last executing test programs: 6.248755599s ago: executing program 1 (id=63): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000480)={0x0, r1, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x6, 0x200000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x22, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xb, '\v['}, @main=@item_012={0x1, 0x0, 0xa, 'D'}]}}, 0x0}, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x301001) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x100000001) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x405c820) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 4.915073526s ago: executing program 2 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @val={0x2, 0x0, 0x1, 0x3, 0x0, 0xfc01}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @multicast, @ipv4={'\x00', '\xff\xff', @broadcast}, @broadcast, @empty}}, 0x3e) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0xfff8, [0xa, 0x6, 0x6, 0xccb, 0x7, 0x1003, 0x1, 0x7, 0xe, 0x3ff, 0x5, 0x4, 0xb, 0x2, 0x4, 0x3, 0x5, 0x7, 0xc27, 0x1, 0x1ff, 0x2522, 0x2000, 0x7fe, 0xff, 0x0, 0x800, 0x5, 0x0, 0x8, 0xfff7, 0x3, 0x5, 0x0, 0xff, 0x7, 0x4, 0x8, 0x101, 0xa432, 0x207, 0x7, 0x9acb, 0x54ae, 0x5, 0xf, 0x7, 0xc9], 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000480)={0x2, 0x1000, "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xc, 0x0, 0xa2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x4, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x3, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x54000, 0xa, 0x0, 0x7, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x80, 0x2, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.709621386s ago: executing program 2 (id=72): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x2f, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x4002f, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) 4.536317166s ago: executing program 2 (id=73): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) (async) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') (async) close(0xffffffffffffffff) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) (async) r3 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r3}) r4 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r4, &(0x7f0000000180)="01", 0x1) (async) close(r4) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 4.473706051s ago: executing program 2 (id=74): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x7, 0x2, 0xf4a}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x6}}) 3.242086906s ago: executing program 1 (id=77): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x10, 0x700, 0x8, 0x80000001, {{0x7, 0x4, 0x1, 0x21, 0x1c, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0x7, 0x92, [@rand_addr=0x64010100]}]}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 3.163396135s ago: executing program 1 (id=78): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x341, 0x0, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x6b, 0x0, 0xa, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@generic={0x94, 0xc, "74141141c1e93e03fc23"}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0x11, "727c983251ed15de07ec8a9ae94d31"}, {0x6, 0x3, "ee"}, {0x2, 0x2}]}]}}}}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1100"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x804) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) listen(r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r2, 0x21, 0x9ac, 0x400) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) 2.84365177s ago: executing program 1 (id=80): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x46, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b17, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, 0x0, 0xffffffffffffff5b) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={r6, 0xf7, "2b036536aed1be735543fcba3fe8a115ace562e5fe1058d913b8071d664ad701e4bf75d4c4a64e2f094071df751aaca522aeca1fc7ed0078083876961dab00dc1fd8de4427790e70ca8dafded180f6a2829f0a5710b2297350da50094e78a4086a46f987bfcda0a03c29547dcab7b80146c2d4ae01f6bd24f4ca3f295ffd8981850f5d824b4cdd48a08b72d1561dc13441b12d38f8cbdd19291e3ee656f62d1ff872e9216e3d1436c287ecbed653783147c1749c3a95c6c7ffc2a7bd874f6c2ec67d975bfb99a736b6c7286c37923557ac1007465ff31597cc47d1be5003bbab98fc9dee2b87a1c35ed7c26e440ea718b66c5abf7821b7"}, &(0x7f0000000100)=0xff) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r2, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x46, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r4, 0x40045b17, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x3) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) (async) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, 0x0, 0xffffffffffffff5b) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={r6, 0xf7, "2b036536aed1be735543fcba3fe8a115ace562e5fe1058d913b8071d664ad701e4bf75d4c4a64e2f094071df751aaca522aeca1fc7ed0078083876961dab00dc1fd8de4427790e70ca8dafded180f6a2829f0a5710b2297350da50094e78a4086a46f987bfcda0a03c29547dcab7b80146c2d4ae01f6bd24f4ca3f295ffd8981850f5d824b4cdd48a08b72d1561dc13441b12d38f8cbdd19291e3ee656f62d1ff872e9216e3d1436c287ecbed653783147c1749c3a95c6c7ffc2a7bd874f6c2ec67d975bfb99a736b6c7286c37923557ac1007465ff31597cc47d1be5003bbab98fc9dee2b87a1c35ed7c26e440ea718b66c5abf7821b7"}, &(0x7f0000000100)=0xff) (async) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) (async) 2.592237688s ago: executing program 0 (id=83): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6220002}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3f8, 0x100, 0x70bd2a, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x183040, 0x0) (async) pread64(r1, &(0x7f0000001440)=""/126, 0x7e, 0x41) 2.590450452s ago: executing program 2 (id=84): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000c00060003000000003c3100090000000023f0b1e6cb183f85f7889349b8040009000000000000dd0c000200"/74], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r4, &(0x7f0000001c00)={0xa, 0x4e20, 0xfc, @private0, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0008"], 0x34}}, 0x400c010) 2.505946734s ago: executing program 2 (id=86): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x6, 0x2fd, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xeb, 0x16, 0x77, 0x20, 0x5c6, 0x9009, 0x647f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2eb, 0x2, 0xf9, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0xab, 0x12, 0x2, 0x70, 0x2b, 0x70, 0x74, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "9e"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x200, 0x677c663b424e30ab}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x0, 0x6}]}], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0xb, 0x7f, 0x5, [@generic={0xff, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x7}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0x3, 0x6d, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x1000}]}}]}}, {{0x9, 0x4, 0xde, 0xf, 0x4, 0xea, 0xe4, 0x32, 0x8, [@hid_hid={0x9, 0x21, 0xfff, 0x6, 0x1, {0x22, 0x939}}], [{{0x9, 0x5, 0x1c, 0x0, 0x10, 0x2, 0xd5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x7}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0x2, 0xb1, 0x80, [@generic={0xb9, 0x0, "bf2bcfae64b36d8e9bfef73a018d54062a85c6e7f724cc24b43142e9194b56cbc77744e14ee2fa471dd3aadbc407e9fae5471127fa693e4ecfb657671aa4c0da3ce702e2ed40c97eebdb33ab3f5c06ed1007256d76a255abf7699f958afd522a3d067f49a5bb906957e21e79b30c240740c504cdf16c636b4f4393b2cb8237bbe44cf9d8894e0782b84c04c42c30b1f047c271dc962bd3046a9bdfd29da07f32ab5b7e26436edfe684008a5a140ea6cb3059fa888e2363"}, @generic={0x90, 0x6, "86466a7e6068bfa88b72fdd8a1e747d9454ad02ba11a06071896f08c078abb7f1a72534a22051b0bd08756bcd81d2a6c51472acf16148ccdc99cdfb1927e293a6ee598e6ba7a80371813551a68f9a1eb3a405430cd1d692a7f62e2b4b82a27aab06e5cdaa727b9ca5d23424f76647592150f50cd66056a172e4591ca8139eeafc072323302213f91b0188dde6879"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x0, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0xd1, 0x20, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x40}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xe, 0x4f, 0x2, 0x20, 0x8}, 0x3b, &(0x7f0000000040)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0x3ff, 0xf00f, 0x8000, [0x3f, 0x30, 0x3fc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x7, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "b7c6055f5f37239944ceac90fa7811ba"}]}, 0xa, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x420}}, {0x37, &(0x7f0000000340)=@string={0x37, 0x3, "9e7483b73053bbe4d539702204bc0093e4deac50c2a30c86f25e803aa67dc9020cc51f09f13895503ea06f50f5cc758b4b2241cf61"}}, {0xf9, &(0x7f0000000380)=@string={0xf9, 0x3, "9759ef01763d43f895eadf7dd0878722efb3dc519549dc377d23ca44023b7cee24989f9068b9a673738e3afa77b796a5541478d7ca520936312751c76210386a99d021775f51ff6797354d48c1558fcfe72d604d3161a415b49f75ab1c92376629b5af565e920ebac9b1abd733b408cb2932307bc91f36910615a9e9c066579721b4c7b64082b540a76117b89da0cf6a17325ff5775463bf4e6cabfb654d6d093ac89ac431d0d95a79c830c4857f0e01c0c8957be5fecd65cc23def024b3db7a1cab53f3364f820276322074920126960dae0eb076a7274d68f6bda6e0142e17093b9261956c1921c24726aeaf0737509f6591178e963c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x8c, &(0x7f0000000840)=@string={0x8c, 0x3, "81e7968b01c3ef5e30d7d71be1d8bac6d513d98aa14107ebebbf54a07d5faed04989308e15c2d0226e9c06fd8e0c961b3b8a4ceaa8994b1a3d08c1e33bae31987fa88b426bacd5b57b96e5dc273a2848b4dfb5f56375c96f9208e1cd8f1d4074b9cb5f3edb254b1514756af543bfbcf77b6c16e6458401d9c993767226169841acd5297e1965728b442d"}}]}) syz_usb_ep_write(r0, 0x81, 0xfffffdf6, &(0x7f0000000200)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c7807e8773eed7b94fa099ab84feadec2ea95f67aba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e9b8e4fb4634f8d4c0000000d75f34bb50d8f7084000000000000000000") 2.272422612s ago: executing program 1 (id=88): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) close(0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f0000000480)=0x18) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8080) 2.257493421s ago: executing program 1 (id=89): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e00787680f600", 0x4, 0x2}) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x97, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x7, 0x82, 0x1, {0x22, 0xe38}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5d, 0x3e, 0x4}}}}}]}}]}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4dc, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1c, 0x22}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x0, 0x13, 0xb6, 0x1, 0x7]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x4c, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6ceb}, @broadcast, @broadcast, @from_mac=@broadcast, {0x5, 0x5}}, @sp_mp_open={0xf, 0x1, {0x118, {0x1, 0x6, [{0xc}, {0xf1b1bed531485f57, 0x1}, {0x2, 0x1}, {0x4c}, {0x12}, {0x16}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x302a, 0x2, 0x5, 0x0, {0xfff, 0x5, 0x0, 0x81, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x7}}}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x12e0}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xcea}, @NL80211_ATTR_FRAME={0x4a, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x10}, @device_b, @broadcast, @random="921093489380", {0x4, 0xff7}}, @sp_mp_open={0xf, 0x1, {0x1, {0x1, 0x4, [{0x1}, {0x12}, {0x36}, {0xb, 0x1}]}, @val={0x72, 0x6}, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x7, 0x185b, 0x0, 0x24, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x5, 0x30000000, 0x40}}}}}}, @NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_b, @device_a, @from_mac=@device_b, {0xc, 0x9}}, @tdls_setup_resp={0xc, 0x1, 0x65, 0x3, @val=0x800, @val={0x1, 0x1, [{0x3, 0x1}]}, @void, @val={0x65, 0x12, {@initial, @device_b, @broadcast}}}}}, @NL80211_ATTR_FRAME={0x2cc, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac=@broadcast, {0x4, 0x4}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x1, 0x4e, @void, [{0xdd, 0x4c, "c723193edb71f2c9570cba7b07a6a2ec8ae7982953d6c39a966c6f7988c40c714a0de5ec43937202d145e5b1484a23240d061ce2d148302db1dc0fb9ff73d9eca1ad09cb2c2890c658521805"}, {0xdd, 0x6d, "3411da4a31b55098b549009b7b6127d5b94e5750537d77105911dab99db08c8539d2ce0c3b70b0ec845ddbedbd81d4627d6010426b9b0e56010b2efc27d1d27909c3e403bcd13775d3448b7ff08b6b95d8ff521a78c1735ddee56204edd2963b67dfe13e0d94fa261ccf5b06f3"}, {0xdd, 0x82, "1b4b735b8640c027598cd56c307c6d818e59538ca3d6e518a076a13d4a0f5371bdfb8dab9695f330fdbed868bf7b5f802f19785be1961e7cdb287c1e0ceddaa0767ee917223d088b53b6eec3c66b1a20b67179cb922f394a956b8dd8330f36339a7e9a7ae1bdd3c0d2901c0892553690917a6904620cd7bf03b6315d4fc1ac1b3ab8"}, {0xdd, 0x87, "7912f8105606309bd530daea04c072c9f6141e35b5ec553898f3ca70ce0eb76861f17298ac0f9868aedebcf8e9ddb34eef00cf7a4b365654821c0d9af219c651480ab3fe1b3774cacc15b0b67256645d64e5f1402f1a0fce4ad10259f8ac37e79570f0fd916a0fe55cb9a7ae17949837a67d7a83d09231a361195bad18369be6ddec7290cb2026"}, {0xdd, 0x56, "a8a2b2713570a263be1ca1ba168310594a03792697f2fcb3a522cdeb7cf0f88a3b14ff1680d9f4600aa91fc903d4b157048d222afa3be44332cfc12e441c08adcbc46255bd79f82e72ad26099bbe2af387f4dac61ead"}, {0xdd, 0x82, "4b11b817554095e1c26bc289d48ae5ed99e708c1b97da76b4acdf95e80c2f346478cc277874cd7df1e37c4fb6293b38af9823705ebf796f8a10e1dfe4e3ae9de764270685cde3bdf545767380a3e248c09041c88212cbb500706cfc9f7e16203a0c030e79e9ea6411aa00efc9799793764db2bf1733ea50152637b219085f4ab4a92"}]}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_FRAME={0xe5, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xe}, @device_b, @device_b, @initial, {0x0, 0x2}, @value=@ver_80211n={0x0, 0x63af, 0x1, 0x1, 0x0, 0x3, 0x1}}, 0x10900, 0x8, @device_b, {0x0, 0x16, @random="eaae4cdc075c8d623b671a8f414c513eef0c23b7d66a"}, @val={0x1, 0x7, [{0x2, 0x1}, {0x5, 0x1}, {0x60}, {0x60}, {0x4}, {0x9, 0x1}, {0x1b}]}, @val={0x2d, 0x1a, {0x10, 0x2, 0x1, 0x0, {0x5, 0x1ffe, 0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, 0x800, 0xe, 0xa}}, [{0xdd, 0x7c, "4ccb700a32d6cfa066bad21d7fa94bbae0f9d6f41a75a9928a8d6b0bc6c6a318900612d64518a5a42a6137e780b8de0d1ed422ebab3fddaac5d2499795954fc9295dd4b9b5d8167e3122c2b4deb2fd3d8245464176bb164ac88c07e083aabca570515e175141b6703894e45a6c2dba58e35abb1e6479d91a6f1955bd"}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x6840}, 0x20000800) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x60) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x7) 1.75987957s ago: executing program 0 (id=90): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa00000001002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = signalfd4(r0, &(0x7f0000000080)={[0x5b9]}, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0xca800, 0x0, 0x0, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "1200"}, 0x6, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffffffffffff, 0x2) 1.648959272s ago: executing program 0 (id=91): socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1, 0x7}, &(0x7f0000000100)='y)d\x85\x8c\x9f[\x9f<%\x05p\x0f\x91\xea\xd0\xcc\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x70d000, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1b1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) 976.163594ms ago: executing program 3 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001040)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046b4c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f00000010c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x583a, 0x4008, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x4000000000c, 0x8000000000001, 0x800040068], 0xdddd0000, 0x80002}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000) 806.229166ms ago: executing program 3 (id=93): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000880)={0x8, 0x3, {0xd, @usage=0x1, r1, 0x6, 0x0, 0x81, 0x2, 0x99, 0x10, @usage=0xf21, 0xffffffff, 0x7, [0x9, 0x7f, 0x5, 0x8, 0x6, 0x5]}, {0x1, @struct={0x8000000, 0x1}, 0x0, 0x5, 0x9, 0x8000000000000001, 0x7, 0x0, 0x24, @struct={0xc9e0, 0x8}, 0x7, 0xffff, [0x0, 0x9, 0x4d42, 0x7, 0x4, 0x1]}, {0x8, @struct={0x5}, r2, 0x9, 0x8000000000000001, 0x4, 0x0, 0xa2a3, 0x62, @struct={0x400, 0x9}, 0x4, 0x6dde, [0x3, 0x2, 0x8, 0xebf, 0x1, 0x8]}, {0x800, 0x3, 0x1}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x39, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000d40)={0x7, 0x8, 0xfa00, {r4, 0xe}}, 0x10) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r5 = socket$kcm(0x29, 0x16c6a66812d5dfd8, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x810, r0, 0xff6d0000) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f0000000dc0)={{0x3, 0x3, 0x80000001, 0x2, 0xb}, 0x2, 0xfff, 0x7}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000e40)={'syzkaller1\x00', {0x2, 0x0, @multicast1}}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000f80)={'ip6_vti0\x00', &(0x7f0000000f00)={'ip6tnl0\x00', 0x0, 0x2d, 0x3, 0xf3, 0x7, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x20, 0x8000, 0xb8}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xa0, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4080}, 0x200000d1) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000001100)=0x6, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000001140)={{0x2, 0x2, 0x1000, 0x3, 0xc}}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x101) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r3, &(0x7f0000001180)={0x20000000}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000011c0), 0x40100, 0x0) syz_open_pts(r10, 0x80) lstat(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, 0xffffffffffffffff, r11) fcntl$setlease(r5, 0x400, 0x2) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f00000012c0)='syz0\x00') ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 696.675587ms ago: executing program 3 (id=94): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x2000b) 432.626121ms ago: executing program 0 (id=95): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xe7, 0x0) read$alg(r0, &(0x7f0000000000)=""/41, 0x29) 365.527289ms ago: executing program 0 (id=96): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f045, 0x123}) ppoll(&(0x7f0000000300)=[{r2, 0x2007}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r3, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}, 0x30}}, 0x8000) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'pcl726\x00', [0x6f, 0x9, 0x9, 0x10000004, 0x5, 0xfffffbf9, 0x7fff, 0x3fffffff, 0x800000, 0x2, 0x5, 0xffffffff, 0x1, 0xffff3840, 0x40000004, 0xf, 0x7, 0x0, 0x3, 0x3fffffff, 0x86, 0x5, 0x0, 0x20001e56, 0x437, 0xfff, 0x41, 0x7ffffffc, 0x7, 0x7fffffd, 0xfffffff8]}) 224.361328ms ago: executing program 0 (id=97): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket(0x29, 0x3, 0x3ff) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000004c0)={0x40, 0x2f, 0x1d, "d14ee1cfe37466fecd0b560b4110147d333adb38f9a309a2f258a05319"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x40, 0x10, 0x92, {0x92, 0x11, "b72b48f21ddfc02240645c7e0cb7602b88fa8f63440a327c14dd550e156234db346cd717012277805e2cffd34de1228c2e7ea975f3037b48d4e6faf319b1e0152724d1cb826b756c1d2362abce36d31b05aa55e6eebddd2b77e7c7f48d146c4b68cda737eb24cfb75bb573f96002bedcefab6c734e0db5b3cdf35468e49065af63ec18714bbd6de60c7d805c908abeab"}}, &(0x7f00000005c0)={0x0, 0x3, 0x11, @string={0x11, 0x3, "2dee314c78fffb75ddeeb482accd9c"}}, &(0x7f0000000600)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x6, 0x5, 0x6, 0x3}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x1, 0xfb, "c636e5c4", "de99af02"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x7, 0x81, 0x1, 0xf238, 0x66}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000740)={0x0, 0x5, 