last executing test programs: 7m39.354973565s ago: executing program 0 (id=815): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb5be1c3e4feff06160000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 7m38.696034149s ago: executing program 0 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) write(r0, &(0x7f0000000600)='27', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000d40000000000900020073797a31000000000900010073797a300000000008000540000000213c"], 0xc0}}, 0x40000) 7m38.339249899s ago: executing program 0 (id=819): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) (async, rerun: 32) setxattr$system_posix_acl(&(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {0x4, 0x6}, [{0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x3) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163ffff6170000000080001400000000514"], 0xe8}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x4, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./dev\x00', 0x0, 0x2) mkdirat(r3, &(0x7f0000000280)='./dev\x00', 0x100) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x4) 7m36.847129988s ago: executing program 0 (id=822): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdir(0x0, 0x1cb) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180), 0x40, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000200)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x3}}, 0x24, 0x3) setreuid(0xffffffffffffffff, 0xee01) (async) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) setns(r1, 0x24020000) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) 7m36.54311023s ago: executing program 0 (id=824): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000640)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x5e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20008081) sendto$inet6(r0, &(0x7f0000000400)=']', 0x1, 0x4000000, 0x0, 0x0) 7m36.02717421s ago: executing program 0 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f00000003c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source\x00', &(0x7f0000000480)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='proto\x00', &(0x7f0000000500)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='10', 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="59db0000121401002abd7000000000000800a0691300"/32], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000540)="340000001a000100000000000000000002202000000000000000000008000100e0000001080002007f1414bb0800030001000000", 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) write$binfmt_register(r1, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, ',{\'', 0x3a, 'source\x00', 0x3a, './sys/class/net/bridge0/bridge/multicast_querier_interval', 0x3a, [0x43, 0x4f, 0x46, 0x50, 0x50, 0x0, 0x46]}, 0x6a) clock_gettime(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000180)={0x1, 0x4, 0x101, 0xa, 0x7ff}) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 7m34.071018798s ago: executing program 32 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f00000003c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source\x00', &(0x7f0000000480)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='proto\x00', &(0x7f0000000500)='tcp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/multicast_querier_interval\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='10', 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="59db0000121401002abd7000000000000800a0691300"/32], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000540)="340000001a000100000000000000000002202000000000000000000008000100e0000001080002007f1414bb0800030001000000", 0x34) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) write$binfmt_register(r1, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x3, 0x3a, ',{\'', 0x3a, 'source\x00', 0x3a, './sys/class/net/bridge0/bridge/multicast_querier_interval', 0x3a, [0x43, 0x4f, 0x46, 0x50, 0x50, 0x0, 0x46]}, 0x6a) clock_gettime(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000180)={0x1, 0x4, 0x101, 0xa, 0x7ff}) ioctl(r1, 0xc138fd03, &(0x7f0000000000)="04000000000000003f00000038010000380100000000000000000000000000000000000000000000000000000000000074") 6m12.92042731s ago: executing program 2 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="70000000ffffffffffff00000000000008060001080006040012bbbbbba9bbbb000004"], 0x2e) 6m11.517342189s ago: executing program 2 (id=1013): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc0) write(r0, &(0x7f0000000600)='27', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000010900010073797a300000000008000540000000213c"], 0xc0}}, 0x40000) 6m10.362545721s ago: executing program 2 (id=1016): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000440)={'wlan0\x00', 0x1}) writev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x400) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)={0xc0, 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271f, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000180)=0x8) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) r8 = fsopen(&(0x7f0000000580)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r10, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x13, 0xfffeffff, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) connect$nfc_raw(r7, &(0x7f0000000340)={0x27, r11, 0xffffffffffffffff, 0x4}, 0x10) 6m6.483223343s ago: executing program 2 (id=1022): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000005c0)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) 6m4.606021077s ago: executing program 2 (id=1026): mkdirat(0xffffffffffffff9c, &(0x7f000001d880)='./proc\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f000001d880)='./proc\x00', 0x1ff) mount(0x0, &(0x7f000001d8c0)='./proc\x00', &(0x7f000001d900)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000001d940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f000001d980)='27', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000000040)={0xf, 0x0, 0x100000}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000000040)={0xf, 0x0, 0x100000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) (async) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x1010060, 0x0) mkdirat(r0, 0x0, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f000001d9c0), 0x121301, 0x0) 6m1.550968021s ago: executing program 2 (id=1028): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) inotify_init1(0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f00000018c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r2, &(0x7f0000001940)=@generic={0x8, "ffff0000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe00"}, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, 0x0, 0x10) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) 5m45.724563876s ago: executing program 33 (id=1028): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) inotify_init1(0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f00000018c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r2, &(0x7f0000001940)=@generic={0x8, "ffff0000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe00"}, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, 0x0, 0x10) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) 3m48.43509333s ago: executing program 3 (id=1178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000202000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m47.778658008s ago: executing program 3 (id=1180): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000140)='fus%\x00\x18\xf0,?\x1f\x7fb\xe7*\xf9I:\x80k\'~\xde\x9f`?\xf9q\xdf\x1e\xfb\xc4\xcaW\x9e\xe6\xaeM\xe5\xe7\x18\x1e\x83\xd9\xbdK\"yK\xa5\xc2\xfb\\\x92\x05\x1e\xfe\bx\\\x04d){\x88\x81\xe4a{w\xc5\xb5\xb8\xe1\x93\xd8\xdfh\xf0:c\xaf\xb6@\xdf\xe3l\x9c\x03]M\xac\xc2\xdao\x1d!l\xf3\x89\xc78\xdfQ\xe5\xb6\x01\x88\x8f\xc7T\xec\xa7\x99P2h\xe1\xb4\x1c\xa1yIA\xdb]\x87\xa4>[%\n\xf0g\r@\x05Xv\xb31\xe4\x94\x91\xd9\xfb(d\xea\xc0\x13\x1a\x15\xf38\xfa\r\xa00\xfe\xff\x12\xf9|\xc1\xad\xd1\xd0\t\xd7\xb1a\x8a`c\rj\xa1\xcb+)\xa6\x9e\xe9.?\x1ac\x05\xbe\xe3:/\xb5\b\x98\x9dx\x18\x19Um\xd8\x00Z\x9a{`S\xfafk\xfc\x9a\xd4\xc5\xaf\x84U\x88\x93\x7f\x9f\xe5_\xc7h>^o\x8cW\xd8>\x05z\x04\xbbU\xa1}\xe8\x03~_S\xe9O\x99\x16\x92._\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x90}}, 0x0) fsopen(&(0x7f00000000c0)='pvfs2\x00', 0x1) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x7e, 0x96, 0x82, 0x8, 0x14f7, 0x4, 0x46f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xa, 0x40, 0x81, "", [{{0x9, 0x4, 0xc9, 0x3, 0x0, 0x9, 0x29, 0xf9, 0x9}}]}}]}}, &(0x7f0000000600)={0xffffffffffffff71, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00030200006d3a9e"]}, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="030a01000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000640)={0x2a, 0x0, [{0x7, 0x1, 0x1, 0x78, 0x1f836b52, 0xa3dd, 0x2}, {0x80000007, 0x3, 0x6, 0x1, 0x7, 0x1dbedf40, 0x3}]}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="120150025ddae04064190100ad2a0102030109021b0001803c40090904"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7ffffffffffff) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000800)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000840)={@void, @void, @ipv6=@icmpv6={0x3, 0x6, "31fddf", 0x20, 0x3a, 0x0, @mcast2, @remote, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x1, "bf5ea30b0089"}]}}}}, 0x48) move_pages(0x0, 0x3, &(0x7f0000000740)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000780)=[0x1, 0x1], &(0x7f00000007c0), 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x61ac42, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000700)=@x86={0x4, 0x5, 0x8, 0x0, 0x52, 0x3, 0x4, 0xfe, 0x6d, 0xfc, 0x5, 0x7f, 0x0, 0x2, 0xff, 0x3, 0x8, 0xd2, 0x73, '\x00', 0x4, 0x9}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000002c0)={0x1ff, 0x3, 0x200000, 0x1000, &(0x7f000000c000/0x1000)=nil}) socket$rxrpc(0x21, 0x2, 0xa) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x18, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2000000004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 3m43.10937303s ago: executing program 3 (id=1187): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) (async) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB=' (\a'], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB=' (\a'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="001022"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="208ac7"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x240241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x240241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c040, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c040, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @random="2b0436d23321"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd120005110000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES16=r3], 0xfdef) 3m38.729870874s ago: executing program 3 (id=1191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000280)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000340)={0x11, 0x892f, r2}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r3, &(0x7f0000000480)='27', 0x2) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, 0x0, 0x0) bind$inet6(r4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 3m37.474747103s ago: executing program 3 (id=1193): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="570000001300034700bb65e1c3e4ffff010000000100000056000000250400000007fd17e5ffff0800040000000000000000f3cd7ae94f5012ec631931adee407077a301ebaf27b2bd7c14a314a5f74880ee70eed6bf58", 0x57}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002fe000000000006040000000000f93132", 0x39}], 0x1) 3m36.794795802s ago: executing program 3 (id=1196): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', &(0x7f00000006c0)={0x402880}, 0x18) mkdirat(r0, &(0x7f0000000340)='./proc\x00', 0x13a) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x14c82, 0xe2) (rerun: 64) write(r1, &(0x7f0000000580)='7', 0x1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x29042, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x21) (async, rerun: 32) readv(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/210, 0xd2}], 0x1) (rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f00000002c0)={'gre0\x00'}) (async) setpriority(0x1, 0x0, 0x5) (async) setns(0xc9, 0x0) (async) r5 = socket(0x2a, 0x2, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x891c, 0x0) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000001c0)=0x6, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ab", 0x1}], 0x1}, 0x1) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write(r7, &(0x7f0000000600)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444`/4444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) (async, rerun: 32) unshare(0x62040200) (rerun: 32) 3m20.92790347s ago: executing program 34 (id=1196): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', &(0x7f00000006c0)={0x402880}, 0x18) mkdirat(r0, &(0x7f0000000340)='./proc\x00', 0x13a) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x14c82, 0xe2) (rerun: 64) write(r1, &(0x7f0000000580)='7', 0x1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x29042, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x21) (async, rerun: 32) readv(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/210, 0xd2}], 0x1) (rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f00000002c0)={'gre0\x00'}) (async) setpriority(0x1, 0x0, 0x5) (async) setns(0xc9, 0x0) (async) r5 = socket(0x2a, 0x2, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x891c, 0x0) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000001c0)=0x6, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="ab", 0x1}], 0x1}, 0x1) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write(r7, &(0x7f0000000600)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444`/4444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) (async, rerun: 32) unshare(0x62040200) (rerun: 32) 2m1.453210597s ago: executing program 1 (id=1264): syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902d9000301008032080b0003010020000904000000010120000a2401003d00000000000c240a030300000000000000142402010102000300000000000000000000000013240302010300010300000000000000000000090401000001022000090401010101022000162401020000000001010000000000000002100000000624020102100905010900020100000a2501000000000000000904020000010220000904020101010220001624010100000000010100000000000000021000000006240201021009058209000201"], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000000c0)=ANY=[@ANYBLOB="b5cf5c07047472616e733d6622d4e41cf87d68ddffff2c72", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 2m1.33144213s ago: executing program 4 (id=1265): mount(0x0, 0x0, &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000003c0)='1,0x400000,0x401000,X', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff0200000000000000000007ffffff0185"], 0x76) 1m59.254030369s ago: executing program 4 (id=1266): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0xe4, {0xe4, 0x1, "1796f6a12d2564955f248d678e46648d4dbdac96a5224178b0610cb0680c2b8bf29fdb6e5249317a8422e417ae294c124455e7a70770e65e1306306bab3bf1553a63da9e04cd021e0ad908ad0d279ec0be5167e1d389bc32c2465c45bd200eb1640144f9d84a60d1e20e11c7a26517b43aa9f256242aacb0eec1b67dd7cb4a9ea66232a8a72e0ff112ff984bba2ed0d340489f4b644f63e0dcc710acc6207abdf8f14b4dc469efb553e7caa41442870909380c4ccc2fc7c0b6633e4cbefc4d1284c99aa9c1a9b720bdc6a48119b44f9a4a4c770cfbcc92a547bfdd6451b33e1e12a4"}}, &(0x7f0000000280)={0x0, 0x3, 0x35, @string={0x35, 0x3, "fd922d8afff516fa580ff45fab455118818452515fe5fadd8b4ba8b65fde2ee6cdc02b4db61eb4ca02bcf903613e0e7a9f8381"}}, &(0x7f00000002c0)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x2, [@ptm_cap={0x3}, @generic={0x53, 0x10, 0xa, "0af4257374d0a5e82d108d1be41738096f5be4e9a3e836dcd4b3d6cb501765b399b6bc4274513642782c8fa8caebd6d8097a12990ed44801b1ed12e1901f8fe2243080a897fce99bcce830e20b089a32"}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x6, 0x8, "de9307d3", "be617166"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x8, 0x38, 0xb8, 0x7cf4, 0x401}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000400)={0x40, 0x17, 0xc6, "6ed1a93bc2c2d907271982bbbcfd3b4c752e85c2cd7d3cbea139a591758b00fccd1da5c94efa64362cd12df1644b9226d3eff08210e7fa06ae306cb2292893918e4ec1738f2f4c7a1b1be8c084ece6647a9cab11e820126668bbf89c83a24750fde37b8989da4edb466b51d0710062c66ed3a8624259196d6e319da60eec2846b82dc67683eea4415d3fb406ffdeb580f54a9843259f6b19fc3c9ed9362675638f663f3ad08d26c4b1249de0e2b54865f6c757dbd0bd795be464859ecffb0e89ba9a77898bf8"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x40}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0xb, 0x2, "3bd7"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x8000}, &(0x7f0000000700)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "8035"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x8}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000980), 0x2, 0x2) ioctl$int_in(r2, 0x5421, &(0x7f00000009c0)=0x7) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000a00)={0x0, 0x1, 0x0, 0x0, 0x0, 0x28fc0, 0x9f8c}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000c00)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) close_range(r2, r2, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000a80)={0x0, 0x0, '\x00', @raw_data=[0xb1026fc, 0x230, 0x4, 0x4, 0xf7e2, 0x1, 0xf5, 0x80, 0x81, 0x0, 0xc, 0x6, 0x100, 0x3, 0x8f, 0x7, 0x3, 0xffffff7f, 0x7, 0x5, 0x5, 0x9, 0x1, 0x2, 0xec, 0x1, 0x5, 0x7, 0xff, 0x2, 0x2fb9f690, 0xd]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)={0x0, 0x16, 0x2, "9458"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m58.750676787s ago: executing program 1 (id=1267): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000080)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x82, 0x7, 0x6, 0x100000000}}, @cpuid={0x64, 0x18, {0xffff4477, 0x1b42}}, @nested_vmresume={0x130, 0x5d, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2000, 0xfffffffffffffe8c}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x365}}, @uexit={0x0, 0x18, 0xfff}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7fff, 0x8, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0xff}}, @nested_vmresume={0x130, 0x18}, @code={0xa, 0x59, {"b9b00b00000f32676566450f50e70fc72f66baf80cb88305de8def66bafc0cb098ee0f01cb0f08c74424009d000000c7442402d70d0000ff1c2466b846008ee0f336f30f23a60f06"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xc50a, 0x2, 0x2}}, @in_dx={0x69, 0x20, {0x2fb0}}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0x4000009b}}, @nested_vmresume={0x130, 0x18}, @wr_drn={0x68, 0x20, {0x5, 0x1}}], 0x261}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f070000090402000001022000090402010101022000090582"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x400, 0xf, 0x1, 0x8}, {0x9, 0x5, 0x2, 0x2, 0x400, 0x8, 0xff}, {0x9, 0x5, 0x4, 0x3, 0x40, 0x6, 0xc4, 0x9}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x65a3ed39cc4d65e6, 0xc, 0xbf, {0xbf, 0x31, "885dbff21e89d71454f993ee8438f1f602422d7f7de57f64a7d2fbe4a4a0423e7c0dc4c5fa928a8491899328f4e51e64122535478a2e35ee450099e8854262eaf0301691875cdc27c458e97c5095993c969f0ca2ed4502551713b8bf8e2b808385c0b97f3473efcea924b96a786cca1e78e218478cd0cbca98d9edd7cf93cf7e78a3069cb7a1450a36f338119b5c489b28e769a107f6827c9eca104bd236c4f78d092fe2629424a3f248f147bbb4fa3372cf0d140d5c56942ce7618b13"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000000ac0)={0x1c, &(0x7f0000000540)={0x20, 0x17, 0xcd, "d6a7cbe1fbe4fea554ef8892f91767b5cfb1fd381d2563bb57fe697f204a02f0fd3f31f2d8837c0b88d6d58ed9f016c8b5c118ae37d6b0f70ce921c1e8607f6eb3eb26f389d6564f9715dca46430126cfd5bca683526eb1ae33108431aef57fbac8e6c8323490a68a68e96a01863037c034224e35fa69052c4cbfa3db31ce4f4760d4f05f49c96aca599c02eff9e5f56eb08b8eb02a222e33b1e6a523f17a26b62c1e46334a5146c62f70a72425d5492df3f2aafc99eaa290fbc7676367481e265053a6f14e22133391e83d762"}, &(0x7f0000000640)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a80)={0x21, 0x0, 0x1, "98"}}) 1m55.919238189s ago: executing program 4 (id=1268): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="570000001300034700bb65e1c3e4ffff010000000100000056000000250400000007fd17e5ffff0800040000000000000000f3cd7ae94f5012ec631931adee407077a301ebaf27b2bd7c14a314a5f74880ee70eed6bf58", 0x57}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000a0000000006040000000000f93132", 0x39}], 0x1) 1m55.872570666s ago: executing program 1 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000007302000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m54.90958781s ago: executing program 1 (id=1270): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000200)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401000001022000090401010101022000090501"], 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x129202, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000440)=""/201, 0xc9}, {&(0x7f0000000540)=""/103, 0x67}], 0x2) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000380)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x3) syz_usb_control_io$uac2(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='zonefs\x00', 0x1040, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x402800, 0x40) write$proc_mixer(r4, &(0x7f0000000180)=[{'LINE', @val={' \'', 'Synth'}}, {'ALTPCM', @val={' \'', 'Mic'}}, {'LINE3', @val={' \'', 'Line Capture Switch'}}], 0x75) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f00000005c0)={0x80, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/ptp/ptp0/n_alarms\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0xc) mount$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) fchownat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0xee01, 0x1000) read(r5, &(0x7f0000000100)=""/10, 0xa) 1m54.835326187s ago: executing program 4 (id=1271): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="001425000000e7ff01808f2c8bbf7a369a741c56a0dcd50000f70556e7e4cdbb4200"/43], 0x0, 0x0}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2e, 0x0) 1m51.281808894s ago: executing program 4 (id=1272): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) inotify_init1(0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f00000018c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r2, &(0x7f0000001940)=@generic={0x8, "ffff0000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffe00"}, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, 0x0, 0x10) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) 1m50.768084039s ago: executing program 1 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) (async) r0 = msgget$private(0x0, 0x4) msgrcv(r0, &(0x7f0000000140)={0x0, ""/128}, 0x88, 0x0, 0x2000) msgsnd(r0, &(0x7f0000000200)={0x1}, 0x8, 0x800) (async) msgctl$MSG_STAT(r0, 0xb, 0x0) msgrcv(r0, &(0x7f0000000240)={0x0, ""/241}, 0xf9, 0x0, 0x0) (async) msgsnd(r0, &(0x7f0000000380)={0x1}, 0x8, 0x0) (async) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) (async) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) lseek(r1, 