last executing test programs: 11.013630704s ago: executing program 0 (id=207): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000480001ffffffe000000000000a0000000000000000000000140001800d2a79075827af5aa534d6815c2e93f1"], 0x3c}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x2e8}}], 0x1, 0x40014) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000400000008000f0001000000", 0x24) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) 10.965991461s ago: executing program 1 (id=208): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000380)={0x14, &(0x7f0000000000)={0x40, 0x31, 0x5c, {0x5c, 0x3, "cbf6cf4465cf35b7df0935f8ccb59f0292ea7ab3ca07ac726f5767876c10bed353296ec99808f7ceecbf9e158c9bb8009c59535850bc2b1f715eabf3b41f21f513f5cff3ad83992cb0901f49515ca421d16c506e69f8a6a8c78c"}}, &(0x7f0000000280)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "89e30776d3b459315772c65b526c21419c3ed349f8c6678b545719d03429fdc2897536fc7eacb784b386278621b2db9d0a7cb263d7c20f80d9eeae0192041ad2c610995c9fd6a42129e03ce597df29cd91b20bfbea8bdbb5fb7e13bce41c15756e969b5c00d99cd7dc2d173a4e58c05e642682e0ce73897aeecca0383f23985f9a91be73cc4f1cfe33ed838414d17a4a9500fabaad71108cf2848ddb113f2a85cc033f2be7b87741ccdf91cd33aee1d621a0a35bf7cbb2d64735f236dde799cf9cdca32829220e04c9"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x40, 0x13, 0xdf, "7137c23918832b16a3a3e71e9e175dba4bcf2a184d1e322ec3133cba84b36a6243311aa5abd36614a262045988bb09099c5693e0e6eddae330ab8db9727eabe01b09f72117dd458517d9751eb9be200b2ecf270a7e0b657463bcf063289b32269975072d60ef7f813c8fbd797013565b349d14d6c5d8737b458b1b90e78bd99daf1b53f9eb5367450e904e5f49ffb81855b13bf6b1954886ad169afdc8017373578417d4b03db5bed7037496746f8768fd952a26268f035e637dc5456a92bacc3968cef13d99d52f6c9969882d5fb6d72aa6edff707c2a9967411f6a098128"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0xc0, 0x5, 0x1, "b6"}, &(0x7f0000000600)={0x40, 0x5, 0x4, "fcdab43b"}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.386532903s ago: executing program 0 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket(0xa, 0x1, 0x0) listen(r4, 0x7f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000005000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 10.142732445s ago: executing program 1 (id=214): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x14, 0x2f, 0x1, 0x3, 0x25dfdbfc, "", [@nested={0x4, 0x83}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x1100) 10.021890111s ago: executing program 0 (id=215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000005240001800b0001007470726f7879000014000280080001400000000208000340000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f00000012c0)=""/4095, 0xfffffffffffffe18, 0x102, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) setgid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) stat(&(0x7f0000004340)='./file0\x00', &(0x7f0000004380)) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x75, 0x90, 0xb, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0xff7d, 0x51, 0x1, {0x22, 0x379}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xe6, 0x64}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x8}}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x41482, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000940)={0x0, 0xfffffffffffffff7, 0x2, 0x1}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000d40)={r5, 0x9, 0x9}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) shmget(0x1, 0x3000, 0x10, &(0x7f0000002000/0x3000)=nil) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="600030800500030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 6.676274198s ago: executing program 3 (id=222): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000380)={0x14, &(0x7f0000000000)={0x40, 0x31, 0x5c, {0x5c, 0x3, "cbf6cf4465cf35b7df0935f8ccb59f0292ea7ab3ca07ac726f5767876c10bed353296ec99808f7ceecbf9e158c9bb8009c59535850bc2b1f715eabf3b41f21f513f5cff3ad83992cb0901f49515ca421d16c506e69f8a6a8c78c"}}, &(0x7f0000000280)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "89e30776d3b459315772c65b526c21419c3ed349f8c6678b545719d03429fdc2897536fc7eacb784b386278621b2db9d0a7cb263d7c20f80d9eeae0192041ad2c610995c9fd6a42129e03ce597df29cd91b20bfbea8bdbb5fb7e13bce41c15756e969b5c00d99cd7dc2d173a4e58c05e642682e0ce73897aeecca0383f23985f9a91be73cc4f1cfe33ed838414d17a4a9500fabaad71108cf2848ddb113f2a85cc033f2be7b87741ccdf91cd33aee1d621a0a35bf7cbb2d64735f236dde799cf9cdca32829220e04c9"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x40, 0x13, 0xdf, "7137c23918832b16a3a3e71e9e175dba4bcf2a184d1e322ec3133cba84b36a6243311aa5abd36614a262045988bb09099c5693e0e6eddae330ab8db9727eabe01b09f72117dd458517d9751eb9be200b2ecf270a7e0b657463bcf063289b32269975072d60ef7f813c8fbd797013565b349d14d6c5d8737b458b1b90e78bd99daf1b53f9eb5367450e904e5f49ffb81855b13bf6b1954886ad169afdc8017373578417d4b03db5bed7037496746f8768fd952a26268f035e637dc5456a92bacc3968cef13d99d52f6c9969882d5fb6d72aa6edff707c2a9967411f6a098128"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0xc0, 0x5, 0x1, "b6"}, &(0x7f0000000600)={0x40, 0x5, 0x4, "fcdab43b"}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.196233447s ago: executing program 1 (id=226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1240, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x4, 0x7, 0x1}) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076001f4ca3bd7000fbdbdf250800000000000000080001"], 0x20}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) 4.152162809s ago: executing program 0 (id=228): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) gettid() socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000100)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x200, 0x44, 0x3, 0xd6}, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000004000000a6"]) syz_usb_connect$cdc_ecm(0x6, 0x81, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0xf, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x1000, 0x8, 0x2f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x63, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x1000}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x0, 0x1, 0xc9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe3, 0x9, 0xe}}], {{0x9, 0x5, 0x82, 0x2, 0x70, 0x2, 0x7f, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0xc, 0x6}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x7, 0x0, 0x9, 0x8, 0xff}, 0x3a, &(0x7f0000000700)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0xa, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a3ca7f1b4c5def0a1ec1e66c4dc702ff"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "de4f6648cf2c283533c0664e52c9c12e"}, @ptm_cap={0x3}]}, 0x6, [{0xdd, &(0x7f0000000840)=@string={0xdd, 0x3, "1cb3db436d3cf1dee330700155fa8555607ba8a603012a7c007981e2db346cbdf83f9e79c5139ab48419a41e7f7093e93d2813a0b6819693d48fad0df7821e4232b1fa31594f103af7c56f9e47654b95a8f83e21b9138ce2305e52dcd660d8b6f2b54b1cb04e471c13ffde91431ba238cd9412d1facafe1b9a5e876f132721aea22051be48e42d45885ee3ca6756a5a6ebfb47dc79718ce389dea6265f8214cb67f878f25ce157ab23c77f91ec9786fbefbb47618c28a1b406056ef50fa9474ab5ad5a40a86729cf333d6e2ee2642a0d02ac8398edb68cf5aa2e67"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x429}}, {0x50, &(0x7f0000000980)=@string={0x50, 0x3, "10310d0200457299b8eddf98c648382d981f9dbab69c5bb276655b815a469a3d8327407f14852cd2097498dc3d63edd948d3624b4c3a73acbc1956c1e34105dc2356fe7cc1bc6df4af53ab5483d0"}}, {0x42, &(0x7f0000000a00)=@string={0x42, 0x3, "4194bf64b0f19c57bbdab74cf013581de7e1d680cebad5490eb627dabec376c67f89a1860311e089c0309e08c9b9de6088fc0f90b28628e921c516b46dc04bb5"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x140a}}]}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e810f0000001926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000c00)="e8700e", 0x3}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/97, 0x61}], 0x1}, 0x2002) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xf9, 0x40, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "b8e753f3b3fa"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0xe65f, 0x7}, {0x6, 0x24, 0x1a, 0x8, 0x21}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x7, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0xa7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0xa, 0x1}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0x17, 0xff, 0x6, 0xff, 0xff}, 0x5, &(0x7f0000000780)={0x5, 0xf, 0x5}, 0x1, [{0x3d, &(0x7f0000000b80)=@string={0x3d, 0x3, "8825512464cc9da6a63681df9c0c58715c3166349f3245b958e16bd843fd6f7e67879b8a294e2244645927742fb1b89681bb3476c90a9297291e85"}}]}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x6, 0x1f, {0x1f, 0x22, "4fe8d589fcb714eab72e4acfc530184c08ea1aebf656ab459fbae9d17f"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x6, 0xd8, "b42a51e89cae1d879cfc51fa2f906aa6e4fcd3676910487970cae57992c89d99b4e6b48fcba0436c5a26038a3d77b8e0d2ef6c4ab54902f712150b298b8f085dff72a4d98a4bf38edcf35930ee7d0188638f43266f9abe4cea3e68366f6bc3042b673242fa8b9ad22dc30d988a46123ab9764be5d4195f594e504bf705a5ebbfbb22588bb122a7c06f0d887b94397bd2fb0ca0e2fd1419a1e1b15b0934a9779c60deb353dc29fa1e72eef5ab03d87c791a8ca200074d6bf87ca941e00a5c0f43ceaf26f960eb137f5e1ae43f23ac09c295e5e72ebb532436"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x81, 0x2, "5613"}, &(0x7f0000000340)={0x20, 0x82, 0x1, 's'}, &(0x7f0000000380)={0x20, 0x83, 0x1, "fe"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "1ad9"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "40a3e7"}}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 4.044911464s ago: executing program 1 (id=229): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x20, 0x9, 0x1b, "d0f5fc7053d0d1fff17a8bd1e362d847644df463771171083f0a74"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000006c0)={0x8, 0x7, 0x1, 'queue1\x00', 0x1}) setuid(0xee00) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) r4 = socket(0x10, 0x2, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x8}, 0x60) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x3}) tkill(r0, 0x11) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, r6, 0x2, &(0x7f0000000100)) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000003c0)=[{0x1e, '\x00', @data, 0x1000}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0xd, 0x7, 0x40003, 0xfffffff3, 