0x83, "ad8460394ba22a1ea01184ab9918ca72341572f5028248874c334c84ff74a8a97323ce3aac542d49a02e27d5c52fb968b7d93bcd9375655e4afb1d16c2255a09e272c521f56d1425eaa39de80003fc3a8c3faf8e2aa476d39f739d85627f074c145c075b57253c1476efdb26d7b5ca9d2004ee7185227df901c2582699819fdd2423dc"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xd9}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x64}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "38a7"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="50e9f7af8dc5"}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "e1c5"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x22, 0x3f, {0x3f, 0x23, "7450055382eb76a22411ae3fa1679bb594df075d92cea6131b741b4a6188f3497d744f815889c8ffcaf7b933d249e7e582bde6211cb35f3d39782f9baa"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0xb, 0x5c, "53c54a217abe580e06f73cb26092c7ac96a163a65998484d68097b8d192202fcaacc9c09e11f731a0de8510c692c9b935fa3c74bc336a95cd7cab840a392dc69f1f7911e2e16e0a5e89992d4ce793c7c671695a93948b8a77fbf41ae"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x81, 0x1, '\a'}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "a242"}, &(0x7f0000000300)={0x20, 0x83, 0x3, "a5279d"}, &(0x7f0000000340)={0x20, 0x84, 0x1, "d6"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "8031bb"}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000ec0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xe, 0x5, "43b256ffc4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='@0@\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 162.502163ms ago: executing program 3 (id=98): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r1 = socket(0x2, 0x5, 0xfffffffe) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x20, "c7dff70e4f853f3a4c1240f0f02fd60df0b77a2da505c920ec1c690e73015d7c"}, &(0x7f0000000200)=0x28) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0xfffffffc, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c"}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08951b0c"], 0xb) read$FUSE(r0, 0x0, 0x0) 103.231843ms ago: executing program 3 (id=99): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000040)=0x2, 0x4) futex(&(0x7f0000000000)=0x1, 0xb, 0x0, 0x0, &(0x7f00000001c0), 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0x40045612, &(0x7f0000000080)={0xa}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000080)={'wlan1\x00'}) 0s ago: executing program 3 (id=100): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x4b9]}, 0x8, 0x80000) sendto$llc(r0, &(0x7f0000000080)="709458f2faaea90911e99ae8686ede4de26947c01b6f3f7f0afb8ce0e6c23013a009d21bf35f1e938ab102e078869d5be572695532f4879871beb3904f980bab41fe54b6faa0841e894baca5269c2244434aee90cb2fb0ec857760e21781651641614a8d83b348d3f1ff195df9a3f69247d96e4b8ff2c0d41d1846ee2d1dc76ef0a274d720a03bd7289c004c0229b39d2dbca0c396594aa82c3a5bb4574c881ee99f9835c792d3d9dd3939627932626a4219b6d7526949563eaf0674ae6b1100f7c1e2e4dfa973dd152f27fd63ec9389", 0xd0, 0x90, &(0x7f0000000180)={0x1a, 0x336, 0xd, 0x74, 0x6, 0x8d, @remote}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(0x0, 0x0, 0x0, 0x200000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) write(r1, &(0x7f0000000240)="0dee57a1ba6016b81ac48d25d33dbdba438548a3e649be3fce73347fa41cf487b8e7cba771b52987e5740ac6e84c9bd723355f150f", 0x35) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(r1, 0x0, r1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 69.405681][ T5815] cgroup: Unknown subsys name 'net' [ 69.520863][ T5815] cgroup: Unknown subsys name 'cpuset' [ 69.529905][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.958543][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.434729][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.441616][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.516251][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.528855][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.537121][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.546307][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.547728][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.561702][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.562306][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.569555][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.576439][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.584438][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.597905][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.599889][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.612885][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.621063][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.630118][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.630215][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.637260][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.645533][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.659259][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.668025][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.228800][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 74.278052][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 74.320529][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.344472][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 74.475289][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.482592][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.490144][ T5829] bridge_slave_0: entered allmulticast mode [ 74.497995][ T5829] bridge_slave_0: entered promiscuous mode [ 74.526381][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.533947][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.541218][ T5829] bridge_slave_1: entered allmulticast mode [ 74.548529][ T5829] bridge_slave_1: entered promiscuous mode [ 74.603592][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.610969][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.618552][ T5826] bridge_slave_0: entered allmulticast mode [ 74.625765][ T5826] bridge_slave_0: entered promiscuous mode [ 74.666009][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.673456][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.680939][ T5826] bridge_slave_1: entered allmulticast mode [ 74.688937][ T5826] bridge_slave_1: entered promiscuous mode [ 74.699092][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.708482][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.715658][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.723946][ T5828] bridge_slave_0: entered allmulticast mode [ 74.731370][ T5828] bridge_slave_0: entered promiscuous mode [ 74.738726][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.745878][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.753456][ T5827] bridge_slave_0: entered allmulticast mode [ 74.760684][ T5827] bridge_slave_0: entered promiscuous mode [ 74.780528][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.790188][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.798055][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.805210][ T5828] bridge_slave_1: entered allmulticast mode [ 74.812474][ T5828] bridge_slave_1: entered promiscuous mode [ 74.819907][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.827065][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.834424][ T5827] bridge_slave_1: entered allmulticast mode [ 74.841552][ T5827] bridge_slave_1: entered promiscuous mode [ 74.892857][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.934059][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.945324][ T5829] team0: Port device team_slave_0 added [ 74.954079][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.966076][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.985867][ T5829] team0: Port device team_slave_1 added [ 74.993766][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.005429][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.054180][ T5826] team0: Port device team_slave_0 added [ 75.091302][ T5826] team0: Port device team_slave_1 added [ 75.098102][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.105047][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.131029][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.144728][ T5828] team0: Port device team_slave_0 added [ 75.152754][ T5827] team0: Port device team_slave_0 added [ 75.169037][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.175993][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.202703][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.215542][ T5828] team0: Port device team_slave_1 added [ 75.222910][ T5827] team0: Port device team_slave_1 added [ 75.270092][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.277062][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.303029][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.315757][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.322846][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.349501][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.389713][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.396687][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.422804][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.444700][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.451732][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.477887][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.490810][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.497983][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.523919][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.545334][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.552386][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.578492][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.603400][ T5829] hsr_slave_0: entered promiscuous mode [ 75.610060][ T5829] hsr_slave_1: entered promiscuous mode [ 75.663661][ T5826] hsr_slave_0: entered promiscuous mode [ 75.669987][ T5839] Bluetooth: hci2: command tx timeout [ 75.676460][ T5826] hsr_slave_1: entered promiscuous mode [ 75.682800][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 75.688880][ T5826] Cannot create hsr debugfs directory [ 75.758179][ T5834] Bluetooth: hci3: command tx timeout [ 75.763954][ T5842] Bluetooth: hci0: command tx timeout [ 75.770131][ T5839] Bluetooth: hci1: command tx timeout [ 75.778321][ T5828] hsr_slave_0: entered promiscuous mode [ 75.784923][ T5828] hsr_slave_1: entered promiscuous mode [ 75.791398][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 75.797152][ T5828] Cannot create hsr debugfs directory [ 75.806794][ T5827] hsr_slave_0: entered promiscuous mode [ 75.813714][ T5827] hsr_slave_1: entered promiscuous mode [ 75.820103][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 75.825839][ T5827] Cannot create hsr debugfs directory [ 76.249865][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.279891][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.290482][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.312327][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.378879][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.397652][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.408589][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.423001][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.524463][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.540539][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.569283][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.580267][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.679623][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.691191][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.702650][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.714260][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.781367][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.822224][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.846125][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.853381][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.880451][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.887734][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.914741][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.966492][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.993402][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.009451][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.016567][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.038766][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.045879][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.089883][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.131534][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.180944][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.188155][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.203470][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.216807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.223993][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.243129][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.250346][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.273768][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.281315][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.413414][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.605715][ T5829] veth0_vlan: entered promiscuous mode [ 77.642980][ T5829] veth1_vlan: entered promiscuous mode [ 77.728328][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.736986][ T5829] veth0_macvtap: entered promiscuous mode [ 77.759903][ T5842] Bluetooth: hci2: command tx timeout [ 77.775213][ T5829] veth1_macvtap: entered promiscuous mode [ 77.827868][ T5834] Bluetooth: hci3: command tx timeout [ 77.833343][ T5842] Bluetooth: hci0: command tx timeout [ 77.838368][ T5839] Bluetooth: hci1: command tx timeout [ 77.841978][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.866350][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.889546][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.913901][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.929482][ T5826] veth0_vlan: entered promiscuous mode [ 77.937275][ T3421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.948363][ T3421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.958874][ T3421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.978421][ T3421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.014376][ T5826] veth1_vlan: entered promiscuous mode [ 78.090697][ T5828] veth0_vlan: entered promiscuous mode [ 78.124534][ T5828] veth1_vlan: entered promiscuous mode [ 78.153729][ T5826] veth0_macvtap: entered promiscuous mode [ 78.161292][ T5827] veth0_vlan: entered promiscuous mode [ 78.175566][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.183680][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.186873][ T5826] veth1_macvtap: entered promiscuous mode [ 78.241223][ T5827] veth1_vlan: entered promiscuous mode [ 78.256200][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.268896][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.289162][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.321673][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.348707][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.360551][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.373654][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.373968][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.386655][ T5828] veth0_macvtap: entered promiscuous mode [ 78.416423][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.429136][ T5827] veth0_macvtap: entered promiscuous mode [ 78.473528][ T5828] veth1_macvtap: entered promiscuous mode [ 78.499988][ T5827] veth1_macvtap: entered promiscuous mode [ 78.570481][ T5918] FAULT_INJECTION: forcing a failure. [ 78.570481][ T5918] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 78.570716][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.584368][ T5918] CPU: 1 UID: 0 PID: 5918 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 78.584390][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 78.584408][ T5918] Call Trace: [ 78.584415][ T5918] [ 78.584428][ T5918] dump_stack_lvl+0xe8/0x150 [ 78.584456][ T5918] should_fail_ex+0x412/0x560 [ 78.584482][ T5918] _copy_from_user+0x2d/0xb0 [ 78.584499][ T5918] memdup_user+0x5e/0xd0 [ 78.584525][ T5918] strndup_user+0x68/0xd0 [ 78.584542][ T5918] __se_sys_mount+0xdf/0x420 [ 78.584562][ T5918] ? ksys_write+0x242/0x270 [ 78.584585][ T5918] ? __pfx___se_sys_mount+0x10/0x10 [ 78.584609][ T5918] ? __x64_sys_mount+0x20/0xc0 [ 78.584628][ T5918] do_syscall_64+0xe2/0xf80 [ 78.584652][ T5918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.584668][ T5918] ? trace_irq_disable+0x37/0x100 [ 78.584687][ T5918] ? clear_bhb_loop+0x40/0x90 [ 78.584708][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.584724][ T5918] RIP: 0033:0x7f4c7ed9acb9 [ 78.584744][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.584757][ T5918] RSP: 002b:00007f4c7fcf5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.584776][ T5918] RAX: ffffffffffffffda RBX: 00007f4c7f015fa0 RCX: 00007f4c7ed9acb9 [ 78.584788][ T5918] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000140 [ 78.584799][ T5918] RBP: 00007f4c7fcf5090 R08: 0000000000000000 R09: 0000000000000000 [ 78.584809][ T5918] R10: 0000000002208004 R11: 0000000000000246 R12: 0000000000000001 [ 78.584819][ T5918] R13: 00007f4c7f016038 R14: 00007f4c7f015fa0 R15: 00007ffcc17f8648 [ 78.584845][ T5918] [ 78.779852][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.791962][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.803324][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.834514][ T3421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.845252][ T3421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.855020][ T3421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.866735][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.882948][ T3421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.908507][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.918354][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.926497][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.962759][ T272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.973339][ T272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.989510][ T272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.008350][ T272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.059496][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.129693][ T30] audit: type=1326 audit(1769399898.903:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5924 comm="syz.1.2" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30f099acb9 code=0x0 [ 79.167811][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.179038][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.209870][ T272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.219515][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.232198][ T272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.234513][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 79.244550][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.262144][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.263534][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 79.313385][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 79.326817][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 79.336841][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.339862][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 79.365620][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.383250][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 79.399712][ T10] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 79.448367][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.478609][ T5929] FAULT_INJECTION: forcing a failure. [ 79.478609][ T5929] name failslab, interval 1, probability 0, space 0, times 1 [ 79.482180][ T10] usb 1-1: Product: syz [ 79.492895][ T5929] CPU: 1 UID: 0 PID: 5929 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 79.492917][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 