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.515294][ T5875] usb 3-1: config 0 has no interfaces? [ 438.517656][ T5875] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 438.517679][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.517697][ T5875] usb 3-1: Product: syz [ 438.517710][ T5875] usb 3-1: Manufacturer: syz [ 438.517723][ T5875] usb 3-1: SerialNumber: syz [ 438.671047][ T5875] usb 3-1: config 0 descriptor?? [ 439.472310][ T9551] netlink: 'syz.2.1118': attribute type 83 has an invalid length. [ 439.480347][ T10] usb 3-1: USB disconnect, device number 27 [ 439.603230][ T809] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 439.771306][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 439.776575][ T809] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 439.776601][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.776620][ T809] usb 1-1: Product: 쨀﨓门鞙쌦쇚잗扯⬆硽軅⊆ְ痭두或㯿苡鋀콠닅듓浗踭鯐둊婧⣶끀儗ѝ㐋 [ 439.776638][ T809] usb 1-1: Manufacturer: ⠊ [ 439.776650][ T809] usb 1-1: SerialNumber: 嬞圹つℐ㑴뗽⯮鷙誆◭柬萅䰾␏ꅣᅧꌎ퀛﷜鬮䉇б采뻂꺫ꅛ⤅᧥성껩䨚愚X搹ᤛ렜孡틪렻鿢Ꮩ竀敯 [ 439.906321][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.867450][ T9582] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 443.126027][ T809] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.126061][ T809] usb 1-1: MIDIStreaming interface descriptor not found [ 443.251699][ T809] usb 1-1: USB disconnect, device number 37 [ 443.261355][ T8527] hsr_slave_0: left promiscuous mode [ 443.309109][ T8527] hsr_slave_1: left promiscuous mode [ 443.310727][ T8527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.310820][ T8527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.380099][ T8527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.380125][ T8527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.417789][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 443.611358][ T31] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 443.642541][ T8527] veth1_macvtap: left promiscuous mode [ 443.642848][ T8527] veth0_macvtap: left promiscuous mode [ 443.645258][ T8527] veth1_vlan: left promiscuous mode [ 443.645616][ T8527] veth0_vlan: left promiscuous mode [ 443.743276][ T31] usb 5-1: device descriptor read/64, error -71 [ 443.830144][ T9607] FAULT_INJECTION: forcing a failure. [ 443.830144][ T9607] name failslab, interval 1, probability 0, space 0, times 0 [ 443.830190][ T9607] CPU: 0 UID: 0 PID: 9607 Comm: syz.0.1130 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 443.830216][ T9607] Tainted: [L]=SOFTLOCKUP [ 443.830222][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 443.830240][ T9607] Call Trace: [ 443.830247][ T9607] [ 443.830255][ T9607] dump_stack_lvl+0xe8/0x150 [ 443.830289][ T9607] should_fail_ex+0x46b/0x600 [ 443.830320][ T9607] should_failslab+0xa8/0x100 [ 443.830342][ T9607] kmem_cache_alloc_noprof+0x87/0x680 [ 443.830370][ T9607] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 443.830405][ T9607] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 443.830446][ T9607] mmu_topup_memory_caches+0x21/0x170 [ 443.830466][ T9607] kvm_mmu_load+0x9d/0x2320 [ 443.830484][ T9607] ? kvm_msr_allowed+0x3f4/0x490 [ 443.830503][ T9607] ? kvm_msr_allowed+0x9a/0x490 [ 443.830529][ T9607] ? vmx_recalc_intercepts+0xed5/0x1b40 [ 443.830549][ T9607] ? kvm_apic_has_interrupt+0x73c/0x770 [ 443.830581][ T9607] vcpu_run+0x5faf/0x7b90 [ 443.830626][ T9607] ? __lock_acquire+0x6b5/0x2cf0 [ 443.830685][ T9607] ? __pfx_vcpu_run+0x10/0x10 [ 443.830720][ T9607] ? rcu_is_watching+0x15/0xb0 [ 443.830753][ T9607] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 443.830777][ T9607] ? __lock_acquire+0x6b5/0x2cf0 [ 443.830807][ T9607] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 443.830831][ T9607] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 443.830861][ T9607] ? do_raw_spin_lock+0x12b/0x2f0 [ 443.830900][ T9607] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.830922][ T9607] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.830943][ T9607] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.830964][ T9607] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 443.830998][ T9607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 443.831027][ T9607] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 443.831048][ T9607] ? lockdep_hardirqs_on+0x7a/0x110 [ 443.831069][ T9607] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 443.831089][ T9607] ? rt_write_unlock+0x190/0x230 [ 443.831121][ T9607] kvm_vcpu_ioctl+0xa65/0xfe0 [ 443.831148][ T9607] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 443.831173][ T9607] ? __asan_memset+0x22/0x50 [ 443.831200][ T9607] ? smack_file_ioctl+0x331/0x360 [ 443.831229][ T9607] ? __pfx_smack_file_ioctl+0x10/0x10 [ 443.831265][ T9607] ? __fget_files+0x2a/0x420 [ 443.831288][ T9607] ? __fget_files+0x3a6/0x420 [ 443.831308][ T9607] ? __fget_files+0x2a/0x420 [ 443.831336][ T9607] ? bpf_lsm_file_ioctl+0x9/0x20 [ 443.831356][ T9607] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 443.831377][ T9607] __se_sys_ioctl+0xff/0x170 [ 443.831399][ T9607] do_syscall_64+0x14d/0xf80 [ 443.831419][ T9607] ? trace_irq_disable+0x3b/0x150 [ 443.831442][ T9607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.831461][ T9607] ? clear_bhb_loop+0x40/0x90 [ 443.831485][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.831503][ T9607] RIP: 0033:0x7fe61f6fc819 [ 443.831521][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.831537][ T9607] RSP: 002b:00007fe61d94e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.831558][ T9607] RAX: ffffffffffffffda RBX: 00007fe61f975fa0 RCX: 00007fe61f6fc819 [ 443.831572][ T9607] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 443.831584][ T9607] RBP: 00007fe61d94e090 R08: 0000000000000000 R09: 0000000000000000 [ 443.831596][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.831607][ T9607] R13: 00007fe61f976038 R14: 00007fe61f975fa0 R15: 00007ffe8017ab78 [ 443.831638][ T9607] [ 444.191714][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 445.121340][ T31] usb 5-1: device descriptor read/64, error -71 [ 445.231721][ T31] usb usb5-port1: attempt power cycle [ 445.432021][ T809] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 445.571404][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 445.571443][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 445.591323][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 445.591992][ T31] usb 5-1: device descriptor read/8, error -71 [ 445.596927][ T809] usb 1-1: no configurations [ 445.596942][ T809] usb 1-1: can't read configurations, error -22 [ 445.721348][ T809] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 445.721541][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 445.727579][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 445.727609][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 445.727628][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 445.727683][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.727703][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.727725][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 445.727763][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 445.727784][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.840671][ T10] usb 3-1: config 0 descriptor?? [ 445.851957][ T8527] team0 (unregistering): Port device team_slave_1 removed [ 445.871398][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 445.881820][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 445.883759][ T809] usb 1-1: no configurations [ 445.883774][ T809] usb 1-1: can't read configurations, error -22 [ 445.884293][ T809] usb usb1-port1: attempt power cycle [ 445.910975][ T31] usb 5-1: device descriptor read/8, error -71 [ 445.944063][ T8527] team0 (unregistering): Port device team_slave_0 removed [ 446.015134][ T31] usb usb5-port1: unable to enumerate USB device [ 446.060440][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 446.231390][ T809] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 446.263456][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 446.269092][ T809] usb 1-1: no configurations [ 446.269108][ T809] usb 1-1: can't read configurations, error -22 [ 446.374467][ T1231] usb 3-1: USB