0x8}]}) socket$key(0xf, 0x3, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x65) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x10}}, 0x404c0c0) 3.787643194s ago: executing program 2 (id=231): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080850) io_setup(0xff, &(0x7f0000000140)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0xfe, 0x0, r1, &(0x7f0000000340), 0x41}]) 3.608732047s ago: executing program 3 (id=232): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002f00), 0x189100, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) ppoll(&(0x7f0000003880)=[{r0, 0x12}], 0x1, &(0x7f0000003900)={0x0, 0x989680}, 0x0, 0x0) 3.406111181s ago: executing program 2 (id=233): syz_create_resource$binfmt(0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x6b, &(0x7f0000000000)="3f7c81502bebe5018d55e4f95d0ec01cba59825584872e5a06804aac25f327b403b197cdd4ace9d8af559ff6ab0ea82a9e02dba334a859aa29cc1418e765ac440be77e766fa4aeb4ca4f4f200280738ec7c125d48a01663cc6d2f116975b5a4b76fe780f29c1c25796ea80bc2422f9aeb4028406a30a50f6f73e0d7930d48ca1a7abcdfdb296ae9f5727fe8ebba6a52998", 0x91) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000030002"], 0x18) 3.288771884s ago: executing program 3 (id=234): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}, 0xffffff7f}], 0x2, 0x0) 3.021293521s ago: executing program 2 (id=235): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806, 0x1000000}, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040890}, 0x44080) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8003, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20f2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRESOCT=r0, @ANYRESOCT=0x0], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806, 0x1000000}, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040890}, 0x44080) (async) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8003, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20f2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) (async) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRESOCT=r0, @ANYRESOCT=0x0], 0x0) (async) 2.94052084s ago: executing program 3 (id=236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000140)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000200000001ac14142500000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100006"], 0xc4}}, 0x800) 2.71416879s ago: executing program 3 (id=237): r0 = socket(0x25, 0xa, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'ipvlan1\x00', 0x9}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020300000000000000e1768812003208380300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea0000000000000000effeff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0xcd5, 0x0, 0x0, 0x2}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x4000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a112171095092a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000582024000"], 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000180)={0x2710, 0x0, &(0x7f0000ef4000/0x2000)=nil}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x0, 0x3, 0x9, "da3f7438bb603575f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x10, 0x7, 0xca8}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x6c}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0x80, 0x0, 0x0, 0xfffffffd}]}]}, 0x13c}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="a2c3f9783810d207af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') syz_usb_connect$midi(0x1, 0xd0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1050, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x1, 0x1, 0xfe, 0xa0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xc3, 0x2}, @midi_out_jack={0xd, 0x24, 0x3, 0x3, 0x3, 0x3, [{0x35, 0xee}, {0x1, 0x32}, {0x9, 0x9}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xa, 0x2}, @midi_out_jack={0x11, 0x24, 0x3, 0x0, 0x6, 0x5, [{0x3, 0x40}, {0x2}, {0x9, 0x2}, {0x80, 0x6}, {0x3f, 0x3f}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x2, 0x6, [{0x0, 0xc5}, {0x5, 0x80}, {0x5, 0xfe}, {0x2, 0x4}, {0x1, 0x6}, {0x3, 0x28}], 0x7f}], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x1, 0x2, 0x4, {0x8, 0x25, 0x1, 0x4, "6a2b152c"}}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x5, 0xea, 0x5, {0x5, 0x25, 0x1, 0x1, 'g'}}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0xf4, 0x4, 0x2, {0xb, 0x25, 0x1, 0x7, "9e2fc48b9d9f3b"}}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x3, 0x7, 0x2, {0x14, 0x25, 0x1, 0x10, "322160b6a8b070e1751e463d96eb9bb1"}}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x0, 0x9, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5, 0x1, 0x1, 0xff}, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x813}}]}) 2.026042275s ago: executing program 2 (id=238): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001840), 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x241, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x4, 0x2, 0xc, 0xe, 0x7, 0x79, 0x3, 0x7b5, 0x7, 0x2, 0x1, 0x73, 0xfffffffd, 0x1, 0xfb, 0xfffffffb, 0x8007, 0xbe, 0x7fffffff, 0x89, 0xca9f, 0x0, 0x6, 0xffffffff, 0x78, 0x3, 0xb7, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x0, "4a349800000000806913220909000909000a48"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000002880)=0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) pwrite64(r2, 0x0, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r7, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000083c0)="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", 0x2000, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x20) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) 1.500533764s ago: executing program 1 (id=239): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.03234938s ago: executing program 1 (id=240): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000380)={0x14, &(0x7f0000000000)={0x40, 0x31, 0x5c, {0x5c, 0x3, "cbf6cf4465cf35b7df0935f8ccb59f0292ea7ab3ca07ac726f5767876c10bed353296ec99808f7ceecbf9e158c9bb8009c59535850bc2b1f715eabf3b41f21f513f5cff3ad83992cb0901f49515ca421d16c506e69f8a6a8c78c"}}, &(0x7f0000000280)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "89e30776d3b459315772c65b526c21419c3ed349f8c6678b545719d03429fdc2897536fc7eacb784b386278621b2db9d0a7cb263d7c20f80d9eeae0192041ad2c610995c9fd6a42129e03ce597df29cd91b20bfbea8bdbb5fb7e13bce41c15756e969b5c00d99cd7dc2d173a4e58c05e642682e0ce73897aeecca0383f23985f9a91be73cc4f1cfe33ed838414d17a4a9500fabaad71108cf2848ddb113f2a85cc033f2be7b87741ccdf91cd33aee1d621a0a35bf7cbb2d64735f236dde799cf9cdca32829220e04c9"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000440)={0x40, 0x13, 0xdf, "7137c23918832b16a3a3e71e9e175dba4bcf2a184d1e322ec3133cba84b36a6243311aa5abd36614a262045988bb09099c5693e0e6eddae330ab8db9727eabe01b09f72117dd458517d9751eb9be200b2ecf270a7e0b657463bcf063289b32269975072d60ef7f813c8fbd797013565b349d14d6c5d8737b458b1b90e78bd99daf1b53f9eb5367450e904e5f49ffb81855b13bf6b1954886ad169afdc8017373578417d4b03db5bed7037496746f8768fd952a26268f035e637dc5456a92bacc3968cef13d99d52f6c9969882d5fb6d72aa6edff707c2a9967411f6a098128"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0xc0, 0x5, 0x1, "b6"}, &(0x7f0000000600)={0x40, 0x5, 0x4, "fcdab43b"}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) 854.247699ms ago: executing program 2 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x200000000000000}, 0x0) 408.356082ms ago: executing program 2 (id=242): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x78) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getgroups(0x3, &(0x7f00000018c0)=[0xee00, 0xee01, 0xffffffffffffffff]) setresgid(0x0, r4, r3) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r5, 0x409, 0x5) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2d, &(0x7f0000000300)=0x10000, 0x4) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) (async) dup(r0) (async) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x78) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) getgroups(0x3, &(0x7f00000018c0)=[0xee00, 0xee01, 0xffffffffffffffff]) (async) setresgid(0x0, r4, r3) (async) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) (async) fcntl$addseals(r5, 0x409, 0x5) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async) fallocate(r5, 0x0, 0x0, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x2d, &(0x7f0000000300)=0x10000, 0x4) (async) 407.982596ms ago: executing program 0 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0x10f, {0x0, r5, 0x3}}, 0x18) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000027c0)) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 304.154902ms ago: executing program 3 (id=244): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x7fff, 0x4c, 0x2}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket(0x1, 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) read(r2, &(0x7f0000000000)=""/63, 0x3f) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{}, {}]}) write(r0, &(0x7f0000000000)="240000005e00cf5767c3fffffffffff807000000010000000000008eb8fc0942637d8856", 0x24) 0s ago: executing program 0 (id=245): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101000) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f00000007c0)={&(0x7f0000000080)=0x3, 0x81, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000780)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) close(r2) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 90.313549][ T5606] cgroup: Unknown subsys name 'net' [ 90.556247][ T5606] cgroup: Unknown subsys name 'cpuset' [ 90.609660][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.082260][ T44] cfg80211: failed to load regulatory.db [ 92.647049][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.277693][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.294056][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.295014][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.315186][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.318293][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.385872][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.413366][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.443417][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.493403][ T4931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.498596][ T4931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.502998][ T4931] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.522850][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.524508][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.525228][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.552463][ T4931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.562560][ T4931] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.580431][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.592460][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.599388][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.621586][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.430279][ T5622] Bluetooth: hci0: command tx timeout [ 97.750314][ T5624] Bluetooth: hci2: command tx timeout [ 97.750322][ T5635] Bluetooth: hci3: command tx timeout [ 97.750516][ T5622] Bluetooth: hci1: command tx timeout [ 98.036455][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.037901][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.038445][ T5619] bridge_slave_0: entered allmulticast mode [ 98.047771][ T5619] bridge_slave_0: entered promiscuous mode [ 98.119563][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.119966][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.120230][ T5619] bridge_slave_1: entered allmulticast mode [ 98.123469][ T5619] bridge_slave_1: entered promiscuous mode [ 98.124987][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.125283][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.125799][ T5628] bridge_slave_0: entered allmulticast mode [ 98.128445][ T5628] bridge_slave_0: entered promiscuous mode [ 98.249580][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.249867][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.250073][ T5628] bridge_slave_1: entered allmulticast mode [ 98.254238][ T5628] bridge_slave_1: entered promiscuous mode [ 98.255941][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.256201][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.256408][ T5620] bridge_slave_0: entered allmulticast mode [ 98.259284][ T5620] bridge_slave_0: entered promiscuous mode [ 98.368576][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.370041][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.370883][ T5620] bridge_slave_1: entered allmulticast mode [ 98.380022][ T5620] bridge_slave_1: entered promiscuous mode [ 98.396339][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.397313][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.398146][ T5629] bridge_slave_0: entered allmulticast mode [ 98.409831][ T5629] bridge_slave_0: entered promiscuous mode [ 98.431920][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.498198][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.498481][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.505475][ T5629] bridge_slave_1: entered allmulticast mode [ 98.521344][ T5629] bridge_slave_1: entered promiscuous mode [ 98.527075][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.547856][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.624694][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.647732][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.718169][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.733222][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.737313][ T5619] team0: Port device team_slave_0 added [ 98.788592][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.815667][ T5619] team0: Port device team_slave_1 added [ 98.829382][ T5628] team0: Port device team_slave_0 added [ 98.898969][ T5628] team0: Port device team_slave_1 added [ 98.902576][ T5620] team0: Port device team_slave_0 added [ 98.975297][ T5620] team0: Port device team_slave_1 added [ 98.980824][ T5629] team0: Port device team_slave_0 added [ 98.995092][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.995106][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.995126][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.074383][ T5629] team0: Port device team_slave_1 added [ 99.076222][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.076235][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.076255][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.078382][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.078393][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.078413][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.207384][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.207397][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.207418][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.221296][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.221341][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.221417][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.317421][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.317435][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.317457][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.337392][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.337445][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.337514][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.423225][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.423239][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.423259][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.509207][ T5622] Bluetooth: hci0: command tx timeout [ 99.790862][ T5619] hsr_slave_0: entered promiscuous mode [ 99.792864][ T5619] hsr_slave_1: entered promiscuous mode [ 99.828882][ T5622] Bluetooth: hci3: command tx timeout [ 99.838927][ T5622] Bluetooth: hci1: command tx timeout [ 99.838939][ T5635] Bluetooth: hci2: command tx timeout [ 99.869939][ T5628] hsr_slave_0: entered promiscuous mode [ 99.871810][ T5628] hsr_slave_1: entered promiscuous mode [ 99.873357][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 99.873444][ T5628] Cannot create hsr debugfs directory [ 99.951085][ T5620] hsr_slave_0: entered promiscuous mode [ 99.952847][ T5620] hsr_slave_1: entered promiscuous mode [ 99.954336][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 99.954363][ T5620] Cannot create hsr debugfs directory [ 100.025043][ T5629] hsr_slave_0: entered promiscuous mode [ 100.026757][ T5629] hsr_slave_1: entered promiscuous mode [ 100.028133][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 100.028159][ T5629] Cannot create hsr debugfs directory [ 101.006400][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.053149][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.074084][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.104925][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.109643][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.156361][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.193490][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.216255][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.351449][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.385789][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.401484][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.442161][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.462809][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.507222][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.542433][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.585740][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.590601][ T5635] Bluetooth: hci0: command tx timeout [ 101.747037][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.776203][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.800406][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.834488][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.860012][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.900108][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.909015][ T5635] Bluetooth: hci1: command tx timeout [ 101.909047][ T5635] Bluetooth: hci3: command tx timeout [ 101.910556][ T5622] Bluetooth: hci2: command tx timeout [ 101.957904][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.997404][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.152667][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.187223][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.213207][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.253184][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.270002][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.303629][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.321346][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.363425][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.505992][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.640500][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.691406][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.718518][ T3343] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.732765][ T3343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.826979][ T3343] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.827222][ T3343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.903678][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.946250][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.969207][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.969454][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.045824][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.061402][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.137532][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.159964][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.220484][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.221079][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.305172][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.305346][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.387656][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.448582][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.456466][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.536464][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.536639][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.678961][ T5635] Bluetooth: hci0: command tx timeout [ 103.989428][ T5635] Bluetooth: hci2: command tx timeout [ 103.989461][ T5635] Bluetooth: hci3: command tx timeout [ 103.989483][ T5635] Bluetooth: hci1: command tx timeout [ 104.703972][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.012785][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.124727][ T5619] veth0_vlan: entered promiscuous mode [ 105.287602][ T5619] veth1_vlan: entered promiscuous mode [ 105.371160][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.410637][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.501493][ T5628] veth0_vlan: entered promiscuous mode [ 105.574998][ T5619] veth0_macvtap: entered promiscuous mode [ 105.590097][ T5628] veth1_vlan: entered promiscuous mode [ 105.625077][ T5619] veth1_macvtap: entered promiscuous mode [ 105.711245][ T5620] veth0_vlan: entered promiscuous mode [ 105.731830][ T5629] veth0_vlan: entered promiscuous mode [ 105.761110][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.800148][ T5620] veth1_vlan: entered promiscuous mode [ 105.813975][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.834859][ T5629] veth1_vlan: entered promiscuous mode [ 105.891296][ T5628] veth0_macvtap: entered promiscuous mode [ 105.894596][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.923821][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.939106][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.964074][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.965502][ T5628] veth1_macvtap: entered promiscuous mode [ 106.217077][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.435864][ T5620] veth0_macvtap: entered promiscuous mode [ 106.459387][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.461122][ T5629] veth0_macvtap: entered promiscuous mode [ 106.523892][ T5620] veth1_macvtap: entered promiscuous mode [ 106.546480][ T5629] veth1_macvtap: entered promiscuous mode [ 106.567364][ T3380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.593714][ T1537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.593736][ T1537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.593832][ T3380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.653093][ T3380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.727589][ T3380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.910825][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.910846][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.915104][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.969909][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.075587][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.117087][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.300233][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.336141][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.357604][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.407706][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.465841][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.481524][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.499395][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.501381][ T3380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.501401][ T3380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.622522][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.447885][ T45] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 108.784768][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.784801][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.823164][ T45] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 108.823194][ T45] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 108.823216][ T45] usb 2-1: Product: syz [ 108.823231][ T45] usb 2-1: Manufacturer: syz [ 108.823246][ T45] usb 2-1: SerialNumber: syz [ 108.967499][ T45] usb 2-1: config 0 descriptor?? [ 109.170320][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.170339][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.280471][ T45] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v163 fw v163.231.30 (1 channels) [ 109.414900][ T1537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.414920][ T1537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.584529][ T799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.584551][ T799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.587388][ T45] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 109.587416][ T45] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 109.587441][ T45] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 109.889036][ T45] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 110.091584][ T45] usb 2-1: USB disconnect, device number 2 [ 110.140682][ T3343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.140704][ T3343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.723377][ T5713] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 111.966189][ T5713] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.966218][ T5713] usb 4-1: config 0 has no interfaces? [ 111.966249][ T5713] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 111.966274][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.183493][ T5726] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 112.385254][ T5726] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 112.385288][ T5726] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 112.385310][ T5726] usb 1-1: Product: syz [ 112.385326][ T5726] usb 1-1: Manufacturer: syz [ 112.385342][ T5726] usb 1-1: SerialNumber: syz [ 112.474725][ T5713] usb 4-1: config 0 descriptor?? [ 112.489812][ T5726] usb 1-1: config 0 descriptor?? [ 112.823101][ T5795] netlink: 'syz.3.9': attribute type 2 has an invalid length. [ 112.849704][ T5726] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v163 fw v163.231.30 (1 channels) [ 113.057387][ T5726] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 113.057412][ T5726] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 113.057430][ T5726] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 113.103992][ T5777] usb 4-1: USB disconnect, device number 2 [ 113.299016][ T5726] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 113.408988][ T5726] usb 1-1: USB disconnect, device number 2 [ 114.310608][ T5349] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 114.355219][ T5838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25'. [ 114.507169][ T5349] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.507204][ T5349] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.517396][ T5349] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.517493][ T5349] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 114.517548][ T5349] usb 4-1: Product: syz [ 114.517591][ T5349] usb 4-1: Manufacturer: syz [ 114.796693][ T5349] hub 4-1:4.0: USB hub found [ 114.896157][ T5349] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 114.950080][ T5843] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.133870][ T5349] usb 4-1: USB disconnect, device number 3 [ 115.195597][ T5843] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 115.195640][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.195663][ T5843] usb 3-1: Product: syz [ 115.195679][ T5843] usb 3-1: Manufacturer: syz [ 115.195694][ T5843] usb 3-1: SerialNumber: syz [ 115.304864][ T5843] usb 3-1: config 0 descriptor?? [ 115.980458][ T5349] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 116.047039][ T5624] Bluetooth: hci4: urb ffff888036482700 submission failed (2) [ 116.146168][ T5843] usb 3-1: USB disconnect, device number 2 [ 116.426068][ T5349] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 116.426102][ T5349] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 116.426124][ T5349] usb 4-1: Product: syz [ 116.426139][ T5349] usb 4-1: Manufacturer: syz [ 116.426155][ T5349] usb 4-1: SerialNumber: syz [ 116.520353][ T5349] usb 4-1: config 0 descriptor?? [ 116.927250][ T5349] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v163 fw v163.231.30 (1 channels) [ 117.161546][ T5349] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 117.161605][ T5349] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 117.902402][ T5349] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 118.085173][ T5349] usb 4-1: USB disconnect, device number 4 [ 118.670855][ T5808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.691330][ T5881] process 'syz.2.40' launched './file0' with NULL argv: empty string added [ 118.694433][ T5881] 9pnet_fd: p9_fd_create_unix (5881): problem connecting socket: ./file0: -111 [ 118.738934][ T5349] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.769387][ T5843] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 118.803533][ T5883] netlink: 44 bytes leftover after parsing attributes in process `syz.2.41'. [ 118.803560][ T5883] netlink: 43 bytes leftover after parsing attributes in process `syz.2.41'. [ 118.803577][ T5883] netlink: 'syz.2.41': attribute type 6 has an invalid length. [ 118.803591][ T5883] netlink: 'syz.2.41': attribute type 5 has an invalid length. [ 118.805323][ T5883] netlink: 43 bytes leftover after parsing attributes in process `syz.2.41'. [ 118.872435][ T5808] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 118.872486][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.872515][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.872538][ T5808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 118.928283][ T5808] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 118.928316][ T5808] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 118.928347][ T5808] usb 1-1: Manufacturer: syz [ 118.935064][ T5349] usb 4-1: Using ep0 maxpacket: 32 [ 118.984981][ T5808] usb 1-1: config 0 descriptor?? [ 119.009835][ T5349] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 119.009873][ T5349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.009888][ T5349] usb 4-1: Product: syz [ 119.009899][ T5349] usb 4-1: Manufacturer: syz [ 119.009926][ T5349] usb 4-1: SerialNumber: syz [ 119.074195][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.085786][ T5843] usb 2-1: not running at top speed; connect to a high speed hub [ 119.104280][ T5843] usb 2-1: config 127 has an invalid interface number: 9 but max is 0 [ 119.104313][ T5843] usb 2-1: config 127 has no interface number 0 [ 119.104348][ T5843] usb 2-1: config 127 interface 9 has no altsetting 0 [ 119.148184][ T5843] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=fd.12 [ 119.148216][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.148236][ T5843] usb 2-1: Product: syz [ 119.148251][ T5843] usb 2-1: Manufacturer: syz [ 119.148266][ T5843] usb 2-1: SerialNumber: syz [ 119.183278][ T5349] usb 4-1: config 0 descriptor?? [ 119.214606][ T5349] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 119.495389][ T5727] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 119.589642][ T5877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.593374][ T5877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.596919][ T5873] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.703194][ T5727] usb 3-1: device descriptor read/64, error -71 [ 120.005429][ T5808] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 120.037736][ T5808] appleir 0003:05AC:8243.0001: parse failed [ 120.037862][ T5808] appleir 0003:05AC:8243.0001: probe with driver appleir failed with error -22 [ 120.049967][ T5727] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 120.218838][ T5727] usb 3-1: device descriptor read/64, error -71 [ 120.341096][ T5727] usb usb3-port1: attempt power cycle [ 120.424070][ T10] usb 1-1: USB disconnect, device number 3 [ 120.721818][ T5843] ftdi_sio 2-1:127.9: FTDI USB Serial Device converter detected [ 120.725346][ T5843] ftdi_sio ttyUSB0: unknown device type: 0xfd12 [ 120.752603][ T5843] usb 2-1: USB disconnect, device number 3 [ 120.765318][ T5727] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 120.785239][ T5843] ftdi_sio 2-1:127.9: device disconnected [ 120.796235][ T5727] usb 3-1: device descriptor read/8, error -71 [ 121.043779][ T5727] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 121.087650][ T5727] usb 3-1: device descriptor read/8, error -71 [ 121.210622][ T5727] usb usb3-port1: unable to enumerate USB device [ 121.527232][ T5349] gspca_ov534_9: sccb_write failed [ 121.592752][ T45] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 121.637872][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 121.830715][ T45] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 121.830749][ T45] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 121.830846][ T45] usb 2-1: Product: syz [ 121.830863][ T45] usb 2-1: Manufacturer: syz [ 121.830879][ T45] usb 2-1: SerialNumber: syz [ 121.957087][ T45] usb 2-1: config 0 descriptor?? [ 122.162805][ T5349] gspca_ov534_9: reg_r err -71 [ 122.200411][ T45] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v163 fw v163.231.30 (1 channels) [ 122.373549][ T5349] gspca_ov534_9: Unknown sensor 0000 [ 122.373698][ T5349] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 122.416608][ T5905] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 122.440671][ T45] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 122.440703][ T45] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 122.477390][ T5349] usb 4-1: USB disconnect, device number 5 [ 122.690735][ T45] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 122.710711][ T45] usb 2-1: USB disconnect, device number 4 [ 123.291031][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.353766][ T3343] Bluetooth: (null): Invalid header checksum [ 123.440243][ T3343] Bluetooth: (null): Too short H5 packet [ 123.440337][ T3343] Bluetooth: (null): Invalid header checksum [ 123.466816][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 123.466865][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.466896][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.466931][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 123.500345][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 123.500374][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 123.500393][ T10] usb 4-1: Manufacturer: syz [ 123.567565][ T1548] Bluetooth: (null): Invalid header checksum [ 123.577975][ T10] usb 4-1: config 0 descriptor?? [ 123.657340][ T1548] Bluetooth: (null): Invalid header checksum [ 123.768503][ T3380] Bluetooth: (null): Invalid header checksum [ 123.869291][ T3380] Bluetooth: (null): Invalid header checksum [ 123.991329][ T3343] Bluetooth: (null): Invalid header checksum [ 124.197126][ T10] appleir 0003:05AC:8243.0002: item fetching failed at offset 0/1 [ 124.197839][ T10] appleir 0003:05AC:8243.0002: parse failed [ 124.197964][ T10] appleir 0003:05AC:8243.0002: probe with driver appleir failed with error -22 [ 124.459667][ T5938] syz.0.57 uses obsolete (PF_INET,SOCK_PACKET) [ 124.617968][ T5808] usb 4-1: USB disconnect, device number 6 [ 125.449382][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 125.626079][ T10] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 125.626114][ T10] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 125.626138][ T10] usb 2-1: Product: syz [ 125.626154][ T10] usb 2-1: Manufacturer: syz [ 125.626169][ T10] usb 2-1: SerialNumber: syz [ 125.715947][ T10] usb 2-1: config 0 descriptor?? [ 126.008304][ T10] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v163 fw v163.231.30 (1 channels) [ 126.211697][ T10] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 126.211732][ T10] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 126.378738][ T5808] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 126.380611][ T10] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 126.405342][ T10] usb 2-1: USB disconnect, device number 5 [ 126.542454][ T5808] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.543258][ T5808] usb 3-1: not running at top speed; connect to a high speed hub [ 126.546283][ T5808] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 126.584041][ T5808] usb 3-1: string descriptor 0 read error: -22 [ 126.584193][ T5808] usb 3-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 126.584220][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.703893][ T5808] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 127.315103][ T5981] : renamed from hsr_slave_0 (while UP) [ 127.331659][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.408896][ T5808] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 127.426389][ T5808] usb 3-1: USB disconnect, device number 7 [ 127.490560][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 127.490609][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.490638][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.490662][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 127.493558][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 127.493591][ T10] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 127.493615][ T10] usb 2-1: Manufacturer: syz [ 127.576486][ T10] usb 2-1: config 0 descriptor?? [ 127.793102][ T5988] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.793795][ T5988] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.801479][ T5988] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.807558][ T5988] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 127.807596][ T5988] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 127.807641][ T5988] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 127.813294][ T5988] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.827860][ T5988] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.967134][ T5988] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.971592][ T5988] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.975077][ T5988] virt_wifi0 speed is unknown, defaulting to 1000 [ 127.978045][ T5988] virt_wifi0 speed is unknown, defaulting to 1000 [ 128.098261][ T5992] netlink: 'syz.0.76': attribute type 15 has an invalid length. [ 128.098284][ T5992] netlink: 666 bytes leftover after parsing attributes in process `syz.0.76'. [ 128.108134][ T5992] Zero length message leads to an empty skb [ 128.307528][ T10] appleir 0003:05AC:8243.0003: item fetching failed at offset 0/1 [ 128.308243][ T10] appleir 0003:05AC:8243.0003: parse failed [ 128.308357][ T10] appleir 0003:05AC:8243.0003: probe with driver appleir failed with error -22 [ 128.871589][ T5808] usb 2-1: USB disconnect, device number 6 [ 129.258986][ T1252] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 129.416055][ T1252] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 129.416091][ T1252] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 129.416115][ T1252] usb 3-1: Product: syz [ 129.416131][ T1252] usb 3-1: Manufacturer: syz [ 129.416247][ T1252] usb 3-1: SerialNumber: syz [ 129.479270][ T1252] usb 3-1: config 0 descriptor?? [ 129.725106][ T1252] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 129.931694][ T1252] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 129.931726][ T1252] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 129.942280][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 130.114098][ T1252] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 130.116445][ T6031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 130.116475][ T6031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 130.234481][ T1252] usb 3-1: USB disconnect, device number 8 [ 130.294789][ T6031] vhci_hcd vhci_hcd.0: Device attached [ 130.317473][ T6033] vhci_hcd: connection closed [ 130.357221][ T3380] vhci_hcd vhci_hcd.3: stop threads [ 130.373037][ T3380] vhci_hcd vhci_hcd.3: release socket [ 130.373125][ T3380] vhci_hcd vhci_hcd.3: disconnect device [ 130.723353][ T6043] warning: `syz.0.