79.492926][ T5929] Call Trace: [ 79.492933][ T5929] [ 79.492941][ T5929] dump_stack_lvl+0xe8/0x150 [ 79.492968][ T5929] should_fail_ex+0x412/0x560 [ 79.492995][ T5929] should_failslab+0xa8/0x100 [ 79.493021][ T5929] __kmalloc_cache_noprof+0x88/0x660 [ 79.493043][ T5929] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 79.493067][ T5929] ? sctp_add_bind_addr+0x8c/0x370 [ 79.493094][ T5929] sctp_add_bind_addr+0x8c/0x370 [ 79.493121][ T5929] sctp_copy_local_addr_list+0x314/0x4f0 [ 79.493148][ T5929] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 79.493171][ T5929] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 79.493196][ T5929] ? sctp_v6_is_any+0x64/0x80 [ 79.493212][ T5929] ? sctp_copy_one_addr+0x93/0x360 [ 79.493237][ T5929] sctp_bind_addr_copy+0xb3/0x3c0 [ 79.493260][ T5929] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 79.493285][ T5929] sctp_connect_new_asoc+0x2ff/0x6b0 [ 79.493306][ T5929] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 79.493330][ T5929] ? __local_bh_enable_ip+0xd0/0x130 [ 79.493347][ T5929] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 79.493370][ T5929] ? security_sctp_bind_connect+0x7e/0x2c0 [ 79.493401][ T5929] sctp_sendmsg+0x1528/0x2c10 [ 79.493434][ T5929] ? __pfx_sctp_sendmsg+0x10/0x10 [ 79.493455][ T5929] ? aa_sk_perm+0x15a/0x960 [ 79.493479][ T5929] ? aa_sk_perm+0x82d/0x960 [ 79.493509][ T5929] ? __pfx_aa_sk_perm+0x10/0x10 [ 79.493529][ T5929] ? sock_rps_record_flow+0x19/0x400 [ 79.493552][ T5929] ? inet_sendmsg+0x2f4/0x370 [ 79.493574][ T5929] sock_sendmsg_nosec+0x128/0x1d0 [ 79.493598][ T5929] __sys_sendto+0x3ff/0x590 [ 79.493624][ T5929] ? __pfx___sys_sendto+0x10/0x10 [ 79.493645][ T5929] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 79.493673][ T5929] ? __fget_files+0x3a0/0x420 [ 79.493702][ T5929] ? ksys_write+0x242/0x270 [ 79.493725][ T5929] ? __pfx_ksys_write+0x10/0x10 [ 79.493751][ T5929] __x64_sys_sendto+0xde/0x100 [ 79.493770][ T5929] do_syscall_64+0xe2/0xf80 [ 79.493793][ T5929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.493808][ T5929] ? trace_irq_disable+0x37/0x100 [ 79.493828][ T5929] ? clear_bhb_loop+0x40/0x90 [ 79.493848][ T5929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.493868][ T5929] RIP: 0033:0x7f7726d9acb9 [ 79.493884][ T5929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.493897][ T5929] RSP: 002b:00007f7727bcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 79.493915][ T5929] RAX: ffffffffffffffda RBX: 00007f7727015fa0 RCX: 00007f7726d9acb9 [ 79.493926][ T5929] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 79.493937][ T5929] RBP: 00007f7727bcc090 R08: 000020000005ffe4 R09: 000000000000001c [ 79.493948][ T5929] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 79.493957][ T5929] R13: 00007f7727016038 R14: 00007f7727015fa0 R15: 00007ffe1492ca88 [ 79.493984][ T5929] [ 79.676062][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 79.705905][ T10] usb 1-1: Manufacturer: syz [ 79.827799][ T5839] Bluetooth: hci2: command tx timeout [ 79.841168][ T10] usb 1-1: SerialNumber: syz [ 79.868849][ T10] usb 1-1: config 0 descriptor?? [ 79.886761][ T5935] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 79.896689][ T5935] nbd: error processing sock list [ 79.907726][ T5839] Bluetooth: hci1: command tx timeout [ 79.913184][ T5839] Bluetooth: hci0: command tx timeout [ 79.916093][ T5842] Bluetooth: hci3: command tx timeout [ 79.969461][ T24] usb 2-1: config 5 has an invalid interface number: 146 but max is 0 [ 79.980896][ T24] usb 2-1: config 5 has no interface number 0 [ 79.987121][ T24] usb 2-1: config 5 interface 146 has no altsetting 0 [ 80.002968][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f1.f2 [ 80.013509][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.023316][ T24] usb 2-1: Product: syz [ 80.028885][ T24] usb 2-1: Manufacturer: syz [ 80.037493][ T24] usb 2-1: SerialNumber: syz [ 80.200573][ T5948] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 80.210631][ T5948] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 80.220421][ T5948] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 80.230272][ T5948] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 80.241392][ T5948] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 80.251322][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.259791][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.281054][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.294867][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.314561][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.327209][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.332901][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.340599][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.344225][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.348949][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.361166][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.388897][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.397475][ T5830] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 80.409906][ T5948] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.413949][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.433705][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.441954][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.448867][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.455426][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.462552][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.469695][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.476126][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.484941][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.494765][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.502202][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.509372][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.516008][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 80.522424][ T10] input input5: Timeout waiting for response from device. [ 80.541373][ T10] usb 1-1: USB disconnect, device number 2 [ 80.579520][ T5830] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 80.590521][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.615475][ T5830] usb 3-1: config 0 descriptor?? [ 80.824792][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.834609][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.843746][ T5842] Bluetooth: hci0: Malformed LE Event: 0x0d [ 80.852653][ T5830] usb 3-1: string descriptor 0 read error: -71 [ 80.862745][ T5830] usb-storage 3-1:0.0: USB Mass Storage device detected [ 80.920640][ T5830] usb-storage 3-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 80.939672][ T5966] FAULT_INJECTION: forcing a failure. [ 80.939672][ T5966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.953086][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(full) [ 80.953112][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 80.953121][ T5966] Call Trace: [ 80.953128][ T5966] [ 80.953135][ T5966] dump_stack_lvl+0xe8/0x150 [ 80.953160][ T5966] should_fail_ex+0x412/0x560 [ 80.953183][ T5966] _copy_from_user+0x2d/0xb0 [ 80.953200][ T5966] __se_sys_migrate_pages+0x39b/0xca0 [ 80.953224][ T5966] ? fput+0xa0/0xd0 [ 80.953242][ T5966] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 80.953262][ T5966] ? ksys_write+0x242/0x270 [ 80.953284][ T5966] ? __pfx_ksys_write+0x10/0x10 [ 80.953313][ T5966] do_syscall_64+0xe2/0xf80 [ 80.953336][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.953352][ T5966] ? trace_irq_disable+0x37/0x100 [ 80.953371][ T5966] ? clear_bhb_loop+0x40/0x90 [ 80.953391][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.953406][ T5966] RIP: 0033:0x7f4c7ed9acb9 [ 80.953423][ T5966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.953443][ T5966] RSP: 002b:00007f4c7fcf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 80.953461][ T5966] RAX: ffffffffffffffda RBX: 00007f4c7f015fa0 RCX: 00007f4c7ed9acb9 [ 80.953473][ T5966] RDX: 0000000000000000 RSI: 00000000000026ab RDI: 0000000000000000 [ 80.953483][ T5966] RBP: 00007f4c7fcf5090 R08: 0000000000000000 R09: 0000000000000000 [ 80.953493][ T5966] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 80.953504][ T5966] R13: 00007f4c7f016038 R14: 00007f4c7f015fa0 R15: 00007ffcc17f8648 [ 80.953532][ T5966] [ 81.160168][ T5830] usb 3-1: USB disconnect, device number 2 [ 81.487482][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 81.649413][ T5979] kvm: Disabled LAPIC found during irq injection [ 81.662681][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.687833][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 81.702191][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.714559][ T9] usb 1-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.728757][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 81.740277][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.751403][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.761918][ T9] usb 1-1: Product: syz [ 81.766104][ T9] usb 1-1: Manufacturer: syz [ 81.771229][ T9] usb 1-1: SerialNumber: syz [ 81.917529][ T5842] Bluetooth: hci2: command tx timeout [ 81.987463][ T5842] Bluetooth: hci0: command tx timeout [ 81.997532][ T5839] Bluetooth: hci1: command tx timeout [ 81.999418][ T5842] Bluetooth: hci3: command tx timeout [ 82.165307][ T24] usb 2-1: USB disconnect, device number 2 [ 82.572880][ T5993] genirq: Flags mismatch irq 10. 