disconnect, device number 28 [ 446.399883][ T1231] usblp0: removed [ 446.421385][ T809] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 446.445858][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 446.456664][ T809] usb 1-1: no configurations [ 446.456681][ T809] usb 1-1: can't read configurations, error -22 [ 446.457213][ T809] usb usb1-port1: unable to enumerate USB device [ 448.161303][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 448.351294][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 448.355242][ T10] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 448.355268][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.355278][ T10] usb 2-1: Product: 쨀﨓门鞙쌦쇚잗扯⬆硽軅⊆ְ痭두或㯿苡鋀콠닅듓浗踭鯐둊婧⣶끀儗ѝ㐋 [ 448.355288][ T10] usb 2-1: Manufacturer: ⠊ [ 448.355295][ T10] usb 2-1: SerialNumber: 嬞圹つℐ㑴뗽⯮鷙誆◭柬萅䰾␏ꅣᅧꌎ퀛﷜鬮䉇б采뻂꺫ꅛ⤅᧥성껩䨚愚X搹ᤛ렜孡틪렻鿢Ꮩ竀敯 [ 448.381329][ T5875] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 448.551512][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 448.576880][ T5875] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 448.576906][ T5875] usb 3-1: config 251 has no interface number 0 [ 448.576997][ T5875] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 448.577019][ T5875] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 448.577040][ T5875] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 448.577066][ T5875] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 448.577089][ T5875] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.577156][ T5875] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 448.577185][ T5875] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.577209][ T5875] usb 3-1: config 251 interface 202 has no altsetting 0 [ 448.584982][ T5875] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 448.585062][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.585080][ T5875] usb 3-1: Product: syz [ 448.585094][ T5875] usb 3-1: Manufacturer: syz [ 448.585106][ T5875] usb 3-1: SerialNumber: syz [ 448.891994][ T9638] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 449.119900][ T9655] netlink: 'syz.4.1141': attribute type 12 has an invalid length. [ 449.910553][ T9653] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 450.384781][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.384850][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 450.518626][ T9669] FAULT_INJECTION: forcing a failure. [ 450.518626][ T9669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.518659][ T9669] CPU: 1 UID: 0 PID: 9669 Comm: syz.4.1143 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 450.518685][ T9669] Tainted: [L]=SOFTLOCKUP [ 450.518692][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 450.518703][ T9669] Call Trace: [ 450.518710][ T9669] [ 450.518719][ T9669] dump_stack_lvl+0xe8/0x150 [ 450.518751][ T9669] should_fail_ex+0x46b/0x600 [ 450.518781][ T9669] _copy_from_user+0x2d/0xb0 [ 450.518804][ T9669] do_sys_poll+0x2a0/0xfa0 [ 450.518837][ T9669] ? __lock_acquire+0x6b5/0x2cf0 [ 450.518858][ T9669] ? __pfx_do_sys_poll+0x10/0x10 [ 450.518879][ T9669] ? is_bpf_text_address+0x26/0x2b0 [ 450.518908][ T9669] ? kernel_text_address+0xa5/0xe0 [ 450.518931][ T9669] ? __kernel_text_address+0xd/0x30 [ 450.519048][ T9669] ? __pfx_timespec64_add_safe+0x10/0x10 [ 450.519077][ T9669] __x64_sys_poll+0x190/0x350 [ 450.519101][ T9669] ? __pfx___x64_sys_poll+0x10/0x10 [ 450.519134][ T9669] do_syscall_64+0x14d/0xf80 [ 450.519154][ T9669] ? trace_irq_disable+0x3b/0x150 [ 450.519177][ T9669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.519196][ T9669] ? clear_bhb_loop+0x40/0x90 [ 450.519218][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.519236][ T9669] RIP: 0033:0x7f9b71d9c819 [ 450.519259][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.519274][ T9669] RSP: 002b:00007f9b6ffcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 450.519294][ T9669] RAX: ffffffffffffffda RBX: 00007f9b72016090 RCX: 00007f9b71d9c819 [ 450.519308][ T9669] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 450.519321][ T9669] RBP: 00007f9b6ffcd090 R08: 0000000000000000 R09: 0000000000000000 [ 450.519332][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.519344][ T9669] R13: 00007f9b72016128 R14: 00007f9b72016090 R15: 00007ffee64de308 [ 450.519373][ T9669] [ 450.772747][ T9675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 450.772772][ T9675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.776047][ T9675] vhci_hcd vhci_hcd.0: Device attached [ 450.807480][ T9675] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 450.807505][ T9675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.807552][ T9675] vhci_hcd vhci_hcd.0: Device attached [ 450.889257][ T8527] IPVS: stop unused estimator thread 0... [ 451.051371][ T6042] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 451.071387][ T809] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 451.343599][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 451.348811][ T809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.348834][ T809] usb 1-1: config 0 has no interface number 0 [ 451.348876][ T809] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.348900][ T809] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.348935][ T809] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 451.348955][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.386525][ T5875] cxacru_cm: 55 callbacks suppressed [ 451.386550][ T5875] cxacru 3-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 451.386578][ T5875] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 451.387004][ T5875] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 451.532970][ T809] usb 1-1: config 0 descriptor?? [ 451.540302][ T10] usb 2-1: USB disconnect, device number 49 [ 455.118203][ T5875] usb 3-1: USB disconnect, device number 29 [ 455.182131][ T809] usbhid 1-1:0.1: can't add hid device: -71 [ 455.182221][ T809] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 455.206695][ T9676] vhci_hcd: connection reset by peer [ 455.217603][ T9678] vhci_hcd: connection closed [ 455.248021][ T8520] vhci_hcd vhci_hcd.0: stop threads [ 455.248979][ T8520] vhci_hcd vhci_hcd.0: release socket [ 455.282919][ T8520] vhci_hcd vhci_hcd.0: disconnect device [ 455.283605][ T8520] vhci_hcd vhci_hcd.0: stop threads [ 455.283620][ T8520] vhci_hcd vhci_hcd.0: release socket [ 455.286194][ T8520] vhci_hcd vhci_hcd.0: disconnect device [ 455.317761][ T809] usb 1-1: USB disconnect, device number 42 [ 455.487577][ T9710] netlink: 'syz.0.1151': attribute type 8 has an invalid length. [ 455.489313][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1151'. [ 455.553034][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.605141][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1152'. [ 455.657030][ T9706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1152'. [ 455.710153][ T9706] bond0: entered promiscuous mode [ 455.742671][ T9706] gretap0: entered promiscuous mode [ 455.757301][ T9706] hsr1: entered promiscuous mode [ 455.791359][ T31] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 455.819704][ T9425] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 455.909408][ T9425] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 455.945453][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 455.959816][ T31] usb 5-1: no configurations [ 455.959864][ T31] usb 5-1: can't read configurations, error -22 [ 456.149142][ T31] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 456.212733][ T6042] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 456.312471][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 456.315624][ T31] usb 5-1: no configurations [ 456.315679][ T31] usb 5-1: can't read configurations, error -22 [ 456.332023][ T31] usb usb5-port1: attempt power cycle [ 456.722082][ T9425] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 456.738708][ T31] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 456.756766][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 456.779658][ T31] usb 5-1: no configurations [ 456.779704][ T31] usb 5-1: can't read configurations, error -22 [ 456.966450][ T31] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 456.992296][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 