0x0, 0x4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x200e82, 0x28) write(r2, &(0x7f000001fcc0)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 --05535\n', 0x40) 1m49.663196697s ago: executing program 1 (id=1274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000020100000100001c1122334400080000000500050000000500050007"], 0x4a) 1m49.644101888s ago: executing program 4 (id=1275): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb5be1c3e4feff0600000000a500004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1m33.774500333s ago: executing program 35 (id=1275): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="390000001300034700bb5be1c3e4feff0600000000a500004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1m33.463576807s ago: executing program 36 (id=1274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000020100000100001c1122334400080000000500050000000500050007"], 0x4a) 11.463043354s ago: executing program 6 (id=1488): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000030000000100001c1122334400080000000500050000000500050007"], 0x4a) 11.09454267s ago: executing program 6 (id=1489): r0 = socket(0x2c, 0x1, 0xf35) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0x2c) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000080)=0x7230) setsockopt$inet_sctp_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f00000000c0)={0x2, 0x8004, 0x1}, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x48000, 0x113) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x820, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0xe, 0x7, @l2={'ib', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) epoll_pwait2(r1, &(0x7f0000000280)=[{}, {}], 0x2, &(0x7f0000000300)={r4, r5+60000000}, &(0x7f0000000340)={[0x1]}, 0x8) r6 = accept4$bt_l2cap(r1, &(0x7f0000000380)={0x1f, 0x0, @fixed}, &(0x7f00000003c0)=0xe, 0x80800) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000400)="e46dfb374cf612a8c5dc56c553c827df148cc0bb4b5e6911d60c9069ef0fcab5d151f9722a267cd14ea614b581340260d44633522c878de169643b3b54e8e79986f39dde53047fb47cdf557b94994556108c960aa8d728358a04038ed988f5500826929774ec3350801c5a17ac5a0feb18b455cf211611a2822d89ff301606620685ef213609fb49a9f9", 0x8a}, {&(0x7f00000004c0)="30ac2a80447c524ba59ae623093db17d40458d5b3a664bbfdd2f51f0d49d74983122249c7d9bf6bb56e6a9265a8c0c7ca4ab29d2e27c00b5de6d66e29c838fb8e89fa6196a5fadf34d7cf4f71d9361f4548825d047e30be83cf28caa0a978b32b328251a86a1ede7bf1116b0786ee9e48a17361841485ee44c46b7a45033c8", 0x7f}], 0x2) write$proc_mixer(r1, &(0x7f0000000580)=[{'PHONEIN', @void}, {'CD', @val={' \'', 'Mic'}}, {'RADIO', @val={' \'', 'Master Playback'}}, {'RADIO', @val={' \'', 'Master Playback'}}, {'SPEAKER', @void}, {'IMIX', @val={' \'', 'Line'}}], 0xa9) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000640)={0x1, 0x7f, 0x367}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000006c0)={r7, 0x75, "44528829f4f0a8d369cca459f9f4e1b95c9da4d8ef4732e7588c1710c2de4f8103669c53e56482f460b582429843f210b6d324573c4c21469d18ab9b8ca9cf6bebecbda17f8bf5cbf0590d1e6fffead1907060c36e97ace234d3ec6bb36fb19cd5176c5e877f624ba86fb45b9d5107e632f0557a98"}, &(0x7f0000000740)=0x7d) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000780)={r8, 0x1}, 0x8) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000007c0)=0x81, 0x4) nanosleep(&(0x7f0000000800)={0x0, 0x989680}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000840)={0x7fff}, 0x4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000880)=0x3, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/diskstats\x00', 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(r9, 0x113, 0x4, &(0x7f0000000900), &(0x7f0000000940)=0x4) sendmsg$alg(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000980)="cb555084be007954c7ee8900c7be3fce", 0x10}, {&(0x7f00000009c0)="54985607de71d0fe4ffd66eaaf098177c30575cc0d794c367531150c61ca05e1197853cfa46680dd0c0d10922db0f848dfd8ea35f9be79aa45cd2fb2fd932ebe8c22f6b9ea2984afcb708ab949f0446624db15fba992a0e993b21331f90fa917e795f59baf7754ffc041a0d6803acfa2ddee473c23be1571cecf67abb2154410135a106a68c99423cd102f6319fceb4da975a46679018d7a2097086bfd1022b8abc8", 0xa2}, {&(0x7f0000000a80)="d55530e54417d43034fffca29f5776188696eb519f3980ff247b2f10cc33f1b1b5a65c0da520023d6c8cedfbc65f1715431700768240cfc6364e2b46fb748f2e253693f9536942934f6ada6fed2f86a1c9b0a790e77e3e131bb40ef4f4fa82ffa4cbeb820935a167d3c37d50b4707c018c5f8336aa506d26a4", 0x79}, {&(0x7f0000000b00)="a573aa3faeaf4d2d6fc9ffa0e36d2fc227faf5745fdaa962cabd06a14ae38ac0cb4b48bf4883ed819d02b34e02087311154ceba993fcee7c6fc983ae2aa9a104c8b30442dc79f876aac2d50f4890ac7e83e9daff326cb5b44283381a724b8676014683884505b28a7a6bf454828130fdd1fc90f55e94857cda2f9e6303ce7bbd0a3812fd25e4c14d0c03bcdaafacf7d018266a08db20fd9f9aa0b526381a32ecf719", 0xa2}, {&(0x7f0000000bc0)="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", 0xfd}, {&(0x7f0000000cc0)="dae03e407021f0f5daf82033343dae466f17b915fcda9228a44b7b717637e47e74c00fd23532006f781283e84cc56c15762251bcc55792cd5482f6b56462742ff8668e0f7a8fb8bae9a6c2ca4b088c3b0b840a8f7bb0aff429dc6929", 0x5c}, {&(0x7f0000000d40)="7e85f7392d6b8d9af5eacf7b170d3d357ed80895cb06f3b8d71aa0b1ecbb1d19ec52d9a1a676c7652560ce70b35054179567bfebd25b9ee986048e5c43434443db99548deae244a5825af5117ce41eb7bcfdc7f63c4f811d0f0744121924d46f2ddc3f5ef48a57060e44edd11ec7c7ed1a29734280cc76fbcc9d7bf6a9a9f688c4ef71e8826e7a6b8ff652239fdf347ab66889d0bf8a43a338496fbb0bd848bf1d96852336364c445c304518769fb4084f128f23c1798a933b7c51f966b7bd82", 0xc0}], 0x7, &(0x7f0000000e80)=[@iv={0x20, 0x117, 0x2, 0x9, "515c1359a11c78026c"}, @iv={0x18, 0x117, 0x2, 0x3, "f19a3f"}, @iv={0x50, 0x117, 0x2, 0x35, "ceeb361cbcfa4aeb51d7c32e5478a0073ec5249a1d206c3e952d98002ec5a0c7d3ecd69ddcba7c06d524b9d5320c5e44e7158ae938"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa0, 0x65947dc963af9dcf}, 0x0) fcntl$setflags(r6, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000f80)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x96}, "e59935497f002b31b56949d4a360b9f4734a01beb99c5dd498b623fa2e4a4e1b6d2d6fa6bcdd184b41793712eb386e4af649ce88fe23bed87076c57f70020dda934f7c1973930a45dd6691c8b7846cac861c1f7d8fce4f9e6d9634e63c3b49b9a55a48a4b1c5532d5810ec02b93fca3cae0c02546b2a38177345a6efe950cc56d7d20cc111da5ad6626f0554176b04df3418c7d555f9"}, 0x9a) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000001040)=0x2) ioctl$OTPGETREGIONINFO(r9, 0x400c4d0f, &(0x7f0000001080)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x164, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6007}, @NL80211_ATTR_SAE_PASSWORD={0x7f, 0x115, "2847df7ee410fca2e0fc00c6dd00c358f990e3ec9f0f0b9fee69462f7ece0b4e344c0dc8c1928c23bfea0f9af225a8d4276bb3402c48b229f975a3c9cf526354051777af8a16766c2c2026c7e5281ec0ea5b6f6b3e34027b07d88442eedb0b4feb6c38257225902a80808d953eaed68e930af9b0b206fe7e9e5d81"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6005}, @NL80211_ATTR_AKM_SUITES={0x24, 0x4c, [0xfac09, 0xfac0a, 0xfac0a, 0xfac08, 0xfac13, 0xfac0f, 0xfac04, 0xfac11]}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x39, 0xfe, "454c74dcdb724f2ba9b883715c388a107c4de26a5ebd7f80ec815bb8969f5313ebc98903fc52dba89a2d51fce3f112f4c574c18f9c"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x311}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xa166c1b77f15f054}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xc, 0x3, 0x5, 0x0, {0x8, 0x6, 0x0, 0x99, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8, 0x3, 0x6}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1, {0x6, 0xc000, 0x3a7, 0x2}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4800}, 0xc8c0) 10.369775349s ago: executing program 6 (id=1490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001400)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000001680), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001480)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000016c0)=ANY=[@ANYRES16=r1], 0x54) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000001500)={&(0x7f0000001540)=@x25, 0x80, 0x0, 0xffffff71, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r0], 0x18}, 0xfc00) sendmsg$kcm(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="18000008000000003a000000fdffffffdc00000000000000"], 0x18}, 0x4004) close(r2) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x28, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48a41, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'ip6tnl0\x00', 0x1000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001700)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x6, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x3, 0x6, 0x1000, 0x8, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x2, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x2, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x1, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x7, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x22000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x7, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000001b80)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214050, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000001440), 0x0, 0x80840) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x24, &(0x7f00000016c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x40045506, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001380)='./bus\x00', 0x0, 0x4) getdents64(r7, &(0x7f0000000380)=""/4096, 0x1000) 7.011630757s ago: executing program 6 (id=1505): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @empty=0xffffffff}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000002000000000000000100000001000000000000001c"], 0x50}}], 0x2, 0x40) 6.859058104s ago: executing program 6 (id=1506): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0)={0x0, 0xfe}, 0x2) read(r0, &(0x7f0000000000)=""/34, 0x22) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xe0000, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000080)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0x4}, 0x2) 4.975029072s ago: executing program 7 (id=1514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000080)={0x0, 0xfffffffb}, 0x8) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000280000000100001c1122334400080000000500050000000580020007"], 0x4a) 4.671048223s ago: executing program 7 (id=1516): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f00000002c0)="11c9064268e957a7204d0b5c", 0xc}], 0x2}, 0x40) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r4) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r5, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000500), 0x0, 0x40002) timer_create(0x0, &(0x7f0000000700)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000740)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000780)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f00000007c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FE_GET_EVENT(r6, 0x80286f4e, &(0x7f0000000800)) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000840)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x101200, 0x0) ioctl(r8, 0x10000, &(0x7f0000000540)="99a6f790d1b71f56328786387f0fa4259fa0ad2dba19ea4eb41b991a65805e52b38b34860bf19ea4241a50a0a02bddc6041c0bd6a2cc352c584eadb3f7e1f8eaa1e3267470429bc4548ed667b6c282d9cad872c9a8d1b0a5b398ee8d40f3fd0def326f34ddfdcf0554bf2d0ea41ea444516c03a627133f03d25a95caf3b838d720532c8dbd9ba64b1f7a2604d5c5e292a2dbac062b14144114acc107a42d86beffa5a91b4633") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 3.571310036s ago: executing program 5 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000480), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002f010000100001800a000200766c616e30000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x86}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000200)=0x9, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000280)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f00000002c0)={0x11, 0x0, r9, 0x1, 0x6, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r6, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) 3.570803318s ago: executing program 8 (id=1523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000800)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000840)=[{&(0x7f0000000880)=""/146, 0x92}], 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x2, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22f22fec119b7a1b}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040804}, 0x60050000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r5, &(0x7f00000005c0)='27', 0x2) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}]}, @NFT_MSG_DELSET={0x2b4, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x7c, 0x12, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x20c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0xe0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe434deb6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb0f8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x44}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9657}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb7}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x32c}, 0x1, 0x0, 0x0, 0x20044804}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000080)={{}, 0x2a6, 0xb, 0x7a}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="70000000ffffffffffff00000000000008060001080006042a"], 0x2e) 3.016833046s ago: executing program 8 (id=1524): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e24, @empty=0xffffffff}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000007000000000000000100000001000000000000001c"], 0x50}}], 0x2, 0x40) 2.886077239s ago: executing program 8 (id=1525): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="497e13f15ab134b63b7b2e6e9786183c6a5de9cf8067b46f555b0b2e6100b00cf9145a97729ff2eb64545ab80156bd27045a678663b30d83c4342195057c693a6ee9b617a262707c9d7042e81f5d4896daf993f21c783a5ab504e3d5eb38c8e29f10424ae26401113df38f46d8dcec48f47ce1ea74710a1e6b2ff5647ca206d14c6f829a7004badcfaa9", 0x8a, 0x11, &(0x7f0000000540)={0x2, 0x4e24, @private=0xa010100}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x38a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x59}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000a80)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f0000000680)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x14}}, 0x25c782929a2a6532) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000007c0)=@assoc_value={0x0, 0xb}, &(0x7f0000000800)=0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f00000006c0)={0x0, @meta={0x54505356, 0xf4b83c9, 0xc4bb, 0x3c1c, 0xc55c324}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 2.266939748s ago: executing program 8 (id=1526): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) inotify_init1(0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x2, 0x0) setsockopt(r2, 0x108, 0x42020054, &(0x7f00000018c0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r2, &(0x7f0000001940)=@generic={0x8, "ffff0000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"}, 0xc) openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_GET_INFO(r1, 0x0, 0x10) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, 0x0) 1.780160862s ago: executing program 5 (id=1527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000dc050000000100001c1122334400080000000500050000000500050007"], 0x4a) 1.53164865s ago: executing program 8 (id=1528): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'stack ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4Y\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\b~\xdes\xab\xc9\xd5\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xff`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^7^K\x8c\x95\x13\x9e\x8a\f+\x83c\xc0\xfd}tC\xd5\xca\xfe\xbb^K\x0e-\xda\\\xa5K8\t>\xf3v5\xaa\n\x11pO\xebU\x84\xd0\xbf\x1c,u/\xb3\x15\x05YE\xe6n\x1e\x1f\x85ri\x8c\xff\xe83\xf8\n\xab\x9b\x96\xd2k?&\xadJ\xe6\xd5bC\xb9\x17\xf6\xaeY\xf2\xc8\xe0\xb6D46\xa9hp\x002$7Q@!\xc3\x87\xeb:\ny\xc9g\xc2\x8f\xb1ne\x96\xa1\xac\xf7\xca\x86\x82\x99\xd9\x80\xc4\xe0\xcf\xa6K#E'}, 0x5a) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000010c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c00010000000000000000001400000011000100"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xf0}}, 0x0) (async) r2 = syz_ublk_setup_io_uring(0x4de5, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, r2, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000400)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"983e62f19ffab9f96cf59b2a54c3d83c", 0x0, r3, {0x136}, {0xea87, 0xfffffff7}, 0x9, [0x8, 0x8000000000000001, 0xffff, 0x2, 0x3f, 0x3, 0x0, 0x80000001, 0x6, 0x5e7, 0x7, 0x8, 0x97, 0x7, 0x7d, 0x8fdd]}) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r5, 0x400452c8, &(0x7f0000000540)="000000000000000000000000000000000000000001") ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000b00)={r6, 0x100000001, 0x0, [0x81, 0x339e, 0x9, 0x5, 0xff], [0x80000001, 0x25c0000000000000, 0x9, 0x8000, 0xfffffffffffff001, 0x2, 0x4, 0x7, 0x4, 0xffffffffffffff4f, 0x7f, 0x200, 0x9, 0x100000000, 0x7fffffff, 0x7, 0x8000000000000000, 0x120000000000000, 0x80000000, 0x4, 0x9, 0x5, 0x9, 0x4e, 0x3, 0x0, 0x8, 0x6, 0x8, 0xfffffffffffff027, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x400, 0x8, 0x40, 0x8, 0x5, 0xffffffffffffffff, 0x8000000000000000, 0x8, 0xcba, 0x2, 0x8000000000000000, 0x7, 0x7ff, 0x8, 0x0, 0x7, 0x7, 0x8001, 0x0, 0x2, 0xffffffffffffffa4, 0x2, 0x3, 0x1, 0x7b, 0x489f6fad, 0x3, 0x2, 0x8, 0x8, 0x2, 0x3, 0x7, 0xaf3, 0x3, 0xba, 0x0, 0xb, 0x8000, 0x6, 0x8, 0x7, 0x2, 0x7, 0x10000, 0x1ff, 0x2, 0x5, 0x4, 0x7, 0x3749, 0x1, 0xf, 0x4, 0xe, 0x9, 0xff, 0xdd9, 0x5, 0x2, 0x6, 0x1, 0x506, 0xce5, 0x800, 0x3, 0xff, 0x2, 0x800000000, 0x7, 0x7fff, 0x6, 0x7fffffff, 0x0, 0xb0f, 0x7, 0x9b4, 0x4, 0x2, 0x0, 0xffff, 0x7, 0x858, 0x4, 0x8]}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000f40)={{r0}, r3, 0x8, @unused=[0x401, 0x0, 0x9, 0x7], @devid=r6}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000180)={0x18, 0x0, {0x2, @random="2f85344e913f", 'team_slave_0\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r7, 0x80047437, 0xfffffffffffffffe) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.4790328s ago: executing program 5 (id=1529): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="034886dd1200befd0000140000006000000008008700fe88a43de1a400000000000000007d01ff02000000000000000000fffffff501", @ANYRES16, @ANYRES64=r1], 0xfdef) 1.225043265s ago: executing program 7 (id=1530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000480)={&(0x7f0000000580)=[{0x7fff, 0x401, 0x9, 0xfffffffffffffff6}], 0x1, 0x20, 0x8001, 0x14d2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000c000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.157848473s ago: executing program 8 (id=1531): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x2e, &(0x7f0000000140)=ANY=[]) r1 = syz_ublk_setup_io_uring(0xb87, &(0x7f0000000900)={0x0, 0xf8ab, 0x100, 0x2, 0x85}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x2, 0x20, r5, 0x0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2}, 0x0, 0x44}) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 1.082221171s ago: executing program 6 (id=1532): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x183) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140)=0x44, 0x4) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/133) syz_usb_connect(0x4, 0xf2f, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x83, 0xc8, 0x37, 0x0, 0xcf3, 0x7010, 0x85f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1d, 0x4, 0x0, 0x6, 0x50, 0x6, "", [{{0x9, 0x4, 0x81, 0x3, 0xe, 0xce, 0xa1, 0xbc, 0x1, [@generic={0x98, 0xc, "aa1c963fa0279492470e0d224b75b1ca6b9b3ae91732f062a66499a699dc58144ea201352cef6ff9cce5f7caca55bb27fcb5cf359bd1bfa4a10fe6e8c313fa6aee57f786419b32b6cf0458dd17550354666bedcad97046544233aaf5645cb3ea591d2c748da447c17ad011453f3b2e3fbd47ad73bbe87034b8f5ae4b3dd84b8a7de64f3e36f5afaf091a00f56eaf317925bff930bbc2"}], [{{0x9, 0x5, 0x2, 0x4, 0x20, 0x8, 0x3, 0x1}}, {{0x9, 0x5, 0x80, 0xc, 0x40, 0x6, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x80, 0x8001}, @generic={0xb2, 0x24, "73a2980245b6fe48c2ba321ef4ef038ff25c1af27894f7b3dd5522b334adbe654159c51664cd774bcc31a4965af538100b09efd60272f4e4c5d6e67d9a64673754c3f0d9f86991ecf93f875bd7d2c3ac08649dfbc9337142a2a4d173ad61c4c76d34a55b4d9b0d1b8fefb209ce24398adb41955fcdd4e30c41956a264233e7462e9bc5509555180aab8c8f16df28017eb88d4d2a4e9690ab540323ee5e1188a939a58890092efb85a132b9be666c47b2"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x2, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x7f041f12e3bc358f, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x0, 0xc1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x32, 0x5, 0x8, [@generic={0xc2, 0xb, "ffd663a5f1a9453fa93e219e6cee6303ad85d680906c2000c86671573187736f5723fb5da8ad3a7fe91d7603cec9bd7f4be9ba3b8f88f2e1e4ca82dd579f4114cb82f15a9e86425d189eb738262e523162b78199e864e1d57e9f4ea77c7f825833958eabc8415e2ded6966adadc2bb064e21cd63b058177f0abe8c612338bfbf1db52ab9208e4ba30499eadc98b8fa5a992317b762aa126df88679ea33290911ca05eab86ca85f8be60d9722473efc0024d4b46b274ea83b64de5aa63ec8154a"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x6, 0xff, 0x14, [@generic={0xf, 0x22, "2456bee7089c2b770945635b06"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x1a, 0x7}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xee, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x3}, @generic={0x31, 0x21, "ad82dadc1756820186d997a7d8ff0bd4efd330c44b1fb5eb10d5636ae9ddbc89486972c28a88be6653c96364248df9"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x7f, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x4, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x3, 0x1, 0x10}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x1, 0xa, 0x9, [@generic={0x44, 0x5, "72670dc78fa90349e20d619e3ff6b97b3ce434113cf187f55d007c878cf3d9f324231e9040b64c083e79970a95a188ea2f70b0d57400bfbeffe5be8efa7df1d6501c"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xfa, 0x7, 0x8, [@generic={0xad, 0x23, "4ff602d7d840bf37cd40f353f6a9be2fba3bba96ab0168710abcc793fed62123e535dd3270f288e5788436b8bbf38e0715742ab8d174abb1a3753fc1e4a1d8f48568584f08e1d3e9d615bde8bd2e97f6869fab448ed7b39fd286bbfcc6dbeb2b1e0a9d66e66c646c45ce063d9ad0d1a7fd5971559689ec44dcfdc4f3890512d54c103bd6974ab25dbeb86605efddc6d7de0ead8a6b9ff2c87443670c6f3e4b3c87920d6ba597d30b2c5061"}, @uac_iso={0x7, 0x25, 0x1, 0x97e5931b44abe9f2, 0x3, 0xff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x7, 0xff, 0x62}}]}}, {{0x9, 0x4, 0x8, 0x8, 0x10, 0xd7, 0x87, 0x75, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0xfff, 0x25}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x21, '8H\r'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x1, 0x9, 0x8, 0x9, 0xfa}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x8000, 