00200000 (aio_iiro_16) vs. 00200080 (virtio2) [ 82.605558][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.777701][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 82.785648][ T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 82.795336][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.814394][ T24] usb 2-1: config 0 descriptor?? [ 82.824185][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 83.024010][ T24] gspca_vc032x: reg_r err -32 [ 83.030228][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.035648][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.043766][ T5897] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.051463][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.056845][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.064236][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.071305][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.076635][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.082014][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.087312][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.092659][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.097974][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.103273][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.110539][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.116008][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.124454][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.130320][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.135717][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.143800][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 83.149941][ T24] gspca_vc032x: Unknown sensor... [ 83.155062][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 83.217441][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 83.224242][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.249218][ T6007] comedi comedi0: Minor 2 could not be opened [ 83.250429][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.269940][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.285715][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.321321][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.332579][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.555398][ T5897] usb 3-1: GET_CAPABILITIES returned 0 [ 83.561094][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 83.578003][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.727506][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 83.735378][ T5914] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.747321][ T5914] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.761811][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.768322][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.769010][ T5914] usb 4-1: New USB device found, idVendor=1e86, idProduct=2009, bcdDevice= 0.00 [ 83.789739][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.801932][ T5914] usb 4-1: config 0 descriptor?? [ 83.835785][ T5897] usb 3-1: USB disconnect, device number 3 [ 84.197785][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 84.211831][ T9] usb 1-1: USB disconnect, device number 3 [ 84.224548][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.239617][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.403455][ T30] audit: type=1326 audit(1769399904.173:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.2.30" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe87999acb9 code=0x0 [ 84.495983][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 84.503044][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 84.517117][ T5914] usb 4-1: USB disconnect, device number 2 [ 84.556170][ T6020] input: syz1 as /devices/virtual/input/input6 [ 84.647554][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.799409][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 84.808924][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.819372][ T9] usb 1-1: config 0 descriptor?? [ 84.830249][ T9] cp210x 1-1:0.0: cp210x converter detected [ 85.251961][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 85.262001][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 85.271412][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 85.284767][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 85.303363][ T9] usb 1-1: USB disconnect, device number 4 [ 85.317530][ T5914] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.337638][ T24] usb 2-1: USB disconnect, device number 3 [ 85.338413][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 85.373347][ T9] cp210x 1-1:0.0: device disconnected [ 85.478739][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.489916][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.501240][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.511024][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.519339][ T5914] usb 4-1: SerialNumber: syz [ 85.697518][ T5897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.736156][ T5914] usb 4-1: 0:2 : does not exist [ 85.752702][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.783080][ T5914] usb 4-1: USB disconnect, device number 3 [ 85.832448][ T6029] syz.0.34 uses obsolete (PF_INET,SOCK_PACKET) [ 85.850148][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.852890][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.880206][ T5897] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.893118][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.905302][ T5897] usb 3-1: config 0 descriptor?? [ 85.927488][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 85.935615][ T24] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 85.945209][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.955865][ T24] usb 2-1: config 0 descriptor?? [ 85.966936][ T24] as10x_usb: device has been detected [ 85.973756][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 85.991928][ T24] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 86.033144][ T24] as10x_usb: error during firmware upload part1 [ 86.040504][ T24] Registered device nBox DVB-T Dongle [ 86.167757][ T24] usb 2-1: USB disconnect, device number 4 [ 86.194923][ T24] Unregistered device nBox DVB-T Dongle [ 86.196589][ T24] as10x_usb: device has been disconnected [ 86.567471][ T5914] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.721305][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 86.731637][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.743327][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.753200][ T5914] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 86.762472][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.773845][ T5914] usb 4-1: config 0 descriptor?? [ 86.804127][ T902] cfg80211: failed to load regulatory.db [ 87.194210][ T5914] hid (null): invalid report_size 29535 [ 87.306465][ T30] audit: type=1326 audit(1769399907.073:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.0.43" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c7ed9acb9 code=0x0 [ 87.391698][ T5914] usb 4-1: string descriptor 0 read error: -71 [ 87.431777][ T5914] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 87.440005][ T5914] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -32 [ 87.467756][ T5914] usb 4-1: USB disconnect, device number 4 [ 87.539512][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.007574][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.029688][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.163315][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.173684][ T5914] usb 2-1: config 0 has no interfaces? [ 88.179510][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.191834][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.208081][ T5914] usb 2-1: config 0 descriptor?? [ 88.344634][ T6070] FAULT_INJECTION: forcing a failure. [ 88.344634][ T6070] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 88.358356][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full) [ 88.358377][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 88.358387][ T6070] Call Trace: [ 88.358393][ T6070] [ 88.358400][ T6070] dump_stack_lvl+0xe8/0x150 [ 88.358426][ T6070] should_fail_ex+0x412/0x560 [ 88.358449][ T6070] prepare_alloc_pages+0x22a/0x650 [ 88.358477][ T6070] __alloc_frozen_pages_noprof+0x12f/0x380 [ 88.358504][ T6070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 88.358530][ T6070] ? __pfx_policy_nodemask+0x10/0x10 [ 88.358554][ T6070] ? __lock_acquire+0x6b5/0x2cf0 [ 88.358589][ T6070] alloc_pages_mpol+0x232/0x4a0 [ 88.358620][ T6070] vma_alloc_folio_noprof+0xea/0x210 [ 88.358639][ T6070] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 88.358665][ T6070] ? __pte_offset_map+0x29/0x240 [ 88.358686][ T6070] ? __pte_offset_map+0x29/0x240 [ 88.358710][ T6070] do_pte_missing+0x1662/0x3760 [ 88.358750][ T6070] handle_mm_fault+0x1bec/0x3310 [ 88.358783][ T6070] ? handle_mm_fault+0xee/0x3310 [ 88.358806][ T6070] ? __pfx_handle_mm_fault+0x10/0x10 [ 88.358836][ T6070] ? __lock_acquire+0x6b5/0x2cf0 [ 88.358859][ T6070] ? lock_mm_and_find_vma+0xa7/0x340 [ 88.358885][ T6070] do_user_addr_fault+0x75b/0x1360 [ 88.358920][ T6070] exc_page_fault+0x6a/0xc0 [ 88.358947][ T6070] asm_exc_page_fault+0x26/0x30 [ 88.358964][ T6070] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 88.358986][ T6070] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 ff 48 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 88.358998][ T6070] RSP: 0018:ffffc90004dcf4d8 EFLAGS: 00050202 [ 88.359014][ T6070] RAX: ffff88805883e001 RBX: ffff88805883e342 RCX: 0000000000000157 [ 88.359027][ T6070] RDX: 0000000000000000 RSI: ffff88805883e382 RDI: 0000200000001000 [ 88.359038][ T6070] RBP: ffffc90004dcf650 R08: ffff88805883e4d8 R09: 1ffff1100b107c9b [ 88.359049][ T6070] R10: dffffc0000000000 R11: ffffed100b107c9c R12: dffffc0000000000 [ 88.359061][ T6070] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157 [ 88.359088][ T6070] _copy_to_iter+0x60a/0x17d0 [ 88.359126][ T6070] ? __pfx__copy_to_iter+0x10/0x10 [ 88.359148][ T6070] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 88.359172][ T6070] ? lockdep_hardirqs_on+0x7a/0x110 [ 88.359195][ T6070] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 88.359218][ T6070] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 88.359245][ T6070] __skb_datagram_iter+0xf8/0x980 [ 88.359266][ T6070] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 88.359294][ T6070] skb_copy_datagram_iter+0xb5/0x210 [ 88.359316][ T6070] netlink_recvmsg+0x2c3/0xa50 [ 88.359339][ T6070] ? aa_sk_perm+0x15a/0x960 [ 88.359370][ T6070] ? __pfx_netlink_recvmsg+0x10/0x10 [ 88.359397][ T6070] ? __pfx_aa_sk_perm+0x10/0x10 [ 88.359426][ T6070] ? __pfx_netlink_recvmsg+0x10/0x10 [ 88.359450][ T6070] sock_recvmsg_nosec+0x186/0x1c0 [ 88.359477][ T6070] ____sys_recvmsg+0x245/0x510 [ 88.359505][ T6070] ? __pfx_____sys_recvmsg+0x10/0x10 [ 88.359538][ T6070] ? import_iovec+0x73/0xa0 [ 88.359564][ T6070] ___sys_recvmsg+0x215/0x590 [ 88.359592][ T6070] ? __pfx____sys_recvmsg+0x10/0x10 [ 88.359613][ T6070] ? __fget_files+0x2a/0x420 [ 88.359646][ T6070] ? __fget_files+0x3a0/0x420 [ 88.359676][ T6070] do_recvmmsg+0x334/0x800 [ 88.359701][ T6070] ? __pfx_do_recvmmsg+0x10/0x10 [ 88.359720][ T6070] ? _copy_from_user+0x94/0xb0 [ 88.359737][ T6070] __x64_sys_recvmmsg+0x1b7/0x250 [ 88.359749][ T6070] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 88.359774][ T6070] do_syscall_64+0xe2/0xf80 [ 88.359797][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.359813][ T6070] ? trace_irq_disable+0x37/0x100 [ 88.359833][ T6070] ? clear_bhb_loop+0x40/0x90 [ 88.359854][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.359864][ T6070] RIP: 0033:0x7f4c7ed9acb9 [ 88.359874][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.359882][ T6070] RSP: 002b:00007f4c7fcf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 88.359892][ T6070] RAX: ffffffffffffffda RBX: 00007f4c7f015fa0 RCX: 00007f4c7ed9acb9 [ 88.359898][ T6070] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 88.359905][ T6070] RBP: 00007f4c7fcf5090 R08: 0000200000003700 R09: 0000000000000000 [ 88.359910][ T6070] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 88.359919][ T6070] R13: 00007f4c7f016038 R14: 00007f4c7f015fa0 R15: 00007ffcc17f8648 [ 88.359947][ T6070] [ 88.815099][ T5914] usb 2-1: USB disconnect, device number 5 [ 88.845915][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 88.872384][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 88.885999][ T5897] usb 3-1: USB disconnect, device number 4 [ 89.329547][ T5914] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.397536][ T6083] sctp: [Deprecated]: syz.2.54 (pid 6083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.397536][ T6083] Use struct sctp_sack_info instead [ 89.487503][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 89.495574][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.506744][ T5914] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 89.516202][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.526611][ T5914] usb 4-1: config 0 descriptor?? [ 89.647640][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.777526][ T9] usb 3-1: device descriptor read/64, error -71 [ 89.945549][ T30] audit: type=1326 audit(1769399909.713:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.52" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7726d9acb9 code=0x0 [ 90.002574][ T5914] maltron 0003:058F:9410.0002: unknown main item tag 0x0 [ 90.031217][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.035557][ T5914] maltron 0003:058F:9410.0002: unknown main item tag 0x0 [ 90.049550][ T5914] maltron 0003:058F:9410.0002: unknown main item tag 0x0 [ 90.050186][ T6093] binder: BINDER_SET_CONTEXT_MGR already set [ 90.056605][ T5914] maltron 0003:058F:9410.0002: unknown main item tag 0x0 [ 90.056643][ T5914] maltron 0003:058F:9410.0002: unknown main item tag 0x0 [ 90.066292][ T6093] binder: 6092:6093 ioctl 4018620d 200000004a80 returned -16 [ 90.081258][ T5914] maltron 0003:058F:9410.0002: hidraw0: USB HID v0.02 Device [HID 058f:9410] on usb-dummy_hcd.3-1/input0 [ 90.105759][ T6093] binder: 6092:6093 ioctl c0306201 200000000280 returned -14 [ 90.157819][ T9] usb 3-1: device descriptor read/64, error -71 [ 90.179875][ T30] audit: type=1326 audit(1769399909.943:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6096 comm="syz.1.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30f099acb9 code=0x0 [ 90.268241][ T9] usb usb3-port1: attempt power cycle [ 90.607492][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 90.628820][ T9] usb 3-1: device descriptor read/8, error -71 [ 90.867631][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.898154][ T9] usb 3-1: device descriptor read/8, error -71 [ 91.007772][ T9] usb usb3-port1: unable to enumerate USB device [ 91.287598][ T5897] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.367949][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.448891][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.459217][ T5897] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.469473][ T5897] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 91.478621][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 91.486802][ T5897] usb 1-1: SerialNumber: syz [ 91.497448][ T24] usb 2-1: device descriptor read/64, error -71 [ 91.706101][ T5897] usb 1-1: 0:2 : does not exist [ 91.734114][ T5897] usb 1-1: USB disconnect, device number 6 [ 91.740450][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 91.766710][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.877520][ T24] usb 2-1: device descriptor read/64, error -71 [ 91.988054][ T24] usb usb2-port1: attempt power cycle [ 92.081617][ T5890] usb 4-1: USB disconnect, device number 5 [ 92.338371][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 92.400434][ T24] usb 2-1: device descriptor read/8, error -71 [ 92.500804][ T6124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.534238][ T6126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.647457][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 92.681763][ T24] usb 2-1: device descriptor read/8, error -71 [ 92.751727][ T6131] comedi comedi0: Minor 47 could not be opened [ 92.807915][ T24] usb usb2-port1: unable to enumerate USB device [ 92.879172][ T6134] process 'syz.2.73' launched './file0' with NULL argv: empty string added [ 93.199335][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.370872][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.388170][ T9] usb 3-1: config 0 has no interface number 0 [ 93.400021][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.409690][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.419488][ T9] usb 3-1: Product: syz [ 93.423673][ T9] usb 3-1: Manufacturer: syz [ 93.429211][ T9] usb 3-1: SerialNumber: syz [ 93.438870][ T9] usb 3-1: config 0 descriptor?? [ 93.587501][ T6012] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 93.650946][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 93.677072][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 93.693131][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 93.702806][ T9] usb 3-1: media controller created [ 93.722466][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.747456][ T6012] usb 1-1: Using ep0 maxpacket: 32 [ 93.756544][ T6012] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 93.765991][ T6012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.779188][ T6012] usb 1-1: config 0 descriptor?? [ 93.803555][ T6012] as10x_usb: device has been detected [ 93.815659][ T6012] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 93.848700][ T6012] usb 1-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 93.886985][ T6012] as10x_usb: error during firmware upload part1 [ 93.903293][ T6012] Registered device nBox DVB-T Dongle [ 93.994610][ T9] usb 1-1: USB disconnect, device number 7 [ 94.034244][ T9] Unregistered device nBox DVB-T Dongle [ 94.039031][ T9] as10x_usb: device has been disconnected [ 94.063411][ T5890] usb 3-1: USB disconnect, device number 9 [ 94.229790][ T6144] FAULT_INJECTION: forcing a failure. [ 94.229790][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.251890][ T6144] CPU: 1 UID: 0 PID: 6144 Comm: syz.3.76 Not tainted syzkaller #0 PREEMPT(full) [ 94.251915][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 94.251925][ T6144] Call Trace: [ 94.251932][ T6144] [ 94.251939][ T6144] dump_stack_lvl+0xe8/0x150 [ 94.251968][ T6144] should_fail_ex+0x412/0x560 [ 94.251995][ T6144] _copy_from_user+0x2d/0xb0 [ 94.252013][ T6144] comedi_unlocked_ioctl+0x7f3/0x1af0 [ 94.252052][ T6144] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 94.252078][ T6144] ? tomoyo_path_number_perm+0x219/0x630 [ 94.252104][ T6144] ? tomoyo_path_number_perm+0x219/0x630 [ 94.252131][ T6144] ? do_vfs_ioctl+0x1166/0x1530 [ 94.252156][ T6144] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.252192][ T6144] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 94.252230][ T6144] ? __fget_files+0x2a/0x420 [ 94.252261][ T6144] ? __fget_files+0x2a/0x420 [ 94.252278][ T6144] ? __fget_files+0x3a0/0x420 [ 94.252296][ T6144] ? __fget_files+0x2a/0x420 [ 94.252318][ T6144] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.252336][ T6144] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 94.252356][ T6144] __se_sys_ioctl+0xfc/0x170 [ 94.252380][ T6144] do_syscall_64+0xe2/0xf80 [ 94.252403][ T6144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.252419][ T6144] ? trace_irq_disable+0x37/0x100 [ 94.252439][ T6144] ? clear_bhb_loop+0x40/0x90 [ 94.252461][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.252479][ T6144] RIP: 0033:0x7f7726d9acb9 [ 94.252496][ T6144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.252509][ T6144] RSP: 002b:00007f7727bcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.252527][ T6144] RAX: ffffffffffffffda RBX: 00007f7727015fa0 RCX: 00007f7726d9acb9 [ 94.252540][ T6144] RDX: 00002000000001c0 RSI: 0000000080506409 RDI: 0000000000000003 [ 94.252551][ T6144] RBP: 00007f7727bcc090 R08: 0000000000000000 R09: 0000000000000000 [ 94.252562][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.252572][ T6144] R13: 00007f7727016038 R14: 00007f7727015fa0 R15: 00007ffe1492ca88 [ 94.252601][ T6144] [ 94.679609][ T6154] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 95.101330][ T6169] tc_dump_action: action bad kind [ 95.197699][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 