457.013266][ T31] usb 5-1: no configurations [ 457.013373][ T31] usb 5-1: can't read configurations, error -22 [ 457.019466][ T31] usb usb5-port1: unable to enumerate USB device [ 457.260816][ T9425] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.547276][ T31] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 458.776682][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 458.815143][ T31] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 458.815605][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.816222][ T31] usb 3-1: Product: 쨀﨓门鞙쌦쇚잗扯⬆硽軅⊆ְ痭두或㯿苡鋀콠닅듓浗踭鯐둊婧⣶끀儗ѝ㐋 [ 458.816878][ T31] usb 3-1: Manufacturer: ⠊ [ 458.817358][ T31] usb 3-1: SerialNumber: 嬞圹つℐ㑴뗽⯮鷙誆◭柬萅䰾␏ꅣᅧꌎ퀛﷜鬮䉇б采뻂꺫ꅛ⤅᧥성껩䨚愚X搹ᤛ렜孡틪렻鿢Ꮩ竀敯 [ 459.746309][ T9753] netlink: 'syz.4.1159': attribute type 12 has an invalid length. [ 460.372260][ T9751] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 461.371321][ T7790] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 461.501444][ T7790] usb 2-1: device descriptor read/64, error -71 [ 461.741851][ T7790] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 461.873500][ T7790] usb 2-1: device descriptor read/64, error -71 [ 461.982713][ T7790] usb usb2-port1: attempt power cycle [ 462.331795][ T7790] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 462.352544][ T7790] usb 2-1: device descriptor read/8, error -71 [ 462.592630][ T7790] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 462.613843][ T7790] usb 2-1: device descriptor read/8, error -71 [ 462.724007][ T7790] usb usb2-port1: unable to enumerate USB device [ 464.148889][ T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.149780][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 465.311464][ T31] usb 3-1: USB disconnect, device number 30 [ 467.184048][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.469589][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.601431][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.602835][ T8516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.867961][ T8525] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.869694][ T8525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.646914][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.054434][ T9425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.280032][ T9425] veth0_vlan: entered promiscuous mode [ 470.305181][ T9425] veth1_vlan: entered promiscuous mode [ 470.398233][ T9425] veth0_macvtap: entered promiscuous mode [ 470.410172][ T9425] veth1_macvtap: entered promiscuous mode [ 470.442326][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.473410][ T9425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.508404][ T8531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.509776][ T8531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.510015][ T8531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.635483][ T8531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.641375][ T5875] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 470.851174][ T5875] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 470.851301][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.863511][ T5875] usb 5-1: config 0 descriptor?? [ 470.895609][ T5875] cp210x 5-1:0.0: cp210x converter detected [ 472.342346][ T9853] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 473.831346][ T8520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.831369][ T8520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.009671][ T5875] usb 5-1: cp210x converter now attached to ttyUSB0 [ 474.040002][ T5875] usb 5-1: USB disconnect, device number 63 [ 474.075637][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 474.265035][ T1231] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 474.357197][ T5875] cp210x 5-1:0.0: device disconnected [ 474.410391][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 474.424306][ T1231] usb 1-1: too many configurations: 193, using maximum allowed: 8 [ 474.425527][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.426421][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.427802][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.472356][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.476942][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.476991][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.479398][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.479447][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.511373][ T5890] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 474.550334][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.550388][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.561336][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.561387][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.572125][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.572175][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.584547][ T1231] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 474.585770][ T1231] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.648536][ T1231] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 474.648564][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.648582][ T1231] usb 1-1: Product: syz [ 474.648595][ T1231] usb 1-1: Manufacturer: syz [ 474.648606][ T1231] usb 1-1: SerialNumber: syz [ 474.678966][ T9897] vlan2: entered promiscuous mode [ 474.691285][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 474.693345][ T1231] rtl8150 1-1:1.0: couldn't find required endpoints [ 474.694148][ T1231] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 474.695143][ T5890] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 474.695166][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.695184][ T5890] usb 2-1: Product: 쨀﨓门鞙쌦쇚잗扯⬆硽軅⊆ְ痭두或㯿苡鋀콠닅듓浗踭鯐둊婧⣶끀儗ѝ㐋 [ 474.695204][ T5890] usb 2-1: Manufacturer: ⠊ [ 474.695217][ T5890] usb 2-1: SerialNumber: 嬞圹つℐ㑴뗽⯮鷙誆◭柬萅䰾␏ꅣᅧꌎ퀛﷜鬮䉇б采뻂꺫ꅛ⤅᧥성껩䨚愚X搹ᤛ렜孡틪렻鿢Ꮩ竀敯 [ 474.872743][ T8517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.872764][ T8517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.337141][ T9909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1086'. [ 476.692566][ T6042] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 477.245448][ T6042] usb 3-1: Using ep0 maxpacket: 32 [ 477.245634][ T5875] usb 1-1: USB disconnect, device number 43 [ 477.246404][ T6042] usb 3-1: no configurations [ 477.246418][ T6042] usb 3-1: can't read configurations, error -22 [ 477.454864][ T6042] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 477.563009][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.563058][ T5890] usb 2-1: MIDIStreaming interface descriptor not found [ 477.601285][ T6042] usb 3-1: Using ep0 maxpacket: 32 [ 477.603110][ T6042] usb 3-1: no configurations [ 477.603125][ T6042] usb 3-1: can't read configurations, error -22 [ 477.606752][ T6042] usb usb3-port1: attempt power cycle [ 477.687429][ T5890] usb 2-1: USB disconnect, device number 54 [ 477.929910][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 477.951323][ T6042] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 478.158396][ T5811] Bluetooth: hci3: command 0x0405 tx timeout [ 478.502079][ T6042] usb 3-1: Using ep0 maxpacket: 32 [ 478.518069][ T6042] usb 3-1: no configurations [ 478.518085][ T6042] usb 3-1: can't read configurations, error -22 [ 480.237652][ T6042] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 480.941389][ T6042] usb 3-1: device not accepting address 34, error -71 [ 480.941782][ T6042] usb usb3-port1: unable to enumerate USB device [ 481.005021][ T9929] FAULT_INJECTION: forcing a failure. [ 481.005021][ T9929] name failslab, interval 1, probability 0, space 0, times 0 [ 481.005054][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.1.1199 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 481.005080][ T9929] Tainted: [L]=SOFTLOCKUP [ 481.005087][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.005099][ T9929] Call Trace: [ 481.005107][ T9929] [ 481.005116][ T9929] dump_stack_lvl+0xe8/0x150 [ 481.005150][ T9929] should_fail_ex+0x46b/0x600 [ 481.005182][ T9929] should_failslab+0xa8/0x100 [ 481.005201][ T9929] __kmalloc_noprof+0xdf/0x7b0 [ 481.005219][ T9929] ? tomoyo_encode+0x28b/0x550 [ 481.005249][ T9929] tomoyo_encode+0x28b/0x550 [ 481.005277][ T9929] tomoyo_realpath_from_path+0x58d/0x5d0 [ 481.005312][ T9929] ? tomoyo_path_number_perm+0x219/0x630 [ 481.005332][ T9929] tomoyo_path_number_perm+0x246/0x630 [ 481.005353][ T9929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 481.005376][ T9929] ? __lock_acquire+0x6b5/0x2cf0 [ 481.005426][ T9929] ? __fget_files+0x2a/0x420 [ 481.005453][ T9929] ? __fget_files+0x2a/0x420 [ 481.005477][ T9929] ? __fget_files+0x3a6/0x420 [ 481.005500][ T9929] ? __fget_files+0x2a/0x420 [ 481.005528][ T9929] security_file_ioctl+0xc3/0x2a0 [ 481.005552][ T9929] __se_sys_ioctl+0x47/0x170 [ 481.005574][ T9929] do_syscall_64+0x14d/0xf80 [ 481.005596][ T9929] ? trace_irq_disable+0x3b/0x150 [ 481.005618][ T9929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.005638][ T9929] ? clear_bhb_loop+0x40/0x90 [ 481.005662][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.005680][ T9929] RIP: 0033:0x7f88c935c819 [ 481.005698][ T9929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.005715][ T9929] RSP: 002b:00007f88c75b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.005736][ T9929] RAX: ffffffffffffffda RBX: 00007f88c95d5fa0 RCX: 00007f88c935c819 [ 481.005749][ T9929] RDX: 0000200000000580 RSI: 00000000c06864b8 RDI: 0000000000000003 [ 481.005762][ T9929] RBP: 00007f88c75b6090 R08: 0000000000000000 R09: 0000000000000000 [ 481.005773][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.005785][ T9929] R13: 00007f88c95d6038 R14: 00007f88c95d5fa0 R15: 00007ffe00ffc4b8 [ 481.005815][ T9929] [ 481.005833][ T9929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 481.671306][ T5875] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 481.822212][ T5875] usb 2-1: too many configurations: 193, using maximum allowed: 8 [ 481.823918][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.823969][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.827320][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.827381][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.829012][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.829059][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.830794][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.830841][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.834940][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.834987][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.836559][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.836605][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.838420][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.838466][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.840082][ T5875] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 481.840136][ T5875] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.850596][ T5875] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 481.850623][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.850642][ T5875] usb 2-1: Product: syz [ 481.850655][ T5875] usb 2-1: Manufacturer: syz [ 481.850669][ T5875] usb 2-1: SerialNumber: syz [ 481.867651][ T5875] rtl8150 2-1:1.0: couldn't find required endpoints [ 481.868209][ T5875] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 483.851297][ T5875] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 483.879509][ T9960] loop5: detected capacity change from 0 to 7 [ 483.899853][ T7012] Dev loop5: unable to read RDB block 7 [ 483.899880][ T7012] loop5: unable to read partition table [ 483.900014][ T7012] loop5: partition table beyond EOD, truncated [ 483.921346][ T5890] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 483.956707][ T9960] Dev loop5: unable to read RDB block 7 [ 483.956751][ T9960] loop5: unable to read partition table [ 483.956950][ T9960] loop5: partition table beyond EOD, truncated [ 483.956984][ T9960] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 484.001335][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 484.008568][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 484.008603][ T5875] usb 5-1: can't read configurations, error -61 [ 484.071360][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 484.077797][ T5890] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 484.077824][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.077842][ T5890] usb 3-1: Product: 쨀﨓门鞙쌦쇚잗扯⬆硽軅⊆ְ痭두或㯿苡鋀콠닅듓浗踭鯐둊婧⣶끀儗ѝ㐋 [ 484.077861][ T5890] usb 3-1: Manufacturer: ⠊ [ 484.077874][ T5890] usb 3-1: SerialNumber: 嬞圹つℐ㑴뗽⯮鷙誆◭柬萅䰾␏ꅣᅧꌎ퀛﷜鬮䉇б采뻂꺫ꅛ⤅᧥성껩䨚愚X搹ᤛ렜孡틪렻鿢Ꮩ竀敯 [ 484.149744][ T9965] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1212'. [ 484.171338][ T5875] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 484.184271][ T9967] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 484.184294][ T9967] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 484.184418][ T9967] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 484.184435][ T9967] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 484.322004][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 484.510069][ T5875] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 484.510107][ T5875] usb 5-1: can't read configurations, error -61 [ 484.525178][ T5875] usb usb5-port1: attempt power cycle [ 484.774556][ T9975] ntfs3(nullb0): Primary boot signature is not NTFS. [ 484.799683][ T9975] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 484.861896][ T9] usb 2-1: USB disconnect, device number 55 [ 484.932105][ T5875] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 484.960537][ T5875] usb 5-1: device descriptor read/8, error -71 [ 485.105721][ T9978] FAULT_INJECTION: forcing a failure. [ 485.105721][ T9978] name failslab, interval 1, probability 0, space 0, times 0 [ 485.105756][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.4.1218 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 485.105783][ T9978] Tainted: [L]=SOFTLOCKUP [ 485.105789][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 485.105800][ T9978] Call Trace: [ 485.105807][ T9978] [ 485.105814][ T9978] dump_stack_lvl+0xe8/0x150 [ 485.105847][ T9978] should_fail_ex+0x46b/0x600 [ 485.105877][ T9978] should_failslab+0xa8/0x100 [ 485.105904][ T9978] __kmalloc_noprof+0xdf/0x7b0 [ 485.105922][ T9978] ? __vb2_queue_alloc+0x29d/0x15a0 [ 485.105952][ T9978] __vb2_queue_alloc+0x29d/0x15a0 [ 485.105976][ T9978] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 485.106002][ T9978] ? rt_mutex_slowunlock+0x1cb/0x300 [ 485.106030][ T9978] ? vid_out_queue_setup+0xb20/0x12c0 [ 485.106068][ T9978] vb2_core_reqbufs+0xc1f/0x1410 [ 485.106109][ T9978] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 485.106138][ T9978] ? __kasan_kmalloc+0x93/0xb0 [ 485.106168][ T9978] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 485.106187][ T9978] ? __vb2_init_fileio+0x1e8/0xff0 [ 485.106218][ T9978] __vb2_init_fileio+0x318/0xff0 [ 485.106250][ T9978] ? rt_spin_unlock+0x14f/0x200 [ 485.106280][ T9978] ? rt_spin_unlock+0x160/0x200 [ 485.106309][ T9978] vb2_core_poll+0x4f5/0x830 [ 485.106331][ T9978] ? vb2_fop_poll+0xcc/0x310 [ 485.106358][ T9978] vb2_fop_poll+0x199/0x310 [ 485.106380][ T9978] ? __fget_files+0x2a/0x420 [ 485.106405][ T9978] ? __pfx_vb2_fop_poll+0x10/0x10 [ 485.106431][ T9978] v4l2_poll+0x14a/0x2c0 [ 485.106455][ T9978] ? __pfx_v4l2_poll+0x10/0x10 [ 485.106482][ T9978] do_sys_poll+0x92e/0xfa0 [ 485.106519][ T9978] ? __pfx_do_sys_poll+0x10/0x10 [ 485.106539][ T9978] ? is_bpf_text_address+0x26/0x2b0 [ 485.106573][ T9978] ? kernel_text_address+0xa5/0xe0 [ 485.106596][ T9978] ? __kernel_text_address+0xd/0x30 [ 485.106617][ T9978] ? __pfx___pollwait+0x10/0x10 [ 485.106640][ T9978] ? __pfx_pollwake+0x10/0x10 [ 485.106743][ T9978] ? __pfx_timespec64_add_safe+0x10/0x10 [ 485.106773][ T9978] __x64_sys_poll+0x190/0x350 [ 485.106798][ T9978] ? __pfx___x64_sys_poll+0x10/0x10 [ 485.106832][ T9978] do_syscall_64+0x14d/0xf80 [ 485.106852][ T9978] ? trace_irq_disable+0x3b/0x150 [ 485.106875][ T9978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.106893][ T9978] ? clear_bhb_loop+0x40/0x90 [ 485.106923][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.106942][ T9978] RIP: 0033:0x7f9b71d9c819 [ 485.106959][ T9978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.106976][ T9978] RSP: 