0xfe}]}], [{{0x9, 0x5, 0x4, 0x10, 0x8, 0x3d, 0xd6, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x6}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x2, 0x1, 0x44, [@generic={0x52, 0x8, "dcebd8a8c9e4caacf3ef2d40b6becac3bcd4aeba921995c65a6f82d8471b6d391e2cce0a8ee3061572346debc9d87a1626f928c54a8d73bca03b24f663b16f816a8371897066d865002a820178c709ad"}, @generic={0x2c, 0x21, "419e1e2c9ad7b9ee2802bdf3b19d66f66c0acebf3d6b163816a76247b7c94bdf7f28bce61770072b20ba"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x9, 0x2, 0x80, [@generic={0xe0, 0xc, "f74fd7b7ec0e18493c27f6792ab5b91db5c46b6502a35bc72a76ccc9f77e4fec95ef65533c9c14816f3ba718c92fd150d62cc02389dfe2b321c4f86773b39e27bcfb78c432371f175b19982e4fe669c240c54759712b4ec5f1ac4d08405c3ea6cfe15f5c4bb688eaacdb9776af7293a490c0b5d711facaa79d2b2f2f02a3b4f72dea666e57c8f32ddda45a7efb2993fd17e918ebbf44a8c261232d73e5b18eca396a3a947e49d280ce506249dec6d896e0a423a187bd906d1d5edcb8c93671f4cf15622de8886f6daccf12b16096e68bf55d75041af356e090f76fb138ac"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x52, 0x6}, @generic={0x49, 0x23, "32521db4ef341c2e05cb4165e7ef5ae1dfa4ac71ff11d6e85b409b531fc8034875c5a0dfc99c62234a8aff8e7c6a8a8e8ec8f360784f45f7d34f630427c84f2b627876df63ef83"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0x5, 0xfd, 0x2}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x81, 0x3, 0x0, [@generic={0xef, 0x10, "7dd5dbe0342e733b808d74f4a3c241929f2f51702567d565a52c4d22868fbd618d9813cec7744e38e01ab16683c88b899570d1b0c0cf8adbe6ed3e806a25c9910ad0aa7105bd2e5aa61e69d9fdf7b2d651b42d6516ad89e31cd7b45f93d516d02f3bc253e3ae6d7493a523b2ee30e66ee16787fcfd0cdabb5f69fab30cbd759628be2783ae7288453de2e9c82ea7242dbe23d42ee52946f08660567dfe83b8b1aec9c55afeba2718d232bdf2d1e23668f770166dce33fb2c012e397ad639467a392f62ee7b38c070d17aa8cccbd45d8ca47579990d28a8f99d4dce08b3c69173b3479f5dcab9e9fdd06c633b51"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7f}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x4, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xfffc}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x4, 0x28, 0x61, [@generic={0x5a, 0x22, "13683db2aaf58fee1ac81e52881a031a67c8301c10e6327637967cd94566b57b372ab5bbf4d0c27fe351cbcc514b6e5924e300fbd10f4f0f6c6bb9a9ce11c9909997b2d30c2dd91bd98f027fb5ee1a95ed913c371fff421e"}, @generic={0xfa, 0xc, "2ef64cf3497eabfb00699f3156746f47de7f075c51d5418870cfa33c24f7474552066b9998ee1f970aa93d8cb237619826acb3013916748b6ff683e995f16c960bfc3b561393113cc0ee0373fc5ee8cdc6e04be90a622b3d84b71a1bc514ad636161fbda2f3a1128e4caa9af30c99a5659dbf6d7f3a988a885b2cca3f613eca7cbb6968586b2b2b181ba39674a089c480a9f6eb0e176423db8378630a1c5a68ef9d85de17d1a667eec3c08077f010de5eec9d4ba8785d6c41c8e039fdffc0fa6dda95ad04b625657de0dfc220693883c0bf48b4253079f8af33289ace602b2f221af6d956ca3bf0fdef6479f970c9133b66229bda3b69fde"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x3, 0x55, [@generic={0x46, 0x9, "79265e78c4ede9c3d8d13f954a8b03a51eaa5302c89d9458bf71ce0992ef7b6e9b00903f4ada72250d445ab4b6e60949eb6f6b19c4ade91fd8ed0ff6e806d5a6b950bab0"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x6, 0x2}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x0, 0x1, 0xc0}}, {{0x9, 0x5, 0x8a, 0x10, 0x400, 0x2, 0xe, 0x3, [@generic={0x34, 0x7, "57ce6d18255d99343d63fe8c267d048075a49cf314d3b333a4b9a6f75a72c4a13830dfbdbc78741ec39def4969834740510a"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x5, 0x0, 0x5, [@generic={0x100, 0xd, "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"}, @generic={0xff, 0x1, "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"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x6, 0x0, 0x40}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x0, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x146a}]}}, {{0x9, 0x5, 0x85bc99bad320a3ad, 0x0, 0x10, 0xd, 0x3b, 0x81}}]}}, {{0x9, 0x4, 0xac, 0x6, 0x6, 0x38, 0xe9, 0xdb, 0x2, [@uac_as, @uac_control={{0xa, 0x24, 0x1, 0x2, 0x17}, [@feature_unit={0xd, 0x24, 0x6, 0x4, 0x3, 0x3, [0xa, 0xa, 0x2]}]}], [{{0x9, 0x5, 0xf, 0x4, 0x400, 0xff, 0x5b, 0xc}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x3, 0x7, 0x8, [@generic={0xd6, 0x5, "2a59e1f94742dd9bd5d23cd30dbd7af987db462f267fee6fe7857cc8edbc63c56e188ca496f7bbe21342b7d9a56f06c384a612c9bb27e601ed05713fb8af075641b06bc5626141e8284c98103cbb0a51db4b02ad1e9caeb38c72b08c5b8d0136a51c5511d7a616b8b9776e9db56400df475154225d777c0915d2743ca6e46e852fbedbc0339cf3878bb7ca792fc537f52d9b06d31dc27fc4582cc5084b53be8a4737fa6915bdb7c3a6fe10eadbd7847e2597e6ca6fa9abd9cc8d5ee9c699e1bbc1115fae138af9d864d81c19d98fd05bb2deb84d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x9, 0xf7, 0xe, [@generic={0x2c, 0x21, "c6fd3867a896361f4b8f587959886685a45ce0da028fd77f959d09283aab37ae059187ffc82f8d3d7298"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x408, 0x8, 0x4, 0x3b, [@generic={0x85, 0x6, "c45998ffcf6361cf95e242651f1f66e04186815905f7819514cce330887c42cc976b03f5de427713aad571a740e66c7675b9e67014f11db39560cc94f834d8926be1566cd886194af579c6b682380fb716613720f788889f822e36ee63d827365cac44fefa4fb9c6dd8ebc1eaf81bf6b58ee58d7aaa28e2ee50c693e86cef1b4ecea54"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x5, 0x2, 0x6, [@generic={0xc9, 0x3, "4138e8ea556919a9acca24b388c7dcbd5890648a860d3082597f93bf1a35c346c2935088dccb74d86c729039df4d79417bbb613d09587fe32ef2da20711843a8abe708d2f99868004e65d666ba56cb28069ff72d5b005d641cfe5bd29fa2218765a2f56dd20c366e8c10dbca41664e8c6030f669de82c06f51779152481521d9c4534e1638951c1c83b098f54e52b0279e5bbad4768631d6629cb70d4563fa3bf3acca7eb870965606ffcaa20284e52e53c415c393a815e32d8465dc0ab9e9ffdd7265fd7669ec"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0xd, 0x9, 0x4}}]}}, {{0x9, 0x4, 0xd1, 0x39, 0x2, 0xff, 0x1, 0xf, 0x34, [@generic={0x20, 0x9, "b4da32512368438febc738845a008e1554ec12b477b452e0438d85e5c4e7"}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x81, 0x10, 0xe6}}, {{0x9, 0x5, 0xe, 0x8, 0xb5639800d9466328, 0x9, 0x3, 0x9, [@generic={0xe5, 0x6, "6c259c8a3bdb5ff4f47df070a9ca5c329c50fbff590bff9e194e4d62198fd3758a4d1c972c2e12f2551a7a8e4c611779d4fbbbb7bb06a1fa7440b66ddc644071866781f3ae008a430be278368586be958bac9ae219402c384865eac1686527b5d51e1bbb153d29b011b5ee594d86806be068433fed7d97439c85aeebdb7a18d6ca450c5fc7d27496dfe88acdd5f4fb07a74b4b664e168d22e634d9dc3f5f779f83121a0a88332f00abc461fd5c4d29f0f8d92da0dd2e201da8e5e8051a6ce703adc4bc5605e238ecaccc0cb4b69c61da9cd06ae8ddfd6c6c87bd7cd2be5bf4ae1e8e1a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}]}}]}}]}}]}}, &(0x7f0000001840)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x310, 0xf9, 0x5, 0xc, 0xff, 0x9}, 0x1c, &(0x7f0000001640)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "04cd768b93d1f50cff82a6f45420bb55"}]}, 0x4, [{0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x41b}}, {0x6f, &(0x7f00000016c0)=@string={0x6f, 0x3, "d95c0a0047dc91d3019b031874919ebb92919d35104ded2eeec811e8a8d12604bcfda51d8ded88365ec16eb33cb546a5c2206b61b36688cf1be75b2a9b56f650968d4b5afe8cad54eca9374fbcfa1b6edb353bf58c7e46c96e44dbed404c7c043780861deac42aed2533fba7e6"}}, {0xa2, &(0x7f0000001740)=@string={0xa2, 0x3, "fc69f4b578a02337231980b61a5b36e44c6cbfcb73621b669dcaf5508827cc8bc91e3960a0fcf45dc1187a1edf5b4ed0c5cf5dbacc516ba783e5483da4c9ffcdb7a5e66137039c1df1781e0620d0c22aeea1a105e058555ad7e0d2c2517625543052d98bf2d00ddc5db6d705043efe5db00612068e4f2be5b44088b085f9d7b21726e78a6275c0e0e36b50a4c7d529cc8e77e5bbbcf14a6491a01ecf75ad5be0"}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000180)={0x0, 0x16, 0x6, "e7ffa7800000"}, 0x0, 0x0}) 1.048086103s ago: executing program 5 (id=1533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r2, 0x84, 0x81, &(0x7f0000000080)={0x0, 0xfffffffb}, 0x8) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000003c0000000100001c1122334400080000000500050000000580020007"], 0x4a) 832.420766ms ago: executing program 7 (id=1534): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @multicast1}, {0x306, @random="3284932d5c00"}, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x1, 0x8000000000000001}, 0x0) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xfe, "d92984bd1ca44c226af5160e961711a07775b78411e08509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000002c0)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = accept(r1, 0x0, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000240)={0x0, 0x4, 0x1, '\x00', &(0x7f0000000200)=0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000280)={0x33, @multicast2, 0x4e24, 0x0, 'wlc\x00', 0x4, 0x1aa8, 0x1f}, 0x2c) sendmsg$nl_xfrm(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 699.161103ms ago: executing program 5 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000001c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000060000000100001c112233440008000000050005000000053f040008"], 0x4a) 281.801648ms ago: executing program 7 (id=1536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200f5ff0002000c116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 261.18658ms ago: executing program 5 (id=1537): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000300)="3e0fc75b06c4c241cffdf30f2c58d5f332310f01c40f01c466b98008000066b8785f000066ba000000000f300f3066b9800000c00f326635001000000f30ba200066b8c000000066ef", 0x49}], 0x1, 0x3, 0x0, 0x0) (async) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000003c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timerfd_gettime(r0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000380)={0x0, 0xea60}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000480)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001600010a00000000000000000a000007"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$SNDCTL_MIDI_INFO(r4, 0xc074510c, &(0x7f0000000140)={"0f3e815eafb78744202b2904f4bfaebbb3adf738e8386ab4c82a0c822580", 0x4, 0x0, 0x9, [0x3, 0x5, 0x8, 0x6, 0x40, 0xbb, 0x4, 0x7, 0x7, 0xc4, 0x101, 0x1000, 0x1000, 0x3, 0x9, 0x80000001, 0x8, 0x7]}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xd) (async, rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x400800, 0x4) (async, rerun: 64) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) (async) write$cgroup_pid(r5, &(0x7f0000000580)=0xffffffffffffffff, 0x12) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8011, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) (async, rerun: 64) ioctl$XFS_IOC_FSGROWFSDATA(r7, 0x4010586e, &(0x7f0000000000)={0xfffffffffffffff9, 0x2}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) 0s ago: executing program 7 (id=1538): mount(0x0, 0x0, &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000003c0)='1,0x400000,0x401000,X', 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x5001}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="03031b003000320006006300000000443aff00000000000000000000ffffac141419ff02000000000000000880000000000185"], 0x76) kernel console output (not intermixed with test programs): X: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 474.187252][ T9950] RBP: 00007f4823c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 474.187260][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.187267][ T9950] R13: 00007f4823e26038 R14: 00007f4823e25fa0 R15: 00007fffb8b46758 [ 474.187287][ T9950] [ 475.477816][ T8603] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 475.723220][ T8603] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 475.933381][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 475.933405][ T8603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.933431][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.017687][ T8603] usb 2-1: config 0 descriptor?? [ 476.083620][ T160] hsr_slave_0: left promiscuous mode [ 476.084872][ T160] hsr_slave_1: left promiscuous mode [ 476.086397][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.132842][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.248141][ T160] veth1_macvtap: left promiscuous mode [ 476.248576][ T160] veth0_macvtap: left promiscuous mode [ 476.249501][ T160] veth1_vlan: left promiscuous mode [ 476.250626][ T160] veth0_vlan: left promiscuous mode [ 476.754907][ T8603] usbhid 2-1:0.0: can't add hid device: -71 [ 476.754983][ T8603] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 476.904528][ T8603] usb 2-1: USB disconnect, device number 69 [ 482.832960][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.836572][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.868928][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.873577][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.899479][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 484.650277][ T160] team0 (unregistering): Port device team_slave_1 removed [ 484.779769][ T160] team0 (unregistering): Port device team_slave_0 removed [ 484.957660][ T5612] Bluetooth: hci2: command tx timeout [ 487.037230][ T5612] Bluetooth: hci2: command tx timeout [ 487.989386][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 489.117081][ T5612] Bluetooth: hci2: command tx timeout [ 490.870826][ T9854] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.871325][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.871565][ T9854] bridge_slave_0: entered allmulticast mode [ 490.935783][ T9854] bridge_slave_0: entered promiscuous mode [ 491.002033][ T9854] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.002358][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.002605][ T9854] bridge_slave_1: entered allmulticast mode [ 491.175727][ T9854] bridge_slave_1: entered promiscuous mode [ 491.198626][ T5612] Bluetooth: hci2: command tx timeout [ 492.298177][ T9854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.519996][ T9854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.286481][ T9854] team0: Port device team_slave_0 added [ 493.345190][ T9854] team0: Port device team_slave_1 added [ 493.462764][ T9979] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.585026][T10017] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1213'. [ 493.996022][T10020] netlink: 'syz.1.1213': attribute type 4 has an invalid length. [ 494.079153][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.079169][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.079184][ T9854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.081822][ T9854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.081832][ T9854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.081848][ T9854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.465133][T10021] nbd: must specify a size in bytes for the device [ 494.725988][ T9854] hsr_slave_0: entered promiscuous mode [ 494.787991][ T9854] hsr_slave_1: entered promiscuous mode [ 494.810510][ T9854] debugfs: 'hsr0' already exists in 'hsr' [ 494.810529][ T9854] Cannot create hsr debugfs directory [ 494.886430][ T200] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 495.068423][ T200] usb 2-1: Using ep0 maxpacket: 8 [ 495.072852][ T200] usb 2-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 495.099552][ T200] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 495.128810][ T200] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 495.128836][ T200] usb 2-1: Product: syz [ 495.128845][ T200] usb 2-1: Manufacturer: syz [ 495.128854][ T200] usb 2-1: SerialNumber: syz [ 495.546505][ T200] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 495.546566][ T200] visor 2-1:1.0: probe with driver visor failed with error -110 [ 496.427912][ T6640] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.604597][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 497.845174][ T200] usb 2-1: USB disconnect, device number 70 [ 498.160015][ T6640] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.668061][ T6640] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.242207][ T6640] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.921752][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.921921][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.154030][T10070] xt_l2tp: missing protocol rule (udp|l2tpip) [ 503.887163][T10075] FAULT_INJECTION: forcing a failure. [ 503.887163][T10075] name failslab, interval 1, probability 0, space 0, times 0 [ 503.887190][T10075] CPU: 0 UID: 0 PID: 10075 Comm: syz.4.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.887208][T10075] Tainted: [L]=SOFTLOCKUP [ 503.887213][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 503.887221][T10075] Call Trace: [ 503.887226][T10075] [ 503.887232][T10075] dump_stack_lvl+0xe8/0x150 [ 503.887255][T10075] should_fail_ex+0x3eb/0x540 [ 503.887273][T10075] should_failslab+0xa8/0x100 [ 503.887289][T10075] __kmalloc_cache_noprof+0x9e/0x600 [ 503.887303][T10075] ? __pfx_nft_rhash_init+0x10/0x10 [ 503.887319][T10075] ? __nft_trans_set_add+0x5e/0x710 [ 503.887332][T10075] ? __nft_trans_set_add+0x5e/0x710 [ 503.887347][T10075] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 503.887374][T10075] __nft_trans_set_add+0x5e/0x710 [ 503.887388][T10075] ? nf_tables_newset+0x13b5/0x2570 [ 503.887404][T10075] nf_tables_newset+0x1d87/0x2570 [ 503.887424][T10075] ? __pfx_nf_tables_newset+0x10/0x10 [ 503.887439][T10075] ? lock_acquire+0x115/0x350 [ 503.887460][T10075] ? __nla_parse+0x40/0x60 [ 503.887478][T10075] nfnetlink_rcv+0x1288/0x28c0 [ 503.887511][T10075] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 503.887548][T10075] ? skb_clone+0x246/0x3a0 [ 503.887573][T10075] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.887587][T10075] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.887604][T10075] netlink_unicast+0x8ef/0xa80 [ 503.887625][T10075] netlink_sendmsg+0x7f0/0xb20 [ 503.887642][T10075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.887658][T10075] ? aa_sock_msg_perm+0x144/0x210 [ 503.887675][T10075] ? apparmor_socket_sendmsg+0x98/0x360 [ 503.887693][T10075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.887705][T10075] sock_sendmsg_nosec+0x14e/0x190 [ 503.887720][T10075] ____sys_sendmsg+0x54e/0x850 [ 503.887739][T10075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.887760][T10075] ? import_iovec+0x73/0xa0 [ 503.887775][T10075] ___sys_sendmsg+0x2a5/0x360 [ 503.887789][T10075] ? __lock_acquire+0x747/0x2de0 [ 503.887804][T10075] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.887822][T10075] ? futex_wait+0x2a2/0x390 [ 503.887852][T10075] ? __fget_files+0x3a2/0x420 [ 503.887863][T10075] ? __fget_files+0x2a/0x420 [ 503.887880][T10075] __x64_sys_sendmsg+0x1b1/0x290 [ 503.887898][T10075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.887926][T10075] do_syscall_64+0x166/0x520 [ 503.887942][T10075] ? trace_irq_disable+0x3b/0x140 [ 503.887955][T10075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.887967][T10075] ? clear_bhb_loop+0x70/0xc0 [ 503.887982][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.887993][T10075] RIP: 0033:0x7fee4bd9f559 [ 503.888006][T10075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.888017][T10075] RSP: 002b:00007fee4ccc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.888031][T10075] RAX: ffffffffffffffda RBX: 00007fee4c025fa0 RCX: 00007fee4bd9f559 [ 503.888040][T10075] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 503.888048][T10075] RBP: 00007fee4be36b20 R08: 0000000000000000 R09: 0000000000000000 [ 503.888056][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.888063][T10075] R13: 00007fee4c026038 R14: 00007fee4c025fa0 R15: 00007ffc7093c7b8 [ 503.888083][T10075] [ 506.791663][T10088] netlink: 'syz.1.1221': attribute type 4 has an invalid length. [ 506.854131][T10089] netlink: 'syz.1.1221': attribute type 4 has an invalid length. [ 507.298450][ T6640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.404951][ T6640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.597306][ T6640] bond0 (unregistering): Released all slaves [ 507.974080][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 509.135046][ T6640] : left promiscuous mode [ 509.198410][T10092] ./bus: Can't lookup blockdev [ 510.175173][ T9979] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.183289][ T9979] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.183540][ T9979] bridge_slave_0: entered allmulticast mode [ 510.207432][ T9979] bridge_slave_0: entered promiscuous mode [ 510.383300][ T9979] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.383636][ T9979] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.383874][ T9979] bridge_slave_1: entered allmulticast mode [ 510.591898][ T9979] bridge_slave_1: entered promiscuous mode [ 512.478483][ T33] audit: type=1400 audit(1700000309.829:12): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=10123 comm="syz.4.1229" name="//o" offset=35 [ 512.531109][ T9979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.603529][ T9979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.541763][ T9979] team0: Port device team_slave_0 added [ 514.682572][ T9979] team0: Port device team_slave_1 added [ 514.853913][ T9854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 514.899863][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.192953][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.192970][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.192987][ T9979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.251528][ T9854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 515.267165][T10142] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1232'. [ 515.296444][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.357578][ T9979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.357594][ T9979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.357611][ T9979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.432180][T10142] netlink: 'syz.4.1232': attribute type 4 has an invalid length. [ 515.481287][ T9854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 515.509596][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.505717][ T9854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.566929][ T9854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.823974][ T9854] kthread_run failed with err -4 [ 517.379243][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 517.509940][ T9979] hsr_slave_0: entered promiscuous mode [ 517.531512][ T9979] hsr_slave_1: entered promiscuous mode [ 517.550408][ T9979] debugfs: 'hsr0' already exists in 'hsr' [ 517.550426][ T9979] Cannot create hsr debugfs directory [ 517.566584][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 517.574451][ T10] usb 2-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 517.586124][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 517.601045][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 517.601064][ T10] usb 2-1: Product: syz [ 517.601074][ T10] usb 2-1: Manufacturer: syz [ 517.601082][ T10] usb 2-1: SerialNumber: syz [ 517.774946][T10168] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syze1 [ 517.979833][ T10] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 517.979895][ T10] visor 2-1:1.0: probe with driver visor failed with error -110 [ 519.319320][T10174] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 519.332079][T10174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 519.335271][T10174] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 519.594104][T10174] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 519.625169][T10174] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 520.465154][T10182] loop0: detected capacity change from 0 to 4096 [ 521.032989][ T10] usb 2-1: USB disconnect, device number 71 [ 521.081190][ T6640] hsr_slave_0: left promiscuous mode [ 521.351981][ T6640] hsr_slave_1: left promiscuous mode [ 521.354432][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.354535][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.642118][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.642272][ T6640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.993648][T10189] xt_l2tp: missing protocol rule (udp|l2tpip) [ 522.000958][T10174] Bluetooth: hci3: command tx timeout [ 522.081987][ T6640] veth1_macvtap: left promiscuous mode [ 522.082418][ T6640] veth0_macvtap: left promiscuous mode [ 522.083289][ T6640] veth1_vlan: left promiscuous mode [ 522.084375][ T6640] veth0_vlan: left promiscuous mode [ 522.322799][T10191] FAULT_INJECTION: forcing a failure. [ 522.322799][T10191] name failslab, interval 1, probability 0, space 0, times 0 [ 522.322827][T10191] CPU: 0 UID: 0 PID: 10191 Comm: syz.1.