95.207519][ T5890] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 95.352841][ T9] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 95.382605][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.387513][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.400461][ T5890] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.414854][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.449022][ T5890] usb 3-1: config 0 descriptor?? [ 95.458002][ T9] usb 4-1: config 0 descriptor?? [ 95.474967][ T9] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 95.537513][ T6012] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.690253][ T6012] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 95.702705][ T6012] usb 2-1: config 1 interface 0 has no altsetting 0 [ 95.715940][ T6012] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 95.726252][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.737619][ T6012] usb 2-1: Product: syz [ 95.742733][ T6012] usb 2-1: Manufacturer: syz [ 95.750563][ T6012] usb 2-1: SerialNumber: syz [ 95.871940][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 95.883443][ T9] pac7311 4-1:0.0: probe with driver pac7311 failed with error -71 [ 95.894597][ T9] usb 4-1: USB disconnect, device number 6 [ 95.979496][ T6173] Zero length message leads to an empty skb [ 95.997470][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 96.163550][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.175732][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.186123][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.195286][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.203350][ T24] usb 1-1: SerialNumber: syz [ 96.422148][ T24] usb 1-1: 0:2 : does not exist [ 96.515859][ T24] usb 1-1: USB disconnect, device number 8 [ 96.553431][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.312166][ T6196] warning: `syz.3.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.388476][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 97.437544][ C1] ------------[ cut here ]------------ [ 97.443334][ C1] ODEBUG: activate active (active state 0) object: ffff88814945cb18 object type: rcu_head hint: 0x0 [ 97.454215][ C1] WARNING: lib/debugobjects.c:615 at debug_object_activate+0x33b/0x580, CPU#1: swapper/1/0 [ 97.464331][ C1] Modules linked in: [ 97.468439][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 97.477443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 97.487561][ C1] RIP: 0010:debug_object_activate+0x39c/0x580 [ 97.493669][ C1] Code: 30 00 74 08 4c 89 ef e8 32 11 76 fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 e0 65 29 8c 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 ec 09 7a 0b b8 ea [ 97.513424][ C1] RSP: 0018:ffffc90000a08bf0 EFLAGS: 00010246 [ 97.519548][ C1] RAX: 1ffffffff179c3bc RBX: ffff88814945cb18 RCX: 0000000000000000 [ 97.527761][ C1] RDX: ffffffff8c296bc0 RSI: ffffffff8c2965e0 RDI: ffffffff903cb640 [ 97.535749][ C1] RBP: 0000000000000003 R08: ffff88814945cb18 R09: ffffffff8bce1e40 [ 97.543777][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff903cb640 [ 97.551781][ C1] R13: ffffffff8bce1de0 R14: dffffc0000000000 R15: ffffffff8c296bc0 [ 97.559804][ C1] FS: 0000000000000000(0000) GS:ffff88812516c000(0000) knlGS:0000000000000000 [ 97.564990][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 97.568775][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.568798][ C1] CR2: 0000000000000000 CR3: 0000000069b84000 CR4: 00000000003526f0 [ 97.568815][ C1] Call Trace: [ 97.568824][ C1] [ 97.568836][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 97.568866][ C1] call_rcu+0x43/0x890 [ 97.568889][ C1] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 97.568921][ C1] delete_node+0x1b6/0xa50 [ 97.581738][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.584665][ C1] radix_tree_delete_item+0x2e9/0x400 [ 97.584713][ C1] afs_cell_destroy+0x16f/0x2c0 [ 97.595391][ T9] usb 1-1: Product: syz [ 97.596044][ C1] ? rcu_core+0x751/0x1070 [ 97.596073][ C1] ? __pfx_afs_cell_destroy+0x10/0x10 [ 97.599503][ T9] usb 1-1: Manufacturer: syz [ 97.605022][ C1] rcu_core+0x7cd/0x1070 [ 97.605067][ C1] ? __pfx_rcu_core+0x10/0x10 [ 97.605090][ C1] ? sched_balance_domains+0x13a/0x950 [ 97.605118][ C1] handle_softirqs+0x22a/0x7c0 [ 97.605142][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 97.610235][ T9] usb 1-1: SerialNumber: syz [ 97.614261][ C1] __irq_exit_rcu+0x5f/0x150 [ 97.614295][ C1] irq_exit_rcu+0x9/0x30 [ 97.614314][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 97.698925][ C1] [ 97.701875][ C1] [ 97.704820][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.710866][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 97.716544][ C1] Code: 47 82 02 e9 83 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 ce 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 97.736186][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 97.742305][ C1] RAX: 00000000000b70b5 RBX: ffffffff819a2aad RCX: 0000000080000001 [ 97.750344][ C1] RDX: 0000000000000001 RSI: ffffffff8dff714e RDI: ffffffff8c296000 [ 97.758400][ C1] RBP: ffffc90000197f10 R08: ffff8880b853375b R09: 1ffff110170a66eb [ 97.766387][ C1] R10: dffffc0000000000 R11: ffffed10170a66ec R12: ffffffff903200b0 [ 97.774421][ C1] R13: 1ffff11003bd4000 R14: 0000000000000001 R15: 0000000000000001 [ 97.782450][ C1] ? do_idle+0x1bd/0x500 [ 97.786746][ C1] default_idle+0x9/0x20 [ 97.791043][ C1] default_idle_call+0x72/0xb0 [ 97.795826][ C1] do_idle+0x1bd/0x500 [ 97.799969][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 97.805807][ C1] ? __pfx_do_idle+0x10/0x10 [ 97.810465][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 97.816296][ C1] cpu_startup_entry+0x43/0x60 [ 97.821101][ C1] start_secondary+0x101/0x110 [ 97.825887][ C1] common_startup_64+0x13e/0x147 [ 97.830926][ C1] [ 97.833976][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.841263][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 97.850309][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 97.860449][ C1] Call Trace: [ 97.863861][ C1] [ 97.866754][ C1] vpanic+0x1e0/0x670 [ 97.870768][ C1] panic+0xc5/0xd0 [ 97.874520][ C1] ? __pfx_panic+0x10/0x10 [ 97.878993][ C1] ? common_startup_64+0x13e/0x147 [ 97.884127][ C1] __warn+0x315/0x4a0 [ 97.888173][ C1] ? debug_object_activate+0x33b/0x580 [ 97.894518][ C1] ? debug_object_activate+0x33b/0x580 [ 97.899985][ C1] __report_bug+0x29a/0x540 [ 97.904512][ C1] ? debug_object_activate+0x33b/0x580 [ 97.909988][ C1] ? __pfx___report_bug+0x10/0x10 [ 97.915033][ C1] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 97.921307][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 97.927913][ C1] ? wakeup_preempt+0x24d/0x300 [ 97.932783][ C1] report_bug_entry+0x19a/0x290 [ 97.937654][ C1] ? debug_object_activate+0x39c/0x580 [ 97.943118][ C1] ? debug_object_activate+0x3a1/0x580 [ 97.948569][ C1] handle_bug+0xca/0x200 [ 97.952820][ C1] exc_invalid_op+0x1a/0x50 [ 97.957329][ C1] asm_exc_invalid_op+0x1a/0x20 [ 97.962198][ C1] RIP: 0010:debug_object_activate+0x39c/0x580 [ 97.968283][ C1] Code: 30 00 74 08 4c 89 ef e8 32 11 76 fd 4d 8b 4d 00 4c 89 e7 48 c7 c6 e0 65 29 8c 4c 89 fa 8b 4c 24 04 4c 8b 44 24 10 ff 74 24 08 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 7c 24 18 ff 05 ec 09 7a 0b b8 ea [ 97.987882][ C1] RSP: 0018:ffffc90000a08bf0 EFLAGS: 00010246 [ 97.993955][ C1] RAX: 1ffffffff179c3bc RBX: ffff88814945cb18 RCX: 0000000000000000 [ 98.001925][ C1] RDX: ffffffff8c296bc0 RSI: ffffffff8c2965e0 RDI: ffffffff903cb640 [ 98.009892][ C1] RBP: 0000000000000003 R08: ffff88814945cb18 R09: ffffffff8bce1e40 [ 98.017854][ C1] R10: dffffc0000000000 R11: 0000000000000000 R12: ffffffff903cb640 [ 98.025829][ C1] R13: ffffffff8bce1de0 R14: dffffc0000000000 R15: ffffffff8c296bc0 [ 98.033827][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 98.039928][ C1] call_rcu+0x43/0x890 [ 98.043999][ C1] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 98.049032][ C1] delete_node+0x1b6/0xa50 [ 98.053540][ C1] radix_tree_delete_item+0x2e9/0x400 [ 98.059001][ C1] afs_cell_destroy+0x16f/0x2c0 [ 98.063892][ C1] ? rcu_core+0x751/0x1070 [ 98.068322][ C1] ? __pfx_afs_cell_destroy+0x10/0x10 [ 98.073701][ C1] rcu_core+0x7cd/0x1070 [ 98.077959][ C1] ? __pfx_rcu_core+0x10/0x10 [ 98.082646][ C1] ? sched_balance_domains+0x13a/0x950 [ 98.088139][ C1] handle_softirqs+0x22a/0x7c0 [ 98.092909][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 98.097692][ C1] __irq_exit_rcu+0x5f/0x150 [ 98.102288][ C1] irq_exit_rcu+0x9/0x30 [ 98.106522][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.112171][ C1] [ 98.115108][ C1] [ 98.118031][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.124008][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 98.129649][ C1] Code: 47 82 02 e9 83 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 ce 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 98.149249][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 98.155323][ C1] RAX: 00000000000b70b5 RBX: ffffffff819a2aad RCX: 0000000080000001 [ 98.163286][ C1] RDX: 0000000000000001 RSI: ffffffff8dff714e RDI: ffffffff8c296000 [ 98.171250][ C1] RBP: ffffc90000197f10 R08: ffff8880b853375b R09: 1ffff110170a66eb [ 98.179212][ C1] R10: dffffc0000000000 R11: ffffed10170a66ec R12: ffffffff903200b0 [ 98.187264][ C1] R13: 1ffff11003bd4000 R14: 0000000000000001 R15: 0000000000000001 [ 98.195230][ C1] ? do_idle+0x1bd/0x500 [ 98.199482][ C1] default_idle+0x9/0x20 [ 98.203722][ C1] default_idle_call+0x72/0xb0 [ 98.208529][ C1] do_idle+0x1bd/0x500 [ 98.212600][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.218414][ C1] ? __pfx_do_idle+0x10/0x10 [ 98.223001][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.228808][ C1] cpu_startup_entry+0x43/0x60 [ 98.233569][ C1] start_secondary+0x101/0x110 [ 98.238325][ C1] common_startup_64+0x13e/0x147 [ 98.243279][ C1] [ 98.246825][ C1] Kernel Offset: disabled [ 98.251136][ C1] Rebooting in 86400 seconds..