002b:00007f9b6ffee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 485.106995][ T9978] RAX: ffffffffffffffda RBX: 00007f9b72015fa0 RCX: 00007f9b71d9c819 [ 485.107009][ T9978] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 00002000000001c0 [ 485.107021][ T9978] RBP: 00007f9b6ffee090 R08: 0000000000000000 R09: 0000000000000000 [ 485.107033][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.107043][ T9978] R13: 00007f9b72016038 R14: 00007f9b72015fa0 R15: 00007ffee64de308 [ 485.107073][ T9978] [ 485.593962][ T9980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1219'. [ 486.733655][ T5890] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.733710][ T5890] usb 3-1: MIDIStreaming interface descriptor not found [ 486.989102][ T5890] usb 3-1: USB disconnect, device number 35 [ 487.092663][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1223'. [ 487.092687][ T9999] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1223'. [ 487.092910][ T9999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1223'. [ 487.814994][ T7790] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 487.910645][T10004] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 487.910667][T10004] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1226'. [ 487.941352][ T7790] usb 4-1: device descriptor read/64, error -71 [ 488.009515][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.181379][ T7790] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 488.301380][ T5901] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 488.311824][ T7790] usb 4-1: device descriptor read/64, error -71 [ 488.321433][ T5890] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 488.421708][ T7790] usb usb4-port1: attempt power cycle [ 488.452609][ T5901] usb 5-1: too many configurations: 193, using maximum allowed: 8 [ 488.454606][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.454635][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.455648][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.455700][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.456822][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.456877][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.458081][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.458129][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.459173][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.459222][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.460232][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.460279][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.461639][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.461839][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.481393][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 488.483827][ T5901] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 488.483876][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.487869][ T5901] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 488.488036][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.488101][ T5901] usb 5-1: Product: syz [ 488.488115][ T5901] usb 5-1: Manufacturer: syz [ 488.488127][ T5901] usb 5-1: SerialNumber: syz [ 488.518847][ T5890] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 488.518874][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.518891][ T5890] usb 2-1: Product: syz [ 488.518904][ T5890] usb 2-1: Manufacturer: syz [ 488.518916][ T5890] usb 2-1: SerialNumber: syz [ 488.537719][ T5901] rtl8150 5-1:1.0: couldn't find required endpoints [ 488.537964][ T5901] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 488.547689][ T5890] usb 2-1: config 0 descriptor?? [ 488.562298][ T5890] gspca_main: spca508-2.14.0 probing 041e:4018 [ 488.754902][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.755384][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.762167][ T7790] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 488.782803][ T7790] usb 4-1: device descriptor read/8, error -71 [ 489.651120][ T5890] gspca_spca508: reg_read err -110 [ 489.651638][ T5890] gspca_spca508: reg_read err -32 [ 489.652813][ T5890] gspca_spca508: reg_read err -32 [ 489.653186][ T5890] gspca_spca508: reg_read err -71 [ 489.663310][ T5890] gspca_spca508: reg write: error -71 [ 489.663390][ T5890] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 489.688351][ T6042] usb 5-1: USB disconnect, device number 68 [ 489.697863][ T5890] usb 2-1: USB disconnect, device number 56 [ 489.814534][ T7790] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 490.021302][ T7790] usb 4-1: device not accepting address 42, error -71 [ 490.021567][ T7790] usb usb4-port1: unable to enumerate USB device [ 490.335915][ T7790] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 490.366612][T10023] batadv0: entered promiscuous mode [ 490.366802][T10023] vlan2: entered promiscuous mode [ 490.481350][ T7790] usb 4-1: Using ep0 maxpacket: 32 [ 490.484825][ T7790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 490.484857][ T7790] usb 4-1: can't read configurations, error -61 [ 490.611312][ T7790] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 490.831519][T10003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.891746][ T7790] usb 4-1: Using ep0 maxpacket: 32 [ 491.737584][ T7790] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 491.737621][ T7790] usb 4-1: can't read configurations, error -61 [ 491.761994][ T7790] usb usb4-port1: attempt power cycle [ 492.131828][ T7790] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 492.271039][ T7790] usb 4-1: Using ep0 maxpacket: 32 [ 492.943378][ T7790] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 492.943415][ T7790] usb 4-1: can't read configurations, error -71 [ 493.202338][T10050] netlink: 'syz.1.1238': attribute type 7 has an invalid length. [ 493.211321][ T5890] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 493.217817][T10050] netlink: 'syz.1.1238': attribute type 7 has an invalid length. [ 493.301385][ T5875] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 493.335958][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1242'. [ 493.361336][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 493.365232][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.365262][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.365282][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 493.365319][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 493.365341][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.370526][ T5890] usb 5-1: config 0 descriptor?? [ 493.602850][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 493.622071][ T5875] usb 1-1: too many configurations: 193, using maximum allowed: 8 [ 493.623245][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.623517][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.624687][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.624746][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.627307][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.627355][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.628376][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.628420][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.630362][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.630411][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.633438][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.633662][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.637658][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.637707][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.639372][ T5875] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 493.639417][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.650394][ T5875] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 493.650423][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.650441][ T5875] usb 1-1: Product: syz [ 493.650455][ T5875] usb 1-1: Manufacturer: syz [ 493.650468][ T5875] usb 1-1: SerialNumber: syz [ 493.692556][ T5875] rtl8150 1-1:1.0: couldn't find required endpoints [ 493.692923][ T5875] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 493.731290][ T9] usb 3-1: device descriptor read/64, error -71 [ 493.990263][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 494.011485][ T5890] hid_parser_main: 434 callbacks suppressed [ 494.011508][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011537][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x2 [ 494.011610][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011636][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011660][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011684][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011706][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011730][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011754][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.011779][ T5890] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 494.101573][ T5890] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 494.101604][ T5890] microsoft 0003:045E:07DA.0012: no inputs found [ 494.101617][ T5890] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 494.121310][ T9] usb 3-1: device descriptor read/64, error -71 [ 494.136212][ T5875] usb 5-1: USB disconnect, device number 69 [ 494.153359][ T7790] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 494.233626][ T9] usb usb3-port1: attempt power cycle [ 494.315093][ T7790] usb 4-1: Using ep0 maxpacket: 8 [ 494.319056][ T7790] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 494.319083][ T7790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.319100][ T7790] usb 4-1: Product: syz [ 494.319107][ T7790] usb 4-1: Manufacturer: syz [ 494.319114][ T7790] usb 4-1: SerialNumber: syz [ 494.363890][ T7790] usb 4-1: config 0 descriptor?? [ 494.391861][ T7790] gspca_main: sq930x-2.14.0 probing 2770:930c [ 494.418869][T10076] fido_id[10076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 494.571310][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 494.602218][ T9] usb 3-1: device descriptor read/8, error -71 [ 495.265920][ T7790] gspca_sq930x: ucbus_write failed -110 [ 495.267528][ T7790] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 496.439398][ T5875] usb 1-1: USB disconnect, device number 44 [ 496.442428][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 496.582292][ T9] usb 3-1: device descriptor read/8, error -71 [ 496.692198][ T9] usb usb3-port1: unable to enumerate USB device [ 496.810654][T10100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.961267][ T6042] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 497.092328][ T6042] usb 2-1: device descriptor read/64, error -71 [ 497.121072][T10105] overlayfs: overlapping lowerdir path [ 497.331384][ T6042] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 497.416385][T10113] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1260'. [ 497.431323][ T7790] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 497.461445][ T6042] usb 2-1: device descriptor read/64, error -71 [ 497.538039][ T1231] usb 4-1: USB disconnect, device number 47 [ 497.572008][ T6042] usb usb2-port1: attempt power cycle [ 497.603345][ T7790] usb 5-1: Using ep0 maxpacket: 32 [ 497.605462][ T7790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.605486][ T7790] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.618808][ T7790] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=d6.79 [ 497.618836][ T7790] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 497.618855][ T7790] usb 5-1: Product: syz [ 497.618868][ T7790] usb 5-1: Manufacturer: syz [ 497.618881][ T7790] usb 5-1: SerialNumber: syz [ 497.645770][ T7790] usb 5-1: config 0 descriptor?? [ 497.744110][ T5901] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 497.853261][ T1231] usb 5-1: USB disconnect, device number 70 [ 497.872938][ T5901] usb 3-1: device descriptor read/64, error -71 [ 497.941307][ T6042] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 497.962542][ T6042] usb 2-1: device descriptor read/8, error -71 [ 498.179385][ T5901] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 498.205997][ T6042] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 498.221892][ T6042] usb 2-1: device descriptor read/8, error -71 [ 499.105878][ T6042] usb usb2-port1: unable to enumerate USB device [ 499.172252][ T5901] usb 3-1: device descriptor read/64, error -71 [ 499.257288][T10130] 9pnet_fd: Insufficient options for proto=fd [ 499.257913][T10130] batadv_slave_1: entered promiscuous mode [ 499.281989][ T5901] usb usb3-port1: attempt power cycle [ 499.314105][ T37] audit: type=1326 audit(1775411002.669:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.314319][ T37] audit: type=1326 audit(1775411002.669:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315356][ T37] audit: type=1326 audit(1775411002.669:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315402][ T37] audit: type=1326 audit(1775411002.669:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315441][ T37] audit: type=1326 audit(1775411002.669:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315479][ T37] audit: type=1326 audit(1775411002.669:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315519][ T37] audit: type=1326 audit(1775411002.669:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315558][ T37] audit: type=1326 audit(1775411002.669:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315601][ T37] audit: type=1326 audit(1775411002.669:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.315639][ T37] audit: type=1326 audit(1775411002.669:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10127 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeaf22c819 code=0x7ffc0000 [ 499.531344][ T1231] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 499.631315][ T5901] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 499.653112][ T5901] usb 3-1: device descriptor read/8, error -71 [ 499.681260][ T1231] usb 1-1: Using ep0 maxpacket: 8 [ 499.683633][ T1231] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 499.683656][ T1231] usb 1-1: config 2 has no interface number 0 [ 499.683713][ T1231] usb 1-1: config 2 interface 31 has no altsetting 0 [ 499.686284][ T1231] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 499.686308][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.686326][ T1231] usb 1-1: Product: syz [ 499.686339][ T1231] usb 1-1: Manufacturer: syz [ 499.686352][ T1231] usb 1-1: SerialNumber: syz [ 499.951423][ T5901] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 499.972302][ T5901] usb 3-1: device descriptor read/8, error -71 [ 500.081804][ T5901] usb usb3-port1: unable to enumerate USB device [ 500.091537][ T5890] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 500.241348][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 500.247927][ T5890] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 500.252471][ T5890] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 500.252498][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 500.253169][ T5890] usb 5-1: Product: syz [ 500.253184][ T5890] usb 5-1: Manufacturer: syz [ 500.253197][ T5890] usb 5-1: SerialNumber: syz [ 500.277259][ T5890] usb 5-1: config 0 descriptor?? [ 500.278851][T10140] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.969126][T10130] batadv_slave_1: left promiscuous mode [ 501.012433][ T1231] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 501.021699][ T1231] usb 1-1: USB disconnect, device number 45 [ 501.837965][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.180452][T10169] net_ratelimit: 1213 callbacks suppressed [ 502.180467][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.471314][ T1231] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 502.631332][ T1231] usb 1-1: device descriptor read/64, error -71 [ 502.871339][ T1231] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 502.919068][T10179] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1281'. [ 502.957432][ T5875] usb 5-1: USB disconnect, device number 71 [ 503.032829][ T1231] usb 1-1: device descriptor read/64, error -71 [ 503.143948][ T1231] usb usb1-port1: attempt power cycle [ 503.455441][T10187] fuse: root generation should be zero [ 503.485884][ T1231] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 503.505026][ T1231] usb 1-1: device descriptor read/8, error -71 [ 503.691269][ T5875] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 503.711647][ T5890] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 