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.785675][ T6045] syz.2.92 (6045): attempted to duplicate a private mapping with mremap. This is not supported. [ 130.809956][ T6049] block nbd0: not configured, cannot reconfigure [ 131.333293][ T1038] Bluetooth: (null): Invalid header checksum [ 131.949036][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 132.115952][ T45] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 132.115986][ T45] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 132.116009][ T45] usb 4-1: Product: syz [ 132.116024][ T45] usb 4-1: Manufacturer: syz [ 132.116040][ T45] usb 4-1: SerialNumber: syz [ 132.244580][ T45] usb 4-1: config 0 descriptor?? [ 132.461166][ T5727] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 132.461538][ T45] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 132.669336][ T45] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 132.669369][ T45] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 132.675368][ T5727] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.675397][ T5727] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.675445][ T5727] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 132.675488][ T5727] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.675512][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.770242][ T6084] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.799979][ T5727] hub 1-1:1.0: bad descriptor, ignoring hub [ 132.800016][ T5727] hub 1-1:1.0: probe with driver hub failed with error -5 [ 132.801200][ T5727] cdc_wdm 1-1:1.0: skipping garbage [ 132.801219][ T5727] cdc_wdm 1-1:1.0: skipping garbage [ 132.996729][ T5727] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 132.996764][ T5727] cdc_wdm 1-1:1.0: Unknown control protocol [ 133.007052][ T45] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 133.031533][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.031639][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.045902][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.046048][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.046287][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.046311][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.046739][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.046757][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.046973][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.046988][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.047203][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.047221][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.047446][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.047463][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.047850][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.047924][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.048302][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.048369][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.048762][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.048783][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.049114][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 133.049181][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 133.406720][ T45] usb 4-1: USB disconnect, device number 7 [ 133.509459][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 134.212789][ T1252] usb 1-1: USB disconnect, device number 4 [ 134.288823][ T5772] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 134.486341][ T5772] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.486373][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.486395][ T5772] usb 3-1: Product: syz [ 134.486408][ T5772] usb 3-1: Manufacturer: syz [ 134.486423][ T5772] usb 3-1: SerialNumber: syz [ 134.498985][ T6119] trusted_key: syz.0.116 sent an empty control message without MSG_MORE. [ 134.517745][ T5772] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 134.793658][ T1252] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 134.969135][ T5727] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 135.124554][ T5843] usb 3-1: USB disconnect, device number 9 [ 135.139067][ T5772] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.166011][ T5727] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 135.166046][ T5727] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 135.166061][ T5727] usb 4-1: Product: syz [ 135.166072][ T5727] usb 4-1: Manufacturer: syz [ 135.166082][ T5727] usb 4-1: SerialNumber: syz [ 135.231592][ T5727] usb 4-1: config 0 descriptor?? [ 135.298817][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 135.302480][ T5772] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.302512][ T5772] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 135.302540][ T5772] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.306199][ T5772] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 135.306227][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.306246][ T5772] usb 2-1: Product: syz [ 135.306260][ T5772] usb 2-1: Manufacturer: syz [ 135.306274][ T5772] usb 2-1: SerialNumber: syz [ 135.383167][ T5772] usb 2-1: config 0 descriptor?? [ 135.454926][ T5727] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 135.601685][ T5772] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 135.601728][ T5772] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 135.636715][ T5772] usb 2-1: USB disconnect, device number 7 [ 135.666656][ T5727] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 135.666689][ T5727] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 135.821903][ T5727] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 135.889526][ T5727] usb 4-1: USB disconnect, device number 8 [ 135.915409][ T1252] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 136.046284][ T6141] netlink: 'syz.2.123': attribute type 16 has an invalid length. [ 136.046306][ T6141] netlink: 2 bytes leftover after parsing attributes in process `syz.2.123'. [ 136.073173][ T1252] ath9k_htc: Failed to initialize the device [ 136.104177][ T5843] usb 3-1: ath9k_htc: USB layer deinitialized [ 136.295000][ T6145] ======================================================= [ 136.295000][ T6145] WARNING: The mand mount option has been deprecated and [ 136.295000][ T6145] and is ignored by this kernel. Remove the mand [ 136.295000][ T6145] option from the mount to silence this warning. [ 136.295000][ T6145] ======================================================= [ 137.216345][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 137.358906][ T5772] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.515542][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 137.529063][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 137.529141][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 240, setting to 64 [ 137.531792][ T5772] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 137.531815][ T5772] usb 4-1: New USB device strings: Mfr=170, Product=2, SerialNumber=3 [ 137.531829][ T5772] usb 4-1: Product: syz [ 137.531840][ T5772] usb 4-1: Manufacturer: syz [ 137.531850][ T5772] usb 4-1: SerialNumber: syz [ 137.538042][ T5772] usb 4-1: config 0 descriptor?? [ 137.638415][ T5772] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 137.756943][ T5772] usb 4-1: USB disconnect, device number 9 [ 137.779355][ T3326] usb 4-1: Failed to submit usb control message: -71 [ 137.779396][ T3326] usb 4-1: unable to send the bmi data to the device: -71 [ 137.779416][ T3326] usb 4-1: unable to get target info from device [ 137.779447][ T3326] usb 4-1: could not get target info (-71) [ 137.779475][ T3326] usb 4-1: could not probe fw (-71) [ 138.157257][ T6195] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 138.264494][ T6198] netlink: 'syz.0.143': attribute type 2 has an invalid length. [ 139.562674][ T6238] input: syz0 as /devices/virtual/input/input6 [ 139.721088][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 140.093449][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 140.094583][ T6253] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.625459][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 140.699219][ T6266] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.757240][ T6264] nbd: socks must be embedded in a SOCK_ITEM attr [ 140.837961][ T6264] block nbd0: shutting down sockets [ 141.151312][ T5727] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.311288][ T5727] usb 2-1: Using ep0 maxpacket: 16 [ 141.318394][ T5727] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 141.318429][ T5727] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 192 [ 141.348804][ T5727] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 141.348837][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.348858][ T5727] usb 2-1: Product: syz [ 141.348873][ T5727] usb 2-1: Manufacturer: syz [ 141.348887][ T5727] usb 2-1: SerialNumber: syz [ 141.361977][ T6289] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 141.361977][ T6289] program syz.2.175 not setting count and/or reply_len properly [ 141.399454][ T5727] usb 2-1: config 0 descriptor?? [ 141.446410][ T6289] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 141.479109][ T6272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.479296][ T6272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.821919][ T6290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.981158][ T5727] rc_core: IR keymap rc-hauppauge not found [ 141.981180][ T5727] Registered IR keymap rc-empty [ 142.017626][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.031302][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.107668][ T5727] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 142.231560][ T5727] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 142.520285][ T6316] sit0: entered promiscuous mode [ 142.555040][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.571043][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.590336][ T6316] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 142.590361][ T6316] netlink: 1 bytes leftover after parsing attributes in process `syz.1.181'. [ 142.590610][ T5772] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.592562][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.592691][ T5772] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 142.614503][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.663583][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.693537][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.709204][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.729928][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.759090][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.780783][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.799076][ T5727] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 142.919201][ T5727] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 142.919231][ T5727] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 143.097700][ T37] audit: type=1800 audit(1779263884.855:2): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.184" name="file1" dev="tmpfs" ino=202 res=0 errno=0 [ 143.140012][ T5727] usb 2-1: USB disconnect, device number 8 [ 143.263375][ T6335] FAULT_INJECTION: forcing