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.322845][T10191] Tainted: [L]=SOFTLOCKUP [ 522.322851][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 522.322858][T10191] Call Trace: [ 522.322864][T10191] [ 522.322870][T10191] dump_stack_lvl+0xe8/0x150 [ 522.322893][T10191] should_fail_ex+0x3eb/0x540 [ 522.322911][T10191] should_failslab+0xa8/0x100 [ 522.322928][T10191] __kmalloc_cache_noprof+0x9e/0x600 [ 522.322941][T10191] ? nfnetlink_rcv+0x1021/0x28c0 [ 522.322954][T10191] ? nfnetlink_rcv+0x1021/0x28c0 [ 522.322970][T10191] nfnetlink_rcv+0x1021/0x28c0 [ 522.323003][T10191] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 522.323041][T10191] ? skb_clone+0x246/0x3a0 [ 522.323067][T10191] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.323080][T10191] ? netlink_deliver_tap+0x2e/0x1b0 [ 522.323096][T10191] netlink_unicast+0x8ef/0xa80 [ 522.323118][T10191] netlink_sendmsg+0x7f0/0xb20 [ 522.323136][T10191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.323151][T10191] ? aa_sock_msg_perm+0x144/0x210 [ 522.323168][T10191] ? apparmor_socket_sendmsg+0x98/0x360 [ 522.323186][T10191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.323199][T10191] sock_sendmsg_nosec+0x14e/0x190 [ 522.323223][T10191] ____sys_sendmsg+0x54e/0x850 [ 522.323242][T10191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.323263][T10191] ? import_iovec+0x73/0xa0 [ 522.323278][T10191] ___sys_sendmsg+0x2a5/0x360 [ 522.323292][T10191] ? __lock_acquire+0x747/0x2de0 [ 522.323308][T10191] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.323325][T10191] ? futex_wait+0x2a2/0x390 [ 522.323355][T10191] ? __fget_files+0x3a2/0x420 [ 522.323367][T10191] ? __fget_files+0x2a/0x420 [ 522.323385][T10191] __x64_sys_sendmsg+0x1b1/0x290 [ 522.323403][T10191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.323433][T10191] do_syscall_64+0x166/0x520 [ 522.323449][T10191] ? trace_irq_disable+0x3b/0x140 [ 522.323462][T10191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.323474][T10191] ? clear_bhb_loop+0x70/0xc0 [ 522.323489][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.323501][T10191] RIP: 0033:0x7f4823b9f559 [ 522.323514][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.323525][T10191] RSP: 002b:00007f48249bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.323540][T10191] RAX: ffffffffffffffda RBX: 00007f4823e25fa0 RCX: 00007f4823b9f559 [ 522.323549][T10191] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 522.323557][T10191] RBP: 00007f4823c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 522.323565][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.323572][T10191] R13: 00007f4823e26038 R14: 00007f4823e25fa0 R15: 00007fffb8b46758 [ 522.323591][T10191] [ 524.074570][T10174] Bluetooth: hci3: command tx timeout [ 526.154508][T10174] Bluetooth: hci3: command tx timeout [ 528.241928][T10174] Bluetooth: hci3: command tx timeout [ 529.024870][T10213] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 529.095765][T10214] netlink: 'syz.1.1244': attribute type 4 has an invalid length. [ 531.095627][ T6640] team0 (unregistering): Port device team_slave_1 removed [ 531.224988][ T6640] team0 (unregistering): Port device team_slave_0 removed [ 537.110885][T10171] rxe_eth0 speed is unknown, defaulting to 1000 [ 537.693759][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 537.834582][ T10] usb 2-1: device descriptor read/64, error -71 [ 538.093555][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 538.229671][ T10] usb 2-1: device descriptor read/64, error -71 [ 538.329003][ T9979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 538.340783][ T10] usb usb2-port1: attempt power cycle [ 538.367562][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.371742][ T9979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 538.599347][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.645120][ T9979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 538.668108][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.874838][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 538.896816][ T10] usb 2-1: device descriptor read/8, error -71 [ 538.928403][ T9979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 538.951140][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.285269][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 539.506195][ T10] usb 2-1: device descriptor read/8, error -71 [ 539.623272][ T10] usb usb2-port1: unable to enumerate USB device [ 540.068155][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 540.616198][T10261] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1249'. [ 540.706106][T10262] netlink: 'syz.4.1249': attribute type 4 has an invalid length. [ 542.624967][ T200] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 542.778204][ T200] usb 2-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=0.00 [ 542.803037][ T200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 542.803058][ T200] usb 2-1: Product: syz [ 542.803066][ T200] usb 2-1: Manufacturer: syz [ 542.859974][ T200] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input22 [ 543.035285][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.040005][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.077040][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.081488][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.100530][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.485581][ T200] usb 2-1: USB disconnect, device number 76 [ 544.338490][ T6639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.203824][T10174] Bluetooth: hci4: command tx timeout [ 545.328783][T10300] xt_l2tp: missing protocol rule (udp|l2tpip) [ 545.769201][ T6639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.046318][T10305] fuseblk: Unknown parameter '‘1À0x0000000000000004' [ 546.981450][ T6639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.279064][T10174] Bluetooth: hci4: command tx timeout [ 547.307007][T10171] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.307378][T10171] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.307623][T10171] bridge_slave_0: entered allmulticast mode [ 547.396238][T10171] bridge_slave_0: entered promiscuous mode [ 547.425390][T10171] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.428620][T10171] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.428953][T10171] bridge_slave_1: entered allmulticast mode [ 547.486195][T10171] bridge_slave_1: entered promiscuous mode [ 548.111742][ T6639] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.338412][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 548.377683][T10171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.432726][T10171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.352969][T10174] Bluetooth: hci4: command tx timeout [ 549.672752][T10171] team0: Port device team_slave_0 added [ 549.710854][T10171] team0: Port device team_slave_1 added [ 550.364351][T10341] netlink: 'syz.4.1260': attribute type 4 has an invalid length. [ 550.440161][T10346] netlink: 'syz.4.1260': attribute type 4 has an invalid length. [ 550.521373][T10171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.521389][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.521406][T10171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.598869][T10274] rxe_eth0 speed is unknown, defaulting to 1000 [ 550.806353][T10171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.806371][T10171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.806387][T10171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.433063][T10174] Bluetooth: hci4: command tx timeout [ 553.060157][ T6639] bridge_slave_1: left allmulticast mode [ 553.060441][ T6639] bridge_slave_1: left promiscuous mode [ 553.061128][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.130634][ T6639] bridge_slave_0: left allmulticast mode [ 553.130921][ T6639] bridge_slave_0: left promiscuous mode [ 553.131607][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.230148][ T6639] bridge_slave_1: left allmulticast mode [ 553.230436][ T6639] bridge_slave_1: left promiscuous mode [ 553.231163][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.258672][ T6639] bridge_slave_0: left allmulticast mode [ 553.258965][ T6639] bridge_slave_0: left promiscuous mode [ 553.259619][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.272064][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.365132][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.753302][ T6639] bond0 (unregistering): Released all slaves [ 559.044702][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.089826][ T6639] bond0 (unregistering): Released all slaves [ 559.162921][T10171] hsr_slave_0: entered promiscuous mode [ 559.178115][T10171] hsr_slave_1: entered promiscuous mode [ 560.392877][ T8603] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 560.548097][ T8603] usb 2-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40 [ 560.561560][ T8603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.581905][ T8603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.581932][ T8603] usb 2-1: Product: syz [ 560.581941][ T8603] usb 2-1: Manufacturer: syz [ 560.582230][ T8603] usb 2-1: SerialNumber: syz [ 560.680223][ T8603] usb 2-1: 1:1 : unsupported format bits 0x2020000 [ 561.228109][ T8603] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 561.228130][ T8603] usb 2-1: 2:1 : unsupported format bits 0x2020000 [ 561.625231][ T8603] usb 2-1: USB disconnect, device number 77 [ 561.767348][T10380] udevd[10380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.368762][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.368931][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.481945][ T8603] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 563.821892][ T8603] usb 2-1: Using ep0 maxpacket: 32 [ 563.871389][ T8603] usb 2-1: unable to get BOS descriptor or descriptor too short [ 563.871426][ T8603] usb 2-1: New USB device found: idVendor=2b53, idProduct=0023, bcdDevice=0.40 [ 563.892817][ T8603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.892870][ T8603] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 563.923828][ T8603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.923847][ T8603] usb 2-1: Product: syz [ 563.923856][ T8603] usb 2-1: Manufacturer: syz [ 563.923865][ T8603] usb 2-1: SerialNumber: syz [ 564.178926][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.179353][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.637324][ T8603] usb 2-1: USB disconnect, device number 78 [ 565.535015][T10409] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1268'. [ 565.602375][T10414] netlink: 'syz.4.1268': attribute type 4 has an invalid length. [ 565.662924][T10413] udevd[10413]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 565.667371][T10412] xt_l2tp: missing protocol rule (udp|l2tpip) [ 566.591076][ T5803] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 566.874281][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 566.877630][ T5803] usb 2-1: Using ep0 maxpacket: 32 [ 566.880076][ T5803] usb 2-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 566.904729][ T5803] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.904747][ T5803] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 566.904783][ T5803] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.907782][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.907799][ T5803] usb 2-1: Product: syz [ 566.907807][ T5803] usb 2-1: Manufacturer: syz [ 566.907816][ T5803] usb 2-1: SerialNumber: syz [ 568.618739][ T5803] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 569.088832][ T5803] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 569.674607][T10274] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.674936][T10274] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.698742][T10274] bridge_slave_0: entered allmulticast mode [ 569.859750][T10274] bridge_slave_0: entered promiscuous mode [ 569.960974][T10274] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.961306][T10274] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.961758][T10274] bridge_slave_1: entered allmulticast mode [ 570.016703][T10274] bridge_slave_1: entered promiscuous mode [ 570.088577][ T5803] usb 2-1: USB disconnect, device number 79 [ 570.289336][T10388] udevd[10388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.856098][T10274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.960580][T10274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.305558][T10274] team0: Port device team_slave_0 added [ 571.390056][T10450] netlink: 'syz.4.1275': attribute type 4 has an invalid length. [ 571.444618][T10454] netlink: 'syz.4.1275': attribute type 4 has an invalid length. [ 571.502368][T10274] team0: Port device team_slave_1 added [ 571.534911][ T6639] hsr_slave_0: left promiscuous mode [ 571.539436][ T6639] hsr_slave_1: left promiscuous mode [ 571.555326][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.577198][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.085217][ T6639] hsr_slave_0: left promiscuous mode [ 572.288962][ T6639] hsr_slave_1: left promiscuous mode [ 572.290527][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.290675][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.335979][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.336139][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.482285][ T6639] veth1_macvtap: left promiscuous mode [ 572.482722][ T6639] veth0_macvtap: left promiscuous mode [ 572.483574][ T6639] veth1_vlan: left promiscuous mode [ 572.484623][ T6639] veth0_vlan: left promiscuous mode [ 581.054758][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.056954][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.057903][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.096781][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.097741][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 582.187774][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 582.351636][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 583.207379][ T5612] Bluetooth: hci2: command tx timeout [ 585.273497][ T5612] Bluetooth: hci2: command tx timeout [ 587.353454][ T5612] Bluetooth: hci2: command tx timeout [ 589.439371][ T5612] Bluetooth: hci2: command tx timeout [ 590.466506][T10174] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.483954][T10174] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.488022][T10174] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.505322][T10174] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.720647][T10174] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 590.917544][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 590.958631][T10174] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 590.974646][T10174] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 591.039341][T10174] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 591.051224][T10174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 591.052283][T10174] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 591.189779][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 592.797267][ T5612] Bluetooth: hci5: command tx timeout [ 593.189951][ T5612] Bluetooth: hci6: command tx timeout [ 594.050802][T10274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.050817][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.050833][T10274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.312582][T10274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.312597][T10274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.312613][T10274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.872230][ T5612] Bluetooth: hci5: command tx timeout [ 595.466042][ T5612] Bluetooth: hci6: command tx timeout [ 596.953580][ T5612] Bluetooth: hci5: command tx timeout [ 597.196897][T10274] hsr_slave_0: entered promiscuous mode [ 597.209107][T10274] hsr_slave_1: entered promiscuous mode [ 597.216314][T10274] debugfs: 'hsr0' already exists in 'hsr' [ 597.216364][T10274] Cannot create hsr debugfs directory [ 597.564483][ T5612] Bluetooth: hci6: command tx timeout [ 599.039564][ T5612] Bluetooth: hci5: command tx timeout [ 599.590243][ T5612] Bluetooth: hci6: command tx timeout [ 602.154940][T10480] rxe_eth0 speed is unknown, defaulting to 1000 [ 602.677608][T10174] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.694842][T10174] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.695689][T10174] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.696350][T10174] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.696783][T10174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 603.275874][T10468] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.008123][T10485] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.274401][ T6639] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.567902][ T6639] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.635716][T10528] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.751424][ T6639] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.789322][ T5612] Bluetooth: hci0: command tx timeout [ 604.942568][ T6639] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.450416][T10480] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.450761][T10480] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.450880][T10480] bridge_slave_0: entered allmulticast mode [ 605.453924][T10480] bridge_slave_0: entered promiscuous mode [ 605.555458][T10480] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.555589][T10480] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.555720][T10480] bridge_slave_1: entered allmulticast mode [ 605.583841][T10480] bridge_slave_1: entered promiscuous mode [ 605.817542][T10480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.834120][T10480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.086327][T10480] team0: Port device team_slave_0 added [ 606.205208][ T6639] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.313911][T10480] team0: Port device team_slave_1 added [ 606.401601][ T6639] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.540500][T10480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.540516][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.540556][T10480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.620604][ T6639] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.727536][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.727604][T10468] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.727709][T10468] bridge_slave_0: entered allmulticast mode [ 606.752408][T10468] bridge_slave_0: entered promiscuous mode [ 606.764180][T10480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.764194][T10480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.764211][T10480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.869710][ T5612] Bluetooth: hci0: command tx timeout [ 606.911176][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.911318][T10468] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.911434][T10468] bridge_slave_1: entered allmulticast mode [ 606.914198][T10468] bridge_slave_1: entered promiscuous mode [ 607.069982][ T6639] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.182993][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.204666][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.393382][T10480] hsr_slave_0: entered promiscuous mode [ 607.394298][T10480] hsr_slave_1: entered promiscuous mode [ 607.396619][T10480] debugfs: 'hsr0' already exists in 'hsr' [ 607.396635][T10480] Cannot create hsr debugfs directory [ 607.428852][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.428920][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.446603][T10485] bridge_slave_0: entered allmulticast mode [ 607.459221][T10485] bridge_slave_0: entered promiscuous mode [ 607.471574][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.471684][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.471807][T10485] bridge_slave_1: entered allmulticast mode [ 607.476155][T10485] bridge_slave_1: entered promiscuous mode [ 607.524048][T10468] team0: Port device team_slave_0 added [ 607.701393][T10468] team0: Port device team_slave_1 added [ 607.842303][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.846748][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.915868][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.915882][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.915899][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.093620][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.093635][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.093652][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.211490][T10485] team0: Port device team_slave_0 added [ 608.215698][T10485] team0: Port device team_slave_1 added [ 608.407976][T10528] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.408066][T10528] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.408238][T10528] bridge_slave_0: entered allmulticast mode [ 608.436312][T10528] bridge_slave_0: entered promiscuous mode [ 608.511163][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.511178][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.511194][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.514871][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.514884][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.514901][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.515404][T10528] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.515466][T10528] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.515578][T10528] bridge_slave_1: entered allmulticast mode [ 608.518816][T10528] bridge_slave_1: entered promiscuous mode [ 608.699246][T10468] hsr_slave_0: entered promiscuous mode [ 608.700098][T10468] hsr_slave_1: entered promiscuous mode [ 608.702322][T10468] debugfs: 'hsr0' already exists in 'hsr' [ 608.702338][T10468] Cannot create hsr debugfs directory [ 608.793124][T10528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.950948][ T5612] Bluetooth: hci0: command tx timeout [ 609.044859][T10528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.155010][T10485] hsr_slave_0: entered promiscuous mode [ 609.157644][T10485] hsr_slave_1: entered promiscuous mode [ 609.158289][T10485] debugfs: 'hsr0' already exists in 'hsr' [ 609.158304][T10485] Cannot create hsr debugfs directory [ 609.398510][T10528] team0: Port device team_slave_0 added [ 609.481263][T10528] team0: Port device team_slave_1 added [ 609.633604][T10528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.633619][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.633635][T10528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.725281][T10528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.725296][T10528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.725313][T10528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.045612][T10480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 610.059789][T10480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.191394][T10528] hsr_slave_0: entered promiscuous mode [ 610.193999][T10528] hsr_slave_1: entered promiscuous mode [ 610.194679][T10528] debugfs: 'hsr0' already exists in 'hsr' [ 610.194695][T10528] Cannot create hsr debugfs directory [ 610.232453][T10480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 610.237453][T10480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.410989][T10480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 610.417890][T10480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.434418][T10480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 610.450457][T10480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.502531][ T6639] bridge_slave_1: left allmulticast mode [ 610.502552][ T6639] bridge_slave_1: left promiscuous mode [ 610.502724][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.528471][ T6639] bridge_slave_0: left allmulticast mode [ 610.528515][ T6639] bridge_slave_0: left promiscuous mode [ 610.528678][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.564635][ T6639] bridge_slave_1: left allmulticast mode [ 610.564664][ T6639] bridge_slave_1: left promiscuous mode [ 610.564828][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.572716][ T6639] bridge_slave_0: left allmulticast mode [ 610.572759][ T6639] bridge_slave_0: left promiscuous mode [ 610.572925][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.643429][ T6639] bridge_slave_1: left allmulticast mode [ 610.643452][ T6639] bridge_slave_1: left promiscuous mode [ 610.643619][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.647201][ T6639] bridge_slave_0: left allmulticast mode [ 610.647240][ T6639] bridge_slave_0: left promiscuous mode [ 610.647373][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.711308][ T6639] bridge_slave_1: left allmulticast mode [ 610.711364][ T6639] bridge_slave_1: left promiscuous mode [ 610.711514][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.714869][ T6639] bridge_slave_0: left allmulticast mode [ 610.714911][ T6639] bridge_slave_0: left promiscuous mode [ 610.715049][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.026820][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.028674][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.029116][ T5612] Bluetooth: hci0: command tx timeout [ 611.058578][ T6639] bond0 (unregistering): Released all slaves [ 611.182372][ T6639] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 611.206300][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.218076][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.230077][ T6639] bond0 (unregistering): Released all slaves [ 611.371812][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.390343][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.393286][ T6639] bond0 (unregistering): Released all slaves [ 611.437395][ T160] smbdirect: ib_dev[syz1] removed [ 611.550542][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.552434][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.553626][ T6639] bond0 (unregistering): Released all slaves [ 611.707140][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 611.732453][ T10] infiniband syz1: ib_query_port failed (-19) [ 612.531172][T10485] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 612.557425][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.573384][T10485] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 612.587914][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 612.627974][T10485] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 612.646620][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 612.662642][T10485] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 612.685292][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 612.752074][T10480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.895570][T10480] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.975694][T10468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 612.992279][T10468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.994015][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.994079][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.055955][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.056034][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.071225][T10468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 613.097739][T10468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.233226][T10468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 613.256737][T10468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.265395][T10468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 613.291810][T10468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.728000][T10485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.897918][T10485] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.933577][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.933644][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.995490][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.995568][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.285881][T10468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.451613][T10468] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.457244][T10528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.483927][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.516650][T10528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.538389][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.556566][T10528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.589186][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 614.613269][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.613336][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.643664][T10528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.666885][T10528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.732294][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.732362][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.339977][T10528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.457044][T10528] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.498043][T10055] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.498188][T10055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.551220][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.551296][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.762266][ T6639] hsr_slave_0: left promiscuous mode [ 615.766066][ T6639] hsr_slave_1: left promiscuous mode [ 615.766775][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.793777][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.837293][ T6639] hsr_slave_0: left promiscuous mode [ 615.845395][ T6639] hsr_slave_1: left promiscuous mode [ 615.846157][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.846181][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.871454][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.881580][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.914187][ T6639] hsr_slave_0: left promiscuous mode [ 615.914887][ T6639] hsr_slave_1: left promiscuous mode [ 615.915575][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.915589][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.917583][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.917598][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.978204][ T6639] hsr_slave_0: left promiscuous mode [ 615.987273][ T6639] hsr_slave_1: left promiscuous mode [ 615.996405][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.006841][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.073296][ T6639] veth1_macvtap: left promiscuous mode [ 616.073324][ T6639] veth0_macvtap: left promiscuous mode [ 616.073386][ T6639] veth1_vlan: left promiscuous mode [ 616.073450][ T6639] veth0_vlan: left promiscuous mode [ 616.076723][ T6639] veth1_macvtap: left promiscuous mode [ 616.076746][ T6639] veth0_macvtap: left promiscuous mode [ 616.076876][ T6639] veth1_vlan: left promiscuous mode [ 616.076941][ T6639] veth0_vlan: left promiscuous mode [ 616.707592][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 616.738139][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 617.320522][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 617.352667][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 617.973206][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 618.005443][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 618.515225][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 618.543997][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 618.715304][T10480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.202086][T10468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.243818][T10485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.323287][ T6639] bridge_slave_1: left allmulticast mode [ 620.323309][ T6639] bridge_slave_1: left promiscuous mode [ 620.323478][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.326815][ T6639] bridge_slave_0: left allmulticast mode [ 620.326833][ T6639] bridge_slave_0: left promiscuous mode [ 620.326976][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.671286][ T6639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.675895][ T6639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.677151][ T6639] bond0 (unregistering): Released all slaves [ 620.913787][T10480] veth0_vlan: entered promiscuous mode [ 620.983042][T10480] veth1_vlan: entered promiscuous mode [ 621.184058][T10480] veth0_macvtap: entered promiscuous mode [ 621.216676][T10480] veth1_macvtap: entered promiscuous mode [ 621.345365][T10480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.397034][T10480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.465240][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.498834][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.499999][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.500024][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.796066][ T6639] hsr_slave_0: left promiscuous mode [ 621.805695][ T6639] hsr_slave_1: left promiscuous mode [ 621.806420][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.823805][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.231280][ T6639] team0 (unregistering): Port device team_slave_1 removed [ 622.265519][ T6639] team0 (unregistering): Port device team_slave_0 removed [ 622.553883][T10528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.662071][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.662089][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.882705][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.882746][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.034099][T10485] veth0_vlan: entered promiscuous mode [ 623.054584][T10468] veth0_vlan: entered promiscuous mode [ 623.086818][T10485] veth1_vlan: entered promiscuous mode [ 623.095882][T10468] veth1_vlan: entered promiscuous mode [ 623.278400][T10468] veth0_macvtap: entered promiscuous mode [ 623.305389][T10485] veth0_macvtap: entered promiscuous mode [ 623.307369][T10468] veth1_macvtap: entered promiscuous mode [ 623.347361][T10485] veth1_macvtap: entered promiscuous mode [ 623.423613][T10485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.459844][T10468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.481066][T10485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.530594][ T155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.530681][ T155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.533855][T10468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.640462][ T6640] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.640499][ T6640] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.640522][ T6640] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.640543][ T6640] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.640589][ T6640] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.640611][ T6640] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.721016][T10811] FAULT_INJECTION: forcing a failure. [ 623.721016][T10811] name failslab, interval 1, probability 0, space 0, times 0 [ 623.721040][T10811] CPU: 0 UID: 0 PID: 10811 Comm: syz.7.1276 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.721058][T10811] Tainted: [L]=SOFTLOCKUP [ 623.721063][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 623.721071][T10811] Call Trace: [ 623.721076][T10811] [ 623.721083][T10811] dump_stack_lvl+0xe8/0x150 [ 623.721111][T10811] should_fail_ex+0x3eb/0x540 [ 623.721135][T10811] should_failslab+0xa8/0x100 [ 623.721153][T10811] __kmalloc_cache_noprof+0x9e/0x600 [ 623.721167][T10811] ? kernfs_fop_open+0x38c/0xd20 [ 623.721269][T10811] ? kernfs_fop_open+0x38c/0xd20 [ 623.721291][T10811] kernfs_fop_open+0x38c/0xd20 [ 623.721314][T10811] ? __pfx_kernfs_fop_open+0x10/0x10 [ 623.721331][T10811] do_dentry_open+0x80e/0x1360 [ 623.721360][T10811] vfs_open_consume+0x4a/0x350 [ 623.721375][T10811] ? path_openat+0x16e1/0x20f0 [ 623.721391][T10811] path_openat+0x16fc/0x20f0 [ 623.721416][T10811] do_file_open+0x23e/0x4a0 [ 623.721433][T10811] ? __pfx_do_file_open+0x10/0x10 [ 623.721461][T10811] ? _raw_spin_unlock+0x28/0x50 [ 623.721478][T10811] ? alloc_fd+0x6af/0x760 [ 623.721503][T10811] do_sys_openat2+0x115/0x200 [ 623.721520][T10811] ? __se_sys_futex+0x3a8/0x450 [ 623.721538][T10811] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.721558][T10811] ? rcu_is_watching+0x16/0xb0 [ 623.721585][T10811] __x64_sys_openat+0x138/0x170 [ 623.721605][T10811] do_syscall_64+0x166/0x520 [ 623.721622][T10811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.721636][T10811] ? clear_bhb_loop+0x70/0xc0 [ 623.721651][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.721663][T10811] RIP: 0033:0x7fbab599f559 [ 623.721676][T10811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.721687][T10811] RSP: 002b:00007fbab68d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 623.721702][T10811] RAX: ffffffffffffffda RBX: 00007fbab5c26090 RCX: 00007fbab599f559 [ 623.721712][T10811] RDX: 0000000000000042 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 623.721720][T10811] RBP: 00007fbab5a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 623.721728][T10811] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 623.721736][T10811] R13: 00007fbab5c26128 R14: 00007fbab5c26090 R15: 00007ffe7bf79b38 [ 623.721755][T10811] [ 624.315196][ T6640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.315214][ T6640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.442553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.442572][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.519302][ T277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.519320][ T277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.630513][ T277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.630555][ T277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.755339][T10528] veth0_vlan: entered promiscuous mode [ 624.793624][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.793676][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.834334][T10528] veth1_vlan: entered promiscuous mode [ 624.986531][T10528] veth0_macvtap: entered promiscuous mode [ 625.016051][T10528] veth1_macvtap: entered promiscuous mode [ 625.087410][T10528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.128103][T10528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.149111][ T200] hid_parser_main: 217 callbacks suppressed [ 625.149130][ T200] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 625.178412][ T200] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 625.258504][ T277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.258542][ T277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.258563][ T277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.258584][ T277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.448743][ T5754] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 625.604302][ T5754] usb 8-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 625.605315][ T5754] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.605369][ T5754] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.646402][ T5754] usb 8-1: config 0 descriptor?? [ 625.869338][ T5754] usbhid 8-1:0.0: can't add hid device: -71 [ 625.869437][ T5754] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 625.929820][ T277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.929839][ T277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.968451][ T5754] usb 8-1: USB disconnect, device number 2 [ 626.175802][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.175820][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.388451][ T5754] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 626.538041][ T2251] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 626.540346][ T5754] usb 8-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 626.542751][ T5754] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.542812][ T5754] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.593356][ T5754] usb 8-1: config 0 descriptor?? [ 626.617367][T10864] misc userio: Invalid payload size [ 626.639703][T10864] misc userio: Invalid payload size [ 626.689017][ T2251] usb 6-1: New USB device found: idVendor=0abf, idProduct=3370, bcdDevice=0.00 [ 626.690491][ T2251] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 626.690511][ T2251] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.690535][ T2251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.753333][T10858] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 626.773605][ T2251] i2c-diolan-u2c 6-1:1.0: Diolan U2C at USB bus 006 address 002 speed 100000 Hz [ 626.776433][ T2251] i2c-diolan-u2c 6-1:1.0: failed to initialize adapter [ 626.776498][ T2251] i2c-diolan-u2c 6-1:1.0: probe with driver i2c-diolan-u2c failed with error -71 [ 627.005540][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.005894][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.046787][ T2251] usb 6-1: USB disconnect, device number 2 [ 627.730184][ T5803] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 627.826982][T10891] xt_l2tp: missing protocol rule (udp|l2tpip) [ 627.879299][ T5803] usb 7-1: device descriptor read/64, error -71 [ 628.118688][ T5803] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 628.197808][ T2251] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 628.249288][ T5803] usb 7-1: device descriptor read/64, error -71 [ 628.347994][ T2251] usb 6-1: Using ep0 maxpacket: 8 [ 628.349748][ T2251] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 628.351335][ T2251] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 628.351395][ T2251] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 628.351409][ T2251] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 628.351423][ T2251] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 628.351436][ T2251] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.351463][ T2251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.379027][ T5803] usb usb7-port1: attempt power cycle [ 628.547084][ T5754] usbhid 8-1:0.0: can't add hid device: -71 [ 628.547195][ T5754] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 628.588371][ T5754] usb 8-1: USB disconnect, device number 3 [ 628.649574][T10905] netlink: 55 bytes leftover after parsing attributes in process `syz.8.1289'. [ 628.684903][T10905] netlink: 'syz.8.1289': attribute type 4 has an invalid length. [ 628.778541][ T5803] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 628.801484][ T5803] usb 7-1: device descriptor read/8, error -71 [ 629.037662][ T5803] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 629.060329][ T5803] usb 7-1: device descriptor read/8, error -71 [ 629.078338][ T5754] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 629.170154][ T5803] usb usb7-port1: unable to enumerate USB device [ 629.233500][ T5754] usb 8-1: Using ep0 maxpacket: 8 [ 629.233985][ T5754] usb 8-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 629.234867][ T5754] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 629.266086][ T5754] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 629.266107][ T5754] usb 8-1: Product: syz [ 629.266116][ T5754] usb 8-1: Manufacturer: syz [ 629.266124][ T5754] usb 8-1: SerialNumber: syz [ 629.295725][T10924] usbtmc 6-1:16.0: simple control status returned ad [ 629.355126][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 629.470449][ T10] usb 6-1: USB disconnect, device number 3 [ 629.540236][ T5754] usb 8-1: palm_os_3_probe - error -71 getting connection information [ 629.540296][ T5754] visor 8-1:1.0: probe with driver visor failed with error -71 [ 629.574639][ T5754] usb 8-1: USB disconnect, device number 4 [ 629.765392][T10934] netlink: 'syz.8.1293': attribute type 4 has an invalid length. [ 629.792135][T10934] netlink: 'syz.8.1293': attribute type 4 has an invalid length. [ 630.444897][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 630.490385][ T8603] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 630.637735][ T8603] usb 9-1: Using ep0 maxpacket: 8 [ 630.638381][ T8603] usb 9-1: New USB device found: idVendor=1b96, idProduct=000a, bcdDevice=0.00 [ 630.639324][ T8603] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.639343][ T8603] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 630.639358][ T8603] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.639373][ T8603] usb 9-1: config 0 interface 0 has no altsetting 0 [ 630.639393][ T8603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.711014][ T8603] usb 9-1: config 0 descriptor?? [ 630.712125][T10948] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 631.179538][ T8603] usbhid 9-1:0.0: can't add hid device: -71 [ 631.179620][ T8603] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 631.181633][ T8603] usb 9-1: USB disconnect, device number 2 [ 631.404894][T10977] misc userio: Invalid payload size [ 631.888505][T10987] misc userio: Invalid payload size [ 631.911157][T10987] FAULT_INJECTION: forcing a failure. [ 631.911157][T10987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.911205][T10987] CPU: 0 UID: 0 PID: 10987 Comm: syz.8.