503.744021][ T1231] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 503.764220][ T1231] usb 1-1: device descriptor read/8, error -71 [ 503.843590][ T5875] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 503.843619][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.849655][ T5875] usb 4-1: config 0 descriptor?? [ 503.871277][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 503.873327][ T1231] usb usb1-port1: unable to enumerate USB device [ 503.895159][ T5875] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 503.897634][ T5890] usb 5-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 503.897665][ T5890] usb 5-1: config 1 interface 0 has no altsetting 0 [ 503.900788][ T5890] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.40 [ 503.900814][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.900832][ T5890] usb 5-1: Product: 꺆ᗿ冟瑓⋚䔈羨释视帩鎱ﶄ苁酶䭙섐㸙휜嚪䬲趍෵㎖ꏹ庢 [ 503.900849][ T5890] usb 5-1: Manufacturer: ў昆㸤嫵흄ᤋ쐛敼桯硂틁싺鉭ઈ迣ꍸ湳耇ᶨ₧凲ﴓ멐ᔍ뛫놲靫ᗹꍧ郩㤰큂둎밶ৣᮄ鎛ﳋ㉎臑甍ཻ䗜꒹ﻀ떎ᓇ₻喴듰欥玗⇟钐홖″ક亲༐䵅豵缇ꮶ퍖螚ꅎ࿖且簵徎琺ꅿ璸灶腀飃䴒ꍞꋝ쮜ȝ僮鞾䬞䢅㦋撒꾼떄蠠ᄆ亯ଅ嶇㔫␻뽋鄯ヷ⤂ᚖ [ 504.199456][T10187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.200447][T10187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.001812][ T5875] gspca_cpia1: usb_control_msg 03, error -71 [ 505.002192][ T5875] gspca_cpia1: usb_control_msg 01, error -71 [ 505.002205][ T5875] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 505.008842][ T5875] usb 4-1: USB disconnect, device number 48 [ 505.021410][ T5890] usbhid 5-1:1.0: can't add hid device: -71 [ 505.021517][ T5890] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 505.089625][ T5890] usb 5-1: USB disconnect, device number 72 [ 505.522724][T10220] dummy0 speed is unknown, defaulting to 1000 [ 505.522797][T10220] dummy0 speed is unknown, defaulting to 1000 [ 505.527761][T10220] dummy0 speed is unknown, defaulting to 1000 [ 505.533353][T10220] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 505.540150][T10220] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 505.846221][T10220] dummy0 speed is unknown, defaulting to 1000 [ 505.850394][T10220] dummy0 speed is unknown, defaulting to 1000 [ 505.880467][T10220] dummy0 speed is unknown, defaulting to 1000 [ 505.891087][T10220] dummy0 speed is unknown, defaulting to 1000 [ 505.900749][T10220] dummy0 speed is unknown, defaulting to 1000 [ 507.581323][ T7790] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 507.711301][ T7790] usb 4-1: device descriptor read/64, error -71 [ 507.741534][ T31] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 507.911281][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 507.913126][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.913156][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.913192][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 507.913214][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.928915][ T31] usb 2-1: config 0 descriptor?? [ 507.951344][ T7790] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 508.138422][T10269] batman_adv: batadv0: Adding interface: macvtap1 [ 508.138440][T10269] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.138467][T10269] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 508.169243][ T7790] usb 4-1: device descriptor read/64, error -71 [ 508.271788][ T7790] usb usb4-port1: attempt power cycle [ 508.533796][ T31] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 508.539508][T10272] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1310'. [ 508.611320][ T7790] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 508.633483][ T7790] usb 4-1: device descriptor read/8, error -71 [ 508.871316][ T7790] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 508.892561][ T7790] usb 4-1: device descriptor read/8, error -71 [ 508.955729][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.956108][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.019759][ T7790] usb usb4-port1: unable to enumerate USB device [ 509.335350][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 509.382624][T10281] fuse: Bad value for 'fd' [ 509.778699][ T31] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 510.013016][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 510.683421][ T31] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 510.683447][ T31] usb 5-1: config 0 has no interface number 0 [ 510.683488][ T31] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.683514][ T31] usb 5-1: config 0 interface 85 has no altsetting 0 [ 510.685665][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 510.685692][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.685710][ T31] usb 5-1: Product: syz [ 510.685723][ T31] usb 5-1: Manufacturer: syz [ 510.685737][ T31] usb 5-1: SerialNumber: syz [ 510.758390][ T31] usb 5-1: config 0 descriptor?? [ 510.773484][ T5875] usb 2-1: USB disconnect, device number 61 [ 511.314529][ T5901] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 511.427612][ T31] appletouch 5-1:0.85: Geyser mode initialized. [ 511.429385][ T31] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input27 [ 511.461288][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 511.466471][ T5901] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 511.466498][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.466517][ T5901] usb 1-1: Product: syz [ 511.466531][ T5901] usb 1-1: Manufacturer: syz [ 511.466544][ T5901] usb 1-1: SerialNumber: syz [ 511.536249][ T5901] usb 1-1: config 0 descriptor?? [ 511.558818][ T5901] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 512.322392][ T5901] gspca_ov534_9: reg_w failed -110 [ 512.801259][ T5901] gspca_ov534_9: Unknown sensor 0000 [ 512.802101][ T5901] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 514.447337][ T5901] usb 5-1: USB disconnect, device number 73 [ 515.408158][ T9] usb 1-1: USB disconnect, device number 50 [ 515.516502][ T5901] appletouch 5-1:0.85: input: appletouch disconnected [ 515.913122][T10326] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1325'. [ 516.624766][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1327'. [ 680.502737][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 161s! [ 680.502797][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 161s! [ 680.502827][ C0] Showing busy workqueues and worker pools: [ 680.502836][ C0] workqueue events: flags=0x100 [ 680.502890][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=11 refcnt=12 [ 680.502929][ C0] pending: 2*nsim_dev_hwstats_traffic_work, 3*psi_avgs_work, ovs_dp_masks_rebalance, send_dm_alert, 3*ovs_dp_masks_rebalance, vmstat_shepherd [ 680.503069][ C0] workqueue events_long: flags=0x100 [ 680.503078][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=5 refcnt=6 [ 680.503110][ C0] pending: 4*defense_work_handler, br_fdb_cleanup [ 680.503157][ C0] workqueue events_unbound: flags=0x2 [ 680.503166][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.503194][ C0] in-flight: 8525:call_usermodehelper_exec_work for 162s [ 680.503231][ C0] workqueue events_unbound: flags=0x2 [ 680.503239][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=7 refcnt=8 [ 680.503263][ C0] pending: 2*nsim_dev_trap_report_work, 4*cfg80211_wiphy_work, crng_reseed [ 680.503315][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.503337][ C0] in-flight: 8527:nsim_dev_trap_report_work for 162s [ 680.503371][ C0] workqueue events_freezable: flags=0x104 [ 680.503379][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 680.503404][ C0] pending: update_balloon_stats_func [ 680.503422][ C0] workqueue events_power_efficient: flags=0x180 [ 680.503431][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 680.503455][ C0] pending: reg_check_chans_work, do_cache_clean, 2*check_lifetime [ 680.503519][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 680.503528][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.503550][ C0] pending: kfree_rcu_monitor [ 680.503570][ C0] workqueue mm_percpu_wq: flags=0x108 [ 680.503578][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 680.503603][ C0] pending: vmstat_update [ 680.503627][ C0] workqueue kblockd: flags=0x18 [ 680.503635][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 680.503660][ C0] pending: blk_mq_timeout_work [ 