a failure. [ 143.263375][ T6335] name failslab, interval 1, probability 0, space 0, times 0 [ 143.263422][ T6335] CPU: 0 UID: 0 PID: 6335 Comm: syz.0.186 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 143.263448][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.263468][ T6335] Call Trace: [ 143.263481][ T6335] [ 143.263491][ T6335] dump_stack_lvl+0xe8/0x150 [ 143.263526][ T6335] should_fail_ex+0x46b/0x600 [ 143.263568][ T6335] should_failslab+0xa8/0x100 [ 143.263594][ T6335] __kmalloc_cache_noprof+0x84/0x690 [ 143.263635][ T6335] ? percpu_ref_init+0xc5/0x360 [ 143.263661][ T6335] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 143.263697][ T6335] percpu_ref_init+0xc5/0x360 [ 143.263725][ T6335] io_ring_ctx_alloc+0x33d/0xd20 [ 143.263769][ T6335] io_uring_create+0x50/0x9a0 [ 143.263809][ T6335] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 143.263845][ T6335] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 143.263873][ T6335] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 143.263925][ T6335] ? __pfx_ksys_write+0x10/0x10 [ 143.263956][ T6335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.263981][ T6335] do_syscall_64+0x15f/0xf80 [ 143.264013][ T6335] ? trace_irq_disable+0x3b/0x140 [ 143.264049][ T6335] ? clear_bhb_loop+0x40/0x90 [ 143.264078][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.264100][ T6335] RIP: 0033:0x7f0bee0dce59 [ 143.264127][ T6335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.264146][ T6335] RSP: 002b:00007f0bec32dfb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 143.264178][ T6335] RAX: ffffffffffffffda RBX: 00002000000001c0 RCX: 00007f0bee0dce59 [ 143.264194][ T6335] RDX: 0000200000000300 RSI: 00002000000001c0 RDI: 0000000000000526 [ 143.264209][ T6335] RBP: 00007f0bec32e090 R08: 0000000000000000 R09: 0000000000000101 [ 143.264223][ T6335] R10: 0000200000000340 R11: 0000000000000206 R12: 0000200000000300 [ 143.264237][ T6335] R13: 0000200000000340 R14: 0000200000000240 R15: 00007ffc019b8448 [ 143.264270][ T6335] [ 144.189913][ T5608] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.338851][ T5608] usb 4-1: Using ep0 maxpacket: 32 [ 144.341421][ T5608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.341457][ T5608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.341498][ T5608] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 144.341525][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.401243][ T5608] usb 4-1: config 0 descriptor?? [ 144.462216][ T6361] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.870348][ T5608] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 144.870392][ T5608] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 145.018875][ T5608] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 145.034138][ T5624] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.052464][ T5772] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 145.052557][ T5772] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 145.282399][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 145.430333][ T6346] overlayfs: workdir and upperdir must be separate subtrees [ 145.484408][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.485028][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.532802][ T6393] Bluetooth: MGMT ver 1.23 [ 145.663257][ T5727] usb 4-1: USB disconnect, device number 10 [ 145.889032][ T6405] netlink: 56 bytes leftover after parsing attributes in process `syz.3.206'. [ 145.972886][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 147.241400][ T6449] loop0: detected capacity change from 0 to 7 [ 147.275012][ T1023] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2 [ 147.281170][ T5727] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 147.303310][ T6449] Dev loop0: unable to read RDB block 7 [ 147.303356][ T6449] loop0: unable to read partition table [ 147.303577][ T6449] loop0: partition table beyond EOD, truncated [ 147.303612][ T6449] loop_reread_partitions: partition scan of loop0 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.349498][ T5726] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 147.439665][ T6445] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 147.468058][ T5727] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 147.468088][ T5727] usb 3-1: config 0 has no interface number 0 [ 147.468137][ T5727] usb 3-1: config 0 interface 41 has no altsetting 0 [ 147.503112][ T5726] usb 1-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 147.503171][ T5726] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 33 [ 147.503198][ T5726] usb 1-1: config 1 interface 0 has no altsetting 0 [ 147.511393][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.521111][ T5727] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 147.521142][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.521163][ T5727] usb 3-1: Product: syz [ 147.521178][ T5727] usb 3-1: Manufacturer: syz [ 147.521192][ T5727] usb 3-1: SerialNumber: syz [ 147.531866][ T5727] usb 3-1: config 0 descriptor?? [ 147.540962][ T5726] usb 1-1: string descriptor 0 read error: -22 [ 147.541134][ T5726] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.40 [ 147.541160][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.573772][ T5772] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 147.573798][ T5772] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 148.902558][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.905764][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.937382][ T5727] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 148.961378][ T6461] netlink: 240 bytes leftover after parsing attributes in process `syz.3.218'. [ 149.052891][ T5727] usb 3-1: USB disconnect, device number 10 [ 150.309483][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.315399][ T5772] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 150.315428][ T5772] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 150.478756][ T5843] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 150.631972][ T5843] usb 4-1: device descriptor read/64, error -71 [ 150.878793][ T5843] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 151.038775][ T5843] usb 4-1: device descriptor read/64, error -71 [ 151.149459][ T5843] usb usb4-port1: attempt power cycle [ 151.508980][ T5843] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 151.549722][ T5843] usb 4-1: device descriptor read/8, error -71 [ 151.788886][ T5843] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 151.810428][ T5843] usb 4-1: device descriptor read/8, error -71 [ 151.935046][ T5843] usb usb4-port1: unable to enumerate USB device [ 152.576493][ T5726] usbhid 1-1:1.0: can't add hid device: -71 [ 152.576620][ T5726] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 152.641284][ T5726] usb 1-1: USB disconnect, device number 5 [ 152.727617][ T6503] binder: 6502:6503 ioctl c0306201 200000000080 returned -14 [ 152.750733][ T6503] binder: 6502:6503 ioctl c0306201 2000000003c0 returned -14 [ 153.098786][ T5772] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.269673][ T5772] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 153.269709][ T5772] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 153.269737][ T5772] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 153.309441][ T5772] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 153.309473][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.309494][ T5772] usb 2-1: Product: syz [ 153.309510][ T5772] usb 2-1: Manufacturer: syz [ 153.309527][ T5772] usb 2-1: SerialNumber: syz [ 153.364673][ T5772] usb 2-1: config 0 descriptor?? [ 153.366950][ T6506] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.367080][ T6506] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 153.400940][ T5772] usb 2-1: ucan: probing device on interface #0 [ 153.433230][ T5726] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.628769][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 153.661993][ T5726] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.662019][ T5726] usb 1-1: config 0 has no interface number 0 [ 153.665373][ T5726] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 153.665406][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.665484][ T5726] usb 1-1: Product: syz [ 153.665500][ T5726] usb 1-1: Manufacturer: syz [ 153.665516][ T5726] usb 1-1: SerialNumber: syz [ 153.734741][ T5726] usb 1-1: config 0 descriptor?? [ 153.766903][ T5726] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 154.103984][ T5772] ucan 2-1:0.0 can0: registered device [ 154.395907][ T6514] program syz.0.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.438865][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.555118][ T5772] ucan 2-1:0.0 can0: firmware string: unknown [ 154.594538][ T5772] usb 2-1: USB disconnect, device number 9 [ 154.659211][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.662700][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.669627][ T5727] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 154.830061][ T5727] usb 4-1: Using ep0 maxpacket: 32 [ 154.832848][ T5727] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 154.832877][ T5727] usb 4-1: config 0 has no interface number 0 [ 154.832924][ T5727] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.836392][ T5727] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 154.836424][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.836446][ T5727] usb 4-1: Product: syz [ 154.836462][ T5727] usb 4-1: Manufacturer: syz [ 154.836479][ T5727] usb 4-1: SerialNumber: syz [ 154.884063][ T5727] usb 4-1: config 0 descriptor?? [ 154.909708][ T5727] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 154.909746][ T5727] em28xx 4-1:0.132: Video interface 132 found: [ 155.181646][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.204410][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.400617][ T6550] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0) [ 155.431222][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.432264][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.517315][ T5726] gspca_spca1528: reg_r err -71 [ 155.517415][ T5726] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 155.675141][ T5726] usb 1-1: USB disconnect, device number 6 [ 155.960138][ T5727] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 156.048238][ T5727] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 156.048291][ T5727] em28xx 4-1:0.132: board has no eeprom [ 156.108852][ T5727] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 156.108897][ T5727] em28xx 4-1:0.132: analog set to bulk mode. [ 156.138050][ T5843] em28xx 4-1:0.132: Registering V4L2 extension [ 156.169600][ T5713] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 156.214188][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 156.304044][ T5713] usb 2-1: device descriptor read/64, error -71 [ 156.329083][ T5727] usb 4-1: USB disconnect, device number 15 [ 156.333031][ T5727] em28xx 4-1:0.132: Disconnecting em28xx [ 156.333472][ T5843] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 156.470709][ T6567] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 156.524310][ T6570] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 156.550662][ T5713] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 156.588162][ T5843] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 156.588196][ T5843] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 156.588207][ T5843] em28xx 4-1:0.132: No AC97 audio processor [ 156.719829][ T5713] usb 2-1: device descriptor read/64, error -71 [ 156.830039][ T5713] usb usb2-port1: attempt power cycle [ 156.888984][ T5843] usb 4-1: Decoder not found [ 156.889007][ T5843] em28xx 4-1:0.132: failed to create media graph [ 156.889065][ T5843] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 156.993353][ T6567] team0: Port device dummy0 added [ 157.022135][ T6576] ================================================================== [ 157.022152][ T6576] BUG: KASAN: use-after-free in v4l2_open+0x398/0x3a0 [ 157.022187][ T6576] Read of size 4 at addr ffff88803bb609d0 by task v4l_id/6576 [ 157.022206][ T6576] [ 157.022219][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: v4l_id Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.022243][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.022257][ T6576] Call Trace: [ 157.022265][ T6576] [ 157.022275][ T6576] dump_stack_lvl+0xe8/0x150 [ 157.022304][ T6576] print_address_description+0x55/0x1e0 [ 157.022335][ T6576] ? v4l2_open+0x398/0x3a0 [ 157.022364][ T6576] print_report+0x58/0x70 [ 157.022402][ T6576] kasan_report+0x117/0x150 [ 157.022425][ T6576] ? v4l2_open+0x398/0x3a0 [ 157.022457][ T6576] v4l2_open+0x398/0x3a0 [ 157.022488][ T6576] chrdev_open+0x4d0/0x5f0 [ 157.022514][ T6576] ? __pfx_chrdev_open+0x10/0x10 [ 157.022539][ T6576] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 157.022577][ T6576] ? __pfx_chrdev_open+0x10/0x10 [ 157.022600][ T6576] do_dentry_open+0x83d/0x13e0 [ 157.022633][ T6576] vfs_open+0x3b/0x350 [ 157.022659][ T6576] ? path_openat+0x2ed3/0x3960 [ 157.022680][ T6576] path_openat+0x2eea/0x3960 [ 157.022718][ T6576] ? __pfx_path_openat+0x10/0x10 [ 157.022739][ T6576] ? kasan_save_track+0x4f/0x80 [ 157.022768][ T6576] ? kasan_save_track+0x3e/0x80 [ 157.022798][ T6576] ? __kasan_slab_alloc+0x6c/0x80 [ 157.022834][ T6576] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.022872][ T6576] do_file_open+0x23e/0x4a0 [ 157.022890][ T6576] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.022926][ T6576] ? __pfx_do_file_open+0x10/0x10 [ 157.022958][ T6576] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 157.022995][ T6576] ? alloc_fd+0x679/0x6f0 [ 157.023028][ T6576] do_sys_openat2+0x115/0x200 [ 157.023058][ T6576] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.023088][ T6576] ? exc_page_fault+0x6a/0xc0 [ 157.023120][ T6576] ? do_user_addr_fault+0xc6f/0x1340 [ 157.023148][ T6576] __x64_sys_openat+0x138/0x170 [ 157.023179][ T6576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.023203][ T6576] do_syscall_64+0x15f/0xf80 [ 157.023235][ T6576] ? trace_irq_disable+0x3b/0x140 [ 157.023269][ T6576] ? clear_bhb_loop+0x40/0x90 [ 157.023293][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.023316][ T6576] RIP: 0033:0x7efe1d7c8407 [ 157.023335][ T6576] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 157.023354][ T6576] RSP: 002b:00007ffe376513e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 157.023377][ T6576] RAX: ffffffffffffffda RBX: 00007efe1d6da880 RCX: 00007efe1d7c8407 [ 157.023402][ T6576] RDX: 0000000000000000 RSI: 00007ffe37652f1b RDI: ffffffffffffff9c [ 157.023417][ T6576] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 157.023429][ T6576] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 157.023442][ T6576] R13: 00007ffe37651630 R14: 00007efe1df5e000 R15: 000055ce3d8c34d8 [ 157.023467][ T6576] [ 157.023475][ T6576] [ 157.023480][ T6576] The buggy address belongs to the physical page: [ 157.023503][ T6576] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803bb61380 pfn:0x3bb60 [ 157.023524][ T6576] flags: 0x80000000000000(node=0|zone=1) [ 157.023558][ T6576] raw: 0080000000000000 ffffea0000e0cf08 ffff8880b8742d00 0000000000000000 [ 157.023578][ T6576] raw: ffff88803bb61380 0000000000000000 00000000ffffffff 0000000000000000 [ 157.023589][ T6576] page dumped because: kasan: bad access detected [ 157.023604][ T6576] page_owner tracks the page as freed [ 157.023612][ T6576] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5843, tgid 5843 (kworker/1:7), ts 156138495298, free_ts 157014842537 [ 157.023646][ T6576] post_alloc_hook+0x1f9/0x250 [ 157.023684][ T6576] get_page_from_freelist+0x28c1/0x2940 [ 157.023707][ T6576] __alloc_frozen_pages_noprof+0x18d/0x380 [ 157.023729][ T6576] alloc_pages_mpol+0xd1/0x380 [ 157.023749][ T6576] ___kmalloc_large_node+0x4e/0x120 [ 157.023782][ T6576] __kmalloc_large_noprof+0x1a/0x90 [ 157.023813][ T6576] em28xx_v4l2_init+0xe7/0x2f50 [ 157.023846][ T6576] em28xx_init_extension+0x120/0x1c0 [ 157.023874][ T6576] process_one_work+0x98b/0x1630 [ 157.023902][ T6576] worker_thread+0xb49/0x1140 [ 157.023932][ T6576] kthread+0x389/0x470 [ 157.023950][ T6576] ret_from_fork+0x514/0xb70 [ 157.023972][ T6576] ret_from_fork_asm+0x1a/0x30 [ 157.023999][ T6576] page last free pid 5843 tgid 5843 stack trace: [ 157.024011][ T6576] __free_frozen_pages+0x10af/0x1190 [ 157.024043][ T6576] em28xx_v4l2_init+0x16c5/0x2f50 [ 157.024074][ T6576] em28xx_init_extension+0x120/0x1c0 [ 157.024102][ T6576] process_one_work+0x98b/0x1630 [ 157.024129][ T6576] worker_thread+0xb49/0x1140 [ 157.024156][ T6576] kthread+0x389/0x470 [ 157.024175][ T6576] ret_from_fork+0x514/0xb70 [ 157.024197][ T6576] ret_from_fork_asm+0x1a/0x30 [ 157.024223][ T6576] [ 157.024228][ T6576] Memory state around the buggy address: [ 157.024240][ T6576] ffff88803bb60880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.024254][ T6576] ffff88803bb60900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.024268][ T6576] >ffff88803bb60980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.024279][ T6576] ^ [ 157.024290][ T6576] ffff88803bb60a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.024303][ T6576] ffff88803bb60a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 157.024313][ T6576] ================================================================== [ 157.025856][ T6576] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.025878][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: v4l_id Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.025904][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.025917][ T6576] Call Trace: [ 157.025925][ T6576] [ 157.025934][ T6576] vpanic+0x56c/0xa60 [ 157.025976][ T6576] ? __pfx_vpanic+0x10/0x10 [ 157.026009][ T6576] ? __pfx___schedule+0x10/0x10 [ 157.026042][ T6576] panic+0xc5/0xd0 [ 157.026072][ T6576] ? __pfx_panic+0x10/0x10 [ 157.026104][ T6576] ? preempt_schedule_thunk+0x16/0x40 [ 157.026143][ T6576] ? v4l2_open+0x398/0x3a0 [ 157.026170][ T6576] check_panic_on_warn+0x89/0xb0 [ 157.026195][ T6576] ? v4l2_open+0x398/0x3a0 [ 157.026225][ T6576] end_report+0x73/0x170 [ 157.026246][ T6576] ? v4l2_open+0x398/0x3a0 [ 157.026273][ T6576] kasan_report+0x128/0x150 [ 157.026296][ T6576] ? v4l2_open+0x398/0x3a0 [ 157.026337][ T6576] v4l2_open+0x398/0x3a0 [ 157.026369][ T6576] chrdev_open+0x4d0/0x5f0 [ 157.026393][ T6576] ? __pfx_chrdev_open+0x10/0x10 [ 157.026416][ T6576] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 157.026454][ T6576] ? __pfx_chrdev_open+0x10/0x10 [ 157.026478][ T6576] do_dentry_open+0x83d/0x13e0 [ 157.026510][ T6576] vfs_open+0x3b/0x350 [ 157.026535][ T6576] ? path_openat+0x2ed3/0x3960 [ 157.026556][ T6576] path_openat+0x2eea/0x3960 [ 157.026592][ T6576] ? __pfx_path_openat+0x10/0x10 [ 157.026615][ T6576] ? kasan_save_track+0x4f/0x80 [ 157.026646][ T6576] ? kasan_save_track+0x3e/0x80 [ 157.026676][ T6576] ? __kasan_slab_alloc+0x6c/0x80 [ 157.026713][ T6576] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.026750][ T6576] do_file_open+0x23e/0x4a0 [ 157.026769][ T6576] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 157.026805][ T6576] ? __pfx_do_file_open+0x10/0x10 [ 157.026837][ T6576] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 157.026870][ T6576] ? alloc_fd+0x679/0x6f0 [ 157.026904][ T6576] do_sys_openat2+0x115/0x200 [ 157.026935][ T6576] ? __pfx_do_sys_openat2+0x10/0x10 [ 157.026964][ T6576] ? exc_page_fault+0x6a/0xc0 [ 157.026997][ T6576] ? do_user_addr_fault+0xc6f/0x1340 [ 157.027024][ T6576] __x64_sys_openat+0x138/0x170 [ 157.027056][ T6576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.027079][ T6576] do_syscall_64+0x15f/0xf80 [ 157.027112][ T6576] ? trace_irq_disable+0x3b/0x140 [ 157.027147][ T6576] ? clear_bhb_loop+0x40/0x90 [ 157.027172][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.027195][ T6576] RIP: 0033:0x7efe1d7c8407 [ 157.027214][ T6576] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 157.027235][ T6576] RSP: 002b:00007ffe376513e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 157.027258][ T6576] RAX: ffffffffffffffda RBX: 00007efe1d6da880 RCX: 00007efe1d7c8407 [ 157.027275][ T6576] RDX: 0000000000000000 RSI: 00007ffe37652f1b RDI: ffffffffffffff9c [ 157.027290][ T6576] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 157.027302][ T6576] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 157.027331][ T6576] R13: 00007ffe37651630 R14: 00007efe1df5e000 R15: 000055ce3d8c34d8 [ 157.027357][ T6576] [ 157.027958][ T6576] Kernel Offset: disabled