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.911223][T10987] Tainted: [L]=SOFTLOCKUP [ 631.911228][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 631.911236][T10987] Call Trace: [ 631.911241][T10987] [ 631.911247][T10987] dump_stack_lvl+0xe8/0x150 [ 631.911270][T10987] should_fail_ex+0x3eb/0x540 [ 631.911286][T10987] _copy_from_user+0x2d/0xb0 [ 631.911367][T10987] userio_char_write+0xc6/0x700 [ 631.911421][T10987] ? apparmor_file_permission+0x1fb/0x2b0 [ 631.911442][T10987] ? __pfx_userio_char_write+0x10/0x10 [ 631.911454][T10987] ? reuseport_array_delete_elem+0x120/0x240 [ 631.911472][T10987] ? security_file_permission+0x75/0x260 [ 631.911507][T10987] ? rw_verify_area+0x203/0x4c0 [ 631.911521][T10987] ? __pfx_userio_char_write+0x10/0x10 [ 631.911533][T10987] vfs_write+0x296/0xba0 [ 631.911552][T10987] ? __pfx_vfs_write+0x10/0x10 [ 631.911565][T10987] ? __fget_files+0x2a/0x420 [ 631.911577][T10987] ? __fget_files+0x3a2/0x420 [ 631.911588][T10987] ? __fget_files+0x2a/0x420 [ 631.911601][T10987] ? fdget+0x1ac/0x250 [ 631.911617][T10987] ksys_write+0x150/0x270 [ 631.911632][T10987] ? __pfx_ksys_write+0x10/0x10 [ 631.911652][T10987] do_syscall_64+0x166/0x520 [ 631.911669][T10987] ? trace_irq_disable+0x3b/0x140 [ 631.911682][T10987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.911694][T10987] ? clear_bhb_loop+0x70/0xc0 [ 631.911708][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.911720][T10987] RIP: 0033:0x7fcc4039f559 [ 631.911733][T10987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.911743][T10987] RSP: 002b:00007fcc412a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 631.911758][T10987] RAX: ffffffffffffffda RBX: 00007fcc40625fa0 RCX: 00007fcc4039f559 [ 631.911768][T10987] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 631.911775][T10987] RBP: 00007fcc412a9090 R08: 0000000000000000 R09: 0000000000000000 [ 631.911783][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.911791][T10987] R13: 00007fcc40626038 R14: 00007fcc40625fa0 R15: 00007ffcaec15978 [ 631.911810][T10987] [ 632.507175][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 632.555951][T11001] sg_write: data in/out 441308/186 bytes for SCSI command 0x0-- guessing data in; [ 632.555951][T11001] program syz.6.1308 not setting count and/or reply_len properly [ 632.686938][T11003] xt_l2tp: missing protocol rule (udp|l2tpip) [ 633.136039][T11015] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1313'. [ 633.142726][T11015] netlink: 'syz.5.1313': attribute type 4 has an invalid length. [ 633.545116][T11022] rxe_eth0 speed is unknown, defaulting to 1000 [ 633.826186][T11031] netlink: 'syz.6.1316': attribute type 4 has an invalid length. [ 633.859956][T11031] netlink: 'syz.6.1316': attribute type 4 has an invalid length. [ 634.019917][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16 [ 634.338469][ T5754] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 634.507399][ T5754] usb 7-1: Using ep0 maxpacket: 8 [ 634.511085][ T5754] usb 7-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 634.515243][ T5754] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 634.544884][ T5754] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 634.544904][ T5754] usb 7-1: Product: syz [ 634.544936][ T5754] usb 7-1: Manufacturer: syz [ 634.544945][ T5754] usb 7-1: SerialNumber: syz [ 634.796436][ T5754] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 634.796456][ T5754] usb 7-1: Handspring Visor / Palm OS: port 128, is for Debugger use [ 634.796468][ T5754] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 634.796479][ T5754] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 635.053275][ T5754] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 635.053352][ T5754] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 635.055733][ T5754] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 635.079855][ T5754] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 635.124800][ T5754] usb 7-1: USB disconnect, device number 6 [ 635.175486][ T5754] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 635.210208][ T5754] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 635.210726][ T5754] visor 7-1:1.0: device disconnected [ 636.208230][ T8603] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 636.358755][ T8603] usb 6-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 636.360275][ T8603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.385939][ T8603] usb 6-1: config 0 descriptor?? [ 636.439300][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 636.602457][ T5754] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 636.728446][ T5754] usb 9-1: device descriptor read/64, error -71 [ 636.983312][ T5754] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 637.131216][ T5754] usb 9-1: device descriptor read/64, error -71 [ 637.239018][ T5754] usb usb9-port1: attempt power cycle [ 637.590060][ T5754] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 637.629082][ T5754] usb 9-1: device descriptor read/8, error -71 [ 637.667934][ T8603] usb 6-1: Cannot set autoneg [ 637.668109][ T8603] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 637.699429][ T8603] usb 6-1: USB disconnect, device number 4 [ 637.865060][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 637.894888][ T5754] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 637.911236][ T5754] usb 9-1: device descriptor read/8, error -71 [ 638.017912][ T5754] usb usb9-port1: unable to enumerate USB device [ 638.036908][T11091] misc userio: Invalid payload size [ 638.455078][T11101] netlink: 'syz.6.1331': attribute type 2 has an invalid length. [ 638.489615][T11101] : entered promiscuous mode [ 638.523263][ T33] audit: type=1326 audit(1700000435.887:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11097 comm="syz.5.1330" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a259f559 code=0x0 [ 638.646074][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1330'. [ 638.661925][T11101] misc userio: Invalid payload size [ 639.024536][T11111] misc userio: Invalid payload size [ 639.037313][T11111] FAULT_INJECTION: forcing a failure. [ 639.037313][T11111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.037337][T11111] CPU: 0 UID: 0 PID: 11111 Comm: syz.6.1332 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.037354][T11111] Tainted: [L]=SOFTLOCKUP [ 639.037359][T11111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 639.037366][T11111] Call Trace: [ 639.037372][T11111] [ 639.037378][T11111] dump_stack_lvl+0xe8/0x150 [ 639.037404][T11111] should_fail_ex+0x3eb/0x540 [ 639.037420][T11111] _copy_to_user+0x31/0xb0 [ 639.037435][T11111] simple_read_from_buffer+0xe1/0x170 [ 639.037502][T11111] proc_fail_nth_read+0x1bb/0x230 [ 639.037550][T11111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.037568][T11111] ? rw_verify_area+0x24a/0x4c0 [ 639.037584][T11111] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.037599][T11111] vfs_read+0x213/0xa80 [ 639.037616][T11111] ? __pfx___mutex_lock+0x10/0x10 [ 639.037635][T11111] ? __pfx_vfs_read+0x10/0x10 [ 639.037649][T11111] ? __fget_files+0x2a/0x420 [ 639.037661][T11111] ? __fget_files+0x3a2/0x420 [ 639.037672][T11111] ? __fget_files+0x2a/0x420 [ 639.037686][T11111] ? fdget+0x1ac/0x250 [ 639.037702][T11111] ksys_read+0x150/0x270 [ 639.037716][T11111] ? __pfx_ksys_read+0x10/0x10 [ 639.037736][T11111] do_syscall_64+0x166/0x520 [ 639.037752][T11111] ? trace_irq_disable+0x3b/0x140 [ 639.037765][T11111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.037778][T11111] ? clear_bhb_loop+0x70/0xc0 [ 639.037792][T11111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.037804][T11111] RIP: 0033:0x7fdb6e55fd8e [ 639.037817][T11111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 639.037827][T11111] RSP: 002b:00007fdb6f484fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.037842][T11111] RAX: ffffffffffffffda RBX: 00007fdb6f4856c0 RCX: 00007fdb6e55fd8e [ 639.037852][T11111] RDX: 000000000000000f RSI: 00007fdb6f4850a0 RDI: 0000000000000004 [ 639.037860][T11111] RBP: 00007fdb6f485090 R08: 0000000000000000 R09: 0000000000000000 [ 639.037868][T11111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.037876][T11111] R13: 00007fdb6e826038 R14: 00007fdb6e825fa0 R15: 00007ffd5f9ddb78 [ 639.037896][T11111] [ 639.625723][T10958] Set syz0 is full, maxelem 65536 reached [ 639.678989][ T5273] 8021q: adding VLAN 0 to HW filter on device eth19 [ 639.777096][ T8603] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 639.826148][T11121] loop5: detected capacity change from 0 to 7 [ 639.839476][T11122] xt_l2tp: missing protocol rule (udp|l2tpip) [ 639.856736][T11121] Dev loop5: unable to read RDB block 7 [ 639.856767][T11121] loop5: unable to read partition table [ 639.871204][T11121] loop5: partition table beyond EOD, truncated [ 639.871246][T11121] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 639.928155][ T8603] usb 9-1: Using ep0 maxpacket: 8 [ 639.928921][ T8603] usb 9-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 639.929809][ T8603] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.929825][ T8603] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 639.929858][ T8603] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.931614][ T8603] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.931653][ T8603] usb 9-1: Product: syz [ 639.931662][ T8603] usb 9-1: Manufacturer: syz [ 639.931670][ T8603] usb 9-1: SerialNumber: syz [ 640.178520][T11125] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1337'. [ 640.200103][T11125] netlink: 'syz.7.1337': attribute type 4 has an invalid length. [ 640.409571][T11132] FAULT_INJECTION: forcing a failure. [ 640.409571][T11132] name fail_futex, interval 1, probability 0, space 0, times 0 [ 640.409599][T11132] CPU: 0 UID: 0 PID: 11132 Comm: syz.7.1339 Tainted: G L syzkaller #0 PREEMPT(full) [ 640.409620][T11132] Tainted: [L]=SOFTLOCKUP [ 640.409625][T11132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.409632][T11132] Call Trace: [ 640.409638][T11132] [ 640.409644][T11132] dump_stack_lvl+0xe8/0x150 [ 640.409667][T11132] should_fail_ex+0x3eb/0x540 [ 640.409683][T11132] get_futex_key+0x1ab/0x1410 [ 640.409705][T11132] ? __pfx_get_futex_key+0x10/0x10 [ 640.409726][T11132] futex_wake+0x119/0x5f0 [ 640.409741][T11132] ? __pfx_futex_wake+0x10/0x10 [ 640.409762][T11132] ? mm_exit_exec_release+0x20/0x290 [ 640.409802][T11132] do_futex+0x458/0x4e0 [ 640.409821][T11132] ? __pfx_do_futex+0x10/0x10 [ 640.409840][T11132] ? __might_fault+0xaf/0x130 [ 640.409914][T11132] mm_exit_exec_release+0x10d/0x290 [ 640.409936][T11132] exit_mm+0x50/0x240 [ 640.409956][T11132] do_exit+0x6a8/0x2360 [ 640.409979][T11132] ? __pfx_do_exit+0x10/0x10 [ 640.409998][T11132] ? do_raw_spin_lock+0x12b/0x2f0 [ 640.410021][T11132] do_group_exit+0x22d/0x2f0 [ 640.410038][T11132] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.410056][T11132] get_signal+0x1216/0x12c0 [ 640.410083][T11132] arch_do_signal_or_restart+0xbb/0x860 [ 640.410116][T11132] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 640.410144][T11132] exit_to_user_mode_loop+0x10e/0x770 [ 640.410158][T11132] ? rcu_is_watching+0x16/0xb0 [ 640.410175][T11132] do_syscall_64+0x328/0x520 [ 640.410191][T11132] ? trace_irq_disable+0x3b/0x140 [ 640.410205][T11132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.410218][T11132] ? clear_bhb_loop+0x70/0xc0 [ 640.410233][T11132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.410245][T11132] RIP: 0033:0x7fbab599f559 [ 640.410258][T11132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.410269][T11132] RSP: 002b:00007fbab68f30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 640.410284][T11132] RAX: fffffffffffffe00 RBX: 00007fbab5c25fa8 RCX: 00007fbab599f559 [ 640.410294][T11132] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbab5c25fa8 [ 640.410302][T11132] RBP: 00007fbab5c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 640.410311][T11132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.410319][T11132] R13: 00007fbab5c26038 R14: 00007ffe7bf79a50 R15: 00007ffe7bf79b38 [ 640.410339][T11132] [ 640.571162][ T5803] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 640.780510][ T5803] usb 7-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00 [ 640.781571][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.781592][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.782786][ T5803] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 640.782967][ T5803] usb 7-1: Manufacturer: syz [ 640.838609][ T5803] usb 7-1: config 0 descriptor?? [ 640.867286][ T8603] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 640.876007][ T8603] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 640.916763][T11137] netlink: 'syz.7.1340': attribute type 4 has an invalid length. [ 640.956119][T11137] netlink: 'syz.7.1340': attribute type 4 has an invalid length. [ 641.081911][ T8603] usb 9-1: USB disconnect, device number 7 [ 641.309863][T11146] udevd[11146]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.735444][T11157] ieee802154 phy0 wpan0: encryption failed: -22 [ 641.820880][ T5273] 8021q: adding VLAN 0 to HW filter on device eth20 [ 641.978244][ T5803] uclogic 0003:256C:006D.0013: v1 frame probing failed: -71 [ 641.978381][ T5803] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 641.978472][ T5803] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 642.022112][ T5803] usb 7-1: USB disconnect, device number 7 [ 642.437125][ T8603] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 642.458012][T10055] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.568836][ T8603] usb 6-1: device descriptor read/64, error -71 [ 642.597868][ T5803] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 642.748616][ T5803] usb 8-1: not running at top speed; connect to a high speed hub [ 642.748641][ T5803] usb 8-1: New USB device found: idVendor=112a, idProduct=0001, bcdDevice=18.70 [ 642.749636][ T5803] usb 8-1: config 134 has an invalid descriptor of length 37, skipping remainder of the config [ 642.749653][ T5803] usb 8-1: config 134 has 0 interfaces, different from the descriptor's value: 1 [ 642.756204][ T5803] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.756223][ T5803] usb 8-1: Product: syz [ 642.756231][ T5803] usb 8-1: Manufacturer: syz [ 642.756263][ T5803] usb 8-1: SerialNumber: syz [ 642.807261][ T8603] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 642.938262][ T8603] usb 6-1: device descriptor read/64, error -71 [ 643.047716][ T8603] usb usb6-port1: attempt power cycle [ 643.390989][ T8603] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 643.428993][ T8603] usb 6-1: device descriptor read/8, error -71 [ 643.625592][ T5273] 8021q: adding VLAN 0 to HW filter on device eth21 [ 643.666982][ T8603] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 643.692308][ T8603] usb 6-1: device descriptor read/8, error -71 [ 643.799924][ T8603] usb usb6-port1: unable to enumerate USB device [ 644.055198][T11194] syzkaller1: entered promiscuous mode [ 644.055242][T11194] syzkaller1: entered allmulticast mode [ 644.550429][T11205] misc userio: Invalid payload size [ 644.922557][T11211] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1354'. [ 644.973633][ T5273] 8021q: adding VLAN 0 to HW filter on device eth22 [ 645.118832][T11214] misc userio: Invalid payload size [ 645.690604][T11226] xt_l2tp: missing protocol rule (udp|l2tpip) [ 645.765962][T11228] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1359'. [ 645.804000][T11228] netlink: 'syz.5.1359': attribute type 4 has an invalid length. [ 645.979022][T11236] netlink: 'syz.8.1361': attribute type 4 has an invalid length. [ 645.984674][T11236] netlink: 'syz.8.1361': attribute type 4 has an invalid length. [ 646.767975][ T8603] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 646.772492][ T5273] 8021q: adding VLAN 0 to HW filter on device eth23 [ 646.922333][ T8603] usb 6-1: New USB device found: idVendor=07ab, idProduct=fc01, bcdDevice=41.75 [ 646.922364][ T8603] usb 6-1: too many configurations: 67, using maximum allowed: 8 [ 646.923393][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 646.923409][ T8603] usb 6-1: config 0 has no interface number 0 [ 646.923426][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 646.924674][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 646.924690][ T8603] usb 6-1: config 0 has no interface number 0 [ 646.924707][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 646.980161][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 646.980184][ T8603] usb 6-1: config 0 has no interface number 0 [ 646.980205][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 647.007958][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 647.007979][ T8603] usb 6-1: config 0 has no interface number 0 [ 647.008026][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 647.054411][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 647.054432][ T8603] usb 6-1: config 0 has no interface number 0 [ 647.054450][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 647.066047][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 647.066065][ T8603] usb 6-1: config 0 has no interface number 0 [ 647.066082][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 647.108691][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 647.108712][ T8603] usb 6-1: config 0 has no interface number 0 [ 647.108731][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 647.116305][ T8603] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 647.116351][ T8603] usb 6-1: config 0 has no interface number 0 [ 647.116587][ T8603] usb 6-1: config 0 interface 210 has no altsetting 0 [ 647.174017][ T8603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.174038][ T8603] usb 6-1: Product: syz [ 647.174047][ T8603] usb 6-1: Manufacturer: syz [ 647.174056][ T8603] usb 6-1: SerialNumber: syz [ 647.211469][ T8603] usb 6-1: config 0 descriptor?? [ 647.425405][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1369'. [ 647.447524][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1369'. [ 647.447552][T11262] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 647.482073][ T8603] ums-freecom 6-1:0.210: USB Mass Storage device detected [ 647.595155][ T8603] usb 6-1: USB disconnect, device number 9 [ 648.489793][T10853] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 648.636830][T10853] usb 6-1: Using ep0 maxpacket: 8 [ 648.637774][T10853] usb 6-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 648.638742][T10853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 648.640793][T10853] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 648.640818][T10853] usb 6-1: Product: syz [ 648.640827][T10853] usb 6-1: Manufacturer: syz [ 648.640835][T10853] usb 6-1: SerialNumber: syz [ 648.925682][T10853] usb 6-1: Invalid connection information received from device [ 648.972128][ T5273] 8021q: adding VLAN 0 to HW filter on device eth24 [ 649.046379][ T5803] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 649.147337][T10853] usb 6-1: USB disconnect, device number 10 [ 649.197749][ T5803] usb 9-1: Using ep0 maxpacket: 8 [ 649.198973][ T5803] usb 9-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 649.201551][ T5803] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 649.201593][ T5803] usb 9-1: config 0 has no interface number 0 [ 649.201618][ T5803] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 649.201632][ T5803] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 649.201646][ T5803] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 649.201660][ T5803] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 649.201779][ T5803] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.205522][ T5803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.205539][ T5803] usb 9-1: Product: syz [ 649.205548][ T5803] usb 9-1: Manufacturer: syz [ 649.205557][ T5803] usb 9-1: SerialNumber: syz [ 649.344170][ T5803] usb 9-1: config 0 descriptor?? [ 649.563033][ T5803] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 649.859091][ T8603] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 649.865879][T11314] xt_l2tp: missing protocol rule (udp|l2tpip) [ 650.008434][ T8603] usb 7-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 650.011541][ T8603] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.013890][ T8603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.013908][ T8603] usb 7-1: Product: syz [ 650.013918][ T8603] usb 7-1: Manufacturer: syz [ 650.013926][ T8603] usb 7-1: SerialNumber: syz [ 650.064855][ T8603] usb 7-1: config 0 descriptor?? [ 650.080900][T11317] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1380'. [ 650.098060][ T8603] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 650.136777][T11317] netlink: 'syz.5.1380': attribute type 4 has an invalid length. [ 650.287110][ T8603] usb 7-1: USB disconnect, device number 8 [ 650.513091][T11323] netlink: 'syz.5.1382': attribute type 4 has an invalid length. [ 650.542401][T11323] netlink: 'syz.5.1382': attribute type 4 has an invalid length. [ 651.721837][T10853] usb 9-1: USB disconnect, device number 8 [ 651.895284][ T5754] usb 8-1: USB disconnect, device number 5 [ 652.563514][T11370] misc userio: Invalid payload size [ 653.047975][ T5803] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 653.099043][T11385] xt_l2tp: missing protocol rule (udp|l2tpip) [ 653.141445][T11387] netlink: 55 bytes leftover after parsing attributes in process `syz.7.1401'. [ 653.141948][T11387] netlink: 'syz.7.1401': attribute type 4 has an invalid length. [ 653.176344][ T8603] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 653.200630][ T5803] usb 9-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 653.204953][ T5803] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.206656][ T5803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 653.206673][ T5803] usb 9-1: Product: syz [ 653.206682][ T5803] usb 9-1: Manufacturer: syz [ 653.283829][ T5803] usb 9-1: selecting invalid altsetting 1 [ 653.302311][ T5803] dvb_ttusb_budget: ttusb_init_controller: error [ 653.302373][ T5803] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 653.346496][ T8603] usb 6-1: Using ep0 maxpacket: 8 [ 653.347573][ T8603] usb 6-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 653.348501][ T8603] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 653.350360][ T8603] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 653.350376][ T8603] usb 6-1: Product: syz [ 653.350385][ T8603] usb 6-1: Manufacturer: syz [ 653.350393][ T8603] usb 6-1: SerialNumber: syz [ 653.462429][T11394] netlink: 'syz.7.1403': attribute type 4 has an invalid length. [ 653.488111][T11377] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 653.493070][T11394] netlink: 'syz.7.1403': attribute type 4 has an invalid length. [ 653.565699][ T5803] DVB: Unable to find symbol cx22700_attach() [ 653.648167][ T8603] usb 6-1: Invalid connection information received from device [ 653.759267][ T5803] DVB: Unable to find symbol tda10046_attach() [ 653.759280][ T5803] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 653.783024][ T5754] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 653.898985][T11381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.899507][T11381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.927769][ T5754] usb 7-1: device descriptor read/64, error -71 [ 654.058310][T11381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.058663][T11381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.119137][T11381] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1398'. [ 654.155829][T11381] PKCS7: Unsupported SignerInfo version [ 654.166864][ T5754] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 654.269515][T10853] usb 6-1: USB disconnect, device number 11 [ 654.296356][ T5754] usb 7-1: device descriptor read/64, error -71 [ 654.348019][ T8603] usb 9-1: USB disconnect, device number 9 [ 654.407061][ T5754] usb usb7-port1: attempt power cycle [ 654.687828][T10931] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 654.746019][ T5754] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 654.767937][ T5754] usb 7-1: device descriptor read/8, error -71 [ 654.837219][T10931] usb 8-1: Using ep0 maxpacket: 32 [ 654.838580][T10931] usb 8-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 654.839738][T10931] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 654.839754][T10931] usb 8-1: config 0 has no interface number 0 [ 654.839781][T10931] usb 8-1: config 0 interface 184 has no altsetting 0 [ 654.843040][T10931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.843055][T10931] usb 8-1: Product: syz [ 654.843064][T10931] usb 8-1: Manufacturer: syz [ 654.843073][T10931] usb 8-1: SerialNumber: syz [ 654.871718][T10931] usb 8-1: config 0 descriptor?? [ 655.017258][ T5754] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 655.040610][ T5754] usb 7-1: device descriptor read/8, error -71 [ 655.148948][ T5754] usb usb7-port1: unable to enumerate USB device [ 655.297919][ T5803] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 655.350504][T10931] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 655.350551][T10931] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 655.350563][T10931] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 655.350747][T10931] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 655.424513][T10931] usb 8-1: USB disconnect, device number 6 [ 655.476784][ T5803] usb 9-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 655.477976][ T5803] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 655.478042][ T5803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.532740][ T5803] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 655.574418][T11427] overlayfs: failed lookup in lower (newroot/44, name='file1', err=-40): overlapping layers [ 655.575075][T11427] overlayfs: failed lookup in lower (newroot/44, name='file1', err=-40): overlapping layers [ 656.408287][ T8603] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 656.542537][T11453] xt_l2tp: missing protocol rule (udp|l2tpip) [ 656.554282][ T5803] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 656.565876][ T8603] usb 8-1: Using ep0 maxpacket: 8 [ 656.566782][ T8603] usb 8-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 656.566806][ T8603] usb 8-1: too many configurations: 17, using maximum allowed: 8 [ 656.567715][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.568578][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.569487][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.570318][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.571695][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.574017][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.574872][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.591366][ T8603] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.591452][ T8603] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.705039][ T8603] usb 8-1: config 0 descriptor?? [ 656.725617][ T8603] rndis_host 8-1:0.0: rndis: master #0/ffff888052e21000 slave #1/0000000000000000 [ 656.746033][ T8603] cdc_acm 8-1:0.0: Zero length descriptor references [ 656.746077][ T8603] cdc_acm 8-1:0.0: probe with driver cdc_acm failed with error -22 [ 656.777980][ T5803] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 656.777998][ T5803] stv0680 9-1:4.0: last error: 86, command = 0x58 [ 656.814479][ T5803] usb 9-1: USB disconnect, device number 10 [ 656.935448][T11444] misc userio: Invalid payload size [ 656.978639][T11459] netlink: 55 bytes leftover after parsing attributes in process `syz.6.1421'. [ 656.999826][T11459] netlink: 'syz.6.1421': attribute type 4 has an invalid length. [ 657.067145][ T5803] usb 8-1: USB disconnect, device number 7 [ 657.149786][T11462] netlink: 'syz.6.1422': attribute type 4 has an invalid length. [ 657.180327][T11462] netlink: 'syz.6.1422': attribute type 4 has an invalid length. [ 657.641400][T11480] veth0: entered promiscuous mode [ 657.651126][ T5754] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 657.803595][ T5754] usb 9-1: Using ep0 maxpacket: 8 [ 657.804076][ T5754] usb 9-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 657.804941][ T5754] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 657.835558][ T5754] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 657.835578][ T5754] usb 9-1: Product: syz [ 657.835587][ T5754] usb 9-1: Manufacturer: syz [ 657.835596][ T5754] usb 9-1: SerialNumber: syz [ 657.886204][ T5803] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 658.036412][ T5803] usb 7-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 658.037269][ T5803] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.039870][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.039888][ T5803] usb 7-1: Product: syz [ 658.039897][ T5803] usb 7-1: Manufacturer: syz [ 658.039905][ T5803] usb 7-1: SerialNumber: syz [ 658.105435][ T5803] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 658.146897][ T5754] usb 9-1: Invalid connection information received from device [ 658.258275][T10931] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 658.364546][ T5754] usb 9-1: USB disconnect, device number 11 [ 658.409097][T10931] usb 8-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00 [ 658.410913][T10931] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 658.410935][T10931] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 658.410958][T10931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.474486][T11498] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 659.704093][T11535] xt_l2tp: missing protocol rule (udp|l2tpip) [ 659.736164][T10853] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 659.832944][T11540] netlink: 55 bytes leftover after parsing attributes in process `syz.8.1440'. [ 659.834117][T11540] netlink: 'syz.8.1440': attribute type 4 has an invalid length. [ 659.887438][T10853] usb 6-1: New USB device found: idVendor=1df7, idProduct=2500, bcdDevice=1.00 [ 659.890774][T10853] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.890841][T10853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.897306][T10931] pegasus 8-1:1.0: probe with driver pegasus failed with error -71 [ 659.973862][T10931] usb 8-1: USB disconnect, device number 8 [ 660.444599][T10853] msi2500 6-1:1.0: Registered as swradio24 [ 660.444625][T10853] msi2500 6-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 660.474021][T10853] usb 6-1: USB disconnect, device number 12 [ 660.644044][T11503] syz.6.1429 (11503) used greatest stack depth: 19296 bytes left [ 660.691837][T11554] netlink: 'syz.7.1442': attribute type 4 has an invalid length. [ 660.708525][T11554] netlink: 'syz.7.1442': attribute type 4 has an invalid length. [ 660.841195][ T5803] gspca_mr97310a: reg read [21] error -71 [ 660.841255][ T5803] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -71 [ 660.894050][T11506] veth0: left promiscuous mode [ 660.903773][ T5803] usb 7-1: USB disconnect, device number 13 [ 661.146801][ T87] IPVS: starting estimator thread 0... [ 661.244899][T11563] IPVS: using max 51 ests per chain, 122400 per kthread [ 661.376592][T10853] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 661.419673][T10853] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 662.303057][T11569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1447'. [ 662.517902][T11589] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1450'. [ 663.116410][T10819] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 663.279764][T10819] usb 7-1: unable to get BOS descriptor or descriptor too short [ 663.279800][T10819] usb 7-1: New USB device found: idVendor=0e41, idProduct=4159, bcdDevice=0.40 [ 663.281337][T10819] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 663.320421][T10819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.320466][T10819] usb 7-1: Product: syz [ 663.320475][T10819] usb 7-1: Manufacturer: syz [ 663.320484][T10819] usb 7-1: SerialNumber: syz [ 663.340356][T10931] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 663.393695][T11610] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1456'. [ 663.393886][T11611] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1456'. [ 663.506130][T10931] usb 8-1: device descriptor read/64, error -71 [ 663.745591][T10931] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 663.876051][T10931] usb 8-1: device descriptor read/64, error -71 [ 663.932939][T10819] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.933032][T10819] usb 7-1: MIDIStreaming interface descriptor not found [ 663.988300][T10931] usb usb8-port1: attempt power cycle [ 664.335625][T10931] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 664.358942][T10931] usb 8-1: device descriptor read/8, error -71 [ 664.437087][T10819] usb 7-1: USB disconnect, device number 14 [ 664.582107][T10840] udevd[10840]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.604490][T10931] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 664.628660][T10931] usb 8-1: device descriptor read/8, error -71 [ 664.736545][T10931] usb usb8-port1: unable to enumerate USB device [ 665.068054][T11633] xt_l2tp: missing protocol rule (udp|l2tpip) [ 665.145624][T10819] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 665.252350][T11637] netlink: 55 bytes leftover after parsing attributes in process `syz.8.1461'. [ 665.279560][T11637] netlink: 'syz.8.1461': attribute type 4 has an invalid length. [ 665.316773][T10819] usb 7-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 665.320226][T10819] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 665.320247][T10819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.320259][T10819] usb 7-1: config 0 has no interface number 0 [ 665.364644][T10819] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 665.364664][T10819] usb 7-1: Product: syz [ 665.364673][T10819] usb 7-1: Manufacturer: syz [ 665.364682][T10819] usb 7-1: SerialNumber: syz [ 665.398723][T10819] usb 7-1: config 0 descriptor?? [ 665.529385][T10819] comedi comedi5: Wrong number of endpoints [ 665.529428][T10819] ni6501 7-1:0.238: driver 'ni6501' failed to auto-configure device. [ 665.532883][T11644] netlink: 'syz.8.1463': attribute type 4 has an invalid length. [ 665.579745][T11644] netlink: 'syz.8.1463': attribute type 4 has an invalid length. [ 665.627570][T11630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.627900][T11630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.669202][T11630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 665.669556][T11630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 665.705024][T10819] usb 7-1: USB disconnect, device number 15 [ 665.712752][ T200] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 665.875781][ T200] usb 6-1: Using ep0 maxpacket: 16 [ 665.876505][ T200] usb 6-1: New USB device found: idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 665.877381][ T200] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 665.877397][ T200] usb 6-1: config 0 has no interface number 0 [ 665.877423][ T200] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 665.877438][ T200] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 665.879200][ T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.879237][ T200] usb 6-1: Product: syz [ 665.879247][ T200] usb 6-1: Manufacturer: syz [ 665.879255][ T200] usb 6-1: SerialNumber: syz [ 665.904038][ T200] usb 6-1: config 0 descriptor?? [ 665.983751][ T200] cypress_m8 6-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 666.004047][ T200] nokiaca42v2 ttyUSB0: probe with driver nokiaca42v2 failed with error -22 [ 666.171561][T10819] usb 6-1: USB disconnect, device number 13 [ 666.204080][T10819] cypress_m8 6-1:0.35: device disconnected [ 666.358166][T11660] afs: Bad value for 'flock' [ 666.400708][T11660] misc userio: Invalid payload size [ 666.734820][T11663] fuse: Bad value for 'fd' [ 667.324802][T11685] tc_dump_action: action bad kind [ 667.337522][T10853] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 667.501676][T10853] usb 6-1: Using ep0 maxpacket: 32 [ 667.513563][T10853] usb 6-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 667.524785][T10853] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 667.524845][T10853] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 667.524862][T10853] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.524877][T10853] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 667.524890][T10853] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 667.597382][T10853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.597403][T10853] usb 6-1: Product: syz [ 667.597411][T10853] usb 6-1: Manufacturer: syz [ 667.597420][T10853] usb 6-1: SerialNumber: syz [ 667.644254][T10853] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 667.644370][T10853] imon 6-1:155.0: unable to initialize intf0, err -90 [ 667.843007][T10853] usb 6-1: USB disconnect, device number 14 [ 668.227092][T10174] Bluetooth: hci1: command 0x1003 tx timeout [ 668.227198][ T5612] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 668.292828][ T5612] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 668.322998][T11700] nvme_fabrics: missing parameter 'nqn=%s' [ 668.506463][T11711] xt_l2tp: missing protocol rule (udp|l2tpip) [ 668.600626][T11714] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 28 [ 668.663514][T11721] netlink: 55 bytes leftover after parsing attributes in process `syz.8.1481'. [ 668.700447][T11721] netlink: 'syz.8.1481': attribute type 4 has an invalid length. [ 668.844208][T11727] netlink: 'syz.5.1482': attribute type 4 has an invalid length. [ 668.844885][T11727] netlink: 'syz.5.1482': attribute type 4 has an invalid length. [ 669.211824][T11742] misc userio: Invalid payload size [ 669.213555][T11742] misc userio: Invalid payload size [ 669.228068][T11742] misc userio: The device must be registered before sending interrupts [ 669.250361][T11742] 9p: Bad value for 'rfdno' [ 669.250752][T11742] misc userio: The device must be registered before sending interrupts [ 669.305264][ T8603] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 669.456106][ T8603] usb 6-1: Using ep0 maxpacket: 8 [ 669.456758][ T8603] usb 6-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 669.457822][ T8603] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 669.459841][ T8603] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 669.459857][ T8603] usb 6-1: Product: syz [ 669.459865][ T8603] usb 6-1: Manufacturer: syz [ 669.459874][ T8603] usb 6-1: SerialNumber: syz [ 669.581588][T11741] rxe_eth0 speed is unknown, defaulting to 1000 [ 669.743600][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.744034][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.783436][ T8603] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 669.783456][ T8603] usb 6-1: Handspring Visor / Palm OS: port 128, is for Debugger use [ 669.783468][ T8603] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 669.783479][ T8603] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 669.993316][ T8603] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 669.993396][ T8603] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 670.019499][ T8603] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 670.056599][ T8603] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 670.081105][ T8603] usb 6-1: USB disconnect, device number 15 [ 670.101491][ T8603] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 670.137069][ T8603] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 670.141306][ T8603] visor 6-1:1.0: device disconnected [ 670.846704][T10931] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 670.996387][T10931] usb 7-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 670.996442][T10931] usb 7-1: too many configurations: 40, using maximum allowed: 8 [ 671.006461][T10931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.006482][T10931] usb 7-1: Product: syz [ 671.006491][T10931] usb 7-1: Manufacturer: syz [ 671.006500][T10931] usb 7-1: SerialNumber: syz [ 671.593434][T11766] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 672.308250][ T5612] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 672.308330][ T5612] Bluetooth: hci0: Injecting HCI hardware error event [ 672.310164][T10174] Bluetooth: hci0: hardware error 0x00 [ 672.688793][T11811] xt_l2tp: missing protocol rule (udp|l2tpip) [ 672.748764][T10853] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 672.840644][T11814] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1500'. [ 672.841414][T11814] netlink: 'syz.5.1500': attribute type 4 has an invalid length. [ 672.898706][T10853] usb 9-1: Using ep0 maxpacket: 16 [ 672.902705][T10853] usb 9-1: unable to get BOS descriptor or descriptor too short [ 672.902738][T10853] usb 9-1: New USB device found: idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 672.904110][T10853] usb 9-1: config index 0 descriptor too short (expected 82, got 18) [ 672.944110][T10853] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.944131][T10853] usb 9-1: Product: syz [ 672.944139][T10853] usb 9-1: Manufacturer: syz [ 672.944148][T10853] usb 9-1: SerialNumber: syz [ 673.066290][T11823] netlink: 'syz.5.1502': attribute type 4 has an invalid length. [ 673.090427][T11823] netlink: 'syz.5.1502': attribute type 4 has an invalid length. [ 673.550106][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 673.550144][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 673.550158][T10931] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 673.554636][T10931] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 673.656861][T10931] usb 7-1: USB disconnect, device number 16 [ 673.787172][T11839] comedi comedi3: pcm3724: I/O base address or length out of range [ 673.895804][T10853] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 674.039564][T11849] misc userio: Invalid payload size [ 674.174477][ T6640] Bluetooth: hci1: Frame reassembly failed (-90) [ 674.183115][T11808] Bluetooth: hci1: Frame reassembly failed (-84) [ 674.183814][T11808] Bluetooth: hci1: Frame reassembly failed (-84) [ 674.184061][T11808] Bluetooth: hci1: Frame reassembly failed (-84) [ 674.191788][T11808] Bluetooth: hci1: Frame reassembly failed (-84) [ 674.275053][T10931] psmouse serio18: Failed to reset mouse on : -5 [ 674.384990][T10174] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 674.727635][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 674.879686][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 674.880341][ T10] usb 6-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 674.881182][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 674.890281][ T10] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 674.890332][ T10] usb 6-1: Product: syz [ 674.890341][ T10] usb 6-1: Manufacturer: syz [ 674.890350][ T10] usb 6-1: SerialNumber: syz [ 675.150498][ T10] usb 6-1: Invalid connection information received from device [ 675.356902][ T10] usb 6-1: USB disconnect, device number 16 [ 676.146156][ T5612] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 676.209028][T10853] usb 9-1: unable to get BOS descriptor or descriptor too short [ 676.234090][T11903] netlink: 'syz.7.1516': attribute type 10 has an invalid length. [ 676.287264][T10853] usb 9-1: device firmware changed [ 676.312778][T11904] netlink: 'syz.7.1516': attribute type 10 has an invalid length. [ 676.335900][T10853] usb 9-1: USB disconnect, device number 12 [ 676.383927][T11903] team0: Port device dummy0 added [ 676.448135][T11904] team0: Port device dummy0 removed [ 676.511632][T11911] xt_l2tp: missing protocol rule (udp|l2tpip) [ 676.665175][T11900] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 676.708497][T11920] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1520'. [ 676.712434][T11920] netlink: 'syz.5.1520': attribute type 4 has an invalid length. [ 676.820412][T11900] usb 8-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 676.836948][T11900] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.849531][T11900] usb 8-1: config 0 descriptor?? [ 676.915246][T11925] netlink: 'syz.8.1521': attribute type 4 has an invalid length. [ 676.936521][T11925] netlink: 'syz.8.1521': attribute type 4 has an invalid length. [ 677.098194][T11930] FAULT_INJECTION: forcing a failure. [ 677.098194][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 677.098221][T11930] CPU: 0 UID: 0 PID: 11930 Comm: syz.8.1523 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.098239][T11930] Tainted: [L]=SOFTLOCKUP [ 677.098244][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 677.098252][T11930] Call Trace: [ 677.098258][T11930] [ 677.098265][T11930] dump_stack_lvl+0xe8/0x150 [ 677.098288][T11930] should_fail_ex+0x3eb/0x540 [ 677.098304][T11930] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 677.098376][T11930] should_failslab+0xa8/0x100 [ 677.098394][T11930] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 677.098406][T11930] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 