680.503858][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 680.503868][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=7 [ 680.503892][ C0] pending: addrconf_verify_work [ 680.503912][ C0] inactive: 3*addrconf_verify_work [ 680.503936][ C0] workqueue bat_events: flags=0x6000a [ 680.503943][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=16 [ 680.503966][ C0] pending: batadv_bla_periodic_work [ 680.503987][ C0] inactive: batadv_dat_purge, 11*batadv_iv_send_outstanding_bat_ogm_packet [ 680.504031][ C0] workqueue wg-kex-wg0: flags=0x6 [ 680.504039][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.504061][ C0] pending: wg_packet_handshake_send_worker [ 680.504085][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 680.504093][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 680.504119][ C0] pending: wg_packet_tx_worker [ 680.504143][ C0] workqueue wg-kex-wg1: flags=0x6 [ 680.504151][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 680.504174][ C0] pending: 2*wg_packet_handshake_send_worker [ 680.504200][ C0] workqueue wg-kex-wg2: flags=0x6 [ 680.504207][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 680.504231][ C0] pending: 2*wg_packet_handshake_send_worker [ 680.504260][ C0] workqueue wg-kex-wg0: flags=0x6 [ 680.504268][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.504291][ C0] pending: wg_packet_handshake_send_worker [ 680.504315][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 680.504323][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 680.504349][ C0] pending: wg_packet_tx_worker [ 680.504372][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 680.504380][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 680.504408][ C0] pending: wg_packet_encrypt_worker [ 680.504433][ C0] workqueue wg-kex-wg0: flags=0x6 [ 680.504441][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.504466][ C0] pending: wg_packet_handshake_send_worker [ 680.504492][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 680.504509][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 680.504537][ C0] pending: wg_packet_tx_worker [ 680.504562][ C0] workqueue wg-kex-wg2: flags=0x6 [ 680.504569][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.504593][ C0] pending: wg_packet_handshake_send_worker [ 680.504616][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 680.504624][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 680.504651][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 680.504690][ C0] workqueue wg-kex-wg1: flags=0x6 [ 680.504697][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 680.504721][ C0] pending: 2*wg_packet_handshake_send_worker [ 680.504748][ C0] workqueue wg-kex-wg2: flags=0x6 [ 680.504756][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.504779][ C0] pending: wg_packet_handshake_send_worker [ 680.504811][ C0] workqueue hci3: flags=0x20012 [ 680.504819][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 680.504849][ C0] pending: hci_cmd_work [ 680.504868][ C0] workqueue hci3: flags=0x20012 [ 680.504877][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 SYZFAIL: failed to send rpc fd=3 want=264 sent=0 n=-1 (errno 32: Broken pipe) [ 680.504906][ C0] in-flight: 5813:hci_cmd_sync_work for 0s [ 680.504951][ C0] workqueue wg-kex-wg0: flags=0x6 [ 680.504959][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 680.504986][ C0] pending: wg_packet_handshake_send_worker [ 680.505012][ C0] workqueue wg-kex-wg1: flags=0x6 [ 680.505019][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 680.505041][ C0] pending: 2*wg_packet_handshake_send_worker [ 680.505065][ C0] workqueue wg-kex-wg2: flags=0x6 [ 680.505073][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 680.505094][ C0] pending: 2*wg_packet_handshake_send_worker [ 680.505129][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=161s workers=45 idle: 8519 8516 8523 8513 8522 8529 8524 8531 8520 8517 8521 8526 8518 8512 8510 8511 1126 8504 12 8505 8506 4171 8507 8509 8508 8530 86 3762 13 8528 135 153 3738 1457 1329 144 40 57 1181 1407 3530 8533 8532 [ 680.505462][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=3 idle: 5811 5806 [ 680.505515][ C0] Showing backtraces of busy workers in stalled worker pools: [ 680.514379][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 682.547173][ T5811] Bluetooth: hci3: command 0x0405 tx timeout [ 682.933738][T10350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.952030][T10350] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.953406][T10350] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.958884][T10350] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.992199][T10350] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 685.101308][ T5811] Bluetooth: hci5: command tx timeout [ 685.248584][ T8523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.303024][T10349] dummy0 speed is unknown, defaulting to 1000 [ 685.486151][ T8523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.693117][ T8523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.728700][T10349] chnl_net:caif_netlink_parms(): no params data found [ 685.884408][ T8523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.920808][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.920932][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.921030][T10349] bridge_slave_0: entered allmulticast mode [ 685.923984][T10349] bridge_slave_0: entered promiscuous mode [ 685.926767][T10349] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.926968][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.927118][T10349] bridge_slave_1: entered allmulticast mode [ 685.929389][T10349] bridge_slave_1: entered promiscuous mode [ 685.981962][T10349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.985287][T10349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.030986][T10349] team0: Port device team_slave_0 added [ 686.038878][T10349] team0: Port device team_slave_1 added [ 686.071443][T10349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.071458][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.071479][T10349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.073455][T10349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.073469][T10349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.073492][T10349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.333065][T10349] hsr_slave_0: entered promiscuous mode [ 686.333860][T10349] hsr_slave_1: entered promiscuous mode [ 686.334368][T10349] debugfs: 'hsr0' already exists in 'hsr' [ 686.334383][T10349] Cannot create hsr debugfs directory [ 687.001368][ T8523] gretap0 (unregistering): left promiscuous mode [ 687.181356][ T5811] Bluetooth: hci5: command tx timeout [ 687.311331][ T8523] bond0 (unregistering): left promiscuous mode [ 687.391508][ T8523] bond0 (unregistering): Released all slaves [ 687.908457][T10349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 688.194466][ T8523] batman_adv: batadv0: Removing interface: macvtap1 [ 688.343420][T10349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 688.403986][T10349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 688.634781][T10349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 688.881348][ T8523] hsr_slave_0: left promiscuous mode [ 688.901262][ T8523] hsr_slave_1: left promiscuous mode [ 688.942505][ T8523] veth1_macvtap: left promiscuous mode [ 688.942565][ T8523] veth0_macvtap: left promiscuous mode [ 688.942700][ T8523] veth1_vlan: left promiscuous mode [ 688.942789][ T8523] veth0_vlan: left promiscuous mode [ 689.261220][ T5811] Bluetooth: hci5: command tx timeout [ 689.783212][T10349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.816792][T10349] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.842637][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.842755][ T8522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.880838][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.880999][ T8513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.295257][T10349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.766089][T10349] veth0_vlan: entered promiscuous mode [ 691.343345][ T5811] Bluetooth: hci5: command tx timeout [ 691.362765][T10349] veth1_vlan: entered promiscuous mode