677.098427][T11930] ? bdev_alloc_inode+0x29/0x90 [ 677.098439][T11930] ? bdev_alloc_inode+0x29/0x90 [ 677.098455][T11930] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 677.098467][T11930] bdev_alloc_inode+0x29/0x90 [ 677.098480][T11930] alloc_inode+0x6a/0x1b0 [ 677.098525][T11930] new_inode+0x1f/0x170 [ 677.098536][T11930] ? bdev_alloc+0x18/0x370 [ 677.098549][T11930] bdev_alloc+0x24/0x370 [ 677.098563][T11930] __alloc_disk_node+0x11f/0x600 [ 677.098597][T11930] __blk_alloc_disk+0x105/0x1d0 [ 677.098616][T11930] ? __pfx___blk_alloc_disk+0x10/0x10 [ 677.098647][T11930] ? __raw_spin_lock_init+0x45/0x100 [ 677.098665][T11930] dm_create+0x476/0xf70 [ 677.098721][T11930] dev_create+0x1f7/0x400 [ 677.098756][T11930] ? __pfx_dev_create+0x10/0x10 [ 677.098773][T11930] ? __might_fault+0xaf/0x130 [ 677.098793][T11930] dm_ctl_ioctl+0x9ec/0xe10 [ 677.098817][T11930] ? __pfx_dev_create+0x10/0x10 [ 677.098834][T11930] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 677.098870][T11930] ? __fget_files+0x2a/0x420 [ 677.098885][T11930] ? bpf_lsm_file_ioctl+0x9/0x20 [ 677.098899][T11930] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 677.098916][T11930] __se_sys_ioctl+0xfc/0x170 [ 677.098934][T11930] do_syscall_64+0x166/0x520 [ 677.098951][T11930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.098963][T11930] ? clear_bhb_loop+0x70/0xc0 [ 677.098977][T11930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.098989][T11930] RIP: 0033:0x7fcc4039f559 [ 677.099002][T11930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.099014][T11930] RSP: 002b:00007fcc412a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.099030][T11930] RAX: ffffffffffffffda RBX: 00007fcc40625fa0 RCX: 00007fcc4039f559 [ 677.099039][T11930] RDX: 0000200000000640 RSI: 00000000c138fd03 RDI: 0000000000000006 [ 677.099047][T11930] RBP: 00007fcc40436b20 R08: 0000000000000000 R09: 0000000000000000 [ 677.099055][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.099062][T11930] R13: 00007fcc40626038 R14: 00007fcc40625fa0 R15: 00007ffcaec15978 [ 677.099082][T11930] [ 677.277861][T10853] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 677.525204][T10853] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 677.526112][T10853] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 677.526132][T10853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 677.526147][T10853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 677.526160][T10853] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 677.526184][T10853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.531251][T10853] usb 6-1: config 0 descriptor?? [ 677.959368][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959395][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959411][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959426][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959467][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959482][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959497][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959512][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959527][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 677.959549][T10853] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 678.069192][T10853] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 678.070738][T11900] usb 8-1: Cannot set autoneg [ 678.070906][T11900] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 678.088786][T10931] misc userio: Buffer overflowed, userio client isn't keeping up [ 678.370371][T11952] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 678.452880][T10853] usb 6-1: USB disconnect, device number 17 [ 679.139431][T10931] input: PS/2 Generic Mouse as /devices/serio18/input/input33 [ 679.379145][T10931] psmouse serio18: Failed to enable mouse on [ 679.532461][T10931] usb 8-1: USB disconnect, device number 13 [ 680.018140][T10931] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 680.044941][T11900] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 680.169092][T10931] usb 9-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 680.171825][T10931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.171845][T10931] usb 9-1: Product: syz [ 680.171854][T10931] usb 9-1: Manufacturer: syz [ 680.171863][T10931] usb 9-1: SerialNumber: syz [ 680.236691][T11900] usb 7-1: Using ep0 maxpacket: 8 [ 680.239773][T11900] usb 7-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 680.250947][T11900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 680.277667][T11900] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 680.277688][T11900] usb 7-1: Product: syz [ 680.277697][T11900] usb 7-1: Manufacturer: syz [ 680.277705][T11900] usb 7-1: SerialNumber: syz [ 680.342034][ T200] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 680.587754][T11900] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 680.587774][T11900] usb 7-1: Handspring Visor / Palm OS: port 128, is for unknown use [ 680.587834][T11900] usb 7-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 680.587845][T11900] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 680.671702][T12008] xt_l2tp: missing protocol rule (udp|l2tpip) [ 680.800716][T11900] usb 7-1: palm_os_3_probe - error -71 getting bytes available request [ 680.800769][T11900] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 680.835843][T11900] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 680.878997][T11900] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 684.047525][ T200] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 684.047651][ T200] ath9k_htc: Failed to initialize the device [ 686.358650][ C0] sched: DL replenish lagged too much [ 699.142845][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.143873][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.763334][T10174] Bluetooth: hci2: command 0x0406 tx timeout [ 747.717149][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.720604][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.047648][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 787.054723][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12019/1:b..l.. P12015/3:b..l.. P12017/1:b..l.. [ 787.067420][ C0] rcu: (detected by 0, t=10502 jiffies, g=153701, q=1364 ncpus=1) [ 787.075391][ C0] task:modprobe state:R running task stack:23560 pid:12017 tgid:12017 ppid:155 task_flags:0x400000 flags:0x00080000 [ 787.089292][ C0] Call Trace: [ 787.092652][ C0] [ 787.095580][ C0] __schedule+0x17dd/0x5830 [ 787.100104][ C0] ? __lock_acquire+0x747/0x2de0 [ 787.105060][ C0] ? __pfx___schedule+0x10/0x10 [ 787.109939][ C0] ? __lock_acquire+0x747/0x2de0 [ 787.114995][ C0] preempt_schedule_irq+0x4b/0x90 [ 787.120126][ C0] irqentry_exit+0x14f/0x9b0 [ 787.124906][ C0] ? trace_irq_disable+0x3b/0x140 [ 787.129935][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.136011][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 787.141358][ C0] Code: d2 40 13 00 00 00 00 eb b5 e8 0b f1 69 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 13 8b 40 13 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d e8 1c 1d [ 787.161156][ C0] RSP: 0018:ffffc900056d71c8 EFLAGS: 00000282 [ 787.167356][ C0] RAX: 5528065355fbcb00 RBX: 0000000000000206 RCX: 0000000000000046 [ 787.175450][ C0] RDX: ffffc900056d7201 RSI: ffffffff8ea4b2ee RDI: ffffffff8c8fe680 [ 787.183532][ C0] RBP: ffff88807ca2ca58 R08: ffffc900056d7618 R09: 0000000000000000 [ 787.191525][ C0] R10: ffffc900056d72f8 R11: fffff52000adae61 R12: 0000000000000001 [ 787.199604][ C0] R13: 0000000000000001 R14: ffffffff9015a4a0 R15: ffff88807ca2be80 [ 787.207704][ C0] ? unwind_next_frame+0x8f/0x2550 [ 787.212942][ C0] unwind_next_frame+0x1baa/0x2550 [ 787.218089][ C0] ? kasan_save_track+0x3e/0x80 [ 787.223054][ C0] ? unwind_next_frame+0x8f/0x2550 [ 787.228190][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 787.233822][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 787.239994][ C0] arch_stack_walk+0x11b/0x150 [ 787.245025][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 787.250072][ C0] ? vm_area_dup+0x28/0x760 [ 787.254775][ C0] stack_trace_save+0xa9/0x100 [ 787.259561][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 787.265204][ C0] ? __lock_acquire+0x747/0x2de0 [ 787.270154][ C0] kasan_save_track+0x3e/0x80 [ 787.274826][ C0] ? kasan_save_track+0x3e/0x80 [ 787.279718][ C0] __kasan_slab_alloc+0x6c/0x80 [ 787.284598][ C0] kmem_cache_alloc_noprof+0x2b4/0x600 [ 787.290060][ C0] ? vm_area_dup+0x28/0x760 [ 787.294660][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 787.300390][ C0] ? vm_area_dup+0x28/0x760 [ 787.305003][ C0] vm_area_dup+0x28/0x760 [ 787.309615][ C0] ? __split_vma+0x1be/0xa90 [ 787.314403][ C0] __split_vma+0x1d7/0xa90 [ 787.318850][ C0] ? __pfx___split_vma+0x10/0x10 [ 787.324420][ C0] ? page_table_check_set+0x1a4/0x590 [ 787.330193][ C0] ? page_table_check_set+0x1a4/0x590 [ 787.335962][ C0] ? can_vma_merge_left+0x15f/0x510 [ 787.342077][ C0] vma_modify+0xa3f/0x1c50 [ 787.346691][ C0] vma_modify_flags+0x2a4/0x3c0 [ 787.351555][ C0] ? __pfx_vma_modify_flags+0x10/0x10 [ 787.357314][ C0] ? mprotect_fixup+0x102/0xda0 [ 787.362253][ C0] mprotect_fixup+0x539/0xda0 [ 787.366971][ C0] ? __pfx_mprotect_fixup+0x10/0x10 [ 787.372165][ C0] ? mas_next_slot+0xc91/0xd70 [ 787.377036][ C0] ? apparmor_file_mprotect+0x2eb/0x3a0 [ 787.382588][ C0] do_mprotect_pkey+0x8e7/0xd40 [ 787.387448][ C0] ? handle_mm_fault+0xee/0x3540 [ 787.392420][ C0] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 787.397826][ C0] ? do_user_addr_fault+0xd3f/0x1480 [ 787.403144][ C0] __x64_sys_mprotect+0x80/0x90 [ 787.407996][ C0] do_syscall_64+0x166/0x520 [ 787.412599][ C0] ? trace_irq_disable+0x3b/0x140 [ 787.417616][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.423772][ C0] ? clear_bhb_loop+0x70/0xc0 [ 787.428455][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.434519][ C0] RIP: 0033:0x7f4b69d4f2c7 [ 787.438934][ C0] RSP: 002b:00007ffd713ab3f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 787.447356][ C0] RAX: ffffffffffffffda RBX: 00007f4b69a266b0 RCX: 00007f4b69d4f2c7 [ 787.455437][ C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f4b69a1a000 [ 787.463442][ C0] RBP: 00007ffd713ab6c0 R08: 0000000000000000 R09: 00007f4b69ab92e0 [ 787.471428][ C0] R10: 00007f4b69a266b0 R11: 0000000000000206 R12: 0000000000000038 [ 787.479411][ C0] R13: 000001633d40869f R14: 0000000000000000 R15: 00007f4b69d63310 [ 787.487562][ C0] [ 787.490654][ C0] task:modprobe state:R running task stack:23080 pid:12015 tgid:12015 ppid:6639 task_flags:0x400000 flags:0x00080000 [ 787.505029][ C0] Call Trace: [ 787.508324][ C0] [ 787.511530][ C0] __schedule+0x17dd/0x5830 [ 787.516165][ C0] ? lock_acquire+0x115/0x350 [ 787.520919][ C0] ? __pfx___schedule+0x10/0x10 [ 787.525950][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 787.531000][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 787.536373][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 787.541743][ C0] preempt_schedule_common+0x7f/0xd0 [ 787.547040][ C0] preempt_schedule_thunk+0x16/0x40 [ 787.552278][ C0] _raw_spin_unlock+0x41/0x50 [ 787.557077][ C0] filemap_map_pages+0x1aba/0x2170 [ 787.562661][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 787.567883][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 787.573572][ C0] ? lock_acquire+0x115/0x350 [ 787.578772][ C0] ? lock_acquire+0x115/0x350 [ 787.583744][ C0] ? do_pte_missing+0x139f/0x3570 [ 787.588874][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 787.594412][ C0] ? do_pte_missing+0x139f/0x3570 [ 787.599549][ C0] do_pte_missing+0x2067/0x3570 [ 787.604547][ C0] ? handle_mm_fault+0xee/0x3540 [ 787.609616][ C0] handle_mm_fault+0x1a2a/0x3540 [ 787.614577][ C0] ? handle_mm_fault+0xee/0x3540 [ 787.619553][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 787.625025][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 787.630290][ C0] do_user_addr_fault+0xb35/0x1480 [ 787.635457][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 787.640856][ C0] exc_page_fault+0x6a/0xc0 [ 787.645413][ C0] asm_exc_page_fault+0x26/0x30 [ 787.650387][ C0] RIP: 0033:0x7f9361096a55 [ 787.654835][ C0] RSP: 002b:00007ffd44fe9a88 EFLAGS: 00010287 [ 787.660925][ C0] RAX: 00000000ffffffc6 RBX: 0000556037aa0000 RCX: 00000000000003f0 [ 787.669086][ C0] RDX: 0000000000000000 RSI: 00007f93611b63f0 RDI: 00007ffd44feafa6 [ 787.677260][ C0] RBP: 00007ffd44fe9bd8 R08: 0000000000000000 R09: 00007f93611eda60 [ 787.685280][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.693279][ C0] R13: 00007ffd44fe9c00 R14: 00007f936121e000 R15: 0000556037aa1d98 [ 787.701282][ C0] [ 787.704431][ C0] task:sed state:R running task stack:25240 pid:12019 tgid:12019 ppid:12016 task_flags:0x400000 flags:0x00080000 [ 787.717941][ C0] Call Trace: [ 787.721234][ C0] [ 787.724166][ C0] __schedule+0x17dd/0x5830 [ 787.728746][ C0] ? __lock_acquire+0x747/0x2de0 [ 787.733694][ C0] ? __lock_acquire+0x747/0x2de0 [ 787.738731][ C0] ? __lock_acquire+0x747/0x2de0 [ 787.743678][ C0] ? __pfx___schedule+0x10/0x10 [ 787.748761][ C0] ? __lock_acquire+0x747/0x2de0 [ 787.753731][ C0] preempt_schedule_irq+0x4b/0x90 [ 787.758791][ C0] irqentry_exit+0x14f/0x9b0 [ 787.763488][ C0] ? trace_irq_disable+0x3b/0x140 [ 787.768885][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.775086][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 787.780395][ C0] Code: ff ff ff e8 a0 23 6a 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 bd 40 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf 36 6d 0a cc 48 8d 3d 07 4c 1d [ 787.800260][ C0] RSP: 0018:ffffc900056e6a60 EFLAGS: 00000296 [ 787.806439][ C0] RAX: 1e3c4b291cf31400 RBX: 0000000000000000 RCX: 0000000000000046 [ 787.814909][ C0] RDX: 000000009deb220d RSI: ffffffff8ea4b2ee RDI: ffffffff8c8fe680 [ 787.823286][ C0] RBP: ffff88802f80be80 R08: ffffffff8178898f R09: 0000000000000000 [ 787.831539][ C0] R10: ffffc900056e6b98 R11: ffffffff81b3bd40 R12: ffffffff9015a4a0 [ 787.840056][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 787.848135][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 787.855481][ C0] ? unwind_next_frame+0x8f/0x2550 [ 787.861048][ C0] ? kasan_save_track+0x3e/0x80 [ 787.866343][ C0] ? unwind_next_frame+0x8f/0x2550 [ 787.871483][ C0] unwind_next_frame+0xac/0x2550 [ 787.876480][ C0] ? unwind_next_frame+0x8f/0x2550 [ 787.881705][ C0] ? stack_trace_save+0xa9/0x100 [ 787.886654][ C0] ? unwind_next_frame+0x8f/0x2550 [ 787.891828][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 787.897544][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 787.903825][ C0] arch_stack_walk+0x11b/0x150 [ 787.908622][ C0] ? kasan_save_track+0x3e/0x80 [ 787.913611][ C0] ? vm_area_alloc+0x24/0x140 [ 787.920412][ C0] stack_trace_save+0xa9/0x100 [ 787.925192][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 787.930608][ C0] kasan_save_track+0x3e/0x80 [ 787.935402][ C0] ? kasan_save_track+0x3e/0x80 [ 787.940488][ C0] __kasan_slab_alloc+0x6c/0x80 [ 787.945539][ C0] kmem_cache_alloc_noprof+0x2b4/0x600 [ 787.951195][ C0] ? vm_area_alloc+0x24/0x140 [ 787.955980][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 787.961746][ C0] ? vm_area_alloc+0x24/0x140 [ 787.966462][ C0] vm_area_alloc+0x24/0x140 [ 787.971044][ C0] mmap_region+0x18ff/0x2840 [ 787.975651][ C0] ? lock_acquire+0x115/0x350 [ 787.980330][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 787.985534][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 787.990821][ C0] ? __pfx_mmap_region+0x10/0x10 [ 787.995764][ C0] ? __lock_acquire+0x747/0x2de0 [ 788.000733][ C0] ? __lock_acquire+0x747/0x2de0 [ 788.005734][ C0] ? mas_next_slot+0xc91/0xd70 [ 788.010588][ C0] ? __lock_acquire+0x747/0x2de0 [ 788.015681][ C0] ? mm_get_unmapped_area_vmaflags+0xd9/0x110 [ 788.021937][ C0] ? cap_mmap_addr+0xaa/0xf0 [ 788.026574][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 788.031435][ C0] ? security_mmap_addr+0x71/0x240 [ 788.036548][ C0] ? shmem_mapping+0xd/0x50 [ 788.041245][ C0] ? memfd_check_seals_mmap+0xc5/0x220 [ 788.046755][ C0] do_mmap+0xe0a/0x1300 [ 788.050913][ C0] ? __pfx_do_mmap+0x10/0x10 [ 788.055504][ C0] ? vm_mmap_pgoff+0x1ed/0x520 [ 788.060262][ C0] ? down_write_killable+0x179/0x230 [ 788.065737][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 788.071358][ C0] ? apparmor_mmap_file+0x2e7/0x390 [ 788.076563][ C0] vm_mmap_pgoff+0x27a/0x520 [ 788.081335][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 788.086466][ C0] ? vm_brk_flags+0x224/0x730 [ 788.091351][ C0] ? __pfx_vm_brk_flags+0x10/0x10 [ 788.096380][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 788.101156][ C0] ? vm_mmap+0x6a/0xc0 [ 788.105247][ C0] elf_load+0x131/0x6a0 [ 788.109543][ C0] load_elf_interp+0x4da/0xb50 [ 788.114594][ C0] load_elf_binary+0x1bda/0x28d0 [ 788.119693][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 788.125013][ C0] bprm_execve+0x930/0x1590 [ 788.129556][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 788.134597][ C0] ? __might_fault+0xaf/0x130 [ 788.139281][ C0] do_execveat_common+0x99f/0xbd0 [ 788.144343][ C0] __x64_sys_execve+0x97/0xc0 [ 788.149027][ C0] do_syscall_64+0x166/0x520 [ 788.153726][ C0] ? trace_irq_disable+0x3b/0x140 [ 788.158796][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.164883][ C0] ? clear_bhb_loop+0x70/0xc0 [ 788.169564][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.175491][ C0] RIP: 0033:0x7fb08a524107 [ 788.179934][ C0] RSP: 002b:00007fff774333e8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 788.188389][ C0] RAX: ffffffffffffffda RBX: 0000557bfea04188 RCX: 00007fb08a524107 [ 788.196986][ C0] RDX: 0000557bfea041b0 RSI: 0000557bfea04188 RDI: 0000557bfea04268 [ 788.205062][ C0] RBP: 0000557bfea04268 R08: 00007fff77438d95 R09: 0000000000000000 [ 788.213116][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000557bfea041b0 [ 788.221187][ C0] R13: 00007fb08a6e9e8b R14: 0000557bfea041b0 R15: 0000000000000000 [ 788.229269][ C0] [ 788.232299][ C0] rcu: rcu_preempt kthread starved for 559 jiffies! g153701 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 788.243240][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 788.253232][ C0] rcu: RCU grace-period kthread stack dump: [ 788.259401][ C0] task:rcu_preempt state:R running task stack:26752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 788.272880][ C0] Call Trace: [ 788.276158][ C0] [ 788.279087][ C0] __schedule+0x17dd/0x5830 [ 788.283593][ C0] ? __lock_acquire+0x747/0x2de0 [ 788.288633][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 788.293769][ C0] ? __pfx___schedule+0x10/0x10 [ 788.298721][ C0] ? lock_acquire+0x115/0x350 [ 788.303425][ C0] ? schedule+0x90/0x2b0 [ 788.307682][ C0] schedule+0x164/0x2b0 [ 788.312041][ C0] schedule_timeout+0x152/0x2c0 [ 788.316896][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 788.322303][ C0] ? __pfx_process_timeout+0x10/0x10 [ 788.327588][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 788.333387][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 788.338957][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 788.344621][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 788.349520][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 788.355687][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 788.360965][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 788.366167][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 788.371977][ C0] rcu_gp_kthread+0x9c/0x340 [ 788.376756][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 788.381948][ C0] ? __kthread_parkme+0x71/0x1f0 [ 788.386991][ C0] ? __kthread_parkme+0x199/0x1f0 [ 788.392102][ C0] kthread+0x38b/0x480 [ 788.396170][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 788.401545][ C0] ? __pfx_kthread+0x10/0x10 [ 788.406346][ C0] ret_from_fork+0x514/0xb70 [ 788.411018][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 788.416392][ C0] ? __switch_to+0xc78/0x1410 [ 788.421301][ C0] ? __pfx_kthread+0x10/0x10 [ 788.426018][ C0] ret_from_fork_asm+0x1a/0x30 [ 788.430919][ C0] [ 788.433940][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 788.440466][ C0] CPU: 0 UID: 0 PID: 3227 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 788.452128][ C0] Tainted: [L]=SOFTLOCKUP [ 788.456827][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 788.467078][ C0] Workqueue: bat_events batadv_tt_purge [ 788.472831][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 788.479902][ C0] Code: f7 e8 cd bb 93 f5 f7 c3 00 02 00 00 74 05 e8 f0 5b c0 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 34 b4 84 f5 65 48 8b 05 ac d1 d3 08 48 85 c0 74 18 5b 41 5e c3 [ 788.499789][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00000206 [ 788.505972][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 8000000000000102 [ 788.513974][ C0] RDX: 0000000000000002 RSI: ffffffff8e7bec03 RDI: 0000000000000001 [ 788.522280][ C0] RBP: ffffc90000007e48 R08: ffffffff91be44bf R09: 1ffffffff237c897 [ 788.530290][ C0] R10: dffffc0000000000 R11: fffffbfff237c898 R12: 0000000000000246 [ 788.538628][ C0] R13: dffffc0000000000 R14: ffff88802b370000 R15: ffff88802b751410 [ 788.546786][ C0] FS: 0000000000000000(0000) GS:ffff8881233d1000(0000) knlGS:0000000000000000 [ 788.556072][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.562846][ C0] CR2: 000055557870c4e8 CR3: 000000000ff48000 CR4: 00000000003526f0 [ 788.570949][ C0] Call Trace: [ 788.574522][ C0] [ 788.577377][ C0] dummy_timer+0x4967/0x4ce0 [ 788.582113][ C0] ? __lock_acquire+0x747/0x2de0 [ 788.587127][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 788.592879][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 788.597852][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 788.605901][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 788.611143][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 788.617155][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 788.622589][ C0] handle_softirqs+0x265/0x8d0 [ 788.627786][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 788.632944][ C0] do_softirq+0x77/0xd0 [ 788.637110][ C0] [ 788.640034][ C0] [ 788.643045][ C0] __local_bh_enable_ip+0x100/0x140 [ 788.648336][ C0] batadv_tt_purge+0x4ee/0xa40 [ 788.653465][ C0] ? process_scheduled_works+0x97a/0x1630 [ 788.659210][ C0] process_scheduled_works+0xc3d/0x1630 [ 788.667189][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 788.673300][ C0] ? assign_work+0x3af/0x5d0 [ 788.678098][ C0] rescuer_thread+0x84a/0x12a0 [ 788.682941][ C0] ? rescuer_thread+0xb8/0x12a0 [ 788.688337][ C0] kthread+0x38b/0x480 [ 788.692407][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 788.697603][ C0] ? __pfx_kthread+0x10/0x10 [ 788.702204][ C0] ret_from_fork+0x514/0xb70 [ 788.706960][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 788.712210][ C0] ? __switch_to+0xc78/0x1410 [ 788.716939][ C0] ? __pfx_kthread+0x10/0x10 [ 788.721543][ C0] ret_from_fork_asm+0x1a/0x30 [ 788.726325][ C0]